Well, I think most of us realize that security and entrepreneurship go hand in hand. All the major players in the industry are venture backed. Mostly those companies are too young to vote or drink, let alone screw with their customers. So if you're in security at some point, you're going to work for a startup, or you're going to buy products from a startup, or you're going to invest in a startup, or you're going to acquire one. So you want to know what's going to happen to all these startups. Is there room for more of them? Which ones will succeed? Today I'll discuss the long-term role of startups in the security ecosystem. But rather than speculate on the industry's future successes, because that's something I think that many of you are probably more capable to do than I am, or rather than hype my own investments, I think it's more instructive to highlight mistakes of the industry. Because unfortunately security doctors don't swear a Hippocratic oath to do no harm. And so far the results have been disastrous. So these are some of the questions that people ask me that I'll try to address today. So next question is why dwell on the mistakes? Well, ten years ago Dan Farmer popularized the notion that we can't secure our networks if we don't openly err our vulnerabilities and errors. And just this week Michael Lin reminded us of the same thing. A lesson that I think applies not only to information security, but also I believe to all challenging pursuits including venture capital. And in case you think that I can only dish it out but I can't take it in, you're welcome to take a look at the anti-portfolio that we at Bestomer published on our website. It's the only one of its kind in the industry. You can read in gory detail if you like about the frankly stupid reasons why we passed on the first investment rounds in Intel, FedEx, Apple, eBay, Google, many others. Good lessons there for us. So this presentation is for investors who don't want to lose their capital. Entrepreneurs who want to navigate the landmines. Engineers who don't want to make the wrong career choice. Chief information security officers and their staff who don't want to buy the wrong product. Also anyone with money in the bank who wants to keep it safe. And if that doesn't just about cover all of you then I guess it's also for anybody who's looking to kill an hour between the two Fed presentations. So still I expect that many of you came here looking for more positive direction on tomorrow's great inventions. I feel obliged to offer something inspirational here. So I've injected into my presentation some interstitial slides here and there offering up some great examples of entrepreneurial innovation. You'll see them popping up now and then. So I told you about some things that Bestomer Venture Partners has done wrong. Please give me just 30 seconds to tell you some things we've done right in an effort perhaps to lend some credibility to my ravings about the industry. So here's the background. As the oldest venture capital practice in the nation, Bestomer has for nearly a century invested the family fortune of Henry Phipps, a 19th century entrepreneur who decided to reinvest his proceeds from the sale of Carnegie Steel into other tiny startups like WR Grace and Ingersoll Rand. More recently, Bestomer has funded the early stages of parametric, Staples, Sienna, Cascade, VMX, Maxim, Veritas, Gartner Group, Perceptive Biosystems, and Skype. We have about 60 employees with offices in California, Massachusetts, New York, Bangalore, and Shanghai. We are the most active early stage venture firm in information security. You can see here we've invested in 17 security companies. Some of them are ones that I'm sure you know, some you may be less familiar with, but one thing that's uncommon is that we work early on with experts in the security field to start these companies. Folks like Paul Machopetris at Nominem and Dan Farmer at Elemental, Bruce Schneier at Counterpane, Mark Mayfrit at EI, Gene Kim and Gene Spafford at Tripwire, and of course Ron Rivest at Verisign. All but the recent three early stage investments that we've made here of the 17 are all doing well. They all have run rates above $10 million. Five of them have gone public. One of them was acquired by Cisco, and among the 17 investments we've made, there hasn't been a single realized or unrealized loss. We have a dedicated security team at the firm, including myself. Devesh Gaurd, who ran Broadcom's security business unit. Chini Krishnan, who founded Valisert. Chris Risley, who was CEO both of Nominem and previously of On Technology, which after going public, Symantec acquired. And just a broad, strong team of security professionals. In this team, we commit ourselves, we commit our time and our resources to maintaining a very rich dialogue with chief information security officers in the industry. Many of you are probably here, and you know firsthand that we do this, and we do that really to maintain a good pulse on the marketplace on behalf of our companies. Easier to spread. Let's see. Okay, so the biggest challenge for startups is that nobody wants to buy from startups. People want to buy products from big companies. They want to buy suites. And there are some very good reasons for this. Very valid reasons. Product suites from big companies offer integration at the console level. They offer integration at the appliance level, making security easier to deploy in a scalable fashion. These companies promise event correlation. And I think one day they might even deliver it. And of course they do offer better vendor viability than what a startup can do. So I'm just going to run through some slides that show you the product footprint of the major companies in the industry. And you know, you can just, this is a taxonomy that we've developed internally to map out security products. And the data for each company are probably about six months old. We last updated at the end of 2004. But you get a feel for how the different companies have staked out their turf across the security landscape. Here you have Symantec and of course McAfee. Here's ISS. And as you can see the large vendors, each of them offer suites that cover different aspects, more than point solutions, but still they can't cover the whole landscape. And so what happens is that they really need to, enterprises really often pick one suite and then fill in all the holes around the products that are offered by that suite vendor. So this is an inventive cold remedy so then these big companies, they have these great suites and enterprises want to buy from them. So the question is why, what are we smoking? We keep funding all these startups out there to compete against them and have a hard time selling. And why do we do that? And here's our thinking. Our thinking is that there are two major reasons why the startups have to exist. And in the long run as a group at least have to thrive, at least some of them. And the first reason is that there are constantly new protocols, applications and platforms that are being deployed in the network. And every time a new one comes along, then enterprises have to completely rethink their security so that the security has to actually keep up with the new technology as quickly, it has to be the fastest changing element of the network because it has to move as quickly as everything else that's going on. And these are just some examples of protocols that enterprises are adopting now or have started to adopt last year and every one of these things introduces important new vulnerabilities that change the way enterprises have to think about security. And then the second element is captured in this image here and that is that security is very different from other elements of infrastructure. In other types of infrastructure, you're trying to basically, it's basically a battle of man versus nature. You're trying to iron out the wrinkles, trying to get the products to work better and asymptotically, these products approach perfection. The way that, you know, the way that routers and switches today basically work. They don't crash, we have enough bandwidth, they basically, they work fine. But security isn't like that because in security, every time a company releases a product, you've got people who are, you've got many people who are actively trying to render it obsolete right away. They're creative and adaptive people. And, you know, if that's not enough, more recently, the nature of that adaptation has changed now that the enemy is motivated less by ego, mischief, and politics and motivated more by profit, profit from spamming, profit from extortion, profit from ID theft. The enemy now has the patience, the resolve, and the resources to continually escalate and continually adapt to the new products as they come out. And for this reason, we believe that it's absolutely imperative that we continue to have startups, entrepreneurial teams, who are innovating new defenses against the tax. This is why I believe we've seen so much venture investment in startups. In the last two and a half years, we've counted, and we may not know all of them, but we've counted 477 distinct companies that have received venture funding during that time. Obviously, these companies aren't all going to be successful, but this level of innovation that's coming out of these 477 companies absolutely eclipses anything that's going on among the larger companies. So that's the role of the startup, and that's the role that we try to fund. Now, with all these companies that are being funded, I'm sad to say that there aren't any public, there aren't any IPOs in the security industry since the beginning of 2003. There's a lot of money going in, and nothing really coming back to the hard-working employees and the not-so-hard-working investors in those companies. But what we do see is that, as we all know, mergers and acquisitions have really accelerated in the last couple of years, even beyond the peak of the bubble in terms of the number of deals and the number of dollars going to security companies. And that's because we have two types of companies in the ecosystem. We have the sweet vendors who are great at integrating, integrated consoles, integrated appliance. They offer, that's their value to the enterprise. Then you have the small companies who are the innovators. They produce the new defenses. These are their point solutions, but these are the new defenses. In order for the integrators to remain competitive, they have to assimilate the innovative solutions. And so, although journalists like to talk about what's happened in the last year as a consolidation in the industry, we don't view this as a phase of consolidation. We view this as a permanent fixture. This is going to persist. It's going to persist longer than the M&A string of Cisco 3 Common Lucent, all acquired networking companies. Because again, those networking companies, eventually those products worked and they matured, but the best you can ever hope to do with a security product is tread water. No mess, no waste. So, now let me start to talk about why it is that we see some major bloopers and blunders in the industry. And it starts off with an analysis of people's state of minds when they buy products. And so, I'm going to talk about reasons why people buy security technology, why they pick one product or another. And the first reason, and this is one that I think we all agree is a very good reason, and one that a lot of attention has spent to here at DEF CON, I understand how this technology will likely secure important assets from entire classes of attack at a reasonable cost. And here, we like to think that this is the only reason that people choose one security product over another. But wait, there are more reasons. Here's one. Lots of other people seem to think that this technology works. I guess that means I need it. This common, weak-minded disposition to suspend skepticism explains a lot of the problems in our world beyond information security. Not only might others be wrong, and I'll point out some doozies today, but there simply is no one-size-fits-all security mix. Nonetheless, this kind of thinking does drive a lot of purchasing from the big security companies. Here's another brain malfunction that drives sales for Symantec and Cisco. If an attack brings our network down, I'll be okay so long as it brings everyone else's network down as well. So I'm just going to hide in the safety of the herd and buy whatever seems to be selling well, market it attacks today, or more importantly that the consequences of an attack to my enterprise are pretty much the same regardless of whether it hits others. Okay, why else do we see people flocking to Symantec and Cisco? Well, I got a good deal on a bundle. I bought that big router or appliance over there, and the vendor threw in some cheap or maybe even some free licenses. It might not work. It might inconvenient my users. It might even be another vector of attack. But it was cheap. My favorite example of this cheap bundle nonsense is antivirus licenses for servers. You know, the computers that nobody ever uses for email or browsing and the signature AV companies actually charge extra for putting their AV products on those servers. Let's see. What's another reason? Oh, yes. Okay, we need to convince somebody it might be our chief security officer or a chief information officer or a chief executive officer or maybe the board or our auditors or the regulators or our customers or maybe Congress. We have to convince somebody that we've got best practice security. Of course, best practices have been defined by somebody else. Those practices might imply working technology, but then again, they might not. Let's see. Our startups can also exploit as well as big companies. A nasty attack crashed our network and so I've got budget to deploy a defense. And you can always spot these folks because they don't want to hear about how the product works. They just want to run a battery of attacks against the product to see if it defends against them. And these are the attacks that they suffered several months ago. And they seem to suffer the next quarter's attack is going to be exactly the same as last quarter's attack. And so as long as this product stops last quarter's attack, they somehow think that they're protected. I can't believe how often I see this in accounts. It's rather frustrating. And then finally, the last reason is that there's always relationship selling. You know, the vendor threw a wild party and so I should buy the product. Okay, well maybe that one's not such a bad reason. I'm going to move that up to the plus category. Let's see. Alright, so we see a lot of poor reasons why people choose security technology that doesn't work. So now what I'd like to do is really explain what I mean by bloopers, blights and blunders. And to do so I'm first going to define two distinct classes of security technology. There's let's call it the security technology that works and the security technology that sells. Now for those reasons we saw in the previous slide these sets are not equivalent. Now you know, my job at Bessemer is to find teams that have technology that works and fund them into companies that have technology that sells. And of course that intersection is where all the great security companies thrive. But we also see a lot of security businesses with technology that doesn't work and technology that doesn't sell and those all still get funded and those are what I call bloopers. And I think, you know, blooper is a good name because it's sort of an innocent mistake. You know, maybe they blow about 100 million 200 million dollars of venture capital but at least they didn't actually cost any customers any money because nobody ever bought it. Okay, then the next category of disaster is on the industry. These are the technologies that don't work but for one reason or another everybody's buying them anyway. Right, and we'll talk about those. Now these cost the venture industry hundreds of millions of dollars developing these products but more importantly they cost, they can cost the industry a billion dollars a year buying these products not to mention the costs that they incur trying to mop up the mess when the products don't actually work. And I'll talk about some of those. And then, I'm going to spend actually more time on the third category because the third one is actually something that maybe we can do about something we can do about and those one thing I should mention is that the blights inevitably, the good news is that the blights inevitably stop selling eventually people figure it out but it takes a long time and a lot of money is wasted. Now the next category are the blunders. These are the ones that really scare me. These are the ones that the technology doesn't work but these are hot products. These are the ones that everybody's talking about and these are the ones that even some big companies are bringing into accounts and everybody thinks are next year's products and I would call them next year's blights and I think we're going to see them on our landscape for quite some time because there's a lot of momentum behind these technologies. My hope is that by illustrating some of these disasters and exposing the blights and blunders I hope to assist you in avoiding the mistake of making a bad investment, a doomed career choice, a wasted product purchase or even a dangerous choice of online bank. Here's another invention but this one might be a blooper. This is a mobile computing invention of some sort. Okay, so I think I have to move a little quicker through these slides. I'll start with the bloopers. So I think many of you may think this is wrong and I look forward to some hardy debate but the first and these are, by the way, these are past. I think these are proven. These companies tried to make it go a bit and they failed. First they're startups who tried to build universal consoles and universal console is all about integration, not innovation. It's hard enough for the big companies to do it. It's really difficult for HP. It's impossible for a startup and no start and no enterprise is going to buy a universal console from a startup. Another area is enterprise DRM. So there's been some great work done here. Companies like Authentica and Alchimedia which Fingin acquired. They built some great tools that allow you to understand what can happen and you can revoke the rights later and it's really great technology but what the industry has learned is that people just will not change their behavior in order to curb rights on a document further down. Tumbleweed learned this, Slam Dunk Networks learned this and now more startups are continuing to learn this and I think it's safe to bet that Microsoft is going to provide good enough DRM in office but what happens is that enterprises because the pain of an embarrassing leak is episodic and difficult to quantify in terms of damage this category of product never stays in the top three concerns very long and if you're not in the top three then you ought to go home and figure something else to do. So next area is enterprise DDoS protection. It may be sorely needed but the truth is that when you stop the traffic when it gets to the edge it's too late and you know the only way that DDoS is the only way you can protect yourself against DDoS is in the network there are services you can buy like the prolexic service that counter pain sells but you know MAZU and others they've figured out that they need to do something different than DDoS protection at the edge again these are all big venture capital investments here's another one, PKI you know benefits just never justify the expense sure there are some applications like SSL but in terms of trying to build applications on top of PKI yourself it's just really not worth it and personally I'm really pleased that Verisign managed to buy network solutions and other businesses and diversify away from this so and then finally there's applet signing and I'll talk a little bit more about this later but basically applet signing is an example of just too much useless information you know other than the people in this tent most people who look at the name on an applet have no idea whether that's someone they can trust or not and so it really doesn't do any good so there we've gone through the bloopers now the blights these are the ones that are still doing well on the market still selling well and first there's IDS and we all know the problems with IDS they generate alerts every year they get improved which means they generate more alerts and more alerts and they generate so many alerts that speaking of too much useless information that's what these things generate and you know companies who use these are forced to either hire 24 by 7 teams of expensive experts to go through these or outsource them to companies like and manage all the alerts that are coming out of these IDS's the second category is what I would call unmanaged firewalls so you know managed and monitored firewalls those are great but what we've seen at counter pain where they manage and monitor hundreds of enterprise networks is that when they take over these networks most of the firewalls as you all know are not configured about half of them still have the default passwords in place so you know half of the half of the firewall industry is wasted money and then you know there's my favorite the server based signature AV because you know in case somebody comes along and wants to start doing email on your web sphere application server blade now on to the blunders and I have really just sort of two slides on this the first one is the oh I'm sorry I forgot single sign on there's another blight so single sign on sounds great it seems like a really good idea but it turns out that it's really hard to integrate all your old apps and then keep all your new apps integrated and actually try to get the single sign on which seems to work a little better companies like Incentuate that are like in these things to the universal remote control that I bought from my you know from my media system you know it seemed like a good idea but you know after a month or two it ends up being just one more remote control on the table to worry about just too hard to keep programmed right so now by the way there are some promising glimmers companies like Incentuate that are making this a little easier but I'm still very skeptical so now the blunders so the first one is the supposed successor to intrusion detection and everybody said okay intrusion detection doesn't work we need something that doesn't just generate alert it can actually stop the attack in real time because it takes too long for the people to sort through the alerts so intrusion prevention is the answer and we saw a whole generation of these systems proliferate and we even saw Cisco and Intercept Cisco and McAfee buy Okina and Intercept from some very very lucky investors and they're bringing these things to market with a lot of gusto the fundamental the fundamental premise behind these products which I find just laughable is that every attack creates a visible anomaly and every anomaly indicates that there's an attack going on if you don't believe that that's true then it's inevitable that anomaly based intrusion prevention systems will cause false positives and if they cause false positives then you can be sure that the very first thing that's going to happen when some customers block from a website is that intrusion prevention system is going to be turned into monitor only mode guess what now it's an IDS again generating alerts for somebody to look through now there's some other problems with these things too that I mentioned they're really slow because they have to look at all the traffic they require weeks of training so you can't deploy them right away if anything changes on the server that you're watching like the number of users or the applications or the configuration then you have to retrain it all in all a very non-scalable solution but the big killer is the fact that it has false positives just doesn't make sense and it's not going to be in line what's required here are intrusion prevention systems that have zero false positives there are some on the market that use signature based approaches those of course have zero false positives but they don't provide zero day protection we believe this is a big area of opportunity we funded a company called Determina that we believe has the solution to this space and I expect that there will be other companies who tackle this as well okay now my favorite so this one this one is a set of technologies that I see coming strong into the market raising lots of venture capital and getting a lot of money mostly from banks to deploy them and the damages from these these blunders I think are going to be are going to be more costly than any others that we've seen so I'm going to start with a list the first one is the desire of vendors the belief that people have that somehow there's some client software that people can give you or some inbox software that people can give you that will prevent fishing at the inbox a red yellow or green light that knows which sites are fishing and which ones aren't well the bottom line is that software doesn't know that you think you're talking to city group and so unless you're only going to browse on a whitelist which nobody wants to do these these red yellow green lights are not going to work they assume that fishers are not going to adapt that they're not going to change their IP addresses that they're not going to figure out ways to they're not going to use zombies in the United States that have IP addresses that don't look like they're coming from Russia you know it's these are quite naive defenses people sometimes think that they can apply rules to look at it and tell whether it's fishing well the whole point of fishing is that it looks like a real email it looks like a real site or a real email there's just no way for technology to be smarter than a human being in terms of seeing those patterns then there are simple mechanisms that vendors come out with that defeat very certain fishing mechanisms like URL masking again these assume absolutely zero creativity or adaptation on the part of the fishers they'll just get URLs that look like they're real URLs if I saw the URL citygrouponline.com I have no idea if that's a real that's a valid URL or not and none of these fishing can be used from new kinds of fishing attacks like the bogus camera store that collects people's credit card information for selling cheap cameras and the way they get the traffic is by buying the keyword on google for camera they get the top placement and they get all this traffic coming and people looking oh look at these cheap cameras and then of course they use the credit cards they steal to actually pay google for the keyword that's my favorite part of it so you know we're looking at okay next one there's this idea that we want to empower the user give the user more information you're about to go to an on SSL page you're this certificates about to expire there's a license agreement that you should read and sign then you'll know what you're getting into there's you know this is the person who signed this applet this is the person who owns this domain this is the person who's behind this email address all these are attempts to give the user information and thereby empower the user to make decisions the problem is again outside this tent no one knows what to do with that information some window pops up and says the certificate expired or they're about to browse somewhere else what do they do they don't know what to do so they just go browse the information becomes useless here's another last resort of the clueless you see a lot of banks talking about this the answer is educating the users we just have to train people not to click on the bad stuff and that's going to solve the phishing problem or the ID problem how does that solve farming where the DNS is redirecting your traffic or how does it solve malware that redirects your browser somewhere else or the bogus camera store educating the users is again a very naive and really negligent answer to protecting our bank accounts here's another thing we see this is another attempt hopefully to stop phishing is authenticating the email source sender ID and de-kim the other standards worse here well again you're authenticating the source but as we know most of the people who register for those systems are actually spammers so it doesn't really tell you anything about the behavior of the email you might see some name behind the email source but it doesn't give you any real good information okay so what are the banks thinking they're thinking okay we have to provide stronger authentication passwords aren't good enough we have to authenticate everybody who comes to our site and we're going to have to do it with real strong authentication well everyone knows that there are tradeoffs between security convenience and cost and you can't apply the most inconvenient and the costly security to everybody who comes to your website you have to profile about it if you've ever flown LL Airlines you know how they do it the only inconvenience a few people not everybody this is going to be an unscalable solution it's going to be too expensive here's another mistake they're focusing all their authentication efforts on the login the login is the least dangerous part of the session what about the part where I withdraw cash or where I change my address those are the risky things and it turns out that those are a very small number of sessions if you focus the authentication on the risky transactions as opposed to the login then again you have a much better way of focusing the security resources the cost and the inconvenience on the sessions that matter banks think okay we're going to use strong authentication because passwords aren't good enough we'll use smart cards like the secure ID card or time based codes I'm going to loop the next three together we're going to use biometrics fingerprints to authenticate or we're going to use watermarks to educate the user so that they know that this is not this is not they know that this is a real site of course if you're logging in from a new computer then we have to ask you some challenging questions and we have to authenticate you and you know we'll do that and then show you the watermark well these last three these are all really expensive not the last one so much but those first two two factor authentication has a total cost of ownership of twenty dollars per user per year that would be okay maybe if they worked but all three of these defenses are all defeatable by either man in the middle attacks so all the fishers have to do is while they're collecting your data your timecode or your biometric information they're turning around and logging into your bank at the same time and they can do the same thing with the watermark sit in between and get the watermark or they're also subject to malware based slip streamers so malware that sits on your computer and then waits for you to log in using all of this expensive technology and then just you know takes over your session does something on your PC or hands it over to somebody else so and you can and those attacks are out there they may not be very common but you can be sure that when Bank of America deploys these defenses that those attacks are going to become a lot more common no reason why not so this is why I've stopped banking online my money's not safe now I feel like I want to give some prescription as to how I think this is going to get better I think the landscape is going to be blighted for some time but eventually what banks are going to learn to do is they're going to learn to authenticate the transaction not the login they're going to learn to profile the transaction profile the user profile the session where is this coming from is this an IP address we've seen before the customer to be doing is this just a dangerous transaction is this a change of address transaction which is dangerous or is this just somebody looking at his or her balances and then depending upon how dangerous it is we're going to escalate the response we're going to have costlier and costlier and more and more inconvenient security based upon the risk with the penultimate authentication being not two factor authentication but multi-channel authentication because two factor authentication doesn't work if the channel itself has been compromised which is what malware does to a PC smart cards biometrics the reason the reasons they don't stop malware or slip streaming is because the channel has been compromised but if you do multi-channel authentication then you defeat those mechanisms unless the attacker is able to compromise identify the two simultaneous channels and compromise them which is many many years out from now they're actually and I'll say there actually is there actually are a set of startups that are now starting to deliver this kind of technology although I think it's going to be a while before banks recognize it Authentify and Sciota have joined together to provide a service to banks so that they can do this for their online banking a very cheap scalable solution so the question is what does it mean to authenticate the transaction I'll just take the Authentify Sciota solution for a second and illustrate somebody comes to the bank and logs in just let them use a password it's not the most secure thing in the world but it's okay let them use the password by the way keep track of how many times it took them to get in if it took them a long time because they had to do many passwords that increases the risk of course then see what are they doing in the bank account if they're just looking at their balances then maybe the password security is enough but if they're trying to do something else then you want to escalate the security maybe you want to ask them some challenge and response questions before they look at their balances maybe they're doing something more dangerous like changing their address in which case you want to ask them more challenge and response questions maybe they're trying to actually move cash out of the account at which point you say okay because this transaction is a risky transaction we're going to give you a code 3174 and now we're going to say we know three telephone numbers that you've got on record home, cell and work which one do you want us to call you don't say the number you just identify which one your phone rings a computer calls you up and says do you want to do you want to do you want to authorize the transfer of $50,000 to the Boys and Girls Club of Belfast and then you know if so enter the code on your web session and if you enter 3174 then that authenticates that very specific transaction so you're authenticating the transaction you're showing this is what I wanted you to do rather than authenticating the session and then allowing somebody else to wreak havoc on the session and it also limits the security focus to just the risky transactions so answer the question okay so more advice for email providers restore credibility to email not through domain authentication but through behavior tracking and I think this is going to be the domain of some interesting startups like maybe Goodmail and habeas where they actually track the behavior of email senders and then use that reputational data in order to make judgments as to whether somebody is a spammer or a fissure you know there's a the major there's a bigger downside to spam and fiss than the fact that our email is untrustworthy and that's the fact that our trusted relationships banks and e-commerce partners can no longer use email to talk to us two years ago if city banks sent me a message I would have responded of course today who would respond to a message from city group or fidelity on their email email is a lost cause we have to somehow fix that question does behavior tracking step far beyond the boundaries of privacy that's the question well yes just in the same way that questions at the airport intrude upon your privacy for that as well you know I think that people who want to send you email like city bank or amazon they're going to be okay with the idea that somebody is tracking their behavior and there may be situations where it steps beyond the bounds but you know if somebody I don't think any I can't imagine where a company is going to have a problem if it's tracking phishing activity and somebody overseas and saying this is an IP address that you want to be careful about are there legal loopholes that weaken the business model yeah well there it's possible those would have to be you know litigated okay let's see last one end user security tools we have to get over this idea that the answer to security is to give the user more information and empower them we have to start thinking about what we can do to help the user make judgment calls is this a license agreement you want to click on is this an email form that you want to put your email address in or is this going to generate a lot of spam is it okay to navigate to this site we're going to see more and more we're going to see companies coming out with warnings that help us make those decisions that highlight links that are going to bring us to a site or warn us when we're going to do something that maybe we want to think twice about that is much more useful end user security another idea we're always trying to think about where there are opportunities to make the security industry better I can share with you these are some of the questions that we ask ourselves these days about whether there are opportunities and these are things I'd love to hear from people here at DEF CON about questions like do we build accurate and reputational services for email, for IP addresses for ISP behavior so that you know which ISPs are good internet citizens and which ones aren't are there security vulnerabilities to RSS and ATOM that require some kind of security mechanisms I don't know what those would be but my guess is that there are some vulnerabilities there and then one that I'm very concerned about and that is SPAM on my VoIP phone SPAM on my inbox that's sort of a hassle but SPAM on my VoIP phone that is just downright obnoxious because my phone is going to ring every time somebody wants to sell me something and I can't apply Bayesian rule filters like I can with SPAM because you don't know what the message is until the phone rings this is an area where I think there's room for some great reputational services or something to solve this problem I put here on the slide my coordinates for contact you can hear me blather more in my blog at whohastimeforthis.blogspot.com where I love to discuss blights and blunders and so please visit my blog and then I'd like to close with a little anecdote this by the way in case it's not clear this is an indoor sundial let's see so that one's my favorite okay so you know so to a large extent venture capitalists like me we play a role in the ecosystem of being gatekeepers for capital as to which of these security projects are going to get funded and so it's our job to try to spot these blunders before they happen to initiate the market that exists out there and all the innovation that's there and so I am not cynical about the number of startups that are being funded I think it's a good thing and what I want in the story I wanted to tell you happened the Saturday night after I made my 12th security investment in a company called CYOTA my wife Natalie took me out to the movies that Saturday night to see born supremacy and we were going to this theater in Mountain View with a lot of movie theaters in it and thanks to Fandango we righteously walked right past the long lines of teenagers and we go into the lobby and I'm trying to explain to Natalie why it is that these companies I'm investing in they're not the same company over and over it looks like you just keep investing in the same thing over and over again she saw those same 17 companies I put up on the page and when I tell her what they do they all sound exactly the same to her and she said why do you do this I'm trying to figure out how to explain to her why I keep doing this in this movie theater they implemented a security mechanism to prevent movie theft instead of collecting tickets at the front like they used to well they had a problem that people would go see a movie then they'd come out in the lobby then they'd go see another movie so they moved the ticket collection out to the hallways coming off the lobby and then after a movie they usher everybody out to the lobby so if you want to go back in you need to give a ticket no ticket, no movie that's the security mechanism so I thought okay there's got to be vulnerability here so I said watch this I walked over to the front door and then I preferred my hand out and muttered as nonchalantly as I could tickets, tickets and a bevy of teenagers approached and the first one gave me his ticket that was the riskiest but then the rest of them were cake I mean they were jabbering on about football games and SAT prep and meanwhile their tickets were just accumulating in my hand not looking at me so a good five minutes as they wafted over to one of the ticket stands and they got to the ticket stand and then literally they spent another two minutes among them trying to figure out which one of them had the tickets because they forgot that they gave me the tickets at the door and then by then they figured out that they'd been fished they turned around and I was there, I returned their assets and unfortunately they didn't kick mine so you know my wife understood that security is hard and that's why I like most of the people in this room I imagine really find it so intriguing as we we should all keep in mind that as we craft new technologies we're all going to make mistakes now and then but that's okay so long as we critically assess our bloopers before they bloom into full-blown blunders thank you very much we have time for a question no one question yes I mentioned I didn't say verisign was a blight the question is why did I mention verisign as a blight oh why didn't die oh PKI is a blight there are certain aspects of PKI by the way like SSL that work great I mean SSL is terrific SSL you know there wouldn't a lot of e-commerce would have been stalled if it weren't for SSL verisign those in a lot of other businesses besides PKI you know they're in the registry business they're in the wireless building business they're in a lot of business and also in a lot of security businesses a lot of outsourced security services so verisign is a lot of good things I think PKI is just was just a technology that was just you know never justified it justified the the hassle okay thank you


delegates every change opens up a window of opportunity from there the owner slides on us to climb through that window or miss it altogether reflective of this attitude our next panel discusses how media education should keep up with changes in the media industry I would like to call upon the chair for this session professor sushil behel faculty and head sushil behel consultancy Mumbai to please join me on stage professor behel we have a big round of applause please ladies and gentlemen joining him to discuss the motion I'd like to call upon Mr. Vikram Chandra founder editor G technologies please welcome him on stage Mr. Pankaj Pachori editor in chief and founder go news 24-7 Mrs. Anuradha Prasad chairperson news 24 and bag Mr. Ajay Upadhyay veteran journalist I believe we don't have him yet Mr. Shravan Garg veteran journalist ladies and gentlemen can we keep the round of applause going please and rounding off the panel Mr. Anil Singh we managing editor Z business can we have all our dignitaries on stage I'd hand over to the panel chair now professor sushil behel to take over for me good afternoon ladies and gentlemen I don't look like Anurag Bhattra do I except the hair part of it my pleasure to stand here and look at the 182 feet pillars of media industry I feel like a dwarf and therefore I thought I'll stand and talk and cut out the conventional chairman sitting down mics floating up and down and make it a chat of a different kind the second reason for my standing and conducting the session if I can conduct or if I'm equipped to conduct is that my knees shake so this podium covers my knees the subject that we have for this session with the stalwarts overlaps with some of the subjects as you would have seen in the program but I think that is the reason for us having these great people with us to share their views and share their thoughts on the subject the subject as you have seen is the changes in the media industry now you have heard one session it's been mentioned that the media landscape has changed media landscape is no longer what I learned in school being a PRO and being a advertising man it was news and it was first it was fast it was factual and if you as a professional both on the media side and the client side or the PR side could not do it then you would have to go to the press club as Anurag talked and compare notes on the red blood on the media side and the red blood on our side that scene has changed today in my opinion we also have a number of F's the positive F's and I would urge our panel to go extempore and talk about some of these F's which are issues because we are talking of change in the education sector which is directly connected with stall words like them today you cannot have what we used to call gin and tonic brigade you are domain oriented you are information oriented you are media oriented and the media which must come out and the location that we are talking of has to be as I said some F's number one and I would like the panel to take it up as they like as a chat features today we talk content today we look for content writers bag films looks for content writers we used to look for copy writers a tremendous change a copy writer is not a journalist please us people must realise that second is facilities we just talked about studio, camera today I feel funny so that I am using my cell phone for photography oh that's technology third F if I may submit is people like me who are faculty are we qualified or are we PhD's in media we need to think about it and the panel I request we act then comes funding the money where does it come private sector, public sector, government sector, international the collaborations and the various tie ups that we are talking about and last but not least the future we talk of changing the game I would say we should talk of the cutting edge which gives value to society which gives value to media and which gives what Anurag Batra said a little bit of profit today profit is not a bad word sirs you will all agree with me today you are in business for profit there are some reactions should we go left to right, my left to right a few random thoughts on the F's make it strong F's may we start with the experience behind media, journalism and what have you you want to use that we will have a quick summing up after the experts have said something you can choose your F like madam from back films you are all F in terms of facilities you ask me question and I will reply which of the F's should I pick it up Manch for Bathe all the great personalities from all over the country the education of the non-media and the communication with the media last panel's discussion and now when it started it started after the bond and it was said that we have to talk about the bond it was not such a thought but the one who has the right we will try to what we came to say and the father's decision we will talk about it before that the first panel was the academician's panel and I heard some of my fellow academicians complain that the state of media education is weak because there is no fund in it the state of media education is weak because there is no good faculty in it the state of media education there is no independent identity in it and the media industry drives it day by day it is right because the media industry is the only industry that can employ children from media education the benefit of the media industry is that they can employ children from media institutions and even if they don't they don't have to because they have a lot of options what is it that makes the media education so bad I remember a few years back some students came from Bhopal to visit a studio and the director told them that you should only sign on my door when you have forgotten everything that you have been taught the children had tears in their eyes it is good that you are in the media industry it is good that we are all in the media industry but being so proud it is possible that the media industry is proud that we will give the job we want and we will not but the most important thing is that it comes in the cycle sometimes it writes on technology institutions sometimes it writes on technology institutions this is the era of electric age Marshall McLuhan was a professor of English literature in Toronto University the message of media is the message and the example of global village many people still think that many people may not think that today you will go to Facebook for a job on senior position one question is always asked what is Marshall McLuhan talking about the big musket of the communication industry there was no communication he developed a faculty of his own culture and society the bigger the situation is, the smaller it is where Marshall McLuhan used to work I went to that institute Marshall McLuhan says that when the information shall travel at the speed of electricity people shall behave in a tribal manner where is your audience going where are you going what you are doing is do you know that the things that are said in television that impact the audience the tweet that you put in the intoxication the Facebook that you put in the intoxication and you behave in a tribal manner sorry my tribal doesn't mean any deeming as in English dictionary the tribal is defined and Marshall McLuhan did not do it I am using the same tribal word if someone comes he will forgive me his tribal meant that before the plato like Homer, like Elliot who is called Marshall McLuhan a different tribal the plato tied the education the academy started the academy word came from there so the academy that the plato made they started tying the topic slowly the time of renaissance came after that the scientific age came the scientific age also tied the things this tied the art till the time till the time till the time of the electric age this electric age this electric age broke the foundation of the scientific age Max Planck is taught in physics but the Max Planck which doesn't understand the principle of uncertainty of Heisenberg which doesn't understand the concept of the time of Berks can't understand today's journalism you have to read a lot after reading this then the journalism the information the communication what is the difference instanties can never be journalism journalism has its own fundamentals objectivity fact finding verification making it interesting all responsibilities are very boring if you want to think and you are flowing it even then people will run the audience will run keeping it equal keeping it equal the mind is in the direction that we will finish our talk soon and I think I will finish my talk soon what I was coming from is that the expectations of the industry and the preparations of the media institutions the difference between the two the difference between the two can be sorted out by making a relationship in this new age understanding technology is the most important and this technology impacts the content to the limit I will say my last words this objectivity this objectivity doesn't exist in the live media today's social media is subjective there is no definition of verification you can't test it whatever you want you can live it on Facebook so this is subjective when the foundation of journalism is hurt I think in the time of social media to be fit to be alive you have to rediscover yourself or you have to say this is the time of communication the time of information there is no time for journalism there are many things to say but I will finish my talk with these words thank you very much one single or singular message relationship between media machine and people that's what I got out of it we need to build on that and to build on that may I request Mr. Chandra to tell us what he wants to do with augmented intelligence because we are talking a lot of intelligence unfortunately people like me who are let's say over sixties have no intelligence is the young people so let's hear what he has to say thank you so much sir but at 50 I don't think I no longer qualify as being young person so there we are but yes I am you have given us some f words if you permit me I would like to expand on that but perhaps some f words of my own the first f word one being which I don't think I should use in polite society but it reflects what I truly believe is the state of a lot of the media industry right now and I am taking liberty with many some of the top journalists out here we have all known each other for a long time and we respect each other a lot but frankly media and video news in particular is well I am not going to use the word but it is in a mess it is totally messed up and that is because of a number of structural reasons and I am going to just spend a couple of minutes perhaps talking about those structural reasons because there is another f word there there are five reasons to my mind that television news in particular is so bad now I am just going to ask all of you and be honest about this how many of you in this audience think that a large amount of television news today they are honorable exceptions but a large amount of television news today has the quality is deteriorated alarmingly how many people feel that way alright so I am interested in who didn't raise their hands even Anuradha and Fankat and I didn't raise their hands we all raised our hands both hands so there you are it is unanimous TV news is messed up when all of us got into television journalism no 20-25 years ago this is not the reason we got into it what are you telling children when you are educating them and saying get into journalism join the media what are you teaching them we used to teach people in journalism go out there talk about balance talk about being unbiased talk about the sides of the story be factual that was an effort factual you should have facts now it is fake that is another effort what are you going to tell people that really the way to succeed is to shout at people at 9 o'clock at night how do you give people that lesson is that what you are teaching people in your classes this is how you should shout and if somebody comes up with his opinion this is how you tell that person that Naini quietly in the break and I have seen it happening take him on take him on you must shout at him more is that what we are telling people shout at people more don't have the facts try and be biased and there is a reason why all of that works and that comes to what I think are the 5 reasons why the industry is messed up and why we need to change it so first of all television news has a problem with the business model and that is something which we have often discussed forum after forum for 7-8 years rather than I have been in I don't know how many panels to be met with the ministry this is what the issue is in television news you don't get subscription revenue in India you are paying carriage fees you are entirely dependent on advertising advertising comes from the basis of TRPs TRPs come from 20,000 boxes in a country of 1.3 billion people 20-25,000 boxes in a country of 1.3 billion people you get TRPs not by doing good quality news you get TRPs by doing bad quality news the more you yell and you scream the more the TRPs are if you get a Hindu and a Muslim to scream at each other even better if you can get a Tantric Baba to scream at somebody then you are really rocking and if you can't get a Tantric Baba let the anchor shout then you are really happy that is really what the media meant that is why you are chasing TRPs that is not the way the industry should be but that is unfortunately what the business model is forcing and those of us who try and say you are spamming it means fine then you reconcile yourself with the fact you won't get TRPs and therefore your revenues are going to dry up so many people have asked me why did I quit NDTV and why did I leave television news 2 years ago it is because I didn't see a future in the way the model is working right now and that is why I thought that we need to make a paradigm shift digital video many people thought would be the answer the reason that digital video news is a form factor it is not convenient behavior to go and tap on individual icons and try and find video news so many video destinations are being forced to just play live your live television news channel is just being played in a digital medium which is partly we are all experimenting with these formats and we are trying to change it Pankaj for example has very successfully tried to do it and we are all playing around with these form factors but it is still not working so it is a form factor issue the result of these television news is not working digital video news at the moment is not working really well means that people are getting their video news increasingly through social media whatsapp facebook whatsapp you get videos and that is the gospel truth you see something on whatsapp this is the truth that is not fact a lot of that information is fake and the reason is that though this is good distribution on social media the sources of content are not authenticated they may be wrong they could be fake so that is the problem out there on the other hand you have really strong sources of content really powerful people are producing really good content again I am looking at Pankaj out there really good content is coming and it does not get distribution so this is really the crux of the problem this is why we need the model to be changed and to some extent that is what many of us are trying to do that is what I am personally trying to do with editorgy is to create a platform a platform that will match good sources of content with the audience and you use like all other platforms around the world you use augmented intelligence you use new generation technologies you create the platform which enables this match to happen because if we are to have a future in journalism in 2018 there is no point in us just regretting oh it was to be so good 20 years ago yes it did there was a golden age of journalism 30 years ago yes we know that but how long are we going to go on ringing our hands and saying oh isn't it sad that things have deteriorated so much we have to try and change the model we have to look at another the future what is the future of journalism what is the future of media how do we create the model that can enable things to happen and with technology it is possible you were saying sir that you are amazed at the fact that people can use their mobile phones to take a picture but that is only starting and this is something I don't want to take too much time out here but this for example is possible I don't want to also plug editorgy too much but theoretically today you can use your mobile phone any of you in this room you can tell your classes you can tell your students and the courses that you are teaching they can run a news channel of their own using a mobile phone and you can download it right now in fact I would encourage you to do so let me get in that plug out here download it right now and by the time the day is over you can run be running your own TV news channel just press a button say add your own opinion share it with whomever you got a news channel up and running from your mobile phone that is what technology is going to permit it is already happening out here I am sure other people are going to come up and do even better platforms and they are going to create new forms in the future so the future is here we have got to not just think about what happened in the past but we have got to find a way to shake up the entire industry to embrace technology to find new ways of doing things and then the golden age of journalism will return but we have to find the right way of doing it and one of the ways of doing it when a lot of people look at me and say oh so you are encouraging citizen journalism not entirely because there is one thing that I think journalists have to keep in there and trained journalists which is why media educators become important the ability to tell that this is a genuine story and this is opinion that distinction is being lost on journalists every evening when we are putting on our TV news we are seeing it people are lying opinions to masquerade as facts that shouldn't happen so one of the things that we in particular on our platform are very careful about is the facts only come from authenticated verified sources it could be our own platform it could be our partners who will provide us with the facts so the building blocks of information are genuine and they come from trained professional journalists so people will be verified it on top of that anybody in this world can have an opinion and everybody in India has an opinion sometimes 10 opinions on the same day that's fine you should be able to share genuine facts with whatever your opinion is and we should always be able to tell the difference between the two and if we can get that correct that's where the future will lie thank you his platform sir has been fact fast factual and absolutely unfake because I would add on to what I said about the cell phone cell phone also quite a lot of fake we call it chat we call it whatever terminology my young students want to use they are welcome but that's the direction we are talking on and that leads me to a question ma'am you asked that I should ask you a question you are talking about changing the scene in terms of films he talked about TV the idiot box being out now the fake box coming in how would you prevent that in terms of students and their capabilities equipment today you are that big 35mm camera is outdated chandra sir has just said I can shoot a whole film on that cell phone could you enlighten the young lot here how this technological change is going to add on to what sir said a few points thank you chair my esteemed panelists and friends people here sitting in the not so far away but basically there are two things that I definitely want to answer and I also have a f in it which is I am answering from the front foot and I always look at the future so unless and until you are on the front foot you could never look at the future and that's why my good friends punk or you know Vikram they are right now they have entered the domain to play from the front foot now Vikram has explained that what is the reason that since I run a media company which is also in news which is also in digital which is also in content generation for you know the GEC channels and I also run a media institute so please understand without being arrogant being I forget what Ajay Ji said the word which was when the students entered Guru without having that with all my humility I want to say one thing that any human being has to keep on inventing oneself I have learnt what I have learnt what I have to do should always be so whatever youngsters or whatever people study or study for them this is more important because whether we like it or not like it we are not living in world which is alienated world we are living in a world which is a completely connected world if we don't do then someone else will do if here I understand that you know when you are taught there is certain level of knowledge which has to be passed on I am talking of knowledge I am not talking of bookish knowledge and how is that knowledge being passed on to the students please see please see and see all of you please see how the way that the students are being educated do they get the right kind of training do they get the practical training do they get to write the way because when we are on the other side we become consumers how the consumer is taking it how my story is being taken in definitely it was very good 20 years ago when we all entered television we were fresh we were new we knew we could take on the world but we all had a huge big enterprise with us I mean I am sure we all have gone through that 20 kilos of camera on our head and on shoulder and going and knocking a door of somebody like Tau Devilal at 12 in the night and saying we had the guts to do that and he had the humility to come out and say so what I am saying is that unless until you have an enterprise and that enterprise is immense in any Indian let's be very clear so when I talk of front foot with this enterprise I went ahead and I know unless and until I am able to match up with the future match up and catch up with the future I will be redundant I am very clear I will be redundant so therefore when I am not plugging in my eye sums but whenever my students are taught they are taught everything whether it is exposure their whole world view changes because we are not in an isolated world I do understand the pressures of journal of being a journalist today we all face it and you would see I am not so much on social media myself because I have taken a stand that I will not be so much on social media so I but it's a fact today if one has to do run a media organization or a journalism institute or a journalism news channel you have to go with a very clean mind and I don't want my mind to be clogged because I will also start believing that whatever is coming on WhatsApp maybe is true whatever is coming on Facebook is maybe is true so the issue is that we have to be very very sure and what is that surety that surety will come from professors and teachers like you you people have to ingrain this in the minds of those young students who are coming there that it is very important to discern between a fake and a non fake it is very important to know the world view it is very important to know the history of India it's very important to know the the whole history of world so you have to keep on gaining yourself you have to learn you have to learn and unlearn so it is so it's you know I feel that without looking of future like that we should be you know but today everybody is a journalist I mean why why can't we how can we ignore it anybody and everybody is a journalist and I think in 2-3 years or maybe 5 years time it will be very clear that the good bad and ugly will get segregated so it's a process that we are going in and nobody should say no to technology how can we say no to technology we have to adapt we have to ensure that technology helps in a positive way today if one is making a film on this phone it's very good people have tool in hand we would have thought yes I agree Iran a news channel I understand the pressure of market forces than me would understand that it's very easy to say see they keep showing it's very easy to say but it's very difficult to sustain there is enough scope I mean I don't understand why a media student cannot go into any other field if you are running a media institute why a student cannot go in any other field they are more capable they are more aware and they are more their world view is much more than a typical graduate so I you know I don't know where to draw this line neither I want to draw this sake oh the future is bleak for us no future is not at all bleak for us future is very good for us it's how you look at it I would look at the glass always half full someone else can look at the glass empty but for me technology future journalism and media all is one and that's how I play it I always play it from the front foot thank you a few days back I think I put Facebook post looking at an ad from Maika Maika is Mudra institute of communication and advertising they say if it's marketing come to Maika it was an admissions ad ma'am what you are saying is absolutely correct we down there the stakeholders of media need to reinvent ourselves and if you don't reinvent reinvent yourself gone are your careers gone are your profits gone are your placement opportunities could be in the area of TV could be in the area of films could be in the area of journalism and what have you so sir may we have a few thoughts from you on that Mr. Bail thank you for organizing this and thank you all of you to have the patience to listen to old fogeys who about new technology can I request one of your can just come here ma'am I usually record everything I say on public platforms because so tomorrow no one can accuse me of saying things which I haven't said we won't call you fake sir you are genuine thank you thank you very much in 1984 I did my journalism course from Lalabadur Shastri Institute of Lucknow it was under Bharti Vidya Bhavan and that was the beginning for me for doing journalism and I have my name is Pankaj Pachori I have worked Arun Asaf Ali Vinod Mehta Arun Puri Mark Tully Pranoy Roy and not so journalistic work but Dr. Manmohan Singh journalism I could not leave I tried my hand at running a business school and then I thought that this is what is my calling and I'll stay in journalism and what should I do which is new what should I do and where should I go and that's how we started we have a team of 36 people and our office when we gathered for the first time I told everyone that this is not a journalism this is not a media house I said this is a media lab and we are all students because this is the first time anyone in India is trying to do this a television channel on app and that's where I was thinking of F's from 1984 to 2018 the big F about media world and media education and media at large in India is fail and if you are on Instagram it would be called epic fail we have singularly failed to keep to media the basic of what media should be doing we are all teachers here directors running institutions and I'm sorry to say that I have taught at many institutions in India especially the communication and journalism students and that fail is because we are not fast enough we are not keeping up with technologies in 2010 I was called to the Indian school of business which is I think one of the best school of management in the country and they asked me to start their media center I did research I was still working with NDTV those days I did research and I said these are the contours of a media school which will be teaching the business of media now ISP is a very well established well known institution for 8 years now and my only condition to them was that I'll come and I'll help you set it up my only condition is that the funders funders for this particular center should not have a clash of interest so I don't want a media house to fund it I don't want multinational some CNN or Murdov or Newscorp to fund it for them it will be like this 8 years on they are still finding someone who doesn't have a clash of interest with media including India's top corporate houses that is the failure because India's corporate houses while in the media or outside the media have not invested enough in media education it's a huge industry today I know the government is spending so much money IMC is opening up new centers every media house is having their own institution but a media house with an institution I've taught at NDTV school of journalism both of us have a media house funding an institution like this is like Halwai trying to taste his own Jalebi's because that's the clash of interest how many of you know who are sitting here have heard of video leap when I'm talking about running a media go news video leap is the latest app which is basically teaches you how to edit video Vikram talked about video short video is the latest on my iPhone there are 3 apps which I keep I'm teaching myself at the ripe old age of 55 what do we do the 3 apps which I use are iMovie, Want and video leap this is the latest and this is what we are teaching and working on for the last 6 months I've been trying to hire people for go news and who should know Hindi who should know basic ethical background of journalism and who should know want and video leap and I'm not getting that mix and that's why I say that our media education industry has failed so I have to hire someone who knows 2 out of 3 and teach them the third one that's the only way you go forward because among this entire technology when the Google wanted to come with Google news my only question to them I was working with the prime minister and I asked the Google ponchos that how many who's going to head it who's the editor so I was thinking someone from New York Times or CNN or some big you know company, global company would be heading Google's news no this is all it's all there we are just putting some technicians to give you the news anyone can be a reporter these days as Radha was saying anyone with a camera the trouble is not at the reporter level the trouble in news is at the editor level they are the gatekeepers they are the guys who will find out what's fake and what's not fake what is opinion and what's fact and how to put those facts in an interesting manner as you were saying so people watch it you need editors we don't have editors anymore in our news industry we have marketing people the number of managing editors who have approached me while I was working prime minister's office for commercial activities which are events and awards is remarkable and I used to tell them don't talk to me talk to the joint secretary of finance he's the one who will do this so that's another failure that we have mixed up the funding the finances of media with the ethical side of media two don't fuck there has to be a wall of china between the two editors are not supposed to go and pitch that's the job of your marketing department or sales department so this is the second thing which you have to discuss with your students and update them and upgrade them they will not be upgraded I'm still at my age a little bit of experience I've had in media I'm still learning every day every day I'm on that phone and looking at sources and you know where the source is coming from the best teaching for media it's not coming from marshal macloan anymore we've read all that when we were in college 1988 I visited Berkeley communications department Tom Goldstein used to be the head those days who's still writing books those are all gone your latest teaching modules and methods are coming from Hollywood write that down ask your students to watch movies how many have seen the post all the young people have seen the post how many have you seen the state of play the state of play it is Russell Crow Amy Smith and it's about journalism it's about what happens to journalism when your source is also your friend in this case a senator this is where the new media is coming from and this is what the new students want to learn from we don't learn these things we think we have done our PhDs and this and that in India no one has ever asked me ever after 1984 when I became a training reporter in the patriot newspaper with Arnau Safali no one has ever asked me about my media degree at only at the entry point you are asked for your media degree tell your students your media degree will get you in the profession one foot inside and then you are on your phone and media is like a calling and it's not a career tell them that also and tell them if they want to become rich or famous like Vikram don't get in the media because Vikram's first love is not being famous and rich his first love is news and this is what I keep telling people calling it's not a career fame money all these things are byproducts tell your students please these are byproducts you have to do good journalism and all these things I promise them and I promise all the students they will follow I'll just end this here there are some things I wanted to talk about about my venture but then Vikram says that I'll be pitching people what we have decided basically to do is to do our own news we unlike google or twitter will not depend on an algorithm created by some engineers because editorship is the main component of news of media that's what is most important and that's what we should do and with that you can win Vikram was talking about platforms and distribution we launched a platform we didn't have much money for marketing we'll just launch it and we'll see how it goes let's front foot this is what Anvada was talking about let's go on the front foot let's do it let's see what happens the platforms will come to you we have watched more on daily hunt now and then on our own platform millions 3 millions a day or something like that video views so and the future another F we talked about and the future is bright if you stick to these things if you don't waver if you don't let big guys acquire your equity for the first thing they will do if you got some new ideas they'll come and they'll say oh let's let's get into collaboration stick to your guns yesterday we got our first big advertiser big multinational company jeep and that gives me a lot of confidence and happiness to tell you that the news is living surviving and it will thrive thank you pankaj anand aside everything you said about requiring an editor can i take that recording from you people often ask me why have you named the company editor jeep so that's a very good reason as to why we called it editor jeep the requirement of editors in this entire system so if i get that recording i'll put it in my ad i'll whatsapp you he's talking about the 1991 liberalization of media in that the source who is the source the editor 360 degrees that's in the light of end with due respect to the gurus here he also made a commercial you're looking for a career career of an editor please come to me so it's open to all of us i hope oldies are allowed also because editors must also have grey hair or less hair and may be a punch so sir may i invite you to come and tell us something here is a gentleman who's a CA and a finance man and talks about finance in the stock markets which 90% of the people here are interested so media and communication sir thank you sir someone is munch, someone is sudden my effort is little bit different it refers to future and i call it freshness freshness of ideas this is what i feel our industry requires the most at this point in time probably i'm the youngest person on the panel in terms of not in terms of age but in terms of experience and i'm still a media student i finished my qualification of chartered accountancy and company secretarieship in 1993 and almost 13 years i worked in that field and by accident i came into media it's interesting that the field i'm from i'll talk about business media and that too hindi business media because people who know me i learn from them i can tell you both ways i'm experiencing when i was outside the media and now i'm a part of the media it took me 5 years to become a C.A. and C.S i had to work hard i mean it took me 5 years to read 15-16-17 hours i didn't have 5 minutes to come into the field i took time to become an editor with experience if a chartered accountant is an authority a doctor is an authority an architect is an authority for which there should be a certification as Mr. Pankaj said why shouldn't there be an editor it's good that you didn't have this discussion 15 years ago 12 years ago you couldn't become an editor but today there is a need for media professionals there should be a certification there should be some mandatory there is a need for us citizens every person every citizen has the right to say but also for the answers there should be some kind of certification second there is a mismatch mismatch in education and mismatch after that education in execution today when i do business media i get those people or the business or those people who read about the media a mix a combination can't a chartered accountant get less journalists can't a MBA get less journalists can't a MBA get less journalists can't a journalist get a job or a journalist get an MBA so all of us those people talking about media education if a domain expertise if a domain expertise a domain expertise a domain expertise a domain expertise a domain expertise a domain expertise but do you also read about business with journalism if you get that combination then i think it will be very good second when we talk about freshness we need our body fresh every day we need our mind fresh every moment then why don't we need our profession fresh every moment why not the crux is are we creating content with credibility and that's what is required in any kind of field in media if it happens we are copying one formula is successful is it right or wrong we don't know but formula is successful let's supply it we are not thinking out of the box and trying to create new ways and means to present news or to communicate that may be missing i want to tell you business media is too small but in English news we are almost lost in the last 5 months in business media electronic media are almost lost in the last 5 months in such a situation the new generation viewers are coming young viewers are coming are we giving them fresh ideas according to their thinking i think we need to think about this i don't think it is right you all know a lot about media i am learning from you but Anurag ji, Abhishek ji and all the viewers thank you very much for inviting me very interesting to note and particularly students if you are in the room two languages have been spoken English does exist but Hindi too and i am sure when he talks of domain whether it is in the stock market or it is in advertising or PR or government politics language localization we should not forget and i will club that with domain knowledge that you said when you talk of domain knowledge sir my understanding is think out of the box but think within the box please do not forget within the box otherwise you will get a kick on your backside and you will lose your job that experience i can share it with you you want me to name the company i won't however that was what he suggested domain new skills for new stakeholders so sir may i come to you last but not least gentlemen from Naiduniya fame Naiduniya, Chitralekha those are language magazines which brought in journalism TV came later and then now social media or the cell phone or whatever so sir your view sir since the time is very short i will start with the solutions first i mean we all know the problems and much has been talked about the problems later on i will come to the points which i had in mind to discuss can the exchange for media and Anurag Batra can take a lead of establishing some kind of a body to revise syllabus of different media schools first thing i mean much has been talked about the syllabus and old syllabus of 19th century or like that or 20th century can some body be created to invite syllabus and revise them as per the requirement customizing them as per the local requirement requirements of the cities and regional requirement lot of regional growth is taking place in media and mostly we are talking about what is being phase or being felt in the cities can we have the training courses for the teachers of media schools can we ask them to come and talk to them for a day or two interact with them and ask them what kind of teaching they are doing i am very confident that not many of would come because they would not want themselves to be exposed to the realities of the media requirement you said what media industry needs can it be done and if they come they will tell you what kind of political interference is taking place in media institutions what kind of appointments are taking place in media institutions what kind of vice chancellor are being appointed totally incompetent vice chancellor and they are heading media schools and they are revising syllabus as per their political requirement so ask teachers to come and discuss this body should take auditing of infrastructure existing in media schools now if the body visits media schools they will find what kind of facilities are existing there and what revision needs to be done and lastly call the meeting of media owners and ask them why they are not taking the graduates of media schools having spent more than 45 years in English, Hindi and Gujarati newspapers I have come to realize that the owners, proprietors are not interested in media education and lastly I mean if my time is still there I was a member of the press council of India when Markandey Karju was heading the body and he had formed two committees and I was made the convener why I am raising this point that our gentleman the last speaker said about certification of editors when I was made the convener of that body I was assigned two jobs first was to find out if some kind of a license is necessary for becoming a journalist now he said about chartered accountants surgeons have qualifications chartered accountants have qualifications, lawyers can't be active without having a degree to study if there could be some essential qualification needed for becoming a journalist so committee was formed I was convener, we went to the details we invited suggestions and there were lot of protests from lot many people that if if somebody with no education can become a politician and rule the country why do you want a qualified journalist so we went into the detail and ultimately we could not finish our report and second was the way media schools are growing I mean like saloons air saloons how can we introduce excellence in excellence in journalism or mass communication of these schools so we invited suggestions and we wanted to know that what kind of facilities are existing nobody came forward, not many came forward so I mean to improve media education is an old subject and it has been it has been discussed it will be continuing, it's a continued process and we will be discussing maybe even after 10 years and the last point what ultimately we want to teach in media schools and what media schools are teaching I mean in media for the last 45 years over 45 years and I am in industry also and I am teaching also in media schools, I am a regular visiting faculty if I become if I am sitting like an editor I would not like to take the students I am teaching and the kind of teaching I am doing is not relevant to my industry can you teach them about the politics the existing politics or we want to make them the schools or students how to become a good anchors on TV channels what our friend talked about can you ask them to graduate themselves and about enquiring about threats to democracy and democracy being stripped into the hands of dictators what kind of media we want to create in this country through media schools we want to create mediocre or media persons the issue before media school says that they don't want to teach what kind of media is required in this country you don't need media and dictatorships but you need media and democracy so that the democracies don't become dictatorships so it's a huge challenge and it's a challenge before everybody who is in media I mean when I started way back maybe more than 50 years 45 years 50 years the things were totally different and today the things are totally different to remain in industry as an independent and talk about democracy talk about the issues which are relevant to media nobody would come and I mean say anything so it's a huge challenge I would say and I'm so glad that actually for media thought of organizing this seminar I started with the suggestions if we start with the suggestions not complaining about the things everybody know what is happening we know what is happening in media houses we know what is happening in television channels we know how our conscience have been sold to I mean so if we are really serious about ourselves in media let us start doing something rather than discussing something thank you very much I think I think we are running running out of time we are running out of time it's lunchtime and we have done it in 1.20 at 1.20 we have finished this very good I will I am not talking about dictatorship you go Pakistan you like it thank you now that's like Virat Kohli well let me just say a few words and then we break the lunch first you would have wondered why I did not introduce each of the panelists here as I said at the beginning 182 feet pillars second my nervousness which is hidden by this but let me be sure and for myself that all these gentlemen were well known to you so I did not have to introduce that's one second is I think we got a lot of food for thought on all the F's in the world I tried to be a little what provocative is the word I am learning journalism now at this old age it worked it worked and I think we got some very useful insights from our panel so with that may I request you to give them a big hand put your hands together loud and clear and say thank you sir and madam you added color in the panel the suits and the ties full color a bag full of colors good thank you very much sirs and madam we look forward to interacting with you the rest of the day thank you I am sure lunch is waiting not yet sirs thank you all the panelists and the chair I would request you all to stay on stage briefly I would like to call upon Mr Shashi Kaushik once again the co-founder of please and strike foundation kindly come on stage and felicitate all our speakers with a token of our appreciation chairman is only for the chair I don't know why they are felicitating me I think the panel thank you with absolute gratefulness thank you very much excess baggage is on Anurag Bhattra they can go this ritual is also necessary this ritual is also necessary this ritual is also necessary this ritual is also necessary you have got a bag you have got a bag we should put more money bag you are Bombay based Delhi Bombay but I have heard about you thank you thank you thank you yes too many things to carry


When politics to me means the administration of society through the use of coercive and non-coercive power. Democracy to me is a very subtle thing that has developed in the West over the last 500 years or so. It's a ladder that societies in the West have climbed where they have reached today and expect us to accomplish the same within a few years or a few decades. My academic background is sociology. I consider myself a teacher, a student, a researcher and a commentator in things that relate to society in general. I've been teaching at Addis Ababa University for the last 33 years or so. I am now transitioning from that to become an executive director of FSS, which is a think-tank organization, a civil society organization that specializes in promoting research, publication, dialogue on important issues that try to inform policy in this country. I know that there are many capable young scholars that universities employ, and I would like to promote the further training, the further development of such young scholars who are dedicated to serious work, who are passionate researchers and academicians, young academicians, to develop themselves, to develop their art by joining FSS as members, researchers and so on, and in time to be able to replace us, the elders of FSS.


Netflix Royal T. Millie Bobby Brown is back with a brand new film called Damsel. A movie so brave, so bold. It dares tell a story about a damsel in distress who has to save herself. Oftentimes these movies are hot trash. Occasionally they rise above mediocrity to something a little bit special. A couple things to note right out of the gates is PG-13. It runs about an hour and 40 without the credits and it's pretty geared towards all ages I would say eight years old and up. Now one or two of you might be rolling your eyes at this point going oh here we go another strong female lead gonna do whatever it takes to win the day and she doesn't need no man and it's just this really schlocky writing from Hollywood and it's not that. It's really not that. I mean yes she is a strong female lead but in the right way I wouldn't say rush out and watch this but if you like Millie Bobby Brown, if you like fantasy stuff, if you like the survival angle you'll get something out of this I think.