BC WORLD
Saved by @ThomassRichards

In more Securing Democracy at #enigma2021, @ChrFolini talking about "THE ADVENTUROUS TALE OF ONLINE VOTING IN

 Switzerland is a direct democracy where citizens get to vote at least 4x/year, with a lot of mail-in voting. We have a long history of online voting.

Disclaimer: THIS IS NOT SWEDEN.

[I get the picture that @ChrFolini has had to explain the difference several times.]
Process around mail-in ballots.

[tl;dr it's very complicated and wasn't threat-modeled until recently]
But the in-person ballots are complicated, too!
Most security folks don't think that we can't make a secure online voting system.

@ChrFolini says this is because of encryption
[Note: this is not the main reason that a lot of people cite -- we're more worried about things like malware but it's complicated]
There are reasons to want online voting:
* Citizens living abroad
* Visually impaired and quadriplegic voters need to have assistants that they trust
* Many invalid ballots (even <10%!)
* Physical voting has security problems, too
Like the states of the US, there are cantons in Switzerland, federalized system. The cantons have almost complete control over the elections *except* that the federal system has exclusive control over the security of online voting.
Several cantons have been experimenting, with Geneva being the first, followed by a group of eight cantons.
In 2017 the federal chancellor calls for 2/3 of the cantons to offer internet voting for national elections in 2019. There were not many CS people represented and they declared internet voting "solved".

That was a wakeup for people on internet voting.
Geneva pulled funding after political quarrels... which paved the way for SwissPost.

In 2019 they posted the source code before the election. It didn't take long for several fundamental security flaws to be found.

[ I can't type this fast and find everyone's names sorry]
In the wake of that failure everyone figured out that internet voting was not, in fact, solved. At all.

So they brought in a bunch of experts.
What happens if you get together a bunch of experts? A scientific report!
[If someone has a link, please reply with it]

@ChrFolini was brought in to moderate the workshops... then the pandemic hit. Lots of debate on cryptography, software development, etc.
After all that debate and new work, there is a new report [anyone have a link? @ChrFolini?] in line with the recommendations of the scientists. But we'll need to keep tweaking as tech changes.
Key recommendations:
* Strict hierarchy of recommendations, starting with a verifier model which can be reasoned about, then moving to pseudocode then code. Use formal models.
* Diversity of hard- and soft-ware to resist attacks. It's more expensive, but there are security benefits.

[Boy howdy this is going to be controversial one, depending on how this is set up -- checks of different versions against each other?]
* Maximum level of transparency, especially in development

* Voting security beyond internet voting
Summary:
* Switzerland is a useful testbed for online voting
* Iterative process with strict supervision on federal level
* Expert dialogue with recommendations in 2020
@ChrFolini sees online voting as something which may or may not be securable but it's a political question whether it's introduced... so we'd better work on it.

[paraphrased]
Giving my hands a break, so end of talk as the questions are coming thick and fast (not at all shocking!)

More from Lea Kissner

Lea Kissner
Lea Kissner
@LeaKissner
Next up in Privacy Technology at #enigma2021, Kelly Huang from @ethyca speaking about "GONE, BUT NOT "FORGOTTEN"—TECHNICAL & PRACTICAL CHALLENGES IN OPERATIONALIZING MODERN PRIVACY

Just imagine there's a global pandemic forcing everyone to stay home and buy their stuff over the internet. And you've been working on your sanitization-on-demand startup. You've got more users than you can count! ... literally, because your data's all over.

Now you're a multi-national international country with privacy issues because your information is all over the place.

Now a user writes to request you delete their data. Where is it? How do you do that? Who's responsible for privacy in your business.

How do you operationalize privacy rights?

Primary stakeholders:
* Legal
* Business
* Engineering

We spend a lot of time on Twitter analyzing the legal rulings, but it's harder where the "rubber meets the code" 🥁
TECH
Lea Kissner
Lea Kissner
@LeaKissner
We're kicking off the Privacy Tech session at #enigma2021 with Mitch Negus speaking about "NO DATA, NO PROBLEM—GIVING NUCLEAR INSPECTORS BETTER TOOLS WITHOUT REVEALING STATE

A nuclear catastrophe hasn't occurred... yet. So we need to stay vigilant. Nuclear inspectors go in according to treaties to check what's going on and check compliance with treaty rules.

But as sophisticated analytics become more common, states will only want to share the minimum amount of information necessary under the treaty.

But perhaps we can use MPC -- secure multi-party computation

Yao's garbled circuits were first demonstrated on the millionaire's problem -- figuring out who's richer without revealing actual amounts.

Used for other things like cryptocurrency these days.

Can we use this for nuclear inspection?

MPC can be used to compute anything computed by a computer [but it's expensive!]
TECH
Advertisement
Lea Kissner
Lea Kissner
@LeaKissner
Next up at #enigma2021, Sanghyun Hong will be speaking about "A SOUND MIND IN A VULNERABLE BODY: PRACTICAL HARDWARE ATTACKS ON DEEP LEARNING"

(Hint: speaker is on the

In recent years ML models have worked from research labs to production, which makes ML security important. Adversarial ML research studies how to mess with ML

For example by messing with the training data (c.f. Tay which became super-racist super-fast) or by foiling ML models by changing inputs in ways humans can't see.


Prior work considers ML models in a standalone, mathematical way
* looks at the robustness in an isolated manner
* doesn't look at the whole ecosystem and how the model is used -- ML models are running in real hardware with real software which has real vulns!


This talk focuses on hardware-level vulnerabilities. This is particularly interesting because these can break cryptographic guarantees (because those are outside of their threat models)
e.g. fault injection attacks, side-channel attacks
SCIENCE
Lea Kissner
Lea Kissner
@LeaKissner
Last talk about Securing Democracy at #enigma2021: @jackhcable speaking about "THE FULL STACK PROBLEM OF ELECTION

Let's imagine that elections use all the security measures security people have been advocating: risk-limiting audits, paper ballots, etc. Would people trust the elections more?

Jack would argue no. Most people don't understand this stuff and most of the claims people are making can't be disproven. And are massively bogus already.

Georgia did a full recount on paper ballots and it very much didn't stop people from doubting the election!

Are election security results in vain? The point of election security is to convince the loser they lost.

No! Have to focus on the whole stack, from election infrastructure to campaigns to people and mis/dis-informaton


One takeaway from the talk: the parts of the stack must work in tandem. Can't fight misinformation in a vacuum, but must build on other election security measures.
POLITICS
Lea Kissner
Lea Kissner
@LeaKissner
Last up in Privacy Tech for #enigma2021, @xchatty speaking about "IMPLEMENTING DIFFERENTIAL PRIVACY FOR THE 2020

Differential privacy was invented in 2006. Seems like a long time but it's not a long time since a fundamental scientific invention. It took longer than that between the invention of public key cryptography and even the first version of SSL.


But even in 2020, we still can't meet user expectations.
* Data users expect consistent data releases
* Some people call synthetic data "fake data" like
"fake news"
* It's not clear what "quality assurance" and "data exploration" means in a DP framework


We just did the 2020 US census
* required to collect it by the constitution
* but required to maintain privacy by law

But that's hard! What if there were 10 people on the block and all the same sex and age? If you posted something like that, then you would know what everyone's sex and age was on the block.
TECH , TEACH

More from World

Defense News Nigeria
Defense News Nigeria
@DefenseNigeria
Nigeria's burgeoning defence industry is zooming ahead.

DICON has secured a contract to produce 152 MRAPs for the army. As well as six million rounds of small arms ammunition.

EZEGWU MRAP


DICONs R&D has been up and going. The army plans to test several technology demonstrators in the field. If they pass the field testing DICON will go into mass production of the equipments.


Anti drone jamming system made by DEMFAS aerospace systems Nigeria....Made in Nigeria Proudly Nigeria.
The mobile gun is an ideal anti-drone rifle that can be used when UAVs and drones are visually detected


The drone can be tracked even at long distances through a special binocular. When the UAV is located, the rifle and antennas with horizontal and vertical polarization are pointed towards the approaching drone and immediately block it....zap !! No this is not science fiction


PROFOCE ARA MRAP 2

Profoce Ara ''Thunder'' Mine Resistant Ambush Protected Vehicle.
WORLD
left lieutenant
left lieutenant
@Google_12point7
Bravery

6 May 17, I was privileged to fly on the last chopper that brought back the released Chibok girls. Seeing the girls - young, naive BUT broken, was a reminder of how cruel man is. When we touched down, I stayed with them briefly in the C-130 before the Abuja lap.


Military medics began basic checks, deworming them and tending their wounds. There was one particular girl who had lost a leg. She said the Air Force had hit BHT positions & during the strike she lost a leg. I stared at her, wishing it was a dream.

Sitting beside her was another girl - the bravest girl I ever met. For the purpose of this thread, let us call her 'N'. N kept a daily journal of what happened everyday at the BH camp. I snapped as many pages as I could. The girls attested that she was the leader of the pack.


Right under Boko Haram's nose, every night, after the terrorists had ordered them for 'lights out', she would organise the girls for prayers & morning devotion the next day. I found myself smiling sheepishly at this. This is faith. This is bravery.

When the medics were done & we were notified that the C-130 would depart for Abuja, N made a signal & all the girls sat up, crossed their legs & bend their heads. N led them in prayers. I would later learn that this was their routine when there was danger or the bombs dropped.
WORLD , WAR STORIES , WAR
Advertisement
Abir Ballan \U0001f60a
Abir Ballan 😊
@abirballan
Slavery by philanthropy. China offers help to Africa to gain voting power and maintain its hegemony.
@MichaelPSenger @stacey_rudin @randyhillier @katewand

"African allies -- which have crucial voting rights at major international bodies -- have arguably become an even more vital bloc for China to keep on side with its so-called vaccine diplomacy."

Why Does Wang visit African countries every year?


"According to the China Africa Research Initiative, Chinese loans to Africa dropped from $29.4 billion in 2016 to $8.9 billion in 2018."
"[Wang] postponed the repayment of interest-free loans from China that matured at the end of 2020"

When loans are postponed, this comes at some price; usually, its' sell your soul to the devil.
WORLD
Fed Min of Info & Cu
Fed Min of Info & Cu
@FMICNigeria
HMIC Alh. Lai Mohammed addresses a Press Conference on plans to return to Lagos - Lekki Toll Gate under the guise of #EndSARS protest.


PERPETRATION OF VIOLENCE UNDER THE GUISE OF #ENDSARS: NEVER AGAIN - FG

Being the text of the press conference addressed by the Honourable Minister of Information and Culture, Alhaji Lai Mohammed, in Abuja on Thursday, 11 Feb. 2021

Good morning gentlemen and thank you for honouring our invitation once again.

2.   As you may be aware, some EndSars proponents have given notice of their plan to return to Lagos - Lekki Toll Gate to be specific – on Saturday, February 13th 2021.

The ''Occupy Lekki Toll Gate'' flyers have been circulating online, with the proponents threatening that ''Lagos will burn'' again.

3.   Let me be clear: While peaceful protests are the constitutional rights of Nigerians, violent protests are not. At this time, the chances that any peaceful protest will be hijacked are very high.
WORLD
Gilad Isaacs
Gilad Isaacs
@GiladIsaacs
Why should we be careful when talking about a “jobs bounce-back” in South Africa? - A THREAD.

You don’t get better labour market economists in South Africa than the @NIDS_CRAM team, but the main finding of an “employment bounce-back” seems counterintuitive. What’s going on? 1/n

NIDS-CRAM does NOT show a rebound to pre-COVID employment levels. They report 700,000 job lost between Feb and Oct 2020, this is massive = 3.85% fall (broad definition). The authors of the employment paper say this could be as high as 5.3% or 960,000 jobs.

The authors @joshbudlender @ihsaanbassier (+ Rocco) also show that Oct employment is normally higher than Feb employment, super roughly Oct is plausibly around 102% of Feb. This means it’s plausible 360,000 jobs would have been gained between Feb-Oct *anyway*.


This would mean - within the study parameters - it’s possible COVID has caused up to (an outer outer limit) of 1.32 million job losses when comparing Oct 2020 with what we would have expected it to be in normal times. This is a total disaster in the context of the SA economy.

This is roughly what we should expect from the StatsSA QLFS. This showed 2.2 million jobs lost in first half of 2020, and 543,000 regained in Q3, meaning a loss of just under 1.7 million jobs in first 9 months. We’d definitely expect some more jobs regained in Oct-Dec.
WORLD

You May Also Like

Filippo Valsorda
Filippo Valsorda
@FiloSottile
“We don’t negotiate salaries” is a negotiation tactic.

Always. No, your company is not an exception.

A tactic I don’t appreciate at all because of how unfairly it penalizes low-leverage, junior employees, and those loyal enough not to question it, but that’s negotiation for you after all. Weaponized information asymmetry.

Listen to Aditya


And by the way, you should never be worried that an offer would be withdrawn if you politely negotiate.

I have seen this happen *extremely* rarely, mostly to women, and anyway is a giant red flag. It suggests you probably didn’t want to work there.

You wish there was no negotiating so it would all be more fair? I feel you, but it’s not happening.

Instead, negotiate hard, use your privilege, and then go and share numbers with your underrepresented and underpaid colleagues. […]
LIFE
Trader knight
Trader knight
@Traderknight007
Pyramiding 2.0

A thread-


What is pyramiding?

It is simply adding to your winners.

Why use pyramiding?

1. It makes your winners bigger than your losers.

• Because you are adding positions when your trades are going your way, you are increasing your gains but your losers will be small comparatively.

2. You lose less during Draw-down time ( it saves you from losing big during whipsaws )

• Many times when the market is in sideways mode, Entering a trade with full risk might not be the best idea.

• So, you test the waters with a small position first, it could be ⅓ or ¼ of your total risk.

• So if the Breakout fails or whipsaws come, then you will only lose a small part of your overall risk.

• Then when position starts to go in your favor you can add to it.

3. It helps you to concentrate on a few trades,

They say that don’t put all your eggs in one basket, but don’t put them in too many either.

• See, Everyone can see charts and find breakouts, pullbacks etc.
ALL , SWING TRADING , PYRAMIDING
Advertisement
Vibhu Vashisth
Vibhu Vashisth
@VIBHU_Tweet
महाभारत की कहानी कौन नहीं जानता।लेकिन क्या आपको पता है कि महाभारत के ज्यादातर पात्र किसी न किसी श्राप में फंसे थे।अगर ये श्राप न होते तो कदाचित महाभारत की कहानी कुछ और होती।हिन्दु पौराणिक ग्रंथों में विभिन्न श्रापों का वर्णन मिलता है व हर श्राप के पीछे कोई कहानी अवश्य होती है।


आइए आज जानते हैं महाभारत कथा में वर्णित कुछ श्रापों के बारे में।

1) राजा पाण्डु को ऋषि किन्दम का श्राप

एकबार महाराज पाण्डु शिकार खेलने वन गए।झाडियों के पीछे कुछ हिल रहा था। मृग है सोचकर राजा ने बाण चलाया जो जाकर ऋषि किन्दम और उनकी पत्नी को लगा।वे दोनो रति-क्रीड़ा में लिप्त थे।

जब राजा ने उन्हें देखा तो बहुत दुखी हुए कि ये मुझसे क्या पाप हो गया।बहुत क्षमा याचना के बाद भी किन्दम ऋषि ने पाण्डु को श्राप दे दिया कि जब भी वो किसी स्त्री को काम भावना से स्पर्श करेंगे उसी क्षण उनकी मृत्यु हो जाएगी।पश्चाताप करने, वे सिंहासन पे अन्धे राजा धृतराष्ट्र को बैठाकर...


..स्वयं अपनी रानियों कुंती व माद्री के साथ वन चले गए।पांडवों का जन्म भी कुंती को ऋषि दुर्वासा द्वारा दिए गए मंत्र से हुआ था जिसमे किसी भी देव का स्मरण कर उस देव से कुंती,पुत्र प्राप्त कर सकती थी।एक बार माद्री पे मोहित हो जब पांडु ने उसे स्पर्श किया,उसी क्षण पांडु की मृत्यु होगयी।


2) उर्वशी का अर्जुन को श्राप

महाभारत युद्ध से पहले जब अर्जुन दिव्यास्त्र प्राप्त करने स्वर्ग गए तो वहां उर्वशी नाम की अप्सरा उन पर मोहित हो गयी। अर्जुन ने जब उन्हें अपनी माता के समान बताया तो यह सुनकर उर्वशी क्रोधित हो गयी और अर्जुन को श्राप दे डाला कि तुम नपुंसक की भांति...
ALL
Gal Gur \U0001f1ee\U0001f1f1
Gal Gur 🇮🇱...
@GalGur_
1/
Hello, my name is Gal,
I am an Israeli citizen, and I want to convey this urgent message to the world: Contrary to what you are told, Israel has not "returned to normal" in any way >>

2/ Moreover, despite the desire to create a setting as if there was a full and normal routine here - the Israeli Ministry of Health JUST RECOMMENDED TODAY TO EXTENT THE DECLARATION OF A “STATE OF EMERGENCY” in Israel >>

3/ to which is the foundation for coercion, violation of basic rights, severe discrimination under a "green mark (pass)", prolonged closure (Of about 5 months overall) and a lot of undemocratic and not “routine" restrictions. >

4/ If the situation in Israel had "returned to routine thanks to the astounding success of vaccines" then the "state of emergency" would not have continued.

5/ In fact, since the beginning of the "vaccination project" there has been only more intimidation and in many ways - even though the closure has been lifted, much more coercion.
TYRANNY
SK
SK
@sk_diary1
A #story from #Thiruvilayadal puranam- one of divine leelas of Bhagwan Shiva

#threadseries #madurai

Koodal Kaandam

Story 21 - it is about how stone elephant came to life and ate sugarcane - When Raja Abhisheka Pandyan met Ellam Valla Siddhar

கல்யானைக்கு கரும்பருத்திய படலம்


Raja Abhisheka Pandiyan went ahead to meet Ellam Valla Siddhar on the premises of the temple.On seeing the arrival of Raja, people surrounding Siddhar moved back. Abhisheka Pandiyan introduced himself to Siddhar &asked about his whereabouts.Also his purpose of visit to Madurai.

Raja asked why he performed magical acts, does he expect anything from him or people of Madurai.

Siddhar laughed & replied to Raja that he was from Kasi. He had heard a lot about Madurai in Kashi.Also told that this place is a Mukti Kshetram,so he had come to stay here.

Siddhar asked Raja if he has the capability &power to give anything that he asks for. Siddhar told King that he has power to do things even if he think of it.Siddhar asked King to ask whatever he wants & it would be provided, whatever these people had asked, they were granted.


Abhisheka Pandyan was shocked to receive such a reply from Siddhar,& he decided to test the power of this Siddhar. By that time, Raja saw a person in crowd having Sugarcane.

Raja took Sugarcane from that person.
ALL