BC TECH
Saved by @ThomassRichards

Next up in Privacy Technology at #enigma2021, Kelly Huang from @ethyca speaking about "GONE, BUT NOT "FORGOTTEN"—TECHNICAL & PRACTICAL CHALLENGES IN OPERATIONALIZING MODERN PRIVACY

 Just imagine there's a global pandemic forcing everyone to stay home and buy their stuff over the internet. And you've been working on your sanitization-on-demand startup. You've got more users than you can count! ... literally, because your data's all over.
Now you're a multi-national international country with privacy issues because your information is all over the place.

Now a user writes to request you delete their data. Where is it? How do you do that? Who's responsible for privacy in your business.
How do you operationalize privacy rights?

Primary stakeholders:
* Legal
* Business
* Engineering
We spend a lot of time on Twitter analyzing the legal rulings, but it's harder where the "rubber meets the code" 🥁
Three rights:
* access
* rectification
* deletion

Legal's trying to uphold them, but it's a technical question!

Legal wants to decrease risk but don't know software
The business wants to stay in business and make money. They want to be able to use data for things like placing ads and analysis.
It takes a lot of time to handle these requests, too!

They need a streamlined technical solution.
Program management wants to streamline and make things efficient and predictable... but they don't understand the technical limitation
As a software engineer, you've seen technical debt. So much technical debt. All the weight of the decisions that were made in the past, especially if you scaled without a data plan.

Average SMB has data in 10 different systems.
How do we delete?
Some poor software engineer is trying to track down what data is where?
What even *is* PII? There's no real standard.
What should be returned? What should be deleted.

Make a definition and stick to it.
Some of your databases might use email addresses as a primary key, some user IDs, etc.
1. Define PII
2. Find all the PII
3. Use pseudonymization to replace PII with some kind of random value which can't be tied back to the user

[reminder I am livetweeting this is not me speaking]
How do you do this at scale?
Maybe a centralized team who can handle this?
If you're a small company, plan ahead!
Be careful when you're doing sanitization -- some databases really don't like batch processes and you can make things fall over.
Speed
* you have a timeline -- often 30 or 45 days
* but that's not enough time if you haven't planned for streamlined speed

Ideally you won't need it, but have a backup plan, in case something goes wrong with a slow data system
Plan for a solution that grows with your business, not just a hacked-together series of SQL queries, but instead a centralized portal with extensibility as the business changes and technical systems grow.

... and as new privacy laws come into place
Privacy is way, way more than compliance. But compliance needs to happen.

Let's all do our part

[ end of talk ]

More from Lea Kissner

Lea Kissner
Lea Kissner
@LeaKissner
We're kicking off the Privacy Tech session at #enigma2021 with Mitch Negus speaking about "NO DATA, NO PROBLEM—GIVING NUCLEAR INSPECTORS BETTER TOOLS WITHOUT REVEALING STATE

A nuclear catastrophe hasn't occurred... yet. So we need to stay vigilant. Nuclear inspectors go in according to treaties to check what's going on and check compliance with treaty rules.

But as sophisticated analytics become more common, states will only want to share the minimum amount of information necessary under the treaty.

But perhaps we can use MPC -- secure multi-party computation

Yao's garbled circuits were first demonstrated on the millionaire's problem -- figuring out who's richer without revealing actual amounts.

Used for other things like cryptocurrency these days.

Can we use this for nuclear inspection?

MPC can be used to compute anything computed by a computer [but it's expensive!]
TECH
Lea Kissner
Lea Kissner
@LeaKissner
Last up in Privacy Tech for #enigma2021, @xchatty speaking about "IMPLEMENTING DIFFERENTIAL PRIVACY FOR THE 2020

Differential privacy was invented in 2006. Seems like a long time but it's not a long time since a fundamental scientific invention. It took longer than that between the invention of public key cryptography and even the first version of SSL.


But even in 2020, we still can't meet user expectations.
* Data users expect consistent data releases
* Some people call synthetic data "fake data" like
"fake news"
* It's not clear what "quality assurance" and "data exploration" means in a DP framework


We just did the 2020 US census
* required to collect it by the constitution
* but required to maintain privacy by law

But that's hard! What if there were 10 people on the block and all the same sex and age? If you posted something like that, then you would know what everyone's sex and age was on the block.
TECH , TEACH
Advertisement
Lea Kissner
Lea Kissner
@LeaKissner
Next up at #enigma2021, Sanghyun Hong will be speaking about "A SOUND MIND IN A VULNERABLE BODY: PRACTICAL HARDWARE ATTACKS ON DEEP LEARNING"

(Hint: speaker is on the

In recent years ML models have worked from research labs to production, which makes ML security important. Adversarial ML research studies how to mess with ML

For example by messing with the training data (c.f. Tay which became super-racist super-fast) or by foiling ML models by changing inputs in ways humans can't see.


Prior work considers ML models in a standalone, mathematical way
* looks at the robustness in an isolated manner
* doesn't look at the whole ecosystem and how the model is used -- ML models are running in real hardware with real software which has real vulns!


This talk focuses on hardware-level vulnerabilities. This is particularly interesting because these can break cryptographic guarantees (because those are outside of their threat models)
e.g. fault injection attacks, side-channel attacks
SCIENCE
Lea Kissner
Lea Kissner
@LeaKissner
Last talk about Securing Democracy at #enigma2021: @jackhcable speaking about "THE FULL STACK PROBLEM OF ELECTION

Let's imagine that elections use all the security measures security people have been advocating: risk-limiting audits, paper ballots, etc. Would people trust the elections more?

Jack would argue no. Most people don't understand this stuff and most of the claims people are making can't be disproven. And are massively bogus already.

Georgia did a full recount on paper ballots and it very much didn't stop people from doubting the election!

Are election security results in vain? The point of election security is to convince the loser they lost.

No! Have to focus on the whole stack, from election infrastructure to campaigns to people and mis/dis-informaton


One takeaway from the talk: the parts of the stack must work in tandem. Can't fight misinformation in a vacuum, but must build on other election security measures.
POLITICS
Lea Kissner
Lea Kissner
@LeaKissner
In more Securing Democracy at #enigma2021, @ChrFolini talking about "THE ADVENTUROUS TALE OF ONLINE VOTING IN

Switzerland is a direct democracy where citizens get to vote at least 4x/year, with a lot of mail-in voting. We have a long history of online voting.

Disclaimer: THIS IS NOT SWEDEN.

[I get the picture that @ChrFolini has had to explain the difference several times.]


Process around mail-in ballots.

[tl;dr it's very complicated and wasn't threat-modeled until recently]


But the in-person ballots are complicated, too!


Most security folks don't think that we can't make a secure online voting system.

@ChrFolini says this is because of encryption
[Note: this is not the main reason that a lot of people cite -- we're more worried about things like malware but it's complicated]
WORLD

More from Tech

Simon DeDeo
Simon DeDeo
@SimonDeDeo
So, today, for the first time in 25 (!) years of Apple, I downgraded. From the 2016 MacBook Pro to my 2013, which I had kept in a drawer...


It was pretty simple to do—Apple Time Machine backups let me do it with one click.

That first tweet captures, in two pictures, how badly Apple has “lost the plot” (to quote @wylieprof). On the right is the Apple MagSafe adapter, from 2013. On the left, what I had “upgraded” to.

Thanks, Apple! I really was nostalgic for worrying about yanking my computer off the table.

Oh and I really appreciated not knowing if my computer was charging. What was great was the little whoop sound you used, so that the speaker before me could be informed I was charging my laptop.
TECH
Jijo Sunny
Jijo Sunny
@JijoSunny
1/ 👋 Excited to share what we’ve been building at https://t.co/GOQJ7LjQ2t + we are going to tweetstorm our progress every week!

Week 1 highlights: getting shortlisted for YC W2019🤞, acquiring a premium domain💰, meeting Substack's @hamishmckenzie and Stripe CEO @patrickc 🤩

2/ So what is Brew?

brew / bru : / to make (beer, coffee etc.) / verb: begin to develop 🌱

A place for you to enjoy premium content while supporting your favorite creators. Sort of like a ‘Consumer-facing Patreon’ cc @jackconte

(we’re still working on the pitch)

3/ So, why be so transparent? Two words: launch strategy.

jk 😅 a) I loooove doing something consistently for a long period of time b) limited downside and infinite upside (feedback, accountability, reach).
cc @altimor, @pmarca


4/ https://t.co/GOQJ7LjQ2t domain 🍻

It started with a cold email. Guess what? He was using BuyMeACoffee on his blog, and was excited to hear about what we're building next. Within 2w, we signed the deal at @Escrowcom's SF office. You’re a pleasure to work with @MichaelCyger!

5/ @ycombinator's invite for the in-person interview arrived that evening. Quite a day!

Thanks @patio11 for the thoughtful feedback on our YC application, and @gabhubert for your directions on positioning the product — set the tone for our pitch!
TECH
Advertisement
DHH
DHH
@dhh
Facebook may well be exceptionally nasty and it’s leadership particularly deceitful, but the whole enterprise is the natural conclusion to an ad-powered social network. Ever greater surveillance, hyper targeting, and engagement baiting is what the basic incentives demand.

Facebook cannot change course. The best they can do is keep dishing out empty apologies, commit to inconsequential adjustments to its algorithms, and spend more money on positive PR and negative projection. The rot is at the core of its very being.

This is why we, consumers and citizens, must make the change for Facebook. Antitrust forcing a breakup of the business, and consumer revolt driving #DeleteFacebook. Zuckerberg will never conclude that what he built has become such a net negative for the world on his own.

That’s why its so tragic that WhatsApp sold out to Facebook in particular. Finally a challenger that had a different model and different ethics. But few would say no to $19B, which is why we need antitrust enforcers to do it for them.
TECH
John McMaster
John McMaster
@johndmcmaster
#RaspberryPiPico silicon teardown time!


Board as received optical + x-ray images


Inspecting package. X-ray shows bond wires easier after removing thermal slug


Thermal slug removed w/ HCl + H2O2


Decapped to show copper bond wires connecting die to package pins. Initially used only nitric acid which destroyed copper bond wires (last image). Fixed by switching to mixed nitric + sulfuric acid
TECH
Resist the Hologram - Stu Cvrk
Resist the Hologram - ...
@STUinSD
Thread – Dump the Legacy Media; Turn to These News Sources

A. We all need sources less tainted by the Big Tech/globalist narratives that are echoed repeatedly throughout the legacy media. My brother sent me a list of alternatives from the Noq report.
TECH

You May Also Like

Vibhu Vashisth
Vibhu Vashisth
@VIBHU_Tweet
IT WAS RISHI KANADA WHO GAVE THE ATOMIC THEORY & TALKED ABOUT THE GRAVITY OF EARTH, 2600 YEARS BEFORE AN APPLE FELL IN FRONT OF NEWTON'S EYES:

Scientists of the modern world credit an English scientist John Dalton (1766 CE -1844 CE) for the Atomic Theory.


And this is because, most of us are not even aware of an ancient Indian Sage named Kanada, who was the first to formulate the theory of atoms, almost 2600 yrs before Dalton and talk about earth's gravity.


Rishi Kanada was born around 600 BCE in Dwarka, Gujarat and he was the son of a philosopher named Ulka. He was fascinated with the minute detailing of the things right from his childhood. Once, when he was very young, he accompanied his father on a journey to Prayaga.


He saw plentiful grains scattered along the path leading to the shore of river Ganga. It's a tradition in Hindu families to scatter the grains for the ants and birds to feed on them. Suddenly, an ant caught his attention, who was feeding on a rice grain.


He was mesmerised by this very fact that how a small grain of rice becomes food for the ant but to satisfy the hunger of a person so many grains are needed together. This incidence made him realize the importance of a single grain of rice.
ALL
Anu Satheesh
Anu Satheesh
@AnuSatheesh5
Importance of Famous Payyannur Pavithra Mothiram or Ring

Payyanur Sri Subramanya Swami Temple 🚩
Kerala

Temple, constructed by Parasurama is known as the 'Pazhani' of Kerala.The place got its name from 'Payyante Ooru' where Payyan is another name by which Subramanya was called.


There are references about this temple in Brahmanda purana. Muni Garga mentions this temple and the place to  the Pandavas when they were in Vanavasa. Temple was destroyed two times, once due to fire and then during the attack of Tipu Sultan.


Important tradition here is wearing of Pavithram by the temple priest. Pavithram is a sort of  ring worn during performing Vedic rituals or during the "pithrubali". Usually worn while performing Tarpana or Shradham. The traditional Pavitram is usually made of Dharbha grass
ALL
Advertisement
Vibhu Vashisth
Vibhu Vashisth
@VIBHU_Tweet
RISHI PINGALA:THE ANCIENT INDIAN SAGE DISCREDITED FOR HIS MAJOR CONTRIBUTIONS TO MATHEMATICS & PHI

Have you ever heard about,"The Golden Ratio"?
The Golden Ratio or Phi(Greek) is a mathematical ratio of nature. Mother Nature is the most exquisite artist in herself.


&Its this Phi she uses to create all the beauty in World.
If anyone uses this ratio correctly in their art,it can turn into a spell-binding piece of work.Such is the significance of'Phi'.But my thread isn't about it.Its about somethin called'Fibonacci Series'&who actually made it


Phi is related to Fibonacci series(0,1,1,2,3,5,8,13,21,34...)
&this series is responsible for everything dat is beautiful on this planet. Just try to calculate the ratio of any 2 successive numbers ÷ each of them by the number before it in above infinite series.

E.g. 3/2=1.5, 5/3=1.666, 8/5=1.6, 34/21=1.61904 and so on. Did you notice something? The ratio is coming almost same every time. This ratio is called 'Phi 'which is numerically represented as 1:1.618. This Golden Spiral is made in exact proportion of 1:1.618.


The thing I want to emphasize here is that we always find only those things appealing and attractive that have Phi. It's in our subconscious. Isn't it some revelation? We are the part of this Divine proportion of the God or the Mother Nature. Check these:
ALL
Anu Satheesh
Anu Satheesh
@AnuSatheesh5
Thrikkangode Sree Randu Moorthy Temple
Ottappalam, Kerala. 🚩
#keralatemples

This is very unique temple as Shiva and Vishnu both are in the “linga” form in the same Garbhagriham. The Srikovil is in a circular pattern. Temple's Prathishta was done by Parasurama.


Mahadeva and Maha Vishnu in the same Srikovil is very rare Prathishta, but poojas are done separately Dhara is done to Maha Vishnu here. People suffering from “KAIVISHAM” and mental illness are fully cured on drinking a medicinal herb supplied by a nearby family here.


The root of the banyan tree around the Ayyappa Sannidhanam is said to have great powers for skin ailments.

Very ancient temple but was covered with forest for many years.
Later two persons Chakki and Chaathan, while cutting trees their axe hit on the nearby
@SriramKannan77


Vigrahams and it suddenly started bleeding. Later Devaprashnam was held and thus found out that these were murthy's of Shiva and Vishnu which was worshipped long back. And thus temple is constructed here.
Om Namah Sivaye
Om Namo Narayanaya
🕉🙏🕉
ALL
Dr. Jane Clare Jones
Dr. Jane Clare Jones
@janeclarejones
So, on the subject of bonkers hyperbolic pretzeling over the Bell judgement, Grace 'destroy books I don't like & make inappropriate jokes about sterilising teenage girls' Lavery has some thoughts.

Tell me why my feminism is wrong Grace.

Oh

Well, if anyone thought the Bell judgment was going to make TRAs reconsider making massively overblown claims with no evidence backed up with nothing but a thick wadge of emotional blackmail.... HAHAHA, no one thought that.


A high court in the UK made a delimited judgment about teenager's ability to consent to puberty blockers. This puts all trans people everywhere in the world at risk.

Because if any human anywhere has any thoughts that deviate in any way from the rote line dictated by

the trans rights movement, this puts all trans people everywhere in mortal danger.

Let's be honest Grace. It doesn't put trans people at risk. It puts trans ideology at risk. Because trans ideology depends on the idea of innate gender identity, and the trans child is the

necessary material evidence of the ontology of gender identity.

That is, children are being medicalised to provide evidence to underwrite adults identities.

Nothing to see here.
LAW