I don't think you can ship testicles in the mail. What's up guys? We're about to come back to Adam the seaver See coming have you ever seen it? Have you ever seen the uh show? Uh, what's it called between two ferns? Oh, yeah, I love that and he does that's what he does the best That's what we're doing here. Yeah I Just look at the person it'll be like all right, you're against women's rights. I get it So good. Hey, welcome That's the best that's what I want to do. I know flamingos can't be pets dude. Welcome back. How are we doing? We had a really we had an interesting topic the other Day that we were going to really dive into how long ago because I remember having a topic, but I got to Paint the scene so I could recall it at least but we were we were in his own. Oh, was it the retrograde? Oh, yeah But we could talk about we're out of it. We're out of it Look at the difference about the retrograde. We could talk about it. Yeah All right, well, maybe like you said maybe that we're out of it and everything that you and I had to Well, I'll just tell a few things. I'll just yeah, you go first So the retrograde was what is it anyway? By the way, I think I looked it up and I tried to understand that it's like Mars is go looks like it's going backwards and it's not actually going backwards. Right. Is that true? I can't explain it. Oh, I can tell you what I experienced Well, there's something with the I looked it up and it seemed I did a quick google and it was like It looks like it's going backwards because all the other planets You know when you're in a car and the car next to you starts going forwards. You feel like you're going backwards I think it's like that effect with the planets Yeah, so every other planet is fixed and mars isn't so it looks like it's going backwards Well, I could tell you what it does to me. Go ahead Emotionally physically mentally and spiritually it fucks me Up like I think everybody yeah Look as much as the people would love to pretend like the moon doesn't affect the waves and that we know it's a direct correlation That's exactly how mercury and retrograde affects me Each and every time Yeah, and I think it's just If you can think everybody know I feel like most people like the placebo effect everybody believes it People know that the moon affects the waves, right? I think people believe that right generally Yeah, well, here's the thing though with the mercury and retrograde, right? So You and I are big believers first off in God and that we can You know look we can baptize anything, right? Like we're not going to let any hocus pocus You know Lucky rabbit foot walking under a ladder nonsense happened to us but For me and you tell me your experience I experience it first and then I'm like oh is mercury and retrograde You know, I mean I'm not like sitting there counting the days like worried about it. I don't live my life like that, but too many odd coincidences happen Yeah, then I'm like something's going on here and I'm out of sync Definitely and the cool part is that with the people I'm in sync with usually We feel that at the same time like I would give you a call be like what the what's going on or I'll be like I'm feeling crazy. Yeah, you're feeling the same thing Yeah, well, okay, so example.  Nobody was no one would show up for days They couldn't think the guy the guy was missing the maintenance guy. I called I have his personal number He would he's on vacation.  I saw that and then there was one other thing that was insane I don't know. Yeah, but Those the same days like within three days. It was just like back to back to back and every time it would happen Oh, I was in traffic the lights stopped working wasn't raining. Nothing. I was with Justin The lights stopped working like midday like in the traffic jam. It was crazy And I was ever I just kept saying thank you retro gray. Just like what's going it was crazy Even for me too, like I um You know, it's a new world where everything is going to be texted to you and everything everything's on My dear friends who are dentists. I got like three confirmations on my dentist appointment I get there early. I want to see them say hi. They're not there And they and they said I called you the night before and canceled and I showed them There's no phone call. All I got is retrograde. Look. Yeah It's That's crazy when we make it through it when you make it through it. Yeah, you got out of it before I did Yeah, it was almost like bringing it we went together sort of a little bit. You were you were carrying But you know, it was cool. This was our our like official exit You came when we hung out we got the sickest steak meal, right? That was the best. We had the best time It felt like a celebration. Oh, yeah, go ahead and then and then we drove but we were going to hang out Maybe watch a movie And then we drove but I couldn't figure it out. Maybe you'll go home whatever and then We drove by a movie theater During cope and I was like, maybe we'll see a movie. Yeah That was the best because it was like we were thinking about maybe we're coming out of the thing And we're like, maybe we'll see a movie and then we drove by we're like, is it even open?  Oh, it's good Ferris Bueller's day off bad boys, too Yeah, it was crazy and we're just like, what's going on? What year is this? That was a great one. It was what year is this? It was empty. What's happened? It was scary. Almost nobody's there. Nobody's at the ticket counter.  Yeah, what way? so I love Making people feel like I respect them and I honor them and and I never want to make people feel awkward but the idea that The second we walk into a restaurant with no with a mask on And the second we all sit in a restaurant.  Yeah Yeah, it's it's tough.  Yeah But am I the asshole? I was just sitting two feet away from you You were fine with it because I'm sitting down And it weren't an appetizer. It's like the yeah the beef carpaccio eliminates. I don't understand I think what was funny is like the moon and the waves Yeah, people understand that but they don't think it affects them It's like there's something in the air or energy of the the moon pulling you and then with the masks Is like does anybody not know anything about you ever seen sneak as someone's sneeze and it goes everywhere It's like if you sit down, it's like they don't nobody knows how particles just go everywhere. It goes everywhere. There's not a six foot Radius I don't get it if you enter a building you're entering everything in the building I don't get it and yet I know people that have died of cove right So it's it's not as if I don't think it's serious right or that I have no empathy It's just that I feel like we've added some rules to it that make Zero sense. I feel I feel bad for the whoever the rule makers are because like what are you supposed to do You got like we're complaining. We can't go to restaurants. You're like, all right Put the mask on while you walk sit down take it off and eat We're like, okay, we'll do that and we're and then now we're complaining about why are we even doing that? They're letting us eat. I don't know. I know what are we supposed to do? What are you gonna do? I'm trying to think of the last retrograde failure. I had I had a lot of things Internet went down. Oh, that hasn't happened in a year Internet went down. That's hard Um, that's hard. That's how connected. Oh, you know what the retrograde did do I'm passing the mic not really because we're both holding mics Probably not the greatest expression to say right now go ahead but You had a really deep thought about Basically, let's let's put it under the umbrella of what are we doing right? Why are we all posting and and that you really have stopped scrolling? And I realized that I've stopped too and I used to have this serious emotional um attachment to instagram that I don't have anymore right and You were saying how the new world The this world will be more like the old world where we're not living in phones Yeah, I think because what I loved about it is what's changing about it Which was like the connection because everybody when social media came out There was so much backlash about not when it came out, but there was always backlash of like it's on your phone It's taking you out of your life But there was not enough said about the good of like how much it connects you with the whole world and now people are App to that or whatever that word is but it connects you with so many people you would have never met But now Everyone's been on it for so long There's more users than ever Everyone's got thousands of followers. Yeah before it was like I'd be crazy if I had 100 likes I remember we were talking about I was like I remember the day I hit 100 likes on a post It was insane now now it's like thousands and it's like If all my friends have thousands and they're going on social media to connect Who are they connecting with thousands of people? You can't have the same Strength of a connection. I agree on that. It's kind of like I feel the same way And this is not a a point of jealousy. I mean anybody could just pay to do it Yeah, uh, and and I'm sure if I entered it you and I could both get it within a month But um, it's like the whole verified thing. I've seen so many people that are verified That's like why are you there right? It's strange. They got the blue dot Supposed to this blue dot this on houses now they have blue check houses You can get a blue check on your house. I don't know what it means. I think an influencer lives there or something It's ridiculous. But do you know what I mean by that? And then there's a business losing its meaning that's kind of it's saturated That's how I feel and what I was saying about the losing the connection is like I follow people like right I meet you I follow you then I meet friends We know follow them I then I find the rock the rock has amazing stuff He mentions somebody in his pocket. I follow them. I've been following more and more people because I like their energy for years So now I'm following a thousand people and then when I go to scroll It's a lot of people. How am I gonna keep up with a thousand people? I can't even keep up with the people I want to watch now point is People I want to connect with I have to find through a different way because I'm not going to connect with you Through instagram. I'll give you a call. Yeah, I really want to connect with the rock I'm not going to scroll my instagram.  I don't know if he has one But the point is the people you want to connect with you're going to go find them You can't just scroll and get connected anymore. I agree. Yeah, you're not going to see the good stuff you want Here's the other thing and it's not like I feel like we're better than social media because it's a big part of our career Right and I'm I feel blessed Right to have our social media audience and continue to want to grow it right. I really believe in it Having said that you think the rock scrolls Instagram No, yeah, you can't What is he what's he going to scroll for? He's going to go on. He's going to if you think kevin hark scrolls. You think mark wallberg Goes, you know, or is he just post right?  No And that's Michael jordan Michael jordan doesn't have goes like, you know what? Yeah, he doesn't even have one.  Yeah Jay Z doesn't have an instagram Same birthday You have the same birthday as jay z mic drop That's that wait, so uh, I was gonna say and the thing what you were saying is the title I still love it. Maybe the title of this episode. I have the same birthday as jay z They start the episode when man goes in shit in the dinner But I was gonna say is I'm not even down on it either I love posting because I love the connection it gives I just think something new is going to emerge whether it's a live platform There's a lot of live platforms, but that's what I like about clubhouse Is because it's conversations everybody loves this clubhouse. I don't know why it's bothering me so much I don't love it yet But I do think like this conversation could be live because we're doing it raw As we're doing it. So if we had an audience, it's almost like a free Live audience or like an accessible audience. Let me play devil's advocate if you don't mind me saying You know what clubhouse has done for me?   Okay, if anything it pushes me away a little bit because All right, you and I you're invited on stage, right and and now you're a speaker and it's a wonderful feeling And then you're hearing these other speakers and I'm like a Why am I listening to you? You know, but what happened is is that I'm trusting other people to put these people on stage with me And I'm not getting the chance. Let's say through instagram or facebook to vet them Right, I understand. Why am I listening to their deepest? You know into the thoughts and and let's and have they reached to our potential, right? So let's not that we're better than them But what if you're on with somebody? That steve can't dunk, right? And it's but but teaching you're respecting. Yes, but you're respecting whoever put them on the plat You're respecting the person that invited them on stage with you. Yeah So you're listening to them, but meanwhile this person can't dunk, right? I think yeah, I I agree with that as one word like users But I also see it the way it could go is like if you have somebody you like just like I was saying with the rock If I follow him on clubhouse and I see he's going alive talking about spirituality or something I would love to Chime in and listen not chime absolutely, right? But I think that's where we can be our thing is what I'm saying is like that's where I think it's a great thing Is like if you say, you know, you know you go live on instagram I love when people go live you go live, you know, I'd love to listen to what you say And I think that's how I feel I think that's the beauty of clubhouses because live on instagram You're not this is this is the the key Live on instagram if you're live no matter how much I love you it optimizes my phone I can't do shit when I'm on live with you, right? I'm listening to you But like if I get a phone call done if I get a text I can't even like text Yeah, but on clubhouse, it's just audio So if I hear you talking about I can play it and I could let it play I could play it in my headphones I could let my phone do other things. It's not like Sucking my phone, you know my phone I could listen to you and Jump into your conversation not even talking but just listen to it and there's something powerful about that There is and yet and this could be an age thing, right? I don't know how many people know like I'm 44 45 and you're 28 But like I actually like the idea if like I'm watching you on instagram live A I am focused on you and only you and I get to watch your facial expressions and how you feel about what you're discussing While, you know, I'm the kind of guy where if I'm on clubhouse, right? And I'm looking at like a text or or going on amazon I'm not paying attention to a word agreed So I think that's where it's gonna go and I think that's where instagram because they steal everything will probably steal the feature Is that the clubhouse is just audio now, but if they do the same thing is amazon of social media Hmm, they just yank everything, but that's not even the right thing to say because facebook owns instagram Yeah, facebook still everything is the amazon of social media of social media. Yeah, they just yank everything It's gonna be them two at the top Yeah, it's all about facebook and amazon facebook's first sucker bar who you got Oh, that's so hard and they're they're fighting uh Just boxing no kicking no kicking just straight fists with gloves and what's six ounces What's his name? Is that in there the tesla guy? Elon he's flying somewhere.  Remember. Yeah, he's got the ball. He could slip facebook owns instagram amazon owns everything amazon Put him in a box. You think I'll put him in a box amazon. He's a better boxer Get it. It's a better boxer because he's in a box double on tondra double And we're back folks. Welcome But this is like a weird conversation this is podcasting Oh, but wait, so now clubhouse, right? What I was gonna say is that if they add the video component Imagine you can go in and you could click to watch the video if you want you have the option Because instagram right now doesn't give you the option It sucks. It locks you in clubhouse doesn't give you the option, but it gives you the option auditorily Audibly audibly audibly Is that the right but if they give you the video option where say mike diamond speaking You go listen to him, but if you want to see what he's doing you click you just click his little button Yeah, same and but you see this video doing it, right? So you can if you want and I think that they're going to implement that because why not add video? Yeah So yeah, you know, sometimes I hear myself speak and I think I'm like getting older and cranky Even though I love I love all this stuff I do I love social media and I I think clubhouse is great, but there's there's some things that I just get a little like Well, that's I think is a good thing because that perspective shows Um, how the apps are being used. Yeah by people who Should be on the apps. You know what I mean like as a great speaker So if you're feeling that way You're gonna think about how your audience is hearing you So if you're if you're thinking that you're like, I'm not going to put my audience there because I want them to be able to See me Yeah, so that's a good way for you to market yourself You know because if you if you want them to see you because you like seeing them That's how I did photography It's like it's like you learn an art you learn the podcasting is I love Joe Rogan so much it made it inspired me To do it so I provide the same thing. That's why I like the high quality That's wonderful So for you if you if you like connecting with their faces then make then you shouldn't do clubhouse yet I or maybe I've gone on a few and then I started bowing out and here's the other thing and this is Again, I don't I don't know if this is pride or if this is just how it is or just for me, but like when I'm hearing Guys that are anywhere between 20 and and 28 let's say Say that they're visionaries and they're doing this and they're doing that and then I realize they haven't gone through Half the experiences I've gone through half of the pain I've gone through and half the success I have Then I start going like what the hell am I doing? What are you doing? Yeah, and then I and that's why when I when they pass the mic to me I like saying how flawed I am. Yeah Do you know what I mean? Like these kids are saying how amazing they are. Hold on.  You know what I mean? Like why? Like that's some ego you have right That reminds me of the other part of the social media that I thought was people were getting away from We got so caught up in making Things look good or growing your account. We forgot to actually do things And that's I think like on clubhouse a lot of people are trying to get on clubhouse and grow Instead of using all the energy to be a speaker or like accomplish things that's worthy of talking about.  Are you ready? Loop it. And that's that and that's where I'm I'm pretty excited Um for the end of COVID because I do believe All of us now have such are going to have such an appreciation for human contact Like I can't wait to go to live live concerts. I can't wait to watch you speak live on a stage Likewise, you know, I I can't wait to be With physical people and enjoy life the way we originally did Yes, and then there was that time this beautiful time period where there was no COVID And social media was still taking over. I feel like This is a reboot. Yeah, definitely like social media has its place. I'm a huge fan of it It's how I built my career But this is a reboot. Yeah of appreciating life. And you know what I just thought of another loop Retrograde is a mini reboot It is a mini because you have no doubt about it.    It's true. And that's a huge thing and you have a great and you have a great appreciation for being out of this. Yeah Right 100% Yeah, you have a more appreciation.  Yeah, but it's like a six-week workout. Yeah, how long are they?  This one. Yeah, this was the longest one I've ever experienced. It was hard It was hard I'm trying to do something else that happened Oh, I don't know. There's this car so many car things batteries lights my lights went out something with my lights Like I had to get new bulbs like you were doing really good though. It's this is interesting I was just going yes. Yeah, but you were also doing really well in in relationships during it So that's kind of cool. So you started expanding in your you know extracurricular extracurriculars you got That's the thing the female opportunities present themselves. Yeah in all areas like mercury and retrograde was actually really good for your Everything. Well, yeah, it's always good for that But you know, it was good with the women Women are good. Yeah What are they doing? What are we doing? That's how we started What are we doing? So recap it. We got mercury. We got mercury social media done Masks and restaurants masks in the restaurants pick a side pick a team and what are we looking forward to What are you inspired by today? We have a we have a lot to look forward to You and I yeah, well, we're gonna do more steven adam stuff. Yeah um I'm looking forward to the hero 30 challenge Uh, I'm looking forward to the dung project your thing. I think that's really exciting Uh, we both have some phenomenal clients. We're working with I think travel's gonna open up again soon. Hmm. I'd love for you and I to go to san antonio and spend some time with dr Rob Maybe even go to la like diamond Uh There's a lot on the horizon. Yeah That's the thing with these podcasts too is that in person. It's so different It's so hard to have a zoom call You know, yeah, it's so it's so much easier That happened to me in my recovery meetings, too By the way, so many like people are starting to go back to what we call meetings. Yeah um It just so happens that the men that I love respect in the mire Since they're older Are staying on zoom, but I do miss human interaction It's crazy It's crazy. Oh and the last thing people should do start doing more That's that's a theme of all of us if you do more for yourself instead of trying to make it look like you're doing stuff That's a really good point doing it Well, that's that was really the Ammunition of your talk. Yeah of like that. You don't really scroll.  Yeah post about that That's insane or it's like they just gave an insane talk. Look at it If you go do those things, but there's so much energy behind that You know what else I had to learn social media Which is hard for me by the way because of the way i'm wired Is that since people are scrolling less living more And and doing everything which is probably a very healthy thing I was so used to I was getting a lot of attention on social media So I would share everyone that I loved and respected stuff yours loases Gala double check of the camera. Yeah Keep going. I would share everyone's stuff that I loved Because I didn't want to be an attention whore But now what i'm realizing is that people aren't even going to stories anymore Like if anything just put your own stuff up there because People are not coming to my stories to see the people that I love right And that's a weird feeling. It's hard. Yeah, it's definitely hard. I try to Always put like a lot of value. Yeah, that's all they can't that's all they want people just want you and your value Yeah, I was gonna say like a lot of value then like an occasional share Yeah, but and the other thing is this this is a really good tip for the social medias out there that I think I've Told you already, but it's like when you share somebody else's or if I if you go to tag me, right Yeah, make it valuable for my story So for example, if you write if you tag me It's always valuable for me when we do it. Just you're just naturally at that So my point is is like say you I we talked about nutrition and then you you do a nutrition thing And you tag me when I repost that that's good for my audience to see That I didn't have the point you see what I'm saying Yeah, so if I tag you in something that makes you look good Then when you repost it it's good for your audience You're gonna want to repost it one because it makes you look good But two it keeps the train going of value to your audience That is something that I should be more aware about if I post me And me doing something funny that has nothing to do with what you're posting about And then I expect you to repost that that's so selfish. It doesn't make sense. It's gonna interrupt your pattern It's a double entendre If I post nothing of nothing If I if I make something that you like because then you're gonna want to double entendre of wasting time Exactly No, this is a good one double entendre of value Because it's gonna add to your stories and then you're gonna want to repost it So i'm gonna get my goal, which is I want you to repost it. What is it double entendre again? Double entendre double meaning. Yeah Double meaning double meaning Something there. There's something about that double entendre Are there triple entendres? Only jz does it really That makes sense. He said it in one of his songs I think big shan might have said it in a recent one too Are you born on his birthday jz? Yeah That makes that day a triple entendre because two doubles came out Wow Right, there's the day And you're both born on that day. Yeah, that's three day. That's three things in one day That's what also makes me believe in astrology to a point because sure The everything's if this is the other thing everything's a fabric. There's no space That's the thing with covet everything's connected on a atom level Not not you but like the air, right? It's not empty It has molecules. I get it and so it's touching us both of us, right? So How could we not be connected to we're connected to everything? We're all connect So we all have covet we all we all have it Ha That's why i'm fearless because they're going to take us off the air These guys said everyone is covet. That's what it is. I just look you want me to google it It says right now 100 of the us 100. It says I just googled it 100 of us as code look at this minute It says united states of america, right? Oh boy 100 dude as of today march 7th even the republicans Let me double chat. Yeah, you very want to double check that Yep, wow Wow, doesn't have it fish It says no fish have no, what about jz? He's got that's a triple entendre How should we wrap it up and should we end to have a good week? Um, yeah, everybody. Have a good week. This is my our first podcast first podcast of many of many but many What is it? We've had adam and steve. So this is just another variation. Those are energy. We'll just This is just another expression of this is another expression of our energy. That's one thing i'm on right now Let's end with our little our moods of the day energies of the mind is Uh I'm being myself. Yeah, and all the things I do are just I'm always trying to express it in different ways So don't have to you don't have to do one thing because the one thing let it be open to everything you do And just be your center. Well, i'm just i'm very appreciative that you came over today And i'm appreciative of where everything is and so i'm i'm in a grateful mode I'm i'm in a lot of gratitude likewise. Yeah, that's that's just how I feel Higher reality higher reality peace


Hello party people get ready to clap Welcome to the chaos West stage. We're now Jeremy Rand the chief developer of an amazing coin called name coin We'll talk about Even more amazing stuff Please have a no don't don't don't clap right now because we just had Jeremy the floors is all yours Thank you Alright, so I'm Jeremy Rand lead application engineer of name coin Okay, so For those of you who aren't familiar with name coin the brief one slide Introduction is think DNS, but secured by blockchain We are using the dot bit top-level domain We're the first project that was forked from Bitcoin way back in 2011 It uses special coins in Bitcoin terminology to represent names and We originally started out doing sensors of resistance as the primary use case But more recently we got we realized that privacy was a really important use case as well, and so we started Doing things with TLS because we thought TLS could use some blockchain love So for those of you who aren't familiar with how the certificate authority system works in TLS so TLS is the protocol that is used for authenticating websites with that use hdps among other things and TLS relies on these corporations called certificate authorities and these certificate authorities have the ability to to Misissue certificates if they choose to or force to or do so accidentally that can impersonate websites and this is really really bad Sometimes they've been Compromised by people who maybe were affiliated with Iranian intelligence agencies. We don't really know details And sometimes certificate authorities just are totally unethical companies There's a certificate authority called start com which basically tried to hold the entire internet hostage during the heart bleed crisis a few years ago And they suffered pretty much no major repercussions for that action So we'd really like to get rid of certificate authorities completely or at least as much as we can so there have been a lot of projects proposed over the years to try to get rid of certificate authorities or replace them in some way and A sampling of them is up here One of the better-known ones is called convergence It's by Moxie Marlin spike and the idea of convergence is rather than having to trust certificate authorities that are chosen by Either the website or the attacker impersonating the website the user gets to choose which trusted parties they want to authenticate websites and This is called trust agility And it's a legit it's a legitimate idea, but there are some problems with it as I'll get into later Another project that exists is called Dane which uses DNSSEC to replace certificate authorities the idea being if you can securely get information about a domain name then you can Verify what certificate is valid for that website and There are a few other projects out there that are trying just to Limit the amount of damage that a malicious certificate authority can do so these are things like HPKP, which is a public keypinning Things like certificate transparency So there's a lot of projects out there that are trying to fix the certificate authority issue but what's missing in all of them is The problem is all of those solutions that try to mitigate the problems of the certificate authorities They don't fix the underlying problem, which is that there are still a set of trusted parties who have the ability to Man in the middle a TLS connection at least at some point. They may be detected later, but at that point it may be too late So what we'd like to do ideally is make sure that only that no one is able to Impersonate a website via man in the middle attack and that if they try we want to be absolutely certain That it will be detected during the TLS handshake, and we don't we don't want any trusted third parties for this so The idea here is actually a fairly old one As I mentioned earlier Dane is a project that actually is very superficially similar To what namecoin is trying to do here the idea that Dane had is that If you if you can securely get information about a domain name using DNS sec and you trust DNS sec then you can just get a TLS certificate fingerprint over the DNS and then you're good you can just verify based on that and You know this is this has been standardized by IETF. It's a it's a reasonable spec The problem is do we really trust DNS sec DNS sec is controlled by the I can root key and all of the DNS registrars and registries That's a lot of trusted parties as well. So You know this may not really be ideal But on the other hand, maybe we do trust namecoin because it's backed by a blockchain To actually do what DNS sec tries and possibly fails to do So at least in theory, this should be fairly straightforward. The idea would normally be that you have namecoin just put DNS records which match the records in the Dane spec and Then it should just magically all work namecoin is interoperable with DNS pretty much completely So the problem here is It really is not that simple And I'll get into that in a moment, but basically In theory, you can even sign namecoin records with DNS sec using a local DNS set key So anything that speaks DNS sec and knows Dane should be able to handle this pretty much transparently The problem is that there aren't any web browsers that know how to use Dane And as a result we can put secure DNS records into namecoin that talk about TLS fingerprints, but that just isn't going to be read by any web browsers that exist and so There are some proposals in The web browser development community for having those Dane DNS records just attached in the TLS handshake as part of a stapled record The problem with doing that is that in order to sign namecoin records with DNS sec The DNS sec key is going to be generated on local host So the remote server is not going to know your DNS sec key It's not going to be able to work for that and so that approach which by the way also still isn't actually implemented in any web browsers That doesn't work either And unfortunately the chromium security team in particular has completely refused to even entertain the possibility of allowing for example browser extensions To To customize how TLS works in any way So there are a few methods that exist out there which can be used to sort of coerce a TLS implementation like a web browser into totally customizing how certificate validation is done The most well-known and probably most dangerous method is called the intercepting proxy This basically is a proxy that terminates TLS coming in and creates TLS coming out So the problem here is that that means the proxy has to do everything TLS related on its own And if you remember the Lenovo super fish bug that was in the news a while back the reason super fish happened was because Lenovo was was running an intercepting proxy and they made a mistake in how they implemented it and It Totally broke the security of the system and so from our point of view We don't think that intercepting proxies are really an acceptably safe way to customize how TLS works Even though they are very flexible and they would do what we want functionality wise There's also a browser extensions that do exist. There's one called DNS sec validator Which actually claims to support Dane in web browsers like chromium and Firefox The problem with that is that Just sort of on a whim When I was taking a network security course at my university. I said hey come for my mid-term project Can I audit DNS tech validator and see whether it actually is secured all against man in the middle attacks? And my professor said okay, and so I audited it. It took me about 10 minutes I did a man in the middle attack using a local proxy and I looked to see what DNS tech validator would do about it. Well, it did pop up with a warning that said hey This is the wrong certificate. The problem is it did that after my login cookies had been sent to the attacker and After the sensitive information from the server had already been sent back and captured by the man in the middle attacker as well so, you know, I mean The the underlying problem here isn't so much that the DNS tech validator developers have a problem It's that the browsers just don't offer good API's to do this securely So the DNS tech validator developers for working with the best thing they were given but they're the approach of using a browser extension Just doesn't work right now There's also something called search him which uses this fun shared library LD preload magic which can basically override the functions in a certificate validation library that validate certificates and That kind of works the problem is to do that It's using data structures, which are just C structs that are not part of any public API And if you know if open SSL or nss or some library like that changes that internal data structure in a in an upgrade then all of a sudden search him would be messing with the wrong data and As far as I can tell there's no way to be sure that wouldn't lead to some kind of dangerous memory corruption And so I really don't think that's very safe So all of those all of those existing solutions had a lot of problems and we basically decided let's try something totally different So something to keep in mind here is there are actually two different problems that need to be solved here Which which we refer to as positive and negative overrides. So basically if there's a self-sign certificate That does match what the blockchain says we want that to be accepted even though it's self-signed But also if there's a certificate that's valid according to a certificate authority But doesn't match the blockchain we want to make sure that's that gets rejected. So there's two problems here We have to solve and It turns out these two problems are actually almost entirely orthogonal in how to solve them So you may have noticed that you can just add a certificate to your your operating systems a trusted certificate list and Then that gets accepted by your web browser even if it's self-signed But this is a really really dangerous idea for lots of reasons most majorly just that if you If if the certificate is valid as a certificate authority Well, then when you insert that then the attacker who controls that certificate that you got say from the namecoin blockchain They now have a sort of a malicious certificate authority that is on your system. They can now impersonate everything and Generally speaking certificates they follow the x509 spec x509 is incredibly complicated None of us felt up to the task of trying to audit Every every single attacker controlled certificate automatically to see if it had anything dangerous in it before we inserted it into the trusted certificate list and So, you know, we kind of didn't like that and there's also of course the problem that a certificate is actually pretty big Ideally we just want a public key hash because that's really small and fits in the blockchain easily Fitting an entire certificate into the blockchain is just prohibitively expensive. It wouldn't scale So those are the problems that we encountered there So this is a chat log from a conversation I had with our lead security engineer Ryan Castellucci and Basically as you can see Ryan asks how small can we actually make that certificate and I said well probably not small enough and then Ryan says let me do some wizarding and And then he comes back a few minutes later and he says yeah, we can actually make it fit if we cheat So what is this cheating? He refers to? The idea is that you have this concept called a dehydrated certificate and the idea is The data you put in the blockchain Consists of a very very small subset of the fields that are valid in a certificate So all you're putting in is the public key the signature the The start and end dates for the validity period and also of course there's the domain name itself that it's valid for Which isn't even specified by the attacker the browser knows that because that's what it looked up and So We're also using ecdsa rather than RSA because ecdsa is of course a lot smaller and This actually scales really really well So if you compress a by a binary certificate by dehydrating it You wind up going from 464 bytes to 104 bytes So it's really good a level of compression a name coin name can store up to 520 bytes So this fits reasonably comfortably In practice we had to add some bytes because we're encoding it as JSON And we couldn't use compressed public keys because libraries didn't support that very consistently But yeah as in terms of Scalability this works great that solves the scalability issue, but what about the security issue? Well, it turns out that this actually solves the security issue as well Because none of those fields that the attacker controls things like the public key or the signature None of those can actually be used to make the certificate valid in a totally different context than it was expected to be used in basically if the attacker tries to Dehydrate a certificate that's valid for something. It shouldn't be valid for The signature is not going to end up matching because when it gets Rehydrated it just it gets filled in from a template the template won't match what originally was the signature check will fail And you'll get a certificate error So Ryan came up with the math behind this. I'm the one who actually implemented it And I didn't want to use open SSL for this even though that's the standard tool that you would use I just don't trust open SSL. Their API is impossible to use properly as I'm sure we all know I also don't really trust C or C++ code very much for memory safety issues conveniently name coins DNS bridge software uses go and go has a really really nice X509 processing library and so we went with that There were some issues because goes X509 library is actually a little bit too high-level. There was no good way to actually splice a signature into an existing certificate I ended up having to do some mildly weird stuff with a script that automatically would copy the standard library version of the X509 library into the Into a new package and it would then add a function that could do the splicing using private functions so I mean it kind of made our hair crawl a bit and It's not the cleanest thing out there, but it does work so from this point what we ended up doing is When we get a DNS request for a name coin domain name which gets processed by code that we control on local hosts instead of replying immediately with the data we insert that TLS certificate that we've rehydrated Into the trust the certificate list and then once we've done that then we reply with the DNS record and This actually works surprisingly well because it turns out that both crypto API in Windows and NSS on Linux they actually Those things we inserted take effect immediately So you don't have to restart the browser or anything like that, which was kind of surprising That said crypto API on Windows has lots of stupidity in its design among other things it normally wants you to be an administrator to actually add a certificate and it's also really slow for reasons I couldn't figure out and Even if it weren't slow running as administrators not that safe so turns out that Windows crypto API actually stores those certificates that you add to it in the Windows registry as binary blobs Which is a little bit odd, but it is Microsoft. They love their registry and Of course to make things worse. It's not even a standard DER encoded Binary blob. It's a special encoding that Microsoft made and while I was a reverse engineering what it did I realized the reason they did that was because they wanted to cache the results of hash function evaluation Note that they're not caching the results of RSA or ECDSA which are hundreds of times slower So I don't know why an earth Microsoft made this so complicated But in any event I did successfully reverse engineer how those certificates are stored in the registry The Windows registry has a permission system with standard ACL. It's just like the file system So we don't actually need to run as an administrator anymore We can just create a separate user that has access to that exact registry key and That all works and here you can see a screenshot I'm not sure how visible this is from where you are but this is a screenshot of a name coin domain name with HTTPS and this is Chromium Saying that yes, it verified successfully so that was the positive overrides now we move on to negative overrides and Actually, it turned out that this was a lot easier than trying to do with a positive overrides At least it's easy with some caveats The trick here is that we're abusing HPKP, which is the public key pinning spec in web browsers So normally if if you're not familiar with how HPKP works Basically a website can opt into having a whitelist of acceptable public key hashes for its TLS connection and if it doesn't match you get a public you get a public key pinning error and This is rather interesting because a lot when HPKP was being written as a spec a lot of people were like hey Wait a minute. What if I want to intercept my own TLS connections? and So what what the decision was was that okay? You can intercept your own TLS connections because if you add your own certificate authority to the trusted certificate list It will actually not be subject to HPKP and The logic there actually makes sense because if an attacker has the ability to add arbitrary certificates your trusted certificate list Then you know probably they have a lot of access to your machine. They can already do horrible things to you But wait a minute that means all these certificates we added as positive overrides are exempt from HPKP Can we use that for something clever? So let's say we take the domain name bit Which is the top-level domain that namecoin uses and we set a public keypin on that including all subdomains And we just set it to a public key hash that no one has the private key for Well, then all of the certificate authority is that are trusted by the browser by default They won't be able to issue any certificates for it because it won't match the public keypin But all of the things we added as positive overrides are exempt from that So as a result the self-signed certificates that we're adding that came from the blockchain via rehydration Those will work, but if it's signed by a certificate authority, it won't work. So that solves the issue there And in particular we ended up using as the public key hash Ryan suggested to use one over pi Scaled to 256 bits which seems to be fairly good as a nothing up my sleeve value And turns out that chromium actually stores all this data in just a JSON file With all of the all of the keypins and so it's trivially easy to make an installer for namecoin Just edit that JSON file when you install it so that the keypin gets put in place and So this is an example of what it would look like hypothetically if If a malicious certificate authority issued something that it shouldn't for a namecoin domain now here You'll see it's google.com because we tested it by setting the keypin on calm rather than bit But yeah, this basically demonstrates What would happen if someone Misissued a certificate for a namecoin domain name even if there are trust that certificate authority It will not be allowed and it will say pinned key not in search chain So that solves that problem as well There is a problem though here. You might have heard that chromium is deprecating HPKP soon It's expected HPKP will be removed from chromium sometime early to mid next year so What are we going to do about that? um on Windows specifically Windows itself actually has a keypinning mechanism built in In fact it has two one of them is called emet one of them is called enterprise certificate pinning The latter only works on Windows 10 the former works on pretty much every version of Windows And so I'm pretty sure that I can adapt those systems to do what we want here But I haven't actually coded that yet So I have some work to do before the next chromium release comes out it's next year But the bigger problem there is that on GNU Linux, there's just no standardized method of doing certificate pinning So if by any chance anyone here in the audience develops TLS implementations for GNU Linux You really might want to consider adding some mechanism to customize what Certificates are valid even if it's just negative overrides or even if it's just adding Public keypinning that would be good enough for what we're doing and it would help a lot of people Over on the Mozilla end of things though Mozilla actually does appear to recognize that this is a use case that matters And they've actually expressed a tentative willingness to merging code that would actually add a browser extension API for customizing TLS certificate validation and This is awesome because clearly They recognize that being able to customize how things work is an important part of free software and They're not trying to you know just play nanny with the user. So that's good And I want to especially thank David Keeler Andy McKay and Andrew Swan at Mozilla for answering a lot of questions I had while I was writing a patch for Firefox that would implement this that patch is about halfway done Maybe a little more than that. I'm planning to submit it upstream to Mozilla So maybe in the foreseeable future people who use Mozilla based browsers will actually be able to just install a browser extension and then they'll have namecoin TLS validation working without any of this ridiculous Dehydrated certificate magic that we're doing for supporting chromium But in the meantime if you want to play around with the code that we've produced for using chromium on Windows With the dehydrated certificates it is available right now. It's released it works so go to namecoin.org and Go to the downloads page click on beta downloads. You want the ncdns for Windows installer Oh, and if you if you want to test it so you can click you can just go to nf.bit Which is the namecoin forum and If you if it and if you have ncdns for Windows installed that will actually work and it will validate the TLS certificate properly And yeah, as I said if you work on TLS implementations, please help us not use insane stuff like dehydrated certificates We don't like doing that kind of magic. We were forced to So that is all I have for you I'm happy to take questions and in addition if you want to contact me privately as well I'm going to be here at the Congress. You can also email me Hopefully my namecoin t-shirt will make it obvious where I am. So yeah, thank you Jeremy Jeremy. Thank you very much for this very nice talk. Technically it is was you explained very good the pros and cons It's my understanding and understanding right that the negative override is not yet implemented the negative override is implemented for for chromium on Windows It's actually implemented also for chromium on GNU Linux Although we don't actually have an automated installer for using the positive overrides on GNU Linux yet So right now we're only advertising Windows support Even though you can get GNU Linux support to work if you if you're if you're persistent The problem with the negative overrides right now is that they will stop working silently Once chromium releases the version that kills HPKP. So for now it's safe, but When you upgrade chromium eventually eventually it will stop working and that's why we're I'm planning on Reimplementing that using the built-in certificate pinning that Windows has I mean I don't expect that to be incredibly hard But on the other hand, it's Microsoft. They do strange design decisions. So We will see how that goes. I'm hoping to get on that in the next month or two But in the meantime until chromium ships the new version that kills HPKP It works completely out of the box right now at least if you're using chromium on Windows Okay, I understand. Thank you. So I have three more questions for Jeremy in the meantime you can think about questions too and Are you ready for the hot seat three hot questions? Sure. Why not? So you say it's name coin, but why is it not name chain? I think it's closer to the blockchain than it's to the Bitcoin That's a totally fair question interestingly originally when the name coin Project was being designed initially it was called bit DNS and at some point Okay, so bit DNS was originally just sort of a proposal slash design. It wasn't an implementation and The person who actually implemented bit DNS into a working production-ready System that had a production blockchain His name's are Vincent Durham. Although that's that's an alias not his legal name He decided to call his implementation name coin and I honestly don't know why he chose that it has caused a lot of confusion because a lot of people think oh name coin that sounds like a really good Investment vehicle for making me loads of money when my coins go up in value and I mean, you know We're okay with people buying name coins if they really think it's a good investment, but we don't view that as the primary use case We don't cater to that use case much. So yeah That said I think one way you could argue that the term name coin is accurate is that the Names in name coin actually are just special coins. There's special coins that have a monetary value of one name sent and they also have some extra data at the beginning of their script pubkey field and That extra data includes some special op codes which tell the name coin system This is a name coin as opposed to just a coin So yeah, you could you could argue about whether it's a good term From a marketing standpoint, but yeah point taken Thank you very much. The next question is about how How many developers are there and how do you guys work? What's your how do you work? remotely together What are the tools that you use? yeah, um So every time I get asked how many developers we have I tend to give a different answer each time Due to the fact that as a as a mostly volunteer run free software project We do have people, you know either start participating or stop participating or take a break things like that If I had to come up with a number right now, I'd say probably we have like seven or eight developers who work on stuff regularly To varying degrees of participation So, you know, we're a lot smaller than Bitcoin. Obviously. We're even a lot smaller than something like Monero That said, I think we I think as a team we work pretty well together We generally have a fairly the cohesive vision of What kinds of functionality we want to see We may just we may of course disagree about exactly how to get there, but we do work together pretty well In terms of how we communicate and stuff like that We have a matrix channel Which is bridged to IRC for people who prefer IRC Most of the communication happens via that Obviously we use a github and stuff like that as well But yeah, things things actually work work out pretty well given that we almost never see each other in person There's there's a there's a namecoin developer here in addition to me. I first saw him I first met him in person yesterday Even though he's been involved with namecoin for many years So, yeah, your program languages go then is that correct? the implementation of the Namecoin to DNS bridge is in go The namecoin core client which does all of the all of the blockchain consensus stuff that is in C++ To be honest personally, I wouldn't be too opposed conceptually to moving everything to go I enjoy go a lot more than C++ the problem there is that Since we're a fork of Bitcoin and we merge lots of changes from upstream Bitcoin core That produces problems if we deviate too far from what the Bitcoin community uses and right now The reality is that in Bitcoin land the dominant implementation is Bitcoin core, which is C++ So we're stuck with that for that purpose But for all of the projects that we that are completely our work like the namecoin to DNS bridge Yeah, we're using things like go Occasionally Python Just because those seem to be a lot safer than C++ or C Cool. Thank you very much Any questions from the audience Well, please come come here I will be standing there Hi, thank you for the talk very nice nice talk. I just one question. I was wondering how How difficult would it be to rewrite the namecoin chain and would that be would that be dangerous for the CA For this for this application Um as in rewrite the chain you mean as in like a blockchain read organization Yeah, and like take over the majority of hash car power right 21% attack. Okay. Yeah So right now Namecoin is relatively resistant to that because it's merged mind with Bitcoin Which basically means that Bitcoin miners can just add some extra software to their mining rigs And then they get some name coins effectively for free And so there's a lot of Bitcoin miners who are mining namecoin and in fact There was a rather hilarious incident a few weeks ago where so as you know, there is a There was a hostile hard fork attempt of Bitcoin, which they call themselves Bitcoin cash some people call them be cash and and so They actually stole a lot of hash rate from Bitcoin short-term and Well that well that whole incident was happening Namecoin actually ended up with more hash rate than any other cryptocurrency including Bitcoin Oh, and the and the reason for that is that all of the Bitcoin miners were mining namecoin as well But all of the all of the Bitcoin cash slash be cash miners were also Mining namecoin as well And so we actually had as much hash rate basically as the Bitcoin and Bitcoin cash slash be cash Miners combined.  It was hilarious.  Thanks Thank you very much I have two questions first. Did you consider Registring top-level domain the dot bit as a TLD that wouldn't solve of course all the TLS issues But at least competitively. Yeah, okay, so this is an interesting question um Generally speaking the registration process for GTLD is generic TLDs through ICANN Requires that whoever is registered as the operator of that GTLD. They need to comply with trademark takedown policies and As a decentralized system that's using a blockchain We're not able to comply with ICANN's trademark rules if someone is squatting on a trademark's name Well, that's too bad. There's nothing we can do about it And so we weren't able to we weren't able to go that route Also, it would cost a lot of money which would also be kind of prohibitive since we're a small free software project without much funding Although I should give a shout out to NL net foundation. They are funding us at the moment So if anyone here knows people from NL net foundation, please tell them. Thank you for supporting awesome stuff but There is an extra Procedure that could be done instead of a GTLD registration and this is called an SU with TLD special use top-level domain The idea is that you can you can get a top-level domain registered as not belonging to the DNS it's for special use only and We actually tried for quite a while to get dot bit registered as a special use top-level domain There were some political incidents there that I don't want to go into detail on But long story short tour was able to get dot onion Registered as a special use top-level domain, but we were not able to get name-point registered at the same time We are Continuing to pursue that option We're hoping that maybe that'll happen at some point But yeah for the moment it we were not able to make that happen short-term That said as far as I can tell it's extremely unlikely that I can would have any interest in issuing Dot bit as a GTLD just some random person who wants to steal it from us From everything that I've seen coming out of I can they recognize that if they were to issue a Top-level domain that is already in active use elsewhere That would be disruptive enough that they really wouldn't want that disruption to the internet ecosystem So I mean short-term it's not really a huge problem that we're not officially registered But we would like to fix that anyway, and we do plan to keep pursuing that Okay. Thank you. The second question is I first got into name coin a bit when I was Mining myself back in the day when it still was profitable to do that And then there was a thing called a dual mining where you mined name come simultaneously with Bitcoin, right? Yeah merge mine. Yeah, yeah much mining But I think today it's not really supported by a lot of pools to do that Do you have any effort to evangelize that to other pools so they can maximize profit and you the hash rate? That's a good question We have done some efforts to ask pools to mine name coin since they're mining Bitcoin already anyway But in practice, it's turned out that we actually don't end up needing to contact pools about that Just because empirically it looks like weeks We seem to keep going up and up towards 100% of Bitcoin miners just on their own because the Bitcoin miners have realized That mining is so competitive now that if they don't mine name coins They're losing out on money that might affect whether they break even and so you know We're always happy to talk to miners and give them tech support if they're having trouble setting it up But in practice we've found that we don't actually need to actively evangelize They tend to have an interest in using name coin on their own That said I should point out that It wasn't always the case that that was true up until about two years ago F2 pool had a majority of name coin hash rate all by themselves and Obviously that that's kind of problematic that meant they could have attacked name coin at any time That's no longer the case. They they now have a relatively small hash rate percentage, but We were concerned about that of course We knew the F2 pool people because they actually funded name coin development for a couple of years And so we were pretty sure they weren't going to attack us and ruin their own investment But even so that's not the ideal situation to be in F2 pool also did Help us out tremendously when there was a fairly interesting emergency that happened People here may or may not know a couple years ago Peter Willa from Bitcoin Dropped a zero-day on the Bitcoin dev mailing list that basically described a way to cause a chain fork by taking advantage of an open SSL bug and Bitcoin had already patched it, but name coin hadn't yet patching it required a soft fork and As soon as Peter Willa dropped that zero-day We started contacting all the miners and said hey you need to upgrade and activate that soft fork as soon as you can Well, a soft fork takes 95% hash rate to activate We were able to get 92% of the miners to upgrade the rest We had trouble contacting quickly and so finally we were like okay This is not good and then F2 pool contact us and said hey You know since we actually have a majority of name coin hash rate right now We can just unilaterally activate that soft fork for you and just reject any block that doesn't ever that doesn't ever I support for that soft fork And we were like okay. That's a really really bad precedent to set But at the same time we do not have any other options We'd really rather have that happen than have someone cause a chain fork That's really hard to recover from and so F2 pool did that and a day later the soft fork officially activated We reached 100% of blocks and so that solved itself because F2 pool actually helped us out So you know given that we were pretty sure they weren't going to attack us But at the same time it's good that now that can't happen again now the I think the largest mining pool that mines name coin has something like 21% of Namecoin hash rate or something along those lines. I haven't checked the numbers recently, but it's it's a lot lower than 50% Thank you. Thanks That was amazing, huh good questions Yeah, those were good questions Jeremy if anybody has more questions, where does he find you? So I can be found usually near the Monero assembly, which is somewhere back in that direction and Yeah, if and if And if you can't find me there at the Monero assembly You're welcome to email me although I should note I don't actually have access to my primary email account while I'm traveling due to the risk of You know having stuff stolen or something like that. I should mention that a couple years ago I got an email from Twitter saying hey state sponsored actors may have tried to compromise your account I still don't know what state sponsored actor that was but ever since then I've been really careful when traveling internationally Because I don't want to bring any of my standard crypto keys or passports with me So but yeah, you can email me and I'll get back to you when I'm back home in the US Alternatively if you want to contact me sooner than that and you can't find me at the Monero assembly You can join the name coin channel on free node or the name coin matrix channel and just ping me there I think I have three user names logged in there ping them all and I will hopefully notice that and get back to you fairly soon So hopefully that's enough options. Cool. Thank you very much. Thank you


This is definitely a male and then a single male. So this is, it's also men, but it goes under my shirt because men go the other way, you know, and it comes on the outside, so for women. I will put it on this one. Okay. Yeah, I already introduced myself. Okay. So welcome back. And I will try to walk you through a review of teleconnections on intracisional timescale. And this is actually the topic of a recent review paper that we just published in review of geophysics. Before I begin my presentation, I would like to explain the many of the acronyms that you see on my title slide. There is no need to explain the ICPP acronym, our host and main sponsor of this activity. Here on the left, these two acronyms represent two major programs of WMO, the WWRP, which is focused on weather and WCRP with a focus on climate. The third acronym here represents the sub-seasonal to seasonal prediction project, which is a project sponsored by WRP and WCRP designed to bridge the gap between the weather and climate. And finally, this acronym here, YTMIP stands for the Year of Tropics Mid-Latitude Interactions and Teleconnection, and this is an international project fostered by the sub-seasonal to seasonal project. And it started this summer and will go on until summer of 2019. The main objectives of this project is to try to answer some of the still remaining questions regarding the teleconnections on intracisional timescales. So the outline of my presentation includes a description of the influence of the tropics on the mid-latitudes, and I will present this from an observational perspective, divided between the northern and southern hemisphere, and then I will look at some modeling studies in the northern and southern hemisphere. And the modeling studies I'm talking here are those related to try to understand the mechanisms explaining these teleconnections, something along the lines that David talked about. I will talk next about the influence of the mid-latitudes on the tropics and then the two-way interactions and feedbacks. Then I will review some of the work that has been done to forecast the teleconnections on intracisional timescales. Finally, I will try to summarize some of the remaining challenges, hopefully provide you with some food for thoughts for your future research. So the idea of relationship between the tropics and exotropics dates back to 1950 and can actually be attributed to Herbert Riel, who was analyzing the so-called, he called the topography of the 300-millibar surface on a particular day, which was August 26, 1945, and this is not a climatology, it's a real-time map, and he noticed that the most outstanding features on this map are the breakdown of tropical atmosphere into a train of work pieces and the complete interlocking of flow between the tropics and high latitudes. Riel hypothesized that heat is injected into the polar zones in a few narrow strips of longitude that he marked with these lines here, and he thought that at least in part changes of the flow configurations and intensity in high latitudes must be dependent on the availability of disturbances in the tropics to extend to create these troughs. And Riel hypothesized that the source energy of these disturbances comes from the latent heat associated with convection. Of course, at that time, people were not talking about teleconnections. This is something that we later try to attribute. About 15 years later, Birkness was comparing the distribution of the mid-latitude circulations for various SST anomalies in the eastern equatorial Pacific, going from not so warm anomalies to warm SST anomalies, and he noticed that the strongest circulation that develops in the zonal winds of northern hemisphere winter tends to be associated with the warm SST. And one interesting aspect, an interesting hypothesis that Birkness advanced at that time was that this will have implication for the future seasonal forecasting of what he called the climatic anomalies over North America and over Europe. So a long time ago, people started to think about the potential of doing seasonal forecasting. So for more than 20 years, this subject was set aside and reemerging in the early 80s when people started to talk about this relationship between the tropics and the extra tropics. And I would like to point out that it took more than a decade after the discovery of the MGO that people started to try to make connections between the MGO or convective activity in the tropics and the circulation in the mid-latitudes. And probably the main impediment was the lack of observations with global coverage. So based on relatively short record, these pioneers work showed that the mid-latitudes circulation can be affected by the tropical convection during the periods when convective activity is moving from the Indian Ocean into the western Pacific. And they demonstrated that when the convection is located in this region, the associated circulation consists of this pair of downwind cyclones located near the region with suppressed convection. These cyclones extend over the whole Pacific region and their meridional structure allow them to extend into the mid-latitudes on both hemispheres like we see here and near the 354B north. One particular paper that probably you were expecting to see listed on the previous slide is this one by Lipman and Hartman. And I wanted to mention it separately because they also found the relationship between the circulation in the mid-latitudes and the tropical convection. But they claim that this relationship can, this exchange can take place only in the exit region of the South Asian jet. And they, in this schematic, they show that the convective activity located here at the jet entrance region will induce this meridional circulation. We'll create this meridional circulation which will be induced by the aegiostrophic winds that exist in the jet entrance region. And they found no relationship between the regions of tropical convection and the anomalies over North America and the Atlantic region. So this was a slightly different conclusion than the previous studies. And one of the main questions that drove the future research and it's still an open question today is what are the geographical regions where the tropical forcing is most effective in exciting the extra tropical circulation anomalies. So once the reanalysis became available, people started to look at the variability of the climate patterns in the mid-latitudes such as the NAO and PNA and try to link this teleconnection pattern to the activity in the tropics. Around that time it was found that in the northern hemisphere there are two modes of variability with the periods of about 48 and 23 days. And also the North Pacific circulation anomalies develop one to weeks after the appearance of the convection anomalies over the tropical Pacific. So later on when the more data became available, people started to think of the MGO as a forcing of the mid-latitudes. And it was found that some studies were suggesting a phase locking between the PNA and the MGO with the MGO explaining about 30% of the PNA variability. Whereas other studies like this one by Riddle at All published in 2013 were suggesting that MGO may only excite a PNA like pattern but not a pure PNA pattern. So here in this figure taken from the paper by Riddle at All, we are looking at the probability, the frequency of occurrence of regimes in which the PNA events take place. And we are looking at each panel corresponds to an MJO phase, which for those of you who are not familiar with what the MJO phase is, you will hear something later on. And then the left panel corresponds to the positive phase of the PNA and the right panel corresponds to the negative phase of the PNA. So these red cards here indicates the high frequency of occurrence of the PNA pattern whereas the blue lines indicates the low probability of the PNA pattern to take place. So when we look at the distribution or the frequency of the positive phase and the frequency of the negative phase, we see that we see an asymmetry and we also see that the MGO doesn't have such a large impact on the negative phase of the PNA. So this is the reason that they reached the conclusion that this is not a pure PNA pattern, but it's a pattern that looks like the PNA. There are other studies so that looking at the influence of the MGO on to the North Atlantic region and it was found that the NAO is influenced by a tropical convection when the MGO is in either phase 2-4, which means the convection is located over the Indian Ocean or phase 6-8. It was also found that the activity of the North Pacific storm track during the winter is modulated by the tropical convection associated with the MGO. The winter surface air temperature over North America is characterized by a 70-day oscillation which is forced by the MGO and also it was found that the MGO phase speed affects the mid-latitude interconnection patterns. So far these results that I mentioned were mostly focused on the boreal winter, but we do have a very small number of studies looking at the influence of the boreal summer convective activity on the mid-latitude interconnection. The moon at all looked at the influence of the active phase of the South Asian monsoon and North American summer monsoon on the extra tropical circulation. In particular the surface temperature anomalies and they do find significant teleconnections and these teleconnections show both quasi-stationary characteristic and also eastward propagating characteristics. Also, these studies and these results that I mentioned so far, as you probably noticed, are focused on the northern hemisphere. But what about the southern hemisphere? Because when I presented that understanding of the teleconnections, we said that teleconnections take place in both hemispheres. Well, for the southern hemisphere, we have a very limited number of studies and the result seems to be slightly different from the northern hemisphere. So initially a lot of studies were suggesting that there is no significant correlation between the tropical convective activity and the large-scale circulation over the southern hemisphere. It was until 1993 when Berberi and Hegel found that the impact of the tropical heating on the mid-latitudes has a seasonal dependence. So here, this plot shows the composites of the 200 hectopascal velocity potential for days when the large oil-large convective anomaly is located at 127 east, around here during the southern hemisphere summer. So in this composite, we see these circulation anomalies that extend forward like a Ross B-Wave train. Whereas during the winter, the same composites, while they show these anomalies, the circulation anomalies, they do not show these forward propagation, the Ross B-Wave train that we see during the southern hemisphere summer. So moving on in time, observations with higher temporal frequency became available and the research started to be focused on the relationship between the tropical convection and the mid-latitude weather and in particular extreme weather events. So here I have two examples. One showing that the winter extreme precipitation over the US west coast is increased after the MJO is in phase two and this figure here taken from a paper by Jones shows the percentage of occurrence of extreme events. During the active MJO phases, which is this black line and non-active MJO events, the boxes that are listed here on the horizontal axis corresponds to various regions that they used to analyze. So it's very obvious from this plot that the frequency of events associated with active MJO events during phase two, it's much larger than the frequency of events that take place when the MJO is not active or is not in phase two. Another example is related to the other side of the Pacific and Jong in 2005 looked at the extreme cold surges in the surface air temperature over East Asia and he plotted here the distribution of these extreme events and they are represented by these larger blue dots and the other and this diagram shows the phases of the MJO. We will learn more about this diagram later and you will actually get to use this diagram in some of your lab sessions. So when we look at the distribution of these cold events, we see that they tend to be favored by the MJO convective activity located over the Indian Ocean. Another type of extreme events is the so-called atmospheric rivers and they are called extreme events because they are associated with intense streams of precipile water and they can cause heavy rains that are usually resulting in flooding. So a number of studies found the coherent relationship between the MJO, the associated raspy waves and the atmospheric rivers, especially the atmospheric rivers that takes place on the west coast of the United States. And they have also found that the MJO in phase six, which means that the convection is located over the western Pacific tend to favor these atmospheric river activities. And not only that, the MJO tends to modulate the atmospheric river activity in various regions over the world, like in Korea, Japan, Alaska, Europe, in southern hemisphere. And here, I'm just showing you as an example of large influence of the MJO on the atmospheric rivers. I'm showing the frequency difference which for the atmospheric rivers that affect Hawaii as function of the MJO phases. So again, we see that there are some phases of the MJO in which the frequency of occurrence is negative, which means that this particular phase of the MJO doesn't favor the development of atmospheric rivers. But there are phases of the MJO which favor, which leads to the increase of the frequency of atmospheric rivers. So these are these examples that I show here and these results were based on observations. So the conclusion is that observations provide enough evidence that support a statistical significant relationship between the tropics and mid-latitudes. But as you probably noticed, I haven't said anything about the mechanisms driving this teleconnection. So all the results were based on statistical analysis, just looking at observations. So now I want to show you some results from, I call modeling studies because they are based on models, but mostly theoretical models that of various complexities starting with very simple barotropic and baroclinic models like the one that David described, that were designed, these studies were designed to try to understand the mechanisms driving the teleconnection. So again, some of the early, in early days when only very simple linear models were available, people have used these models trying to understand the relationship between the tropical heating and the distribution of the mid-latitude circulation. And here is an example taken from a paper by Hoskins and Crowley, where they, in this linear baroclinic model, a two-layer model, they put a source of heat in the tropical region, and then they analyze the response of the mid-latitude circulation by looking at this 300 hectopascal geopotential height. So in this map, we see that the response of the mid-latitude circulation to this tropical heating, are these ways that propagate poleward and eastward in the upper troposphere. So there were also other studies that, in particular, David mentioned. They studied by Simons and all, and they also, using a similar simple model, they were able to show that propagation, mid-latitude perturbation over the northeast Pacific, are excited by tropical forcing located over southeast Asia and tropical western Pacific, and also the Atlantic perturbations, mid-latitude perturbations in the mid-latitude circulation, are forced by the tropical convective activity located to the southwest of this region, mostly Indian Ocean and western Pacific. So as David described, the mechanism of driving this teleconnection was the Rossby wave train. In this paper, they promoted a different school of thought, and according to which the mid-latitude perturbation are associated with the fast-growing mode of barotropic instability of the mid-latitudes, which are these barotropic instabilities are forced by the Rossby wave trains. And by advancing these hypotheses, they were trying to justify that, why the response of the mid-latitudes is not independent if you have the source of your hitting south of the equator or north of the equator. So, like David said, another important result of that time was that the atmospheric anomalies in the extra-tropic have a barotropic structure. And they also found that this variability of the mid-latitude large-scale flow is dominated by an oscillation with a period between 28 and 72 days. So one question that was posed at that time, and it's still something that we don't completely understand, is how and why do the baroclinic atmospheric anomalies in the tropics transition to barotropic anomalies by the time they reach the extra-tropics. Because, like David showed us in his pictures, when we look at the distribution of the disturbances in the tropics, they have this baroclinic structure, whereas the disturbances in the mid-latitudes, they have a barotropic structure. So, moving on in time, people realize that all of these experiments that were done with this simple model use very idealized sources of tropical hitting. And in the real atmosphere, the distribution is slightly more complex or more complex than these idealized sources. So Feranti et al. designed an experiment still using a simple barotropic model in which they derive the structure of the tropical hitting from the observations. They took the first two EOFs of the distribution of the oiler anomaly in the tropics and they imposed this forcing into a barotropic model. And surprisingly, using this very simple model, they were able to reproduce with high fidelity most of the futures of the 500 millibar pattern that corresponds to the observations. And so the main conclusion here was that the characteristics of the tropical hitting really have a large impact on the circulation anomalies that develop in the mid-latitudes, regardless of the complexity of the model. So next, we started to enter into the so-called GCM era when models became more complex. And Troubert and Park first tried to look at the global initialized analysis produced by the ECMWF model. And they found that the, or they show that the PNA appears to have its main source of energy in the mid-latitudes and the link to the tropics manifest as a phase locking with anomalies forced by the tropical convection. So this is a result, a confirmation of the result obtained earlier by other studies just looking at the observations. Since the earlier experiments in which source of hitting was specified were done with very simple models like the linear barotropic and baro-cleaning models, once the GCMs became available, people started to repeat these experiments with the GCMs that are more complex. And they found that the propagation of the rusty wave is sensitive to the zonally varying basic state. So this is a, it was a new result because the basic state in the previous models were just linearized model about the basic state. So this was not possible to be explored. And they also found that the preferred path for the rusty wave chain propagation is in the regions with prevailing westerlies. They also found that the response of the northern hemisphere to tropical heating is much stronger than in the southern hemisphere. And the rusty wave response to a fixed tropical heating establishes in 10, 15 days. And this result, it is actually consistent with what the previous results based on the observations. An interesting result was obtained by Hailean who's here in 2007 when they use a primitive equation dry atmospheric model. And they show that this model can simulate tropical intracisional variability with the structure of the Kelvin wave. And the divergent flow associated with this Kelvin wave generates wave activity into the PNA region. I thought this result was intriguing because everything that I discussed so far was based on the source of tropical heating which was associated with atmospheric convection. And an earlier study showed that if in a model you turn off the convection then the MGO will disintegrate in dry Kelvin waves and Rossby waves. So convection it is necessary for maintaining the coupling between these two waves and to maintain the 30-day oscillations that they were investigating in that model which translated into the MGO. Of course when we started to analyze the GCMs people started to wonder how well the GCMs are able to simulate these observed teleconnections. The early simulations suggested that GCMs tend to produce the observed relationships between the tropical convection and mid-latitude circulation normally, especially during the boreal winter. But they also show differences from observations and these differences were attributed to the model's inability to simulate the right location of the tropical convection. Another type of more complex experiments designed to understand the mechanisms driving the teleconnections were the so-called intervention experiments in which in a very complex GCM you intervene by nudging the tropical heating to some observations or some idealized heating and these experiments confirm the earlier results from observations that the extra tropical response is sensitive to the phase speed of the forcing. They also confirm that the tropical convection outflow anomalies lead to Rossby waves which then interact with the mid-latitude flow in preferred locations and where these interactions take place they extract energy from the mean flow and they allow the growth of the barotropic modes. Other results show that the mid-latitude response to the MGO depends on the history of heating and cooling and it's not just the response of some heating and cooling at a particular longitude. And there is also some lag between the time of the forcing and the response. And another result which David used in his presentation was that the short pulses of tropical heating also affect the mid-latitude and these effects can persist more than two weeks. Another interesting paper that definitely the experiments here were not designed to look at the teleconnections but the results are so relevant that I decided to include this paper in this review. Are these experiments by slingo and slingo in which they look at the impact of the cloud radiating forcing on the mid-latitude circulation. So they do experiment in which they cut off the cloud radiating forcing and they found that the longwave cloud radiating forcing in the tropics accelerate the subtropical jets and generate perturbation in the mid-latitudes with the barotropic structure. And they also found that the longwave cloud forcing over South America induces a barotropic cyclonic circulation in the mid-latitudes and anti-cyclonic structures in the northern hemisphere. So now I want to move on and discuss the influence of the mid-latitudes on the tropics and I will start again with a review in time of the evolution of this subject. And I think the motivation of this kind of studies were based on the need to explain the energy source for the observed tropical waves and also that were predicted at the same time by Matsuno. There was also another interesting paper that was published a long time ago in 1965 which was trying to explain the formation of hurricanes in the eastern North Atlantic by the coal surges from the Antarctic region. This is the only paper making this suggestion and I don't think anyone else after that has tried to look at this. So the idea was that the coal there from the Antarctic region will once it propagates in certain conditions it propagates northward and will erode the static stability in this region and that will enhance the easterly waves activity that will lead to the formation of tropical cyclones in this region. So very early observational results suggested that only exotopical waves with westward phase speed larger than the zonal mean flow can actually propagate into the tropics. And the strongest influence manifest over the Pacific and Atlantic Ocean. So these are the two regions where the activity of the large scale circulation in the mid latitudes can influence the tropical convective activity. We also have learned that baroclinically unstable disturbances of the mid latitudes can modulate the tropical convection and some of the results suggested that the mid latitudes to arms maintain the intracisional variability of the tropics. You have already seen this figure in David presentation. But the reason I am showing here is that there is a number of studies showing that the mid latitudes circulation has an impact on the IPCC, SPCC and South Atlantic Convergence Zone. And this happens when the exotropical transient upper level crops, which David showed us here, can propagate eastward and affect the cloud bands into this region. And probably you have heard of this as referred to the so-called PV streamers, potential vorticity streamers. And how this affects these regions, it has been observed that during the boreal winter, a rosby wave train dominates the northern hemisphere, whereas during the boreal summer, the rosby wave train dominates in the southern hemisphere. Another impact of the mid-latitude circulation on the tropics has been observed in association with the so-called summer monsoon breaks. And we have a number of studies showing that the mid-latitude circulations that have large tropes penetrate into the westerlies over India and they can cause breaks into the monsoon. And these breaks have been observed to have, can last between, anyway, between three to five days up to 20 days. The West African monsoon also experiences some dry spells, which are also associated with the mid-latitude intrusion of coal and dry air from over the Europe and Mediterranean region. So, another type of event in which the tropical weather is affected by mid-latitude circulation are the so-called cold air surges. And the cold air surges take place in many regions in the Asian Pacific region, South Pacific, South America, Central America, Caribbean, Africa, Indian Ocean, maritime continent along the east coast of Australia, and also in North America. For example, we experience freezing in Florida, which affects the orange. So, now going into the theoretical part, trying to understand what are the mechanisms allowing this to take place. Using a simple model, people show that the propagation in the meridional direction in the presence of the mean easterly flow is only possible only if the phase velocity of the mid-latitude wave is more easterly than the mean flow. Then the large scale disturbances generated in the northern mid-latitudes may have a significant influence on equatorial region if a westerly duct is present. And some of the studies suggest that the equatorial response of the exotropical forcing does not rely on the presence of this westerly duct, but it's a direct projection of the forcing onto the equatorial trapped waves. So, one of the big questions that remains in trying to understand the influence of the mean latitude into the tropics is what are the systematic aspects and mechanisms of the exotropical initiation and maintenance of the organized tropical convection. So, moving on, because I think I'm getting close to the end of my time, I want to go very quickly over the two-way interactions and feedbacks between the two regions that David also mentioned. And the current understanding is that, for example, rusty waves excited by the MJO will propagate into the subtropics, will break here, and when they break, they can influence the convective activity in the tropics, and then the cycle repeats. And the Mansun Braves is also an example of the two-way interaction between the mid-latitudes and the tropics, because the changes in the convection induced by the mid-latitude circulation then will affect the teleconnections of the boreal, somewhat intracisional oscillations. So, a main question that remains is to what extent are these dominant tropical and extra-tropical intracisional oscillation connected, and David tried to address a little bit of that. And then more discussion was initiated by the audience. So, of course, it's the ultimate goal of understanding the mechanisms and these teleconnections is to use this knowledge for improving the forecast range, and the sub-seasonal to seasonal variability seems to be a time scale that can largely benefit from these teleconnections. And, for example, a number of studies have shown that the extended range of the mid-latitude large-scale circulation with small errors in the tropical simulation of tropical hitting, it is actually, they are actually skillful. So, this figure taken by a paper by Frederick Wittar is showing the NAO index for day 1925. The solid line corresponds to cases when the MJO is present in the initial conditions and the dashed line corresponds to cases when MJO is not present in the initial conditions. So, if we looked after year 2006 here, we see that the cases with the MJO show a larger correlation which translates into a better forecast scale than the cases with no MJO in the initial conditions. So, now you may say, but what about what happened before? Well, before the model did a very poor job in simulating the MJO. So, actually when the MJO was supposed to be present in the initial condition because of the large errors in the location of the tropical hitting, the model had very low skill. So, I will wrap up with listening some of the remaining challenges that the YT-MIT project is trying to address and also the sub-seasonal to seasonal project is working on too. So, for example, can we understand the mid-latitude teleconnections from the fluctuating tropical hitting as a time-leg stationary wave response to the hitting or does the time-dependent wave interface play a role in the response? So, how do intense mid-latitude storms and forward-propagating tropical storms interact with the polar vortex and alter the annual modes on sub-seasonal timescale? So, this is a little bit of an extension of the teleconnections into the much higher latitudes. To what extent are the dominant tropical and extratropical intracisional oscillation connected? What aspects of the intracisional hitting arising from tropical convection are most important for forcing the extratropical responses? We heard of various results where various studies have looked at different aspects and found different aspects being important, but we don't actually know the relative importance of all of these factors. Other questions that remind what is the sensitivity to vertical and horizontal structure and to temporal evolution of the hitting and why? Does tropical forcing amplify the intrinsic intracisional variability or excite new perturbations? So, I think this has not been established and, for example, most of the studies, for example, looking at the influence of the MJO on various weather events, they show an actual modulation of that event, but none of the studies are actually showing a triggering of that particular event. Something that we would like to understand is what explained the hemispheric asymmetry of the responses to tropical forcing. There is only the lens distribution where there are other factors that contribute to this asymmetry. And one very important aspect is the role of the basic state errors in the simulation of these teleconnections. And I think this is my last slide. So, thank you very much and I am happy to answer questions.