Welcome everyone. Welcome to our webinar, Nonprofit Security Best Practices. Are they out to get you? We are thrilled to host this webinar today, and I want to give you a brief rundown on how our platform works. So you will have the opportunity to chat with us and Julian, our presenter today. We do use ReadyTalk, the chat box or the chat bar which is on the far left hand side of your screen. Is there for you to ask questions? You can also let us know if you are having any technical difficulties. I will receive those chats, and I will queue up any questions for Julian. During the event we will pause definitely at the end of the event or towards the end of the event to answer any queued up questions and possibly throughout the event when we have the opportunity. So don't worry if your question isn't answered immediately. We will get to it even if it is after the event itself. There is no need for you to raise your hand. Simply chat into the chat box with any of your tech problems or challenges or your questions for Julian. If you lose your Internet connection you can reconnect using the link that was emailed to you in your confirmation email or any one of the reminder emails. If you lose your phone connection if you are using your phone you can redial the phone number and just rejoin.  If for any reason during the event your audio fails or it cuts in and out or it does not match what you are seeing on the screen we recommend you try logging in again or simply call in by phone or through Skype. I have chatted out that phone number a few times in the chat box and I will fill again momentarily. Just so you know all your lines are muted so we can get a good clear recording. The webinar will be available on our website along with all of our past webinars at www.texsoup.org slash community slash events dash webinars. You can also view all of our recorded webinars on our YouTube channel. I will be sending you an email with a link to this presentation that Julian will share a recording and all of the links that Julian is going to discuss today within a few days. You can also tweet us at TechSoup or use hashtag TS webinars. Okay enough about our platform. I would like to introduce you to Julian. Julian is our speaker today. He is our expert. He has been working in the software and IT industries for over 20 years. And in 2003 he co-founded Freedom Solutions, Freeform Solutions, a not-for-profit organization with a mission to help other not-for-profits use technology more effectively. He is also the lead programmer of Formulize and open source software that lets non-programmers create database systems on their website, CMS, and mobile devices. We are very lucky to have him on this webinar today. I think you will find this presentation very engaging and informative. And I am Susan Hope-Bart. I'm the Training and Education Manager here at TechSoup. And I'll be on the back end queuing your questions and also answering any text challenges you have. A couple of quick things. You are here joining us at TechSoup. We are located in beautiful San Francisco, California. I'm going to ask you where you are joining us from today so you get to practice in the chat box. Tell us what city and state or what country you are joining us from. And as you are doing that I am going to queue up a couple of polling questions that Julian has put together to kind of gauge the audience's understanding of some security practices. So I see everyone chatting in lots of folks from California and the East Coast, a couple of folks from Canada as well. Welcome everyone. Here is our first polling question. What security technologies are you most interested in or likely to work on in the coming months? So go ahead and use your cursor to indicate which of these technologies you are interested in or likely to work on in the coming months. Training to avoid risky behaviors, payments, social media, are you ever really anonymous? Email and spam, URI's password, public Wi-Fi, protecting your website, the cloud, or protecting your computer. And I see we have 24 responses in. Get those fastest fingers going. We are now up to 45. I am going to give everybody 5 seconds. 4, 3, 2, 1. Wow! So we can see here Julian that we have lots of people looking at training to avoid risky behaviors. That is so funny because we were just talking about this, that people's behaviors, how can we influence or change individuals' behaviors? So this is great. This aligns with some of the things we will talk about. Oh, it looks like we also have Protecting Your Computer and the Cloud. Those are the top three. Thank you very much for answering that question. And we've got one more. The next one is we are asking about your role within your not-for-profit NGO or library. Are you with IT, Network Admin, your ED, or a board member, decision maker, program staff, non-IT? Are you a volunteer? Are you in operations or admin? Or is there something else you are? You can feel free to chat that in in the chat box. And you guys are much faster on this one. Wow! I am going to show results but I am going to leave it open for 5, 4, 3, 2, 1. Okay, it looks like a lot of you are in IT or operations. These are all great things to know. Great. So what I am going to do now is I am going to turn this presentation over to Julian who will take you through his Prezi and talk to you about security. Julian? Hi there. Thanks very much. So I assume that in a moment I will get some notice that I am in charge sharing my screen and you will all see my screen, I hope. Insertably sorry, technology is over here. Thank you everyone for coming today. It is always fun to talk about these things because the whole reason I like to work with technology is to help people use it for some purpose and it is all about people engaging with it. I like a good detailed tech problem as much as the next week but it is good to actually engage with people and this is all about how people deal with stuff in a very day-to-day regular way. And you may want to just double check. You are sharing your desktop, the top button on the top of the screen. It is okay. There you go. Got it. So privacy and security online.  So some of this is probably review then and that is okay. I hope if you are in that kind of situation it is at least useful information to get you to help you communicate with your staff or whomever in your organization that you need to help understand these things better. And some of it maybe isn't review, just maybe some tips or ideas or things that you can use. And those of you who are less involved directly in technology, well hopefully there is more that you are less familiar with. Please do put questions into the chat and Susan will jump in on that because I can't see that as I am going through this. So if I am not trying to ignore you or be rude, that would be great to have some discussion going on because this is not meant to simply be a sermon from the mount that is for sure. So it is not being paranoid if they really are out to get you. In the last few years it has hopefully become more clear that there are an awful lot of people who really are out to get you out there and in a way a healthy paranoia is actually one of the baselines that can be a good defense as you will see. So there we go. So about me, Susan already introduced me, Freeform Solutions I co-founded many years ago now and they are still around helping nonprofits manage websites and systems online. And I have continued to do that kind of work independently since last year with a deeper focus on data management tools and things that are my stock in trade and preferred way of doing things. So that is me and just to jump right in because there is a lot to go through. It is a huge topic. There is a lot to know and it is hard to decide what you want to do about all this stuff. So we should start by setting some goals. As my friend Laura has said, I have a hard time deciding how far in the sand to stick my head when it comes to privacy and security. So let's set some goals so we can have a more measured approach than that. So I hope that you come away from this learning what you can control, learning how they out there are trying to get you.  So we'll see. I want to start with a little story. Tech folks may be familiar with this. It was well publicized a few years ago when it happened. Matt Honan, a writer at Wired Magazine. If you don't know Wired Magazine, it's basically like Rolling Stone for the geek set. He had a Twitter account at Matt and somebody took a liking to at Matt. They thought that's a cool Twitter account. I'd like to have that account. So in the beginning that was all that anyone knew. Anyone interested in hacking him knew that the Twitter account was at Matt. But in his Twitter profile he had a link to his personal website. So there's a little more information out there. And on his personal website he included his Gmail address. So now there's a bit more personal information out there that was just publicly available. So now the hacker got creative. They tried to reset his Google password, his Gmail password. And when he did that Google disclosed that the alternate backup address that it would send the reset messages to was m-something-something-something-n at me.com. The guy's name is Matt Honan. So a little bit of guesswork might reveal probably what that email address was. And me.com is a domain owned by Apple. Those are Apple email addresses. So that's probably tied to an Apple account. So nothing's been sort of classically hacked yet but they're zeroing in on what information is available and what to do about it. This is where it gets really interesting. And there's some security flaws here in Amazon's practices and Apple's practices that they changed after this event. But at the time it was possible for the attacker to call up Amazon on the phone and say, I want to add a credit card to my account. And Amazon did this. Hacker identified themselves as Matt. And they knew the name. They knew the billing address, presumably public information, what his mailing address was. And they knew his email address that was associated with the Amazon accounts taking a guess that it was either the Gmail one or the Apple one. So they identified themselves to Amazon and they were able to add a credit card to his account. Which you may think, well, why does that matter? Well, because Amazon at the time had a quirky policy where if they called him back or they called Amazon back, which they did, they then asked, I'd like to add an email address to this account. And some other operator on the Amazon phone line gleefully did this for them because they knew the name and the billing address, and they knew a credit card number that was on the account. Because they had just previously phoned them up and added a credit card number to the account. Now they could call them up knowing a credit card number that they had just added and ask, can I put an email address on the account? So Amazon did that too. So the email address is of course really important because now that they have an email address on this account, they can do a password reset on Amazon. And that allowed them to log in to his Amazon account. So now they're really getting somewhere. And in Amazon it doesn't show you all the credit card numbers you have on file, but it will show you the last four digits of every card you have on file. So why is that important? Because it turns out that at this time, Apple, if you called up Apple and they wanted to verify your identity, they will be satisfied that you are you because you provide your billing address and the last four digits of a credit card. So they'd seen all those credit cards on the last four digits of all those credit cards in his Amazon account. Call up Apple, say they're Matt. Apple believes them. And Apple Care then dutifully gives them a temporary password to log in and reset the password to get into his Apple account. So now, if you remember way back in the beginning, it was the Apple account that was tied to the reset of the Gmail password. So they can now get into the Apple account and the Gmail account. And then with access to the Gmail account, they reset his Twitter password and they could take over the Twitter account where this all started. And just to make it harder to see what they've done and cover their tracks a bit, they use the remote features that Apple provides to wipe the contents of his iPhone, his iPad, and his MacBook. And they also deleted his Gmail account. So that's where it gets really nasty because it's an awful lot of data loss besides the identity theft. And Apple did help recover the information off the laptop I believe after this, but it's a pretty damning situation. So it's a crazy story. It all happened really fast. The whole thing went down in like an hour, less than an hour. But I think it illustrates a lot of great points.  No, it wasn't like you see on the movies. It was just simple social engineering so-called. And that's always been the most potent tool in any hacker's arsenal.  Bitcoins being this digital currency, cyber currency that each Bitcoin is worth a fair bit of money. And this person just called them up at no point was ever challenged to prove who they were. And the tech support person that they were talking to basically granted them access to the servers of Canadian Bitcoins company. And this attacker just transferred Bitcoins out to their own account, valued at around $100,000 just because he asked nicely and sounded authoritative. So like social engineering goes really far. And it's one of the things – the biggest defense against that is simple caution or paranoia, some would say. Great book by Kevin Mitnick called Ghost in the Wires. He has a lot to say about this and all the hacking that he used to do when he was wanted as a major hacker. But so much of what he did was actually non-technical. So here's a survey of all the sort of nitty-gritty topics we might get into. And based on the survey responses there, it sounds like protecting your devices and email and spam and the cloud were a couple of the big things that people wanted to talk about. To start with, I'll focus on those three, but I'd like to start with URLs because it's highly relevant to the email and spam topic and to a lot of things in general. So briefly, indulge me to go through URLs and we'll dive into the others too. URLs, things to know about this to help you understand or explain to people how to keep themselves safe. Hopefully if you're interested in this topic and you're here, this is mostly review, but anyway, you'll see. So URLs, links, addresses, site names, they're more and more hidden these days. Whenever I talk to people, guide them through something, I say go to the address bar of the browser. Half the time people don't know that there's an address bar on the browser because their browser opens up. It goes to Google. They type in the website that they want into the Google search box. The Google search results come up and then they go to the website they want. They sort of bypass the address bar entirely, but hopefully everyone here is aware that there is an address bar in the web browser at the very top and you can type in an address for a website directly and go there. And everything on the Internet has an address and it's the number one backstop that you have against being in the wrong place, giving the wrong information to the wrong people to understand the addresses. So look at a simple address. Those of us who know these things, it's like, oh my God, this is so remedial. But when you think about it, there's actually a fair bit to know to understand how to read this properly. The first thing is everything after the slash, you can ignore it. It's totally irrelevant for figuring out the validity of this address. And then from that point you read it backwards towards the beginning. So the top level domain, .com or .net, .cagov, et cetera, there's a zillion of them now. You can pay about a quarter million dollars and run your own top level domain registry if you want to. It could be fun, depends on what you want to offer, I guess. After the top level comes the actual domain name, Google. So that's the key part right there. Beyond that, you get into what's called the subdomain, and that's mostly irrelevant. There might be more than one. Sometimes you see websites that are like something, .something, .google, .whatever. It doesn't matter how many there are, they're all kind of irrelevant for figuring out where you are. And then at the very beginning is what's called the protocol, but it's not even usually shown. Oftentimes a web browser if you are looking at the address bar, it'll just show you the subdomain, the domain, and the top level, and it'll met the protocol. So that's what the address is. And it's important to know how to dissect that. And if you knew all that already, hopefully that's at least the useful illustration you can show to some other people. Now to learn what the actual URL is, like this is the thing, you get all these links in websites or emails or wherever. To learn what the URL is, a lot of people say, okay, you can look on the status bar on the bottom of the browser. If you didn't know this, the browser will show you. If you hover over a link, it'll show you something at the bottom. That's true, and most of the time that's correct, but those can be spoofed. Lots of things can be faked on websites and on the Internet, and those can be as well. So if I'm going to give you some advice about the number one way to be sure where this thing goes, if you're looking at something that's like, if I click on this, what's going to happen? Is this really what it says it is? If you right-click on the link or control-click on a Mac, you get the little pop-up menu, like what's shown here. And if you copy the location, or in different browsers it might say copy the address, copy the URL, copy the location or destination or address that this link belongs to, and then paste that somewhere. Then you're not activating the link, you're not going to where it actually is going to take you, but you're seeing where it's going to take you if you click on it. And it's just a simple step to actually see what's going on. But you have to be able to read the link for that to matter. It doesn't help if you can't read it. So yeah, and as I said, the status bar at the bottom is common advice, and it's good advice, but it can be spoofed. The thing is, if you look at the status bar and the link is garbage, then great, you're done. You know that this is not something you want to click on. But it might look good and still be bad. That's why the copying is the most reliable thing to do. So we'll see how on the ball you all are. We don't have to do this as a poll. You can just tally in your own mind. Which one of these is the real link for the real bank? Taking into account the little run-through of URLs, can you read this? And can you say to yourself confidently, I'm going to click on one of these things and type in my banking username and password, and I'm not going to lose any sleep at night. Which one? Top one or the bottom one? Well, if you haven't figured it out by now, that's a bad sign. And the top one is the real one. The bottom one is not. And there's why. It's because right before the first slash, TD.com, it belongs to TD Canada Dressed. And this one, right before the first slash, it's banksite.cc, run away fast. It's not a real website. Well, it's a real website. It's just not the ones you want to go to. So from there, sort of following on that theme, let's look at email and spam then. Because understanding that stuff is really critical I think to understanding email and spam attacks. Now the advice you always hear and everybody says is, don't open suspicious attachments. Well, yeah, but what counts as suspicious? Because here's the thing, if your friends get viruses, the virus is going to send messages to everyone in their address book. So if you get a message even from someone you know, but the content isn't really unique and speaking to you directly is not saying things that only that person would really know or say, then it counts as suspicious. Anything is suspicious. This is the paranoia theme again. So yeah, tell your kids to love the world and be friendly and trust people, but everyone on the Internet is a stranger with suspicious candies. So it's sad, but that's the way you've got to look at this. And the bottom line is the links as we just saw. See the URLs, this whole thing. And you can do this in email, in your email program you can do the same kind of thing. You can right click on a link and you can copy it and there you go. And if that domain and TLD doesn't look right, then don't click on it. Now it's a whole lot of education, but honestly I think the only solution to a lot of this, well you can put in all kinds of firewalls and software and things that some organizations put in place to prevent people from going to certain places. But that's sort of an endless game of whack-a-mole because the way these spam things work these days is the attackers just hack some new website, dump all of their suspicious stuff onto that website in some hidden folder, and then direct you there through their spam. So I think it's really understanding and education is the only way out of this. It is easy to fake emails, but as sort of a final thing I just want to point out you can also look at the headers of email. All email programs will give you some option to view headers or see the full text or the source of the message. And in the headers they look something like this which looks really scary.  And whatever that stuff at the beginning is, this is subdomains, three of them, it doesn't matter. It's uterano.ca. So I know that this message started at the University of Toronto and there's a history here of where it was sent and received between different servers at the university. And then eventually got picked up by Google and at the time Google still manages the freeform email system. So from Google it got passed on to me at Freeform. This was real headers from a real message. So a lot of that stuff is hard to read, but most of it's irrelevant. When you know what you're looking for you can actually quickly do a validation. And that's true of lots of things online. So looking at protecting your devices, that was the top thing that people were concerned about. And some aspects of this I think is kind of boring. Number one advice about protecting your devices is backups because it's going to be lost, stolen, hard drive is going to fail, some fool is going to install something on it that renders it unusable, who knows. So you want to back up everything that's important. And you all have backups running right now on all of your important things. I'm sure you do.  But well, of course, sadly that's probably not true. Backups are often the last thing that people think about because it's just not part of your day-to-day routine. But there's nothing more important than having a backup plan or backup copy especially of data that's sitting on any device, especially mission-critical ones that's for sure. And then virus scanners, keep that kind of thing up to date. It's one thing to have it installed, but if it's not being regularly updated and they can all be set to automatically update now, then it's not much use because the thing that's going to get you is not something that came out like five years ago or whatever. It's going to be something that's new on the scene and you want to be updated ASAP. And well, the other thing just to understand sort of the importance of securing your own devices and why virus is just so bad is that especially on – well, Windows has got better than it used to be, but it's still true that generally speaking software that's on your computer will have access to what your computer is doing to a greater or lesser degree. As an example, I want to run through a useful tool here called Prey. If you haven't heard of Prey, you can install Prey on your computer or your phone and basically it's in original purposes to monitor your device if it's stolen. So you can see where it is, when it's turned on, when it's connected to the Internet and it will sort of phone home to the Prey servers and send you a notice saying, hey, your device has popped up online and it's at this location and so on. So that's kind of handy. And certainly I would recommend that kind of software on any laptops that you have that are actually owned by your organization and that are leaving the home base and circulating out there and are going to get stolen out of the backseat of somebody's car who knows what. So this is useful, but it helps show you some of the things it does and it's kind of freaky. So I installed it on my laptop a while ago to create this. And one of the first things that popped up when I generated a report about what my laptop was doing and what had happened to it is it showed me this map. And I thought, that's really cool, but wait a minute, my laptop has no GPS. So what's going on? Well, the fact is that even without GPS, a device connected to the Internet can be geolocated just based on the Internet connection it's using. Google and other services keep giant databases of where all the IP addresses in the world are actually physically located. So when you connect, they can tell, oh, that's a Toronto address, or that's an address like right there on my street that map is quite accurate. That is just about precisely where my house is. Now Prey will also do things like, well, show you the snarling face of the nefarious person that stole your laptop because the software can access the resources including the camera files that can see what you're typing. There's a screenshot there, part of a screenshot of what was on the computer at the time this report was sent to the Prey servers. So this is handy from a security point of view, a little freaky as well, but handy. And viruses are software, just like any other piece of software. They could be doing all of this, but without your consent. So some people I think don't, oh, your computer's got a virus. Oh, well, I'll just have to wipe it or clean it or whatever. It's a big deal. Like if your computer is compromised, a lot can go wrong. A lot could potentially happen. Not necessarily, it might be nothing, but you just don't know. And it's something that people should take very seriously. I think if they took it as seriously as it potentially is, there might not be so many security problems. Another thing that's important to do for your own devices is encrypt the contents of them. So here's a program called TrueCrypt that you can install on your computer, and it will basically scramble all the information in your hard drive. It will encrypt it, the technical term. And that's so that it can't be read if it's stolen. Or even if it's not stolen, there are people who work in, for example, human rights nonprofits, and they don't want the governments of countries they're visiting to be able to seize their laptop and see what's on there. And there's even people concerned about that and not so far flung places. So TrueCrypt is useful for that, but at a risk here, there's no future versions of TrueCrypt planned. The team that was working on it has disbanded. So as far as is known from a software audit that has been done on it, there's no serious issues with software. It's worth using. It's still good, but it's not going to be maintained into the future. So there's some other alternatives here. VeraCrypt is a fork of TrueCrypt that some other people are carrying on. There's another software called DiskCryptor which is the similar things. And the thing is there's also built-in tools in the operating system now for all the major operating systems. You could use those to encrypt your device. Not everyone trusts those because it depends on your level of paranoia, right? A lot of these things depend on your level of paranoia and sort of which risks are worth how much inconvenience. So the risk that there's backdoors built into windows for the NSA is a concern to some people and to others it's not. And you can decide if it's worth using these things for yourself or not. Now what about your phone? A lot of that stuff is all primarily for your laptop, although Prey will work on your phone. But certainly device encryption, well the sad news is there's no equivalent of TrueCrypt for your phone. There's no really sort of robust like just going to work can make a general recommendation for anybody. There's no equivalent third party independent software that you can use to encrypt your phone. So if you've got tablets or phones or other things that are leaving your office and you need to keep them secured, well you're kind of stuck with what Apple gives you since iOS 8 iPhones are fully encrypted. If you use a passcode to lock them and there's encryption features in older iPhones as well. Android encryption because so many different manufacturers and versions and things, it varies quite a bit what you can do from device to device. But generally speaking there is some device level encryption you can turn on in most of them all new ones these days. So you kind of got to go with what you're given. It's like going with the Windows version of encryption on your laptop, which is if what you're concerned about is someone stealing the device and being able to read information off it, this is probably good enough. If you're concerned about some point of attack from a government or some other organization with similar resources then hopefully none of this is news to you. Anyway, I've been zipping through a lot of stuff here. I was going to jump into the cloud next, but I thought I'd ask Susan if there's any questions or other discussions or things that are worth revisiting or taking into. Yeah, great. We have. We've had a couple of questions. The first is from Craig. He's asking, do you need to backup files on Google Drive? Haha! Do you need to backup files on Google Drive? I don't myself so I guess that's an implicit validation for not doing it. The thing is the infrastructure that Google and other cloud services have, and I'll talk about that next, the infrastructure that they have is it's not like in the old days it would be like, oh we have a file server and it's like this computer under Sally's desk that's running 24-7. And then one day the hard drive fails and it's like, whoops, did we have a backup of that or not? The Google infrastructure is obviously still the exact opposite of something like that. They're the largest buyer of computers in the world because they have just so much stuff.  There are probably multiple copies of them throughout this sort of ecosystem of servers that Google has. Now that's not to say of course that something won't go wrong somewhere at some point and some file you have in the Google cloud might become corrupted or who knows what. More likely would be some situation where say you've got multiple people who are accessing a file and somebody overwrites the file with something else by mistake or who knows what's going on. The file essentially becomes damaged because somebody did something to it rather than the file being lost. Now Google has great revision history on all your files as well. So even if that happened you should be able to go back and find the version that you liked and sort of revert to that. So I think it's always good to have backups but I don't think it's necessary for the cloud stuff. The other thing about backups is the reason people don't do them very often as often as they should is because it's often hard to institute a regular recurring backup policy. What's the process by which we're going to go through to back up everything? I'm backing up stuff off Google. The best thing you can do if you don't know already for all these services, Dropbox, Google Drive, etc., you can download a program from them to install on your computer and it will mirror the contents of the Google Drive to your hard drive or to your laptop or whatever. That's very handy because then you can interact with the files if they're not just say Google Docs files but if they're just regular old files. You can interact with them off the hard drive of your device and you make some changes say in Microsoft Office to this Excel sheet, save it, and then the Google software will sync that back into the cloud. That's kind of an implicit backup already because then you've got it sitting there in the cloud plus you've got the copy on your hard drive. So that would be what I'd really recommend when it comes to that. Sorry, long answer but there you go. Yes and no. Great. Thank you.  This comes from a nonprofit that says they purchase a lot of their necessary items online. Their credit card has been stolen twice. What can they do to prevent this? What can they do to prevent this? Well, not as much as you might like to. Maybe I'll just do a quick detour into payments because there's not a lot to say about this. But when you're doing payments online the thing is HTTPS, the protocol at the beginning of the address. You want an S on the end of that and your web browser will have the lock symbol. If you're doing a lot of purchases online, hopefully this is not news to you. You want to see that lock. You want to know that the connection is encrypted so no one's going to steal the communication in transit because that's what it means. You want a secure connection that no one sort of eavesdropping and no one's going to steal the credit card number as it travels over the internet to the store. Now here's maybe something that might help. Don't ever store your credit card information on the website. That would be my recommendation. It's not a law. But the thing is they all have this, save your profile information, save your payment information to make it easier next time, or check out faster, etc. What that means is though if you do that, that means that they have a copy of all that information including your credit card number. I just don't think that's ever a good idea because if their system gets hacked, and this is the thing, I don't know how your card's been stolen, but there's two ways most likely for how it's got stolen. One of them is the servers of the system where you're buying this from, they got hacked and your credit card got stolen out of their database. If you don't store it on their website, they don't have a copy of it so it's not going to get stolen that way. Now caveat to that, maybe you want to store credit cards on PayPal because PayPal's business is like, I'm sort of throwing this out there as an example, like this is a thought provoking kind of thing, because essentially how much convenience is worth, how much risk? Is PayPal better at securing things because their whole business is built around payments and online commerce and stuff? And are they better at this than some random shopping website out there? I think they probably are, but are better than some certainly. And if you can check out using PayPal instead of giving your credit card information directly to a website, does that sort of put a layer between you and this potential attack vector? How much convenience is worth, how much risk? Something I alluded to earlier. When it comes to payments, that's kind of all there is to it because you're really kind of at the mercy of who you're engaging with at the time when you're making that transaction, but you can give them as little information as possible. The other thing, if you found that information has been stolen a couple of times, then well questions to ask are how many people know that card number? Like was it actually stolen through technical means? Or was it just because it was written down on a sticky note on somebody's desk and the cleaning lady noticed it or something? I mean not to cast this version on cleaning ladies in general, but an example that you just, there's lots of ways that potentially could have been taken. On a technical level, maybe the browser has saved the information or someone's phone has saved the information. And the thing is if you have secure information, important information like that on a laptop and you're making connections to wherever, but then say that laptop gets infected by a virus, remember what we were just looking at about protecting your device? Well, a virus could read files and other things off the hard drive and might find the credit card number that way. So for a lot of things, not just stealing credit card numbers, but for a lot of things in general, a basic question is how exposed is this information? How widespread is it? Is it stored on the servers out there or is it only known by you? Is it saved on the laptop or do you type it in every time? So like the less exposure any bit of information has, the less likely it is to be taken through whatever means. Great, thanks. I think some of the other questions talk about cloud servers like Office 365, SharePoint, and things like that. Okay, well let me dive into the few things I have to say about the cloud and if there's sort of more beyond that, then we'll see it. We're quarter to the hour too, so we'll zip through here. The cloud, so yeah, it's probably more secure than so-called local storage systems, the extreme counter example being the server under Sally's desk, and that's because these cloud systems, they're always going to be up to date with security patches, firewalls, people are monitoring the logs, the data center is physically secured, and so on. Like all of those things are not necessarily true of non-cloud alternatives that people have used in the past.  But there's obvious privacy implications. And it also changes, there's an economic aspect to it as well because the licensing models are different in how you pay for access to some of these things is different, although TechSoup can help with that in some cases, and I'm focusing primarily on the security and privacy, not the financial aspects. And from that point of view, there are privacy implications. They're promising never to look at your data, but it's not on a computer you control anymore, and it's known that all of these companies, all the big companies are forced by the US government to turn over whatever information they might want at any point in time, or at every point in time. So it's a balancing act, again, like I said before, how much convenience is worth, what kind of risks. To some people, those risks are not relevant. To some people, depending on the line of work or the information that they're concerned with putting in the cloud, that might be really, really relevant. So these kind of services are here to stay. I think, like it's clearly for years now, it's been a model that the industry has moved to wholesale. We're not going to ever go back to the way it was when you bought disks at the store and had that kind of control over things, but even then you didn't have that much control unless it was open source because you're stuck with whatever they're giving you on the disk. So it's a different model, and it has some benefits, but it's a different set of tradeoffs than it used to be. Was there specific things in people's questions that, you know, nuances beyond the general there? I think folks really were looking at Office 365 SharePoint. Thank you, Covert, that one question was, if you have a cloud server, is it possible to encrypt that server, or is a firewall sufficient? So I think that's a kind of nuanced question, yeah. So yeah, if you have stuff in the cloud, then you're basically relying on the security of the, well, stuff. I don't necessarily know what stuff exactly you're talking about, but I'll give two examples of different sides of this. Generally speaking, if you have like a SharePoint server in the cloud that you're leasing from Microsoft or whatever the arrangement is, or you're just using Office 365, part of what you're buying, part of the convenience there is the security that they're providing. They're basically guaranteeing that the Office 365 website is not going to get hacked, that your files in there, Google does the same thing with Google Drive. They're basically saying, yeah, we're not going to get hacked and your files are not going to end up on the front page of the New York Times. And you kind of got to trust them on that. And the premise is that you can probably trust them better than you can trust a lot of other people because like the PayPal example, their whole business is built around this, and they have people whose job it is to make sure things are patched up to date and so on and so on. And yet we do hear about these hacking stories and all that. But the thing is if you want to do it better, that's kind of what it comes down to. Could you do it better? Could you hire people to do a better job than the people that Microsoft has hired to do that for them on Office 365? Probably not.  But that's what you buy into. Now the other thing is if you're talking about just sort of cloud servers in general, beyond the services that you buy in the cloud, you can just buy a server, a machine or an imaginary machine floating around in the cloud somewhere there. And what about encrypting that or protecting that? If you're running your own servers in the cloud then yeah, essentially hopefully you have some server admin people on staff who know how to keep those kind of things secure. Because if you're running your own machine, whether it's a cloud server or a dedicated server or whatever kind of thing it is out there, it will need certain things done to it to make sure it's secure. Maybe on that point I'll just jump briefly through protecting your website. There's a good old fashioned hacked website page. It's what you don't want to have happen but that's not really what happens anymore. People hack websites is not to deface them like this. It's sort of quaint now to see things like that. Because these days they want to actually take over the website and use the space for their own purposes because they're putting up fake pharmacy websites behind your website that they're directing people to from spam. Anyway, to protect against all that stuff and this applies to cloud servers and any sort of technical service you're running yourself really on the web. You need to have those people who know what they're doing and how to keep things up to date with security patches. Most of the attacks that are going to happen are automatic attacks.  It's some automatic process that takes advantage of known security holes. So you want to make sure you're up to date with all the known fixes for those security holes. As I was saying before about the credit card example, make sure that all the computers where anyone is making changes to the website are completely clean and secure. Because if the website that has the FTP password for the website and that's where someone logs in and makes changes to the website and that computer has got a virus on it, chances are it's maybe stolen the password to the website. So you want to make sure that your systems are clean because everything connects to everything else. Never mind if it's like a website or server that you're running yourself. It could just be your Office 365 password or your SharePoint password. This is why viruses and protecting your own computer are really important because it's not just your computer that's going to necessarily be compromised. It could be anything that that computer has touched is possibly tainted at that point. Strong passwords for all your access points to the website, whether that's the Server Control Panel FTP administrator accounts on the website. We may not have time to jump through the whole password section of this but I'll just throw in here while we're on the subject. Use two-factor authentication, not just strong passwords. Two-factor authentication is where you can have a Google or whomever company or whoever runs the password. Like you have a password for Google, you have a password for Microsoft, you have a password for Apple, etc. These companies can turn on two-factor authentication where you can turn it on. It's part of your profile, part of your account settings with them. And it means that they will send you a code on your phone as well as you're typing in your password. To oversimplify it, you could think of it as double the security. It's really more like 20 times the security. And it's just turn on two-factor authentication wherever you can. Just do it now. It's the best device you'll get. Make sure that the people who are managing your website or building these things, they understand what these technical terms mean. I won't explain them although I can't after because you have to have people who know what's going on running the show. And be prepared to pay for what you get. You get what you pay for and doing this stuff costs time and money. It's not going to happen for free. That's why the subscription services in the cloud are so popular because you don't have to employ people to do that stuff. You're just trusting. That's the thing. How I learned to stop worrying and love the cloud. You either go for it or you don't. Thanks, Julian. We do have quite a few other questions that I'd like to get to before we close for the day. You obviously have a lot more information to share as well which we will be sharing out your Prezi with everyone. And I'll just emphasize about that. The Prezi is sort of self-documenting sort of or self-explanatory. You can run through it yourself and hopefully it more or less explains the basics of everything that's in there. It doesn't require someone to talk through it although that helps. And you can email me anytime. I'm happy to chat with anyone about this stuff whenever. That's no problem at all. Great. And I will include your email in the follow-up email for everyone. Fabulous. Okay, so I want to get to a couple of these questions. The first is from Allison. And I think some of this will be taken care of in the follow-up email, but she is a relative IT newbie. And she needs to educate herself. And she's not completely unfamiliar with technology but she's now newly responsible for a lot of the day-to-day training. Yes, a common nonprofit story. Exactly, the creep of scope of work. Could you recommend resources or reading in addition to the ones that I'm going to share out with everyone via the chat that I've already done or in the follow-up email? Is there somewhere we could point her? That's a great question. And I wish I had a better answer or any answer really because in my travels I never come across such things in my own work or day-to-day running and just doing things. Yeah, I'm sorry. I can talk about most things if I have to, but I'll save time and just say I don't really know. I'm sorry. And I've chatted out some URL to an article that we have on TechSoup. TechSoup does have quite a bit on security, so I will try to include those links as well in the follow-up email to help Allison. So thank you. Lisa asks, is there a particular virus protection that the presenter recommends? Not strongly, as in I don't monitor that space closely or keep super up to date on how things are going. But in the past, too, that I have used and been pleased with and I like the model that they follow are Avast, A-V-A-S-T, and also one called Malwarebytes, Malware-B-Y-T-E-S. I've had good success with those. Keeping with the paranoia theme, it's good to run more than one because some will catch things that the other doesn't and vice versa. The thing with virus software is some of them really slow down your computer because they're sort of double checking every single thing all the time and it's just really annoying. And there can be other sort of annoyances through using them. So yeah, if you find one that is not quite to your liking or there's things that are bugging you about it, that's fine. Go find another one. There's lots out there. But those are two that I've used before and been happy with. Great. This question, I apologize for this coming a little late because Michelle did ask it earlier, but I wanted to make sure I understood it. And Michelle is asking, are email headers just as useful when so many organizations use MailChimp and those types of services? I think she's going at detecting the risk. Yeah. Well, email headers in terms of detecting the source of the message, they will reveal somewhere in there will be some clue that it came from MailChimp. So that's still useful in terms like the mail headers basically just tell you unless they've been tampered with. But the thing is most spam messages and fake messages, they're preying off the lowest common denominator. They're not trying to trick Edward Snowden into clicking on the link. So they're not going to spoof anything and everything and make it sort of indetectable. They're hoping that your grandma is going to like the proverbial grandma. We always pick on the grandma using technology. What do they know, those old folks? But some of them are smarter than you think and they're pretty savvy. But they're trying to trick somebody into doing this who doesn't know a whole lot about it. So if you start to look under the hood like at the headers, you're probably going to see some fishy stuff going on. But if it's actually from MailChimp, you would see that. So it is still useful. It gives you the path that the message traveled from MailChimp to you. So that's always useful. More information is more power in these situations. Great. Thank you. I am actually going to close the question and answer session because we are right at noon. So I wanted to let everybody know about some upcoming webinars and events. And if you could, just before you jump off and please take our survey, if you could just chat one thing you learned, we are having another security webinar tomorrow. And it's very specific to the Microsoft Cloud. So I think that if you came to this and you are additionally interested in these security topics, please join us tomorrow. We also next week will be having an event about Adobe Illustrator and also something about digital storytelling. I'd like to thank Julian for volunteering his time and his expertise to share this information with you. I am now sufficiently not scared, but I am definitely wiser for having taken this webinar alongside everyone on the call today. So thank you Julian. We really appreciate this. This was super. This was really awesome. I want to thank all of the learners joining us today. We know your most valuable asset is your time. So thank you for your hour today. I hope you have a great rest of your week. And a special thank you to ReadyTalk for providing this platform for us. So thanks and hope to see you on our next presentation, perhaps tomorrow. Thanks Julian. Bye-bye.


Welcome to the session. Let us discuss the following question. The question says prove that integral of square root of 1 minus sine 2x from 0 to pi by 4 is equal to root 2 minus 1. We begin with the solution. In this question, we have to prove that integral of square root of 1 minus sine 2x from 0 to pi by 4 is equal to square root of 2 minus 1. We know that cos square x plus sine square x is equal to 1. And sine 2x is equal to, so by using this, we can write.


Hey, what's up YouTube? I'm Zeke and welcome to The Dream Green Show. Today, I'm going to show you seven different ways that you can buy stocks on Ryber Hood. And as you guys know, this channel just hit 5,000 subscribers. So I want to say thank you to all of you new dreamers. This is the channel where dreams come true. So welcome to the dream team. But enough talking, let's get straight into the video. Welcome back. I have my Ryber Hood pull up. As you guys know, Ryber Hood was one of the first apps where they had commission free trading. So a lot of newcomers and a lot of newbies that just started to invest, they didn't really know anything about buying stocks that were going here and they replaced orders in their buy a couple shares here and there. But today I'm going to discuss seven different ways that can benefit you to help you buy stocks on Ryber Hood. So if we take a look at my portfolio, I'm sitting at $17,982. On the day I'm up said 0.77%. I'm up $137.69 cents. And in the aftermarket hours, I'm up $23.23 cents. Before I show you guys the seven different ways to buy stocks on Ryber Hood. I actually have some free stocks to open. If you guys want to get some free stocks yourself, just click the link down in the description.  So let's open up these free stocks right quick. Here's one right here. Let's scratch through one on the right. And I got a Helix Energy. Took a symbol HLX. This one is worth $3.57. So thank you, new subscriber. All right. So there we go. A free share of HLX was added to my portfolio. So let's scroll down and take a look at the seven different ways I'm going to explain what each one of them does in order to help you become a better trader. So let's go to my favorite stock in my portfolio, AMD. Right now I'm up 73% on AMD, $1,033.60. So I've been buying AMD for a while, so I've bought AMD in many different ways. I'm about to show you guys how. So what you want to do is hit the trade button at the bottom and then click buy. And this is going to take you to your typical market price buy. I'm going to explain exactly what that is in a second, but let's start from the top to bottom. So what you do to get to your different ways to buy stocks on Robinhood is click the shares button in the top right. And here is all seven different ways. We have buying dollars, buying shares, re-encuring investment, limit order, trailing stop order, stop order, and stop limit order. So let's start at the top and work our way down. And I'm going to explain what each one of these means. So here we go and buy in dollars. Buy AMD in dollars and my starting at $1. So if I click on buying dollars, I'm not buying a full share of AMD. I'm investing the dollar amount that I want. So if I wanted to just buy $1 worth of AMD, that would give me a small percentage of a full share of their stock. If I wanted to buy $20 worth of AMD, that would give me a little bit larger, but not a full share of AMD right now. And their prices is around $51 per share. So I want to gain a full share and I have a percentage of a stock. Let me show you an example of what that would look like right quick. If we take a look at Amazon, I have 1.02 shares worth of Amazon. That means I put in a order for I could buy in dollars worth of Amazon and it gave me a percentage of that share. So let's go back to AMD right quick. So that is buy in dollars. So let's back out and go to buy in shares. This is the most typical one. It's going to give you a market order price. What that means is the share of AMZ price right now is at $52 even. If I hit buy, it'll take me to the market price. This is buying shares. That means if I want to buy one share, the market price is $52. But in order for this order to be fulfilled, the price could go up to $52.05 and then I would make a placement to buy that share at market price, no matter where it's at. So sometimes this order would get filled at $52.05, $52.10 or sometimes I might get lucky and it'll get fulfilled at $51.95. So it's in a range of what I can buy AMD stock is. I know five, 10 cents don't mean a lot right here to just buy one share, but there are a couple of people buying 10,000 shares of AMD and it adds up real quick because if the price is at $52, the moment that it goes to $52.10, now you're paying the extra thousand dollars on your order just to buy 10,000 shares of AMD. So that's why you have to be if you're buying a lot of small shares, it might not add up, but if you're doing a very large sum, it's not smart to do a market order when you're buying a large number of shares. So if you click the question mark on the market price, it'll show you some of these bids and the price of the market of what's going on right now. So right now it's looking like I could get AMD for $51.98, so I could get it for a steal, but sometimes if the market open above then we'll place that order to where I could possibly be purchasing a couple of shares at $52.20 or anything like that. So the market order is very random. So let's go ahead and check out the next way that you could buy on Robinhood. Okay, so the next one is highly recommended. I highly recommend the recurring investment for new beginners, for anybody really. It invests in AMD on a recurring schedule. So we click on recurring investment, you have the option to buy AMD every day, buy AMD every week, buy it bi-weekly, or buy it once a month. So if we take a look if you invested $10 every single month, this last option down here into the S&P 500 since May 1st, 1995, just $10 a month since 1995. If you did not invest it, you would have $3,010 in cash, but if you did invest $10 a month since 1995, you have $6,014.56 in cash. If you reinvested just $10 a month into the S&P 500. So that is the power of recurring investment. It's highly recommended for advanced investors and newbie investors. This is just staying consistent is the best way to grow your account, especially if you're just starting off, just stay consistent. So the next way is the limit order by AMD at a maximum price or lower. So this is a much smarter way to invest than just doing a market order. So setting a limit price means that you're not willing to pay a dime more of what you're saying that you're going to pay for. So if the market price is $52 and I want to say, hey, I'm not going to pay a dime more than $52, Robinhood would not put in a buy. I would not buy any share over $52. It would not be $52 at all. If I think it's overvalued and I say, hey, I buy a couple of shares at $51.50 AMD could go up to $53 tomorrow, $54 the next day, but as soon as it drops all the way down to $51.50, it's going to place my order and then I'm going to have those shares worth of AMD. So if we take a look at the diagram, the stock price goes up, it goes down and goes up and it goes down. As soon as hit the price that you typed in, that's when it's going to place that order for your limit buy. And the next one is a little bit more advanced is the trailing stop order. If AMD rises above its lowest price by a specific amount, it triggers a market buy, not a limit order, but a market buy. Okay, so let's take a look at the trailing stop. If we look, take a look, you have a trail percentage. Okay, so if you say, hey, I want to trail it by 3%, there it goes, the neutral stop price is $53.49. So that means if we take a look at the diagram, if the price goes down, up, down and up, it has a trailing stop at 3%. So when it goes down, it's going to trail down, trail down, but when it comes up, it's not going to move back up. It's only going to trail down. And then once it breaks above that 3% stop, it's going to place a market buy. And if you placed it on the way down, then you should get a pretty decent price on the market buy with a trailing stop. If the price of the stock goes up, as soon as you place the trailing stop, then you're going to be buying it at a more expensive price than you would have if you placed a limit order. This is the trailing stop order. The stop price follows our trails, the lowest price of AMD by a trade that you set. A market buy is triggered when AMD rises to the stop price or higher. So that is the trailing stop order. All right, so the next one is the stop order. If AMD rises to a fixed stop price, it triggers a market buy, a market buy. All right, so example of that is right here. You set a price above of where AMD is at right now. Once it hit that price range, then it'll set a market buy. So the stop order, it sets a stop price above the current price of AMD and market order buy is triggered when AMD rises to the stop price or higher. So we hit continue. AMD prices at $52. I say, Hey, it's probably going to go down a little bit. It's probably going to trade sideways for a little bit. But once it breaks above $58, then I know AMD is going to stay continuing on the rise. And then it's going to place a market buy at $58 per share. So that is an example of a stop order on AMD. And the last way that you could buy stocks on rival hood is the stop limit order. Okay, so it's almost the same thing. But so for now, you get to set a limit and not a market order. So we take a look at the stop limit order. It triggers a limit buy order if AMD rises to let's say $58. All right, so let's take a look at the diagram right quick. If AMD shoots up to $58, it's going to trigger our stop limit. And let's say at the limit, we don't want it to place a market order, we place the limit order and say once it hit $58, I think it might bounce back a little bit. I'm not willing to pay above $55 for AMD. So once it hit $58, it's going to set that trigger. And then as soon as it's able to buy AMD at $55, it's going to place that order. Let me show you guys how to do that right quick. So the stop price is $58 continue. I'm not willing to pay a dime over $55. You hit continue. You said it good to counsel for 90 days, you hit continue. How many shares do you want to buy? Five shares. You'll hit review. And then you'll swipe up to set that order. So that is the last way that you could buy shares on Rymanhood. If we take a look, the one that I mostly use by far is the limit order. Because when I see a price at a certain point, that means I want that stock at that certain price. I'm not going to pay a dime over the price that I'm willing to pay for it. So the smartest one to use is limit order. I reinvest all of my money into Rymanhood and then I also invest $200 every week. So the reincurring investment I pick with stocks I want to invest into that week. But if you guys are not sure, you find a great company that you trust in and invest into that company every single week, every single bi-weekly or every single month. So this is a couple of tips and tricks that you guys can use to buy shares on Rymanhood. All right, guys. So there were seven different ways that you could buy stocks on Rymanhood. Hopefully a couple of those tips helped you out. Let me know which ones you did not know about in the comment section down below. If you have not subscribed yet, go ahead, hit that subscribe button and become a part of the dream team. Because I'm going to be doing a 5000 subscriber giveaway very soon and you guys don't want to miss out. But other than that, the link to Rymanhood would be down in the description. But remember, if you sign up, you'll get a free stock and I'll get a free stock. But other than that, I'm Zeke bringing you the dream green show and I'm out. Peace.


Okay. Hello. Buenas tardes. My name is Sandra Garcia Rivera. I am sincerely humbled to be here among such wonderful writers and community. And I was really touched. I am in a crossroads in my own life, just turned 50, and in some ways I've never felt more endangered as a woman, as a Puerto Rican in particular, challenging and questioning everything that I've ever thought in so many ways. So it's very destabilizing. I think back on my mentors, like B.D. Thomas, who I met here in San Francisco. I became a poet in the mission through his influence. And I was adopted by Mission Girls and by the mission many years ago because I'm born and raised in New York City in case you can't tell. But that said, I have loved the mission. I have been loved in the mission. I have had lovers from the mission. I hope to have more lovers from the mission. No, just kidding. Just kidding. Okay. I'm going to read. This is inspired by one of those moments in the mission. It's called La Tequería. Please stand leaning, lining the interior of La Tequería. Coil around the inside perimeter, spill out onto Mission Street, cast shadows down 25th, contemplating bigante, no bigante. Corn, torta tortilla, taco quesadilla, crema carnitas, tamarindo, pintos negros, chile verde, al pastor. We, he and me, turn the corner, approach hand in hand. Giants boast boldly from his black hoodie. SF stretched broadly across his chest. He stops, surveys the scene, scowls under his breath. What the f...   He sizzles by my side. I tug on his arm, continue our stride, coax him towards 24th, rolling, train rumbling under our feet, headed east, say, come on, baby. Let's hit up the taco truck by the lake. O pupusas a platanos on university, no weight. His shoulders slump under the shade of his hood. We make our way. It's an odd year in the bay. Thank you.


what is the craziest thing a wide receiver ever told you or ever tried to get under your skin with?


powers of grant, a decree in respect of the foreign courts, the powers of the foreign courts to grant a decree for the divorce under the Hindu Marriage Act is a deeper dive with Mr. Shankar Moldy and Advocate. Practicing in the High Court of Madras, friendly is a session which we are going to take across. The team of Beyond Law CLC and the legal legal elites are too happy that Mr. Shankar Moldy, despite the fact that he has him tied back, scheduled professionally, but still his passion to pay back to the society by taking sessions is well acknowledged, not only by the team of Beyond Law CLC as well as legal legal elites, but even otherwise. The fact that the participants are fully jam packed according to the capacity itself shows the people look upon for the knowledge being shared by Shankar Moldy. And we are thankful that he has accepted our invite and we will straight away ask Mr. Shankar to take over the session. Over to you. Thank you. Thank you. Very good morning to all of you. This is a very small topic. I would like to give the topic's name as competency of the foreign court to dissolve the Hindu marriage by a degree of divorce under section 13 of the Hindu marriage act and to declare the Hindu marriage as void by a degree of nullity under section 11 of the Hindu marriage act, 1955. Advocates are often confused. What is the distinction between the granting a degree of divorce under section 13 and the declaring the marriage as nullity under section 11 of the Hindu marriage act? The reason is this. Section five of the Hindu marriage act contemplates when a degree can be declared as void. Section five says, suppose the parties are in the prohibited relationship or before the, at the time of marriage he is living in adultery or already married another person or incapable of giving valid consent or in consequence of his own mind or suffering from mental disorder and subject to recurrent attacks of insanity. And the bridegroom has completed the age of 21 years and the bride age of 18 years at the time of marriage. These are all the grounds set out under section five of the Hindu marriage act. If section five, the conditions are there then it can be declared as void under section 11 of the Hindu marriage act. Once the marriage is declared as void there is no further benefit as in the case of granting a degree of divorce under section 13 of the Hindu marriage act. Now, this topic, whether the foreign court is competent to grant a degree of divorce under the Hindu marriage act. Straight away, I would like to take attention to section one, two of the Hindu marriage act. Which contemplates that the set act extends to the whole of India except German cashmere. Now, after the repeal of 370 it is also applicable to German cashmere. And further says it applies also to the Hindus domiciled in the territories to which this act extends who are outside the same territories. Section two C of the Hindu marriage act contemplates it applies to any other persons domiciled in the territories to which this act extends who is not a Muslim Christian policy or Jew by religion. So, the combined reading of section one, two under section two subclass C of the Hindu marriage act proves through the insurmountable fact that the person, the Hindus domiciled in India and outside India, this act is applicable. This act is applicable. In the Supreme Court, in Sondur Kobal versus Sondu Rajini reported in 2013-7 SCC, page 426 has held that domicile of Arjun provides until not only another domicile is acquired, but it must manifest the intention of abandoning the domicile of Arjun. A question may be asked. Sir, in parties, houses are settled at U.S.A. They have acquired the citizens of U.S.A. or permanent resident status in Australia or person of Indian Arjun, whether this act is applicable. Yes, the law says the Hindu marriage act is applicable despite the fact they have acquired citizens of foreign countries. Because their origin is that their origin is in India. Suppose they have voluntarily abandoned the domicile of Indian Arjun, then this act will not apply. So, person of Indian Arjun attaining Indian citizens of U.S.A., overseas citizens of India, permanent resident status in Australia or acquired citizens of other foreign countries are still governed under the Hindu marriage act unless there is a voluntary abandonment of domicile of this Indian Arjun. Then, section 13 of CPC is of greater significance. It deals with conclusiveness of the degree passed by foreign countries. It called out certain exceptions. Section 13 says a foreign judgment is not conclusive as to any matter directly adjudicated upon between the parties. The exception number one, it has not been pronounced by a court of competent jurisdiction. In order to grant a degree of divorce under the Hindu marriage act, the foreign court must have competent jurisdiction to grant a degree. Otherwise, if any degree is passed by the incompetent court having jurisdiction, then the degree will not bind, it is only anality. Then, it has not been given on the merits of the case. So, if the degree passed by the foreign court is not on merits, then it will not be a, it will not bind and the judgment is not conclusive. It is founded on an incorrect view of international law or a refusal to recognize the law in law of India in cases in which the law is applicable. So, incorrect view of international law, we are not concerned about it now. Refusal to recognize the law of India. Under the Hindu marriage act 1955, certain grounds are enumerated under section five of the Hindu marriage act to get a degree of nullity. Or under section 13 of Hindu marriage act 1955 to get a degree of divorce on the grounds enumerated under section 13. If it is not properly considered or the foreign court refused to apply the, refused to take into consideration of the Hindu marriage act, if any degree is passed, the degree is nullity and the foreign judgment is not conclusive, it will not bind the parties. Because in foreign countries, there may be other grounds are there to grant a degree of divorce. For example, irretrievable break and down of marriage is a ground to get a degree of divorce both in USA and as well as in United Kingdom. But that is not a ground I mentioned in section 13 of the Hindu marriage act 1955. Suppose the foreign court, whether the USA court or United Kingdom court in UK grants a degree of divorce on the ground that there is a irretrievable break down of the marriage, then such a degree will not bind the parties. It is not conclusive. Because that is not a ground under section 13 of the Hindu marriage act. Another one, the proceedings are opposed to natural justice. So, violation of natural justice or the ultrampartum are there. Then the foreign judgment is not conclusive. Then, if it is obtained by fraud. If the foreign judgment is obtained by fraud without serving any notice or by giving incorrect address of the respondent in any other manner, if it is fraudulently obtained then it is not conclusive, it will not bind. So, if the foreign judgment is marred by any of the disqualifications mentioned in section 13 of the Hindu marriage act then only it is not conclusive. But if it passes all the litmus test for its conclusiveness, the same is applicable and cannot be termed as not conclusive. Then, section 14 of CPC deals with presumption of foreign judgment. If any foreign judgment is produced before the courts in India the courts in India shall presume that the judgment was passed by the foreign court having competent jurisdiction. Of course, this presumption is reputable unless the contrary is true. So, the disqualification mentioned in section 13 is not there. If the foreign judgment passes all the litmus test then it will bind the parties and it can be enforced. Once the certified copy of the foreign judgment is produced the presumption is it shall be, it is passed by the foreign court having competent jurisdiction. Now, foreign degree was passed can it be executed by the courts in India that's another point. Section 34A of CPC deals with execution of degrees passed by courts in reciprocating territory. What it means reciprocating territory? Explanation 1 gives the answer. Explanation 1 defines the meaning of reciprocating territory. It means any country or territory outside India which the central government may by notification declared to be reciprocating territory for the purpose of this section and the superior courts with reference to any such territory means such courts as may be specified in the set notification. The union of India by way of notification declare what are all the reciprocating territories for the purpose of section 44A. So, notification is already being passed. United Kingdom is reciprocating territory. USA is a reciprocating territory. Australia is a reciprocating territory. Therefore, the conjoint reading of section 13, 14 and 44A of CPC expounds the power of the foreign court to grant a degree of divorce and it's execution by the courts in India. In the Punjab and Haryana court, in Rupakrati v. Anitha Choudhary reported in 2014 Supreme Punjab and Haryana page 293. In this case, parties are domiciled in India. Then they went to USA, obtained the USA situation. An account of the few cropped up between them, the husband filed a petition for divorce before the Brentford country court in the United Kingdom. So, they went to UK. Pending the application filed by the husband for divorce before the Brentford county court, the wife filed a petition under section 13 of the Hindu marriage act on the ground of cruelty before the district court, Panchkula. Before the UK court, certificate of entitlement to a degree on the petition on account of irritable breakdown of marriage was issued. So, before passing a degree, certificate of entitlement to a degree has to be passed. Degree in AC will be passed. Why the degree shall not be passed? But the degree was passed on the ground that the marriage is irretrievably broken down. Then the court said, the irretrievable breakdown of marriage is not a ground under the Hindu marriage act. So, the degree passed by the Brentford county court in UK is nullity, is not conclusive, it will not bind the parties, bind the parties. The foreign judgment is in defiance of the Hindu marriage act and the same is nullity. Then the court in why Narasimha Rao and others versus why Velkate Lakshmi and another reported in 1991 3 SEC page 441 has held that. The jurisdiction assumed by foreign court as well as the grounds on which the relief is granted must be in accordance with the matrimonial law under which the parties are married. Certain exceptions are also carried out by a Honorable Supreme Court. They are where the matrimonial action is filed in the forum where the respondent is on my side or habitually or permanently reside and the relief is granted on the ground available under the Hindu marriage act. Then where the respondent voluntarily and effectively submits to the jurisdiction of the forum and contests the claim which is based on the ground available under the Hindu marriage act under which the parties are married. Third one is where the respondent concerns to the degree, concerns to the grant of the relief although the jurisdiction of the forum is not in accordance with the provisions of the matrimony law of the parties. So, the respondent must have domicile or habitually and permanently resides and the relief must be granted on the ground available in the matrimonial law under which the parties are married or voluntary and effectively submitting to the jurisdiction of the courts or the respondent has to give consent to grant the relief even though the forum is not in accordance with the provisions of the matrimony law of the parties in India. But there are lot of cases whereby the forum codes used to grant a degree of divorce without taking into consideration of the law in India without taking into consideration of its competency to grant the relief and the degree may be obtained by fraud. In order to curb all this menace our Honorable Supreme Court of India has suggested to safeguard the interest of women suffered by a foreign degree by advising the government to make a legislation to that effect saying that no marriage between a NRI and an Indian woman which has taken place in India may be annulled by foreign law. The second one is provision may be made for adequate alimony to the wife in the property of the husband both in India and abroad. This has been held in Neeraj Sharpa v. Jayan B. Sharpa reported in 1994-6 SCC page 461. As I said earlier this is only a small topic it will consume only to half an hour. So the point for our consideration is whether the foreign court is competent to grant a degree of divorce or declaring the marriage as anality under section 11 of the Hindu marriage section 13 is the answer section 13, 14, 44, AFCBC is the answer. Yes, it can grant a degree of divorce provided it shall not come within the purview of the exception enumerated under section 13 of the Hindu marriage. The problem of filing divorce applications not only in India and before the courts are day by day are increasing. The reason is very obvious. The first one is ego, ego of the spouse. Another one is both the spouses are drawing a feasible salary and they are able to stand on their own leg without the help of another spouse. Another one is our old customs, usage, practice are not liked by the spouses living in foreign countries. I would like to remind one thing broken iron can be united but not the broken cars. It is a fashion to file a question for divers by the spouse both in India and in foreign countries. But after getting a degree of divorce their life would be in miserable state because the impact of degree speaks its value. After getting a divorce no ordinary fruit and mint is ready to marry you. He may think and work around the degree was passed what are all the hardship caused by the one spouse to another and if any child is born absolutely the chances of getting second marriage is very remote. So before filing an application for divorce it is advisable to think twice whether is there any possibility for union. By keeping in mind that the family court act came in the very object of family court is only for mooting out reconciliation of this process. So the marriage somebody says wife is a necessary even but we have to adjust and live with the necessary even. You ask your grandfather or father they are not thought of getting a they are not thought of filing any divorce application. So you have to sink the differences and able to live with your spouse adjust your spouse just heed to the representation of your spouse whether it may be a wife or husband. So I hope my proper legislation has to be made to protect the interest of the Indian woman suffered by a foreign degree. It is very easy to get a degree for divorce before the foreign court but it is very difficult to get a degree of divorce before the courts in India. So the foreign court has got power to grant a degree of divorce provided it must be competent to grant such a degree and it must consider the Indian marriage act before passing a degree of divorce and it should not be passed fraudulently. With this I conclude this session. Yashengar Ji it couldn't have been more crisp than what you have told and we have Adilakshmi joining us. Adilakshmi. Is because, am I audible? Yeah, yeah. Yeah, I am in my village so I am on travel also. Thank you so much Shankar Modi sir it was very nice after a very long time I am connecting to Shankar Modi sir but I am listening to all his session. Today is very popular we are so happy there are so many clients calling up and asking for his number we are very proud of you sir very senior lawyer and it is one of the very important topic today NRI marriages are on the rise in spite of having a NRI cell opened in Tamil Nadu Chennai but we have no idea clear cut idea about this particular topic sir you have made it very excellent legal equivalent and beyond law CLC is much indebted to make a clarity on this topic sir. Thank you so much Vikas for getting me connected to this program it was immense pleasure and it was house full and I had just posted in all the groups people are keeping on calling me how to connect for this program so I was just holding the other line I am saying they can only watch it on the YouTube it is already uploaded. Yes I am just posting and honorable judges also call me and ask for the YouTube link. Thank you all the credit goes to only our most respected and beloved senior advocate Shankar Modi sir practicing mode in Madras and Madurai high quotes and today is much wanted all over India not only in Tamil Nadu so he has been practicing all over India and such a great knowledge Thank you so much sir Thank you so much Vikas and thank you all the participants of beyond law CLC and legal legal select for joining me in this session Thank you so much Before we leave if you could just wind up in 2-3 minutes what is your crux of this entire session? Pardon? You can just give the summary whatever you explained today so that one can have a gist of this Yes, yes