BC TECH
Saved by @ThomassRichards

Last up in Privacy Tech for #enigma2021, @xchatty speaking about "IMPLEMENTING DIFFERENTIAL PRIVACY FOR THE 2020

 Differential privacy was invented in 2006. Seems like a long time but it's not a long time since a fundamental scientific invention. It took longer than that between the invention of public key cryptography and even the first version of SSL.
But even in 2020, we still can't meet user expectations.
* Data users expect consistent data releases
* Some people call synthetic data "fake data" like
"fake news"
* It's not clear what "quality assurance" and "data exploration" means in a DP framework
We just did the 2020 US census
* required to collect it by the constitution
* but required to maintain privacy by law
But that's hard! What if there were 10 people on the block and all the same sex and age? If you posted something like that, then you would know what everyone's sex and age was on the block.
Previously used a method called "swapping" with secret parameters
* differential privacy is open and we can talk about privacy loss/accuracy tradeoff
* swapping assumed limitations of the attackers (e.g. limited computational power)
Needed to design the algorithms to get the accuracy we need it and tune the privacy loss based on that.

Change in the meaning of "privacy" as relative -- it requires a lot of explanation and overcoming organizational barriers.
By 2017 thought they had a good understanding of how differential privacy would fit -- just use the new algorithm where the old one was used, to create the "micodata detail file".
Surprises:
* different groups at the Census thought that meant different things
* before, states were processed as they came in. Differential privacy requires everything be computed on at once
* required a lot more computing power
* differential privacy system has to be developed with real data; can't use simulated data to do this because the algorithms in the literature weren't designed for dats anything like as complex as the real data (multiracial people, different kinds of households, etc)
* to understand the privacy/accuracy trade-off requires a lot of runs, representing a *lot* of computer time
Census bureau was 100% behind the move
* initial implementation was by Dan Kiefer, who took a sabbatical
* expanded team to with Simson and others
* 2018 end to end test
* original development was on an on-prem Linux cluster
* then got to move to AWS Elastic compute... but the monitoring wasn't good enough and had to create their own dashboard to track execution
* it wasn't a small amount of compute
* republished the 2010 census data using the differentially private algorithm and then had a conference to talk about it
* ... it wasn't well-received by the data users who thought there was too much error
For example: if we add a random value to a child's age, we might get a negative value, which probably won't happen to a child's age.

If you avoid that, you might add bias to the data. How to avoid that? Let some data users get access to the measurement files [I don't follow]
In summary, this is retrofitting the longest-running statistical program in the country with differential privacy. Data users have had some concerns, but believe it will all come out.
Code is up on github and papers are up online. (@xchatty have some links?)

[end of talk]

More from Lea Kissner

Lea Kissner
Lea Kissner
@LeaKissner
Next up in Privacy Technology at #enigma2021, Kelly Huang from @ethyca speaking about "GONE, BUT NOT "FORGOTTEN"—TECHNICAL & PRACTICAL CHALLENGES IN OPERATIONALIZING MODERN PRIVACY

Just imagine there's a global pandemic forcing everyone to stay home and buy their stuff over the internet. And you've been working on your sanitization-on-demand startup. You've got more users than you can count! ... literally, because your data's all over.

Now you're a multi-national international country with privacy issues because your information is all over the place.

Now a user writes to request you delete their data. Where is it? How do you do that? Who's responsible for privacy in your business.

How do you operationalize privacy rights?

Primary stakeholders:
* Legal
* Business
* Engineering

We spend a lot of time on Twitter analyzing the legal rulings, but it's harder where the "rubber meets the code" 🥁
TECH
Lea Kissner
Lea Kissner
@LeaKissner
We're kicking off the Privacy Tech session at #enigma2021 with Mitch Negus speaking about "NO DATA, NO PROBLEM—GIVING NUCLEAR INSPECTORS BETTER TOOLS WITHOUT REVEALING STATE

A nuclear catastrophe hasn't occurred... yet. So we need to stay vigilant. Nuclear inspectors go in according to treaties to check what's going on and check compliance with treaty rules.

But as sophisticated analytics become more common, states will only want to share the minimum amount of information necessary under the treaty.

But perhaps we can use MPC -- secure multi-party computation

Yao's garbled circuits were first demonstrated on the millionaire's problem -- figuring out who's richer without revealing actual amounts.

Used for other things like cryptocurrency these days.

Can we use this for nuclear inspection?

MPC can be used to compute anything computed by a computer [but it's expensive!]
TECH
Advertisement
Lea Kissner
Lea Kissner
@LeaKissner
Next up at #enigma2021, Sanghyun Hong will be speaking about "A SOUND MIND IN A VULNERABLE BODY: PRACTICAL HARDWARE ATTACKS ON DEEP LEARNING"

(Hint: speaker is on the

In recent years ML models have worked from research labs to production, which makes ML security important. Adversarial ML research studies how to mess with ML

For example by messing with the training data (c.f. Tay which became super-racist super-fast) or by foiling ML models by changing inputs in ways humans can't see.


Prior work considers ML models in a standalone, mathematical way
* looks at the robustness in an isolated manner
* doesn't look at the whole ecosystem and how the model is used -- ML models are running in real hardware with real software which has real vulns!


This talk focuses on hardware-level vulnerabilities. This is particularly interesting because these can break cryptographic guarantees (because those are outside of their threat models)
e.g. fault injection attacks, side-channel attacks
SCIENCE
Lea Kissner
Lea Kissner
@LeaKissner
In more Securing Democracy at #enigma2021, @ChrFolini talking about "THE ADVENTUROUS TALE OF ONLINE VOTING IN

Switzerland is a direct democracy where citizens get to vote at least 4x/year, with a lot of mail-in voting. We have a long history of online voting.

Disclaimer: THIS IS NOT SWEDEN.

[I get the picture that @ChrFolini has had to explain the difference several times.]


Process around mail-in ballots.

[tl;dr it's very complicated and wasn't threat-modeled until recently]


But the in-person ballots are complicated, too!


Most security folks don't think that we can't make a secure online voting system.

@ChrFolini says this is because of encryption
[Note: this is not the main reason that a lot of people cite -- we're more worried about things like malware but it's complicated]
WORLD
Lea Kissner
Lea Kissner
@LeaKissner
Last talk about Securing Democracy at #enigma2021: @jackhcable speaking about "THE FULL STACK PROBLEM OF ELECTION

Let's imagine that elections use all the security measures security people have been advocating: risk-limiting audits, paper ballots, etc. Would people trust the elections more?

Jack would argue no. Most people don't understand this stuff and most of the claims people are making can't be disproven. And are massively bogus already.

Georgia did a full recount on paper ballots and it very much didn't stop people from doubting the election!

Are election security results in vain? The point of election security is to convince the loser they lost.

No! Have to focus on the whole stack, from election infrastructure to campaigns to people and mis/dis-informaton


One takeaway from the talk: the parts of the stack must work in tandem. Can't fight misinformation in a vacuum, but must build on other election security measures.
POLITICS

More from Tech

Antonio Garc\xeda Mart\xednez
Antonio García Martíne...
@antoniogm
Observing the public conversation around FB, and the private ones happening among techies and ex-FBers, I think the mutual misunderstanding is worse than when I set out two years (and 500 pages) ago to (in a small way) bridge that gulf.

We're basically fucked.

The tech world has gotten so huge, self-reinforcing, and insulated from reality they can no longer even vaguely look at themselves (and their actions) as others do. They just live on a different planet than most people.

Conversely, the average tech consumer doesn't understand the technology that has slowly taken over their lives, and their designated emissaries to figure it out--politicians, pundits, regulators, journalists--understand it barely better than they do, and have their own agendas.

To say more than generalities for a moment, here's what I think is likely the core problem.

Techies take weird, improbable visions, and make them realities: some BS pitch deck to a VC, mixed with money and people, really does turn into some novel thing.

Most people work inside a legacy industry that's evolved that way over time (usually for good reasons), and they think about the future via some analogy with their present (which is a function of a long-ago past). The interruption that tech will introduce is often hard to grasp.
TECH
Biz Stone
Biz Stone
@biz
Originally, tweet length was 160 minus username length. One day, I turned to Jack and pointed out that I got one more character than him. He said, "That's not fair. We should standardize." I agreed. He said, "How about 140?" I said, "Sure." And he updated the code.

Last year, we upgraded tweet length to 280 and guess what? Use of 'please' is up 54% and 'thank you' is up 22%. I love that! Also, people are asking more questions and having more conversations. All this, and the majority of tweets are still under 140. It worked.
TECH
Advertisement
Mrkhtake2
Mrkhtake2
@mrkhtake2
Today we’re going to talk statistics and semantics. I’m going to do so via the medium of one of Twitter’s favourite stats 1.7% (aka “intersex is as common as red heads.”). The statistic comes from Fausto-Sterling’s work, which you can see a review of

To understand the statistic, we have to drill down into what the meaning of the word intersex is. Most people think of hermaphrodites. Let’s stress at the beginning there has been no example ever of a human being with both sets of working reproductive organs.

There is a very tiny percentage of people who are born with both testicular and ovarian tissue (what Fausto-Sterling calls “true hermaphrodites”). And when I say tiny, we’re talking intersex tiny, as in 0.0117/1,000 live births, or one in 1,000,000. These are very complex cases.

So, how do we arrive at 1.7%? What Fausto-Sterling does is apply a wider scope. Instead, she argues that intersex is anything that doesn’t fit into a platonic ideal. The platonic ideal, in this case, being a phenotypically perfect XX female and a phenotypically perfect XY male.

This means that intersex, used in the context of the 1.7% statistic, includes people for whom there is no sexual ambiguity. Take for example Klinefelter syndrome (XXY males). As Fausto-Sterling acknowledges, many males can go their whole life and not realise they are XXY.
TECH
Tagir Valeev
Tagir Valeev
@tagir_valeev
Ever wondered how the JVM debugger 'Evaluate' feature works in IDEs? Long ago I thought that the Java debug interface (JDI) actually allows you to specify the expression and get back its value.


However, this is not quite possible: there's no Java language compiler inside the JVM. When the process is paused JDI allows you to read or write any variables and fields or even execute an existing method with given arguments. But nothing like addition or multiplication.

On the other hand, #IntelliJIDEA debugger allows you to evaluate even statements! You can write there `for`, `if`, `while`, `switch` - whatever. You can even declare local variables. So how this works?


The answer is simple: IDEA debugger has a built-in interpreter for Java! If you access an existing variable or a field, call a method or instantiate an object, it queries JDI. Otherwise, IDE itself does all the calculations.

The amusing thing is that debugger authors didn't bother to make it as strict as Java itself, so the language inside the interpreter is a much more permissive version of Java. For example, you don't need to initialize variables there! Default values like 0 are used automatically.
TECH
Matt Stoller
Matt Stoller
@matthewstoller
1. One of the best changes in recent years is the GOP abandoning libertarianism. Here's GOP Rep. Greg Steube: “I do think there is an appetite amongst Republicans, if the Dems wanted to try to break up Big Tech, I think there is support for that."

2. And @RepKenBuck, who offered a thoughtful Third Way report on antitrust law in 2020, weighed in quite reasonably on Biden antitrust frameworks.

3. I believe this change is sincere because it's so pervasive and beginning to result in real policy changes. Example: The North Dakota GOP is taking on Apple's app store.


4. And yet there's a problem. The GOP establishment is still pro-big tech. Trump, despite some of his instincts, appointed pro-monopoly antitrust enforcers. Antitrust chief Makan Delrahim helped big tech, and the antitrust case happened bc he was recused.

5. At the other sleepy antitrust agency, the Federal Trade Commission, Trump appointed commissioners
@FTCPhillips and @CSWilsonFTC are both pro-monopoly. Both voted *against* the antitrust case on FB. That case was 3-2, with a GOP Chair and 2 Dems teaming up against 2 Rs.
TECH

You May Also Like

libertyandjusticeforall
libertyandjusticeforal...
@Mark923to25
1. #Qanon told us that Saudi Arabia is a central piece of the puzzle in taking out the Deep State...we are watching the Deep State attempt to remove Crown Prince MBS and disrupt Pres Trump's administration's ties with MBS and the "new" Saudi/US coalition. Early in his admin,


2....@Potus sent Jared Kushner (JK) to SA on an undisclosed trip and told King Salman that business as usual was over, and if he wanted Pres Trump's support, Prince Alwaleed would have to be divested of $ and power; Alwaleed is one of top Deep State $ men and was tied to HRC.


3. @Potus knew that before he could begin cleansing the US and the rest of the world of the DS, he would have to cut one of the financial head's off the snake (Alwaleed). After JK met w/ King Salman, Alwaleed was arrested and divested of billions; MBS became leader of SA.


4. SA loves Pres Trump because he's a man of his word; SA could not trust Hussein or Clintons because they use SA for oil and leverage; SA has many factions, but essentially you have the new and upcoming SA that is attempting to modernize through Crown Prince MBS, and then you


5...have the old guard represented by Alwaleed who was one of the Deep State financial heads and loyal to the DS more than SA; SA knew Hussein was financing Iran to hold western world hostage, and SA was caught in middle of Deep State black mail; this is why @Potus was celebrated
ALL
Patrick McKenzie
Patrick McKenzie
@patio11
A thing which I unironically and enthusiastically believe which is unpopular among smart people of my acquaintance: financial engineering has in the recent past and present contributed substantially to human welfare. We should hope to see more of it.

Maybe more geeks need to meet someone who says “My job is teleporting value across time and space.”

Financial engineering is sort of a squishy term. I don’t primarily mean payments infrastructure or financial rails, although both of those involve substantial engineering.

I mean more “We took a thing and performed some alchemy, and now have a new thing.”

Except instead of alchemy it is generally quite a bit of math, a huge amount of contract law and due diligence, often an impressive amount of ops work, and a dusting of technology that web devs would recognize as such.
ALL
Advertisement
Jaya_Upadhyaya
Jaya_Upadhyaya
@Jayalko1
SRI BANKEY BIHARI JI, VRINDAVAN (UP)

Very famous Krishna Mandir where Bankey Bihari Ji is worshipped and looked after as a child.
Bankey means “Bent at three places”.
Thakur Ji was worshipped in Nidhivan till 1863. This mandir was constructed in 1864 by Goswamis.
@LostTemple7


Legend says that Swami Haridas used to worship Krishna in Nidhivan.
Once, his curious disciples entered the forest but they were almost blinded by bright, intense light. Upon knowing this, Swamiji himself went there and after his requests, Krishna appeared with his consort.


Krishna, then, left back this black charming murti,which we see now, before disappearing.
A curtain is drawn before the murti after every 15-30 second. It is said that if one stares long enough into the eyes of Shri Banke Bihari, the person would lose his self consciousness.


Bankey Bihari Ji sports a flute only once a year on the eve of Sharad Purnima.
Darshan of His lotus feet can be done only on Akshay Tritiya every year.
There are no loud bells here and
no early morning Darshan can be done so that child Krishna’s sleep is not disturbed.
ALL
\u0936\u094d\u0930\u0940\u092e\u093e\u0932\u0940 \u0939\u093f\u0924\u0947\u0936 \u0905\u0935\u0938\u094d\u0925\u0940
श्रीमाली हितेश अवस्थी...
@HiteshAwasthi89
Stambheshwar Mahadev Temple, Kavi Kamboi, Bharuch, Gujarat

Stambheshwar Mahadev is a Hindu Temple dedicated to Bhagwan Shiva, located in Kavi Kamboi in Bharuch District District of Gujarat, India. The Temple is about 150 years old. 1/n


The Temple is also known as the Submerging temple. The Temple is flanked by the Arabian Sea on one side and the Bay of Cambay on the other side.

As per legend, Tarakasura troubled the common people, sages and devas a lot. 2/n


Hence, Bhagwan Kartikeya k!lled him, but later he felt guilty for killing a demon who was a great devotee of Shiva. He went to Prabhu Vishnu and told about his guilty. Bhagwan Vishnu advised him to install a Shiva Linga to get relief from the sin. 3/n


As advised, he installed the Shiva Linga in this place and prayed to Bhagwan Shiva to forgive his sin.
The temple is located in Kavi Kamboi between the shores of Bay of Cambay and the Arabian Sea. This Temple is very simple temple in terms of architecture. 4/n


Every day, during the high tide hours, the temple submerges, and when the tide level becomes normal, the temple reappears again. The Temple houses a 4 feet high Shiva lingam. The Lingam can be seen during low tide. The visit to the temple should be planned in such a way that..5/n
ALL
Pieter Levels \u2728
Pieter Levels ✨
@levelsio
Joe Rogan's podcast is now is listened to 1.5+ billion times per year at around $50-100M/year revenue.

Independent and 100% owned by Joe, no networks, no middle men and a 100M+ people audience.

👏

https://t.co/RywAiBxA3s

Joe is the #1 / #2 podcast (depends per week) of all podcasts

120 million plays per month source https://t.co/k7L1LfDdcM


https://t.co/aGcYnVDpMu
MAKERS