►
From YouTube: A better web - with Brave, AlphaWallet and Blockchain
Description
• 00:00 First talk • 35:40 Break / Food • 59:30 Second talk
Browsing the web safely and securely is something most users don't want to think about, effectively deferring responsibility in lieu of learning something new and changing habits.
Both data and financial transactions are prone to exploitation/attack given the value they hold, so our two speakers will share the technology working to make browsing and transacting online safer and more secure.
• 00:00 First talk:
Yan Zhu - Chief Information Security Officer - Brave Software
- Presentation: Saving the web with Brave and BAT
- Q & A
• 35:40 Break / Food
• 59:30 Second talk:
Weiwu Zhang - Chief Technology Officer - AlphaWallet
- Presentation: Bringing blockchain security to Web3
- Q & A
Special thanks to this evening's venue host and sponsor: *YBF Sydney*
A
B
C
D
D
D
C
We
go
Thanks
cool,
so
my
name
is
Yann
I
run
the
security
team
at
brave
software.
How
many
people
have
heard
of
brave?
Oh,
my
god,
almost
everyone
how
many
people
have
heard
of
the
basic
attention.
Token:
okay,
almost
pretty
much
the
same
set
of
people,
which
makes
sense
because
they're
related
so
brave,
is
the
creator
of
the
brave
browser
and
the
basic
attention.
Token
we're
based
in
San,
Francisco
and
I.
Think
this
is
our
first
time
giving
a
talk
in
Australia
on
being
here.
C
So
a
lot
of
people
when
we
talk
about
brave,
asked
us.
Why
do
we
need
yet
another
web
browser
because
obviously
there's
Chrome,
Firefox,
Safari,
Opera,
Vivaldi
Links,
probably
a
bunch
of
others
and
kind
of
the
premise
of
brave,
is
that
the
web
is
fundamentally
broken
in
some
ways.
One
of
these
ways
is
advertising,
so
this
is
a
website
called
the
million
dollar
homepage
that
was
made
by
I
think
a
teenager
who
had
to
pay
for
college.
C
So
I
guess
like
these
actually
cost
much
more
than
one
dollar,
because
there's
a
lot
more
than
one
pixel
per
ad,
but
anyway
he
eventually
did
raise
1
million
dollars
by
doing
this
because
it
went
viral
but
yeah
so
anyway,
this
is
Oh
ad
funded
website.
It's
very
obviously
like
very
unpleasant
to
look
at
and
there
isn't
much
like
real
content
on
it,
and
so
this
is
sort
of
a
parody
of
what
many
web
pages
are
these
days.
C
C
So
when
you
go
to
a
website,
the
website
actually
goes
to
something
called
a
supply-side
platform
which
gets
the
ads
from
the
Ad
Exchange
and
on
the
other
side
of
the
exchange,
are
demand-side
platforms
and
that's
who
marketers
pay
to
get
get
onto
the
Ad
Exchange,
so
marketers
basically
make
bids
for
your
attention
and,
depending
on
who
bids
the
highest
amount,
that's
who,
whose
ad
gets
shown
unto
you.
So
the
key
point
here
is
when
you
visit
a
website:
you're
not
just
leaking
data
to
the
advertiser
there's.
C
Actually,
these
other
forms
that
are
getting
your
data
as
well,
and
that's
this
slide
basically
shows
the
same
thing.
So
when
you
go
to
a
page
there's
all
these
requests,
hundreds
of
requests
that
go
out-
and
you
might
wonder
so
when,
when
you
make
a
drew
quest,
what
amount
of
data
gets
leaked,
there
is
a
specification
for
this
called
open,
RTB
and
most
people.
Obviously
don't
read
deeply
into
this.
So
I'll
just
point
out
some
of
the
fields
that
are
in
the
spec.
C
So
obviously
there
is
the
domain
that
you're
visiting
when
you
get
the
ad
there's
all
these.
These
ideas,
which
are
used
to
uniquely
identify
individuals.
There's
things
like
year
of
birth
and
gender.
Your
IP
address
your
the
device,
ID
string
user
agent,
details
about
your
phone
device
and
sometimes
they
could
even
include
latitude
and
longitude
so
precise
location
of
the
person-
and
this
was
off
used
to
you-
know,
help
target
to
add
to
your
specific
interests
and
location
and
profile.
C
Besides
that,
ads
are
slow,
so
they
can
take
up
to
five
seconds
per
page.
They
just
can
include
over
100
trackers,
and
all
this
adds
up
to
bandwidth
costs.
So
$23
a
month
of
bandwidth,
can
be
used
just
for
downloading
ads
if
you're
not
using
an
ad
blocker,
and
in
recent
years
we've
seen
malware
spread
through
being
propagated
via
ads
and
as
a
result
of
all
these
things
who
here
uses
an
ad
blocker
their
hands
yeah.
So
pretty
much
everyone
uh-huh
at
this
point,
so
in
recent
years
the
ad
blocking
has
grown
really
really
significantly.
C
So
in
case
you
can't
see
the
x-axis.
This
is
2011
and
then
the
far
right
as
2016,
which
is
three
years
ago
and
I'm
pretty
sure
like
if
you
keep
going
it
just
keeps
going
up
and
up
the
orange
line,
is
mobile,
so
since
2015
mobile
ad
blocking
has
especially
gone
up,
probably
because
people
realize,
like
you
know,
this-
has
huge
bandwidth.
Costs
on
mobile,
so
kind
of
a
premise
of
brave
is
that
this
all
of
this
is
very
broken.
C
It's
not
very
friendly
for
users
ads,
don't
usually
act
in
the
interest
of
the
people
visiting
the
webpage.
So
using
some
clever
techniques
and
blockchain
we
can
do.
We
can
make
a
better
web
ecosystem
so
brave.
If
we
have
to
summarize
it
up
in
one
sentence,
we
can
say
it's:
a
privacy
focused
browser
that
tries
to
pay
content
creators
while
putting
the
user
first
and
paying
content.
C
Creators
is
important
because
the
problem
with
just
blocking
ads
is
you're
cutting
off
revenue
to
the
people
who
are
running
the
ads
right,
so
people
embed
ads
in
our
website,
so
they
get
paid
by
advertisers.
But
if
you
block
ads,
then
those
people
aren't
making
money
so
content
creators
have
to
still
make
money
somehow,
from
the
users
perspective,
there
are
some
benefits
of
brave
it's
faster
because
largely
because
we
block
so
many
ads.
It
gives
more
control
over
users.
So
I'll
talk
about
this
in
a
bit,
but
we
actually
have
a
setting
that
lets.
C
You
opt
into
privacy-preserving
advertising,
but
that's
not
the
default,
there's
better
security
and
then
finally,
there's
like
data
on
bandwidth
savings
because
about
blocking
there's
also
some
other
privacy
benefits
like
blocking
third-party
cookies
blocking
requests
to
trackers.
Using
these
tracker
blocking
lists,
it's
fully
open
source,
so
brave
is
based
on
chromium,
but
we
blocked
the
network
requests
to
Google,
so
you
can
think
of
it
as
chromium,
just
the
open
source
parts
of
it,
the
parts
that
have
Google
integration
so
obviously
like
you,
can
log
into
Google
and
brave.
C
But
by
default
we
don't
we
try
not
to
make
any
requests
to
Google.
We
use
HTTPS
Everywhere
to
upgrade
HTTP
requests
one
possible
and
we
try
to
block
fingerprinting,
which
is
a
method
of
that
websites
use
to
recognize
what
kind
of
device
you're
on
alright.
But
a
key
part
of
brave
is
solving
the
problem
of
web
monetization
while
putting
the
user
first,
because
that's
sort
of
the
problem
that
hasn't
been
solved
by
ad
blockers.
So,
like
I,
said
when
you
run
an
ad
blocker.
C
C
Eventually,
we
give
back
to
users
in
order
to
incentivize
them
to
try
out
brave
and
a
lot
of
that
ends
up
going
to
creators,
because
users
can
donate
that
to
creators,
so
yeah
your
C
20,
based
on
the
cerium
cool.
So
we
have
a
system
called
brave
rewards,
so
users
can
get
back
when
they
either
claim
a
grant
which
comes
from
the
user
growth
pool.
That
I
mentioned
on
the
last
slide,
or
they
can
earn
bat
by
seeing
ads.
C
So
a
key
part
of
this
is
when
an
advertiser
buys
an
ad
through
brave
part
of
that
ad
revenue
goes
to
the
user,
so
users
who
choose
to
see
ads
can
actually
earn
money
for
seeing
them
in
a
form
of
fat,
and
that
goes
into
their
browser
wallet
and
then,
when
users
want
to
spend
their
bat,
they
can
either
spend
it
by
giving
tips
to
publishers,
or
they
can
say,
I
want
to
auto
contribute
to
sites
based
on
how
much
I
visit
them.
So
there's.
C
Actually,
a
setting
called
Auto
contribute
where
you
don't
have
to
think
about
who
to
give
back
to
well
the
browser,
just
locally
measures
which
sites
you're
spending
the
most
time
on
and
allocates
that
to
them.
So
you
can
think
of
this
as
a
system
for
replacing
the
revenue
lost
by
app
blocking,
because
when
you
visit
a
site
instead
of
paying
them
through
seeing
ads
you're
paying
them
by
tipping
back-
and
this
is
all
opt-in
by
the
way.
C
So
if
you
don't
want
to
do
any
of
this,
you
can't
earn
rewards
off
and
then
it's
just
a
normal
that
blocking
browser
and
on
the
other
side
of
it,
websites
can
sign
up
to
receive
their
bat.
So
we
actually
collect
that
for
websites
and
then,
if
they
doesn't,
if
it
doesn't
get
collected,
it
goes
back
to
the
users
or
back
to
the
pool
that
it
came
from.
But
if
websites
sign
up,
they
can
get
their
bat
and
then,
through
our
partner
uphold,
they
can
convert
that
into
fiat
pretty
easily.
C
We've
been
getting
good
traction
with
getting
publishers
on
board.
So
just
this
year
our
biggest
publisher,
which
is
Wikipedia
signed
up.
So
now,
if
you
visit
Wikipedia
and
brave,
you
can
donate
tips
to
them
using
that
also
Dow
Jones,
though
Guardian
Washington,
Post
vice
and
some
various
other
sites.
C
We
try
to
do
this
in
a
way-
that's
not
very
intrusive
and
doesn't
take
much
bandwidth
and
also
has
some
like
privacy
benefits
which
I'll
get
to
later,
but
from
the
user
interface
perspective.
Ads
are
currently
just
these
system
notifications,
so
that
way,
we're
not
injecting
content
and
websites
or
making
like
the
websites
look
worse.
It's
just
this
like
completely
separate
notification
and
what's
really
interesting
about
this,
is
that
there's
no
network
requests,
so
we
have
a
cool
way
where
we
download
the
entire
ads
catalog
and
then
do
all
of
the
matching
locally.
C
So
this
ad,
that
you
see,
is
like
completely
loaded
locally
and
there
are
no
network
requests.
The
only
network
request
is,
if
you
actually
click
on
the
and
then
you
go
to
the
landing
page,
and
obviously
we
have
to
make
a
network
request
to
get
the
website's
landing.
Page
button
told
you
to
do
that.
There's
no
privacy
downside
because
we're
not
loading
anything.
C
So
oh
here
are
some
stats.
Currently
we
just
passed
nine
million
monthly
active
users,
mostly
on
mobile
over
8
million
bat
wallets.
On
the
publisher
side,
we
have
300,000
plus
verified
channels,
and
these
ads
have
been
seen
over
99
million
times
and
14
ish
percent
of
the
time.
People
actually
click
on
them.
C
So
our
goal
is
really
to
reach
people
who
wouldn't
otherwise
be
interested
in
cryptocurrency,
oh,
and
we
actually
just
launched
brave
1.0
right
before
I
came
to
Australia,
which
was
like
two
weeks
ago
and
chrome
sent
us
a
cake.
They
sent
us
a
cake
that
says:
congratulations
on
loading
brave
1.0,
which
is
very
nice
of
them
all
right.
So
the
next
part
of
this
talk
gets
pretty
technical
and
I'm,
actually
gonna,
okay,
plenty
of
time.
So
so
the
goal
of
brave
ads
is.
C
We
want
relevance
because,
if
you're
seeing
a
lot
of
ads
where
it's
something
that
you
don't
care
about,
then
you're
gonna
turn
off
ads
right.
A
lot
of
people
on
Facebook
used
to
see
ads
for
Amazon
products
that
they
had
just
bought,
and
so
that
was
like
a
pretty
bad
user
experience
because
you're
like
why
would
I
want
to
buy
that
I
just
bought
that
so
relevance
is
making
people
see
ads
that
are
they
actually
care
about
and
hopefully
are
something
they're
actually
interested
in
buying?
C
At
the
same
time,
we
want
privacy
and
by
privacy
we
mean
that
both
brave
itself,
the
server
that
brave
runs
and
advertisers
just
should
not
know
what
users
interests
are
so
buy
that
we
say
we
called
out
a
segment.
So
segments
can
be
things
like
cars
or
houses
or
medicine.
When
you,
when
advertisers
build
a
profile
of
you,
they
put
you
into
these
segments
and
what
brave
wants
to
do?
Is
we
don't
want
to
link
you
across
these
segments
yeah?
C
How
does
so
on
the
topic
of
relevance?
So
how
does
brave
pick
which
ads
to
show
I
mentioned
earlier
that
basically
for
privacy
reasons,
we
download
the
entire
ads
catalog
for
every
user?
And
then
we
do
local
machine
learning
to
figure
out
what
segments
a
person
is
in.
So
the
key
part
of
this
is
instead
of
being
this
surveillance
company
that
looks
at
what
websites
you
visit
and
tries
to
build
a
profile
of
you.
C
We
we
we
just
use
the
browser,
because
the
browser,
like
your
browser,
has
a
perfect
view
of
all
the
websites
you're
visiting
right,
because
you
can
go
to
your
browser
history
and
it
lists
all
the
websites
you're
visiting
that
data
doesn't
need
to
get
sent
to
any
advertisers.
In
fact,
like
that,
data
can
just
be
mine
locally,
to
figure
out
what
your
interests
are
and
classify
unit
segments.
So
none
of
that
data
needs
to
leave
the
device,
all
that
is
done
locally
and
then
one
because
we
have
the
entire
ads
catalog
already
downloaded.
C
The
brave
client
just
see
just
looks
at
what
your
interests
are
and
then
kicks
an
ad
which
matches
those
interests
and
shows
it
to
you,
and
the
key
part
is
like
none
of
that
data
has
left
your
device.
All
of
this
is
still
just
happening
locally,
all
right
and
then
another
thing
we
do
which
is
kind
of
unique.
Is
we
pay
users
for
seeing
ads?
And
so
you
might
ask
well
how
do
we
reward
you
for
seeing
ads?
C
If
we
don't
know
what
ads
you've
seen
right,
because
then
you
could
be
doing
fraud,
you
can
be
pretending
to
see
way
more
ads,
and
so
how
do
we
do
this
thing?
Where
we
don't
want
to
link
you
or
build
a
profile
for
you,
but
we
have
to
be
able
to
pay
you
for
seeing
that
ads,
that
you've
seen
and
we
do
that
using
magic,
okay,
cryptography.
C
So
this
gets
a
little
complicated,
but
so
we
use
a
thing
called
well.
Actually,
we
don't
use
playing
RSA,
but
RSA
is
a
good
example,
because
a
lot
more
people
are
familiar
with
it,
so
RSA
how
many
people
have
used
like
PGP
or
have
some
basic
familiarity?
Okay,
so
that's
like
maybe
half
the
audience.
So
just
as
a
refresher
RSA,
you
know,
is
a
public
key
cryptosystem.
So
there's
a
public
key
there's
a
private
key.
C
The
public
key
is
what
you
give
to
everyone
and
then
the
private
key
you
keep
private
on
your
device
and
so
those
the
first
two
lines
of
this
are
just
your
public
and
private
key
and
in
RSA
that's
used
both
for
encryption
and
for
signing
and
for
our
system.
We
also
have
this
thing
called
R,
which
is
a
random
number
and
M,
which
is
a
random
token
string
and
token
in
a
sense,
is
not
the
same
as
bad.
So
like
forget
about
that,
this
is
a
completely
different
token,
all
right.
C
Is
you
actually
get
the
server's
signature
over
the
unblinded
Geoghan,
so
that's
kind
of
diagram
showing
that
so
the
client
sends
applying
the
token
the
server
signs
to
blind
a
token
and
then
a
client
on
blinds
to
token
and
hasn't
unblended
token.
You
might
wonder
like
why
do?
Why?
Is
that
useful
at
all
like?
Why
do
we
care
the
the
reason
why
this
is
so
cool?
C
Is
that
at
the
end
of
this
process,
the
client
has
a
signature
from
the
server
over
the
unblinded
token
M,
but
the
server
because
it's
signed,
the
blinded
value,
does
not
know
what
M
is.
It
only
knows
M
prime,
which
is
and
multiplied
by
a
random
factor,
so
it's
completely
unrelated
to
M,
so
so
the
server
the
client
has
a
valid
signature
over
a
value
that
the
server
doesn't
know
what
it
is,
and
how
is
this
useful?
Well,
okay,
so
here
is
a
slightly
simplified
example
say
that
we're
trying
to
do
anonymous
voting.
C
So,
let's
say
like
we
have
an
election
system.
We
want
people
to
vote,
but
we
don't
want
to
know
what
parties
that
people
are
voting
for,
but
but
on
the
other
hand,
we
don't
want
people
to
submit
to
VIP
too
many
votes.
So
let's
say
we
only
want
each
of
you
to
submit
5
votes
per
day
and
we,
the
server,
should
not
know
which
5
votes
are
coming
from
the
same
person.
So
we
can
do
this.
C
We're
going
to
have
the
client
generate
5
tokens
every
day
we
can
have
the
client
log
log
in
and
then
blind
the
tokens
and
send
them
to
the
signing
server.
And
then
the
server
verifies
that
this
logged
in
client
hasn't
already
claimed
5
tokens.
And,
if
that's
the
case,
then
the
client,
the
server,
assigns
the
5
tokens
and
gives
them
back
to
the
client.
Now
the
client
can
remove
the
blinding
factors
and
get
these
five
signed,
unblinded
tokens
so
later,
when
a
client
wants
to
submit
a
vote,
it
can
log
out.
C
So
the
server
doesn't
know
it's
the
same
client
and
then
send
the
vote
with
one
of
the
unsigned.
So
I
want
one
of
the
signed,
unblinded
tokens
and
because
the
server
doesn't
know
what
the
unblinded
values
are.
It
doesn't
know
that
which
client
that
was
logged
in
requested
that
token.
So
basically
it's
like
this
unlinked
token
at
this
point
and
the
server
can
also
verify
that
it
has
signed
the
token.
So
it
can
verify
that
signature
to
make
sure
the
client
isn't
going
over
the
five
token
per
day
limit.
C
So
anyway,
this
is
kind
of
complicated,
but
the
result
is
that
the
server
ensures
each
client
can
only
vote
five
times
per
day
but
does
not
know
which
boats
are
coming
from
the
same
client.
So
we
call
this
authorized
but
anonymous,
because
the
server
does
the
signing
to
authorize
the
clients.
But
the
thing
that
is
submitted
in
the
end
is
anonymous,
and
so
this
is
kind
of
what
we
use
and
brave
see
a
bit
better
slide.
C
This
one
is
not
useful
because
it's
too
complicated
yeah,
so
basically,
this
is
what
we
kind
of
do
and
brave.
So
the
client
regularly
asks
for
sign
tokens
and
each
time
it
sees
an
ad,
it
uses
a
sign
token
for
authorization,
and
so
the
server
can
make
sure
like.
Oh
the
client
isn't
pretending
to
see
like
a
thousand
ads,
because
each
client
can
only
get
like
100
tokens
per
month
or
something
so
that's
kind
of
our
rate.
Limiting
for
for
ad
confirmations
and
the
server
validates
the
token
and
then
returns
assigned
payment.
C
Token,
and
then
clients
can
collect
these
payment
tokens
and
then
later
submit
these
to
redeem
for
our
actual
bat.
So,
basically,
through
this
process,
clients
are
submitting
tokens
every
time
they
see
an
ad.
The
server
gives
them
these
payment
tokens
equal
to
the
amount
that
the
ad
is
worth
and
then
at
the
end
of
the
month
or
whatever
the
payment
period
is
I,
think
it's
a
month.
It
might
actually
be
seven
days.
C
The
client
can
submit
all
of
these
payment
tokens
and
get
that
redeem
for
actual
bat,
and
we
actually
have
some
additional,
like
server-side
anti-fraud
processes,
to
make
sure
that,
like
there's,
no
bat
wallet,
that's
claiming
like
a
thousand
dollars
or
some
like
ridiculous
amount
of
revenue
from
seeing
ads
because
of
your
own
real
users,
seeing
ads
there's
only
like
so
much
money
you
can
make
from
every
month.
From
doing
this,
oh
yeah,
that's
our
CEO
Brendan.
He
has
a
brain
chair.
C
So,
if
you're
spending
like
three
hours
on
YouTube
and
two
hours
on
Twitter
and
you
spend
you
want
to
send
them
a
certain
amount
of
fat
based
on
that
time
split,
we
want
to
be
able
to
donate
back
to
those
websites,
but
we
don't
want
to
know
that
you're
spending
this
much
time
on
this
person's
YouTube
and
this
much
time
on
this
person's
Twitter.
So
this
also
uses
a
similarly
anonymous
thing.
I
see
there
was
a
question.
I
think
we're
gonna,
do
questions
at
the
end,
yeah,
which
is
coming
up
the
end
of
soon
yeah.
C
This
is
users
analyzed,
but
the
slide
isn't
relevant.
Cuz
I
think
we're
getting
rid
of
that
yeah.
So,
as
you
browse
brave,
keeps
this
local
table
of
how
much
attention
you've
spent
on
various
websites.
So
in
this,
like
extremely
boring
example,
you've
spent
sixty
percent
of
your
time
on
brave,
calm
and
for
some
reason,
the
other
forty
percent
of
your
time.
You
are
on
Braves
YouTube
channel.
C
So
we
keep
that
table
and
then
let's
say
you
spend
five
pound
a
month
and
you
say,
just
you
know,
pray
figure
out
how
much
to
give
to
all
the
sites
I've
spent
yeah.
So
we
divide
that
you
know
sixty
percent
of
five
I
guess
it's
three.
So
we
would
give
three
back
to
brave,
calm
and
two
back
to
brave
on
YouTube
using
these
anonymous
surveys.
So
yes,
oh
yeah,
and
then
everyone's
happy,
cuz
Brendon
has
given
you
that
that's
pretty
much
it
oh
and
I
have
one
more
plug,
which
is
mr.
C
bill,
who
is
in
the
audience
and
I,
and
some
other
people
are
playing
the
show
tomorrow
at
the
lair.
This
is
electronic
music,
not
cryptocurrency,
so
you
should
go
yeah.
Electronic
music
bangers,
yeah,
there's
out
the
sky.
Prowl
plays
drum
and
bass,
yeah.
There's
everything
you
know:
you'll
love
something
I,
don't
know.
C
Yeah,
so
that's
a
really
good
question.
We
try
to
time
it.
So
we
try
to
do
this
thing
where
we
look
at
like
how
much
time
do
we
have
to
put
in
between
requests
such
that
we
can't
tell
that
people
are
coming
from
the
same
are
like
the
same
user.
So
obviously,
if
you
submitted
all
your
votes
at
the
same
time,
it
would
be
obvious,
like
all
all
the
votes
are
coming
from
the
same
person.
So
that's
why
we
add,
like
a
random
delay,
to
make
that
less
likely
and
I'm
for
IP
address.
C
We
don't
have
a
great
answer
so
currently
we
we
use
a
fastly
proxy,
so
the
brave
server
itself
doesn't
see
the
IP
address,
but
but
that's
not
ideal,
because
if
we
go
to
fastly-
and
we
say
like
show
us
the
IP
addresses,
then
it's
the
same
thing.
So
that's
what
we
do
currently,
but
ideally
we
could
like
use
tor
or
something
you
know.
Heidi
IP
is
yeah.
Sorry
I
think
you
were
second,
oh
my.
E
E
C
E
C
E
E
C
E
C
Honestly,
the
best
we
can
do
is
like
say
like
cuz,
that
is,
like
legitimately
a
tracking
thing
right,
like
it
might
be
tracking
for
good
intentions,
but
it's
still
tracking.
You
go
tell
people
to
turn
off
blocking
on
your
website.
You
know
you
could
say
users
like
go
to
this
one-click
thing
where,
like
it
turns
off
brave
blocking
on
that
page
I
mean
you
might
be
able
to
run
a
proxy
to
intercom.
So
it
doesn't.
C
B
C
Yeah,
so
that's
a
really
good
question
and
I
can't
give
a
full
answer,
because
this
is
being
recorded
and
like
the
fraud,
people
will
look
at
it
and
be
like
that's
how
we
sir
come
about
their
fraud
and
over
yeah,
but
yeah
so
like
yeah,
sure
yeah,
but
yeah
I
mean
the
short
answer
is
like.
If
you're
trying
to
pay
yourself
through
auto
contribute,
you
have
to
have
a
website
to
like
to
ultimately
get
the
money
out.
B
C
People
have
tried
this
and,
like
people
have
tried
to
exactly
what
you're
saying,
and
in
that
case
we
actually
will
look
at
websites
that
are
making
a
lot
of
money
and
look
at
them
and
be
like.
Is
it
feasible
that
this
random
website
is
making
like
$1,000
a
month,
and
now
we
can
in
our
Terms
of
Service?
We
can
say
like
if
it
looks
suspicious
well
like
with
hold
your
bat
until
later,
what
some
people
aren't
happy
with.
F
C
Right
so
from
phones
on
the
Google
yeah
chrome
does
chromium
actually
has
many
components
that
do
make
requests
to
Google,
but
chrome
chromium
doesn't
have
Google
accounts
built
in
but
yeah
it
does
chromium,
even
if
you're,
just
using
chromium,
it
makes
requests
to
Google
yeah
yeah
pretty
much
well.
Sorry,
bye,
block
I
do
mean
like
a
combination
of
like
blocking
and
just
removing
the
code.
That
does
it.
C
C
E
C
Torres
well,
two
things,
one:
it's
psycho
proxy,
so
it's
just
a
socks
proxy
and
then
it's
also
like
a
set
of
patches
to
firefox
to
make
it
like
more
privacy.
Preserving.
So
what
we
did
was
we
made
the
proxy
usable
in
like
private
windows,
so
you
can
run
normal
brave
and
then
you
can
open
a
window
that
just
runs
tor
and
then
we
also
added
some
of
the
privacy
improvements
from
tor
browser,
but
not
all
of
them.
C
Yeah
yeah:
well,
the
problem
is
a
lot
of
companies,
don't
let
users
so
we
brave
has
actually
been
blacklisted
from
a
bunch
of
like
corporate
networks
because
they
noticed
a
hats
war
built
in
and
so
a
lot
of
people
just
can't
run
towards.
So
it's
like
if
we
use
tor
to
hide
IPS.
We
couldn't
do
that
for
everyone
and
that's
part
of
why
we
haven't
done
it
yet.
But
yeah
I
think
in
a
future
that'd
be
a
good
like
option
for
people
who
are
able
to
run
for.
A
C
D
D
A
C
A
B
B
C
A
F
D
F
You
should
be
talking
4-h
today,
okay,
so
here
here
we
are
talking
about
app
web
3
and
we're
talking
about
security
and
picking
up
from
to
talk
about
privacy
as
well,
so
I'm
going
to
briefly
look
at
assume
that
you
guys
knows
about
a
theorem
and
how
death
works
today.
So
this
is
briefly
how
we
got
here
today.
So
Vitalik
was
the
per
the
the
the
star
that
was
born
out
of
big
bang.
F
Nowhere
and
he
has
this
idea
of
smart
contract
from
nowhere,
and
then
it
worked,
but
he's
asking
the
question
that
it
was
asking
question:
how
do
we
do
provide
user
interface
for
for
for
smart
contract?
There
was
a
start
of
web
3
so
that
year
at
that
time
was
why
don't
we
use
javascript
HTML?
This
is
the
user
interface
language
that
people
are
mostly
familiar
with
so
yeah.
We
do
it
camera
and
JavaScript.
Then
the
next
question
is:
where
do
we
put
them?
F
Apparently,
you
cannot
put
a
chair
in
HTML
Javascript
on
blockchain
because
it
will
be
too
fat.
So,
let's
put
it
somewhere
in
a
website
that
will
answer
at
that
time,
roughly
2016,
and
then
we
need,
because
website
is
actually
doesn't
belong
to
the
users
right.
You
can
see,
token
belongs
to
the
user
and
the
smart
contract
is
the
public
domain.
Then
website
is
neither
so
it's
in
the
security
limbo.
So
there's
initially
a
question
that
what
do
we?
How
do
we
limit
access
the
the
website
sex
has
to
use
this
information?
F
The
answer
is,
we
simply
ask
users,
so
if
you
visit
the
depth,
the
DEP
will
ask
you:
do
you
want
to
send
the
address?
Okay,
the
other
mad
rest
to
the
website
do
have
want
to
send
your
token
ownership
information
to
the
website.
So
that's
a
stage
way.
We
were
in
2016,
and
then
we
have
this
problem
that
if
you
can
construct
a
transaction
on
web
3,
then
a
the
user
does
not
have
the
certainty
that
the
construct,
the
chat
section,
is
doing
what
the
web
set
says
that
it
is
going
to
do
so.
F
The
answer
to
that
is
yes
see.
Therefore,
if
you
are
transferring
token
to
someone,
if
the
web
site
assembles
a
transaction
for
you
to
send
token
to
someone,
then
the
transfer
transaction
confirmation
page
will
display.
As
is
you
get
a
little
bit
security,
but
then
we
have
the
problem
that
we
have
too
many
of
these
possible
transactions.
F
Initially,
we
just
think
that
there
will
be
transactions
that
transfer
token
from
one
to
the
other.
Then
we
have
the
case
where
we
vote,
then
we
have
the
case
where
we
collateralize
some
some
assets.
So
we
come
to
the
point
that
we
need
to
write
many
yeses
and
to
the
point
where
we
need
a
visual.
Some
of
the
assets
have
to
be
so
complicated
that
displaying
what
they
are.
The
value
of
these
transactions
is
not
sufficient.
F
If
you
are
transferring
pity
to
someone,
you
want
visually
confirm
that
the
key
you
are
sending
away
is
the
kitty
you'll
see
under
on
the
web
browser.
So
we
come
to
the
point
that
we
have
the
hard
code,
something
into
mecha
mask,
and
there
was
a
stage
of
to
that
end
of
2018
and
now
so
observe
this
process
that
we
started
with
a
smart
contract
and
we
get
in
the
user
interface
with
JavaScript
HTML
we
put
them
on.
Then
we
have
the
security
boundary
issue.
We
ask
the
user.
F
If
the
user
wants
to
send
information
to
the
web,
then
we
write
here
C's.
Then
we
read
a
lot
of
years.
Is
then
we
hard
code
stuff
into
into
a
mask.
This
is
the
process
as
that
I
call
Crowley
in
the
design
space.
That
is,
we
have
an
intention
to
solve
a
problem.
Then
we
hear
a
technical
problem.
Then
we
we
work
around
it
and
we
have
a
new
problem.
Your
solution
to
get
new
problems,
so
I
would
introduce
another
thinking.
That
is
how
about
we
look
at
a
web
3.
F
How
about
we
look
at
what
people
want
from
web
3
and
then
how
we
have
this,
and
we
have
this
in
our
mind,
like
a
Northern,
Star
Owen
he's
here
at
Southern,
Cross
doesn't
matter
so
we
have
the
star
chart
so
that
we
know
we
have
a
way
to
evaluate
if
our
solution
is
designed
properly.
So
the
the
the
star
chart
is
an
is
an
when
I
call
tipsy
IPS
trust,
so
people
will
talk
about
web
3
as
a
trust
based
network,
which
means,
if
you
think
about
currently
security,
is
the
security
secure
connection.
F
Ssr
already
allow
us
to
access
to
Facebook
and
be
certain
that
we
are
looking
at
Facebook,
not
other
website,
but
you
still
get
fake
news
right.
So
it
means
that
a
secure
connection
doesn't
provide
truth.
Trust
is
what
would
people
who
think
Webster
you
can
provide
us.
So,
let's
say,
if
you
I
look
browsing
web
3.
It
says
that
you
have
balance
of
$7000.
It's
not
fake
news.
It's
from
blocking
truths.
That
says
you
have
seven
thousand
dollars,
so
Trust
is
number
one,
and
now
we
have
an
interoperability.
F
That
means
web
3
is
going
to
be
decentralized
network,
with
components
built
by
different
companies,
and
we
have
this
hope
that
they
actually
would
work
together.
It
has
never
been
done
before
people
different
people
build
different
components.
You
would
not
work
together.
Web
is
the
only
case
that
it
actually
worked,
but
then
it
become
become
Facebook,
so
interoperability.
Second
thing:
we
look.
Look
that
I'd
like
that.
This
is
what
we
want
from
web
3
privacy.
F
You
have
$1000
balance,
but
you
want
to
see
that
because
it's
good
for
convenience
right.
So
how
can
we
achieve
this?
How
can
we
log
into
a
website
with
our
theorem
address
and
not
telling
the
website
outright?
How
much
ether
do
we
have,
and
then
we
have
security.
That
is
how
do
we
guarantee
that
user
when
they
create
a
transaction
on
web
3
and
they
the
transaction,
represents
what
they
really
want.
So
these
are
the
northern
stars.
F
These
are
the
things
that
we
look
at
when
we
look
at
when
we
build
a
solution
following
this
I'm
going
to
enter
an
example,
I'm
going
to
show
example
how
how
current
web
3
design
lack
maturity
in
this
areas,
and
then
we
will
talk
about
how
to
mend
it.
So
this
is
an
imaginary
web
site
and
it's
in
my
concept.
This
is
called
hello
kitty.
So
I
was
thinking.
How
do
we
make
a
hollow
word
version
of
taps?
Okay,
this
is
hello
kitty.
F
So
the
idea
is
you
write
a
website
and
if
the
user
comes
to
your
website
with
the
kitty,
if
the
user
has
a
kitty
token,
then
you
render
this
key
on
the
website
with
a
matching
background.
So
this
Kitty
has
a
salt
shovel
and
he
has
the
slicer
on
his
head.
That
means
he's
fitting
to
be
in
garden,
there's
a
given
garden.
This
is
an
idea
that
you
match
the
kitty
with
background
okay.
F
So
this
is
a
really
simple
idea
and
let's
evaluate
tips
with
the
super
idea,
actually
we're
only
okay
after
this,
so
this
is
how
metallic
would
have
envisioned.
This
is
to
be
this.
What
had
to
be
done,
that
is
website,
goes
to
the
web
browser.
The
browser
goes
through
website.
Web
server
and
web
site
gives
web
server,
gives
the
user
a
bunch
of
HTML
and
JavaScript
and
that
javascript
guide
users
to
access
users.
F
If
your
node,
which
gives
you
information
like
what
is
the
color
of
the
kitty
when
another
Kitty
has
flies
around
him,
where
now
the
kid
has
trouble,
and
then
the
user
will
draw
the
kitty
here
yeah.
This
is
how
metallic
hood
would
envision
this
head
to
be.
But
this
is
wood.
Is
this
most
likely
how
it
will
be
done?
This
is
that
the
website
gives
you
a
bunch
of
HTML
and
JavaScript,
and
JavaScript
has
only
one
thing:
it
has
only
one
line.
F
It
says
what
is
your
if
your
my
dress
and
user-submitted
theorem
address
and
the
website
would
go
to
their
if
they
were
a
server
and
find
out?
What
does
kitty
look
like?
Does
kitty?
Have
a
shovel
and
drawed
user
interface,
so
you
can
see
in
this
case
the
user
actually
does
not
need
a
serum
user.
Doesn't
it
does
not
need
to
access
blockchain?
So
how
does
the
user
scribe
truth?
The
answer
is,
you
know,
simply
trust
the
website.
This
is
how
it
is
today.
F
F
So
let's
look
at
sorry
at
least
locking
tips,
so
trust
number
one
the
user
does
not
know.
If
what
you
see
he
see
on
the
screen
is
his
token
or
whether
it
comes
from
blockchain
truth.
In
fact,
if
this
is
static
webpage,
the
user
wouldn't
know.
Unless
you
also
happen
to
remember
what
his
kid
you
look
like
and
second,
if
you
look
at
interoperability,
I
used
a
chose
to
catch
you
with
a
fly
for
a
reason.
So
imagine
this
thing
was
built
in
2017.
None
of
the
kiddies
has
fly
around
his
head.
F
So
when
one
day
this
cryptic
80
thing
come
talking,
Essure
decided
to
upgrade
the
smart
contract
and
provide
this
new
type
of
kitty.
How
does
the
computer
come?
Talking
assured
ensure
that
the
kitty
is
correctly
join
the
new
websites,
if
its
website
that
only
understand
old
kitty
probably
will
draw.
The
joint
message
says
that
your
kitty
is
not
recognizable
on
its
website.
F
So
we
have
interoperability
issue
where
decentralized
components
would
not
work
together
with
each
other
unless
cryptic
et
has
control
over
every
website
that
uses
Kitty
and
can
force
them
to
upgrade
which
we're
not
going
to
get.
And
if
we
look
at
people's
privacy.
Suppose
user
have
a
hundred
kitties,
okay.
F
Well,
some
of
them
a
million
dollar
was
and
and
the
the
what
the
user
only
select
one
of
the
kitty,
because
you
only
want
to
play
with
this
kitty,
then,
in
order
to
display
a
huge
list
of
1000
kitties,
because
this
guy
has
1000
the
website
necessarily
already
know
this.
Guy
has
1000
kitties
and
then,
which
Kitty
has
a.
We
can
look
up
the
value
of
each
K
T,
so
Purvis
e
is
is
issue
here
and
then
we
last
look
at
security.
We
don't
involve
transaction
in
this
screen,
so
security
will
be
evaluated
later
yeah.
F
So
we
have.
We
see
that
currently
it's
not
mature
to
solve
our
expectation.
So
here's
the
solution.
This
is
called
an
enclave.
It's
an
space.
It's
a
virtual
machine.
It's
a
space
on
the
web
that
ruins
token
code.
By
token
code
I
mean
some
software
code
is
written
by
talking
issuer
the
same
guy
who
wrote
smart
contract.
So
this
is
the
guy
who
knows
my
country,
people
naturally
trust
them,
because
you
need
trust.
You
need
her
trust.
Anchor
blocking
doesn't
provide
trust
below
blocks.
F
F
The
background
is
near
and
this
runs
in
the
secure
Enclave,
meaning
that
to
access
information
relating
the
token
you
have
to
go
through
a
security
interface,
so
the
look
will
be
more
a
collective,
so
it's
still
kitty
in
the
garment,
but
if
you
use
everyone's
most
mouse
mouse
over
the
unclear,
the
nun
claim
is
highlighted.
So
the
user
knows
that
this
part
is
true.
This
part
access
proxy
information
and
is
not
rendered
by
the
website.
F
So
with
a
security
unclaimed,
the
process
goes
like
this.
First,
the
website
provides
javascript
in
HTML,
which
asks
user.
You
got
a
kitty
and
the
other
say
yes,
this
time
user
will
choose
a
kitty
from
his
search
engine
of
his
litter
and
what
other
kitties
the
user
have.
The
website
will
not
be
able
to
learn,
and
then
the
website
will
ask
what
is
color.
I
need
this
for
chosen
to
cut
the
garden
and
the
code
words.
F
In
this
token
space,
she's
written
by
the
Cooper
Kitty
issue
here,
if
the
able
to
provide
the
color
information-
and
then
the
website
ask
okay,
okay,
it's
great,
so
we
ran
their
backgrounds.
This
is
background.
So
the
here
here
is
the
process
so
notice
that
the
way
the
website
acquired
token
information
is
not
that
I
learned
address.
I
learned
my
token
idea:
I
inquires
my
contract;
rather
instead,
everything
acquires
a
secure
environment,
and
this
environment
dictates
the
rule.
How
token
can
interact
with
the
website.
F
It's
a
little
bit
like
apps
running
on
a
mobile
phone
and
it
would
be
updated
and
website
doesn't
have
to
update.
And
if
you,
if
you
think
about
security,
we
will
come
to
that
later.
So
we
see
that
this
design
is
more
much
true
than
previous
one
in
solving
t
IPS
what
we
expect
from
work,
sorry,
so
the
technology
that
enables
it
is
called
token
script
and
currently
it's
a
under
a
theorem
oasis,
open
project
umbrella,
which
is
a
standardization
process
by
a
thermal
condition.
So
we
are.
F
We
are
the
main
developer
of
tokens,
script
technology
that
enables
this
kind
of
thing,
and
here
what
we
are
seeing
is
a
typical
token
script,
that
is
a
signed,
signed
document
provided
by
talking
issuer.
It
contains
the
information
about
how
that
Helen
token
should
be
processed
type
of
token.
The
the
access
control
which
website
can
use
this
token
without
requesting
permission
which
web
set
will
ask
user
for
the
permission
to
use
such
a
token-
and
you
have
this
actions
like
an
action.
F
Send
cards
cards
like
an
crypto
key
T
being
drawn
in
the
previous
screen,
is
a
card
and
action
is
what
you
can
do
with
the
key.
This
is
just
the
the
very
very
high
level
and
look
at
them.
How
how
token
script
is
so
unclear
security,
unclaimed,
secure
Enclave,
which
is
running
on
a
website
but
not
belonging
to
the
website.
It
has
this
in
our
premiere
previous
slide.
F
It
has
system
as
join.
The
key
G
is
defined
here
in
cards
and
right
now
we're
experimenting
with
H
them
in
JavaScript,
but
we
will
go
to
other
technology
soon.
So
here
we
just
demonstrated
hello
kitty
and
with
that
understanding
we
go
to
the
next
one,
slightly
more
complicated
but
more
productive.
So
this
is
a
website,
and
that
is
more
realistic.
It's
modeled
after
the
Melbourne
startup
code,
a
car
next
door.
F
So
the
idea
is,
if
you
imagine
that
you
are
in
2025,
imagine
blockchains
already
everywhere,
and
every
car
owner
would
have
a
token
that
represents
his
ownership
of
the
car.
So
car
next
door
is
a
website
that
allows
you
to
rent
a
car
out
and
earn
a
hundred
dollar
revenue
per
day
and,
of
course,
at
the
cost
that
you
are
not
being
able
to
use
the
car
in
the
interim.
So
on
this
website.
This
is
a
car
token
here
and
it
is
rendered
with
token
script.
F
F
And
then
this
is
a
signing
signup
process
where
the
users
is
able
to
produce
a
transaction
use,
his
car
ownership
token
to
obtain
a
token
called
car
rental
listing
which
generates
$100
per
month
revenue
per
day.
Maybe
so
this
is
a
sign-up
process,
so
this
would
be
how
it
happens,
how
the
process
is
so.
The
website
is
this.
This
case
you
see
that
them,
both
the
user
and
the
website,
has
access
to
affirm
notes,
because
this
serious
business
needing
to
validate
information.
F
So
the
website
will
start
like
this
business
to
actually
own
a
token
car
and
and
appropriate
in
insurance,
and
this
token
would
produce
a
police
attestation
to
show
that
this
car
is
existing
and
properly
properly
insured
for
strangers
to
drive
it,
and
this
will
be
provided
less,
maybe
in
journals
proof.
But
let's
leave
out
the
detail.
This
is
provided
by
the
security
Enclave
and
the
user.
The
the
website
is
able
to
enquire
their
own
connection
to
the
serum
blockchain
and
verify
this
insurance
being
correct
and
not
expired.
F
So
the
this
car
is
eligible
for
joining
the
car
next
door
program
and
then
the
at
this
point
the
website
will
the
website
is
car
next
door.
It
is
also
each
token
issue
year.
It
will
provide
a
token
script
by
contact
so
which
helps
the
users
to
assemble
a
transaction
to
get
car
rental
listing
token.
So
here
these
are
tokens
were
being
developed
to
deliver
to
user
and
the
users
browser
that
browser
future.
Their
browser
is
able
to
use
that
to
construct
a
secure
transaction.
This
is
the
first
time
we
talked
about
transaction
security.
F
F
So
suppose
you
trust
the
token
script,
which
is
the
code,
that's
securely
assembled
transaction,
then
the
user
will
be
asked
to
make
a
transaction,
and
this
is
a
transaction
where
spending
is
zero,
because
this
is
a
free
signup
and
the
car
owner
is
going
to
use
a
insurance
token
and
he
is
going
to
get
a
rental
car
leasing
token.
So
the
user
will
know
before
they
participate
the
smart
contract
transaction
for
the
sign,
a
smart
contract
transaction.
What
user
will
get
in
the
end?
And
then
you
use
the
user.
F
We
have
two
tokens
provisionary
car
insured
car
token.
Now
this
a
new
token
current
listing
the
user
will
be
able
to
use
this
token.
With
the
functions
like
setting
which
stage
the
car
is
available
or
getting
revenue
from
this
totem
or
even
sell
it
sell
this
or
collateralize.
This
make
a
security
out
of
this,
so
the
the
court
have
knowledge
been
demonstrated
here
is
the
is
it
in
requires
kind
of
an
mind
shifting
previously
we
look
at
website
web
2.
F
We
look
at
interaction
between
a
website
and
the
user
and
whatever
user
is
able
to
provide
that
that's
the
interaction
going
on.
If
you
look
at
the
future
web
3,
given
that
we
have
the
tea
IPS,
the
trust
in
table
ability,
privacy
and
security
requirements
model
here
is
not
just
the
user
interact
with
the
website.
User
do
interact
with
the
website,
but
also
through
a
token,
and
that
token
has
to
be
ran
in
a
space
on
web.
That
is
different
than
website
itself.
F
So
this
is
the
main
thing
we're
meeting
what
I'm
talking
about
today
about
how?
How
do
we
make
web
serie
secure?
And
this
is
a
technology
being
developed?
Unlike
brave,
it's
not
a
product
product
already,
we
do
have
a
product
which
is
our
for
wallet
which
uses
the
technology,
but
we
have
not
been
able
not
produce
a
product
to
make
this
live
on
the
web.
F
So
this
is
more
like
an
early
stage
communication
with
in
with
the
community,
and
so
we
get
a
feedback
that
we're
on
the
right
track
and
people
understand
what
we
are
working
up.
So
this
is
the
thing
here
and
that's
basically,
what
we
talked
about
today
and
the
exact
work
going
on
along
token
script.
Enclave
is
available
on
website
opens
good
dog
and
I,
and
you'll
see
that
we
don't
have
a
meter
masks
for
so
far,
but
we
do
have
water
support
and
which
only
have
partial
partial
support
of
what
we're
talking
about
today
yep.
F
F
So
yeah
so
yeah,
yes
yeah,
so
currently
what
the
way
we
implemented
is
through
thorough.
We
modify
the
browser
code
to
create
a
virtual
space
in
it,
but
it's
not
really
secure,
because
we
still
cannot
prevent
the
website
to
inquire
the
memory
space
inside.
So
no
it's
it's.
It's
not
okay,
true
for
the
website
to
inquire
the
memory
space
of
the
token,
because
if
your
token
wants
to
preserve,
reduces
your
knowledge
prove
or
something
and
website
can
access
it.
F
What's
the
point
of
having
there's
or
not
proof
right,
so
it
has
to
be
clear
segregation,
that's
the
point
we
have
not
achieved
yet,
so
our
vision
is
to
achieve
it
through
a
alternative
technologies
called
webassembly
and
and
which
creates
a
memory
protection.
So
you
cannot
inquire.
The
memory
in
them
is
at
webassembly
from
the
website
which
will
be
allow
us
to
make
it
even
more
secure
which
is
undergoing.
So
actually
we
don't
have
a
working.
F
Yes,
so
so
in
typical,
so
we
will
see
if
we
can
make
it
as
a
mask
plugin,
and
we
because
we
are
mobile,
wallach
provide
ourselves.
Of
course
we
can
modify
the
browser
because
we
produce
the
browser,
so
the
technology
enables
that
is
going
to
be
a
virtual
machine
technology
and
very
likely
webassembly
with
a
with
a
different
interface
than
typical
webassembly,
no
more
more
elaborate
interface.
F
F
So
you
have
so
there
is
no
no
way
to
create
trust
out
of
avoid
right.
So,
basically,
when
you
use
software,
you
kind
of
trust,
the
software
and
there's
a
competition
between
software.
If
they're
oneself
to
a
failed
to
deliver
the
level
of
security,
the
other
software
we
we
have
an
open-source
technology
and
we
have
a
reference
implementation,
which
means
users,
probably
will
trust
us
that
we
will
secure
the
webassembly
environment
now.
F
The
other
part
point
of
trust
is
whether
or
not
the
user
trust
the
web
assembly
code
is
actually
doing
what
you
were
supposed
to
do,
what
if
it
has
right,
whitelist
every
web
site.
Therefore,
the
token
is
automatically
available
to
every
website,
for
example.
So
that
is
something
also
the
user
had
to
evaluate
is
the
token
trustworthy.
So
having
a
Bitcoin,
you
know,
wallet
is
different
than
having
a
ISIL
token
right,
so
there's
different
level
of
trust
implied
with
issue
here.
F
So
the
trust
of
talking
to
the
token
issue
here
is
still
an
issue
is
still
a
element
of
the
future
web.
Sorry,
the
the
part
about-
let's
say
if
you
go
to
the
future
web
3
Facebook
and
you
say
fake
news,
whether
or
not
you
say
fake
news,
it
still
depends
on
what
kind
of
token
you
have
and
whether
or
not,
though,
can
tokens
trustworthy.
F
It's
an
its
sound
like
still
like
where
we
are
coming
from
web.
We
don't
trust
everything.
Now
we
come
through
to
Webster.
We
still
have
to
find
out
when
they're
not
talking
in
our
wallet
or
trustworthy,
but
it's
actually
improvement
because
now
there's
a
way
to
ascribe
trust
previously
what
they
were
not.
There
wasn't.
F
Yeah,
exactly
very
good
question
so
token
script
and
the
security
unclear
technology
is
one
layer
above
blockchain.
If
you
imagine
blockchain,
being
a
layer
of
a
smart
contract
addresses
and
proofs,
then
token
layer
is
about
business.
Telling
layer
is
about
smart
contract
layer
is
about
which,
which
is
a
smart
contract,
address.
What
transactions
you
can
do
and
token
layer
is
about
whether
or
not
that
transsexual
represents
you
owning
a
token
whether
or
not
that
talker
represents
a
car
or
represents
your
identity
or
whatever.
F
F
You
can
have
you
can
have,
for
example,
a
test
station
which
is
signed
message
from
a
tester
show
that
you
have
certain
rights
and
you
will
be
able
to
use
this
right
without
using
blockchain,
so
certain
logic
would
not
require
blockchain,
so
there
would
be
a
subtle
thing
like
when
does
this
logic
enter
production
and
when
it's
just
floating
there
with
the
existing
cryptography?
Given
that
you
already
trusted
to
be
sure
right,
so
the
point
of
connection
is
a
market.
F
So
if
you,
if
you
do
not
need
your
token
to
be
transferable,
for
example,
attestations
typically
are
not
transferable.
If
you
are
a
business
owner,
you
have
attestation
that
you
are
able
to
REM
business,
or
if
you
have
individual,
you
have
attestation
that
you
have
own
important
rights.
The
distance
typically
does
not
enter
the
market,
so
you
do
not
have
to
trust
a
independent
entry
that
can
carry
out
the
market
activity
elect
EVP.
What
we
call
in
the
banking,
if
you
like,
delivery
versus
payment
market
activity.
F
If
you
don't
require
this
mechanism,
you
should
not
let
this.
You
probably
should
not
let
this
thing
be
unblocked
in
the
first
place.
So
token,
script
is
actually
because
it's
one
layer
above
it
can
can
analyze.
It
can
make
process
work,
even
if
some
of
the
process
is
not
on
a
blockchain,
because
it's
not
needed
and
some
of
the
process
is
or
that
the
process
has
nothing
to
do
with
production,
still
work
with
secure
enclaves.
F
Do
you
work
with
the
cryptography,
but
at
certain
day,
when
they
plug
into
the
box
chain,
they
can
actually
plug
it
in.
So
that's
how
it
works.
So
that's
the
really
important
question.
So
that
shows
that
if
you
go
to
the
token
layer
from
production
layer
to
going
layer,
then
the
under
layer
doesn't
have
to
be
blockchain.
That's
really
insightful
yeah.