BC TECH
Saved by @ThomassRichards

Next up in Privacy Technology at #enigma2021, Kelly Huang from @ethyca speaking about "GONE, BUT NOT "FORGOTTEN"—TECHNICAL & PRACTICAL CHALLENGES IN OPERATIONALIZING MODERN PRIVACY

 Just imagine there's a global pandemic forcing everyone to stay home and buy their stuff over the internet. And you've been working on your sanitization-on-demand startup. You've got more users than you can count! ... literally, because your data's all over.
Now you're a multi-national international country with privacy issues because your information is all over the place.

Now a user writes to request you delete their data. Where is it? How do you do that? Who's responsible for privacy in your business.
How do you operationalize privacy rights?

Primary stakeholders:
* Legal
* Business
* Engineering
We spend a lot of time on Twitter analyzing the legal rulings, but it's harder where the "rubber meets the code" 🥁
Three rights:
* access
* rectification
* deletion

Legal's trying to uphold them, but it's a technical question!

Legal wants to decrease risk but don't know software
The business wants to stay in business and make money. They want to be able to use data for things like placing ads and analysis.
It takes a lot of time to handle these requests, too!

They need a streamlined technical solution.
Program management wants to streamline and make things efficient and predictable... but they don't understand the technical limitation
As a software engineer, you've seen technical debt. So much technical debt. All the weight of the decisions that were made in the past, especially if you scaled without a data plan.

Average SMB has data in 10 different systems.
How do we delete?
Some poor software engineer is trying to track down what data is where?
What even *is* PII? There's no real standard.
What should be returned? What should be deleted.

Make a definition and stick to it.
Some of your databases might use email addresses as a primary key, some user IDs, etc.
1. Define PII
2. Find all the PII
3. Use pseudonymization to replace PII with some kind of random value which can't be tied back to the user

[reminder I am livetweeting this is not me speaking]
How do you do this at scale?
Maybe a centralized team who can handle this?
If you're a small company, plan ahead!
Be careful when you're doing sanitization -- some databases really don't like batch processes and you can make things fall over.
Speed
* you have a timeline -- often 30 or 45 days
* but that's not enough time if you haven't planned for streamlined speed

Ideally you won't need it, but have a backup plan, in case something goes wrong with a slow data system
Plan for a solution that grows with your business, not just a hacked-together series of SQL queries, but instead a centralized portal with extensibility as the business changes and technical systems grow.

... and as new privacy laws come into place
Privacy is way, way more than compliance. But compliance needs to happen.

Let's all do our part

[ end of talk ]

More from Lea Kissner

Lea Kissner
Lea Kissner
@LeaKissner
Next up at #enigma2021, Sanghyun Hong will be speaking about "A SOUND MIND IN A VULNERABLE BODY: PRACTICAL HARDWARE ATTACKS ON DEEP LEARNING"

(Hint: speaker is on the

In recent years ML models have worked from research labs to production, which makes ML security important. Adversarial ML research studies how to mess with ML

For example by messing with the training data (c.f. Tay which became super-racist super-fast) or by foiling ML models by changing inputs in ways humans can't see.


Prior work considers ML models in a standalone, mathematical way
* looks at the robustness in an isolated manner
* doesn't look at the whole ecosystem and how the model is used -- ML models are running in real hardware with real software which has real vulns!


This talk focuses on hardware-level vulnerabilities. This is particularly interesting because these can break cryptographic guarantees (because those are outside of their threat models)
e.g. fault injection attacks, side-channel attacks
SCIENCE
Lea Kissner
Lea Kissner
@LeaKissner
Last up in Privacy Tech for #enigma2021, @xchatty speaking about "IMPLEMENTING DIFFERENTIAL PRIVACY FOR THE 2020

Differential privacy was invented in 2006. Seems like a long time but it's not a long time since a fundamental scientific invention. It took longer than that between the invention of public key cryptography and even the first version of SSL.


But even in 2020, we still can't meet user expectations.
* Data users expect consistent data releases
* Some people call synthetic data "fake data" like
"fake news"
* It's not clear what "quality assurance" and "data exploration" means in a DP framework


We just did the 2020 US census
* required to collect it by the constitution
* but required to maintain privacy by law

But that's hard! What if there were 10 people on the block and all the same sex and age? If you posted something like that, then you would know what everyone's sex and age was on the block.
TECH , TEACH
Advertisement
Lea Kissner
Lea Kissner
@LeaKissner
In more Securing Democracy at #enigma2021, @ChrFolini talking about "THE ADVENTUROUS TALE OF ONLINE VOTING IN

Switzerland is a direct democracy where citizens get to vote at least 4x/year, with a lot of mail-in voting. We have a long history of online voting.

Disclaimer: THIS IS NOT SWEDEN.

[I get the picture that @ChrFolini has had to explain the difference several times.]


Process around mail-in ballots.

[tl;dr it's very complicated and wasn't threat-modeled until recently]


But the in-person ballots are complicated, too!


Most security folks don't think that we can't make a secure online voting system.

@ChrFolini says this is because of encryption
[Note: this is not the main reason that a lot of people cite -- we're more worried about things like malware but it's complicated]
WORLD
Lea Kissner
Lea Kissner
@LeaKissner
Last talk about Securing Democracy at #enigma2021: @jackhcable speaking about "THE FULL STACK PROBLEM OF ELECTION

Let's imagine that elections use all the security measures security people have been advocating: risk-limiting audits, paper ballots, etc. Would people trust the elections more?

Jack would argue no. Most people don't understand this stuff and most of the claims people are making can't be disproven. And are massively bogus already.

Georgia did a full recount on paper ballots and it very much didn't stop people from doubting the election!

Are election security results in vain? The point of election security is to convince the loser they lost.

No! Have to focus on the whole stack, from election infrastructure to campaigns to people and mis/dis-informaton


One takeaway from the talk: the parts of the stack must work in tandem. Can't fight misinformation in a vacuum, but must build on other election security measures.
POLITICS
Lea Kissner
Lea Kissner
@LeaKissner
We're kicking off the Privacy Tech session at #enigma2021 with Mitch Negus speaking about "NO DATA, NO PROBLEM—GIVING NUCLEAR INSPECTORS BETTER TOOLS WITHOUT REVEALING STATE

A nuclear catastrophe hasn't occurred... yet. So we need to stay vigilant. Nuclear inspectors go in according to treaties to check what's going on and check compliance with treaty rules.

But as sophisticated analytics become more common, states will only want to share the minimum amount of information necessary under the treaty.

But perhaps we can use MPC -- secure multi-party computation

Yao's garbled circuits were first demonstrated on the millionaire's problem -- figuring out who's richer without revealing actual amounts.

Used for other things like cryptocurrency these days.

Can we use this for nuclear inspection?

MPC can be used to compute anything computed by a computer [but it's expensive!]
TECH

More from Tech

Jessica Guynn
Jessica Guynn
@jguynn
Mark Zuckerberg on NYT story: "To suggest we weren't interested in knowing the truth or wanted to hide what we knew or wanted to prevent investigations is simply untrue."

Facebook says it will take a couple of questions on the article but wants to focus on (looks at notes) its transparency report.

Good luck with that folks.

Now Mark Zuckerberg is running through all the tactics it's deploying to clean up the platform (you know like they should have years ago).

What every Facebook user should be reading in the
TECH
Robin Berjon
Robin Berjon
@robinberjon
Recently, the @CNIL issued a decision regarding the GDPR compliance of an unknown French adtech company named "Vectaury". It may seem like small fry, but the decision has potential wide-ranging impacts for Google, the IAB framework, and today's adtech. It's thread time! 👇

It's all in French, but if you're up for it you can read:
• Their blog post (lacks the most interesting details): https://t.co/PHkDcOT1hy
• Their high-level legal decision: https://t.co/hwpiEvjodt
• The full notification: https://t.co/QQB7rfynha

I've read it so you needn't!

Vectaury was collecting geolocation data in order to create profiles (eg. people who often go to this or that type of shop) so as to power ad targeting. They operate through embedded SDKs and ad bidding, making them invisible to users.

The @CNIL notes that profiling based off of geolocation presents particular risks since it reveals people's movements and habits. As risky, the processing requires consent — this will be the heart of their assessment.

Interesting point: they justify the decision in part because of how many people COULD be targeted in this way (rather than how many have — though they note that too). Because it's on a phone, and many have phones, it is considered large-scale processing no matter what.
TECH
Advertisement
James Felton
James Felton
@JimMFelton
Butt plugs were originally sold as a miracle cure for headaches, acne, and insanity

Thread, article here and h/t: @qikipedia :
https://t.co/Ts84xnmWKJ


For a long time, medicine was pre-occupied with the question "can this be solved by putting something in the butt?"

Take, for example, tobacco smoke enemas, in which 18th Century physicians saw drowning victims and attempted to de-deadify them by blowing tobacco smoke up their rectums with a pipe.


Despite having no medical benefit whatsoever, the practice was popular, and enema kits lined the Thames like lifebelts, ready to be used as one final humiliation for somebody who was crap at swimming.

This practice ended sometime after 1800 when it became apparent that it didn't really work, given how the anus famously isn't really connected to the lungs, but doctors weren't quite finished with having a poke around in the old anus to see what happens just yet.
TECH
Mateusz Czeladka | Plan \u20b3
Mateusz Czeladka | Pla...
@matiwinnetou
(1) Since some people laugh at Cardano project and it's peer review aspect, let me share a story from work for all of you
(2) There is company called Databricks and they open sourced recently a technology called: https://t.co/gpZyKKiMVD . This technology is super important

(3) In BigData delta allows one to perform DELETE and MERGE operations contrary to Hadoop + Hive where this is not possible, seeking through many partitions finding customer data to remove and then rewriting it is not only expensive as an operation but also very dangerous

(4) This promising technology is something that many companies, which have big data turn into as they need to be GDPR compliant.
(5) I was always reading and accepting all details from their website as given and the "truth"

(6) There is however an amazing Principal Developer at our company that found some of the claims from their website as dubious, e.g. ACID claims on such a distributed file system
(7) It turns out this is not the first time this company advertises something that is simply not true

(8) on another occasion this company made untrue claims about Cassandra database and this then became source of disputes e.g by dr. @martinkl - my fave expert in distributed systems
(9) All professional developers also know of course famous Jepsen tests ->
TECH
Santiago
Santiago
@svpino
Here is a simple example of a machine learning model.

I put it together a long time ago, and it was very helpful! I sliced it apart a thousand times until things started to make sense.

It's TensorFlow and Keras.

If you are starting out, this may be a good puzzle to solve.


The goal of this model is to learn to multiply one-digit
TECH

You May Also Like

Michael King \U0001f1fa\U0001f1f8
Michael King 🇺🇸...
@8MichaelKing
Ever notice how the top niches are centered around health, wealth, and relationships?

There's a deep-rooted psychological (and biological) reason why.

And today, I'm gonna to explain all of it so you can start profiting off of this knowledge 💰💰

*Now, this thread is going to be long and in depth. Make sure to favorite the top tweet now so you can come back to it later.

So. Down to the very core of every living being (humans, dolphins, bacteria, aliens), there are only two drivers:
1. To survive
2. To reproduce

Right off the bat, we know that sex is a primary driver to human behavior.

This would also mean that each gender has its own insecurities regarding sex.

Men have a subconscious fear that their woman will leave them for someone more successful

Women have a fear that their man will leave them for someone younger & better-looking

We can conclude that men are attracted to looks, and women are attracted to status.

This is human nature down to its very core.

Crazy, blue-haired feminists will try to argue and say otherwise.

But, 50 years of feminism DOES NOT OVERRIDE millions of years of evolutionary biology.

Here's a quick visualization exercise so you can see how true all this is...
STARTUPS
Paul M Domenick\U0001f43a
Paul M Domenick🐺...
@PaulMDomenick
10 Signs of Social Intelligence 🧠

1-Smile
2-Good posture
3-Strong eye contact
4-Fluid hand gestures
5-Let’s others talk more
6-Listens & relates
7-Comfortable Touching people
8-Walk with a swagger
9-Speaks at slower pace
10-Keeps calm under criticism

[ QUICK THREAD ]


1-Smile

How do you feel when you see someone that looks angry?

It’s a downer

No one will want to interact with you if you look pissed all of the time, it’s just negative energy

Plus, smiling is a sign of confidence and boosts others moods


2-Good posture

Don’t walk Into any social setting looking like the hunchback

It’s weak and makes you look low energy

Plus, you’re displaying low status with weak posture

Stand up straight with your chin up & chest out like a god

Walk like you’re proud of yourself


3- Strong eye contact

Ever shake someone’s hand & their eyes are either looking down or darting?

It’s weak & you probably won’t trust them

Or in conversation?

Eye contact while talking means you’re listening and paying *Attention*

Strong eye contact displays confidence


4-Fluid hand gestures

Use your hands to talk & express your points

Don’t stand there like a robot

Using the hands can make what you’re talking about exciting

It can also be used to emphasize

Exciting = positive emotion

Remember, making people FEEL is what’s important
LIFE
Advertisement
Marina Amaral
Marina Amaral
@marinamaral2
Rio de Janeiro, 1920. 🇧🇷


São Paulo, 1910. 🇧🇷


“Arpoador”, Rio de Janeiro, 1900. 🇧🇷


“Avenida Paulista”, São Paulo, 1902. 🇧🇷


Recife, 1885. 🇧🇷
HISTORY
\U0001d40d\U0001d41e\U0001d421\U0001d41a \U0001f1ee\U0001f1f3
𝐍𝐞𝐡𝐚 🇮🇳...
@Neh_hope_faith
THREAD: What is Golden Crescent and Golden Triangle and how it impacts India?

Golden Crescent region of South Asia - comprises of Afghanistan, Iran, and Pakistan - which is a principal global site for opium production and distribution.


Golden Triangle is the area where the borders of Thailand, Laos and Myanmar meet at the confluence of the Ruak and Mekong rivers. The Golden Triangle is called so because of the triangular shape formed by the locations of New Delhi, Agra and Rajasthan on a map.


India is wedged bw world’s 2 largest areas of illicit opium production, Golden Crescent & Golden Triangle, that has made Indian borders vulnerable to drug trafficking. It flows from 2 fronts, NW & NE, that possesses dual concern - violation of border & threat to national security

- Golden Crescent is world’s leading opium and cannabis producing region since 1983.

- Its proximity to Indo-Pak border has worsened the trafficking of hashish and heroin into Indian soil

- Trafficking happens through the border states of J&K, Punjab, Rajasthan and Gujarat.


- Golden Triangle is leading opium producing region of the South-east Asia, also an ancient narcotics supply route to North America & Europe.

- Myanmar-Northeast nexus is recognized by NCB as the root of heroin & chemical drugs

- Myanmar produces 80% of heroin produced in world
ALL
Sevak Sathaya
Sevak Sathaya
@Sevakofmata
Sharing one incident... After Modi's Trichy youth conference, the very next morning when police were clearing up their mini-control room, they found 5 strange boys who were roaming there with bags. When police enquired them "Sir, we are from Subramaniapuram in Trichy.

Whatever political meeting or conference is held in this ground, we come here on the same night or morning hours to collect the Liquor bottles to sell in the scrap shop for 50 paisa to 1 rupee per bottle and we used to earn Rs 200 to Rs 400 on each such event.

Even in the last DMK meeting the very next day we collected around 1500 bottles. But for Modi's BJP meeting, we could not find even a single bottle in the whole ground. We are coming around and around and not a single bottle in any corner of the G Corner ground in Trichy,

we are much disappointed, sir!". Police seem were stunned and pleasantly surprised. This is what Modi magic does in this nation. Modi is the one who can lead our nation and make everyone prosper with hardwork in right direction and proper approach.

This funny but interesting anecdote was published by a statewide local daily Dinamalar. I have just translated and posting it here for rest of the nation;
INDIA