All right, here we go The Daily Tech news show with Tom Merritt is funded by patrons like you and me each month I pledge one dollar being British I had no idea what a dollar was so I stayed up for hours Researching and discovered that it is about 62 pence to pledge 62p or perhaps even more go to patreon.com slash ace detect This is the Daily Tech news for Friday May 29, 2015. I'm Tom Merritt joining me today Darren kitchen founder of hack 5.org How are you DK?  I'm very excited about today's show and it's cool to be using technology again Yeah, you spent a week at a camp Detox digitally detoxing you are you are mellowed out man. I am I am and now I miss my Apple Newton I feel like I need to remember me to program of getting back in the groove So maybe I find my old palm pilot HP I pack one by one that you might want to start with Windows 286 and some DOS just Yeah, DOS shell is so you don't have the digital bends You know lens here as well. Yeah, let's brought us here. He has not been detoxing digitally. How's it going Len Peralta? Oh, I've um, I am I'm doing well.  I know and they're calling me right now about that. I yeah the Sir, you're not representing us properly wearing an Indian shirt. Don't do that So Len's gonna be illustrating the show as he always does Well, they're gonna be talking a little bit about a former North Korean computer science professor who has defected to South Korea And is now warning us that 6,000 North Korean hackers could destroy a whole city Darren and I will evaluate those claims after the headlines Apple posted its recommended workaround for the iPhone messages bug according to the verge the support document directs iPhone users to reply To any malicious messages using Siri Apple's also working on a fix Bug is also affecting iOS users of Twitter and Snapchat who have notifications on for those services with Twitter It just crashes your phone doesn't cause any lasting damage with Snapchat It makes the chat history with the sender and accessible seemingly permanently I'm sure somebody will figure out a workaround to that it doesn't affect the rest of snapchat though You just it's kind of a joke on the person who sent it because you can no longer communicate with that person You know, I'm what a most disappointed And I actually I must say I must give credit to Apple first and that I love their workaround It's like oh, yeah You just have to use Siri and and coax it into you know doing this thing and reading this message for you It's almost the you're holding it wrong. I love it But I'm really disappointed that the unicode characters that create this are not the table flip guy And I feel like that's a lost opportunity. It really is although The fact is that it as far as I understand it Darren I know you researched this for ThreatWire. So maybe you know a little more about it. I don't know It's it's the fact that there are too many Unusual characters for the notifications Process to handle them which causes the problems So could you just do a whole lot of table flip guys and get the same effect, you know, you might be able to It comes down to cortex is the engine that actually parses those and creates the lines and paragraphs and I guess it's actually used by Not just the iPhone, but the iPad the Apple watch as well as even OS 10 But only in the terminal and so it's the way that it's implemented Specifically on the iPhone to the notification So if you don't have home screen notifications or I guess lock screen notifications turned on you'll never have this experience So that's a good work around for right now until Apple does issue a fix and it yeah It does make you wonder like, you know, what other characters? Could you spam to the notification area where it would know how to handle them? Yeah, I mean enough table flip guys will make anybody upset PC world reports on Google's announcement that Levi's yeah The gene makers are the first partner for a smart fabric called project Jaquard Spelled GAACQ UARD the experiment weaves electronics into cloth to create the equivalent of Touchscreen controls so the demos they're doing at Google I O show fabric that Manipulates a 3d image on a display changes the songs on a phone You know skips forward etc and even controls the lights you can turn your lights off and on It's think of it like a mouse in your pants wait. Yeah No, I love it. I mean, you know, it's a great thing that Google is really partnered with a true innovator in the pants arena I mean Levi's Strauss really innovated denim jeans As far back as 1853 sure rivets were known for their their massive innovation and using rivets They're used to in fact be a rivet in the crotch area, which has since been removed because that thankfully under sat a little too close to a Campfire and turns out those things get hot But yeah, no, so this is another such innovation So I mean it may have been you know 150 years coming, but I'm looking forward to the next big thing from Levi's Reuters reports path sold some of its apps to South Korea's Dom Kakao They are the makers of kakao talk if you're making the remark who uses path anymore you sir or madam Just gave yourself away as not being Indonesian Instant data mining know who you are now in any case the makers of kakao talk didn't get all of path Just the social network and path messenger path places, which a lot of people liked And enabled connections between customers and businesses like restaurants stayed with path Though it has been disabled for the time being and path says they don't have a way to invest in a new app for it to live In path has also been developing non path branded apps like gif creation app Kong I'm just wondering like where do where do social networks go to die Indonesia Well That's what the reason kakao because kakao talk is the biggest messenger in South Korea The reason kakao bought path is they wanted to get into the Indonesian market and apparently path is huge in Indonesia That's cool. Yeah a Report from the Washington Post cites a new report from the United Nations office of the High Commissioner for Human Rights That says digital security is essential freedom of is essential for freedom of expression and warns that weakening encryption in some Countries could undermine that freedom worldwide the report was written by special Rapporteur David Kay. He's also the director of the international justice clinic at the University of California Irvine Kay wrote that governments quote should avoid all measures that weaken the security that individuals may enjoy online Such as backdoors weak encryption standards and key escrows because it results in weaker security for everyone This is epic. I I love this I I love this as much as I love all of the other amazing things that are written out in the United Nations Universal Declaration of Human Rights It really speaks to me as a as a human and I think that you know We would all say like yes This is a good thing and it's it's really upsetting when you see all of the amazing stuff That is said by the United Nations all of the you know these proposals and all of these, you know papers and and and Then you see what actually happens and it's like that discrepancy. That's really heartbreaking So I hope that this Unfortunately, it doesn't have any teeth, but I hope it can be used to you know wave the flag And maybe get something that does have teeth. It is a it's a very well-written reasoning of why weakening encryption even with escrow keys Is a bad idea and and you may still be for it I know there are some people who are but I would highly encourage you to read this even if you are for it because this may help You come up with better arguments of why it is important to weaken encryption I personally don't think that we should weaken encryption and my reasons run right alongside of this I think what's impressive about it is this person is a legal scholar an international law scholar and yet You know, I'm no surprise that legal scholars are good at arguing But was able to really show that he understood the nature of encryption as well Which is a really difficult topic that even security researchers can get wrong sometimes Well, it's just nice that we'll be able to have like, you know, such a representative source to site You know in that argument that you know, it's not a good idea to weaken encryption You know, you got to take the good with the bad to move forward TechCrunch reports that Apple acquired augmented reality star up Mateo on May 22nd It's M-e-t-a-i-o Company launched back in 2003 is an offshoot of a project of Volkswagen of all places Nine-Fine Max Mark Gurman who has good sources believes that Apple is working on an augmented reality feature for its maps app And this would bear out that they're at least working on augmented reality for something And of course, there's that VR headset that Apple patented earlier this year Of course, they patent a lot of things that don't end up turning into products But there's definitely seems like Apple's trying to get into either AR VR or both in some way down the road Yeah, I would be surprised if they weren't Yeah, kind of like make sense that they would The Verge reports the welcome news that you can finally use GIFs on Facebook Mostly if you drop a link to a GIF which has already been uploaded elsewhere on the internet The GIF will appear uploading a GIF directly to Facebook doesn't seem to work just yet Yeah, we we may know someone actually that might have made this happen Is that right? It's actually really cool that the technology that works on the back end The reason why it's such a long time coming is because GIFs are inherently Terrible at data compressions and some GIFs will actually be they're just massive in size for what they're actually animating So on the back end what will happen is it'll ingest the GIF and then create a version of the GIF That's actually using HTML 5 to play it back But if you still want to you can right-click and save it and then it will serve up the actual GIF So you can save that gift to your desktop and so the whole trick because I know there's probably some some old-school folks Are like you just show the image right what's so hard Facebook? Yeah What you're saying is they're trying to make sure that they use the same compression that keeps their service light Especially on mobile for people and and this has has been able to not lose an animated GIF because if you if you Anim if you compress it wrong you lose the animation So yeah, that that is a nifty trick there. That's really great And it's really weird that when you think about what's happened is there's a massive Technological workaround being done to use the latest and greatest video compression technologies for One of the oldest on the internet because we just can't let it go I think it says a lot about the culture of the internet Yeah, so I think that the GIF is just an amazing thing in that right and gadget reports The Google is broadening out its Google sign-in feature with smart lock for passwords and a Google developers blog posts Smart lock for passwords is described as a frictionless method for users to sign into apps on Android and on sites in Chrome smart lock works a bit like a password locker Once a user saves a password to smart lock They can then skip entering those credentials on any Authenticated instance of Chrome or Android devices for instance Netflix is a partner in this So if I sign into Netflix on my Chrome browser save that Login that authentication to smart lock then I could go to Android TV where I'm logged in as with my Google account Launch Netflix and it would say oh, okay You're you're logged in already and I don't have to go through all that on-screen mess to log in again Well, it sounds like it makes life really Convenient and from what I understand about security and convenience is that they're not always hand-in-hand Is they're usually pretty innovative when it comes to security, you know being one of the first to roll out Two-factor authentication and things of that nature, but I don't know I must I gotta ask you Tom Do you use a password manager? I do yes, okay, do you would you use a Google password manager? No, I don't know I might for something like this look I'm sure that Google is going to great let going to go going to go to great lengths to Demonstrate to people how secure this is I wouldn't storm the passwords from a bank in there. I'm just saying my Netflix account May I might that might be an acceptable risk? Mm-hmm, okay Yeah, I just I just can't you now I'm starting to just you just your tone of voice is making me rethink my position on that like okay, what well There's not a wrong opinion Tom. Yeah, I know I know Everyone else's and then yours is that? Yeah, so so you're just like no, I wouldn't I would never give my data I don't use any password manager So and that's because you believe that password manager gives you a single point of failure And if somebody hacks into that you lose everything, right? Exactly, so what so what's the solution for somebody who's like I am not going to try to remember all my passwords. Oh Well Unfortunately password reset functions are so terribly Built that it all really just hinges on your email anyway So when you think of it that way, right? if I can just Using Netflix as an example if ultimately if I want to reset your Netflix and get you know I guess not get your password but change your Netflix password so I can you know log in and see your movies and find out your Closet brony or whatever I can just do that by hacking your email Right, and then resetting your Netflix password and the same goes for most other services They fall back on your email So when you've already accepted the fact that the single point of failure is Already your email and a lot of people use Google gmail as their inbox Then I guess it's not too much of a stretch to say well, I'm already in that boat But I guess I'm just not ready to commit all the way to that But what do you do to manage your passwords then? Oh, I just remember a different password and if I forget it I just reset it. You just reset it. Okay. Yeah, I use a lot of My secret is the who is Record database for done it. There's unique information in each of these which can be used as a seed and sometimes Depending on the level of stuff. You may have to run it through an MD5 to get a check So I'm gonna use an offset anyway There's there's a lot of tricks where you can come up with a memorable or not memorable. I'm sorry a Non-memorable but very easily Remembered The problem the problem I have with that the thing I worry about with that is If somebody gets a couple of my passwords, right? And this is an edge case I'll admit yes, but if somebody were to get a couple of my passwords, they might be able to figure out my method Sure. No, if there's a pattern, absolutely, you're right And you know, I don't have a good defense against that except for the fact that the pattern seems very Random considering I use like hashing algorithms and seed data sure from static sources That's all about speed bumps, right? You're throwing a lot of speed bumps in the way of somebody who really wants to get at it I'm not low hanging fruit. Well, yeah, honestly, the thing is get rid of passwords Exactly, I think they're terrible. I don't I'm not saying that I know what the better solution is But they are pretty terrible and Google has a lot going on at IO about Replacements for passwords and things like that. They're part of the fight. Oh, you know, I don't think that the first solution We're gonna see is the best and I think we're gonna see a lot of solutions offered from a lot of big companies But you know, regardless the big takeaway there is that this is on our minds. It's something that we've all acknowledged is a terrible You know part of the web and unlike Jeff's it should die All right, what should not die is your participation in the subreddit Thank you to everybody, especially the moderators But everybody who participates and helps us put the show together by doing that if you yes There are people who you know the money men the money men and women get to be co-executive producers because they pledge on the patron at A certain level that's what that that's what that title means That means the people who gave the money to make the thing happen But then there's the actual like line producers You can call yourself a line producer of daily tech news show if you're in there in the subreddit Helping us figure out what to talk about every day Captain Kipper is a line producer He sent us this torn freak story that Ola VPN sells users bandwidth to others through a service called Luminati This has come to light even though it was already in the light apparently because an eight-chan message board operator named Frederick Brennan claimed that Luminati was used to attack his website Ola doesn't deny that in fact They don't deny any of it Ola says it has in fact suspended the user that misused its service And it would cooperate with any law enforcement activity related to the attacks. They're they're sorry about it They they there's like look any VPN provider could be used to do this We were sorry it happened to him, but we've stopped that account from using our service Ola's fact also makes it clear that it does use bandwidth from Ola's customers When they are sitting idle and the company defines idle is meaning the device is connected to power not on battery There is no mouse or keyboard activity If the device is connected to an actual local network or Wi-Fi not on cellular data And they say any user who isn't comfortable with this Can buy Ola for five dollars a month But if you listen to Threat Wire as Darren kitchen pointed out this morning Botnet could be another word for how this activity could be used Right. Yeah, we did go into this a little bit more in Threat Wire So check that out. It's another one of the shows we do at the hack 5 warehouse, but Yeah, the interesting thing about this is there's a lot of money to be made in Botnets and This is a really interesting Quasi lawful way to go about it by providing a service and just having it parts of terms of service And we've talked about this a bit before about how it's really interesting the juxtaposition between being a citizen Under the law versus being a user under the terms of service and how corporations can kind of like, you know Come up with whatever they want as far as their rules and it's and it's you know fair It's their playground, but in this case the playground is a lot different than you might expect if you're just Installing this very simple Chrome extension so that you can watch a geofenced football game where you otherwise wouldn't be able to use You know the the BBC I player is the go-to example of like oh well if you look like you're in Britain Then you can watch the BBC And so you know it's great that because of VPN or sorry because of geofencing that more people have clued into VPNs and VPNs can do a lot to protect people's privacy So I guess that's the silver lining that it's good But in this case hola is a pretty terrible company when you look at the Luminati brand that they run Which resells your bandwidth resources when your computer is idle? What it does is allows someone to pay money to use the the aggregated user base of a law to send HTTP posts to a single source That's how they describe it that a really pretty infographic that shows like your data Everybody's all these users one target and there's there's a term for that on the internet And it's called a distributed denial of service attack. In fact, they they Basically only allow you to do HTTP posts. So it only has one use case and that's DDoS There's really not another use case for this service So they claim that this is spelled out in their FAQ which it is now But many have pointed out that FAQ was recently updated How recently was it just as soon as you know the the 8chan DDoS got attention by the media? so Yeah, although the other takeaway that I see here is wow what an interesting service It's kind of like Tor in that, you know, everybody's sharing bandwidth and you're becoming a You're becoming an exit node by default Which means other people's traffic is passing through you There's another security risk in this that you're probably not considering We're typically a VPN if you trust your VPN provider You're securing your traffic between you and it and then it goes out from their servers, right? And as long as you trust their servers, then you're good But with their distributed free DNS VPN solution all of your traffic is going through some random guys Connection so as the security researcher, I'm kind of like wow I'm gonna spin up a few of these and some virtual machines and just sniff all the insecure traffic coming out of them. Yeah Well, there's two points here one is Let's leave the Luminati service and the questions about its legitimacy aside This is a really interesting technology if it is above board and if you do Say folks, you need to be aware of a security issue here, but in that case, it's kind of a peer-to-peer Geolocation fuzzer, right and maybe that's Not gonna be something that the governments are going to want to allow or not But it's a really interesting way to do this It is not a secure way to do this at all and it is not the kind of VPN that you should be using if you Want to secure your traffic in a virtual private network So any VPN service you buy you need to make sure that you know That the cost that the company running it is trustworthy and has a good track record, right? If I would feel very different about this service if there wasn't the Luminati DDoS selling botnet aspect of it And you're right security notwithstanding because you're not going to have that when you're Aggregating your internet traffic through a network like that I mean you don't have that through Tor if you run a Tor exit node you see people's traffic, but not everybody does that And the people that do are a lot more privacy conscious. I would consider I would feel very different if this service something as easy to set up as this It's like two clicks to get going were like an open-source project or something like that And I feel like it's very much needed in this day and age because unfortunately Geofencing is being used more and more and it's not really The internet wasn't built to prop up business models that rely on borders. So similar to how we saw in New Zealand a few weeks back the laws about you know the the lawsuit with the ISP there and Netflix and saying like whoa you're offering a service that's going to allow people to pose as they're coming out from a different Country than New Zealand and we want to be able to restrict who gets what where and I would love to see something like this Used massively to the point where geofencing geolocation IP data is completely useless propping up these models You know the internet doesn't work the way a lot of people think it works When they want to make money off of it for instance Cairo five and seven six So that's the cult of Mac report that more than half of the founding artists of JZ's title music streaming service May have to pull their music from the site Because title has failed to reach a music licensing agreement with Sony Among the artists affected our Taylor Swift's man Calvin Harris Alicia Keys Daft Punk Usher and Founder Jay Z's wife Beyonce Jay Z was apparently hoping a deal with sprint was going to cover the cost of Sony's licensing terms But sprint has apparently decided that they are not in a quote financial investment a situation So yeah, I Don't want to get too much shouting Freud out of this because I thought it was a good thing to have title In the in there despite the miscue of promoting themselves as give the artists the money when they're all Incredibly successful artists more competition is better to me. However It's a lot more of a morass of licensing out there than you would think and that's what title is learning right now And that's a look at the headlines All right, let's talk about professor Kim Hong-kwang and apologies for my Korean pronunciation He defected from the PDK or the PDR K. Yeah, the People's Democratic Republic of Korea North Korea in 2004 he taught computer science at Ham Hong Computer Technology University for 20 years and Says that many of his students went on to the infamous Bureau 121 which is allegedly a Segment of hackers from North Korea who operate around the world including out of the basement of a Korean restaurant in China or possibly a hotel in Shenyang There's also the number 91 office in North Korea, which is hackers Anyway, he claims to still be in contact with several influential people in North Korea with knowledge of cyber operations Says there are around 6,000 hackers in the Bureau 121 now Estimates the 10 to 20 percent of military budget spending in North Korea is done on online operations and Warrants that their cyber attacks could have similar impacts as military attacks killing people and destroying cities Those are his words killing people and destroying cities He says quote a Stuxnet style attack designed to destroy a city has been prepared by North Korea and is a feasible threat Now I'll give the BBC props for quoting journalist Martin Williams who said quote I think it's important to underline that this is theoretical and possible from non North Korean hackers, too Then professor Kim went on to call for ICANN the the folks who handled the domain name system among other things to ban North Korea if they are found guilty of this and ICANN responded ICANN does not have the power nor remit to ban countries from having a presence or access to the internet This is from Duncan Burns its head of communications Meanwhile, if you want to get the North Korea Internet offline and go to China Unicom and convince them to cut them off because that's the one connection that North Korea has to the internet Wow, that's a lot. Yeah, there's a lot. There's a lot going on there. So first of all this idea Let's let's let's let's go with the could North Korean hackers destroy a city Well, I mean it depends on your concept of destroy I mean I feel like you know in this ever-connected global economy kind of you know world that we live in War is very expensive. There's a lot of deterrence to destroying cities In that you may not be around to see that the next sunrise and so if What you're trying to achieve? Can be done in a different means that doesn't necessarily mean, you know blowing up cities then Cyber is probably your best way to go. I'd say bang for dollar, you know, you bang for buck a cyber army is You know leaps and bounds more effective than bombs and guns So it would make sense to put your money there if you're North Korea But They can do some damage, but what kind of damage can they do? Okay, so We saw some kind of like hints to what can actually be done in the real world as everything is connected to a computer in one way or another with Stuxnet the Worm that was supposedly co-created between us and in Iran and I'm sorry the Israelis and we used it to destroy the PLC's that do the centrifuges that enrich uranium right and It's because those programmable logic controllers They you know monitor equipment and they execute commands telling them how to spin and whatnot and it was a very specialized worm specifically Designed to to destroy this piece of equipment by telling it to spin in a certain way that the new would damage it But it was passed by that USB stick, right? It was it was not that these things were networks, but but there were some insecure USB sticks that this Delivery means we're interesting. Yes something that I'm actually very familiar with with USB switch blades and USB rubber duckies and things of that nature, but You know the delivery mechanisms notwithstanding was was interesting here is it was overriding the firmware on these On these very specialized pieces of equipment telling them hey go do something that we know it's going to break you But don't tell anyone don't set off those alarms, but they destroy a city Yes, so think about that as it applies to all of the other things that manage you know our water lines and our gas lines and our electrical grid and and and you know as You know we think about it as consumers like oh smart meters But we don't think about the back end which is like making all of this happen And so if the firmware of a lot of these you know devices can be Overwritten in such a way that'll cause harm and at the same time not Alert that there's anything happening by the time you do find out that something went wrong it might be a little too late and You know I don't feel like you're gonna see like buildings blowing up and action heroes jumping out of windows and over helicopters What you'll end up with is like power outages and water not flowing the way it needs to and maybe Gas lines doing what gas lines do when things go wrong? Yeah, and Martin waves makes a good point It's not like a hacker from North Korea has is the only person in the world who can do this so If you had to just guess and it's an it's an unedged. It's an educated guess, but it's it's an unscientific guess What do you think the likelihood is the North Korea could or would pull off something like that? I think I personally think it's rather low You think it's rather what low okay? Um, I think that's on theoretically a lot of those, you know, there's the possibility to wreak some havoc with computers Yes, I Think that if there's any nation-state, I would put my money that I would rank North Korea number one as far as having the motive And you know a technical skill can be learned by pretty much anyone. I mean it's an equal playing field when it comes to this It's not like, you know nuclear proliferation it's there's not United Nations councils, you know that are tasked with Controlling the export and stuff and controlling the use of different technologies when it comes to this you can do the same with a Netbook that you can with you know to this to similar effect of like, you know giant workstations and servers, so The sort of thing has been possible for a long time, I guess is my point and we don't see it happening every day It probably would have already yeah on the other end of it Asking I can to ban North Korea Shows a definite misunderstanding of how the internet works by professor Kim because I can't manage his domain name and sure you can Get rid of North Korea's domain name that does not take them off the internet Yeah, that's the beautiful thing about the internet is there's no centralized authority that are like, oh, yeah We're the internet company.  Let me press a big red.  It doesn't work that way and it's great that it's decentralized in that nature It's what makes it so beautiful. I mean when you think I mean the internet is Just a network of networks, right? Yeah, and so whether your network is connected.  But the idea that I can which just manages domain names could say turn off a country is kind of it's a little crazy Because the domain name has nothing to do with their connection to the internet That's why Duncan Byrd said we don't have the power like we can't turn we can't do that We we can turn off their domain name. He's like we don't have the remit to do that either We don't have the authorization, right? It's not our job to decide who gets to have a domain name or not That's that's a bigger question, but he's also like even if we took away their domain name It doesn't keep them off the internet in any way China Unicom has the one pipe that connects North Korea to the rest of this interconnected network of networks that Darren's talking about So really if anybody has the has the ability to take North Korea off the internet, it would be them Right, and that's the idea is you had your bets and you have multiple connections And you know as servers go down as servers are wanting to do you who have a backup? So yeah, if you have a single point of failure, there you go But I don't think I mean, yes, it's not I can's decision Who gets to be on the internet any more than it is I can's decision who gets to be on the planet, right? You remove the internet from the equation and really what we're talking about is connecting people, right? Unfortunately when you're talking about North Korea, it's it's questionable. How many people actually benefit from those connections? So I would I would hope that the universal declaration of human rights applies to the citizens of North Korea But I unfortunately know otherwise yeah our pick of the day I'll cheer us up though Joe the uber DTNS nickel backer He writes for a long time I have drooled from afar at the world of home automation as the solutions were either too expensive or too complex for the whole family Then I saw this on the shelf for 24 bucks Link starter pack by GE comes with a wink-based hub 260 watt equivalent dimmable LED bulbs I found it to be a great way to test out new tech trends without getting too invested because it's only $24 and if I do decide to go further There's a bunch of compatible products. That's cool. He's got a link to it If you're interested it is a bargain price that they're offering there first something like this And and it's I think he's got the right approach Which is hey something for me to play around with a couple of LED bulbs See if I like it because you don't want to go too far in investing in this sort of thing When we really don't know what the standard is gonna end up being right and you know what you're gonna Want to do when you get that is get yourself like an x-stick or another USB adapter that speaks Zigbee because one of the reasons these are so cheap is because they speak that very lightweight protocol Zigbee is it doesn't get enough attention really, but it's basically like, you know bluetooth and Wi-Fi on a different frequency So seems kind of hackable and for 25 bucks I might have to pick up a set of these and start hacking on them because it's a fun protocol Thanks for the pick Jill send your picks to feedback at daily tech news show comm folks I want to hear from you you can find my picks at daily tech news show comm slash picks We'll get you through a few of these emails here Toby Atticus Fraley Let us know that his Kickstarter has succeeded at the Pittsburgh International Airport Well, he wants to put a robot repair shop in the Pittsburgh International Airport And he got funded so it'll be opening this September as far as Toby knows This is the first time a public art installation for the airport has been crowdsourced and there will be a robot repair shop If you're flying through Pittsburgh kind of cool Co-executive producer Damien from gloomy outside my hospital window Maitland, Australia. I hope you get well soon then Damien said when I heard about testing of Google tone I immediately cringed at the thought of the security implications. Did you hear about did you read about Google tone? Darren. Oh, that must have been when it was off grid. Oh, no, I left the world changed It's not new. Well, it's new from Google, but other people have done it before you basically if you're at a website And I always I always try to do this with daily tech news show comm if you're at a website you you can press this Chrome extension It makes a tone and then if you have another logged in instance of that same browser It will pop up. I'll give you a pop-up saying would you like to open that link? So Damien said you made an offhand comment about malware bridging the air air gap and moved on But I'm astounded that no one else seems to have made any other comments about the potential risks Associated with the technology designed to bypass one of the fundamental security concepts that a standalone unconnected computer is unhackable I realized that it is an optional extension The user has to click to confirm the link being sent, but we know how easy it is to convince people to click on links that they shouldn't Okay. Yes. No all very good stuff. We actually used a very similar Technology in an air gap situation as kind of a thought exercise really and that was to transfer data over Acoustics just free open in the air very similar to the way that a modem works but you know at a much lower baud rate something like 300 symbols per second is What you can realistically achieve in a room with some, you know regular room noise and It's pretty cool. I didn't realize that there was an extension to do this But that's what it is It's just making tones that the other computer can recognize and what it relies on is software on the other device in this case a smartphone Constantly listening for those tones and accepting them and processing that data So if your air gap to machine isn't listening all the time for stuff, then you're probably fine I would say that the best air gap to machines Very much a limit their input output I would say limit your output to only the monitor and limit your input to only the keyboard and mouse So that means, you know, don't have speakers and Wi-Fi and Bluetooth and all of those are the things that typically, you know Air gap machines are used to hold sensitive data Don't use anything That would allow on sensitive stuff to leave or is sensitive stuff to leave. I also if I understand the Chrome extension correctly You you really have to have it installed On your browser and be logged in to Google So I think you're at risk from a lot more things than somebody Playing a tone that tricks your computer into giving a pop-up that you don't pay attention to and accidentally click and install malware It's a fair point. Don't get me wrong. I'm not disparaging that I think it's a little lower on the totem pole. And so if you're worried about it Just don't use this extension at all. Yeah, good stuff Dave from too damn sunny and not enough rainy Los Angeles is an avid photographer and pointed out that in Google's new photos app When he turned down the new feature to upload all his photos the option for storage was high quality unlimited storage great quality at reduced file size and Original which was full resolution that counted against your quota. So if you're excited about that unlimited It's not gonna be full quality He says my deduction from these descriptions is that unlimited storage will still be compressing your file is to be smaller And then Ted who's a Lumia 1020 user which supports raw photo backups did a little research himself and went And said I went directly to Flickr and Google neither one supports raw at this time Google limits your uploads to 75 megabytes per photo or 10 gigabytes per video They also limit the resolution as well as does Flickr. So If you're a serious photographer who shoots in raw or high resolution You need to read the fine print on Google photos. If you're just an amateur guy like me. It doesn't care. Then yeah, it's unlimited It's good stuff and Dwayne here from somewhere in the desert, which I cannot wait to leave Says you said you have never seen the sharing of photos with the link I don't know if I said I'd never seen the sharing of photos with the link I thought what I said was I'm excited to see Microsoft doing with this a link because we don't see it very often But let's let's say I said I never did his point is Microsoft has been doing this for years Microsoft has some good features like giving the sender rights to allow the receiver to just view download or edit Timespan that they have access and it's all built into Outlook and OneDrive. So thanks for the tip good stuff And thank you Darren kitchen for joining us as always my friend. It's great to have you back We missed you and we're very excited about what's going on with hack5.org as I've mentioned I'm a big fan of ThreatWire, which you know, I don't like to brag but Darren personally delivered today's episode to me So I could watch it. Yes It's a it's a new you know option that we're thinking about Implementing for our special patrons at a certain level hand delivery. It's something you just won't find you know These are handcrafted podcasts and you know, most of them are are free range and fair trade Keep them organic when possible Yeah, we appreciate you can find all of these free range podcasts at HAK the number 5.org And that's where you'll find ThreatWire on security privacy and internet freedom Metasolite minute if you're interested in learning some of the best hacking frameworks hack tip with Shannon Which goes into the basics of hacking as well as tech thing with Shannon Morse and Patrick Norton It's your more general tech show of course hack5 it's been around for 10 years now and we're just you know kicking it old-school and Yeah, and we got an awesome show this week all about 3d mapping using drones So with just a GoPro and a drone you can create 3d models of things on the ground So we went out to the high seas and took photographs of Interesting installations in the bay. They go for all your small batch artisan podcast needs Head to HAK5 Org Len Peralta is an artisan Yes, didn't have real sense He makes art if I work on an artisanal, you know, you know background here, and this is what I do No, this is this is today's image the the image for today was I was kind of taken by the fact that Hackers could kill you Which I thought you know you talked about it and and Darren said that he doesn't think that it's gonna be like You know guys fighting and stuff like that But I like to think that it's going to be guys fighting. So here's an image of but what if it was guys fight What if it was? I think it would look a little like this No, it's a the image today is of a Korean hacker who looks a little bit like Sub-zero From from Mortal Kombat battling our very own Darren kitchen with you looking on in fear in the background, of course And it just I wish I wasn't petrified Darren. I'd help you out You've got my back Literally that's all I have Tom is that not the expression you're making in most of Len's art Kind of the expression of making a most of my life. I'll be honest It's you know, it's you know, maybe next I should have had you I should have had you fiddling him too Tom I didn't think the problem is Len's going off photos of me and all I ever do in a selfie photo that anyone makes me take is that face so It should be your new avatar No, this is fantastic. I I think Darren is going to prevail I think we're seeing you know that point in the fight where it looks like our hero cannot win But don't forget Darren's gripping a pineapple here. That's gonna play into the next move I I think what I'm gonna go for is is the medical device hacks because that's that's where you can actually kill people You know like turn off the oh Yeah, that's where they guys got is a USB drive Darren's not gonna pull like that and I don't know Pineapple versus USB drive. I mean well, you know, well the USB drive is is a little skull So, who knows What's gonna make the skull drive? So where can I find this fine art Len Peralta? Well, you can go to Len Peralta store.com You can purchase it right now. I just put up a new banner today I've got some great prints in there some great geeky pin-ups including a mash-up of Immortan Joe and Beetlejuice called Beetle Joe, which is right there on the front page I got some great prints of Black Widow of Imperio imperio furiosa, I keep on forgetting imperio to Imperator Imperator there you go Furiosa got a whole bunch of stuff there plus if you want to get each one of these images As a digital file high-res digital file to put on your phone or maybe your background go to my patreon patreon.com Ford slash Len back the DTNS lover level you'll get each and every one of these as high-res files Keeps it's environmentally friendly keeps me from having to print them out and you save a little bit too You'll get you get a better deal. I think yeah, so don't go back that Len you never cease to amaze me Thank you so much. Thank you Tom and thank you to our patrons 5049 people who are back in the show Every month they're like look I get enough value out of the show. I'm gonna give you at least a dollar So I'm giving more you guys are the best and so is everybody who backs the show in any way that they can or want to daily Tech news show comm slash support for all those ways you can even find a DTNS mug there Drink some tasty coffee out of it daily tech news show comm slash store our email address is feedback at daily tech news show comm and give us call 51259 daily listen to the show live at alphageek radio comm visit our website daily tech news show comm and Then come back Monday when we'll have Veronica Belmont on the show talk to you then The show is part of the frog pants network get more at frog pants comm


Hey, this is Brett and this 2019 Chevy Silverado 1500 crew cab, six and a half foot box, one LT is stock number 24J3A. I am here at Summit Automotive in Fond du Lac, Wisconsin, you're new and used like duty truck. Headquarter is this, 2019 Chevy Silverado has the 5.3 liter V8 gas engine, it's paired up with the eight speed automatic transmission. This truck has been fully safety done and inspected by our service shop, has a fresh oil and filter change, all the fluids have been checked and tapped off, and it is 100% ready to go. I'm going to go all the way around in this video, inside, underneath, start it up and take a look under the hood to give you the most accurate representation that I can of the truck. Satin steel metallic is the color, I shoot all my videos in 4K, and if you like the video you can subscribe to my YouTube channel, which is youtube.com slash summit auto click to bell notifications, you'll get updates on the videos I do each and every day, as well as having access to one of the largest catalogs of vehicle and light duty truck walk-arounds on YouTube, 8,000 videos and counting. This one comes with the painted alloy wheels, and it comes with Michelin Primacy 26565 R18 tires. These tires look like they have right around half the tread left on them. Frame and underbody is exceptionally clean on this truck, this is a one owner clean title history, clean car facts out of Wisconsin. Get the LED headlamps, LED running lights, front bumper is in fantastic condition, I didn't see any dents or dings on there, and the grille is in really nice shape as well. The hood is in fantastic condition, I didn't see any dents on there, and the passenger side front fender is in excellent shape as well. Another side front wheel, no major scuffs or scrapes on there, and satin steel metallic, really a good looking color, it's almost like a silver, but it's got a lot of metal flake to it, got a little bit of a blue hint as well. And as you go down this side of this 2019 Chevy Silverado 1500, take note of how clean the body is, how reflective and mirror like that paint is. Take these HD videos so if you're far away, or even if you're close by and you just cannot make the trip down, but you're still interested in purchasing the vehicle, you can see the truck, hear the truck, and have confidence in the vehicle you're looking at before you even get here, so when you do get here, there's absolutely no surprises. You can make a smart and informed buying decision from wherever you're at. If this video helps you make a smart buying decision, let your salesmen know that you saw the video that it was helpful, and that Brett sent you, back wheel, excellent shape as well, four wheel disc brakes, back tires have just about as much tread as the front tires and that frame and underbody. For being a 2019 from Wisconsin, it looks really, really good. Very little corrosion under there, lower rockers all look good, and it does come with a nice set of Linux truck gear step bars. Pastner side box looks really good, it does have a tri-fold tonneau cover coming around to the back, rear bumpers in great shape, no dents or dings in there, it does have the rear bumper steps, full towing package which includes receiver hitch, four pin and seven pin wiring, and the tailgate is in excellent condition as well. I didn't see any dents or dings on there, and these are just stickers on there if you didn't like the whole flag thing, you could probably remove those. That tri-fold tonneau cover is in nice condition, I didn't see any imperfections on it, and this one does come with a very nice Linux spray and bed liner. You get LED bed lights, and the bed itself is in fantastic condition, Linux I think that's probably the best bed liner out there, that's what I got on my truck, love it. That tailgate is super light, and shuts really solidly. Coming down the driver side just as clean as a passenger side, I didn't see any dents or dings in the box over here. And for full disclosure, this back wheel is in excellent condition as well. No scuffs or scrapes, does have the capitalist fuel fill which is a really nice feature, never get gas on your hands, and the cab and doors all look really good on this truck.   I'll show you the tire and loading information sticker as well as the vins sticker, no Canadian trucks here, there's the tire and loading information sticker. Inside the 1LT package gives you the black cloth interior, power driver's seat, these front seats are heated, no rips, no tears on them, they look really good, power driver's seat with lumbar, factory all-weather floor mats up here as well, auto headlamps, push button four-wheel drive, you get telescopic steering wheel, power windows, locks and mirrors, you get the wood green trim on the door there, we'll hop inside, check out the miles, the radio and everything that this truck has to offer on the interior. See that this one has 20,593 miles on it, you do get a compass display, instrument clusters, very nice and clean and as you can see you can tilt that steering wheel and telescopic. Comes with the heated leather wrap steering wheel, Bluetooth and information center controls on the right, cruise controls and heated steering wheel controls on the left, there's your shifter for that 8-speed automatic transmission, you get the Chevy infotainment system, AM, FM and Sirius XM radio capabilities on there, you also have your home screen, Android Auto, Apple CarPlay, all your other different apps there, including your camera, there's your backup camera and it's not wanting to go because I don't have a truck on, but anyways you can see that it was working there and anyways you can project your cell phone to the screen via Android Auto or Apple CarPlay and if you have a NAMS system on your phone such as Waze or Google Maps, it's like you have Nav right on the screen, so that's really cool down here, your more tactile volume tune and climate controls including your dual climate controls, heated seat buttons, start-stop capabilities, you can power drop down that tailgate, hazard lights, stability control, there's a plug-in in the tailgate as well, that's what that button's for, factory brake controller, USB-C, USB and an SD card slot, 12-volt power point and a 110-volt, 150-watt plug-in, that might be a 120-volt, 150-watt plug-in. Keyless entry with remote start and power drop-down tailgate and you get the dual-glove boxes on the passenger side, passenger side format and seat are in excellent condition as what, again, as well and once again I don't think this truck's ever been smoked in, smells very clean inside, headliners in great shape, home link buttons for your garage door security systems and lane systems, map lights and on-starred SOS buttons and power sign rear window controls and start it up, take a look under the hood, starts right up, no check engine lights or anything like that, turn all those lights on in the front so you can see how bright they are. I would personally like to thank you for checking out the video today and hopefully from the Sage-D video you've been able to verify the quality condition options and of course cleanliness of this truck all the way around inside and out, see those LED headlights and running lights are very bright. Under the hood we have the 5.3 liter V8 gas engine, engine bay is very clean, runs very smooth, once again this truck has been fully safety and inspected by our service shop as a fresh oil and filter change, all the fluid tab and checked and topped off, there is the emission sticker and this truck is 100% ready to go, shocks are doing a great job holding that hood out and I really can't ask for much more from a used pickup truck, ultra clean inside and out, very very nice, one owner clean title history, I would highly recommend this truck to make quality and condition standpoint, I'd ship this one to California, Texas, New York, Florida wherever, whoever's gonna get it's gonna love it and to see more pictures of this truck or one of our other 550 new news cars, trucks, SUVs, minivans, Wranglers, halftones, three-quarter tons, one tons, you name it, we got to go to that website right there, summitauto.com, full pictures and descriptions of every single vehicle, all at summitauto.com, if you'd like to check out more HD videos you can go to youtube.com slash summitauto, click the bell notifications to get updates on videos I do each and every day as well as having access to one of the largest catalogs of vehicle and like-duty truck walk-arounds on YouTube, in fact in a second you will see a link to subscribe to my YouTube channel in the upper left and link to more Chevy halftone trucks videos I've done in the upper right link to this vehicle on our website in the lower left and a link to one of our latest YouTube videos in the lower right, click those checks out, we're super excited to help you with this ultra clean 2019 Chevy Silverado 1500 crew cab, six and a half foot box, one LT in silver steel metallic, thanks again for satin steel metallic, thanks again for checking out the video remember to like subscribe and share on the YouTube channel I really appreciate it thanks again


some sort of trap? Okay. What the heck is that? They're like the spider creature? Oh, AT phone home. Alright, he's definitely dead. Woo!  RealisticGaming here. Today we find ourselves on Frag 2's channel and we're gonna be reacting to some of his back room videos since they have been popping. He does have like this five little series of videos out and let's go ahead and jump into the first one. Backroom found footage. Oh, the pool house. But yeah, since the back room does have like certain different levels. Oh, he's at the YMCA. Okay. Okay guys, so is water wet? Is it gonna jump in or huh? Some sort of slide? That probably leads to another level, which I believe is the primary back room floor we all see. Yo, he just came out of the ceiling. I think it's so quick. How'd he even manage to hide from it? I think around the corner though. I freaking knew it. He's so, he died, right? He's, he gotta be dead.  So right now we got back room found footage number two. 1996? Something is about to go. Why is he even scared to look around the corners? Bro, he just wants to hug. I can't, I can't read that. I can hear someone screaming. Yo, was that the spider thing that we saw from the first one? Jesus. All right, these just keep getting freakier the more we go. Now we got back room found footage number three. Oh, there it is again. It's it, the freaking clown. Just no clip. Something popped.  It's an arcade. I knew the back rooms had some fun and the wife of this room reminds me of like the FNAF security breach, but he didn't pay the electricity. Okay, no creepy monster at the end. Now we got back room found footage number four. Why is it so bright and glossy in there? Is that a picture of the room? Water looks scary, bro. What the heck? Oh, we got flashbangs. It was like a giant ship. Ah, yes, classical. Very nice and fancy. Can't be afraid here. So he just wants to jam. That's a lot of wind. He is now at the top of Mount Everest. Oh, poop corner. Yo, what was that thing? All right, moving on. Let's get it. Let's go to the newest release, which is the back rooms. Crimson forest entity found footage number five.  Hey, could that be someone else? Well, there it is, ladies and gentlemen, the back rooms. If you guys have any knowledge, I'm pretty sure you guys are very knowledgeable on this. Let me know because there's a lot of explaining to do. I'm pretty sure. And you guys always seem to know everything about this. Shout out to Frank too for the awesome videos. Freaking awesome. Keep going. And can't wait for part six. See you guys in the next one. Peace.


All right, welcome everybody to the October 20th technical oversight committee call. As you are probably all aware, the next foundation calls are held under an antitrust policy. So here's the notice of that if you have any sort of questions, contact. Let's see, Andrew up to grow from the firm guess more up to grow or your legal console. The other thing that we must abide by on these calls is the code of conduct, which is linked in our agenda. So we have two announcements today. The first one is one that you've heard many, many times before the Dev Weekly developer newsletter goes out each Friday to hundreds of hyperledger developers. If you have anything that you would like to include in that. Please leave a comment on the wiki page that is linked in the agenda. The second announcement that we have is that the TOC nomination period is open. The nomination does close October 31st end of day. If you would like to be considered to be elected or appointed to the TOC, please. Follow the process of the nomination process that is linked there in the agenda. Any other announcements that anybody has. No, okay. So we did get the fabric report in a few days back, and we also got the tech that report in last night. So I didn't see any specific comments coming in on the fabric one. Let me just reload that page here for myself to make sure. There are no comments yet, but there are quite a few outstanding reviews that need to happen. As far as the cacti one, I don't think anything has occurred there either. No comments yet. So we'll leave these both on the agenda for next week. But does anybody have any questions on those two reports before we move forward. Okay. And then just a reminder if anybody knows anybody who might be willing to put together the Ursa report. We are still waiting on that report to come in. We don't have any reports that are due next week. The next one that's upcoming is the sawtooth report that's due on the 27th. So I guess it is due next week, but yet we will probably have it until the 27th. We don't have any additional ones on the agenda for next week to review. All right. So with that, we do have one discussion item today. It is the non-creds project proposal. I have seen some comments coming through on the actual for request and Stephen has made updates as those have come in. But at this point I'm going to hand the floor to Stephen to see if he wants to take us through that or if he would like us just to start to comment on that. Okay, hang on a second. I was going to. So we've, we've spent the last couple of weeks putting together the proposal. Can I share screen? Of course. Yes. Oh, I see. I've tried. It's funny. I'm trying to start my video as well. We don't do that here. Okay, hang on. Let me move one more thing. So, let's see, there's the. This is largely, so we've been working on this as a community for the last several weeks. So I presented about a month ago to the TOC to the TSC then to TOC now. And since then have been soliciting soliciting input, putting together a skeleton proposal and then getting input from the community. So what you're seeing here is that input converted over. We have. It's essentially the, what I presented in a presentation a month ago. So I don't think you want me to repeat this presentation here with all of what is largely the same. I made a couple of tweaks to the slides just to provide updated data. I do have a couple of updates since then. We had at the time I talked to this group. I would we were just heading into the rebooting web of trust. For those not familiar with that rebooting web of trust brings together a number of identity, people in the identity community. And, and SSI community, it's Christopher Allen organizes it so SSI is definitely the focus at that almost everybody that participates submits a proposed paper to work on at the conference. And at the start of the conference, though, the ones to be actually worked on are narrowed down to a smaller list of things that people want to work on. And on creds, despite the fact that in addition to the shirt I'm wearing that I got from the Hyperledger global forum I managed to get COVID and so was not able to attend the our law conference the paper that I submitted did get worked on. I was very positive. And, and so I worked sort of on the side on that on on another paper but in the meantime another group continued to work on the and on credits paper, as I submitted it and continue to work on the specification and working on it so that was really good. A lot of progress was made actually there on the impact of ledger agnostic and on credits and this, and what is the genesis of this whole idea of moving and on credits out of Indy. Because an on credits can be used pretty easily in fact with different storage locations publication locations. And continued work on the ledger agnostic and on credits. We had a number of new contributors to the non credit specification itself. So that was really good outcome from that we had had a pile of new pull request put in and and new contributors that are continuing to work on it. And as well we came up with an approach for putting an on credits into the W3C verifiable credential standard data model and this was somewhat of a surprise was not expecting that quite frankly when I, when I talked to this group. A month ago, that was not really on my agenda we had some talks at the conference and discovered that, wait, this isn't very difficult to do. And since then have implemented a first draft of that where basically taking an on credits, as it stands today and just putting it into the W3C verifiable for data credential data model such that it can be moved back and forth in either production and, and yet still processed exactly the way and on credits is intended to work. So that that's some exciting and interesting things that have happened, even in the last month. As I mentioned creation, evolution of the hip. And then just gathering stated support for the proposal to move an on credits out of its own project. So that's the things that have happened since then, as I say I've got this presentation that I gave a month ago and I suspect you don't want me to go through that again. I think everyone on the call was, was that that previous meeting so that's the material that I had thought of preparing and I did get a number of comments from from to see members and appreciate that. I think I've addressed them the only one that I did not specifically add a level of detail to was the question of link secrets and I do have a slide here on link secrets if, if we want to talk about that and deep dive into that. I just thought for the proposal it's going quite deep into it. And I'm happy to add it but I didn't think it was necessary appropriate for the proposal so that's where I got to, and we've got to as a community. So, looks like Nathan Tracy I'll turn it back to you and then let you handle the questions and organization. Thanks, Steven. And thanks for letting us know what's been updated and changed since we last spoke. Nathan. When this idea first came up I was really worried about whether it would dilute some of the work going on in the community. And I think Steven deserves a lot of credit for all his work cultivating the contributor base on this proposal. And if you look at who's said they're sponsoring or supporting the list is a lot more extensive than I expected. And it just looks like it's setting up to be a really good improvement to take advantage of not only better decomposition of how, you know, all of the identity is organized hyper ledger but also to help get more community contributors excited so thanks Steven for all the great work on the proposal. I'm pretty excited about what I'm seeing here. All right. It definitely is an impressive list. Any comments or questions on the proposal. Peter. I was just curious as the, is there an implementation also that will move out of Indie or is it just the standard. No, there is an implementation. So there's two implementations in Indie right now. The plan is to take one of those which is called for lack of a better term the developer made credits. And that will be basically what we'll do is we will split. And I'm hoping someone knows to get have magic because we don't want to lose any history but basically split a repo into two. One will remain with Indie and will have the non creds part of it removed one will move to the non creds project should it be created and have the Indie parts removed. So the history will hopefully be maintained in both, and then we'll move forward with that with the two repositories so the non creds is, as I said it's already been used in a number of ways. There are places to implement non Indian on credits and this will will then evolve that implementation to formalize the separation of the non credits processing the implementation of the specification from the storing and retrieving of an on credits objects from a verifiable data registry. So that's the that's the plan for the software. No, it's very much software. Thanks, Tracy. Hey, Steven. So thanks for addressing the questions on the GitHub, and quick follow up on that. So this proposal looks looks really good. And this is kind of a project that would bring in more participation and it aligns well with building those reusable components are building those pluggable components that would allow us to utilize or give flexibility to consider the end users right and quick question on the implementation aspect. I know in the proposal you mentioned that they can be a close source or open source or you can call it the components that deal with VDR right the the VDR part those can be either close source or the open source parts. So within hyper ledger you specifically mentioned about fabric and visual, and I'm just curious if you have identified people who will be working on that or is it that you'll be working with those fabric and visual teams in coming up with the solution so how is that in plan. So the fabric, a fabric implementation has been done. So there's a member of the community. A team that did a fabric implementation. Again, just based on what was already in in the library so that's been implemented but without benefit of the, the proper decomposition if you will. So the expectation is that will be updated and modified. The Ethereum one, quite frankly is speculation that we came up with at at our watt but there was a number of people talking there that that speculated that Ethereum is likely a, and particularly with the, the, the recent speculation that that Ethereum had that makes it a pretty good possibility of it so that was more speculation but but my expectation is with the strong push right now in identity and and the interest in identity SSI style identity decentralized and verifiable data quite frankly. I think it is a, a likely strong combination so that is more speculative versus the fabric one where somebody is actually already done an implementation and it would be moving that implementation. Does that make sense. Yep, thanks to you. And then of course, there's people like checked that have their own ledger they're likely to put their implementation in their own repose checked I believe is is open source so those will be open source ones but I could envision others doing a proprietary one and and and where the where the close source might come in but but quite frankly, that's for them to provide to people so that they can you make use of an on credits on their platform if that's what they want to do. Got it. Probably, I know, somewhere, I remember reading in the proposal but just for completeness sake of this argument. And so there is areas community also involved and willing to adopt an on credit. Yes. Absolutely. So these has most of the frameworks in areas already have not all but most have a non credit support. And this change will be relatively minor more or less it will be dependencies within within the frameworks themselves and so should not affect business logic and really is just part would be part of a minor upgrade. For any of the areas frameworks and that's the certainly the implementation plan and interest of the community. Thanks to you and all the best looking forward to. All right, thank you, Dan. So this is a bit more of a commentary than an actual question. This aligns with something that's happening in some of the Ethereum layer two spaces they're calling a modular blockchain, breaking out these modules and reusing and everywhere. So in general, I view this as a positive development for the for the identity space that there's a Lego brick you can plug in wherever you need it's consistent reusable. So, good job. Excellent. Thank you. Any other comments or questions on the proposal. Anybody have any objections that they would like to bring up any concerns that they would like to bring up. I just want to reconfirm I think it is written out in a spec but Indy will continue to function with non credits and will be continually kept up to date with how non credits evolves in the API is with it, correct. Absolutely. Yes. So what we think is by expanding, you know, the basic strategy from an indie perspective is by expanding the user base of a non creds by by removing roadblocks from from the adoption of, of a non creds. It's down for, okay, where do we want to host are an on credits objects in the will be a an excellent choice. And so it's a sort of rising, rising tide floats all boats strategy from an indie perspective. Okay, any other comments concerns. We have an opportunity before we call for a vote so if you do have anything that you're holding on to hoping that this is going to go on till next week. Now is your time to speak. I was talking about her service raised. If it's a good time. If I can talk to someone in our team and help with reports that I can help with reports, but only if I have enough data to actually help. Awesome. Okay, please contact me and I'll be available every day essentially. Could you put your own chat is disabled. Yes, to me. Use the use the discord to see channel chat. Okay. Yeah. Stephen, I would contact you right. Yes. Sure. Okay. Thank you. Thank you. Any, any final comments, questions, concerns, objections. Let's just do it. Okay, I guess that's the, are you making a motion there are no. I am very much. Okay, we have a second. All right, thanks for that. All right, so we're now voting to approve the non credits project as a top level project within hyper ledger. Right. Did you want to take us to a vote. Sure. On the matter before the TOC, Angelo. Yes. Or no. Yes. I consent. Yes. Arun. Yes, Bobby. 100% yes. Okay. Yes, I like it. David. Yes. Grace is not here, Jim. Yes, for me. Okay, Kamlesh. Definitely. Yes. Nathan. Yes. Peter. Yes. Tracy. Yes. And Troy is not here. So, you know, it passes. Congratulations, Stephen. Awesome. All right. Well, that was a lot quicker than I thought we'd go through things today. Appreciate that everybody for having reviewed that and came with your questions ready. I wish I had prepared the presentation that I have next week for this particular agenda, but we will be talking with the prune folks next week in the meeting. So before we close out the call, any, any other discussion items that we should talk about today. Everybody just hovering over the leaf button. All right. Well, thanks everybody for joining today and we will meet again next week. Please take time to review the open reports that are out there and have a good week. Thank you.


Is the reason why big pharma and the FDA haven't gotten involved just yet is because marijuana itself remains a Schedule 1 drug? Does that have anything to do with the lack of clinical studies into the effects of CBD? Yeah, that has everything to do with it. It's really difficult to study drugs that are Schedule 1 and there actually are pharmaceuticals that are developing drugs that use cannabinoids, not just CBD but THC and CBN and CBG. But we will definitely see more of them as it becomes better regulated. And the one pharmaceutical that has the drug that's been approved, they've done a lot of the studies and so I can't be totally mad at them because they have in some ways paved the way to say, this is a safe ingredient, like there were no, you know, negative side effects to the people who were in the trial and so that helps.