He is a professor of security engineering at Cambridge University. He is the author of the book Security Engineering. He has done a lot of things already. He has been inventing semi-invasive attacks based on inducing photo occurrence. He has done API attacks. He has added a lot of stuff. If you read his bio, it feels like he's involved in almost everything related to security. So please give a huge round and a warm welcome to Ross Anderson and his talk, The Sustainability of Safety, Security and Privacy. Thanks. Right, it's great to be here. And I'm going to tell a story that starts a few years ago. And it's about the regulation of safety. Just to set the scene, you may recall that in February this year, there was this watch. Enox's Safe Kid 1 suddenly got recalled. And why? Well, it turned out that it had unencrypted communications with the back-end server, allowing unauthenticated access. And translated into layman language, that meant that hackers could track and call your kids, change the device ID and do arbitrary bad things. So this was immediately recalled by the European Union using powers that it had under the radio equipment directive. And this was a bit of a wake-up call for industry, because up until then, people active in the so-called Internet of Things didn't have any idea that, you know, if they produced an unsafe device, then they could suddenly be ordered to take it off the market. Anyway, back in 2015, the European Union's research department asked Aaron Leverett, Richard Clayton and me, to examine what IoT implied. For the regulation of safety. Because the European institutions regulate all sorts of things from toys to railway signals and from cars through drugs to aircraft. And if you start having software and everything, does this mean that all these dozens of agencies suddenly start to have software safety experts and software security experts? So what does this mean in institutional terms? We produced a report for them in 2016, which the Commission sat on for a year. A version of the report came out in 2017 and later that year. The full report. And the gist of our report was once you get software everywhere, safety and security become entangled. And in fact, when you think about it, the two are the same in pretty well all the languages spoken by EU citizens. It's only English that distinguishes between the two. And with Britain leaving the EU, of course you will have languages in which safety and security become the same throughout Brussels and throughout the continent. But anyway, how are we going to update safety regulation in order to cope? This was the problem that Brussels was trying to get its head around. So one of the things that we had been looking at over the past 15, 20 years is the economics of information security. Because often big complex systems fail because the incentives are wrong. If Alice guards the system and Bob pays the cost of failure, you can expect trouble. And many of these ideas go across to safety as well. Now it's already well known that markets do safety in some industries such as aviation, way better than in others such as medicine. And cars were dreadful for many years. For the first 80 years of the car industry, people didn't bother with things like seatbelts. And it was only until Ralph Nader's book Unsafe at Eddie's Speed led the Americans to set up the National Highways Transportation and Safety Administration. And various court cases brought this forcefully to public attention that car safety started to become a thing. Now in the EU, we've got a whole series of broad frameworks and specific directives and detailed rules. And there's over 20 EU agencies plus the UNEC and play here. So how can we navigate this? Well, what we were asked to do was to look at three specific verticals and study them in some detail so that the lessons from them could be then taken to the other verticals in which the EU operates. And cars were one of those. And some of you may remember the car shark paper in 2011 where a guy from San Diego and the University of Washington figured out how to hack a vehicle and control it remotely. And I used to have a lovely little video of this that the researchers gave me, but my Mac got upgraded to Catalina last week and it doesn't play anymore. So, I'm for Schlimbesen. Okay. We'll get it going sooner or later. Anyway, this was largely ignored because one little video didn't make the biscuit. But in 2015, this suddenly came to the attention of the industry because Charlie Miller and Chris Fallochek, two guys who'd been in the NSA's hacking team, hacked a cheap jerokey using Chrysler's UConnect. And this meant that they could go down through all the Chrysler's UConnect and this meant that they could go down through all the Chrysler vehicles in America and look at them one by one and ask, where are you? And then when they found a vehicle that was somewhere interesting, they could go in and do things to it. And what they found was that to hack a vehicle, suddenly you just needed the vehicle's IP address. And so they got a journalist into a vehicle and they got in to slow down and had trucks behind them hooting away and eventually they ran the vehicle off the road. And when the TV footage of this got out, suddenly people carried. It made the front pages of the press in the USA and Chrysler had to recall 1.4 million vehicles for a software fix, which meant actually re-flashing the firmware of the devices and it cost them billions and billions of dollars. So all of a sudden, this is something to which people paid attention. Some of you may know this chap here, at least by sight. So this is Martin Winterkorn who used to run Volkswagen and when it turned out that he had hacked millions and millions of Volkswagen vehicles by putting in evil software that defeated emissions controls, that's what happened to Volkswagen's stock price. Oh, and he lost his job and got prosecuted. So this is an important point about vehicles and in fact about many things in the Internet of Things or Internet of Targets, whatever you want to call it. The threat model isn't just external, it is internal as well. There are bad people all the way up and down the supply chain, even at the OEM. So that's the state of play in cars and we investigated that and wrote a bit about it. Now here's medicine, this was the second thing that we looked at. These are some pictures of the scene in the intensive care unit in Swansea Hospital.  And just as a car has got about 50 computers in it, you're now going to see that there's quite a few computers at your bedside. How many CPUs can you see? You see there's quite a few. About a comparable number to the number of CPUs in your car. Only here the system's integration is done by the nurse. Not by the engineers at Volkswagen or Mercedes. And does this cause safety problems? All sure. Here are pictures of the user interface of infusion pumps taken from Swansea's intensive care unit. And as you can see, they're all different. This is a little bit like if you suddenly had to drive a car from the 1930s, an old Lanchester for example, and then you find that the accelerator is between the brake and the clutch. Right? Honestly, there used to be such cars. You can still find them in antique car ferrets or a Model T Ford, for example, where the accelerator is actually a lever on the dashboard and one of the pedals is a gear change. And yet you're asking nurses to operate a variety of different pieces of equipment. And look, for example, at the bodyguard 545.  And on the bodyguard 545 and the bottom right, to increase the dose you press 5 and to decrease it you press 0. And this leads to accidents, to fatal accidents, a significant number of them. Okay, so you might say, well, why not have standards? Well, we have standards. We've got standards which say that liter should always be a capital L, so it is not confused with a 1. And then you see that on the bodyguard on the bottom right, milliliters is a capital L in green. Okay, well done, Mr. Bodyguard. The problem is, if you look up two lines, you see 500 milliliters is in small letters.  And there are also various other market failures. So the expert who's been investigating this is my friend Harold Thimbleby, who's a professor of computer science at Swansea. And his research shows that hospital safety usability failures kill about 2,000 people every year in the UK. Which is about the same as road accidents. And safety usability in other words gets ignored because the incentives are wrong. In Britain and indeed in the European institutions, people tend to follow the FDA in America. And that is captured by the large medical device makers over there. They only have two engineers, they're not allowed to play with pumps, etc, etc, etc. The curious thing here is that as safety and security come together, the safety of medical devices may improve, because as soon as it becomes possible to hack a medical device, then people suddenly take care. So the first of this was when Kevin Fu and researchers at the University of Michigan showed that they could hack the Hospa or Symbi confusion pump over Wi-Fi. And this led the FDA to immediately panic and blacklist the pump, recalling it from service. But then said Kevin, what about the 200 other infusion pumps that are unsafe because of the things on the previous slide? Also the FDA, we couldn't possibly recall all those. Then two years ago, there's an even bigger recall. It turned out that 450,000 pest makers made by St. Jude could similarly be hacked over Wi-Fi. And so their recall was ordered. And this is quite serious, because if you've got a heart pest maker, right, it's implanted surgically in the muscle next to your shoulder blade. And to remove that and replace it with a new one, which they do every 10 years to change the battery, you know, is a daycare surgery procedure. You have to go in there, get an anesthetic. They have to have a cardiologist ready in case you have a heart attack. It's a big deal, right? It costs maybe 3,000 pounds in the UK. And so 3,000 pounds times 450,000 pest makers multiply it by two for American health care costs and you're talking real money. So what should Europe do about this? Well, thankfully the European institutions have been getting off their butts on this and the medical device directors have been revised. And from next year, medical devices will have to have post-market surveillance, risk management plan, ergonomic design. And here's perhaps the driver for software engineering, for devices that incorporate software. The software shall be developed in accordance with the state of the art, taking into account the principles of development lifecycle, risk management, including information security, verification and validation. So there at least we have a foothold. And it continues, devices shall be designed and manufactured in such a way as to protect as far as possible against unauthorized access that could handle a device from functioning as intended. Now it's still not perfect. There's various things that the manufacturers can do to wriggle, but it's still a huge improvement. The third thing that we looked at was energy, electricity, substations and electrotechnical equipment in general. There have been one or two talks at this conference on that. Basically the problem is that you've got a 40-year life cycle for these devices. Protocols such as Modbus and DNP3 don't support authentication. And the fact that everything has gone to IP networks means that as with the Christel Jeeps, anybody who knows your IP address can read from it and with an actuator's IP address you can activate it. So the only practical fix there is to reparimitize and the entrepreneurs who noticed this 10 to 15 years ago and set up companies like Belden have now made lots and lots of money. Companies like BP now have thousands of such firewalls which isolate their chemical and other plants from the internet. So one way in which you can deal with this is having one component that connects you to the network and you replace it every five years. That's one way of doing if you like sustainable security for your oil refinery. But this is a lot harder for cars which have got multiple RF interfaces. A modern car has maybe 10 interfaces. You know, there's the internal phone, there's the short range radio link for remote key entry. There are links to the devices that monitor your tire pressure. There's all sorts of other things. And every single one of these has been exploited at least once. And there are particular difficulties in the auto industry because of the fragmented responsibility in the supply chain between the OEMs and the tier ones and the specialists to produce all the various bits and pieces that get glued together. Anyway, so the broad questions that arise from this include who will investigate incidents and to whom will they be reported? Right. How do we embed responsible disclosure? How do we bring safety engineers and security engineers together? This is an enormous project because security engineers and safety engineers use different languages. We have different university degree programs. We go to different conferences. And the world of safety is similarly fragmented between the power people, the car people, the naval people, the signal people and so on and so forth. Some companies are beginning to get this together. The first is Bosch, which put together their safety engineering and security engineering professions. But even once you have done that in organizational terms, how do you teach a security engineer to think safety and vice versa? Then the problem that bothered the European Union are the regulators all going to need security engineers. Right. I mean, many of these organizations in Brussels don't even have an engineer on staff. Right. They are mostly full of, you know, lawyers and policy people. And then, of course, for this audience, how do you prevent abuse of lock-in? You know, in America, if you've got a tractor from John Deere, and then if you don't take it to a John Deere dealer every six months or so, it stops working. Right. And if you try and hack it so you can fix it yourself, then John Deere will try to get you prosecuted. We just don't want that kind of stuff coming over the Atlantic and to Europe. So we ended up with a number of recommendations. We thought that we would get vendors to self-certify for the CE mark that products could be patched if need be. That turned out to be not viable. We then came up with another idea that things should be secured by default for the update of the radio equipment directive, and that didn't get through the European Parliament either. In fact, it was Mozilla that lobbied against it. Eventually, we got something through, which I'll discuss in a minute. We talked about requiring a secure development life cycle with vulnerability management because we've already got standards for that. We talked about creating an European Security Engineering Agency so that there would be people in Brussels to support policymakers, and the reaction to that a year and a half ago was to arrange for UNISA to be allowed to open an office in Brussels so that they can hopefully build a capability there with some technical people who can support policymakers. We recommended extending the product liability directive to services. There is enormous pushback on that. Companies like Google and Facebook and so on don't like the idea that they should be as liable for mistakes made by Google Maps, as for example, Garmin is liable for mistakes made by the navigators. And then there's the whole business of how do you take the information that European institutions already have on breaches and vulnerabilities and report this not just to UNISA but to safety regulators and users because somehow you've got to create a learning system. And this is perhaps one of the big pieces of work to be done. How do you take, I mean, once all cars are sort of semi-intelligent, once everybody's got telemetry and once there are gigabytes of data everywhere, then whenever there's a car crash, the data have to go to all sorts of places, to the police, to the insurers, to courts and then of course up to the car makers and regulators and component suppliers and so on. How do you design the system that will cause the right data to get to the right place, which will still respect people's privacy rights and all the various other legal obligations? This is a huge project and nobody has really started to think yet about how it's going to be done, right? At present, if you've got a crash in a car like a Tesla which has got very good telemetry, you basically have to take Tesla to court to get the data because otherwise they won't hand it over, right? We need a better regime for this. And that at present is a blank slate. It's up to us, I suppose, to figure out how such a system should be designed and built and it will take many years to do it, right? If you want a safe system, a system that learns, this is what it's going to involve. But there's one thing that struck us after we'd done this work. After we delivered this to the European Commission and I'd gone to Brussels and given a talk to dozens and dozens of security guys, Richard Clayton and I went to Schloss Dagstuhl for a week-long seminar on some other security topic and we were just chatting one evening and we said, well, what did we actually learn from this whole exercise on standardization and certification? Well, it's basically this. But those two types of secure thing that we currently know how to make. The first is stuff like your phone or your laptop, which is secure because you patch it every month, right? But then you have to throw it away after three years because Larry and Sergey don't have enough money to maintain three versions of Android. And then we've got things like cars and medical devices where we test them to death before release and we don't connect them to the internet and we almost never patch them unless Charlie Miller and Chris Fellowshet are going to go at your car that is. So what's going to happen to support costs now that we're starting to patch cars? And you have to patch cars because they're online and once something's online, right, anybody in the world can attack it. So if a vulnerability is discovered it can be scaled and something that you could previously ignore suddenly becomes something that you have to fix. And if you have to pull all your cars into a garage to patch them, that costs real money. So you need to be able to patch them over the air. So all of a sudden cars become like computers or phones. So what's this going to mean? So this is the dilemma. If you get a standard safety life cycle, there's no patching. You get safety and sustainability but you can't go online because you'll get hacked. And if you get the standard security life cycle, you've got patching but that breaks the safety certification so that's a problem. And if you get patching plus redoing safety certification with current methods then the cost of maintaining your safety rating can be sky high. So here's the big problem. How do you get safety, security and sustainability at the same time? Now, this brings us to another thing that a number of people at this Congress are interested in, the right to repair. This is the centennial light. It's been burning since 1901. It's in Livermore in California. It's kind of dim but you can go there and you can see it. It's still there. In 1924, the three firms who dominated the light business, GE, Osram and Phillips, agreed to reduce average bulb lifetimes from two and a half thousand dollars to one thousand dollars. Why in order to sell more of them? And one of the things that's come along with CPUs and communications and so on, with smart stuff to use that horrible word, is that firms are now using online mechanisms, software and cryptographic mechanisms in order to make it hard or even illegal to fix products. And I believe that there's a case against Apple going on in France about this. Now, you might not think it's something that politicians will get upset about, that you have to throw away your phone after three years instead of after five years. But here's something you really should worry about. Vehicle lifecycle economics. Because the lifetimes of cars in Europe have about doubled in the last 40 years. And the average edge of a car in Britain, which is scrapped, is now almost 15 years. So what's going to happen once you've got, you know, wonderful self-driving software in all the cars? Well, a number of big car companies, including in this country, were taking the view two years ago that they wanted people to scrap their cars after six years and buy a new one. Hey, makes business sense, doesn't it? If you're Mr. Mercedes, your business model, is if the customer is rich, you sell him a three-year lease on a new car. And if the customer is not quite so rich, you sell him a three-year lease on a Mercedes-approved used car. And if somebody drives a seven-year-old Mercedes, that's thought crime. You know, they should emigrate to Africa or something. So this was the view of the vehicle makers. But here's the rub. The embedded CO2 cost of a car often exceeds its lifetime fuel ban. The best estimate for the embedded CO2 cost of an E-class mark is 35 tons. So go and work out, you know, how many liters per 100 kilometers and how many kilometers it's going to run in 15 years. And you come to the conclusion that if you get a six-year lifetime, then maybe you are decreasing the range of the car from 300,000 kilometers to 100,000 kilometers. And so you're approximately doubling the overall CO2 emissions. Taking the whole life cycle. Not just the Scope One, but the Scope Two and the Scope Three, the embedded stuff as well. And then there are other consequences. What about Africa, where most vehicles are in port and secondhand? If you go to Nairobi, all the cars are between 10 and 20 years old, right? They arrive in the docks in Mombasa when they're already 10 years old and people drive them for 10 years and then they end up in Uganda or Chad or somewhere like that and they're repaired for as long as they're repairable. What's going to happen to road transport in Africa if all of a sudden there's a software time bomb that causes cars to self-destruct 10 years after they leave the showroom? And if there isn't, what about safety? I don't know what the rules are here, but in Britain I have to get my car through a safety examination every year once it's more than three years old. And it's entirely foreseeable that within two or three years the mechanic will want to check that the software is up to date. So once the software update is no longer available that's basically saying this car must now be exported or scrapped. I couldn't resist the temptation to put in a cartoon. My engine's making a weird noise. Can you take a look? Sure, just pop the hood. Or the hood latch is also broken. Okay, just pull up to that big pit and push the car and we'll go get a new one. Right, this is if we start reading cars the way we treat consumer electronics. So what's a reasonable design lifetime? Well with cars, the way it's going is maybe 18 years, say 10 years from the sale of the last product in a model range. Domestic appliances, 10 years because of spares obligation, pastoral life, say 15, medical devices. If a pacemaker lives for 10 years then maybe you need 20 years. Electricity substations even more. So from the point of view of engineers the question is how can you see to it that your software will be patchable for 20 years? So as we put in the abstract if you are writing software now for a car that will go on sale in 2023 what sort of languages? What sort of tool chain should you use? What sort of crypto should you use? So that you're sure you'll still be able to patch that software in 2043. And that isn't just about the languages and compilers and linkers and so on. That's about the whole ecosystem. So what did the EU do? Well I'm pleased to say that at the third attempt the EU managed to get some law through on this. Directive 771 this year on smart goods says that buyers of goods with digital elements are entitled to necessary updates for two years or for a longer period of time if this is a reasonable expectation of the customer. This is what they managed to get through the parliament and what we expect is that this will mean at least 10 years for cars, ovens, fridges, air conditioning and so on because of existing provisions about physical spares. And what's more the trader has got the burden of proof in the first couple of years if there's disputes. So there's now the legal framework there to create the demand for long-term patching of software. And now it's kind of up to us. If the durable goods we're designing today are still working in 2039 then a whole bunch of things are going to have to change. Computer science has always been about managing complexity ever since the very first high-level languages and the history goes on from there through types and objects and tools like GIT and Jenkins and Coverity. So here's a question for the computer scientists here. What else is going to be needed for sustainable computing once we have software in just about everything? So research topics to support 20-year patching include a more stable and powerful tool chain. We know how complex this can be from crypto with looking at history of the last 20 years of TLS. Cars teach that it's difficult and expensive to sustain all the different test environments you have for different models of cars. Control systems teach whether you can make small changes to the architecture which will then limit what you have to patch. Android teaches how do you go about motivating OEMs to patch products that they no longer sell. In this case it's European law but there's maybe other things you can do too. What does it mean for those of us who teach and research in universities? Well since 2016 I've been teaching safety and security together in the same course to first-year undergraduates. Because presenting these ideas together in lockstep will help people to think in more unified terms about how it all holds together. In research terms we've been starting to look at what we can do to make the tool chain more sustainable. For example one of the problems that you have if you maintain crypto software is that every so often the compiler writer gets a little bit smarter and the compiler figures out that these extra padding instructions that you put in to make the loops of your crypto routines run in constant time and to scrub the contents of round keys once they were no longer in use are not doing any real work and it removes them and all of a sudden from one day to the next you find that your crypto has sprung a huge big timing leak and then you have to rush to get somebody out of bed to fix the tool chain. So one of the things that we thought is that better ways for programmers to communicate intent might help. And so there's a paper by Lawrence Seymour and David Chisnell and I where we looked about zeroizing sensitive variables and doing constant time loops with a plug-in in LLVM and that led to your S&P paper a year and a half ago what you get is what you see and there's a plug-in that you can download and play with. Macroscale sustainable security is going to require a lot more. Despite the problems in the aerospace industry with the 737 MAX the aerospace industry still has got a better feedback loop of learning from incidents and accidents and we don't have that yet in any of the fields like cars and so on where it's going to be needed. What can we use as a guide? Security economics is one set of intellectual tools that can be applied we've known for almost 20 years now that complex socio-technical systems often fail because of poor incentives. If Alice guards a system and Bob pays the cost of failure you can expect trouble. And so security economics researchers can explain platform security problems, patching cycle, liability games and so on. And the same principles apply to safety and will become even more important as safety and security become entangled. Also we'll get even more data and we'll be able to do more research and get more insights from the data. So where does this lead? Well our papers on making security sustainable and the thing that we did for the EU standardization and certification in the internet of things are on my web page together with other relevant papers on topics around sustainability from smart metering to pushing back on wildlife crime and that's the first place to go if you're interested in this stuff and there's also our blog. And if you're interested in these kinds of issues at the interface between technology and policy of how incentives work and how they very often fail when it comes to complex socio-technical systems then there's the workshop on the economics of information security in Brussels next June is the place where academics interested in these topics tend to meet up. So perhaps we'll see a few of you there in June and with that there's a book on security engineering which goes over some of these things and there's a third edition in the pipeline. Thank you very much Ross Anderson for the talk. We will start the Q&A session a little bit differently than you're used to. Ross has a question to you. So he told me there will be a third edition of his book and he's not yet sure about the cover he wants to have so you are going to choose and so that the people on the stream also can hear your choice. I would like you to make a humming noise for the cover which you like more. You will first see both covers. Cover one and cover two. So who of you would like to pick for the first cover? Come on. And the second choice. Okay I think we have a clear favorite here from the audience so it would be the second cover. Thanks. And we will look forward to see this cover next year then. So if you now have questions yourself you can line up in front of the microphones. You will find eight distributed in the hall, three in the middle, two on the sides. The signal angel has the first question from the internet. The first question is, is there a reason why you didn't include aviation into your research? We were asked to choose three fields and the three fields I chose were the ones in which we had worked most recently. I did some work in avionics but that was 40 years ago so I'm no longer current. All right a question for microphone number two please. Hi thanks for your talk. What I'm wondering most about is where do you believe the balance will fall in the fight between privacy, the want of the manufacturer to prove that it wasn't their fault and the right to repair? Well this is an immensely complex question and it's one that we'll be fighting about for the next 20 years. But all I can suggest is that we study the problems in detail that we collect the data that we need to say coherent things to policy makers and that we use the international tools that we have such as the economics of security in order to inform these arguments. That's the best way that we can fight these fights you know by being clear-headed and by being informed. Thank you. A question for microphone number four please. Can you switch on the microphone number four? Oh sorry. Hello thank you for the talk. As a software engineer arguably I can cause much more damage than a single medical professional simply because of the multiplication of my work. Why is it that there is still no conversation about software engineers caring liability insurance and being liable for the work they do? Well that again is a complex question and there are some countries like Canada where being a professional engineer gives you particular status. I think it's cultural as much as anything else because our trade has always been freewheeling it's always been growing very quickly and throughout my lifetime it's been sucking up a fair proportion of science graduates. If you were to restrict software engineering to people with degrees in computer science then we would have an awful lot fewer people. I wouldn't be here for example because my first degree was in pure maths. All right a question for microphone number one please. Hi thank you for the talk. My question is also about aviation because as I understand that a lot of the old or retired aircrafts and other equipment is dumped into the so-called developing countries and with the modern technology and the modern aircraft where the the issue of maintained or software or patching would still be in question but how does how do we see that rolling out also for the so-called third world countries because I am a Pakistani journalist but this worries me a lot because we get so many devices dumped into Pakistan after they are retired and people just use them. I mean it's a country that cannot even afford a licensed operating system so maybe you could shed a light on that. Thank you. Well there are some positive things that can be done. Development IT is something in which we are engaged and you can find the details of my website but good things don't necessarily have to involve IT. One of my school friends became an anaesthetist and after he retired he devoted his energies to developing an infusion pump for use in less developed countries which is very much cheaper than the ones that we saw on the screen there and it's also safe, rugged, reliable and designed for use in places like Pakistan and Africa and South America. So the appropriate technology doesn't always have to be the wisiest right and if you've got very bad roads as in India and Africa then a relatively cheap labor then perhaps autonomous cars should not be a priority. Thank you. All right we have another question from the internet, the signal angel please. Why force updates by law? Wouldn't it be better to prohibit the important things to from accessing the internet by law? Well politics is the art of the possible and you can only realistically talk about a certain number of things at any one time in any political culture the so-called Orverton window. Now if you talked about banning technology banning cars that connected to the internet as a minister you would be immediately shouted out of office as being a Luddite right so it's just not possible to go down that path. What is possible is to go down the path of saying look if you've got a company that imports lots of dangerous toys that harm kids or dangerous CCTV cameras that are recruited into a botnet and if you don't meet European regulations we'll put the containers on the boat back to China that is something that can be sold politically and given the weakness of the car industry after the emission standard scandal it was possible for Brussels to push through something that the car industry really didn't like. So again it's and even then that was the third attempt to do something about it so again it's what you can practically achieve in real-world politics. All right we have more questions microphone number four please. Hi I'm a automotive cybersecurity analyst and embedded software engineer most a part of the SAE ISO 21434 automotive cybersecurity standard are you aware of the standard that's coming out next year hopefully. I've not done any significant work with it friends in the motor industry have talked about it but it's not something we've engaged with in any detail. Okay I guess my point is not so much of a question but a little bit about pushback a lot of the things you talked about are being worked on and are being considered over-the-air updating is going to be mandated just 30 a 30 40-year life cycle of the vehicle is being considered by engineers we're not nobody I know talks about a six-year life cycle you know that's back in the 80s maybe we talked about planned obsolescence but that's just not a thing so I'm not really sure where that language is coming from to be honest with you. Well I've been to close motor industry conferences where senior executives have been talking about just that in terms of autonomous vehicles so yeah it's something that we've disabused them of. All right so time is an unfortunately up but I think Ross will be available after the talk as well for questions so you can meet him here on the side please give a huge round of applause for Ross Anderson. Thanks and thank you for choosing the cover.


Hey everybody, welcome back to the channel. Today I'm going to show you a fairly simple way of getting Samba sharing working on your Linux desktop. Now for those of you who don't know Samba is basically a service that allows you to share files between Linux computers. Now there's also a way you can access a Samba share from Windows. I've only been successful at a couple times.   I'm just putting that out there. But if you're doing this from Linux, it's very easy. So first you have to obviously install Samba. So in order to do that, let's jump over into a terminal here. And if you're on Arch Linux, you want to do sudo pacman dash capital S, Samba. If you're on Arch, or if you're on Ubuntu, you just do sudo apt. Oops, it's I cannot spell apt install Samba. That's all you'd have to do. Okay, I've already done this. So I don't need to do it again. The next thing you're going to want to do is create a directory that you want to share or know the path of the directory you want to share. So if you want to show your documents folder, that one's going to be home slash your username slash documents. If you create a new one, which I did, I created a folder here called Sharebox. It's one right, it's right here. And right now it's empty. There's nothing in there, but this is the one I'm going to share. So in order to get this thing to be shareable, you have to go through and edit a configuration file. That configuration file is located in Etsy folder. So let's just CD into a CD slash Etsy slash Samba. Now, mine is going to look a little bit different than yours because I have some different things in here and I've already done some work here. So you won't have this one here and you won't have this one here likely, but you should have this one here. Now, there are some things you want to do. So the first thing you want to do is to see pseudo CP this one here into SMB.com. Now, I'm going to use the Arco Linux one, simply because I know it works for sure. The difference here is if we if we vim it into this other one, then smb.conf.default. Okay. The difference here is that you'll have to make sure your work group here is work group. Okay, you don't want this to be my group. You want to be work group, especially if you're going to be changing or sharing this with a Windows computer. Everything else should be exactly the same.  So what you'll want to do is copy this folder into a folder that's called smb.conf because Samba itself will not actually use this folder here, or this configuration file without it being wonky. So just make sure you copy it. So I've since I've already done this, I'm going to them into that. So I'm make sure you use pseudo. And I'm going to use them. So I don't get those errors. And we'll just do this. Okay. I'll zoom in so you can actually see. So as you can see, this one here has been changed to work group that way it actually will work with Windows if I needed to do so. I don't actually have any Windows computers that I want to do that but whatever. So at the end at the very bottom of the file, you want to put this here. Now, depending on who you ask, the word browsable spelled with E or without any. I'm pretty sure it works both ways. I'm not sure why it does. The Arch Linux guys will have it with the E. I believe that the standard one will. So the standard one won't use as an E as well. So but if you look on like the Ubuntu tutorial for how to do this, it doesn't use an E. So we're going to use an E. Somebody somewhere along line doesn't know how to spell how you actually spell. I think it is spelled the knee. So we'll just do pseudo. We'll get back into the regular one here. I really got to turn persistence back on for due as but whatever. So I'm going to make sure this has an E in it. Okay. Anyways, you want to go through and put a comment which can just be the name of the folder or it can be anything really. The path to the folder that you're sharing, make sure redotently is set to no and that browsable is set to yes. Now there are other things that you can do. You can make it completely public which means that will not use your Samba username and password in same thing with the guest full thing here. I'm just going to leave it at this here. So once you've put this in there, you can save the save this and quit. Okay. And then CD back into your home directory. So the next thing you'll want to do is start the service. Now, how you do this depends on what distribution you're using. Now, if you're on a Buntu, you're going to want to do pseudo service SMB D restart. I don't know if the archway will actually work on a boot. I'm not sure. But for me, my purposes here, I'm going to do pseudo SMB D start. Okay. And then you're going to need a password obviously. And you should have no output that obvious that just means Samba is now running in the background. And it's using your new configuration file to do it. Okay. So the next thing you don't want to do, because right now, technically, if you went to another computer and got into their file browser, specifically for analytics, and you went to the network, and you'd find the name of your computer here. And you'd see the folder that you just shared. But you would not be able to access it because you do not have permission to do so. So what you need to do is create a Samba user. In order to do that, you need to do this here, pseudo SMB PAS SWD, and then give it a flag, and then your username. Okay, it can be the username you're going to be using on your computer, it can be used that use this a random username, it doesn't matter, just as long as you know what it is. Okay, and then it's going to ask you for password. So give it a password. And then it's going to as you confirm that password, excuse me, I'm sorry, I messed that up. pseudo is going to ask you for password, and then it's going to ask you for a new password for the this user. So once it's done that you should get a confirmation that it's added to the user you just have the username you just created. And then it's just a matter of going to the other computer, and signing in. So let me see if I can show you this, it's not going to look the same. But you want to get in almost every Linux file manager, you'll see a network thing here. And then you'll see the name of your computer. And then here's where will they be different than what you're you're seeing here, because I'm actually on this computer. So it's not going to ask me for username and password. But on another computer, you'll be able to ask you for your username that you just set up. And the password you just set up. So you'd have to sign in. And a lot of times they'll ask you whether or not you want to remember your password or not. Do whatever you feel is most secure. And then you'll see the pet the folder that you just shared. Actually, here we go. You want to register user username, make sure the work group is the same as the work group we just set it as work group, and then enter your password. I'm not going to do that because I'm already on this computer. But it should share just perfectly fine.  So we'll do sudo, and then into SMB.com patent mistype the password. Man, is it really annoying having to type that password every time I have to remember to reset up persistence. Anyways, if we go back to the bottom here, let's just say we want to do a folder that's already existing on our computer, we didn't create one we want to like the documents folder, or something like that. It's exactly the same. So if we just do, let's just copy this here. Bank. And then we'll go into insert mode. Actually, we'll go back to the bottom. And then we'll just paste it. What we want to do here is change this word to change word documents. Okay, and then we can just do change word documents. And then down here, change word documents. And then all we have to do is do right and quit this. And then what you're going to want to do is restart SAMBA. So again, this may be different on Ubuntu. So if we just see back into our our home directory. And for at least for arts, we just do pseudo SMBD restart. Okay, that just restart Sambo with the changes to the configuration file we just made. Very simple. You can also just do start it functions the same way. Now, like I said, on Ubuntu, this might be a little bit different. So you might need to do pseudo service SMBD restart. That's what the Ubuntu wiki says, or their tutorial guide or whatever it says. So just be aware that it might be different on Ubuntu. For sure on on Linux or on arch and arch based distributions like this one here, it's just pseudo start SMBD, or pseudo SMBD restart. I mean, okay, very easy. The one thing that I don't have available to show you is how to do this through a firewall. So if you use ufw, which I believe is uncomplicated firewalls with that stands for, there's going to be a way that you have to set this up. I will leave a link to the Ubuntu setup.  So that's it. That's how you use SAMBA. Very simple. The hardest part is going to be remembering to change that work group from the default folder. Because like I said, that's the reason why I use use the the the Oracle Linux one. It's all the same except for there's a few more examples in the default one. And there is that work group thing you just have to change. So if you like this video, give it a thumbs up. If you didn't give it a thumbs down, you can support the channel by subscribing to the channel or going to our Patreon page at patreon.com slash Linux cast. Very soon, we're going to be having it setup so that all patrons level two or level three will access to our videos a day early. They'll also have access to the ability to vote on topics and things for the channel and podcast. And there might be some merch, there might be some merch eventually, probably towards the middle of the year. So make sure you go over there and help us out. Thanks to Devansi for being our first patron. And I'll see you next time. Thanks for watching.


Fe'n nhw i gari Williams, fi'n byw yn Blaen Cynon ffarm gwyntfey Llangandog, gwyntfey Pymfryd Bach, jyst o dan yma ni ddi. Wel, we'n byw'n i'n glast i'r ffost seven years now, ond we'n tir co-valent i'r cymdein dwi ffost, so we've got a history of being in environmental schemes. Glast i'r is an important part of our business, the income we get from Glast i'r is part of our sustains of business, so we've got about six projects running here at the moment from ffensing out 25 acres of existing woodland, regenerating that woodland, cutting off hedges and replanting them, make wildlife corridors from one end of the farm to the other, so over the last seven years we would have planted about 8,000 trees. We've also got some semi-improved grassland where we're looking to increase biodiversity and species of fauna to return that were here previously, and we combine that with more areas of land that we farm slightly more intensively for food production, so it's a combination of environmental work and food production working together and targeting certain areas of the farm differently to achieve both objectives.  The investment of Glastir in the rural community sustains a lot of these hill farms, a lot of hill farms in the area would be in Glastir, a the income from Glastir is an important part of sustaining their business, you know, and it's important to remember that the Welsh language is based around these hill farms, virtually all the hill farmers in the area are first language Welsh, so you know the rural communities we know it and the Welsh languages we know it is sustained by these family farms. My name is Will John from ADAS and I'm here today at Square Farm to talk about the EIP project on small scale organic asparagus. The EIPs or the European Innovation Partnership projects is run by a mentor of business on behalf of Welsh Government. There have been more than 40 of these projects across Wales and the basic objective is to foster innovation in the rural community. This project was looking to looking at the practical and economic considerations of growing organic asparagus. There's actually not much information out there about the economics or the practical considerations. We know the crop sells well, we know customers in shops like the short supply chain, they're like the low food miles associated with it, but there is a large cost to establishment of organic asparagus and is also a long leading time, so for a lot of growers there are some big considerations to take into account and also farming organically will also present some challenges. It's been really a worthwhile project, my customers like it and the help I had from ADAS has been that boost I needed to have the confidence to try and to get round the problems that I found during the project. The main benefits of the projects have been assistance with funding of the establishment and perhaps just as importantly the ability for Rob to work with horticultural specialists. This has enabled him to gain confidence and has always had somebody on the end of a phone or somebody to come and visit to come and look at the crop and guide him on how the crop is progressing and what needs to be done, things like weed management etc. Asparagus has been a wonderful crop for our shop, seeing as it comes in what is known as the hungry gap and people look forward to asparagus especially but any any early green crop and yes the customers have really enjoyed fresh cut everyday asparagus. Long-term legacy for this project is very positive, we've demonstrated that the asparagus can be grown organically, it's been marketed successfully, within ADAS we've had lots of inquiries across Wales for our horticultural specialists to come out and talk to them about organic asparagus. My name is Michael Buic and I'm the managing director of JW Graves and Sons Limited which is a historic company founded by a man called John Whitehead Graves back in the 1840s. He came here to just outside Blynyfester-Neogyn Stedonia looking for the finest Welsh slate which he found. He made a fortune and one of the things he spent it on was the building we're standing in today which is called Plas Weyneth. It over the years had many lives including being an office but most recently three years ago we converted it into a 24 bedroom boutique hotel. Ten years ago when I first got involved in this business the visitor numbers to the tourist attraction had gone down from some hundreds of thousands to just under 50,000. Shortly after that adventure tourism came here in the shape of downhill bike tracks and then most recently zip world with outside zip wires underground zip wires and of course the underground trampolines. What that meant was that visitor numbers increased to over 200,000 and we looked around to see where those people could stay and it's very clear that there was a real shortage of quality service accommodation in this area. The funding itself A meant that the project would come off the ground because the confidence it generated was so important. Visit Wales were really clear that what they were looking for was a high quality product and in order to generate that we needed additional space for public areas and we needed additional investment in order to achieve a four star standard. This I think was the catalyst for something which is going to continue to grow which is going to continue to expand a high quality accommodation offer for people here which is associated with the amazing adventure attractions and heritage attractions that exist in this area. My name is Rob Clapham. I'm founder of Glantauer Outdoor Education Academy within Glantauer Riverside Park in Ponddedewa. We started off on this journey about 10-15 years ago when the park was completely overgrown. We spent that time in clearing the park back to the beautiful landscape that you currently see run new. We also run programmes for primary school, secondary school and local volunteers where we increase their well-being, what we feel is quite dramatically as well as increasing employability chances. We were the fortunate recipients of RDP funding. We had started running programmes for primary schools. We realised the value and the demand on these and what RDP funding did for us was to give us more than a standing start. We received enough funding to take on the train and to support a number of new practitioners to be able to expand our programmes in quite a large number of those in this area. The funding has helped the community by giving them opportunities to come and grow food with us and to have a place to relax. It helps people with their stress and anxiety, especially after in the current climate. I think it's just good to be in the outdoors really.  The community garden is something we've been quite desperate to start because of community demand. The sort of benefits we get when we get volunteers that are quite literally not tasted anything fresh out of the ground in their entire lives. The one I'm thinking of has three small children and as a result of the project that individual is now growing fresh vegetables and fruit at home. So in terms of getting out there, RDP funding has really been instrumental and valuable. We simply couldn't achieve what we've achieved without that. I'm Richard Bundy, I'm Executive Director of Valley Steps. Valley Steps delivers a range of stress management interventions. It delivers mindfulness and other psychoeducational programmes across CUMTAF Morganog and the NRN Bevan health footprint. The premise behind the project was that we've served CUMTAF Morganog for quite a considerable length of time and many people will be aware that it has amongst the highest levels of multiple deprivation anywhere in Wales. Deprivation is a direct causal link between that and mental ill health and in addition to that those areas also had issues around access to services because they were more isolated and another determinant of poor mental well-being is isolation and loneliness which you know could also say characterises many of those areas. We're incredibly worried about the project because it has a huge impact on the problem of mental well-being and difficulty. The project is a project that we've been working on for a long time. A lot of help has been given to us from the government. Yna'n hytrwch datblygu o fewn i ni ymwcais. Ac ni'n sion eu edrychwch dros y cais a gweld fod y project yn un. Deilwg iawn o'i ala'r arian. Fe llio ni fel cyngor yn gallu ardei'n ni'r agled. Wel y bod amser yn helpu ymddangos i ddefnyddio amser, i ddim yn ymddangos y gallai ymddangos i ddefnyddio ardal â'r violaeth yngwet. Mae'n gwybod i'r bwysig, mae eich bod yn cyhoeddwn i'w meddwl. Mae'n gwybod i'w meddwl yn y awdwrs, yn ei gwrs, yn ei gwybod i ymddangos. Rydym wedi bod hi'n gwybod i'ch fuddo'r cyd-reibwyr i'r ddechrau. Mae'r dweudio'r hwn yn ei gwybod i'n gwybod i'r ddoi ar y dweudio. Mae'r dweudio'r ddyliau anodol a'r dweudio'n amser. was another aim was to help people greater appreciate what was around them, but also the fact that it would hopefully do them good if they engaged. My name is Henry Cook and I am the project officer for the Biodiversity Means Business Project. It is cited on the Wrexham Industrial Estate and it's part of a North Wales Wildlife Trust project. Originally we started the project in 2016 as a project to work with businesses on the industrial estate. There are over 365 businesses on the industrial estate and a lot of them have land around the edges of their units which we work to manage sustainably. Currently there's a lot of practices going on including mowing and development and things which threaten some of the special species that live here. There are things like barn owls here and other rare species which need our help and can thrive in this setting. The Wrexham Industrial Estate because of its unique history is actually more biodiverse and supports more species and habitats than the surrounding countryside. So what we are trying to do is look after the wildlife within the industrial estate but also provide wildlife corridors that extend out into the local countryside and connect wildlife across the entire area. Well since the start of the project we've seen the business land holdings and areas owned by or managed by local communities and farmers improve markedly for wildlife. So we've seen areas of land that were previously mowed umpteen times a year of very little biodiversity value, managed now as wildflower meadows benefiting bees and birds and butterflies and everything that benefits from these habitats. We've seen orchards planted, we've seen woodlands planted, we've seen hedgers renovated, it's been absolutely fantastic. So the main benefits of the funding from the sustainable management scheme has been to allow us to contact new businesses, bring businesses into the project, speak to them and let them know there's another way of doing things, one where we embrace wildlife and bring it to our doorsteps. The positive effects not just on wildlife but on people are significant. This includes mental health benefits and well-being benefits from people being able to get out, enjoy the industrial estate and get a breather during their working day. I'm Joe Quinney so I work with Great Little Trains of Wales and I'm the project manager on Wales on Rails which is RDP funded. Wales on Rails is a project to get people on to public transport as a tourist so you might want to go and visit somewhere so jump on a train, jump on a bus and then ultimately go and see Heritage Railway or other amazing attractions that we've got in Wales. And while you're doing that from public transport you'll see great scenery and beautiful places, you'll have an amazing journey and a great experience. Mae'r fydd sodiad yn fanteisio iawn i'r ardal herwydd bod yn helpu bisnesau lleol gan bod pobl yn cael ei ddynnu ddod i'r ardal. Dyma'n ddim yn fyddiol i ni yma'n treul ffyrdd festi nhw'n gyngorori ond hefyd i'r bisnesau ledledd Cymru. Mae'n dod arian fewn i'r ardal ond hefyd mae'n allwchlau o strain gan bod na pob o'r los dynnu'n gobeithio bod nhw'n defnyddio trefnidiaeth gyhoeddus. Felly mae'n allwchlau o strain ar y lle fydd parkio dynnu fyddir mantasio'n wefwysig o'r project. Ffyrr anyone that's interested online, the Wales on Rails map is great so you can have a look where you can go in Wales. But linked to that are loads of cards, they're a bit like top trump cards and they have a great picture and fantastic information. And there's thousands of these cards in the website which gives you great ideas, inspiration of fantastic places to go or using public transport throughout Wales. The main benefits have been collaborative working so we've managed to work with the community rail officers, transport for Wales, Strouse Cymru, loads of tourism partners. So coming for a project where there were 12 great little trains of Wales members, we've managed to include all these other people have become part of the project and it's grown bigger than the sum of its parts. The long-term legacy of the project is to get people to think differently about being a tourist. So we're hoping that active travel, bike riding, getting out and about will include loads of other projects and it will just become bigger and change and get better over time. Fy enw i gari Williams, fi'n byw yn blaen cyn yn ffam gwynfau Llangandog, gwynfau Pymtra Bach, jyst o dan yma nid di. Well, we've been in Glastir for seven years now and we were in Covalentir Cymruan before so we've got a history of being in environmental schemes. Glastir is an important part of our business. The income we get from Glastir is part of our sustains, our business. So we've got about six projects running here at the moment from ffensing out 25 acres of existing woodland, regenerating that woodland, cutting off hedges and replanting them to make wildlife corridors from one end of the farm to the other. So over the last seven years we would have planted about 8,000 trees. We've also got some semi-improved grassland where we're looking to increase biodiversity and species of fawn at a return that we were here previously and we combine that with more areas of land that we farm more, slightly more intensively for food production. So it's a combination of environmental work and food production working together and targeting certain areas of the farm differently to achieve both objectives. Well, y wahaniaeth arian wedi wneud yw mwy o bai y diversity ar y ffarm.  So nid o'n nid i agwyth wedi gilydd reini. The investment of Glastir in the rural community sustains a lot of these hill farms. A lot of hill farms in the area would be in Glastir, and the income from Glastir is an important part of sustaining their business. It's important to remember that the Welsh language is based around these hill farms. Virtually all hill farmers in the area are first language Welsh. The rural community as we know it and the Welsh language as we know it is sustained by these family farms. My name is Will John from ADAS and I'm here today at Square Farm to talk about the EIP project on small scale organic asparagus. The EIPs or the European Innovation Partnership projects is run by a mentor of business on behalf of Welsh Government. There have been more than 40 of these projects across Wales and the basic objective is to foster innovation in the rural community. This project was looking at the practical and economic considerations of growing organic asparagus. There's actually not much information out there about the economics or the practical considerations. We know the crop sells well, we know customers in shops like the short supply chain, they're like the low food miles associated with it. But there is a large cost to establishment of organic asparagus and there's also a long lead in time. So for a lot of growers there are some big considerations to take into account and also farming organically will also present some challenges. It's been really worth the wild project. My customers like it and the help I had from ADAS has been that boost I needed to have the confidence to try and to get round the problems that I found during the project. The main benefits of the projects have been assistance with funding of the establishment and perhaps just as importantly the ability for Rob to work with horticultural specialists. This has enabled him to gain confidence and has always said somebody on the end of a phone or somebody to come and visit to come and look at the crop and guide him on how the crop is progressing and what needs to be done, things like weed management etc. Asparagus has been a wonderful crop for our shop seeing as it comes in what is known as the hungry gap and people look forward to asparagus especially but any early green crop and yes the customers have really enjoyed fresh cut everyday asparagus. Long term legacy for this project is very positive. We've demonstrated that the asparagus can be grown organically. It's been marketed successfully. Within ADAS we've had lots of inquiries across Wales for our horticultural specialists to come out and talk to them about organic asparagus. My name is Michael Buwick and I'm the managing director of JW Graves & Sons Limited which is a historic company founded by a man called John Whitehead Graves back in the 1840s. He came here to just outside Blynyfesterniog in Stedonia looking for the finest Welsh slate which he found. He made a fortune and one of the things he spent it on was the building we're standing in today which is called Plas Weyneth. It over the years had many lives including being an office but most recently three years ago we converted it into a 24 bedroom boutique hotel. Ten years ago when I first got involved in this business the visitor numbers of the tourist attraction had gone down from some hundreds of thousands to just under 50,000. Shortly after that adventure tourism came here in the shape of downhill bike tracks and then most recently zip world with outside zip wires, underground zip wires and of course the underground trampolines. What that meant was that visitor numbers increased to over 200,000 and we looked around to see where those people could stay and it's very clear that there was a real shortage of quality service accommodation in this area. O'r hanner ardal dwi'n ma'r gwesti yma'n grets dda'n cael lot o pobl lleol sydd o cwmni oedd dwi'n ddim am cyfarfodau a dwi'n maen nhw'n maen nhw'n pobl lleol dwi'n maen bwyd a diodded yn y nôs hefyd. Maen nhaf dipyn o bethau diodd allan hyn i gyd yn ei a un o'r prefanteisio i gallu cyflogi pob pobl trw'r fwydd yn mewn gwesti ag llef glampio mor braf as gynnynni. Gynny'n mi 25 o pob o'n gwythodd yn ymwun o gynnynni cyn i'r gwesti cael ail newid. O'r hanner ardal lleol ar cymuned mynd yn grets mae maen nhw'n maen nhw'n mwy bopol mae'n gwaith trw'r fwydd yn a mae'n hynna ni'n rhywpeth a ni'n rili yn bwyswysio rhan o busnes ond ac y gallu taelau'n ymryd yn cael trw'r fwydd yn a dim coss ym ddrosgwyia am ynddo i'r llef dderis. Mae'n ddysgu'n amser a'u gwnaeth i'n rhan o'r projekty oherwydd y ffordd oedd y gynnynni'n ddysgu'n math ac yn ddysgu'n ddysgu'n ffordd o'r ffordd o'r ffordd o'r ffordd o'r ffordd. Mae'r llinoedd yma yn mynd i ddysgu'n ddysgu'n ddysgu'n ffordd o'r ffordd o'r ymwyffau cyflogol. am gael gwybod, os ydych chi'n mynd i gyda'r blaedlai, i gael gwybod yr area oedd, a'r mynd i gael gwybod yr invest yn ymweld sy'n mynd i weld y 4 star' dystod. Ac ystod yn ymlaen i'r cataillist o'r gynhyrchu â'r cyfan, a'r cyfan o'r cyfan o'r cyfan o'r hwyl i'r gwaith ymlaen ymlaen, oedd ychydig cymaint o'r ymlaen i ymlaen i gael gwybod, ac oedd chi oedd ymlaen i'r cyfan o'r ymlaen. My name is Rob Clapham. I'm founder of Glantauer Outdoor Education Academy within Glantauer Riverside Park in Pondadau. We started off on this journey about 10, 15 years ago when the park was completely overgrown. We spent that time in clearing the park back to the beautiful landscape that you currently see around you. We also run programmes for primary schools, secondary schools and local volunteers where we increase their well-being, what we feel is quite dramatically as well as increasing employability chances. We were the fortunate recipients of RDP funding. We had started running programmes for primary schools. We realised the value and the demand on these and what RDP funding did for us was to give us more than a standing start. We received enough funding to take on the train and to support a number of new practitioners to be able to expand our programmes in quite a large number of those in this area. The funding has helped the community by giving them opportunities to come and grow food with us and to have a place to relax. It helps people with their stress and anxiety, especially after in the current climate. I think it's just good to be in the outdoors really.  The community garden is something we've been quite desperate to start because of community demand. The sort of benefits we get when we get volunteers that are quite literally not tasted anything fresh out to the ground in their entire lives. The one I'm thinking of has three small children and as a result of the project that individual is now growing fresh vegetables and fruit at home. So in terms of getting out there, RDP funding has really been instrumental and valuable. We simply couldn't achieve what we've achieved without that. I'm Richard Bundy, I'm Executive Director of Valley Steps. Valley Steps delivers a range of stress management interventions. It delivers mindfulness and other psycho-educational programmes across Cwm Teff Morgannog and the NRN Bevan health footprint. The premise behind the project was that we've served Cwm Teff Morgannog for quite a considerable length of time. Many people will be aware that it has amongst the highest levels of multiple deprivation anywhere in Wales. Deprivation is a direct causal link between that and mental and ill health. In addition to that, those areas also had issues around access to services because they were more isolated. Another determinant of poor mental well-being is isolation and loneliness, which can also say characterises many of those areas. Wai'n credu bod yr ariam wedi bod'n bwysig yr project, achos mae llawer o bobl yn y randdalu yn efo problemau iechymeddol a defnydder. Mae project yma yn estyn allan ni i adaloedd sydd yn drathoddiadol hefyd cael lot o help bydd weigwyr llefydd fel meir di yn y rhondda. Rydwch chi'n ddwewn i ni yw cais, a nid o'n ni edrych dros y cais a gweld fod y project yn un. Rydyn ni ddeilwng iawn o gael yr arian, felly ni fel cyngor yn gallu'r ariani'r aglen. A lot o what we do is about helping people to help themselves, finding things that they can integrate easily within their everyday lives. So, mindfulness being a particular case in point is not all about having to go into deep meditation. You can be mindful in the outdoors, walking through woods, walking through a park. We wanted to develop an evidence base for that because those interventions could clearly benefit people who, on their doorstep, had a wealth of natural assets. So that was another aim, was to help people greater appreciate what was around them but also the fact that it would hopefully do them good if they engaged. My name is Henry Cook and I am the project officer for the Biodiversity Means Business Project. It is cited on the Wrexham Industrial Estate and it's part of a North Wales Wildlife Trust project. Originally we started the project in 2016 as a project to work with businesses on the industrial estate. There are over 365 businesses on the industrial estate and a lot of them have land around the edges of their units which we work to manage sustainably. Currently there's a lot of practices going on including mowing and development and things which threaten some of the special species that live here. There are things like barn owls here and other rare species which need our help and can thrive in this setting. The Wrexham Industrial Estate because of its unique history is actually more biodiverse and supports more species and habitats than the surrounding countryside. So what we are trying to do is look after the wildlife within the industrial estate but also provide wildlife corridors that extend out into the local countryside and connect wildlife across the entire area. Well since the start of the project we've seen the business land holdings and areas owned by or managed by local communities and farmers improve markedly for wildlife. So we've seen areas of land that were previously mowed umpteen times a year of very little biodiversity value, managed now as wildflower meadows benefiting bees and birds and butterflies and everything that benefits from these habitats. We've seen orchards planted, we've seen woodlands planted, we've seen hedgers renovated, it's been absolutely fantastic. So the main benefits of the funding from the sustainable management scheme has been to allow us to contact new businesses, bring businesses into the project, speak to them and let them know there's another way of doing things, one where we embrace wildlife and bring it to our doorsteps. The positive effects not just on wildlife but on people are significant. This includes mental health benefits and well-being benefits from people being able to get out, enjoy the industrial estate and get a breather during their working day. I'm Jo Quinney so I work with Great Licker Trains of Wales and I'm the project manager on Wales on Rails which is RDP funded. Wales on Rails is a project to get people onto public transport as a tourist so you might want to go and visit somewhere so jump on a train, jump on a bus and then ultimately go and see a heritage railway or other amazing attractions that we've got in Wales. And while you're doing that, from public transport you'll see great scenery and beautiful places, you'll have an amazing journey and a great experience. For anyone that's interested online, the Wales on Rails map is great so you can have a look where you can go in Wales but linked to that are loads of cards. They're a bit like top trump cards and they have a great picture and fantastic information and there's thousands of these cards in the website which gives you great ideas and inspiration of fantastic places to go all using public transport throughout Wales. The main benefits have been collaborative working so we've managed to work with the community rail officers, transport for Wales, Straus, Cymru, loads of tourism partners. So coming from a project where there were 12 great little trains of Wales members, we've managed to include all these other people have become part of the project and it's grown bigger than the sum of its parts. The long term legacy of the project is to get people to think differently about being a tourist so we're hoping that active travel, bike riding, getting out and about will include loads of other projects and it will just become bigger and change and get better over time.


Little downtown work session today. That's right. Going to the big city. Number one in the books. Good spot. Just working there. Doing a little people watching. Interesting clothing in downtown Denver. Eating in the car. Never an easy task. Never an easy task. Lots of bathroom filming today. All right. I've just been editing for five hours straight. Staring at a computer screen. Gotta take a break. Go for a run. There's the state capitol. Okay. Question of the day. I'm very, very excited about this favorite podcast. What is your favorite podcast? If you listen to podcast, now I, I kind of go in waves, you know, where I'll listen to them for like five or six months, and then I'll take a break for a year or I don't know. I go ebb and flow, ebb and flow in this world. But what is your favorite podcast and why? Comment below. Thank you so much, because I am in a podcast kind of season of life and I'm hooked right now on Freakonomics. I don't know. That is my favorite. I don't know if you have heard of it, but it is all about economics and just interesting theory, economic theories that can be applied to everyday life. So anyway, comment below, question of the day. What is your favorite podcast? All right. Just cruising home. Oh yeah. It's a good run. Good run. Did you have a good day? Happy Friday. Happy Friday. Oh, see it. Let's, the boys clean their room. Brushes. It's just, Joseph's got it. Yeah. Okay. Let's go eat. But that's why this room, let's go eat. It looks so good.


Hey, I'm Hilary Basel. I'm the eLearning Librarian here at Ohio University and in this video I'm going to show you how to have a book sent to any Ohio Link library. So we're going to start from the library homepage and we see these tabs here. I'm going to select Alice Catalog to search for a book and I'm going to enter the title of the book that I want to request which is the Art of Fielding and press search. We see at the top, this is the book, so I'm going to click on it here. It says that we do have a copy, but it's checked out. So I'm going to hit search Ohio Link and we see that there are some copies available at some other Ohio Link libraries. So I'm going to select the green request button up here and it takes me to a page where it's asking me to select my school or institution.  And now it's asking me to select my pickup institution. So I am in Athens. I am at Athens, but I am off campus right now, and I'm actually close to Miami University. So I'm going to go ahead and select that and then it's asking me to select a library at Miami University, so I'm going to select the King Library and hit submit. And it's telling me that it was successful, so I can go ahead and pick up that book when I get an email that it's available. Well, hopefully you found that helpful. If you have any questions about requesting books or anything else, be sure to let us know.


It's not about like coupons. It's about a respect Japanese system It kind of looks like a lot of the characters could be written with a sword Oh, yeah, let's deconstruct the word and let's come up with a poetic meaning Koreans are considered the hottest Can you tell the difference between a Japanese Korean and a Chinese person by just looking at their face? Well, maybe you will after this video Welcome everybody to the hotpot boys David and Andrew here We're going to be reacting to different youtube videos that are attempting to break down the language The facial feature and the cultural differences between the main east Asian groups that often get confused for each other Yeah, I mean, I think this is a funny topic that a lot of people have this, you know This discussion amongst their friends, but they are not having it on an analytical level I think, you know, sometimes it's funny. Sometimes it's offensive But I think we can all agree that it's always interesting and fun So make sure you like subscribe turn on your notifications and let's get into the first clip Hello everyone, this is Kaewa When I travel abroad one of the most frequent question that I receive is Are you Japanese? So today I'll tell you the characteristics of Japanese This is a method to recognize Japanese at a glance So this was when a flight attendant spilled drinks on Korean Japanese and Chinese passengers Korean passenger loses his temper. He accepts apology and a moment later He apologizes to the flight attendant saying I'm sorry for getting angry at you just a while ago and it's over In case of Japanese passenger, they smile and say, oh, no problem. Oh, no worries They smile And a week later a complaint later is sent to the airline company Chinese passenger They get furious and yell. They murmur their complaints in loud voice And in small voice they ask for their first class seat They take the first class to their destination Yo, this is a pretty funny way to talk about like cultural and behavioral patterns that are different It's just like in situation X. How does a Japanese Korean or Chinese person react differently? Dude, this was so clear I mean it kind of did fall in line with the typical stereotypes that we all believe about each other Or at least the more traditional version of ourselves Like Koreans have extreme emotional swings, right? They're very temperamental, but they can cool off and feel a lot of guilt Japanese people They're very very polite to you, but you don't always know how exactly they feel about you And I think this applies more to Japanese from Japan, of course Not really Japanese Americans as much and then obviously Chinese They will make a fuss out of things. They do feel anger, but they can be calmed down if you compensate them with Something of money value. Oh man. I'm not gonna lie I remember one time we won on a church trip and somebody in our church group was got mistreated Possibly because they were Asian at this hotel because nobody wanted to deal with them because you know They didn't have English as their first language and I remember they were so mad that it was like pretty much kind of racist Or prejudice against them But then the manager came through with like five buffet coupons that was worth like a 125 and it was just like all good David uh A lot of people also say and I kind of agree that like north eastern Chinese people don't pay Chinese people and then Mongolians and Koreans often do share this kind of like Emotional like temperamental background which can be fun and fiery and good and bad in different ways But why do you think that that is like why do you think they should be honest? I think there's a lot of nomadic tradition And that was sort of like the way of life of people who are like moving around and hurting animals and stuff like that But I will say that even in america, there's different like regional Sort of like attitude patterns like there's a lot of white people in boston There's a lot of white people in seattle But how come everybody in a boston is so aggressive and everybody in seattle is so passive aggressive Even though it's on the same latitude. Why is everybody in texas so proud of being texas? Don't mess with the lone star state.  I mean for sure there is a reason I will say this andrew if a korean was as mad as that chinese guy was in our group and the manager was just like Uh, here's some buffet coupons. They might be like no, it's not about like coupons It's about a respect you have to respect me Like they might have been like nah like i'm not rocking with it You like violated my honor, you know, and then like we said, you know, the japanese person they might be like The treatment Was okay But then literally they're gonna like write a letter and try to take down the whole thing And why do I think that chinese people are so impacted by getting money? It's because I think chinese value making money and having money so much that when you give them money For an apology They actually accept it because they understand money is the one thing that they would not want to give you There is actually a saying in china and i'm sure there's sayings in korean and japan about the differences between all the asians But there's one from china that says japanese people love work Koreans love their country and their people and chinese love money And i'm not gonna lie guys japanese do love their work and they love being artisanal about artsy things man They love art chinese Love money chinese people f***ing love money So mainly today we're going to be talking about differences between korean chinese uh japanese but i we found this infographic online and uh We're just talking about face shapes, right? purely appearance purely appearance and and i i think this is very true um stronger defined jaw lines Oh, yeah, that's true single eyelids kind of pouty lips. Yeah, yeah That's that's what they like a very like pouty small lip and also the eyebrows i find a lot of koreans They like the big straight prominent eyebrows and you see a lot of celebrities go for that look as well Whereas chinese i think it's not as pronounced. It's subtle. Yeah, because they're very fair whereas chinese You do have a split and i find a lot of them when i went to japan their teeth. Oh, yeah It's almost always crooked Yeah, actually mike and i did a video about that it's called yeba tea These clips revolve around the physical differences between japanese koreans and chinese people Obviously, we're talking about looks based things. This is the most basic visceral thing that an average person can understand I think when you talk about climate and geography and korea is made out of granite and japan's made out of lava and sulfur These things are very grad school to wrap your mind around but even a child can see that different people just look different So i would say that this chart that they came up with and also this one picture That you can find on the internet that is trying to talk about the differences It does fall in line with the stereotype obviously right now koreans are considered the hottest Right, i don't know they're considered the best looking now I'm not that that is partially because of plastic surgery But also partially maybe because they find the hottest actors and partially maybe because they do have certain features that Are considered attractive as well, right? But i do think that this topic can get sensitive obviously when there comes to uh this feeling of Feeling inferior it looks wise You know if you're gonna say like chinese have the round face and then japanese have the thin face Are we saying that all japanese are like better looking right i mean definitely the truth is in a media sense Japan and now more recently in the past like 15 years korea has had like a way more soft power Looks advantage over chinese people and the truth is chinese people are the most populist people on earth They're mixed with like a hundred different tribes So there's incredible variability and the way they could look and they don't care about looks as much culturally Like we said earlier tend to more just care about money and just like accomplishments rather than sort of like uh You know this whole package type thing and i just think that that creates the perception that chinese people are not as good looking on an average basis And whether that's true or not the situation is completely different like we said because korea oftentimes Andrews theorized to come from one tribe of yagoy people literally one tribe created korea Japan is primarily comprised of three tribes of people You know south uh sort of like a southeast asian guamanian okinawan look sort of like an asian e asian e look and almost i knew that almost looked like kind of part western like russian e from You know what i mean so it's like china is literally made up of like A hundred different tribes so you're just gonna see like every look Yeah, i think in most asians that you meet in your life are going to be chinese So you're gonna meet some very attractive ones and then maybe some not as attractive And i don't think chinese value looks as much because i think the whole wave of korean media would push people to kind of think about it More plus they also running the beauty uh skincare product game So obviously they care about looks the most so if you grow up as a kid Caring about your looks more than another kid What are the chances that you grow up to become a little bit better looking? I I guess it makes some sense. Yeah, I mean wherever you put your focus in your work is where you see the progress I will say there's something that's really interesting about china is that a lot of chinese people in the guangdong region They can be mixed with taikadi or southeast asian in the western region They could almost be mixed with like arabic or indian people in the northern region. They could be mixed with like mongolian Uh, you know turkish There's so many different looks in china. You wouldn't believe it However, for the longest time andrew it was mostly people from southern china immigrating to america for like 100 or 200 years So really now you're starting to meet all these people from all these crazy regions that are mixed with like All these different things, but they're all chinese. All right, you guys now We are getting into the language section both on a spoken and written level. There's a way you can tell agents apart from other agents It's by their accent and only if they have accents Oh All right, you guys this clip kind of shows how Japan and korea actually use a lot more english loan words Due to them having like an alphabetic system whereas chinese try to translate the meaning So for example andrew pop a corner is baohua in chinese baohua Obviously does not sound anything like popcorn. It means bursted flower which kind of sounds like nice and poetic in a way computer Means is actually diannao, which is electric brain also a very interesting way of framing something that is modern using old words I saw this one comment that actually made me laugh and it was like koreans Oh, yeah, let's just say this the korean way and then it's like japanese They're like oh, okay We have to say this word the japanese way and then the chinese are like, oh, yeah Let's deconstruct the word and let's come up with a poetic meaning that can reflect its actual figurative definition So it's a completely different word And I thought that that was so funny because obviously chinese do have some loan words But there's not that many and when they do come up with new words for modern things It like sounds completely different and it has like some crazy like poetic meaning to it.  So it's almost like hyroglyphics to be honest You know what I think would be interesting to get into in a later video Not this one is all the loan words that all the east asian countries share I do think uh both ways but for the most part mostly from china So I think that that would be really interesting because I believe and 49 of japan's vocabulary actually came from china Yeah, but however, if you almost go based off of uh usual regular everyday conversation, whether it's in korean or japanese It's going to be primarily their own language But sometimes when you go up to the tier of like college level or like certain terms law and um, you know technical stuff It becomes more chinese All right, you guys let's get into the way that different languages are written because I could see this being confusing for some people Boom as you can see korean language uses a lot of circles and angles It almost looks like in a weird way Maybe you're trying to draw little robot faces or crop circles or crop circles Yes, japanese looks like almost kind of hipster and artistic because it's got a mixture of rigid characters Chinese characters the kanji in there as well as the katakana and the hirakana So you got all types of stuff going on in the japanese system Yeah, I think the japanese system It kind of looks like a lot of the characters could be written with a sword like Bushido blade anyway and last but not least and especially the traditional chinese characters They look hyper complex and they just look like little game characters or little maps or little Photographs or little paintings like alien invaders that video game. Yeah, they could look like they're shooting lasers Art you guys that was actually a pretty fun like 101 class I think you can really get into the food do koreans like kim chi the most obviously do do japanese He's like sushi the most obviously do do chinese like dumplings the most obviously they do but you know This video was not about like the food. I think it was really funny to get into quick anecdotes about behavior Look and then language. I think one of the most beautiful things is not pretending like we're all the same but accepting the differences and Appreciating each other for it and I would like to think that that's like the place that we can get to as As east asian americans perhaps or whatever these you know, there's always these hierarchies and everybody's trying to play these games I get it. I get it. I get it. Of course, right Uh, you always want to rank the highest who doesn't right that's your incentive But I just think ultimately like have more of these conversations talk about these things joke about them Don't judge each other. Yes, some of them are kind of true. Yes, some of them are kind of not true But you know what like Hey to break stereotypes. You got to know the stereotype first. Yeah, and I think that obviously we are american So you could say well, how much do I want to understand these? Well, you don't have to you could just see yourself as an american But I do think to truly get to the root and get to a point where everybody can like Legitimately support each other. We actually have to understand our differences and almost like get over it and like burn that candle out And uh, yeah, I just think it's fun to talk about man All right, everybody. We're gonna leave it right there. Please let us know in the comments down below I'm sure there's gonna be a lot of comments a lot of uh research comments probably gonna throw some statistics out there There's gonna be some nationalistic comments always. I find them entertaining So, please let us know in the comments down below what you think about these differences What are some other ways that you would describe the difference between japanese chinese and korean people? Um, hit that like button click subscribe and check out other episodes of the hotpot boys and until next time we out peace


It's really just a battle with myself. It's not even about fame or money. I just had to do it. I didn't even want to do it. I would just be like scribbling in textbooks. My high school asked me to paint a mural for them. Ever since then, it just took off. That rhythm, everything from the stroke of my wrist to the flip on a kickflip, you just feel it. When I'm painting in downtown San Francisco and downtown LA, there's a lot of buses, people, noises. Up here, it's just serenity. Time just kind of stops and it just feels right. I'm Ivan Presciato and Britska's challenge me to paint this mural, so let's do it.


Big names during Martha Coakley's campaign trail Friday reassuring her rally cry for voter support in Massachusetts This is one of those election years that really will set the stage for what comes in the future here in Massachusetts and around the country Coakley seemed unfazed by recent polling data showing a 9-point trail behind Republican Charlie Baker Governor Patrick offered reassurance reminding Bay State voters of his polling history I am asking you to do now what you did then Which is respectfully ignore all that? Senator Warren drawn multiple speakers who rouse the audience during the midday event Martha Coakley is not giving up Martha Coakley is fighting back We are in a dead heat, but that is where we are going to shine and I promise you I Promise you we are gonna win this race For my secretary of state Hillary Clinton stood alongside Coakley championing her political record and advocating for working families Our most vulnerable families have the least support to do the most important job in the world raising the next generation Voters will decide November 4th whether or not they are ready for Martha Coakley to lead the Commonwealth Reporting for the BU News Service, I'm Taylor Walker


I'm Riley. I just picked up my 3500 Limited 2018 from Dodge here and it's, the service is great and the people are great to deal with. I definitely come back for another truck.


The Aptik Palm consists of a tendon-injiving glove to render codonis optic feedback on the palm of the wearing user. It was presented in a previous work. And today, in the while of Aptik's impossible 2024, its functionality and usability will be discussed starting from the results of an extensive user studies and also an experimental characterization.


ssed concerns that the focus of the Scottish Government's reform programme has, even since May 2022, changed multiple times, as have the timescales for publishing further detail on what that programme will entail. We have brought forward recommendations aimed to bring much needed impetus, focus and direction to the Scottish Government's reform programme to ensure successful outcomes can be achieved at a much quicker pace. The Scottish Government had previously agreed to provide six monthly updates to the committee, and the first of those updates was published alongside the Scottish budget in December. We asked that it included a clear vision and strategic purpose for what it wants to achieve with the programme, the financial strategy to accompany the reform programme that was committed to by the then Deputy First Minister in March 2023, and details of each work stream under the programme, including milestones for the delivery and clear measurements of what we would term success. It is clear from the update provided by the Scottish Government that it is at a much earlier stage around the reform programme than was expected, particularly given that it was an issue that was first described as a priority in the resource spending review back in May 2022. Of course, we can go back as far as the Christie commission in 2011 to see a blueprint about how some of that might have been delivered, but that was 13 years ago, and it is disappointing that such little progress has been made in the intervening time. The Government's update set out key aims and principles for a 10-year programme of public service reform and actions that it needed to take in the next one to two years to respond to immediate budget challenges to build a platform for ongoing change. Over the next three months, the Scottish Government does intend to agree a shared approach to reform with local government, public and third sectors, and the Deputy First Minister has set some of that out. Unfortunately, there was no mention in the update of the financial strategy that was intended to accompany the reform programme. In our budget report that we published just yesterday, we are asked the Scottish Government to revisit those recommendations, and I would appreciate if it would do so. That report also set out our concerns regarding the confusion that still appears to exist in relation to the Scottish Government's policy on public sector headcount and workforce levels, not least within the Scottish Government itself. In its response, the Government said that it intends to set out the pay metrics for 24-25 following the UK spring budget. That is the second year in a row, Presiding Officer. The Scottish Government has not published a public sector pay policy alongside the Scottish budget, and in time to be factored into the SFC forecast. The committee is disappointed at that delay. Given the significant rise in the public pay bill in Scotland, it is a key issue that the Government should address. The committee looks forward in the coming weeks to further engagement with the Deputy First Minister, the Finance Secretary and the whole of the Parliament as we address the budget ahead of us. That concludes the debate on the Scottish budget 24-25. It is now time to move on to the next item of business. There is one question to be put as a result of today's business, and that is that motion 12035, in the name of Kenneth Gibson, on behalf of the Finance and Public Administration Committee on Scottish budget 24-25, be agreed. Are we all agreed? The motion is therefore agreed. That concludes decision time, and I close this meeting.