さようならです。よろしくお願いします。初めまして、ネストです。スペインから来ました。さらにショートです。よろしくお願いします。よろしくお願いします。ごめんなさい。すみません。私は日本人のことを知っていますが、私は良いことをしました。まず、このアプリのアメリカルに私にこのアプリに彼がここにいることを教えています。私はハッキンに関することを聞いています。そのため、私はここにいることを知っています。私はあなたの国に認識することを愛しています。私はもっと仕事をするために彼はよろしくお願いします。ハッキングワープを話す必要があります。私はテンニクアルを試してみてください。私はあなたを超えないようにしています。まず、こんにちは。私について話します。私はコピューター・サインス・エンジニアーです。私の最も重要な部分は、私は非常に興味の人です。2015年にスクーリーを始めました。私はエンジニアンス・エンジニアンス・リスポンスを作りました。彼らのリスポンスは、何か悪いことが起こり、彼らは全てのものを取り除く必要があります。2019年、私はアリスポンスのためにインターネット・エンジニアンス・エンジニアンス、私のお世話に行ったことができました。それは私はこれを会 beneficial 私はこれを会合している。そして私は何か悪い方を想像されたことができました。私はアランティゴシアンの中で私はアロニアンス・エンジニアンス・アロンをアランティーゴシアンの中にここに生きているそして沖縄の沖縄はとても彼らはとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもとてもだからクリスマスが 誰かが仕事をしていたのかこの人を不能に 使っていたらいいですか例えば スリッピーの人たちが飲み物を飲みより植物を使っているのは 努力を使える場合は 私はネットキッズをオーガナイスして、ボタンメイクをハッキリしています。ハッキリを使っているのですが、サイバーセキュリティとコンピューターハッカーを話しています。このプレゼンテーションは、私のサイバーターのペットです。ここで、ハッキリしています。このプレゼンテーションは、ハッキリしています。ネットキッズをオーガナイスしています。コンピューターハッカーは、サイバーセキュリティとコンピューターハッカーを話しています。普通にオーガナイスしています。最終に心配があり、私の若い人はハッキリしています。シャイバーセキュリティは、私に心配があり、私の若い人はハッキリしています。白のハッキリしています。ハッカースはセキュリティアナリストやエティカル ハッカースや also members of the blue team is also known as like that right There is a gray area in the middle. Those who normally have good intentions but do things in a illegal wayis what we call normally gray hat hackers like for example john snowden if you remember some years ago he he released some papers very interesting papers to the world with a good intention but obviously illegallywell what hackers do normally they create malware or they inject malware in the websites and malware is just so we're intentionally designed to cause damage to computers to clients to persons to networks so whatever and malware has a lot of names probably some of them sounds to youbackdoors try and horses ransomware but then I'm not going to get deep into this as I told you cyber security is a hugefield of study ok so web security is just one of the fields inside of cyber securityso in the real war normally all of the people that are here has at least two identities right the real one which are as personsand the digital one normally conforms with a lot of nicknames accounts and so on around the internet so if you care about security in the real war why not you care about the security in your digital war socyber security is the security in the digital world and web security is just a field specially all that happens through the port 80 or 443 if you are a little bit technical savvy rightthen this slide is intended to blow your mind a little bit ok so there are six interesting facts here the first one say hacking is almost never client client orientedI mean doesn't mind if you have a site with store for kitten or to rice phones for something social something like that they don't mind is they are just crawling internet and finding some vulnerabilities and just if you have that they don't mind what are you doing they just get your siteso normally it happens because you or your company or the company the hosting company or the administrator you have hired for that is not making a good monitoring or maintenance of the site normally ok so that's the most typical reasonanother interesting fact here is that the people doesn't understand what SSL certificate is so let me just explain that SSL certificate is not an anti hacking shield I mean having SSL certificate is not going to protect you to be hacked SSL certificate is only intended to assure the communication from your device to the serverso if there is a hacker hacking your server is going to hack securely now another fact is interesting normally in security we are behind hackers ok so patches and security updates appears almost always after hacking exploitswhich translate means if there is an update or a patch of security means that there are some hackers around the world with information to hack your site because it's updated okand the next one is a latin q quote I always use is something just to give some perspective it means human being fails in latin sounds something like a rare humanist ok so human being fails it means everything you do or we do as humans could failand in turn based on that security will never be 100% effective so if you install a lot of plugins if you have a firewall if you have SSL if you have any of the security things in your site it won't assure 100% effectiveness of security rightit could be 90% or something like that but there is always hours rightthis is a graph just got from some reports we have in sukuri you can visit sukuri.net website you have blog site and also you have some reports this one is very interestingas you can see the WordPress is clearly the most targeted platform internet so this is not meaning that the WordPress is insecure ok that means that is the most targetedit is because also the 34% of the world of the worldwide website and around the world and internet is made by WordPress it's something like one of every threeso but this is interesting the hackers are focused especially in WordPressso now let's go forward to the art of words right we have to put ourselves in the hacker's skin we have to try to think as a hacker as a black hat hacker okand try to understand what they want from our platform what they want from our website ok so let's get into the mind of your enemyfirst of all what the hacker what the black hat hacker wants from my website the common targets are normally users information so if you have users in your site customersif you have a subscriber or something like that they are probably an email address name nicknames and so on those are information that hackers values a lot okuser info is important also the database information everything you put in your website normally is in the database as wellwebsite content if you are selling products like for example plugins or you are selling photographs or something like that normally you have them in your media manager in the WordPress and so onso it is in the in the in your website so maybe hackers are interesting on that as wellinfrastructure is important as well normally people doesn't understand this part because it's a little bit technical but there is people that use your website as a platform for example tocrypto cryptocurrency mining for example ok so or they can use your website but not website your server your server resources for example to attack another one okso infrastructure is also important they may need your website to use it in a botnet as well or they need your reputation so if you work hard during a lot of time toto rise your reputation in the social networks or in the search engines because you need to be in the first position something like thatis a real risk if you get hacked that you can see how your reputation or your hard work to be in the first position in the search engines something like that just vanish in the airso taking care about the reputation is important as wellso there is a quote in the art of war saying something like know yourself and know your enemy and you will win all the battles right so let's know our weaknessesthere is a lot of course but these are the most important the first one is the most important in fact you are we are as users the weakest point alwaysok so you can scan you can be a scam you can use bad passwords you can or easy easy to hack passwords or you can justknow you can just install freemium plugins just because you can you want to save some money and the freemium plugin hasinside a triangle there is a half inside something that hacks your site so at the end we are the weakest pointpassword as I mentioned are vulnerable to brute force attacks for example this image is very typical don't use easy passwords just invest a little bit of time trying toremember good strong passwords or use a second factor of dedication method is another way of making this strongerthere are some leftovers I mean for example you are making a new version of the website and if you want to make easier to yourto the owner of the website to get into the website and check how it's how it is going you normally going to create a very easy to remember loginsomething like admin123 or something like that so when we do that we have to be very careful we have to manage to control this kind of things because the lessovers are other of the main reasons or the main factors or the main vector of infections in the websites so I can hack your site for example just getting into the dash new website website and thenexploiting your password because it was very easy or something like that so if you create this kind of things remember to remove if they are not usedthe other big reason is outdated or vulnerable software so maybe if you are not very technical you don't understand that your website is just a layer of the whole systemso you can be in a hosting a very cheap hosting or something like that where the PHP version for example is very old or the Apache version is also very oldenginex or something like that so having your website in an outdated environment is very dangerous as welland being inside of your site if you have planning you have themes and you don't update them you are putting your site in riskalso as I said there even if they are disabled so if you are not using a planning remove them if you are not using a theme remove itok don't disable or don't just keep there and if you will do that please update anywayso the last one is very obvious just secure your connection avoid public wifi you can be vulnerable to man in the middle hackerspeople that are in public spaces just looking what the people are just transmitting through that networkand you don't know how many information you can gather in just in an hour in a place like a university or like a coffee a Starbucks coffee or something like thatok so let's go into the hacking workers the process so this is a very short slide but let me explain a little bitfirst of all try to imagine your website as a castle and try to imagine your security as a wall around the castle okso a hacker can hack your site if there is a hole in your wall so that hole is what we call vulnerabilityand hackers when they find a hole they click create exploit which is a software that leverage that vulnerabilityand once they get access to your site they inject something they can inject just only final code for example spam thingsspan in the comments spam in your folders in your directory tree directory a backdoor just to get access to the website latereven if you have plugged that vulnerability and using a backdoor you can later inject whatever you wantand use the website as a bot node or inject more final code whatever you wantso all what the hacker needs is a hole in your wall that hole can happen in any momentthere is a lot of networks of black hackers around the world just communicating between themand if any of them just find a hole they gonna exploit thatimassively so they gonna find for example if they now we are in the version of WordPress 5.3 I thinkI think there is a 5.2 or 3 or something like that put 5.2.3 or something like that there is a vulnerability in the coreso they can use it to hack so people or hackers are black hackers are just crawling internet to get all the WordPress not updatedjust to use that hole with exploit so as I said vulnerabilities just a back in the code or a possibility of misuse a legacy codethat can be exploit to perform an atherisa actions within a computer systemexploit is just the software to leverage that vulnerability and the backdoor is just malware injecting your sitethat allows remote execution of code even if you have plugged that vulnerabilityso when you get a backdoor in your site you are boostok this is a very interesting website if you are curious about is the bpscan vulnerability database I think is sponsored by automaticthis is a list of known vulnerabilities so you can check from time to time to check if the plugins you have the version pluginsare vulnerable or there is something around the world a wave of attacks specifically focus in aversion or a specific version that you can see here ok so bpvulnerabilitydatabase.com is very interesting if you are Koreanso let me just show some examples I selected for you there are a lot I have to I had to select just three of themthe first one is defacement probably the most visual the most spectacular one so could you imagine if my website is this oneand tomorrow when I wake up in the morning I see this so I have been defaced ok and this is a real example for examplefor in this case a photographer gallery this is an extract of the website ok look like this and one day just look like thisso could you imagine the stress of the of the customer something like oh I've been haggon could be my reputation gonna begoing to law so it's important ok what happened here if you are curious enough is like the hacker just got into the websitetook a picture of the website and then just code this fancy message in the top of it we name it as an index.htmailand since the majority of the web servers around the world load at first the HTML files instead of PHP onesthis one was the first page when the people try to load the domain just removing the index.htmail was enough to fix this issueor maybe reinstalling the WordPress core foldersthat works in a lot of cases that works so another case for example pet store the day after you can find thisthis is as you can see this a message a political message right is about free Syria people and so on declaring war and so on rightas a bonus I can just show another one I love the design of this oneI really don't understand what this says but it's probably about security thing around the world something probably aboutTarkish people or something like that ok so just summarizing the placement is a partial or full replacement of the website front endvery obvious easy for to detect users can detect it easily than you because you are not visiting your website every day so here thenprovide to them of enough channels to communicate to you so they will help you very a lotespecially it's important that when you can get hack the most important factor is the time so the sooner you get that you have been hackedand you fix that will help to the lose of reputation and will help a lot okscanners also detects very easily at the end is just a matter of awareness social political measures for indications oryou know claiming another example is the black hat seal or spam I mentioned it before for example here we havewell design agency I guess cover the name of the of the agency but for sure the banner is not intended to be there so probably they don't sellviagra probably I don't know that they're probably so what the hackers did is just put that banner in your website so everyone that comes into your website and try to contact yousee that you sell by viagra right or for example this is a cleaning company who got the heater also full of spam is in this case is just textsomething like selling applications in Google Store or something like that but it's clearly a spam right so the result of this if youare if you are if you don't get it soon is this you get banned by Google by other blacklisting vendors and then you can get yourthis fancy tag in the in the Google search results you're in this side maybe hack so your reputation will be affected for sure okhere is another example at the at the left you can see that you can trying to find a website in Google there is this kind of measures like cheap night shoes orsomething like that right and in the right you can see a spam injectively in the in the directories tree. Those that have been highlighted are spamthey inside of them they have just a lot of html web page with spam terms right what is intended here is to target your CEO or yourreputation maybe your competitor just hire this hackers and try to lower your reputation because they want just tosurface you in the in Google or something like that or they want just to not to make you not selling so much as they the detection of this is very easy as well because thespam terms are always more or less the same ones so as I always says here your users right DDOS attacks botnets this is a little bit difficult to understand let me just introduce some definitionsDOS attack is a denial of service which means it's overhauled the application with a huge amount of petitions if you have a person who just get tickets and you put 500 of people giving tickets to that guythe probably the guy gonna collapse okay so a DDOS happens when it is a distributed distributed attack so it's not only a lot of petitions from one point to another point it's a lot of points asking for a service to a websiteand this normally happens because there is a botnet there is a net of computers or a net of websites that has been that have been hacked and they coordinated attack or ask for information to a website okayso this is a graphic but you can just check later if you want so there is a this site north is a real time map of the DDOS attack around the world so here you can see a normal situation just maybe tending to be very calmnormally it's a little bit more busy but in 2016 if you remember all the services the common social network services like for example Netflix twitter whatsapp and so on some others just fell down and it happened because of this a lot ofnotes around the world attack specifically one service which is called a Dean that has been is used by these services around the world that year where also happened also another very famous attack but it was performed byCCTVs ok so this attack looks like something like this this is a graphical representation of a ddo's attack so it's the idea is clear rightwell affect to infrastructure is very difficult to to to point this kind ofof attacks normally because you detect a strange use of resources or you have a fire integrity scanner you have someone dedicated to to check that so the here is recommended to have a wolfa web application firewall ok target normally are just service resources or just to make your side as a zombie noteso we reached the third part of my presentation this is a very quick one what is the what counter measures are recommended ok first of all let's talk that if something bad happens which are the character in this story right first youyou your site the admin and the owner has been has to be notified ok but also your users and clients if there is for example a credit card leak ofin a credit card information leak or if there is something any information that may affect to the for today users information you have in your website or in your platformday you have to you have you and the you have to inform there you have to notify them ok so the second character in this story is a hosting provider normally a hosting provider and normal oneshould give support when you your site is has been hack just because they restore core folders or because they restore a backup or something like that normally the 70% of the security uses issues can be fixed by the support of thehosting provider and after that you can just try to check with a security expert externally or internally likes a crew or any other companies is important to understand that security is nothing isnothing is nothing like a whole right is a is just a lot of liars one in top of the other so the first liar of security as I mentioned before is you because you are the weakest liar so you have to be educated of what you clickwhere you click what is the information they the people need and how and when the second one is your device if you are using a laptop or a mobile phone or something like that has been hack or this virus inside of something like that is another layer you have to protect with an antivirus yourconnection as I mentioned before SSL your website should be behind a website application firewall you have to take care of your credential not only yours but only the credentials you give to your mates or your clientstry to use the second factor of dedication if possible the site security so you should monitor and update your website as much as you can the server security the database and of course is not only just put an eye on them you have tomaintain this you have to do all the whole loop in this security liars is in base system as much as you can so there are some measures normally I divide them in reactive and proactive reactive means that something happened already happened so what we are going to do is just paymitigation and proactive means all the measures that you take before anything bad happens so it's a risk mitigation right reactive measures as I mentioned some of them for example scan your site first to know what happened reactive meansthat already happened something bad so scan first your website I recommend site check but there are some others like for example how do I know if my website have been blacklisted so virus total dot com is a website for thatthen the CRC check remove and change which means for example in this case this is a WordPress users table right so here's there are the users of this website I justprotected those that are like it but those that are not is very they are very straightforward right ACME with key and the picture also helps a lot with no email is an administrator and also has a post whoand there are some others for example the managed BP migration is not a fake admin is just a leftover of a migration process so remove them is your site is not in migration right now and another thing is interesting here isthat this website I think yeah I think that you cannot see here but there is has six six updates and six updates available right so please every time you see you know here in the top of the admin bar something like a number indashboard of you knowtelling you how many updates are available click there and update ok so check remove and change in this case for example check the admin users and remove them also do that with the plugins I havephone a lot of website with sixty plugins is impossible that you need sixty plugins ok even if you are a very very famous magazine you don't need sixty plugins so probably you have a lot of them use but some of themare just disabled because you use seasonal or because you use anytime and then is not needed anymore update your site because updating overwrite the core directories and file so if the infection is in the core directories and files and core files just updating youjust remove the infection right and as a last measure restore a backup keep in mind that restoring a backup could imply a loss of information right because maybe you did a backup three days ago and all the happens all the what happens in the last three days you will lose that ok talking about proactive measures before happening but something bad happening reduce admins plugins and themes do backups updates investing hostingand security and install a waft it is important this slide is very important the more doors you have the higher risk so I always say to cursor what is cursor meansif you are going to do some admin stuff ok have an admin user but if you are going just only to publish user a limited count for that try to remove the number of admins try to contend that applying the themes alsodon't reuse password try to change it periodically and try to use the second factor authentication as I said and this is applied to all liars not only in the VP admin if you have FTP accounts if you have C panel if you havehosting provider account change the password from time to time and if you have been hack another thing that you have to do is change all the password as well okbackups have a backup strategy but never never store the backups in your production server always store them in a in another server another difference outside okclean functional backup will be your preference best friend in a bad day and I want to highlight functional I mean I have phone cases that the people say I know I have a backup I will send to you and when I receive it it's corruptnot disabled so it's not only having backups only know that they are functional update always this is important keep in mind that the cost of getting your website from a hack situation and recover all the informationrecover with in front of your users will be way much more cost that recover your website because it's accidentally shut down because an incompatibility when you update or upgrade your website so this graphic is importantautomatic updates enable for our clients are only important for the 30% the rest of them are just when it's possible when as soon as possible when the client wants or whatever so our black hat cut there is very happy when they find this kind of thingsit's important to invest in security in hosting keep in mind that hosting is the first layer is the first one that protects your website rightI always said if you invest in a sharp hosting keep in mind that you can be in a very noisy neighborhood ok if you want to be in a chalet alone just at your own it's going to be a little bit more expensivehow much of your budget investing web security zero for almost 50% this is important as well so free day for our black hat hackerand the last one WAF the web application firewall is your guard art this is important I'm not going to read all of this but keep in mind that WAF is something like a washing tunnelevery connection goes through like for example you can see here all the connection goes through here then is clean all the bad connection just our drop and then the good ones hit your site so this is very interestingthis is one of the quotes I want to share with you everybody needs a hacker so ありがとうございますif you have any questions here I am


Hi, I'm Hannah and I'm here to show you Givat Ha Tormosim, a hill or mountain near Bechemesh in the Ella Valley where David flew Goliath, Tormosim, which are lupines in English, and Kalaniot, which I believe are nemonies that look like poppies. Let's go check it out! Tormosim in English means lupines and this is the start of the flower blooming season in Israel. It generally runs from late February until May for the lupines, at least there's lupines blooming here, as well as other flowers, but I'm not a botany expert, so I'll leave the introduction to that. This place is located just outside or close to Bechemesh, which is another city in Israel that's a bit south of Jerusalem, and there's a really cool valley near here as well. The scenery all around this area is beautiful and just about a mile further that way up the road. There's this gigantic satellite station, which I might have a chance to record on the way back to Jerusalem. In Jerusalem, the Bible Hill Givat Ha Tanach, where I've done a few videos from before, is also one of the really popular places to go to see this, but this is Givat Ha Tormosim, listed on Google Maps, and probably if you want to come and avoid the crowds, best not to come on a Friday before Shabbat. You can see poking out here in the distance is Bechemesh itself. Lots and lots of high-rise buildings, and this is a popular place for people who live in Jerusalem, but are looking to live somewhere a little bit cheaper. It's essentially, it is a completely different city. It's about a 30 to 40 minute drive outside, and it's a nice place, and that's what you can see in the distance there, little cave also. We are on Givat Ha Tormosim, and I'm shooting on the Sony Alpha 6000 for the first time ever using a mirrorless, because I came here with my wife and she is interested in photography. I'm a camcorder guy, but I thought it'd be interesting to see how the footage would turn out using this. I haven't mounted up on the Yulanzi MT34 multi-functional tripod, and you can see all around me here.


Labs working on onboarding data at scale onto the Filecoin network. He is focused on getting public data sets onboarded to the network via the Slingshot programs and is also part of the Filecoin Plus governance team working on client onboarding and trust. Reach out to him at any time to chat about data cap, DAOs and some excellent puns. Today, Deepol lead us through Filecoin Plus and data DAOs. Welcome. Thank you. I hope everybody's doing well. Sorry I couldn't make it there in person, but it looks like a fantastic event and really well set up.  Thanks for the excellent intro. I'll probably just skip this slide in the interest of time. Just covering, you know, leaving this up mostly for the bottom where if you need to get a hold of me, find me on Filecoin Slack as Deep Kapoor or find me on Twitter, Deep K Kapoor. Happy to chat about any of the things that I'm going to be discussing in this presentation or anything at large with regards to large scale onboarding of data under the Filecoin Network. So what I want to cover today with you in the short 20 minutes that we have is number one, Filecoin Plus. For those of you that aren't familiar with it, we'll go over the overall sort of core concepts of the program, how it works, how the pieces sort of fit together. We'll talk through Slingshot and the various Slingshot related programs that exist today. And at the end touch a little bit about how these things sort of are moving towards the direction of doubt or doubtification. I would say sort of a larger scale understanding of what it actually means to do that and then how you can get involved and what's next. So without any further delay, let's talk about Filecoin Plus. So Filecoin Plus by definition aims to add a layer of social trust to the Filecoin Network to incentivize useful storage. What does that actually mean? Great question. So we're going to say a bunch of things here and I don't expect you to understand all of them, but then we're going to dig into each of the components and then hopefully it'll start to make sense. So the first thing I want to tell you is that in the world of Filecoin Plus, we have these different stakeholders. You can see them in colored boxes over here. I don't know if this screen is big enough for you to see this in person. And so I'm just going to walk you through it because the text might be a little small. So you have community governance, root key holders, notaries, clients, storage providers, and miners. So the idea is that root key holders, notaries, clients, storage providers interact through the allocation spending of a resource called data cap. Effectively, notaries serve as a key stakeholder position and we'll dig into each of these by allocating data cap to clients. Clients spend that data cap in storing deals on the network. So specifically clients who are data owners who are bringing data to the Filecoin network use it to make deals. And this will start to make very soon. But then in making those deals, storage providers who receive deals that are sort of coming in with data cap receive a boost to the adjusted power on the network. And so you're at a crypto account conference. It's important for us to explain to you what that actually means. The way Filecoin distributes its rewards is based on power. And if you're taking deals that have data cap on them, then you're getting a 10x boost to the relative power, the relative footprint that you're occupying on the network with regards to that deal that you're taking on. So if you're taking a 32 gigabyte deal or a gigabyte deal in this case, it looks like 320 and inflates the rewards that the network is giving you. So in essence, this is a network-based subsidy of dealmaking between data owners and storage providers. Now let's dig into what each of these different stakeholders are, define data cap, and sort of help this all make sense and why it's interesting. First things first, what is actually data cap? It's a novel, generated resource within the Filecoin network. It's programmatically generated. We'll talk about how that actually happens. But as I just mentioned, clients and data owners use data cap to make storage deals. It's a one-time use credit. So it's consumed as it is used in those deals. And then the storage providers receive a 10x quality adjustment to the power for serving deals that have been made with data cap. So back to the sort of core stakeholders of Filecoin Plus and sort of defining them a little bit so you understand how they all come together. First, we talk about the root key holders. Root key holders are executors for decisions made by the community on the blockchain network. So they're reputations, sorry, they're representatives of reputable organizations that are in like our ecosystem effectively, Filecoin, IPFS, Web3 sort of spaces, but ultimately what they actually are are their signers on a multi-seg. And that multi-seg has the power to invent data cap and issue it to notaries. And notaries being other addresses on the network which are then flagged with the identity of a verifier. So just recap, community figures out who the notaries are and we'll talk about that in a second. Root key holders are the ones responsible for executing those decisions on behalf of the community. This typically means assigning the value of data cap to a notary that they can allocate as well as the status of being a notary on the network. Notaries are arguably the most important stakeholder that keeps this engine going. Their role is to do KYC and due diligence on incoming data owners and clients out of the network. The goal is for them to identify trustworthy clients. So this goes back to the top line sort of definition of Phil Plus, which is that it's a social trust system, right? And so notaries are the ones that are actually looking to establish that trust to figure out who the clients are that are worthy of receiving this data cap that will give them these extremely free or cheap storage deals. And so the idea here is notaries spend whatever effort they need to ensure that they build a relationship with the client, understand who they are and give them data cap and recommend trade with a level of trust that is warranted based on the information that is provided by the client about what they're working on, who's funding it, why they're doing it, what their goals are, what the long-term plan is, et cetera. They also have a set of operational guidelines which includes how they should do these things, toolings that needs to be used, need to keep a record, bookkeeping for auditing purposes and ensure that they can actually talk through past decisions that they may not be held accountable by the community. They're selected through an election process which includes putting an application out in the public which is scored on a rubric. So that rubric is also open source and the idea there is the community can iterate on the rubric, notaries are scored against the rubric, we do a pretty open election process where a notary applies, it's scored on a rubric, gets to sort of contest and then the community also gets to contest and then we finalize the rubric scores, rank all the notaries by their rubric scores and then pick a set as defined by what the goals of that election process are. So hopefully this is starting to make sense. We elect notaries as a community, rookie holders give that particular address on chain, the ability to do these special things like issue data cap to clients. And so clients, these are the actual data owners as the demand side of the storage marketplace, they're aiming to be and come across this trustworthy so that they can get this resource to make extremely cheap deals. Storage providers represent the supply side, as you can tell by now that loss and certainly not least is the actual governance community. This includes of course all the above stakeholders but also includes just anybody interested in the community. Our governance processes are completely open. We use GitHub as our primary tool for making progress in the program, indexing, documenting and then we do open governance calls bi-weekly. And so literally anybody could participate, includes you and come to our calls and help with things like defining the rubric, defining the roles, changing, adjusting the roles, putting in FIPS to adjust the way the program works, et cetera, et cetera. Quick recap on the flow again. So, notaries perform due diligence or KYC on clients to verify them. So you'll often hear the term verify but really it's just established trust. The real client, they're looking for real clients with valid data that would actually bolster the usefulness of productivity without the network further as goals in like being the marketplace and search interaction point for all of humanity's information and ensure that the subsidy that's being created crypto economically on the network is actually being utilized in the best way possible for long-term, whether that's for the actual clients and their ability to do things because the non-profit organizations, scientific organizations, et cetera, or if it's for the network in terms of, hey, this is a really compelling use case that we want to serve and we're excited in making sure that we're able to deliver this for everybody and show them that like this can be done on Filecoin. It may also include like stretching the network to understand how to handle. So we've got a working group, for example, that just spun up, they specifically think about enterprise support in Filecoin Plus. So how do we deal with data sets that can't be open all the way or are encrypted or have some private components? Like how do we still build trust with clients? Because traditionally sometimes, notaries would just ask clients for samples of the data, but that's not necessarily possible in this work. And then based on the identification of clients and their reception of or allocation of data cap, they then go expend that in deals. As they burn that data cap, storage providers get adjusted power increases and get better rewards from the Filecoin chain, as long as that deal is live and that sector is running, et cetera, et cetera. Clients have three parts to getting data cap today. They can go into automatic verification, good example, this is a site verify.lift.io. For anybody with a good hub account, greater than a year, I'm sorry, the greater than six months old, I think it's one of your days, yeah. You can pretty much get 32 GB every month. We're adding a scaling component for this as well, based on how you're using it and how frequently you're asking for it and show that you continue getting more if needed. This is extremely useful for testing purposes. Like if you're just wanting to get your first deal or get your first 20, 30 deals, see how it actually works, build up a system, do a mini POC for yourself. This is the recommended path. If you're a client who has a single use case and not a massive dataset and is just looking forward to getting this done with the least amount of effort and the least amount of operational overhead, you opt for the second path where you typically get between 10 and 50 TB bytes of data cap. That's through working directly with an electric notary. All of this happens in public, all of this happens in GitHub issues, but this does have the option of, oh, can I email you this stuff instead? And then you maintain that in your books instead. And so it has a little bit more flexibility for clients. And then the third, and by far currently the most popular option is to go via this, what we call the large dataset and repath or like the Filecoin Plus for a large datasets program. And here the goal is you're requesting 500 TB plus for data cap. Each application can be up to five TB, but it's released in tranches as opposed to that data cap going out on its own. Completely public process, much larger, accessible amount of data cap, but because it's released in tranches it's a little bit more scrutiny. Every tranche that's released requires some participation from notaries, et cetera. So where are we at with the program today? So on the right, you can see this graph. This is the last three months of active deals and heavy bytes on the network. The light green portion on top is Filecoin Plus, the blueish portion on the bottom is like regular deals. You can see that Filecoin Plus has really been on a tear since the new year. The LDN process has resulted in a lot of clients getting data cap and onboarding tons of data at a much faster rate than the way before. We're currently at the point where about 75% of all the data stored on chain is actually verified data coming into Filecoin Plus. That means more than 55 PB bytes of data cap being used in deals. And that represents about 75% of the data cap that's been given to clients. And so there's still about 25% that's sitting laden every single day and more data cap is being issued and distributed. In terms of notaries, we just wrapped our third election closing. And so we're at about 60 active notaries soon once they're all onboarded and willing to participate. Last year, we spent half of it at about 10 and half of it at about 20. And so we're three-axing the amount of notaries in the program and also like significantly increasing the amount of data cap available to them to serve. And this is mostly an experiment to see how the program actually scales. Right now, if you go and work with a notary, it takes about 10 days to allocate data cap. So it's very important to us that we work towards bringing that number down. So upcoming focus areas, well, actually these are more like current focus areas and then upcoming development. First is what I just mentioned, what we call TTD that stands for Time Due Data Cap. This is like our top line sort of success metric in the Filecoin Plus program. We wanna ensure the data cap is available and attainable in like the one hour or the three day range at all of these levels. And so that includes having more notaries, having the notaries be more active, improving the UX for clients, automation and scaling for data cap applications, et cetera. You can see the little flow chart on the right which sort of walks you through how we want to move towards more automation, reduce manual interaction points and only bring in the human interaction in the cases where things are starting to go awry. Focus on risk, reducing the amount of touch points, more focus on sort of on-chain tracking and the automation of like flags for like risky behavior or abuse or profiteering of the program. Like we're thinking about this as like us building out a reputation system or a credit system for data owners and search providers inside the Filecoin Plus world. And then generally evolving the no-reader a little bit to go from what we call like the gatekeeper-esque functionality to more like guardians as the network that changes the way in which they interact but of course comes with discussions around their incentives, how to retain their attentiveness and overall have them deliver a service effectively to the network while still maintaining the best interest to the network and not themselves and participate in governance in addition to just what the community does today. So how do you wanna get involved? We'd love to have you come join us in the Filecoin Plus channel in Slack. We have bi-weekly governance calls. You should come there. We're working on sort of improving our processes. We'd love to have you as, you know think about notary incentives, think about how we wanna evolve processes and system design. And generally as we move towards like structures that are similar to like a doubt we're spending our working groups experimenting with governance, system design, et cetera and generally overhauling the incentive and long-term ideation around how Filecoin Plus will continue to serve the network into the future. And we're having a Filecoin Plus half day summit at Austin Texas today before Phil Austin if you haven't heard of it yet. So Phil Austin will happen June 8th. We're doing Filecoin Plus June 7th. This will be a virtual first event. So even if you can't make it in person we'll be broadcasting this live streaming it of course, recording it. So definitely more information to follow on that keep your eyes out. Switching gears for the last couple of minutes here to talk about Slingshot. Slingshot is a community program for data processes and developers that awards the storage of real valuable and usable data on the Filecoin network. So this is completely different than Filecoin Plus but you'll see some similar threads and sort of enclosing hopefully I'll be able to share with you why I'm talking about both these programs and why they're compelling for you. So Slingshot overall has been running since Filecoin went main head which is just about 18 months to the day. Through these 18 months we've had about 37-ish petabytes of data on boarded the network comprising of open data sets. So there's like 1661 data sets all the way from like COVID data to environmental data, the governmental data and like random public use things that were found that could be interesting source from scientific organizations, non-profits NGOs, et cetera. We also have a data explorer which is pretty compelling in terms of helping you identify where you can retrieve that data from its mirror on Filecoin as opposed to needing to pay for an AWS retrieval service or needing to run your compute operations in different cloud provided services. Here you can actually get it effectively for free or extremely cheaply from the Filecoin network itself. Recently in the last six months sort of too couple with just this onboarding thing we've added two different programs as well that are focused on the longevity and the long-term viability that data being onboarded. So on the left you have Evergreen. The idea with Evergreen is effectively as Slingshot deals reach their end of life we want to continue renewing them. So right now this is a little bit of a manual we're very excited for the Filecoin virtual machine to show up so that we can automate some of these things but the idea here is tracking the pieces of data that are in expiring deals and then incentivizing the rebuilding of replicas for them to ensure longevity, permanence, long-term availability of that open data on the Filecoin network. The primary driving incentive here is actually data cap. And so this goes back to the first part of the conversation about how are we able to do this? The idea is that by adhering to an extremely high standard of quality storage and showing that we're getting to do things that push the definition of how to make data useful on Filecoin, how to contribute to the best practices around that both for the data owner side of the house but also for the search provider side of the house we're able to justify to the noted reason they should sort of support the running of this program. On the right we have recovery as an effort and within recovery specifically the Restore program Restore program specifically started out around an incident where we lost a little bit of data well a certain amount of data after like a freak accident effectively firing a data center and so we built this as like the first step towards like self-healing where we can design systems where data on screenshot if it's lost and this is specifically not in terms of end of life for deals but rather like a sector but false or a search provider decides to walk away. How do we rebuild and self-heal from that? Like how do we maintain a healthy number of live rather than any given point in time? How do we make sure they're available? Both of these programs are currently open and evergreen especially if you are thinking about a search writing operation and listening to this it's a pretty interesting one to get started definitely check it out. Why I'm telling you about this quick primer on DAO's I think you guys are all aware of this decentralized autonomous organizations typically referred to as a combination of community plus some sort of contract. What we care about or what I care about right now is specifically DAO's that care about data so the creation of value through shared data or data sets this is not just limited to the monetization of demand for data though that is one excellent use case and one way in which data does have often been described and arguably the data DAO sort of set that ideation process forward with that scope. So what I'm trying to structure right now is like using these components together it's a very complicated approach on the right I'm not gonna dig into it too much here but the idea is that we've got a component we've got a set of components that come together very nicely to build a system that can in a clean manner set up data for long-term preservation on the Filecoin network. So with just SlingShout you've got onboarding data with Evergreen you've got the aspect of guaranteeing its permanence with the store you can do the self-healing and the rebuilding and then we have this component that we've used in SlingShout for a while via the deal bot where we check for retrieval success rates. So we've got retrieval success rates as a services I like to call it where we do sampling and retrievability and have metrics on the health of the data itself so even though it might be alive and the deal might be good that doesn't actually mean that it's accessible and so by having a path to onboard, maintain and show that it's repaired and have a way in which it's like all those things happen in the way that the clients need access that data are able to. We do have all these nice components that sort of come together and can leverage like significant automation and development in the future to build like an interesting data structure. And so we'd love to have you involved if you're interested in this conversation lots of work to do ahead of us here definitely in terms of defining the incentives of governance, et cetera leveraging the virtual machine itself of course also just the data architecture and how we want to do the analysis how we want to like build that sort of reputation aspect that I mentioned. So specifically if you'd be interested in thinking about these things further please reach out to me either on Slack or Twitter or this QR code should actually take you straight to our definition and JD for one of the roles on the team. That doesn't have to be the role you want. I just wanted to put it up there as like a hey if you want to get involved sooner definitely check that out. Awesome. I know I'm a little bit behind schedule. Thank you all for bearing with me and getting on my speed train as you were hearing the time limit for this presentation. Thank you for having me. Alex in the accent. Congrats once again on the event. I'm looking forward to being there in person next time. In case there's any questions please feel free to chase me down. I don't know if we have the ability to do the questions right now because I know there's a pretty packed agenda to keep you guys going. I'm going to rely on the host to let me know. If not really appreciate your attention. Thanks a lot deep for that overview of Filecoin Plus and Slingshot and their various aspects. We have time for maybe one question to the presenter. Hi, yeah just really quick. So I understand storage reminders will want to participate in verified deals to have an increased percentage of the block rewards. What is the incentive for clients to want to get notarized or verified to have more data cap? Yeah, great question. So because storage providers have that incentive the amount of actual fill or like money that gets charged to make those deals is significantly lower. Actually the average verified deal in the network today is completely free. So the incentive for KYC and due diligence process is effectively you're trading that time, that effort, that loss of complete privacy on what you're doing and adding a little bit more transparency for getting absurdly subsidized deal making on the network. So especially as storage providers start to build long-term businesses on the network and want to offer the ability to store data at scale safely instead of having to pay in fill you get to effectively extend that data cap and then spend it. And so that's why it's extremely interesting and compelling for clients to go to that process. Of course, we are working on making that process easier and faster and all of that. And so that is also good, hopefully for clients in the long-term but that is the primary incentive today. I'd say there's a secondary social incentive as well where like doing this stuff in public means that everybody in the network sort of sees that you're trying to do the right thing sees the work that you're putting in behind it helps you sort of gain clout for long-term partnerships, long-term relationships hopefully favorable deal making climates in the future. But then coming into Falkland plus day for example we have a couple of people on both sides the marketplace that want to be presenting share the work that they've done the tooling they've done and how they're contributing to the success of the network. So I'd say, yeah, the monetary incentive have been extremely cheap deal the social incentive of building cloud in the network.