This is Stink Tech, Hawaii. Community matters here. I'm Marsha Joyner and we are navigating the journey. Navigating the journey is dedicated to exploring the options and choices for the end of life care and to assist people to talk about their wishes. It's time to transform our culture so we shift from not talking about dying to talking about it. It's time to share the way we want to live our lives at the end of our lives and to communicate about the kind of care we want and don't want for ourselves. We believe that the time and place for this to begin is not in the intensive care unit, but together we can explore the various paths to life's ending. Together we can make these difficult conversations easier. Together we can make sure that our own wishes and those of our loved ones are expressed and respected. So if you're ready to join us, we ask. Navigate the journey. And today, today is a mystical, magical day. It is, of course, a wonderful Wednesday because you're with us. It is Ash Wednesday. It is Valentine's Day. And it is the beginning of a solar eclipse. And when you put all that together, it is a magical time to think about us, to love us, to care about us. The Catholics talk about Lent and they talk about giving up. Okay. Jesus went up to the mountains for 40 days to medicinate, to get in touch with his spiritual self, to learn about this. So that's what we're going to do. We're going to look at ourselves. We're going to look at this journey that life is on, that we are on. We are going to spend this day with my mystical, magical, dear friend, Rayah Fox. And Rayah is an international interpreter of the Cards of Destiny system. Ah! Rayah? Yes. My love. Yes. She is magical. She is just magical. So I'm going to ask her to show us. But now, I want you to take notes. Would you like to have a map of your life's journey? Ah! Ooh! Have you ever wanted to script, to take the script to take through life so that you can navigate the journey? Ah! And give yourself permission to start all over. So that is what we're going to do. We're going to look at, on this magical day, we are going to look at this system, international destiny card system. Ah! Rayah, darling. So tell us, where do we begin? It is an international system, and as I was speaking about it here, because I have international clients, but it is a worldwide system, an ancient system. The system is far beyond this time. It's not something that somebody made up yesterday, day before yesterday, and came out with this thing. When it was introduced to me more than 22 years ago, I had one never heard of it, and two was fascinated. My whole life, I've been fascinated by astrology, numerology, anything that was alchemical or mystical, or seemed like more than what was going on in my immediate reality or what people around me were talking about. So I was introduced to this system, and I couldn't figure out how every day of the year has a playing card attached to it. I actually have bound a deck of cards so that we can think of it as what it really is. It's a little book, and they called it in the ancient times a little book of secrets. Every day of the year has a card attached to it. Today, interestingly enough, Valentine's Day is a jack of diamonds, and if you know jacks who are always enough about me, let's talk about me, that's their only thing. Jacks are also, they indicate initiations into a higher level of something. Interestingly, it's the jack of diamonds. It's not the jack of hearts, which is an initiation into a higher level of love. This is an initiation into higher values, and also the jack of diamonds is known as the super salesman. So if you think about Valentine's Day, it's a day to sell. Yeah, and everybody sells, sells, sells. But I mean selling the love to making your, your, your beloved by you, by your... And, however, attached to that is the guilt if you don't do it. So that's why I am saying... Interesting. Oh, yeah. I am saying learn to do, to love yourself so that if somebody else doesn't do, there's no guilt. I love me. I am going to take care of me. This is the beginning of Lent. I am going to nourish my body by not needing all, eating all this junk. So that's why I'm saying don't, if somebody doesn't give you something, don't do the guilt. Don't, don't. Let go of the guilt. That's so far beyond my realm. I'm hearing you, but... Just don't, don't go down that road. Don't let the commercials tell you you've got to have flowers that wilt and chocolate that makes you fat. Don't go down that road. That's a wonderful thing about this system because I remember before I was introduced to the system, I used to say things like, gosh, we're just thrown into earth life and we don't have a guidebook or a map. We're supposed to figure this out and we're always starting all over again from square one. And God bless them. Our parents don't know what they were doing either. So they could teach us basically how to navigate certain areas of life. But for the navigation of the heart's journey and the soul's journey, which is what life really is, there was nothing. So I must say that I did not discover this system until I was well along in my life. And I'm not one to lament about what didn't happen before.  But it was kind of like, whoa! One of my sheer delights with the system is to work with people who are before 30. People between 18 and 30. No, no, no, that's not the point. I'm just saying that because when you have a sense of what the picture of life is, the overall picture of life and there's a structure and there's an unfoldment and there's cycles of time and there's highlights and there's lowlights and there's times when you can move forward in this area of love, romance, relationship, occupation, real estate. There's time for a beginning, middle and end of things. And this show, the system shows all of these things. And so I love to work with people. I mean, I have some clients actually that I've had since they were in their 20s and now they're in their 40s and they just thank me so profusely for the profound impact that the system and having this system, the difference that it's made in their lives. And that humbles me tremendously. So, we have the jack of diamonds and that's today. Today. And we're going to use you as an illustration so I have to kind of get your... That's okay. You're okay. So, Marsha by her May 22nd birthday just to show how does this work? You know, because I could talk for hours about the cards of destiny system but let's just go into it with a solid example. So, Marsha May 22nd, two days before me. I'm so thrilled to say, is it ten of diamonds? Ten is always a number of success. I'm sorry. I'm sorry. I'm talking too fast. I'll slow down. It's a ten of clubs. It's a ten of clubs. So, hearts are love romance relationship as you would expect. Femininity is expressed by the hearts mothering, home and family. All hearts suited areas. The clubs which we are is information, communication, talking to each other, sharing information. The professions of teaching, speaking, writing, publishing all fall under the auspices of the club suit. And the ten of clubs specifically is success. All tens are success. So, if you have a ten card, it's success in the area of communication. The diamond suit, which today is a diamond day as I said, diamonds always indicate money but larger than that they indicate values. Values are personal values, family values, community values, tribal values, country values and then world values. So, that's always important to remember. People get excited, diamonds, diamonds, but it's values as well. And then the spades suit that are really the elders. They're generally when a person is a spade suited person, has a spade birthday, they're deeper. Spades on the mundane level govern work and health matters specifically. But spades also have to do with wisdom. They're the wisdom suit. So, you may find it's not always true, but most any spade suited person that you come in contact with has what I consider a little bit of a heavier load to carry because they can. They've been through the others before and so they can. So, Marsha is a ten of clubs, a ten of clubs. Success in the realm of communication. This is a picture of the grand solar spread. This is what I work from. On one side is the mystic spread. It's laid out just like I have this book laid out from the first card to the last card. You're going all the way across, across, across, across, across. When you get to here, then you rise up to here. And it's a fascinating journey. It's a fascinating picture of the journey of life since that is what we're doing. It's navigating. I love that it's 1111 right now. We're navigating the journey of life. And this little book really assists in that. Over here is the mundane spread and this is where we read from. So you notice that here you are up here in the crown line. The ten of clubs is a teacher's card. I think of it really more as an advocate in that more ancient sense. You're a person who teaches people how to advocate for themselves if you will. So what that says about you, you stand right next to the aid of diamonds. So that is the mind spot. And as a Gemini, this is a very important card for you, but your large sums of money have always been on your mind. When I look at a ten of clubs, it's a rare ten of clubs that didn't grow up with everything that they needed. Nothing was lacking. Now what does rich mean? Rich is in your own reality. How did you experience it? So you had everything that you needed. The most prominent and meaningful card in Marsha Rose's Destiny Path. Because what we're looking at is the Destiny Path on top. And then at the bottom is the reading for the year. But in your Destiny Path, look at that. The King of Diamonds, which you stand right next to. The King of Spades. Let me slow down just a tad. The King of Spades is the most powerful card in the deck. And you have the King of Spades as your Venus card. That means you see the whole world of love through the auspices of the King of Spades. You have love for everything and everyone. In your personal life, that means you would always have to be with a very powerful man. Because having the King of Spades as your Venus card makes you an extremely powerful woman. And many, many men went scurrying and running away because it was just way too intense and powerful for them to even deal with. But as far as your life's work, it doesn't get any better than that. The King of Spades assists you in actualizing any goal that you think of. And that's throughout life. I could say that there were early years, maybe in your mid-teens and when you got to be 30-ish, where it was kind of like if you had a sense of it, which most of us don't because we don't have the access. Anything you wanted, you could unfold. Anything that you wanted to create, any job that you wanted, anything like that, it depends in some ways on what was happening during the course of the year. But you had the ability to actualize whatever your heart desired. So we need to take a break and then when we come back, let's look at the rest of the deck. Sounds good. Okay, we'll be right back. This is Think Tech Hawaii, raising public awareness. Aloha, welcome to Hawaii. This is Prince Dykes, your host of The Prince of Investing. Coming to you guys each and every Tuesday at 11 a.m. Right here on Think Tech Hawaii. Don't forget to come by and check out some of the great information on stocks, investings, your money, all the other great stuff. And I'll be your host. See you too. We are back with my dear friend, Rayah Fox, who is, all of you know is the Tent Goddess. Yeah, if you Google Tent Goddess, there she is. I love that. All of you know I love that. Yes, yes, you know. And she has been talking about the destiny card system. That's a destiny system. And so she tells me I am a ten of clubs. Never quite thought of me as the clubs, but okay, we'll do that. Now, okay, so I didn't think about it. Now, so if a person says, hey, I like this idea, what would it, how do you lay out a path? How do you lay out a journey for somebody? You were talking about people in their 30s. How do you lay out a journey given the cards? Well, the lovely thing about the system and what was my big question in the beginning is that the system is already laid out. It's an ancient system. And as I showed the grand solar spread, everyone has a place. Everyone has a place already. And then if they, if you already have a place, it's just knowing where knowing where it knowing where your place is. And then what 12 cards follow you in this very specific path so that you can navigate through. You're navigating the path that you, I contend that the soul chose this path. People say the baby was born earlier. The baby was born late. I don't believe in any of that. Souls come in exactly at the time to actualize the path that the soul has chosen. So once you come on in that, give me on that date, for example, you as the ten of clubs, then you're following this path. Your path was prominent from the beginning. And then there's the other thing is that what comes after that is you have a tremendous amount of what we call spiritual energies. You have a lot of intuitive energies. You have a lot of energies of creativity and expression. And when you know specifically what those are, then you said something earlier about people feeling guilty about doing something or not doing something. When you understand your own soul path and when you understand the soul path of your mates, your children, and that sort of thing, that just takes the terror down so far. Because everyone is actually doing the best that they can to walk their own path. So what do you do? So you come to someone like me who illuminates for you by looking at your, by looking at this simple chart, very mathematical, well all of these are the months of the year and the dates. And so you're doing the cross to find your specific card. So that's the date that you were born, is what you're looking for? Yes, you're looking for the month and the day that you were born and your card is there in the cross pattern. And then I draw a chart like this and then I interpret your birth chart, like I said, this is the path that you're following from birth to death in this lifetime, where you started and where you're going. And then on your birthday, this is the important part, on your birthday every year, you get a new set of influences that work for that year alone. And so when you know that, there are years that are just off the charts. There are years when you can do no wrong. Pretty much every year has one pitfall. And if you know that, that's good too. But there are years when things are so good and they'll pass by and nothing happens if you don't know and don't do anything with the energies that are available. There are years that are so dramatic and so trying. And a lot of times we humans go through these dramatic trying years and we blame it all on ourselves. We're doing something wrong. We're not being good if we'd only not missed it. But it's nothing like that. It's just this too shall pass is one of the phrases that I use when over interpreting this system. This too shall pass and remember, the good stuff, what we call the good stuff and the bad stuff, this too shall pass. So you just, it's like surfing. I think of this system as teaching you how to surf the big waves of life and how to ride in the, you know, the gentle ones that are just taking you in while you're grinning on your surfboard and your friends are filming. Oh boy. Oh boy. You know, as we talk about navigating the journey, that's the whole purpose of the show and about the end of life.  Well, most of the religions do, don't they? So we have all of this from the childhood, right? How do we let go of that? Here, we're looking at your system. We need to let go of that and look at the end of life as we did looking forward to the beginning of life. Does this show, can we use this to navigate? Absolutely. Absolutely. I am very secure in telling certain people, looking at certain people's charts and saying, I know that a lot of people are afraid of death and you don't have to be and a lot of people are afraid of dementia, deterioration and there are certain charts where that's not going to happen no matter what. It's just not. So when you understand things like that and there are others where that may happen and here's what you can do about it. So it really becomes not something that you're at the effect of so much as you're thriving. You came in here, you drove in here. How do you want to drive through and then drive out of this course? Yes. I'm very playful about it. In my early times, I remember I offered a reading to a friend in this certain industry that I was involved in and she said, okay, she was just open because I was thinking that she would recommend me to other people. Be careful of giving anything away like that. Because what happened was I immediately saw given the information that she gave me and the facts of what was happening in her life that her mom was going to pass away that year at a specific time. And I shared that with her because I had already been taught not to fumble or hold those kinds of things back. She was furious. Her mom absolutely did pass away at that time and for me, that's kind of like, well, I want to know if I can spend some time and do what needs to. To me, that's just like, that's inevitable. We were born, we lived life and we pass on. So she was infuriated with me that I told her that it was good, I'm sorry to laugh, but to me it's just kind of like, really? And we have to get over that. We really have to embrace the reality. I had my mother hospice at home for the last year of her life. And it was hard. It was difficult to watch the strongest woman I'd ever known pass, but it was also a time for loving her the way I wanted to love her to be with her. And now you've known me a long time, I make a big deal out of everything. So I made a big deal out of she was with me when I took my first breath, therefore I need to be with her when she takes her last. And I was, I crawled in the bed.  It was a blessing. And that is the point of all of this. Our show is that we want to talk about it. We want to embrace it. We want to let go of the fear, the trauma, the pain, the ache. Yes, we all know that you're going to miss this person. This has been somebody special in your life. But we need to talk about, we need to have this conversation about the end of life. And that's why I'm asking again about if a person knows that they're coming to the end or their loved one is coming to the end, how do we talk about it? How do we embrace it? That's my question to you. That's what we wanted. What I hope our audience takes away from every show we do is how do we embrace this? Well, embracing the reality that it is true, it is not something to avoid. In fact, I've known beautiful people in my life who had their celebration of life when they wanted it. Right. Because they wanted to be there. They wanted to party. They wanted to dance. They wanted to enjoy the food. They're up in their 80s or 90s, but they wanted to have this party while they were there. That's certainly one thing you can do. That doesn't mean, okay, now I can go because I'm done. That's still up to you. I really believe that the soul, again, as it chooses its birth, the soul ultimately chooses how it will pass out of here. And when you can just play with it and embrace that idea a little bit, I'm going to go when I want to go. I'm not going to be drug out of here. It's not going to happen in this wrenching way. I'm going to go when I want to go, when I desire. When I'm done with my life, I'm going to go. I can already hear, you know, what about people if this happens to them or it comes unexpectedly. I still feel that on some level that we cannot understand, they've already made that choice and decision. They've already made that pact. So they're going when they want to go, whether they're aware of it or not. I hope I'm answering the question that you're asking. Yes. And I'm just saying that if somebody watching and says, oh, that sounds interesting, would it be in? This is the one you made for me. Yes. Okay. So would it be down here that we are, these are long range kinds of things? Those are your five main themes for the year. This is the year from your, no, not long range. What you're asking is about life path. Yes. Life is a way to calculate in the cards. And like I said, this is an ancient system. So it's very much keyed, and I, from my experience of 22 years, it's keyed into us on a cellular level. So this is not just like, ooh, airy, fairy. It's very specific. It's very, for me, scientific. And there is a way to calculate when you would leave. No one has ever asked me to do that. And so I don't. I'm reading for someone, and I see someone's passing that I know is close to them, unless they tell me I don't want to hear that, then I'm going to share that with them. Well, what I'm asking, I guess, is that this is open to everyone. And you say this is a worldwide system. People do it all over the world. Ancient. Ancient system. And so it's proven itself over the years. It's so many ways. As I said, I'm humbled by the ways in which this system has proven itself in my life and in my client's life. Well, what I want more than anything is for our people who watch to be able to say, here's someone I can talk to. Here's someone that I can... Incidentally, she's not sponsoring the program, so don't go there. But I want you to know that here is someone that they can talk to about and have a conversation about the choices and options at the end of life. Because that, to me, is why we're here, is to have that conversation about passing, about the end of life, about the choices and the options. I want you to know I'm very comfortable with that conversation. Well, I thank you so much for spending this time with me.  Thank you. As always, I am always pleased with spending, like I said, the time with you. She's also a jazz singer. If you keep thinking, gee, that voice sounds familiar. She's one of the greats of Honolulu. Thank you again, and aloha. Aloha.


Chama da car is shkedi Chama da play is shkedi So banger Trying to pretend like Little Pump is not the greatest artist of our generation That's really funny Ask that There's only one person that is in the running for as good as Little Pump It's 6'9 What the fuck?   Wait, what? Four months ago that was it?  I had to take out a loan for this I had to sell my car for this Do you accept my challenge?  Were you gonna play Mudjab Mudjab?    I almost want Willie Brown Over Ted Hendricks But ah This is actually a really tough pick right here This is a really tough pick What do I do here?  This is gonna be a bad luck Nope Oh, I like that Nope Inside zone cream hunt?  Punch! Yes, it's a punch Stop!   What are we doing?    How does it happen?  What was that camera?  Oh my god Oh, what time pass was that? That was cheating the entire game That game, bro It was so close Oh my god All right, ladies and gentlemen I am gonna spend my $1,000 wisely I'm gonna buy a Vic poster and write on it I'm gonna put 21 to 15 over time And it'll be the new backdrop for all my videos How about that? That work?  You do a rematch and we hit 15,000 likes? 15,000, you got it You got it I just got it All right Peace out, boys


And this is a short title. So the term patronization was suggested to me by Nikita Nikrasov, and I got official permission from Vasily to use this term. Anyhow, so I will talk about two papers which is not yet out. And I hope they will be out this year, but I don't know, we keep, I mean, hoping. So this is work done together with Guido Fistuch, who is a post-doc in Korea now, and myself. So first of all, let me explain what's going on and what's the problem I'm going to address. So I actually would like to look at N equal to supersymmetric Young-Mill theories on curved background. And I would like to basically ask two questions. Of course, first question is sort of existence. And second question is, I mean, when they can be localized.  So let me just review what's the situation historically has been. So what do we know about supersymmetric theories on curved background? So of course, first thing what we know is, goes back to 80s. And this is typical of the 20th century, typically goes under the name of Donaldson Heaton Theory. And this is basically, we call it twisted N equal to Young-Mills. So this theory is basically concentrated. So you can put on any curved manifold, you know, there is sort of an identification of Lorentz group is SU2R symmetry. And you can put on any manifold. And basically it's related to this equation to instanton equation, et cetera. And then theory is supposed to calculate in some way volume of intersection numbers of model space of instantons. So although this theory has been formulated for a long time, it's extremely hard. So basically no calculations. I mean, concrete. So I mean, you can put theory everywhere, but if I give you manifold arbitrary and ask you to calculate something in a closed form, I mean, it would be very, very hard. So then around 90s, around 95, well, basically this paper is 97, 98, by a bunch of Russians, Losev, Ykrasov, Shatashvili, was suggested the program when you try to understand the theory in a current way. So in particular, of course, they were interested when you look at R4, and then you put certain equivalents here.  So this would of course require that your manifold has a symmetry. So, but their main concern was for actually this space, et cetera, and eventually all this program, I mean, around I think 2002 by Nikrasov has been calculated. So we have Nikrasov partition function, which is basically just a sum qn and of a modular space of instantons. You have to calculate volumes and you are doing this in an equivalent way. So the whole idea is that you have to use full equivalents. So you have a torus, which is basically rank of the group plus two. And then there are certain subtleties, but they actually only fixed points and points contribute from this modular space. And these actually points can be a posteriori interpreted as a point like instantons, reducible u1 instanton sitting at the region. So this is Nikrasov partition function and it depends on the value of colored infinity. It depends on q, which is an instanton number. And of course it depends on this EQR and parameters. So basically this is also, you can think as a current parameters. So by the way, right away in two years, there is a paper in 2004 again by Nikrasov, which is basically what he was suggesting. It's not actually derivation, but it's a reasonable suggestion. He said that if you would now look, try to look at some Toric manifold, Toric 4D manifold, and you try to put their EQR and Donaldson-Witton theory. Donaldson-Witton theory. Then the idea is the following, that for this manifold actually, you have to glue his flat partition functions for R4. And then you write one contribution, epsilon, epsilon, AQ, another contribution, et cetera, another contribution. So basically you have to put contribution for every fixed point. And also there are some, will be shifts in here and some, some related to H2. Second carmology. So what's he called fluxes? So it's very reasonable conjecture, but in fact this type of formula was suggested by Nikrasov in 2004. Hmm? Epsilon 1, A, sorry, AQ. So general formula actually, what he suggested, it's in fact in proceedings, part of the things that what Nikrasov is writing, you cannot find anywhere. So it's one of the proceedings, I don't know if it's on archive. So here it's basically for every fixed point, you can have to put Nikrasov partition functions, and also you have to put certain shifts and have a sum of H2, because if you have non-trivial H2, et cetera. Okay? So this was suggested, there are no integrals. It's not was derived in any way, it was more or less suggested. It looks reasonable. And of course you have to discuss if it's compact, non-compact, et cetera. Then of course in 2007 it was Peston and he was able to take an equal to theory and put it on S4. And then basically his answer on S4 was written as follows. So it was written as an integral dA over Rn, and then you would have a right a Nikrasov partition function of IAQ. In principle, I mean these parameters you can read just as from the data from neighborhood of your point and in principle you can squash it. So you can consider not necessary around sphere. Then times some polynomial of A which is correspond to classical fields. There is no need to write perturbative thing because it's also decomposed. So Nikrasov partition function also has a perturbative part and it's also factorizable. So now in Peston's story the problem was the following that this is actually instanton contribution. And this is anti-instanton. So in principle you have point like instanton. So let me first of all stress out that if you honestly if you compare this result with Nikrasov result this is a derivation. This is a conjecture. Okay so Peston conjectured this result. It's not derived. For example here there is different approaches. You can regularize, you can introduce non-commodativity, etc. Here it's not. I mean we are not actually controlling configurations. They become quite singular. This is a general feature of four and higher dimensions that we conjecture results because our configurations are singular. Then we actually don't want to analyze PDEs etc. It looks very complicated. But it's a very reasonable conjecture from many points of view. Okay and then basically after this result so that people you know wrote supersymmetric theorem, the score, sphere, etc. But actually it was no any full classification of n-equal 2 theories on curve manifold. There were different attempts. And also I'm at least personally unaware of any results on other manifolds. So there are for example from CISA group there are results for equivalent Donaldson-Witton on CP2 as 2 times as 2. But not a generalization of Peston when you try to take n-equal 2 theory. Now when you look at these things so when you look at the necrosis conjecture result when you look at Peston result there is a following crazy idea which will pop up in your mind, right? So basically what I think is the following would make sense. So imagine I have any manifold. So I have a manifold M. And then I would have some vector field or some action of the group for example. It's very natural to assume that I have action of T2. And then I would assume that I have only isolated fixed points. One loop determinant you can also factorize and put in there. Just to save time in writing. So then I have my manifold. So imagine I have my manifold. And I have only isolated fixed points. Right then what wouldn't I mean when you look at these two things what you would think is the following. Let me randomly distribute instantons and anti-instantons. So I put plus, plus, minus, minus for example. And then it would make sense that I would start to write for you now any cross-partition function. So for Q, so this is contribution 1, 2, 3, 4. So this is for 1. If you are in parameter Cepsilon I can just read from the Toric data. It's a local data. Then 2, again instanton. Then 3, anti-instanton. And then 4, anti-instanton. And of course I have to integrate over parameter A, et cetera. Sorry. No, no. No, I mean at that time in 2004 nobody even thought about it. So his problem was actually tried to think so this was speculative. So he knew what's going on R4. He said let's me take a Toric guy and imagine. And he said that if on R4 all contribution comes from point-like instanton then it would be natural to assume that everything comes from point-like instanton sitting at fixed point. And then the only difference was that if you have H2 there will be some fluxes. And he again gave a conjectural transfer. So at that time was not even thought. So I mean till before Teston came with this thing I mean he even didn't pause the question. Okay so you can try to think of this answer maybe there is some classical term, et cetera. Right I mean it looks natural. The answer is that this is in fact the answer. So let me first give you tell you the answer and then try to explain why it makes sense and tell so basically elaborate different points. So the answer. So if you give me a vector field so if you give me basically any manifold with T2 action again if your mathematical pedantic doesn't have to be Toric because Toric typically assumes symplectic is just some good T2 action with only isolated fixed points. Fixed points. Then what you do you distribute distribute plus and minuses arbitrary. Then the statement is the following that there is exist supersymmetry there is exist killing spinners. I mean there are some subtleties I don't want to discuss. So basically if I want to talk about normal killing spinners I have to assume that my M is spin. But this is can be actually relaxed because any formal manifold will be spin C. But also works also works for spin C. But I don't want to discuss it. Okay so then there is exist the killing spinners satisfying well satisfying killing spinner equation. So there is exist a supersymmetric young mills on this M. And basically you can there is some technical subtleties but in principle you can write the answer and their answer morally is exactly this. Also here you have to assume that you may have a sum of a fluxes if there is H2. I mean you cannot exclude them etc. So this is the answer and we actually construct it and the thing is that in a way we construct it it's maybe unusual in the area but maybe it's a very good approach. So visual thinking we always criticize that visual thinking is bad but sometimes it's very good because actually we assume the answer and we derive things. So for example when you write a solution for killing spinners when you fixed also gravity backgrounds etc. They look crazy. I mean certain expressions looks in general they go for three four lines. But they exist. I mean so it's an honest thing. Now if you will try to do address problem in this Festucha-Seidberg philosophy from beginning I mean you will be killed right away. So it's better to guess the answer and then fiddle everything inside. So for plus I will put instanton so it's instanton and for minus it's anti-instanton. No they can be arbitrary. I don't sum it no. Yes each configure. So for different distributions of on the manifold for different distributions plus and minuses I have different supersymmetry. I can tell you there is purely very simple mathematical theorem. So if you give me a four manifold compact this killing vector so actually in construction I just need a killing vector. So then the killing vector typically you would prove that either it's S1 and this typically will be factorized or just part of T2 or T3. So there is no other possibility there are mathematical theorems. So in a way T2 is the most interesting case. But actually what you need you just need a vector field which is killing. But once it's killing there is theorems for compact manifold that it basically comes from the group action and typically it's some torus. And cases like you know S1 or T3 it's very degenerate. T2 is the most interesting. Of course in this no. T2 S4 has a I mean T2 action right with two fixed points. Yeah. So just write this as a question in R5 right. I mean zeta1 square plus zeta2 square plus x5 equal to 1. And then you rotate the zeta and this is exactly your T2 action. Any other questions? So let me try to explain sort of physical and mathematical meaning of this etc. And basically also what is interesting it's the technology we are doing and in a way and also what I will try to tell you in a way that what Paestun did and what Donaldson Witten or Nikrasov did it's not that far away. It may look that it's very far away but it's a variation of the same theme. So there are two different concepts etc. Here so let me try to think. So let me first give you idea why do we like Donaldson Witten theory? It's basically because at least formally we can define and calculate. So the whole thing is the following that we have f plus zero and this is elliptic equation meaning the following if I would add a gauge fixing so I'm looking at linear rise so I mean I can do it properly mathematically but I'm just oversimplifying things. So if I write this equation since I write a matrix you know as with momentum then this matrix away from zero is invertible so this what means elliptic. So in compact manifold ellipticity and being Fred Horn operator it's the same thing so basically the kernel is very small so it guarantees me more or less that dimension of my space is very small. So this is modulus space then I can basically at least effectively reduce my theory to something finite dimensional. So this is elliptic. So another thing is what you can do is what we learn in localization problems nowadays that not only elliptic problems are good but also transverse elliptic problems are good. So transverse ellipticity is a very simple concept. If you have a group action so if you have a group action okay then what you would require from your question is that you have elliptic things in a direction transverse to group action. Okay so this is transverse ellipticity. It sounds very funny so of course it's very hard to read ITI lectures but it's not that hard problem. So the simplest example is the following. So imagine you take s1 times c right and then you take a Dalbo operator here. So you have coordinates t zeta zeta bar. Okay so typically when you would have c you write a Dalbo operator it's elliptic operator. Okay and for example if you compactify the space then there is very little I mean very finite dimensional space of solutions in which you annihilate this operator etc etc. Now if I put on a bigger space so this is my action of the group this is s1. So in fact those operators transverse elliptic it means that it's elliptic in direction transverse to s1. So basically I have to look and this is a local concept I mean it's not a global thing. So you just look writing local coordinates and this is transverse. Now what is important why do we like it? Because actually if I write some any good operators here on this whole space for example if I would write a Laplacian then this is obviously will be dt square plus d d bar. So typically this is way of checking transverse ellipticity so if I take my operator for example d I write some d dagger then I write d divided by t of square it gives me typically second order of elliptic operator. If this is the case this is transverse elliptic. So what is good about this operator it would not have a finite dimensional kernels but it has a kernels if I start to basically expand in the modes of this guy it has a finite dimensional kernels with this fixed I mean value of I mean of my well not winding but if I start to expand in free modes. So this is basically what I'm doing instead of analyzing determinant of this we actually can reduce things I mean to there that's a whole notion. And again calculationally it's very good because what is important that we still can control situation. So the thing is that in principle we are in all days we are very much fixated on finite dimensional modular spaces because we like integrals of a finite dimensional space but what I'm saying is that if you're basically modular space is infinite dimensional but there is a very clear sub-locus with respect to gauge I mean to whatever your Eq variance which is finite dimension you still can calculate things and basically put this some generating function etc. So for example let me give you a very simple example so in 4D this is my elliptic problem. So I can ask that I would like to construct transversely elliptic problem from there. For example I will go to 5D and again my discussion is local so let me add a coordinates t so then I will have differential dt and then I will have a vector field dt. Okay Just local so think about manifold m and I just add a direction I mean I don't care it can be line. So then of course what this would be natural is that I would write fh plus so horizontal so I'm just now doing cell duality only in horizontal direction so I don't have anything there so this is this so this is three conditions then of course I have still to put a gauge fixing this is one condition so now in fact you know things are actually missing up so I have to add one condition of course what would be very natural is to add this condition so somehow effectively nothing depends on this but this is too many conditions this is four conditions so you can actually put this guy there so and that becomes one condition so if you write a symbol of this operator and so just write this problem and try to symbol of this operator and for example you would reduce it to 40 so write in 40 it's exactly the matrices which Peston wrote on his paper okay so in a way the story is a following so this is transversal elliptic problem so I just moved it up so I try to mimic so I have a horizontal space everything is elliptic and then along certain directions something is not so in 5D in principle this story can be co-verentized but I'm not interested very much in this but for example what actually if you want to understand what Peston is doing in the following so you have this model you wrote this model but let me now reduce this down in slightly different way so let me reduce down not alone t but t plus some other direction for example t plus I don't know call it theta etc so I had some symmetries here I put a t I tilted my symmetry and I put it back so basically then naturally in 4D you will get a transversal elliptic problem and your instantons may flip flop because it depends if these two directions will be oriented in the same way at fixed points or if they will be anti-oriented so that's basically a mathematics of what's going on so if you wish you take a Donaldson written theory you push it to the 5D you just write these things that it's a nice problem mathematically then you pull it down but you sort of reduce it this a bit up so for example this is originally was our motivation so we did this so if you take a YPQ space so this is a 5D Sasai Einstein manifold okay and so this is topologically as three times as two so supersymmetry for example if you look at killing spinners etc then if you write the question there so supersymmetry will tell you which is good equation so for example I mean the question which you write this this is typically called contact form it's fixed everything by supersymmetry I don't want to go to discussion there and generically this my rib vector field so which the guy so this is totally equivalent so this is way of writing is equivalent to saying that I will have FH horizontally equal to zero and IRF equal to zero this is not quite that problem but you know I'm just and then what I'm trying to say so my vector field goes around but at the same time this happens to be in one has tonalized but this has happened to be a fibration U1 fibration of S2 times S2 this U1 does not coincide with this guy so the toric diagram is like this now you have to take this equation which is fixed in 5D and push it down but you will reduce not along this symmetry or along these guys so basically you have to contract with another vector field which is corresponds to the free action and this sign can jump it depends from geometry you just have to calculate it so if you calculated this examples you will get plus plus minus minus so that was our original motivation so in end of 2016 we actually realized so this example is very cute for example here killing spinners would I mean not depend so you can reduce killing spinners you can reduce young mills you can do a lot of stuff here again this is of course 5D is not general consideration so I cannot actually take any 5D 4D manifold with this setting and lift it up okay but this is basically the idea why in instanton start to jump et cetera if you push problem in 5D it's nothing it's jumping it's because you reduce things it's you know plus and minus so the question is how do you write this system and what you're actually doing mathematically so in a way I have to push problem 5D and then reduce slightly different directions so let me give you a rough idea and then I will maybe have time comment on killing spinners et cetera because of course you what looks strange is a following for example if you know how Donaldson Witton theory is defined as a field theory I mean you need self-dual forms right you are told from you know kindergarten that you have self-dual forms you cannot have a form which is self-dual here anti-self-dual here et cetera but in fact it's wrong so let me tell you why it's wrong and again we derived these formulas I mean this whole project is a visual thinking you know what to get and then you derive very cute formulas oh it's not over the case so let me assume that I have m and I have a vector field globally defined vector field so I'm on 4D manifold and then I will introduce k or kappa which is gv then there is so let me first look and again my for now discussion locally so let's look when when v is not zero so either you look it locally on some manifold or whatever there is very curious map so if I take m and it's maps form to form 2 minus b plus 2 length of v kappa which i v v you can check very easily that this map actually sends cell dual forms to anti cell dual forms and vice versa in fact m squares to one so if you want to understand what this m is it's not I mean again I'm staying for now away from zero so v so in fact v is not such exotic thing because when I have a vector field and I have a metric I can always decompose my form in vertical and horizontal pieces right so in principle there are on general manifold there are two decompositions of two forms on cell dual and anti cell dual but if I would have a vector field and this vector field is nowhere zero I can always decompose my space in vertical forms and horizontal forms so if you write these things my projector basically will be one over two one plus minus m so this will give me decomposition of two forms to horizontal and vertical and this again will have three components three components again it's true only when v doesn't have a zero otherwise it's not well defined okay so now this decomposition is orthogonal then basically this m what I'm saying here is that m is anticommuting with a star so this is the relations I have so vector field the existence of globally defined vector field gives you much more so what you can do so let me give you a definition in two ways so first more mathematical another more practical and so mathematical way is the following so imagine I have my manifold and I have my vector field v and I have isolated points sorry isolated fixed points so then I decide to choose the cover such that I have a patch around every point then I distribute as I told you pluses and minuses which mean that if I have a plus here then I put locally so this is let's say I then I put a self-dual forms of this patch of this patch I put anti-self-dual forms for example if I put minus j so this is uj so on this intersection I'm just using this map so I would say that mij it just will map two forms on i two minus forms of j if for example I connect my forms on the same so this is plus this is plus I can use identity map so it's a trivial thing that one can check that this map satisfy all conditions you need to define a bundle it satisfy co-cycle condition etc so actually if you have a globally defined vector field you patch your things around you can glue the bundle and it will be rank 3 bundle which is it'll give you so there is a 3 I mean rank 3 sub bundle which at every patch can be basically rotated to self-dual or anti-self-dual forms you cannot do it globally so again what is important that this sub bundle is not I mean self-dual, anti-self-dual form but what I'm saying is that if I look over patch there is just orthogonal rotation respecting things which will bring it to self-dual if I restrict to this patch there is a orthogonal rotation which brings to anti-self-dual okay so this is mathematical way of doing of course I can do it a bit well in this approach don't I don't have to because transition function should be defined only on the intersections so the only thing I have to guarantee that I have a patching and my intersection do not have fixed point that's it so in this mathematical way I don't have to worry anything I will answer your next question in a moment so I will do this is what mathematicians will do now I will do what physicists will do but in this way there is no problem because I just have to make sure that they intersect and everything works so of course for physicists what is important right so when we discuss self-duality we have self-projectors self-dual forms anti-self-dual forms so we would like to actually write a projector now if you stare at this so okay there are two problems here so if m is not well defined at fixed point that's the only problem I have but otherwise what I can do I can for you construct actually a new operation right so if I would write you want to go really math I mean I'm of course but you know it's not I mean whatever example you take you would believe that one can show it I mean right I mean if you challenge me I don't want to go to math I'm going next week to math conference and I will give a math talk but I'm not I mean you're absolutely correct but you know this is not a level of discussion at physics conference okay but let me make let me make you more relaxed yeah yeah yeah but let me make you more relaxed so because I can do things totally different way so what I can do I can do as what physicists do because you will be totally satisfied if I give you a projector which is everywhere defined well defined right so basically if you look at these operations you can construct a new operation plus beta m which squares to one provided that alpha square plus beta square is equal to one okay so in principle what you can do well this condition is very easy to solve they just cosine of some angle etc so basically I can construct I mean just historically we call it like this this guy plus cosine of rho star plus sin rho of m so now the question is that rho it's some function now what I have to guarantee that these things is well defined is well defined well in fact what I have to guarantee that rho goes to zero at fixed points in certain particular ways so rho goes to zero at fixed points so you see when rho goes to zero this disappeared fixed points I get exactly at fixed point my cosine if this is zero cosine can be either plus or minus one so this just becomes self-duality exactly at fixed points so these functions exist moreover on torus this situation you can always choose them in variant etc I mean it's it's no problem because it's very very weak condition I mean in fact there is things when you construct this sin of rho even from V but the whole thing is that you have one over V norm so you this should behave exactly in the same way at least and this is no problem with this so you actually can write this projector and you know again at first so this projector we actually derived not the way I'm telling you I mean this sounds nice but this is what comes from Balini of killing spinner section and this projector you can I mean Pieston didn't write but you can definitely write very nicely in local coordinate etc etc and this rho would correspond to one of the angles etc okay so this guy in fact is a projector which you can write down so for example if you want to adapt it more to supersymmetry there is another redefinition of angle so there is you can define this projector in different way one plus cosine omega star minus sine square you will see in a moment why I like this one so this form actually dictated from supersymmetry where omega is some function and again I have to assume that omega goes to zero at fixed points so this is actually a projector and gives you orthogonal decomposition of two forms okay it gives you orthogonal decomposition of two forms so why do we like this projector so if you actually write this bound so right we like to write bounds with this projector and typically when we write square of cell dual forms it's equal to young mills plus dual terms so now if you do this exercise here p omega plus of f wage the omega plus star of f so then the formula will be the following so whoever remembers very well passed on will now recognize what it is and then there is this term I mean this term you should not worry very much because it will be counseled by another burst exact terms so now what you can see is the following thing so you have a so I mean if you look at some point and passed on it's exactly this formula I mean you have so you have at some point it will be instant tones some point it will be anti-instant tones okay and again if you write this in supersymmetric theory so in a way the passed on theory is the following you take Donaldson Newton theory equivalent and instead of self duality you just replaced everything by this bundle and that's a passed on theory and that's how it will work and exactly you will have a jumps of instant on and anti-instant tones okay so I don't have much time and I could have tell you much much more let me just maybe make some comments so the reasons for example gluing procedure etc so in fact it's very it's very good to also try to derive so this is how we attack the problem of killing spinner supersymmetric theory so actually what we did is that we assumed that like locally at one patch we have a topological twisting so then actually we had to define that we have to rotate our spinners maybe multiply by some factors and then they have to satisfy have to be globally defined okay and also they have to have a fixed bilinear because if you have a bilinear of course typically we'll have a vector field corresponding to bilinear right of your two killing spinners and in fact one can do the things so you have a spinners you fix them so again the idea that I mean they look as you take a topological twist so basically identify SU2 Lorentz SU2 our symmetry so in some basis you basically choose them like a Kroniker symbol when they multiply by some factors and then you will rotate by SU2 symmetry and then you have to guarantee that you can glue it consistently over patches that's can be done so then you just guarantee that they're bilinear correct so for example bilinear when you scourced them from between two sigmas you will get some object which exactly will you know behave very nicely with respect to this projector and then you know you try to put this in supergravity and then you calculate you try to fix the grounds etc and the end of the day everything works so you're not trying to approach problem the way we typically address and again I think at this time it's very useful because the grounds fields exist everything works they just look very ugly but you can sort of derive them everything and fixed so this is one comment and I think this is a nice idea the way we derived killing spinners and actually fix supersymmetry so I'm not actually talking about this very much what else again I'm actually skipping a lot of technical things because I'm not discussing for you different vanishing theorems how to localize I'm not discussing fluxes I'm not discussing how to write one loop so for example we can calculate using index theorem one loop I mean every fixed points will contribute to one loop unless we have a proper Toric symmetry we cannot write it as a single function etc because so just be aware that when we say Toric symmetry Toric manifold we actually don't mean that we have just T2 action we we have much more we have for example typically symplectic form I mean all these diagrams we are drawing convex diagrams I mean they typically assume symplectic structure so this setup is much more general so for example if we will go to Köhler manifold we can write things I mean in very nice form generally not because there are situations when you're I mean with the Torus section when you're basically cone is not convex I mean so when you will have things like this etc I mean this is possible outside of symplectic case so we in principle we cover over everything this but it gives us much less tools etc because there is no cone defined etc so over locally we can calculate the answer but we are having a problem to write you know as a close result etc so I didn't discuss it and of course I didn't discuss how to calculate determinants etc it's all this beautiful work of transversely I mean transversely elliptic operators etc so and in a way everything works everything beautifully nice etc so I basically my intention was just to give you a rough idea so I should stop thank you very much


Welcome again, this is Stéphane Bortmaier from Avniq. He's going to update you or if you've never heard and talked before, inform you in the state of DNS privacy. As soon as I... Yeah, exactly. So, hello. So, there have been a lot of talks at first demo everywhere about many aspects of internet privacy. For instance, on web privacy, you've read a lot of papers, a lot of talks. But DNS privacy is still today something which is typically forgotten by most people when they talk about privacy. For instance, I tried to get national data protection authority in France interested in DNS privacy and until now I failed. Part of the reason is because I'm very busy with the web privacy today. There are already a lot of work but DNS privacy seems to many people a technical detail. So, but it's not, of course, they can imagine. So, the biggest problem of DNS privacy in one slide, first is DNS protocol is unclear most of the time. Today, most of the internet traffic is encrypted. I hesitate to say most of the internet traffic because we don't really know but, for instance, Firefox telemetry reports that now typical Firefox sees around 70% of HTTPS, 30% of HTTP. And, of course, many people go through VPN, IPsec, etc. So, most people now manage their machines with SSH and not Telnet. So, you can probably say that most of the internet traffic is encrypted today which is good but DNS is still unclear most of the time. That's a problem. Also, DNS is too talkative. A typical example is that too much information is sent for instance the fully qualified domain name FQDN which is something that something that something that something else that example is sent to all the authoritative name servers starting to the root. So, if you have access to the pickup of the root name servers which is quite easy if you are, for instance, a DNS org member you will see that a lot of requests go to the root even if they are not necessary.  On speaking of that, all of the DNS tutorials for dummies that you can find on YouTube are wrong because on all DNS videos that you can see on YouTube you can see the DNS request sent to the root is only the TLD. This is not true.  So DNS is too talkative and some requests are very, very revealing. If you run TCP dump or similar program on your authoritative name servers or resolvers you will see for instance that there is at least this is a real example there is at least one bit torrent client which request a SRV record, so this name for the domain it is in. This is typically information that many people will regard as sensitive. I mean, I could sell this to MPA or organization like that this guy is using bit torrent, it's bad. So some people believe that most DNS requests are not sensitive for instance a request for googleanalytics.com is not really sensitive because unfortunately all the websites are using googleanalytics so it proves nothing. But other request are much more damaging and of course even some very perfectly legal domain names can be sensitive. Also an important point about the DNS is that many people forget it is that the DNS request travel outside of the normal path. For instance, if you are a French user in France and visiting a French website you may assume that all your traffic stays inside the French border and so is subject to European data protection laws etc. This is not completely true because you know that routing on the internet is something complicated traffic between a French client on a French hosting provider may go through AMSIX in the Netherlands or links in Great Britain but because of the DNS it's even worse than that because the request for the DNS will go in much more autonomous system than the typical connection between Alice and Bob. For instance, if the domain name is .com you will go to the very sign name servers which probably do not abide by the European data protection laws. There have been some surveys I think that Laura Roberts from the University of Princeton did a very good survey of how many AS autonomous systems or basically network operators how many autonomous systems are traversed by a typical DNS request and it's typically two or three times the number of AS crossed when you go from the HTTP client to the HTTP server and it can be a problem because many people forget about it and many people don't have what I could call DNS privacy sensibility another survey by the people of the University of Princeton showed that one third of Tor exit nodes are using Google public DNS as a resolver so you set up a Tor exit node because you care about privacy and then you configure Google public DNS as a resolver In one way it's normal because when you are a Tor user you cannot be sure of what the exit node is doing but it typically shows that most people are not really aware of DNS privacy issues I have to keep clicking on some key from time to time For instance, things like Schengen routing the idea that you can limit the traffic inside European countries with proper data protection laws it's very difficult in general but it's even worse in the case of the DNS So what have we done to limit the problem to tackle the problem? As far as I know the first time that DNS privacy was mentioned in an official meeting if I say was in June 2013 at the center with the association of European TLD registries and there have been a talk about DNS privacy is it important, does it matter? At this time even center members who are all professional of domain names were not aware of the issue So it was a beginning and funny enough almost the same day some American guy flown from Hawaii to Hong Kong and settled in a hotel room and then called journalists to report about that there was some organization which was actively surveying the internet So inside this revelation one of the program was not okay, battery down already Inside this revelation there was one program which was missed by most people it's called Morcobel and Morcobel is the surveillance using the DNS it has several parts in Morcobel like all the NSS slides it's quite difficult to understand what's going on but apparently they use both active reconnaissance and the DNS and also passive surveillance by watching the DNS traffic So we were not the first to notice that DNS is good for surveillance NSS noticed it before So November at the IATF meeting in Vancouver it was the beginning of a project about increasing DNS privacy it was quite informal at this time but most IATF, if you've never been to IATF meeting you have formal meetings, working group meetings which are typically quite boring and then people gather outside of the rooms and drink beers and this is where the actual work is taking place So for instance as often in the internet code comes before specification that's a usual way of working So for instance in March 2015 if I'm correct the library get DNS which was presented by Wilhelm a few minutes ago already implemented DNS over TLS allowing you to encrypt DNS traffic In August 2015 release of the first LFC about DNS privacy 7626 which is the description of the problem it's not a solution the general way of doing things at IATF now is first to describe the problem then to find out solutions In the real world it's more rewrite code then we maybe write specification and at the end we document the problem but if you want to know about DNS privacy if you want a reference which is much more detailed than this talk you should read this RFC Then in October 2015 Unbound Resolver also at DNS over TLS actually it's already added a long time ago using non-standard things but this is a time where it switched to the official port for DNS over TLS which is 853 So if you see traffic on the network directed to port 853 it's DNS over TLS Next year one way to improve actually DNS privacy was RFC 7816 which is minimization of the queue name as I said today almost all the DNS resolvers send the full DNS query to the root and then to the authoritative name servers The idea of this RFC is stop doing it send only the minimum when you talk privacy to typical engineers they have only one answer encryption that's a solution to every problem Actually encryption is a very good thing encrypt everything I agree but it does not protect against anyone for instance it does not protect against the endpoint doing HTTPS with Gmail is pointless if Gmail sends your data to the NSA they won't do it of course but if they do encryption won't protect you So when you talk about privacy you need actually to do two things minimizing the data sending less data collecting less data and also encrypting it in transit to protect against the sniffer So the idea of this RFC is stop sending to the name servers everything send only what they need to know So for instance the root name servers because they know only about the TLD they should be asked only a query for the TLD not that bitter and that something that something that example Same year specification for DNS over TLS remember that there was running code before but ok so DNS over TLS the idea is to encrypt DNS traffic of course running on a specific port and it's also standardized only for the stub to resolver link remember the talk by Wilhelm about get DNS this morning get DNS is for the stub which is the part which runs on the user's machine then the stub talks to the resolver which is typically managed by your ISP or your university and then it goes to the authoritative name server So DNS for TLS at this time is only standardized for the stub to resolver link part of the problem is that resolver to authoritative makes authentication more difficult because you one stub talks to only a few resolvers but resolvers talk to thousands of authoritative name servers and then also there is this option padding because one of the big problem of TLS is that TLS makes no attempt to disguise the size of the answer there have been many scientific papers about how you can find out what people are doing even when they use Https for instance when you visit Wikipedia with Https you can find out what page were requested because the size is not disguised so someone who wants to know about you can do the same request get the size of the files you get and then knowing what you are visiting if it is something that is public and of course the DNS is public so just using DNS over TLS may not be sufficient if you don't do some padding which means that you fill packets with useless bytes so this is the past no, not completely also in July 2017 it was a release of stubby William talk to you about stubby it's a diamond that you run on your end user machine with forward request over public or other resolvers I didn't mention system D resolves because as far as I know they did nothing for DNS privacy yet so this is the past now the present, what is the current situation on the technical standard side we are not completely done there are still things to do but we have already a consistent set of technical solutions to improve DNS privacy especially the two things I was mentioning minimizing data and encrypting it we have LFC for that so we have at least a standard now a standard of course is not sufficient you have to implement it so you need running code so we have running code we have running code in servers such as a note on unbound we have running code in libraries such as getDNS mentioned this morning or if you prefer to program in Go yesterday I was at the Go Dev Room it was completely full it was closed the morning it was closed 30 minutes before we started because Go is a very popular language and there is a very good library to do DNS in Go written by a Dutch guy most of the DNS code is ever Dutch or Cleck and Go DNS is a very good library with a lot of features and DNS over TLS among them so we have running code but sometimes this code is a bit rough if you take for instance unbound DNS resolver unbound can talk DNS over TLS to an upstream server but it creates a new TCP TCP on TLS sessions for each request which obviously doesn't scale when you have a lot of traffic it's clearly a problem so this is the sort of thing that has to be improved also this is a code TLS is used a lot of course but DNS over TLS few people are using it so probably there are many bugs still waiting to be discovered so some work on the code is necessary also as far as I know there is nothing in bind but I certainly hope that André will fix that and add all the sort of interesting privacy features in bind we have also at least one big public resolver which is using DNS over TLS it's called Quad 9 because the IP address well if you use the old IP protocol the one in the the very old IP protocol where the addresses where only 32 bits the address is <IP_ADDRESS> there are also an IPv6 address but it's more difficult to memorize it so Quad 9 is already working as Peter remembered this morning the DNS over TLS support is not official so Quad 9 is officially supported but DNS over TLS it's not even documented you have to discover it by Nmap but it works and also there are a few other small one for instance LDN which is not for profit ISP in the east of France they provide a public DNS resolver with DNS over TLS so we have some possibilities we have queuing minimization in at least two resolvers and bound on not in the case of not it's by default in the case of unbound it's not by default you have to edit the configuration file if you use unbound directly from upstream but most people of course don't type configure make et cetera they use a package for the operating system so if you use Debian for instance Debian package of unbound comes with default with least queuing minimization so in that case it's better measurements for instance with wipe at last probes which I mentioned this morning limiting yourself to Europe where probably people are more often using these sort of features only two percent of the probes in Europe see other resolver with queuing minimization so we can say that the deployment actual deployment is close to zero at this time ah we have a website very important we have a website actually an information portal so if you want to know about DNS privacy the standard the code the servers the papers et cetera et cetera you have only one point to visit which is dnsprivacy.org but the actual deployment is very limited so encryption is very rare queuing minimization also so we are quite late when you compare to the HTTP people for instance the future now we have several RFC which are almost done one is authentication of the DNS over TLS resolver at this time the only standard way is by key pinning remembering the key and using it which is of course quite brittle for instance quad 9 change its public key on Friday when renewing the ransomcrypt certificate and they got a new key breaking authentication so in the new RFC which will be published in the next few days we will have several methods for authentication of DNS over TLS resolver this one is almost done there is also one on padding profiles padding is great but you have to know how to pad I have seen sometimes software padding to defeat traffic analysis for instance padding with a constant length of padding every request was pad with the same amount of bytes which is obviously useless so there is an entire RFC dedicated to what are the clever ways of padding and this one is also almost done so it should be published in the next months ah time to mention GDPR nobody did yet so May is also an important moment because at the time where the GDPR comes into force at this time all the people who are walking talking panicking over the GDPR never pay any attention to the DNS so we can safely say that in if we are DNS professional we won't see lawyers in June asking to us about DNS privacy what are we doing do we really do everything what is to be done according to the GDPR but in the next months or next years maybe people will start paying attention and I suggest that it's better if we do something about DNS privacy before the lawyers came in there is also some work at the IETF unlike the two first RFC which are close to be over the next this work about encrypting the resolver to authoritative link while it's far from being done so it's not even clear if there is enough interest, esteem etc to work on this we will discuss this at the next IETF meeting in London next month speaking of running code Android as code for DNS or TLS it's already committed in the public repository of Android but it was not in Android released version yet and also there is DNS over ATTPS which is a standard IETF and unlike the encryption of resolver to authoritative link it seems there is a lot of interest for DNS over ATTPS because one it goes through firewalls unlike port 853 which may be blocked and also it allows JavaScript developers to have the full power of DNS so DNS over ATTPS seems interesting for a lot of people and at the next IETF meeting in London in March there will be a hackathon as always and probably a lot of people at the hackathon will work on DNS over ATTPS we have so as I said we have several bricks for DNS privacy one interesting point is how we put these bricks together for instance what resolver, where should we validate with DNS stack where should we encrypt which resolver should we use ordinary people today use the ISP resolver which may be a problem because most of the time they don't have DNS over TLS they don't do QNEM minimization they don't know what they do with data so you can have another solution is to have a stub running on your machine talking to a public resolver like Quad9 Quad9 has DNS over TLS but what do they do with the data that you give to them you don't know actually there is a public policy it's funny when you read the privacy policy of Google public DNS on Quad9 they are exactly the same down to every bit so someone copied the other I don't know which one and all of them promise a lot of things but it's hard to know if they stand by their published policies also you can do things locally you can buy a Raspberry Pi install openBSD unbound the stubby everything on it and do everything locally the good thing is that you control everything the bad thing is that first it's today it's a bit too difficult for the ordinary user especially the openBSD part and also it does not completely protect you because then all your request to the authoritative name servers will come from your own IP address so on a privacy point of view it may be not always the best solution but several solutions are possible for the first part the difficulty one possible solution is to have everything in a box ready as a teresomnia for instance the teresomnia comes from such a resolver also you can have a mix of several solutions a possible solution for instance to have stubby one good thing about stubby is that it can switch between several public resolvers so you still untrust these resolvers with your data but you spread it on several resolvers on the next version of stubby if I'm correct we'll be able to analyze the choice of the resolvers so today it's done in a round-rabin fashion also should we use DNS over TLS or of course should we run everything over port 443 which is allowed by DNS over HTTPS this is for them so people are supposed to know that we have to work so we need you most of the standard work is done there is still work to do but most is done but we need code so for instance now that the buying code is on the GitLab public you can send pull request to add privacy features to bind and of course code is not enough you also need deployment so do it just do it and of course we need outreach talking to people talking to data protection authority to data protection officers etc about the importance of DNS privacy on what to do so yeah it was a bit long but still maybe I have sometimes for one or two questions there yes hello Stefan thank you very much for your wonderful presentation now that we're all here first I want to say we really DNS test also has a TLS module you can put DNS test and it will gain high performance TLS for DNS but you can also use HAProxy as well but this is sort of more closer to DNS and the other thing could you go back to slide number 6 Android released with DNS over TLS client wonderful news wonderful news we must all deploy DNS over TLS ourselves Android and Google are not our friends in this way as you noted the encryption to Google is fine what happens then we don't know what we do now is that eventually they will say ah your provider has weak DNS privacy your Android phone will now connect straight to Google for DNS and they're open about it this is the plan and it's all great for privacy for everyone super wonderful and nice this brings me to the excellent Google privacy policy on DNS it is excellent, it is true the people that work there guarantee me it is true it says nothing about tomorrow the whole page says your privacy DNS or Google is fine right now until the page is tomorrow so they say nothing about we will give you a year of warning restart data mining your stuff nothing about it in there so eventually someone over there could wake up and say glories data don't use this so my call to you everyone if you work at a service provider I see a few of you here please deploy DNS over TLS as soon as you can because we do not want to have this situation where Google can legitimately say please give it more of your data so we can protect your privacy back just a word about the third party the problem of sending your DNS carries to Google or to a specific central community like the public there are actually several alternative DNS routes like OpenNIC, OpenRoad New Nations and maybe you have some opinion about this kind of alternative DNS routes OpenRoad will be fast pure scam nothing so there is nothing to say it's a pure scam for OpenNIC it's a bit more complicated they use a non-standard encryption so it's I don't like that because I prefer standard solutions where there is interoperability where you can choose your software and also it's the mixed privacy with with other things that I want to promote and typically it's alternative route which means that they also add their own TLD which may collide with other TLD so it's in my book it's not good last question you mentioned the APR in the context of that in terms of ISPs and Wi-Fi providers are they likely to I think they would be affected by this in the sense that first of all GDPR means that they can only do what's needed to revive the service so like some of the ISPs need old issues too for typo domains like adverts and stuff that wouldn't be allowed but also are they going to be likely required to for example prefer upstream internal EU servers for example RIT servers prefer using EU-based RIT servers versus US-based RIT servers either in preference or in fatality to fit in with that because the data was kept within Europe and on the other side of it whenever an ISP commons across the board that's going to present problems within countries because for example in the UK we have the government dated DNS blacklists that by law the ISPs have to enforce but if everything's encrypted and the ability of me to not use my ISP direct I can see the pushback where ISPs will be required to prevent me from not using their upstream server so then they can actually do this blacklisting before the government there are two things one is for GDPR I'm not a lawyer but my guess is that it will several years before the lawyers or the DPO or the data protection authority will really go into what's going on in the DNS at this time we are a lord and most people won't be interested in DNS before sometimes so we don't have to expect a big change in May for the DNS guys I mean still some of the provisions of the DNS privacy project are very well aligned with the DPR typically CUNY minimization is sending only what you need so it's a good idea to do it now for the risk well this the rest is more a political problem indeed one of the risks in the future will be ISP blocking port 53 or 853 because they want to monetize your data or because the government wanted to do so it's possible or even interfering with DNS resolution like it's already currently done in China for instance that's one of the motivations for the DNS over HLTPS project and there is even some reflection about how to make DNS over HLTPS indistinguishable from other HLTPS traffic precisely to address these sort of issues but it's more a political problem for instance blocking port 53 for me it's a net neutrality problem before everything before the DNS privacy problem thank you