So first hello everyone. So welcome to our presentation bringing in compliance for public clouds Presentation could have been named be careful when selecting your cloud partner for compliant environments. I Hope this topic is not surprised for you If you didn't want to hear about security or compliance you're probably in the wrong talk But if you're interested in secrets for your information, there is also another talk At the same time talking about hashCop fault so Here what we hope is that after this presentation You will know how to build your cloud or select your cloud vendor Based on your compliance requirements so let's talk about Compliance and security while just in time Can you go to the next slide? Yeah, sure Before we start you might point you might wonder why are the two of us talking about? About compliance. Well, this is related to the to the company we work for And here comes the first surprise You might have heard about city network before and we recently evolved our brand from city network to clear so clear is a company with open source at heart and We we truly believe that collaboration across organizations and borders leads to great solutions Clera offers amongst others a public cloud a compliant cloud private cloud and managed services Clera engage heavily in open source and we have more than a decade of experience in building and Globally scaling our cloud infrastructure solutions. We're committed to a data sovereign Europe Where a business accelerate and sustainable open source based and regulatory compliant cloud services? What you need to remember of that is that we focus on open source and have a strong focus on security and regulatory compliance. I was saying earlier in this presentation that This presentation will help you figure out how to build your cloud or Select your cloud vendor based on your compliance requirements This presentation comes from the question that we see from our customers asking Can your cloud tick all those security team all my security teams boxes for encryption? while following regulatory compliance and After your presentation, you will be able to answer this question for your case, and I'm insisting Your case as I think it's very important a company is not the other a business is not the other Your compliance doesn't mean compliance for another company in other words as A cloud vendor you can take decision for how you design your service and as a cloud user You can take this decision on which cloud vendor meets your needs So can a cloud take all of the security teams boxes for encryption at rest or in transit while following regulatory compliance Big surprise it depends It depends on the cloud design. It depends on what you need. There is no perfect solution I really want to highlight that there is no perfect solution every design at its trade-offs and Your experts should know That the design matters It's not as simple as I'll provide you an API endpoint. You're gonna you're gonna put your cigarettes there and it's done So you might want also to wonder what basically Compliance and what do we mean under compliance and why everybody today talks about it So as simple example, we are taking General data protection regulations known as GDPR as just simple example. So you might know that All service providers may obey it especially in Europe if they want to store customized data So in case of any data leak or violating GDPR your company might get real huge finds that may take it basically down and It's not only about Europe's results. So CCPA for US or LGPD for Brazil So basically wherever you are in the world you need to care about customers data and If you want to accept payments for example, then you also have PCI security standards which regulate Payment account data security So while with GDPR you Basically don't have any strict requirements of what needs to be said PCI there says brings it and Yeah, you will have minimal requirements of how data should be encrypted what's in first used and so on and On top of that there is also ISO 27,000 certifications We describe security standards and they also require data encryption and rest so if you want to provide in Europe Services for high-legatory businesses. You also likely should be certified with these standards And likely include we have this In other words data encryption is quite basic thing to have for these days for any Service provider if they care about customers and their data But you are missing slide, no, it's okay. Yeah So We need to also Select back ends. We will not Come straightly to the barbicons that we implemented At first we will we were considering using Hashi cope volt because it's quite popular and everybody loves it for basically key storage and Yeah, it looked like a perfect candidate for us to get it at the first place It's API is highly adopted and used In many places and the open stack is not an exception. It also has integration with vault. So It's it sounded like pretty easy Johnny But and back then we were considering barbicons just a plan B case which we can yeah use if it won't work out of his vault and Yeah So, yeah, I'll I realize maybe it's I should I should spend more time on explaining the architecture. So How do you I mentioned how do you deliver a cloud that take all the security teams boxes while following regulatory compliance and I realized we forgot to talk about the secure supply chain right for the delivery and That includes your software that includes the configuration It's it's it's a very broad topic and will not solve this in this session Just to talk about the supply chain alone You would know probably ever talk and so a bill of material All of this requires time and effort. What's important here is that when you have handled These parts of this of the supply chain the software bill of materials Then you can only focus on the software itself and its configuration So you need to take the right design decision and add up to your configuration for it So as you can guess we're using open stack and we're using a deployment system that allows us to easily control the software That we deployed the import. This is important for a secure software deployment to Handle the holder chain what you need to keep in mind is Open stack is very flexible and it can adapt to your needs Because on stack is very mature and very flexible yet surprisingly this flexibility comes at the expense of compliance So let's go through those Yeah, the slides are maybe nothing other. Yeah. Yeah So what do we do in in clearer? What do we wanted when we build our clouds? Yeah, so when we were driving Right in design We said some kind of expectations and some bullet points we want to cross so and first and quite important is tenant isolation And kind of proper one because stored secrets in storage Must be separated per users and in case one customer is compromised. It shouldn't affect any other customers And of course we wanted to provide the API for customers so they can store random data pretty security so and to store data securely we also need to leverage hardware security modules and basically why we organized all that is a block storage encryption and Obviously object storage encryption And on top of that we had kind of requirement for load balancers to terminate TLS as otherwise In order to do basically TLS termination you need to stores SSL's private keys somewhere in a pretty secure place and that is yet another thing that we can now achieve with secrets as a service And you could also mention that We still have some gauge not filled so we can add more expectations And this is images encryption and slow operational costs. Why not, right? and we Finally got a tool for that and this tool is Babicon But our slides are not in order again So why we're talking about castellan because basically all services reach Babicon through castellan castellan is Basically a Python interface that projects like Tinder or Nova or even Octavia can use to get to the back ends So basically, yeah It's like that But eventually as I told volt is pretty much popular. So you can Configure it as a Babicon back end as well So you go through castellan to Babicon and then store secrets basically involved But let's probably compare this mentioned options now and why Some are better some are worse As I said before We were first of all we were considering using just wall back end and you can do simply that through castellan so basically Octavia through castellan just reaches wall back end and each service Use its can use its own key volume key value storage inside vault but there are some pros and cons with that first of all About cons there is no tenant isolation So all secrets are for all users are stored inside key one key value Storage so basically if it's got compromised you got all customers data leaked kind of and on top of that You know to integrate with HSM you need enterprise Version while it also bring multi tenancy involved There is no implementation on castellan site for multi tenancy So you will still have user the single user regardless of vault version So now we going on and we decided that We can out Babicon right because it also can store in vault And on paper it looked pretty nice because we speak it says 11 Crypto driver you can encrypt storages or you can You can use HSM and leverage is HSM for encryption and at the same time on paper You could store secrets in vault and kind of Babicon provides tenant isolation and everything good, but There is huge but that you can't use Vault storage plug-in and the piki says 11 encryption So you still don't have a tenant isolation and now you have two services that you need to maintain and you still kind of need enterprise for HSM and Yeah, you just increasing your operating cost and complexity and Basically known of these two tools provide what you need and on top of that Vault storage plug-in was broken Until Xena release and yeah now it's fixed, but yeah still it's not Best solution and what we kind of needed so at the end we kind of dropped vault and as a DA because it's with it. It's basically no tenant isolation and Probably I should explain how since work with Babicon because it's Kind of interesting and a bit complex So in HSM, we store only two things it master encryption key and hash-based notification code HMAC So HMAC is used to ensure that data is encrypted and it's correct at the aesthetic and the master encryption key used to encrypt project keys so for each project a Unique project key is generated When the user first time creates a secret and basically this project key is encrypted with master key and Then when you store a regular secret it's got also encrypted it got encrypted with project key so basically In other words if you leaked a secret from database to decrypt it you need project key and to decrypt project key you need master key and Which is stored in HSM. So basically when you ask for any secret you go through HSM and there is also HMAC involved to Verify that hash is valid and it wasn't substituted on its way And concepts that are quite fair because HSM is basically Hardware modules produced by a certain party company. So drivers are appropriated Proprietary Which is yeah both believe in and It might be tricky to set up H8 for HSM devices, but let's not Yeah, go deep dive into hardware now Let's limit It's what we already have And we basically spent quite a lot of time understanding how Piki says 11 Crypto plug-in works with a storage plug-in We push some documentation changes. So now it's I believe can be more clear if you read through it. It's In better shape Yes, and now that you know more about the architecture How do you secure it securely deploy this for those interesting into building the cloud yourself in a compliant way? Well deployment was easy Anyone can deploy a cloud like we did at clear here is the recipe As I said, we're using a deployment system and this one for cases open stack Ansible and Well, the first step is to have the host In your inventory You define this little blob of YAML The to defines the valuable that applies to your inventory You run these three playbooks to because we were running with System containers the Lexi containers that you can see we added to them to the load balancer with h-approxie and Then we run Barbican and we deploy Barbican that is secure So if I recap so far, we have an architecture for cloud that architecture seems secure can take the securities team boxes But as I told you before opens stack is full of surprises Yes, so one of the surprises for when we try to include object storage server site, of course because we're not talking about client site. It's problem of clients kind of so According to a three specification, there are several ways to get server-side encryption First option is secc Basically, it's customer creates and stores secret wherever it won't and we have an API now for that Where can he can do that securely? But it's not actually Handy because you need to provide a secret with you with each API request and Yeah, then you need to somehow store secret and on top of that notice three tools Have this part working it's either it can be either absent or broken or implemented super recently As an eyesight though that you don't need much a configuration on storage site you just need to ensure that Connection is encrypted with SSL all the way from API to Backends, but other than that you don't need more But another option is secc CMS So basically you're I mean, I forgot to mention that we are using SAF and rather gateway So with SEC CMS rather gateway can be integrated with Barbican Which is my side, but There are some issues with implementation of that because so in order to integrate with Barbican You so basically when you when you create secret So basically user still needs to create secret manually and after that share It with ACL rules with Rados gateway admin user So basically we are in situation when one user in Keystone can read all secrets and Basically decrypt all objects in the object storage, which is not acceptable for us another issue is that When you upload in a pretty I mean big file you leverage a multi-part upload So each object is split by chunks and with that for example, you have two gigabytes file and It's split in like eight megabyte chunk So you have like 256 around parts and the problem with implementation that Rados gateway tries to Encrypt or decrypt each chunk independently. So basically you can repeat this process 256 times for single file upload So it means that you get that amount of requests to Keystone to Barbican to Rados to to Keystone to Barbican and to basically to HSM and HSM's are usually rate limiting say they are not designed to So huge load So basically when you are going at some scale of file uploads, it's not I mean you are just starting to endorse in yourself kind of and We also should mention about Octavia And how it handles SSL certificates that are stored in Barbican Basically club flow is quite common Certificates are stored as regular secrets in Barbican They are owned by a user that creates them It's nothing pretty specific So when your application asks to create a load balancer that will terminate TLS Octavia will reach Barbican should reach Barbican with user privileges But for better auditing purposes, it's not using original tokens and provided in request it creates another token From already existing one then Keystone Generates it returns to Octavia and with that new token Barbican is asked But why we are kind of talking about like application credentials because this flow is broken and is broken quite early so basically Keystone Rejects to create new token if original one was created from application credentials Its issue hasn't been solved as of today There are like some workarounds in code that can help but basically if you want your application to Interact in this way you should just use password authentication because it smokes quite nicely so So if you want to help us fixing that bug that would be great Yeah, and so operations, I'll just make it a one-minute thing seems like by now We have a design and an implementation. Does that mean that we can launch the product and production? Well Operations not that simple Pouring up and pouring on and migrating a VM now you need on-demand sharing of the secrets via ACL For to do your operations planning to reboot your hyper visors ask your users to shelve or unshelved the VM or share the share the share the access to the secrets What about your hypervisor that fails? No surprise You need to know that you need to have access to the secret again to have to be able to evacuate the VM So if you have smooth operations and live migrations, it's probably means that a secret is shared somewhere So as you might guess We're still missing some things implemented from the design we draw first is the image encryption Image verification. I'll I mean I'm realizing that we were short on that we were short on time so I'll skip that for now and The FIPS mode and the simple operations Sadly operations are not simple when you're implementing Barbican this way So I hope that we didn't scare you too much The cloud is no different than other software You need to take design decisions and those have trade-offs No design is perfect So when you are a cloud vendor you need to be aware of what your users want and Compare that with your security requirements Sometimes they are not aligned and this is the start of a wonderful journey for which you will explain to your users What they risk if you get access to their secrets basically and this is what generally Vendors do for convenience. Basically they grant themselves access to secrets And if you're a cloud user you need to be aware of what your cloud sells you Because their operations might have access to your secrets So should we then consider those as secrets? Some vendors don't hesitate to make those trade-off for operational ease and I completely understand them, right? It's just that I clear I would have we have taken a decision and we don't do this If you have any questions I'll be just outside. Yeah, as we're short on time Should you go outside


Ladies and gentlemen welcome back to everyone's favorite series wheel of mud wheel of nut I don't care what you call it. I don't know how my finals went. They went actually pretty good Um everything was very busy with the frat so my grades didn't go as good as I thought I wanted a four-point this semester. I did not but I'm gonna four point the next one. I promise Okay, so last episode we had a major dilemma on who we were gonna prestige So as you can see the team is white and you can see the first prestige choice that we took Was Randall Cunningham as I told you I would So before we had in this 90 overall now we got a 93 who is boosted to 94 after that onto the defense We decided to go with Ryan Shazir. So we got the 90 over Ryan Shazir for multiple reasons Seriously prayers up and let's all thank the Lord that he can actually move his body I would do genuinely thought that he was not gonna be able to move the lower half of his body That looks so bad. I thought he's paralyzed and then I also added Ronnie lot the legend players can't get injured because legends aren't in the league anymore I guess so that's something Ronnie lot 94 his card is so good people always talk about this card He has the 91 zone coverage, which it's super lame to make the game like that But if you have 90 zone coverage, I talked about this live You have 90 zone coverage you don't make super hard breaks on the ball But if you have 91 zone coverage, you do make super hard breaks on the ball But okay, that's that for the team We've got to fill in some of these holes because I hate having like a silver strong safety silver linebacker silver corners And a silver offensive line sucks, too. So we got two wheel spins Okay, everyone should know the rules by now We get two wheel spins per episode to improve our team and the first one is gonna give us feast Flashbacks jackpot would have been nice, but I don't have any ultimate feast players on the team So this is gonna be kind of cool. So I get to choose any 83 to 88 ultimate feast player I'm getting Deon Jones that card is really good Deon Jones, and I don't think I'm gonna put him at middle linebacker because I already has Shazir there Depends what type of defense I'm gonna run but I might put him at like left or right outside linebacker And we are not done yet. We got one more wheel spin before we move on with the episode and we're gonna get We just got feast and this one. Oh my god. We got it I am so pumped You guys can give me your opinions on this because I do make the videos for you technically I make them for me because it's fun when I make it for you, too I'm gonna go hop into a game of Call of Duty and for every kill I get I get 10,000 coins to spend on one player I can play one match of domination So let's say I get 50 kills. I I don't usually get 50 kills I'm not gonna call it but if I got 50 kills I would get 500 K to spend on any player any one player I'm gonna aim aim for 30 kills 300 K. This is basically the start of the match. We can do this Let's get off to a good start, please Good start good start. All right one kill one man down two men down. Oh, I Are the Keppings see that's all you know.  Let's go give me the triple. Oh, I could have had a triple I'll take my double kill. That's five kills. We're at 50 K already boys. Oh God, oh God, okay Now what I wanted to do here, but I'll take it King Slayer, and I got the kill. Oh Half-time nine kills.  We got murdered. That's why I Guess it's hard to shoot with let's go. That's a double kill. I got a molotov Montage are hysterical. Oh, I want to use it. Ah, okay. Okay 20 kills is 200 K to spend on that. Yes. This is a man When do I ever really get to just sit down and truly decide any player that I want Paul Kraus If you guys remember Paul Kraus from Wheel of Moth season one this ball Kraus dude won me so many games I don't know what I don't know what it is about this guy Like I don't know if there's like a trait that he has that I'm unaware of but he is so good Paul Kraus Welcome to my team again, buddy. I missed you. All right. So here's what we're rocking with on this episode We're done with 78 overall, but we have some crazy legends on this team Paul Kraus Mel Blunt Ronnie lot this is your day on Jones in the middle Deon Jones Barry Sanders.  I don't like it, but it's doable. Let's hop into a game Oh great start Yeah, what do you want me to do? And he's gonna start with a ball I have and this is how we start the game Give me a restart button My life is pointless. My life is over Not to die Dying is a great What just happened he didn't fumble give me rage quit out of video other than right now Shit. Goodbye Paul Kraus. It was nice knowing you for f***ing 30 seconds Goodbye Deon Jones. It was nice knowing you for 30 seconds. Okay. So here's what I'm gonna do I'm gonna make this a double episode. So I'm gonna take my loss That counts as one game out of my five that I get to earn prestige players So there's all being one episode, but I'm gonna play my second game So I'll have this episode and then three more as opposed to four more that makes sense We'll spend number one of technically the second episode I have to build back now. I just lost two amazing players Team of the week 84 to 89 and we get to choose any so I like that. All right, we're gonna take a new route here Whatever I did last time obviously didn't work. We're gonna go with Joe Staley We're actually gonna get a left tackle 89 overall. All right. Now I get one more wheel spin as you know I'm so impressed like I have clinical depression after that last play And this is gonna land me out of pack a punch, maybe Ah 87 overall first so the first 87 overall player we see on the auction house Could be the best 87 overall ever could be absolutely nothing It's gonna be tj. Why actually that's kind of cool. I kind of want to use tj. Why that's actually dope. All right Let's get it 22,000 coins and I gotta write outside linebacker again. I'll take it attempt number two at a game Alexa remind me to kill myself in like 30 seconds I mean really, you know what no no actually I think I figured out the problem I think I figured out the solution to our problem here and I can't oh wait. I can't hit Tyree kill. Look at him Nope, bro. What is with this is the 94 Randall Cunningham. Get to that quarterback fast I'm not gonna be cool with another conversion on third and deep. Oh my god. You are kidding All right. That was kind of cheesy, but That's all part of the game. He's gonna go for it. I'll take it though I have so much faith and Barry Sanders. Oh my god. Someone give me oh Barry Sanders. I don't know man. Maybe not. I'm a hippie. Yep. I kind of figured he was gonna jump up and do that That's too bad if that's a touchdown It's not okay Okay, well isn't all around sad day. Oh no, that's pink That's picked up.  I know I know I know I know seven is yeah At least we got him pretty far back on this one. I looks like an inside zone to me. It's not Some so oh my god. We just got a safety today. We got clowny So I'm gonna get one guy to get dragged down. I'm just gonna leave y open I did that I did that all by myself Oh mckinnon He's got it no matter where this play goes at one time out Okay, good What are you doing? I hit a too fast and he throws it at the dirt And this guy just picks it up. I think offensive line Oh, it is the fake and I'm gonna go off the shaker Myself, I did everything I could that it goes up in the air My whole team stands around while he goes and gets it The bag of all time. I'm so hyped about that play. That was wicked. I've never seen a play like that At the same time. It's like why yay, but just give me some control over my life I don't get the two blank conversion there, but it's still a to seven. We're winning does not run it. I'm totally wrong Doesn't want the jump off He's gonna throw it to right to my brand new tj y pass rock this burger and get so close to the end zone Let's just find the open man Let's find the open man boys. He's right there boom Sext up with a pick he was tired. Oh my god.  Oh, don't beg him. You're coming. He's not fast enough. Let's get it 22 the seven That got scary there for a second because I do that nasty big. I'm telling the only way I can score is my defense boys Defense and luck and he's out of there. I'm gonna get I'm gonna count as a Pearson see Give me my range quit spin. That's that right there. It's just so much redemption So much redemption for the game before this. This has been a beautifully long episode I hope you guys have enjoyed and stayed for the whole thing. I'm sure there were some ads in there So I hope you enjoyed the ads he he xd. So here's my spin ratchet recording spin I have to hold it back here in the manual focus. Hopefully the glare doesn't get you We'll see what it is because I don't actually know yet not until it stops 88 overall first. We just did 87 overall first. Sorry. I'll show you again 88 overall first. We just did 87 overall first I get to add an 88 overall to the team.  Why couldn't it have been like this the tackle or the free safety Or the wide receiver or the left hand or the right any of those All right. Well, it's a bad day for me. All right guys. Thanks for watching. What a freaking roller coaster of an episode Drop a like I think this one deserves a like that's about it for now guys. Thanks for watching as always. Take care


Hey guys! It says Jens Strikler. I am not Jens Strikler. Although he's a huge idol of mine, I'm really impressed by what Kickstarter has done on every other one at Kickstarter. Jensi got sick, or I think his dad got sick, so I was called in just a couple of days ago, and Jensi is the co-founder of Kickstarter, which is a huge crowdfunding platform, and I am the co-founder of Funded By Me, which is not as huge, but probably as important crowdfunding platform for Scandinavia. I'm going to start my presentation with just saying how honored I am to be here, and just meeting Simon and Rita. It's huge for me, because I'm going to tell you a bit later about how this works, but what happens is when you crowdfund is that you actually get not just money, you get a lot of people talking about your project, and I've been talking about both of these guys for like over a year. They didn't know that because I met them the first day today, so I'm happy that I'm here. Let's start with the first light. So crowdfunding is a new phenomenon. It started a couple of years ago, like the word in itself. It's not even 10 years old, but the act of crowdfunding is nothing new, and this is something that we've done for generations for like, I think, thousands of years, because we always work together. We all did stuff together. We always pitched in. As you know, we build churches, bridges, cities, companies based on the fact that you have a goal, you have something to do, and then you cut it up and try to engage people, which either invest in you with time or money. So crowdfunding per se is nothing new. What changes is that we actually have new tools. So in the early days, when we were crowdfunding like in the 70s or even for 5,000 years ago, everything was local. You could only work on a local market because you couldn't reach other continents or other cities. It was really hard to crowdfund. Like if you wanted to build a church, for instance, or any project, it took years, if you were lucky. But the thing is, and what's really, really amazing is that we are living in these days. This is today. And I tell a lot of people all the time the fact that we actually are living in the future. We are, you know, using the devices we dreamt of. I'm 34 years old, and I couldn't imagine that I could live this kind of connected life, that I could meet people throughout the world. And I couldn't even imagine that I could do the stuff that I'm doing today. So you know what? Welcome to the future. Let's do something about it. As you know, ideas spread quite easy. And what we can do today, and what we are doing with crowdfunding is that you basically have an idea. You try to boil it down to something really interesting or really well told, and you put it to the internet and ask people to be part of it. And being part of an idea is not just collecting money for rewards. It's basically asking people to do something for you. And as you know, ideas travel really fast throughout the globe. In a couple of seconds, we can reach people in India, America. We have friends everywhere. We have thousands of people online that know us or trust us at this point. But during the last years, we have started to think a lot, what is Facebook? Like for instance, what is Twitter? What are all these people we are friends with? What can we do with them? And what can they do with me? How can we connect?  You come to a point where you want to see how can I use my 700 friends or how can they use me because I have knowledge to give to them or interest. So the crowdfunding tools out there were built just for this course that we wanted to connect people who have an idea and connect them to people who want to be part of that idea. Because I'm so convinced that today we are living in a world where we are not happy that when we get a pre-packaged product. Like for instance, it's really fun to buy a CD, but it's really much more fun to be part of that making of that CD. Since I've been funded by me and we've been running that for a couple of months now, I've been backing up a lot of projects that's on our side because I really love what they're doing. And I'm starting to get rewards now and it's really amazing. Like Simon for instance here, he just crowdfunding a book and I'm really looking forward to get the book. I've been to theatre plays where I go into the audience and I know that this play is done because I once contributed with like 200 crowns. I had some guys sing a song to my wife in the city at Walborsprasofton because I gave them 100 crowns three months earlier. So you start feeling the sensation of being part of something. So let's just briefly go through the three words which everybody at this point talks about. The three crowd words is crowdfunding, crowdsourcing and also equity crowdfunding, which is becoming much more interesting now. So crowdfunding is basically an idea that you present and you decide a goal for it and then a monetary amount that you need. For instance you need 50,000 to produce a record or you need 100,000 to travel or whatever. So that's basically you collect money to be able to start doing your idea. So you pre-sell your idea. The other one is crowdsourcing where actually the money is not the important one but you ask for help. Like for instance let's build something together or let's collaborate on a book release or let's clean a park or let's create a company from scratch or like Foursquare, let's create a story about our lives which everybody can take part of. So that's crowdfunding. And then the third one which is equity crowdfunding is a bit more intricate because equity crowdfunding is basically when you give away stocks. Basically I have an idea and it's worth 100,000 and I can split it up and I can give you shares of it. And that's something that a lot of people want to do but it's a bit hard to do because both the American and the European laws are a bit hard. They don't allow you to present a stock option to more than 200 people publicly. So you have to find other ways to if you want to do that. But these three tools are out there. We're here to talk about crowdfunding and this is our platform, like that I'm running at this point. It's called Funny by Me. It's growing all the time. Of course during July it was almost dead because a lot of people tend to not use computers during the summer but now it's exploding in again so I'm really happy. But I'm not here to talk about that. I'm really here to talk about this and this is actually a list of all the crowdfunding platforms at this point. So it's not about which platform you use. It's basically how you use it and how do you interact with your audiences. And that's really interesting because all the audiences we are having are different. Some are global, some are local. I think Simon's audience is fully global but if you do something in Justice City it's not interesting to connect to the rest of the world or if you for instance work with film then you should use a crowdfunding platform maybe focusing on film in your locality. So you have a long list. And just to finalize a bit this era that we are in. A lot of really smart people have been talking about the rise of the social and creative class which is basically a scientific approach to the fact that we are not being able to compete with India and China and other countries on how to produce stuff. We can't, you know, every company is putting their force in different countries which are a lot cheaper but what do we have instead? And what we have is a lot of creative power, a lot of social power and basically we know how to use a lot of new media. So this is something that we can do. And also involved all those people that are following us because people want to be part of what you're doing. People want to tell your story. People want to be part of what you're doing. I'm fully convinced that we're coming to a point where you can't let longer stand and wait and finalize your product and then put it to the market. You should do it way, way ahead. And as I was telling Simon just before I came up on stage and I think Brita too earlier is that even without me knowing them for a year I've been working for them. I love their projects online. I watch them. I'm not sure if I back you or if I had time to back you but I know that I told a lot of people. I told hundreds of people about the project. I went to the city council and I gave Simon's project as an example. So basically I've been working for free for him because I love his idea. And we were discussing that earlier. That's really valuable. He raised a lot of money with his project which is with his crowdfunding campaign but getting me and all the other thousands of people working for him is amazing. And I have thousands of stories to tell you about people that are crowdfunding and are raising good money. But every one of those are telling about what happened on the site. Everybody has like a story of how they got contacted, how the R&D got public, etc. So that's why I just want to say crowdfunding is basically this. The money you raise is basically, it's just a positive side effect. What happens during the period you crowdfund and afterwards is actually the value that you get. And this is just a bit interesting because I should put this as a last slide but this is my Facebook friends. It's not so much but it's quite all right. Not so many Twitter friends but it's also all right. And then I have friends and family, then I have some email list and suddenly when you start boiling it down you realize, oh shit, this is real people, more than 1500 potential investors. So if I just have a good story to tell, if I package it good enough and I'm convinced enough to tell the world, I will probably make it. And just to prove it, I can tell you the story of how funded by me was built. We got to a point where we said, you know what, we have to know how it is to crowdfund if we want to work with crowdfunding. So we decided to crowdfund our own crowdfunding platform. So we begged, we borrowed, no we didn't borrow. We begged, we begged some more, we made phone calls, we talked, we gave lectures, we thought about what can we give in return. And we came to a point where we actually got a lot more money than we wanted or needed and also a lot more attention. So I know what I'm talking about. So thank you for listening. Let's invite Simon on stage. He's going to tell about an amazing film that he's producing and also one of the more successful campaigns on Kickstarter, I think. Welcome.