BC WORLD
Saved by @ThomassRichards

In more Securing Democracy at #enigma2021, @ChrFolini talking about "THE ADVENTUROUS TALE OF ONLINE VOTING IN

 Switzerland is a direct democracy where citizens get to vote at least 4x/year, with a lot of mail-in voting. We have a long history of online voting.

Disclaimer: THIS IS NOT SWEDEN.

[I get the picture that @ChrFolini has had to explain the difference several times.]
Process around mail-in ballots.

[tl;dr it's very complicated and wasn't threat-modeled until recently]
But the in-person ballots are complicated, too!
Most security folks don't think that we can't make a secure online voting system.

@ChrFolini says this is because of encryption
[Note: this is not the main reason that a lot of people cite -- we're more worried about things like malware but it's complicated]
There are reasons to want online voting:
* Citizens living abroad
* Visually impaired and quadriplegic voters need to have assistants that they trust
* Many invalid ballots (even <10%!)
* Physical voting has security problems, too
Like the states of the US, there are cantons in Switzerland, federalized system. The cantons have almost complete control over the elections *except* that the federal system has exclusive control over the security of online voting.
Several cantons have been experimenting, with Geneva being the first, followed by a group of eight cantons.
In 2017 the federal chancellor calls for 2/3 of the cantons to offer internet voting for national elections in 2019. There were not many CS people represented and they declared internet voting "solved".

That was a wakeup for people on internet voting.
Geneva pulled funding after political quarrels... which paved the way for SwissPost.

In 2019 they posted the source code before the election. It didn't take long for several fundamental security flaws to be found.

[ I can't type this fast and find everyone's names sorry]
In the wake of that failure everyone figured out that internet voting was not, in fact, solved. At all.

So they brought in a bunch of experts.
What happens if you get together a bunch of experts? A scientific report!
[If someone has a link, please reply with it]

@ChrFolini was brought in to moderate the workshops... then the pandemic hit. Lots of debate on cryptography, software development, etc.
After all that debate and new work, there is a new report [anyone have a link? @ChrFolini?] in line with the recommendations of the scientists. But we'll need to keep tweaking as tech changes.
Key recommendations:
* Strict hierarchy of recommendations, starting with a verifier model which can be reasoned about, then moving to pseudocode then code. Use formal models.
* Diversity of hard- and soft-ware to resist attacks. It's more expensive, but there are security benefits.

[Boy howdy this is going to be controversial one, depending on how this is set up -- checks of different versions against each other?]
* Maximum level of transparency, especially in development

* Voting security beyond internet voting
Summary:
* Switzerland is a useful testbed for online voting
* Iterative process with strict supervision on federal level
* Expert dialogue with recommendations in 2020
@ChrFolini sees online voting as something which may or may not be securable but it's a political question whether it's introduced... so we'd better work on it.

[paraphrased]
Giving my hands a break, so end of talk as the questions are coming thick and fast (not at all shocking!)

More from Lea Kissner

Lea Kissner
Lea Kissner
@LeaKissner
Last talk about Securing Democracy at #enigma2021: @jackhcable speaking about "THE FULL STACK PROBLEM OF ELECTION

Let's imagine that elections use all the security measures security people have been advocating: risk-limiting audits, paper ballots, etc. Would people trust the elections more?

Jack would argue no. Most people don't understand this stuff and most of the claims people are making can't be disproven. And are massively bogus already.

Georgia did a full recount on paper ballots and it very much didn't stop people from doubting the election!

Are election security results in vain? The point of election security is to convince the loser they lost.

No! Have to focus on the whole stack, from election infrastructure to campaigns to people and mis/dis-informaton


One takeaway from the talk: the parts of the stack must work in tandem. Can't fight misinformation in a vacuum, but must build on other election security measures.
POLITICS
Lea Kissner
Lea Kissner
@LeaKissner
Last up in Privacy Tech for #enigma2021, @xchatty speaking about "IMPLEMENTING DIFFERENTIAL PRIVACY FOR THE 2020

Differential privacy was invented in 2006. Seems like a long time but it's not a long time since a fundamental scientific invention. It took longer than that between the invention of public key cryptography and even the first version of SSL.


But even in 2020, we still can't meet user expectations.
* Data users expect consistent data releases
* Some people call synthetic data "fake data" like
"fake news"
* It's not clear what "quality assurance" and "data exploration" means in a DP framework


We just did the 2020 US census
* required to collect it by the constitution
* but required to maintain privacy by law

But that's hard! What if there were 10 people on the block and all the same sex and age? If you posted something like that, then you would know what everyone's sex and age was on the block.
TECH , TEACH
Advertisement
Lea Kissner
Lea Kissner
@LeaKissner
Next up at #enigma2021, Sanghyun Hong will be speaking about "A SOUND MIND IN A VULNERABLE BODY: PRACTICAL HARDWARE ATTACKS ON DEEP LEARNING"

(Hint: speaker is on the

In recent years ML models have worked from research labs to production, which makes ML security important. Adversarial ML research studies how to mess with ML

For example by messing with the training data (c.f. Tay which became super-racist super-fast) or by foiling ML models by changing inputs in ways humans can't see.


Prior work considers ML models in a standalone, mathematical way
* looks at the robustness in an isolated manner
* doesn't look at the whole ecosystem and how the model is used -- ML models are running in real hardware with real software which has real vulns!


This talk focuses on hardware-level vulnerabilities. This is particularly interesting because these can break cryptographic guarantees (because those are outside of their threat models)
e.g. fault injection attacks, side-channel attacks
SCIENCE
Lea Kissner
Lea Kissner
@LeaKissner
We're kicking off the Privacy Tech session at #enigma2021 with Mitch Negus speaking about "NO DATA, NO PROBLEM—GIVING NUCLEAR INSPECTORS BETTER TOOLS WITHOUT REVEALING STATE

A nuclear catastrophe hasn't occurred... yet. So we need to stay vigilant. Nuclear inspectors go in according to treaties to check what's going on and check compliance with treaty rules.

But as sophisticated analytics become more common, states will only want to share the minimum amount of information necessary under the treaty.

But perhaps we can use MPC -- secure multi-party computation

Yao's garbled circuits were first demonstrated on the millionaire's problem -- figuring out who's richer without revealing actual amounts.

Used for other things like cryptocurrency these days.

Can we use this for nuclear inspection?

MPC can be used to compute anything computed by a computer [but it's expensive!]
TECH
Lea Kissner
Lea Kissner
@LeaKissner
Next up in Privacy Technology at #enigma2021, Kelly Huang from @ethyca speaking about "GONE, BUT NOT "FORGOTTEN"—TECHNICAL & PRACTICAL CHALLENGES IN OPERATIONALIZING MODERN PRIVACY

Just imagine there's a global pandemic forcing everyone to stay home and buy their stuff over the internet. And you've been working on your sanitization-on-demand startup. You've got more users than you can count! ... literally, because your data's all over.

Now you're a multi-national international country with privacy issues because your information is all over the place.

Now a user writes to request you delete their data. Where is it? How do you do that? Who's responsible for privacy in your business.

How do you operationalize privacy rights?

Primary stakeholders:
* Legal
* Business
* Engineering

We spend a lot of time on Twitter analyzing the legal rulings, but it's harder where the "rubber meets the code" 🥁
TECH

More from World

raina douris
raina douris
@RahRahRaina
fascinated by this man, mario cortellucci, and his outsized influence on ontario and GTA politics. cortellucci, who lives in vaughan and ran as a far-right candidate for the italian senate back in 2018 - is a major ford donor...


his name might sound familiar because the new cortellucci vaughan hospital at mackenzie health, the one doug ford has been touting lately as a covid-centric facility, is named after him and his family

but his name also pops up in a LOT of other ford projects. for instance - he controls the long term lease on big parts of toronto's portlands... where doug ford once proposed building an nfl stadium and monorail... https://t.co/weOMJ51bVF


cortellucci, who is a developer, also owns a large chunk of the greenbelt. doug ford's desire to develop the greenbelt has been

and late last year he rolled back the mandate of conservation authorities there, prompting the resignations of several members of the greenbelt advisory
WORLD
B. Allen-Ebrahimian
B. Allen-Ebrahimian
@BethanyAllenEbr
NEW SCOOP from @zachsdorfman: China's Ministry of State Security has demanded that private Chinese companies, including Baidu and Alibaba, help them process stolen U.S. data, such as from the OPM hack, U.S. intelligence officials

Zach writes, "In what amounts to intelligence tasking, China’s spy services order private Chinese companies with big-data analytics capabilities to process massive sets of information that have intelligence value, according to current and former officials."

“Just imagine on any given day, if NSA and CIA are collecting information, say, on the [Chinese military], and we could bring back seven, eight, 10, 15 petabytes of data, give it to Google or Amazon or Microsoft, and say, ‘Hey, we want all these analytics," said one official.

It's hard to overestimate the significance of this intelligence assessment.

There has been speculation that Baidu, Alibaba, and Tencent might have ties to China's security state. In fact, they work directly with them and for them—because they have to. According to US intel.

If you have been enjoying this series of scoops from @zachsdorfman, also take some time in your day to appreciate the skill and dedication that FP editor @BeijingPalmer has put into them.
WORLD
Advertisement
SeunOkin Channels tv
SeunOkin Channels tv
@seunokin
#endsars #endpolicebrutality

Dear Friends,

On a rather deeper look at things, Police brutality is the topmost of the agitation but the anger and fury is deeper, bottled up for many years. An oppression our fathers have endured and the children now say No More, Enough is Enough!

In the context of the current scenario “SARS” has become a metaphor.

“SARS” in our society today represents all the inefficiencies, corruption, structural imbalances, faults and All the shenanigans of the Political class

If this present fury does not inspire an overhaul of the Nigerian system, then we may be headed for another restless round of 60 year of disastrous merry go round. This Nation needs a RESET NOW!!

It’s a good time to negotiate the fixing of this great Nation.

How long do we keep singing; Nigeria has great potentials? Let those potentials start working for good

If we must tell our selves the bitter truth as a people we urgently need to fix these;

* A drastic cut in cost of governance
* Federal Ministers shouldn’t be more than 10

* Remove the lofty attraction in public office
* Reduce the powers of the centre and decentralize reasonably
* Fix our defective constitution
* Reset the civil service
* Create regional economic/developmental competition
* Allow states to explore their resources/endowment
WORLD
alan riley
alan riley
@profalanriley1
NS2 a response to Mr Wolfgang Munchau. Although I agree on a number of points with WM in his recent @spectator piece-I disagree with his central contention that NS2 is about more gas for Germany. There is no more gas & what gas there is not for Germany. Lengthy thread to follow.

1.WMs @EuroBriefing article has swallowed a huge dose of Russian (and indeed German) propaganda. Throughout the article WM refers to Nord Stream 2 as being vital to Germany because of the need for more Russian gas. This is

2.The key point about NS2 is that it is a diversionary pipeline. There is no new gas. This huge political effort by Russia and Germany to deliver NS2 will not bring a single extra molecule of gas to Germany.

3.What is more the gas destined to land on the German Baltic coast at Greifswald (in AM's constituency) will substantially go not to Germany. The connecting pipeline for NS2, called EUGAL has the same capacity as NS2 (55bcm) and heads eastward to the Czech Republic.

4.Our friendly gas propagandists may well say that in December 2019 Gazprom signed a gas transit contract with the Ukrainian state owned energy company Naftogaz for 40bcm a year from 2021-2024. So with NS2 there will be more gas. NS2 plus the gas transited via Ukraine.
WORLD
Zoran Kusovac
Zoran Kusovac
@zkusovac
THREAD #Serbian #Orthodox #Church bishops start Conclave (#Sabor-Holy Assembly in #SPC parlance) to elect new #Patriarch, 3 months after previous died of #Covid. Election much more about politics than religion, mainly #Serbia #Kosovo relations but also #Russia Orthodox Church /2


2/ vs. #Ecumenical Patriarch of #Constantinople. Most of numerous traditional cleavages within SPC (Young Lions vs. Old Guards); Serbians vs. TransDrinians; ecumenicals vs. hardline Orthodox etc. will be irrelevant with only the split between Russian vs. Greek students, roughly/3

3/corresponding with main division: support for whatever "solution" President Vucic might propose to satisfy int'l demand to at least de facto recognize Kosovo vs. stubborn refusal to accept anything not in line with current Serbian constitution that says #KosovoJeSrbija. /4

4/Due to 3 decades of heavy politicking under 1 weak Patriarch (Pavle) & his insipid successor (Irinej), those who’d otherwise be God-obeying “good guys” are staunchly in Kosovo Status Quo camp, refusing any deal. Those bishops who were in bed with politicians & secret services/5

5/ now support “accommodation” with Kosovo. Voting system is peculiar: Conclave picks 3 eligible bishops (each needs to obtain simple majority of votes i.e. 23); names of top 3 are sealed & 1 is drawn. System was designed in Communist times to prevent manipulation. Both sides /6
WORLD

You May Also Like

Elliot Alderson
Elliot Alderson
@fs0c131y
THREAD: I'm looking at a Huawei P20 from China, let see what can I found

The 1st app I reversed is an app called Decision

Look at the name of the files contains in the assets folder:
- airport_china.txt
- city_china.txt
- cityinfo.db
- parkinglot_china.txt
- railwayinfo.db
- trainInfo.db
- trainstation.db

Interesting, no?


For example, the trainstation database contains:
- address
- name
- latitude
- longitude
- city


In the manifest of this application, there is a GeoReceiver
ALL
Antonio Garc\xeda Mart\xednez
Antonio García Martíne...
@antoniogm
Observing the public conversation around FB, and the private ones happening among techies and ex-FBers, I think the mutual misunderstanding is worse than when I set out two years (and 500 pages) ago to (in a small way) bridge that gulf.

We're basically fucked.

The tech world has gotten so huge, self-reinforcing, and insulated from reality they can no longer even vaguely look at themselves (and their actions) as others do. They just live on a different planet than most people.

Conversely, the average tech consumer doesn't understand the technology that has slowly taken over their lives, and their designated emissaries to figure it out--politicians, pundits, regulators, journalists--understand it barely better than they do, and have their own agendas.

To say more than generalities for a moment, here's what I think is likely the core problem.

Techies take weird, improbable visions, and make them realities: some BS pitch deck to a VC, mixed with money and people, really does turn into some novel thing.

Most people work inside a legacy industry that's evolved that way over time (usually for good reasons), and they think about the future via some analogy with their present (which is a function of a long-ago past). The interruption that tech will introduce is often hard to grasp.
TECH
Advertisement
Aditya Todmal
Aditya Todmal
@AdityaTodmal
MASTER THREAD on Short Strangles.

Curated the best tweets from the best traders who are exceptional at managing strangles.

• Positional Strangles
• Intraday Strangles
• Position Sizing
• How to do Adjustments
• Plenty of Examples
• When to avoid
• Exit Criteria

How to sell Strangles in weekly expiry as explained by boss himself. @Mitesh_Engr

• When to sell
• How to do Adjustments
• Exit


Beautiful explanation on positional option selling by @Mitesh_Engr
Sir on how to sell low premium strangles yourself without paying anyone. This is a free mini course in


1st Live example of managing a strangle by Mitesh Sir. @Mitesh_Engr

• Sold Strangles 20% cap used
• Added 20% cap more when in profit
• Booked profitable leg and rolled up
• Kept rolling up profitable leg
• Booked loss in calls
• Sold only


2nd example by @Mitesh_Engr Sir on converting a directional trade into strangles. Option Sellers can use this for consistent profit.

• Identified a reversal and sold puts

• Puts decayed a lot

• When achieved 2% profit through puts then sold
OPTIONSLEARNINGS , ALL , OPTIONS STRATEGY
V.S.S
V.S.S
@Scion_of_Shekha
8 March 1679 - The date on which 300 saffron clad warriors gave their life to protect temples from mugal army. Thread➡️
Aurangzeb's huge army, which was adorned with artillery, elephant and horses, under the leadership of Commander Darab Khan had marched to punish the ruler of/1


Khandela Raja Bahadur Singh, who became a rebel due to the anti-Hindu policies of Aurangzeb, and to destroy the temples of Shekhawati. Bahadur Singh to compete with such a large army, vacated Khandela for the purpose of conducting guerilla warfare and went Kot Sakrai /2

located in the inaccessible hills of Sakrai. People of Khandela also vacated Khandela and hid in nearby villages.

But some Shekhawat warriors did not like this as they knew that the royal army would not leave a single temple located in Shekhawati unbroken./3

so soon the teams of self-sacrificing Dharma-protectors Shekhawat heroes started reaching Khandela to protect the Dev temples.

Sujan Singh Shekhawat, the young thakur of Chhapoli, was coming back from his wedding when he heard about the imperial army from Shepherds./4

झिरमीर झिरमिर मेहा बरसे,मोरां छतरी छाई |
कुल में है तो आव सुजाण, फोज देवरे आई ||

if you are born in your glorious clan, then come, the army have come to destroy temple. /5
ALL
Vibhu Vashisth
Vibhu Vashisth
@VIBHU_Tweet
Rani Chennamma of Kittur was one of the first women rulers of India who fought against the might of the British Empire in 1824. Rani Chennamma was born in 1778 in a small village of Kakati in Belgaon distt of the State of Karnataka.


She was born into the Lingayat Community to a man named Dhulappa Desai. From a very young age she was trained in horse riding,sword fighting, archery and diplomacy. At a very young age of 15 yrs, she was married to the King of Kittur and became the Queen of Kittur.


It is said that King of Kittur Mallasarja was once moving around in the neighbouring kingdoms to find support to fight Tipu Sultan. It is then, when he came across Chennamma and he immediately got attracted to her sheer confidence and bravery.

Rani Chennamma and King Mallasarja had a son together who died very soon after the death of King Mallasarja in 1816. As the Queen of Kittur, Rani Chennamma immediately adopted Shivalingappa as her son and declared him the heir to the throne of Kittur.

This did not go well with the British East India Company who was enforcing the Doctrine of Lapse those days, according to which the adopted children of the Indian rulers were not allowed to become their heirs and if the native rulers did not have children of their own, their...
ALL