So, the next speaker is Macdog, and he's going to talk about privacy, and so many of these
in a post-quantum-mopen world.
Can everybody hear me?
Good.
Who is Macdog?
I've been about a long time, but I'm not even going to worry about this slide.
You can read about it later.
But I want to talk about kings and surfs.
A king is a sovereign.
You people in Europe know a lot about that.
We had a little trouble with him, a person named King George, while back.
But kings tell this surfs what to do.
You know, the king owns the land, the king owns everything.
The king tells the surfs when to farm, how much taxes to pay them and stuff like that.
You get buried, and the surfs own nothing.
Now, here in the United States, or in the United States, we don't know that much about kings,
but we do know about slaves.
And in the slave, when you're a slave, you own nothing.
You know, you don't even, you told who to marry when to have children.
You don't have any food except that the master gives you slaves own nothing.
When you are close to his company, you and the masters.
You tell people where to put their software when to update their software.
When their hardware is obsolete, Windows 10.
How many people can use your software and when to retire your software, Windows XP?
Do you realize that there are over 12 million people still using Windows XP?
Yeah, they can't get rid of it.
They can't go onto something else.
They don't have the device drivers for their hardware,
and they don't have the applications for the software.
And so they're stuck still using Windows XP.
So close to his users or software slaves.
An open source is really not much better.
It's great for developers.
It's great for companies.
You can develop things faster because you have these large blocks of software that you can go and use.
You can integrate and change to meet your needs.
That makes it efficient for you.
But for the end user, you're still a lot of time stuck.
Because all you get is the binary from the company that uses the open source.
And so many of the determinants of closed source still apply.
Free done software is the path which is stolen when you've got them drunk enough with lament.
That it was, you made a mistake calling it free software because everybody thinks it's grottas software.
You know, in English we have this problem.
Free is in freedom and free is in grottas.
A lot of other countries and languages have it much better.
And when you have free software, you can put it wherever you want because you have the source code that you can compile for the architecture that you need.
You can upgrade the software when you want to.
And for as many users as you want.
And some people say, well, Matt, I don't have the expertise to do that.
You know, I'm a business person or whatever.
But you have all the ingredients and you can go out and hire somebody who does have the expertise.
To help your solve your problem.
So now it becomes a business question for you.
Is it worthwhile to live with what I have or do I spend the money to hire the expertise in order to get what I need?
But business people really hate the word freedom.
Politicians hate it too.
They don't like anything about freedom because that means that their customers can go off to a different way.
No off to a different, no vendor.
With freedom comes choice.
And with freedom comes competition.
But what business people like is the word control.
When they have the control of their business.
So you go out to talk to a business person about using free software.
You say, hey, you know, don't talk to nothing about the freedom part.
Think about the control part.
And they'll be much more likely to have it.
Now, in other words, it was being up lately as sovereignty.
I can't count the number of times.
You're at Boston.
I've heard the word sovereignty.
You know, and we think about it as country and country sovereignty.
We want to keep the data in our own country as sovereign.
Under our own laws as sovereign.
Okay.
And I have to thank Donald Trump for bringing this to the forefront.
Yeah, right.
But now the rest of the world needs sovereignty, okay?
But it's not just a sovereignty of the data like we've been hearing about for years,
but the sovereignty of the software.
Where does a company reside at owns the software?
Do they reside in California like a lot of them do?
Do they reside in the state of Washington like a lot of them do?
And can the United States government come along and say,
no, Cuba can't use your software.
I ran, can't use your software.
Or the international court can't use your software and I'm going to turn it off.
You can't live with that.
And sovereignty goes to also the design chain,
the manufacturing supply chain of your hardware and your software.
The users need to have control.
And now there's one more consideration.
I haven't heard talked about a lot in this thing.
It's quantum computing.
It is coming.
You know, and we need to take all the data which we've been encrypting for all these years,
using our nice encryption techniques based on prime numbers.
And we need to fix that because when quantum computing is here,
they're going to be able to decrypt using brute force.
These prime number, you know, algorithms in about 15 seconds.
And this also includes our VPNs.
There are algorithms out there now, which I'm going to say are quantum,
I'm not going to say quantum proof because I don't believe anything is proof.
But they're quantum resistant.
And we need to use these algorithms.
And we need to move towards multi-factor authentication.
We can't post our posted notes up on our screen anymore,
with our password on it.
Okay.
And we can't even use passphrases,
and we thought we're pretty good because they're susceptible.
And we don't have plenty of time to do this because,
oh, it's mad dog, quantum computing is 10 years,
no, no, five years, no, two years away.
No, because the problem is there are people going around stealing the data today,
and when quantum computing comes, they're going to decrypt it tomorrow.
And the secrets that you have in there are going to be just as effective,
just as valuable when they can decrypt it.
So we need to start doing this now.
Okay. You need to go back to your organizations to say,
the algorithms exist.
Let's start doing the work to do it.
This is just like Y2K, only worse, because with Y2K, you simply stop.
Okay.
We also need to work on encrypted VPNs, we call them QPNs,
because while your VPN is going,
the quantum computers are going to be able to decrypt it,
they're going to be able to get the keys,
and they're going to be able to tap in to your VPN.
So what cloud do you use now, and under whose laws
there's been a lot of talk in the opening keynotes of stuff about migration,
and all the stuff that's going on. Great.
I was doing this 20 years ago.
20 years ago, I was talking about the United States
and the fact you can't trust it.
Okay.
And I didn't even have Trump at that time.
You were still doing his apprentice program.
But you also have to look at your supply chain for your hardware.
What chipset do they use?
Where is it made?
And I can tell you stories about people and certain agencies
that dare not say their name, but they only have three letters in them,
who can go in and they can make a chip that looks exactly like the chip
that you think you're using, but it's not.
And they will intercept your board,
and they will replace that chip, and they'll send it on its way.
And now you've got a chip that they can crack into.
If you think I'm kidding you, I am not.
Okay.
You also have to look at things that you said your boot code.
You should boot code trust it.
You need to be able to look all the way down.
And again, you say, I don't have the expertise to do that.
My mom and dad doesn't have the expertise to do that,
but this is why we need a community of trusted people
to look at it and find it when it's there.
And today, thank God, we have freedom software.
And today, thank God, we have the RISFIVE project.
It was started at the University of California, Berkeley,
to give us the same BSD code, a lot of us depend on.
And now they've moved it to Switzerland.
Why did they do that?
I wonder why.
Okay?
They had their reasons.
But we need software and clouds.
Clouds where you need them and clouds that are built for security first.
By the very definition, the clouds we used today are not secure.
Because the first thing you have to do is to log into them.
That means that they're visible to the bad people
and they're visible to you.
And you need to have them in the location where you want them.
And you need to have the software under your control.
So, I am consultant for a company.
I'm wearing their badge here.
Q Sentinel, A.G.
They're located in Switzerland.
They have a data center.
There's a hardened data center in Switzerland.
They have missed approved quantum encryption.
They have open source.
They use next cloud.
And they have, and they're going to be using, I think,
Udu as the ERP system.
They have end-to-end security and sovereign AI.
What do I mean by sovereign AI?
If you use AI, the model that you keep applying your questions against
learns from your questions.
But that model is shared typically amongst lots of people.
So, in effect, those people can find out the information that you're putting,
that you're giving it, teaching this model from AI.
sovereign AI is one that has the model that sits isolated from everybody else.
When you query it, you don't give any of your information to anybody else.
You're a control of the AI.
You can create your own AI models.
But those are only seen by you.
And it's less than simple to your own data center.
So, if you have a data center in your country,
we basically create a container that can be plopped onto a
Lidic system, Red Hat, Susa, a Debian.
And that can become this whole system for doing secure, sovereign cloud.
Now, that was the product.
I'm going to move away from that now.
I'm going to talk about a community cloud.
In the year 2010, a man by the name of Ebon,
in Oakland, who was a law professor at Columbia University.
You may know him.
He wrote the GPL version 3.
Ebon is very concerned about security and privacy.
And so, he started a project called FreedomBox.org.
It is a tiny little server that sits on a single-port computer,
like this one.
This is a lab of door as part of the Kineena's Lucas project,
which I started back in 2012 to allow Brazil to design a complete
computer, design, manufacture, set up supply lines and things like that in Brazil
and in Latin America.
It's an open-source design.
It's available.
But FreedomBox can also work on Raspberry Pi.
It can also work on a bigal bones.
It can work on lots of different little single-port computers.
And you can also do backup from the little computer that plugs in your house
and runs at your house.
And you can send the data to a friend's system.
Many miles away.
So, in case it's a fire, a flood or earthquake,
or military comes into your house.
You have your status safe there.
It supports on top of this,
Fediverse DiParty Software.
So, diaspora and all of the things that we can reply
social software sits on top of this.
And all of this software, by and away,
is available in Debian releases.
So, it's easy to install.
It's easy to get going.
Now, with all of that, we have one last factor.
The one last thing that's missing.
And that's multi-factor authentication.
We need to get people to be serious about this, right?
Everybody knows, log in name, password.
You know, cat.
Okay, there's my password.
Great.
But that's not good enough.
Then we went to multiple, then we went to phrases.
You know, past phrases.
Still not good enough, because people can sit there
and watch which you're typing.
We need to have something that's really secure
and multi-secure.
So, my laptop right here.
I can't, this is my laptop, but my laptop right there.
I type in my password, but you also have to have my hardware key,
which I have to plug into it before I can.
Use it.
And then, if I go to a library, for example,
and I'm using a library computer,
I can use this key to access my Google account,
if I went to, or any other thing which has
recognizes the standard software that goes with this.
You know, you can do fingerprint.
I don't like facial recognition because my beard is here
and it hides most of my face.
But geographical oriented time oriented day,
oriented all these type of things,
or multi-factor authentication.
If you do get it hardware key, you really need to.
Because if you lose one or stolen,
you need to have the other one along with your mother,
or in a safety deposit box,
because you're not going to be able to get into your system.
And you need to have it have a standard, like,
or two, so where's the cost of wide variety of cloud projects
and operating systems and things like that?
And I like it to have an open design for two reasons.
It has to be inspectable.
You have to be able to look at it and make sure
that there's nothing hidden in this.
And it has to have a long life.
So, I've been working with a company called SolarKeys.com.
In 2001, they came out with a very nice key set.
They were hit by COVID, they were hit by supply chain issues,
and stuff like that, so they kind of fell behind,
but they're starting to get back up again.
It is a secure key.
They also have a hacker version, so you can do your own work,
and you can hack your own code,
and stuff to put it into the key if you want to.
And then you can tighten it down to lock it down.
It is vital to compliant.
It works on a wide variety of different operating systems and applications.
With that, I'm done.
Any questions?
Yes, sir.
I'm just going to let you slide to the subordinate.
How do you see identity?
What person will date to identity?
Does that mean you sort of like, when you see the brighter?
Well, again.
Oh, let me see if I can repeat it.
With sovereignty, what do I see about, I'm sorry, you say it again?
Okay.
So, in the secure Sentinel, it's really for a company, a corporation,
and one of the things about huge Sentinel is that it's invisible from the outside,
because it uses the QPN to communicate between the cloud and devices.
So you have a systems administrator who actually sets up the accounts,
sets up the devices, makes that connection.
It's not the device that connects to the cloud.
It's a cloud that connects to the device.
That this is obviously for company and institutional sovereignty.
And that is where freedom box comes in.
For your personal stuff, keep it on freedom box.
And freedom box can either be your own personal server,
or it could be a community server,
if you add the Fediver style party software when top of it.
Okay.
But that's where you keep your personal stuff to my things.
Cat pictures, you can still send this to Google.
Just keep sending this, cat pictures to Google,
send them to Elon Musk, I'd like them to be in a day with cat pictures.
Next question.
Okay.
Thank you very much.