Dear viewer, these subtitles were generated by a machine via the service Trint and therefore are (very) buggy. If you are capable, please help us to create good quality subtitles: https://c3subtitles.de/talk/1192 Thanks!
[Music]
thank you
[Music]
okay our next speaker is from Munich
his name is burnt bezo I'm a French I
have to fly out to the French way paison
I suppose you say that in German
normally I pronounce it in French as
well okay
uh he's gonna present his own project
of a shared Cloud environment in fact
Okay so
please let's have a big hand for Mr band
from mute
[Applause]
okay my talk is called Cloud collapse it
looks like a fridge scent that is uh
mean coming from Google Plus shutting
down and then they had some
hiccups right after the announcement
when you load the Google Plus page
you've got an empty page and it said it
looked like you have reached the end so
that's what will be true in April you
really have reached the end on Google
Plus and you've reached the end on other
clouds as well so what I'm talking about
is now what to do with your data
and I want to say one thing about this
Cloud clouds Cloud calyps that is very
commonly used for this kind of problem
in the clouds where this very bad Creek
because apocalypse means uncovering it
does not mean any catastrophic it's just
uncovering and so what we really mean
when we want to say it in Greek is a
scenario catastrophe
uh Xenoverse cloud and catastrophe you
know what it is that made it in the
English as well so Cloud collapse is
very bad Greek but it has been
translated in the cloud I suppose
so
that's that's how it's going on so this
is a pretty dark picture there's a
tornado and the lightning and the people
in the cloud are here in a farm land
they're probably playing FarmVille on in
cell cloud in Facebook or so so
uh
tornado creates a lot of Chaos
and
what do you do so
let's talk about why I'm motivated to do
this thing now the internet is bad
gateway we have a lot of travel in the
internet
let's see what we have kind of political
problems five years of the Snowden we
have this EU Parliament they did uploads
in the filters linked taxes and of
course they want the upload filters to
use to filter terrorist Contents I don't
know what terrorist content is but say
seem to know
and the Germany runs a cybered
Administration like the Chinese CAC or
kak and
as we often say that this median starts
if you publish something on the Internet
you are treated like a TV broadcaster
and that means you have to go to through
many bureaucratic groups that is the the
problem is to really do it and we have
all this requests for back doors please
backdoor Vector here vectors there
Vector in 5G Vector in any uh chat
program whatever
we have a progress on the political
political side the echr ruled that the
gchq Dragnet surveillance
actually violates your right and my
project Netto becomes more and more
useful
and still not finished still not
polished still not perfect but the top
layer is going on
so what is a cloud calyps uh Cloud
eclipse what what goes wrong so clouds
are failing here you see a bubble
diagram of world's biggest stage of
breaches and hex inside the clouds and
this one was starts about 2010 an
evolution failures failures little
failures and bigger bigger bigger bigger
and now you have each of the big budgets
is about half a billion of triply
affected so yes the cloud looks darker
and darker and darker in this falling
apart
what kind of cloud failing events did we
have last year something like did
Microsoft spot GitHub so it's not
failing but it's now owned by someone we
don't like or many people don't like
that one was easy you can install gitlab
and
Dropbox dropped the Linux client except
for X4 unencrypted and the explanation
is somehow weak
uh
if you're done now is that uh
Condoleezza Rice is in Dropbox
management you maybe think they are
stupid but I don't think they are stupid
this is on purpose
Facebook had so many scandals that I
have a little
literature link Heiser made a special
look back on the Facebook scandals the
year in Facebook was very terrible
plus had some similar problems in their
apis it affected both users so and they
are not adding it down one of the users
was me and so I thought what to do with
with my data so that started this sub
project of network
deleted all pawn which means there's now
one percent left of the contents of
Tumblr
and yeah the last last one is what I
just made up you can't date on Tinder
anymore because stating while it's
Facebook policies the second part is
correct Kinder uses Facebook login so
they have to somehow
get over that uh
on Facebook it's not allowed to date so
when you use the Facebook login to go to
Tinder and share your Facebook account
and so it's probably also not a lot so
in the purpose of Tinder of course is
not to share cat photos
if you have any questions about that
what are the root causes of this clouds
failing one root cause this is at the
advised Revenue model is toxic
inherently I will come to that next
Slide the next broadcast is the user
plus password authentication that is
that is all these data breaches that is
it just doesn't work people take one two
three four five six seven as first one
so and they will continue to do so
this doesn't work and the main root
cause is your data is on someone else's
computer not on your own computers not
under your control
and it's under control of a big company
or as we see in a Federated system under
a small company a small person is the
same problem on different scale
so why is it based
Revenue by the device a toxic so they
have first of all they have the
incentive to keep you on the side and
they do that by
xkcd3h6
are you coming to bed I count this
important what somebody is wrong on the
internet so when you have a
controversial discussion you will be
engaged you will answer that you will
comment you will write back and forth
and that will keep you on the side so
that's why you don't have the dislike
because if otherwise if you have a
controversial discussion you just hit
the dislike button and forget about it
well now you have to comment if you
dislike setting
and the incentive is also to make your
easy target of manipulation because
that's what they sell is ads and that's
the worst fake news they have
the ads don't tell you the truth that's
one to manipulate it to buy something
and they want to get a lot of
information about you because they think
then they can tell that it's at a higher
price because targeted ads are more
expensive than untargeted ads and so
they want to know everything about you
to meet their creepy business model
make your post about your private things
not the Tumblr and Tinder Way but the
not the private parts the private things
the things they don't know about you
easily
on this kind of social networks also
think yeah it's a good idea if the
people are already weak and easy to
influence I become influencer and make a
lot of money
so all these strikes the entire social
network seen into this
ad based business when you go on YouTube
you have a lot of influencers maybe you
don't because you go to YouTube to see a
chaos computer videos but you don't
please don't go to YouTube go to secure
the CCC media center
and you should be aware that this is
nothing new is a problem this is NTV in
general this is
very old the problem so every news title
wants to do the same thing with you
so
zombie season centralized is has
problems it has its good parts
because centralized means there's good
fundings there's robust Hardware
there's a lot of protection against
attacks
and yeah the downside is you don't have
you you give away your privacy it's a
Honeycutt for everybody who wants to get
one billion password combinations it's
captive because it runs the tuck you in
and when it's not generating enough
revenues the CEO just will shut it down
and all the time you invested in it all
the contents is going away
and yeah there's a censorship problem
uh all this big
Powers want to sensor something so here
in the west we have copyright best
sensors because our power is the people
who are own things
and the Far East is political censorship
because their political still is more
powerful
and then you have all this weird nipple
censorship
with some some religious issues
and he has this
toxic business models that is bad on
Decemberists you can go Federated let's
say you leave cookie Plus for diaspora
many people do so
and it has
the big Advantage is not actually
captive because the small business
operating this diaspora server
it's cheap and they don't really need a
lot of money to do so I think the plasma
people
told us you need about two cents per
month end user to operate such a thing
so it's really cheap uh the censorship
becomes more regionally
so
in in parts of savage for example in
Japan lonelycon is okay
is a Dropout of a previous censorship on
porn
and the Japanese government said okay we
messed this up so we don't sensor again
because that will move the people to
more weird uh fetishes and
just just allow it this is our fiction
is it's just images painted by some
artists nobody is harmed by this
lolicans
but in the rest of the world there's a
child Pawn
especially in German so the
the masterton now it's not a big search
in from the slowly Community because
they use mustard on this to post their
stuff
and these are isolated to Japan you
can't
get their feeds on European American
service so you have blacklisted notes of
regional censorship instead of global
censorship you can't do lolicon on
Facebook on Twitter so that is why they
came to masterton in the first place
is bad because these are operated by
small business or by private persons and
the problem a flag of privacy is the
same as above because it's all public
postings and the end of life is
uh
now it's event of the note admin of the
particular note so if you sign up on the
notes it goes down next week you lose
all your data just because it may not be
even announce an announcement to when
they shut down it's just dropping
shutting down
so third possibility is peer-to-peer
so you have full control over your own
node
and you have pretty good privacy because
you can limit who can access you
and the funding is mostly development
funding because operating of a
peer-to-peer network is very cheap it's
you you operate it with your own
computer and you need your own computer
anyhow or your own mobile
whatever
uh the plus minus either said
peer-to-peer networks cannot really
censor
so
the best thing is yeah we don't really
want censorship the downside is it
attracts the people who are refugees
from censorship first
and so maybe the contents looks all
lolicons or terrorists whatever people
fly from the censorships whatever ugly
things are there will come in early
that is actually a problem because that
shapes a mental image of of such a
system to people so when I want to make
this a friendly place
non-existent censorship can be a problem
and also the trials the people who
whose communication patterns so either
that you cannot really tolerate them
they will come
very early as well
say
get kicked out of the other places so
they come as refugees you need so you
really need to do this full control of
your notes it can kick out people you
don't like kick out content you don't
like the the therefore the downside that
you have for the upside that you have
full control note is mirrored by the
downside that you actually have full
responsibility for your own notes what
do you do on your thing there's nobody
helping you it's you
so what is about is taking out
fortunately we have the article twin
tgdp PR
you can now legally take out your own
data and the big cloud providers are
obliged to help you
they sometimes they provide something
like cluster and still the situation we
still have is not very good but they
have a duty so if they are too bad and
that you can talk to some official and
have said regulate it put a bit more
pressure on that taking audio data is
important so you want to suck in your
data they have this big tornado
to take your data but
to get out you need help maybe from the
government finally
so
what I'm doing is net2o
and if you want to start have a look
over this
lower
six layers of five layers you best go
towards the 31 3C talk on my home page
I'm talking a lot about the technical
details here I'm talking about the app
level details about how how to take in
your data
not about so much about the packet
formats encryptings and flow controls
the command language and the distributed
data a bit about that because that is
needed for implementing net to O
social networks so today will be more
mostly six and seven and not the other
sticks
so let's start with the takeout you go
to Google Plus was the first thing I
wanted to take out so you on Google you
go to take out.google.com settings take
out and
they always localize everything for you
including the file names in the zip
which is offer and so you will select
nothing only the stream data of Kodi
Plus
and then you have to go through
this all is HTML by default the HTML
HTML HTM you have to change that to Json
because that HTML is not possible let's
say produce very ugly HTML please use
Json
the Json is not perfect
but it's much better since the HTML so
let's look at how does this Json look
like this is a real posting and you see
here down here they have this weird
Unicode escapes format says what's this
so I decoded that for you
that is just HTML
angular brackets so
what you have is you have some anchor
the URL where you find it on Google Plus
until April and later you won't find it
anymore you have a creation time you
have an update time unfortunately you
have no editing history
yes and also which is always for Tuple
so you have display name profile page
you URL Avatar image URL and the
resource name of this posting I just
somehow written and because the URL
as the results as well differently
encoded of course but it's the same
thing and they also yeah that this
professor's name of the author
it is sometimes plain text you can ask
for your own names there or you get that
number encoded in in something like base
64 or whatever that is
and then you have the content that is uh
very limited HTML because Google Plus
does not have so many formatting options
and just power it you have you have some
links in there
let's color it down
and your
you have
things like link when you have a link
when your first sensing I want to show
you this link on the internet you get
the link
and then you have all these
plus one as
the people who like to post things they
like like the author all the details are
in sales you have a lot of redundancy in
inside of this database
situation thing you have to make sure
that is just the same person always
nope
and here in this part in this example we
don't have any comments
uh but normally I have always a comments
the comments what are lacking the plus
ones
you don't get the data of the plus ones
and the plus ones are lacking the
timestamp so you don't know when when
the people like that this is there is
the details that are lacking in it I
want to take out what Cookie doesn't
give me
so let's look at how does the
computation doses if you have Facebook
uh
the time stamps are no longer a human
related researchers seconds since Unix
times 10 seconds I like that because
easy to pass
and yeah you don't have likes and uh
you have comments here you have a
timestamp for the comment I don't want
to scroll
turn on the skip so
you have your data
description in the tourist study
in this case because that's a video
and it has a little oh my presentation
crashed [ __ ] so let's go pick
to the Facebook takeout
then we go to the Twitter takeout a
treat using as a small thing it's just
280 characters now maximum but they have
a very complicated way to describe the
things inside the tweet so when you see
the Tweet itself
please
the Tweet itself is successful text here
it's very short
but they give you a lot of meta data
about that they say who is the user ID
what did you reply to when did you
create this where exactly is the
substring you need to highlight as a
hashtag or as a user ID and
that's the screen name of these people
you can do make some use of set so you
this is not too bad it just blows up the
the archive but Google Plus is much
worse with blowing up the archive size
on average every image you posted there
you get in the take out three times on
average they don't deduplicate these
images they just
push them to you three maybe four times
on average so and images are big and
people are on Google Plus often use the
first images because it was a great
function Google had
done right and so many photographers
went to Google Plus posting a lot of big
images and then they do the take out
they get the images three to four times
uh if you do blogging on Google blogger
is still alive but it looks like 10
years ago so they are not doing anything
on their blogger and maybe they are
shutting down at when they want to
I don't know if I bought it in the first
time when they don't do anything new
with it but yeah that's it Google
so you might want to take your vlogger
first thing out it's not
Jason it's an atom feed so it's XML
external is okay
we can pass XML easily it has a
reasonable metadata structure not too
much
I get all the actual content and it says
the metadata is okay so it's not too
much and the content is HTML you have to
deal with HTML that is not a big problem
as well
so
what do you need to program for this
Imports if you want to import the people
into the Explorer you have to do the
same things as I do so you have you need
a chasing parser
you need an XML password
HTML parser and these are all parts
which are either easy to write or
in in many Frameworks you just touch
them
so
you'll need this shimas first first set
you don't want to take anything in you
want to know what you are taking and
and in Metro you need an HTML to
markdown converter in diaspora same
thing because modern Frameworks often
use markdown turned your HTML
and you need to downloader for some
missing parts because the archive does
not really contain everything
further in Google The Avatar photos of
all all these thousand people that
commented and plus went all your
postings the Avatar photos are not in
your takeout
the honest string names
so but you have to URLs you can collect
them all and you can download all these
avatars
and what you need to do in net to all
particularly you need to assign a
temporary secret key for all those
presents because in net to O A person is
identified by a key a Pub Key
and you don't know the the real person
is not importing your data you are
importing the data so you have to assign
a temporary secretary which you hand
over later to the person if they join
that Network
that's it
is how then does the Social Network look
like is implemented in it so so you have
text as markdown
no big deal
you have images as JPEG PNG no deal at
all
you have movies as MKV veteran
some deal because also is multimedia
streaming apis like gstream or on
Android ah
I want to have opengls back end so I
want the thing to render in the into a
TL texture that is one of the easier
things they can do so it's not a big
problem if you want to embed it in your
browser you need to hope that the
browser supports all this stuff
usually it does
so that's what you want as a status
formats
and not to all the structure for
something which like a timeline is a
Chat lock engine already so you have a
chat app you can add interest to your
chat log chat logs can be synchronized
between instances if you have duplicates
they don't get they get deduplicated
they don't get copied if you add newer
things the chat log has a mechanism to
spread that out through peer-to-peer
Network
so
that is all there that is working well
and the timeline just as a check log
with maybe one line of your posting and
the link to a dvcs project dvcs means
distributed Version Control System
so
like think like git but minimized to the
features you actually need for simple
things you don't need all this fancy
stuff is skipped and it has 100
different commands and each command has
at least 20 different options now you
don't need that what you need is
patches diffs
matches farts that kind of thing is what
you need
and that's
what I'm giving you a net as well
no need for for big things but small
things are very important you want to
edit your first thing after you did it
because usually you write your first
thing you look through it you fixed all
the typos then you press send and then
magically a typo appears in the title
right in the first word
and you want to fix it because it looks
really like you are stupid
and
therefore you need a version control
system in
and yeah so a dvcs project how is it
structured it's a chat log again because
all this thing is recurring now it's a
check-in look it's a Chat lock and its
check-in has either attached set or
snapshot
and
now this is not difficult to build that
data structure
uh know if this actions on your
on your postings actions is a typical
actions to Reacher your retail you add a
message yourself
you put it into your own timeline so
that is a fork of the DC dvcs project
you add another postings to it
and you put your log message into your
own timeline a comment is the same but
you
you kind of make a prerequest which is
probably ended automatically so you put
the load message into the original
project
lock
and what you can do with that you can do
both something you can't do on Google
Plus you can say Okay I want to write a
comment and I want to reshare that
comment
uh as a
social networks has this sort of
functions where you have read the
discussions or they only have three
share function something like Twitter
where you have comments and research
look a bit different but essentially are
the same it's always a public posting
that refers to the original posting
uh and you probably want to have likes
so the light is a jetlock message into
the DV CS Project without link or
anything just this one character for the
summed up of a plus uh what what you
decided to have as your like
or maybe a dislike as well because you
don't want to have the people to comment
on bad postings
that's how it's supposed to struct to be
structured and
what's missing now
because I'm not finished
the shutdown was announced in October
and I wanted to present it here and I
wrote code code but I'm not fully
finished I still have things to do so
the bike important for Google set is
almost finished it is just not tested
with all my 3000 postings it's tested
with a few important toastings where all
the challenges are inside
and what I need to write as a biking
folder for the other big things like
Facebook Twitter blogger if you have
suggestions Instagram maybe Tumblr
now these are not so difficult to write
an imparter the formats are very
relatively easy to deal with
it's only that you have to put all the
infrastructure in place that you can buy
you can import these things
I want to use avatars to display user
idea at the moment I just take a screen
name
I need a markdown renderer in letter O
but that what you see here is a
presentation using the user
interface from it also
actually there's not much to do here
this is markdown is very easy to pass
and the rendering is already in place
and works
Urban viewer movie players that is
needs to look nice if you if it doesn't
look nice the people will not post your
photos on on the social networks that is
one of the problem I have is diaspora
the the backend maybe is okay but the
display does not look like Google Plus
published it needs to be polished if you
want to have photographers inside these
are people who think viscerally have
artists
mind and they don't tolerate when it's
ugly they just don't tolerate it they
don't come to you that is why they
didn't come to Facebook Facebook's album
viewer is just ugly
it's too ugly for these stupids
uh the key hand over
to contacts needs to be programmed the
infrastructure is there but it needs the
actual details needs to be programmed
and I need to mark this important key as
non-trustworthy they are not the
original person not the real person and
all the content that is coming from this
person is not authentic it's coming from
Google they could have messed up the set
in any possible way you don't know
so
in that to all you every comment every
chat message every posting is signed by
the person who did it it's authentic so
this was a good cryptic system thus it
ensures authenticity it's inclusive
privacy because it's encrypted it's just
that it's Integrity because the hash is
correct and it's authentic said it's
really coming by the person who controls
the secret key but here's the imported
case is not controlled by the person who
owns that posting
so it's not
authentic it's not trustworthy and I
don't have any mechanism for that at the
moment because normally in in a secret
secure system you know
only as a person
who has the cake can sign it here it's
not the case
so
the last thought I'm good in time the
last part is a non-technical problems
the one
problem if you move from one Community
to another is what to do with your
contacts if you loosen all you are in in
this uh to user Google Plus uh
style uh Ghost Town wasn't really a
ghost town but it it didn't have so many
people inside you had to look for them
but
when you don't get your contacts over
you are in a ghost town you're just only
you what's the point of the social
network with only one person no point so
uh a related problem is how to make
social networks nice places and the app
based revenue is actually working
against that so they don't want to make
it a nice place they want to make it a
place where you are angry enough to
reply but not angry enough to leave
it is a very same limit they have to
dance on that volcano
oh
and at the moment I find net to earn by
using my technology especially the user
interface technology to get some
contracts
totally unrelated to peer-to-peer
networks but interesting contracts and
maybe I should think of some other way
of funding it I don't know
uh
when a lot of people use it each person
needs to give only very little money to
fund it or maybe only a few persons need
to give some money and most of the
people can use it for free that is the
ideal world I don't want to sell a big
thing because that would give me that
toxic
kind of business model
so I'm done
you have literature and links
the most important at least the other
one likes XKCD was embedded in the
presentation not when you want to know
more about Network on my home page watch
previous videos read some documentation
if you want to know what's his biggest
data breaches are really here is the
link and if you can read German and you
want to see how many bridges of source
where Facebook only that they're on
timeline
and that's the QR code of my net to o
key in the inverted format because I had
to shift to night mode here
with my presentation all slight Stark
normally that is inverted and the
cameras have a better to a better job
when everything is bright and not dark
so
we have time for questions and answers
well thank you burnt
wow thank you
[Applause]
okay we still have about 10 more minutes
I'm sorry I have to do this because I
don't see against the light
are there any questions the mics are
open
um yeah I think no oh there we are
speaking to the mic please go right to
it like I'm doing it's okay yeah
um I have one question regarding the
security of the note because you
mentioned the security of the big
Central model I must rely on the
operator on the
um decentralized I must rely on the
administrator of the pot but on the
small net tours I must rely on my own
yeah that's what I said it means
responsibility but the tech Vector on
your side is always there so if you if
you go to Facebook to Google Plus your
own computer can always be hacked
that attack Vector does not go magically
away because you go to the cloud
so
on your side I have to take care with my
implementation that it's robust and
secure and that you can use that as
normal person without
having a too big attack Vector but the
attack Vector never goes down to zero
some evil mate can come in and
compromise your laptop first install a
key Locker on the keyboard and then in
the second visit your set keylogger to
extract the password for your hard disk
and then decrypt your hard disk and
install different programs that kind of
things is
totally Out Of Reach for me that that
kind of preaches that is
in your responsibility
but your that is an attack vectors that
can be done anyhow so that is why they
have this back to us this trial and
horses the state troians they want to
install on your laptop on your
smartphones that kind of thing I thought
people have to fight that is not
communication on the network so this
your device security and that problem is
always persistent that is that does not
change when you use a big cloud it just
makes it easier with the big cloud
because now you have this big company
which has to comply to all kinds of laws
in the region when you get an NSL
Natures National Security letter uh
Google has to collaborate they are
present partner Facebook is prison
partner Twitter is frozen partner
Microsoft they all have to collaborate
so but U.S is another person you don't
have to collaborate they don't they
won't ask you they will break into your
computer maybe you can do some things to
prevent that other people may give talks
here to help you but
that is out of my reach and that is not
changing when you change from big cloud
to small Cloud to peer-to-peer that's
not changing
yeah as they say
the network is not secure but your
computer is your business yeah yes I
mean my device is my job
um I have a question how many
how big is your crowd until today at the
moment that's all is still in small
development I have a few testers we
regularly use the chat app to chat with
each others that are four to five people
who are regularly some on my contact
list I have about 30 people who tried it
so it's small at the moment it's really
small and to step in I said it's okay
because my testers still find bugs and
send me reports and keep me busy
and I want organic growth so I don't
want to this is the most nightmares when
I'm ready in April and all of Google
Plus all 300 Millions to users come in
that would be too much
so Draw Slow get the technology robust
and stable and then grow organically I
don't want to be the fastest growing
Network in the world that would be
very difficult to handle in French they
would call that ambara delicious
embarrassment of witches yeah yeah okay
um
any more questions
the mics are open
no well in this case
um as I understand it you're happy for
beta testers aren't you yeah so if you
feel free
there's a stream you can always if you
don't have your camera with you you
haven't taken it down always look at the
stream yeah
and I'm on the tour on the table right
over there in the corner just over
around here next to the stage when you
have questions to me you don't want to
talk in public go there
right at the corner with the robot
playing and the LED lights and just
there
okay as let's have a big hand for Bank
peso
[Music]