Enclaive enables businesses to secure their data and IP in a hybrid multi-cloud environment through accessible confidential computing

Enclaive

enclaive

The need for solid data security Cloud computing is one of the most exciting innovations provided by the Information Technology Industry in the last decades. With the provisioning of computing infrastructure consisting of infinite computing and storage and network capacity, the operation of software has fundamentally changed: Companies can now build on infrastructure without being responsible for running it themselves. They simply purchase only the capacity they actually need when they need it. This flexibility, coupled with easy scalability, comes with cost savings. Instead of using costly resources to maintain their own on-site data center, cloud computing allows companies to focus on what sets them apart, their products and services. However, the move to the cloud has been a bumpy road regarding security and data protection. Today’s more sophisticated clients will ask what underlying technology is used, who owns the license and the intellectual property, or can this license be invalidated by any government. In other words, to what extent can I trust this service? When it comes to data: how is it secured, who owns it, who has access to it, especially under what circumstances, and under which jurisdiction? Confidential Containers explained With technical solution has become a reality to separate the provision of the compute infrastructure from the actual use of the infrastructure, as well as to be able to prove compliance with data regulations protection information and IP. Technically, the separation is realized by utilizing the technology, which, in simple terms, executes applications in a secure and trustworthy, and encrypted black box, so that the cloud provider cannot see any of the code and/or data being processed. The truly innovative aspect of the technology is that not only the storage ("data in rest") or transport ("data in transit"), but for the first time also the processing of the data is always intransparent ("data in use"). This isolates the data processing from the operating system and the applications running on it. During processing, neither the (cloud) service provider, administrator, nor a (compromising) third party has access to the data. Confidential Cloud Computing, a Confidential Compute Container This container technology is not new and is an indispensable part of cloud computing. A container is the most essential component of a cloud application. In its simplest form, it is an application. Containers can be efficiently started, stopped, or migrated and composed. A Confidential Container differs from a normal container in that it is encrypted and authenticated. Applications are started in an enclave. For this purpose, the CPU reserves an area of physical memory before the boot process. A process that the operating system loads into the area are encrypted by the CPU. Only the CPU knows the key, which is freshly generated after each boot process derived from a unique hardware key. The TPM property of the CPU protects the key from extraction. Another innovation of Confidential Containers is that they can be authenticated. The author of the container signs the image. This means that containers not only have an identity but can also be easily standardized and certified. In a nutshell: Enclaive’s core project: “The Base” Enclaive has come up with a series of ready-to-use and easy-to-implement confidential containers for the most used open-source stack out there. We build easy-to-use containers with the extra power that the container application is full memory encrypted at any moment in time during execution and can also prove its confidential state to a third party. Our “base” is a fully managed container registry, that helps you store, manage and deploy containers easily and wherever you need. We cover everything from database, to data-in-use and analytics. And the beauty of it is that you do not need to worry about how to operate your own containers or about the underlying infrastructure. What exactly is included in “the base”? Web Servers Easily and reliably host a website for your business, organization, or project while retaining complete control over your site’s underlying infrastructure. Enclaive gives you flexible options to shield your website and deal with the privacy challenges of your customers. Development Runtimes Create and execute your applications in a secure and shielded way. Enclaive provides flexible encrypted containers sized for any application, industry-leading performance, and predictable pricing. Data-in-use/Encrypting DBs Build and release faster with scalable store products on-premise or in the cloud. Enclaive provides encrypted database solutions meeting the privacy needs of your business and makes sure customer data — the most valuable asset — find a protective place. Content Management Systems / eCommerce Sell your product with ready-to-use eCommerce platforms. Enclaive provides modular content management and eCommerce platforms suited for any B2B and B2C application, industry-leading price to performance, and security and privacy to shield customer data and the reputation of your business. Analytics Derive new value and business opportunities from sensitive data assets that were previously not possible. Enclaive provides GDPR/CCPR-compliant processing of data and protects the intellectual property of models. Share business data with any neuronal network without leaking business information. Shield trained networks from intellectual property infringement while running on your customers’ premises neither revealing any information about the network nor allowing to copy and replicate the network and data. IoT/Edge Computing Build and release faster with scalable IoT messaging products in the cloud. Enclaive provides flexible containers sized for any application, industry-leading communication protocols for enterprise-ready performance, and the highest level of cybersecurity. So to sum up: why should you use our Confidential Containers instead of the “vanilla” version” The following benefits come for free with the confidential version of our containers: A Confidential Container gives data the safest place an application/database can give going beyond encryption ("data at rest") It provides a significantly reduced attack surface thanks to hardware-based memory protection. At any moment in time, the microservices in the confidential containers processing the data, storing data in the SQL database, and forwarding the data to other microservices are protected. Neither enclaive nor the hosting provider can inspect the data. Hardened security against memory dumps, query, and user de-anonymization including kernel-space exploits, malicious and accidental privilege attacks, exploits, and other "root" attacks using the corruption of the application to infiltrate your network and system insider UEFI firmware Runs on any hosting environment irrespectively of geo-location and complies with privacy export regulations, such as Schrems-II GDPR/CCPA compliant processing ("data in use") of user data in the cloud as data is anonymized thanks to the enclave About ENCLAIVE enclaive is a deep-tech high-growth technology company working on solving some of the most challenging and interesting technology projects around confidential computing. We strongly believe confidential computing is a game-changing technology that is key to cloud computing's mass adoption. Enclaive answers the essential question: “Why should I trust a cloud.”

Cloud Data Security and the Need for Confidential Containers

Protecting sensitive information throughout the development lifecycle is no easy feat. Aptible Enclave, a pivotal component of the Aptible platform, offers a compelling solution. In this article, we will explore how Aptible Enclave takes data security to the next level by providing a secure infrastructure for database management in processes. DevOps Security with Aptible Enclave Ensuring that sensitive information remains secure throughout the entire development cycle can be challenging. This is where Aptible Enclave steps in to bridge the gap between DevOps and data security. Core features of Aptible Enclave: . Aptible Enclave offers a secure platform for managing databases, which are often repositories of highly sensitive information. It ensures that data is protected at rest and in transit, reducing the risk of data breaches and leaks. Secure Database Management . Enclave leverages encryption to secure data both at rest and in transit. This means that even if a malicious actor gains access to the underlying infrastructure or network, the data remains encrypted and unreadable without the proper decryption keys. End-to-End Encryption . Enclave provides robust access control mechanisms to limit who can access the data and what actions they can perform. This fine-grained control helps prevent unauthorized access and potential security incidents. Access Control . Enclave allows you to define and enforce security policies for your databases. This automation ensures that security best practices are consistently followed, reducing the chances of human error. Automated Security Policies . Aptible Enclave is designed with compliance in mind, making it easier for organizations to meet regulatory requirements, such as GDPR, HIPAA, and SOC 2. It also offers auditing capabilities to track and monitor activities related to your data. Compliance and Auditing . Enclave seamlessly integrates with your DevOps workflow, making it easy to incorporate secure data management practices into your application development and deployment processes. Code Integration Code examples to understand the impact: To better understand the impact of Aptible Enclave, let's consider some code examples: # Setting up a secure connection to an Enclave-managed database
import aptible

# Define your Enclave credentials
enclave_credentials = {
    "access_key_id": "your-access-key",
    "secret_access_key": "your-secret-key",
}

# Connect to your Enclave database
db = aptible.enclave.Database(
    id="your-database-id",
    credentials=enclave_credentials
)

# Now, you can interact with your database securely
result = db.execute("SELECT * FROM sensitive_data") In this example, we use the Aptible Enclave Python library to establish a secure connection to an Enclave-managed database. The code ensures that data access is properly authenticated and encrypted. Isolation and encryption Aptible Enclave isolates databases from external access, providing an additional layer of security. Moreover, data in transit and at rest is encrypted to protect it from unauthorized access. Here's an example of isolating a database with Aptible Enclave: version: "2"
services:
  web:
    image: your-app-image:latest
  database:
    image: aptible/database:postgresql-14
    command: postgres -D /data
    volumes:
      - /var/data
    ports:
      - "5432:5432" In this example, we define a service for a database that uses Aptible Enclave. It specifies the image, the command, and the volume, isolating the database and encrypting the data. Automated backups and failover Data backups are crucial for data recovery and business continuity. Aptible Enclave offers automated backup processes to minimize the risk of data loss. Additionally, it supports automated failover, ensuring the high availability of databases. Here's an example of configuring automated backups in : Aptible Enclave version: "2"
services:
  web:
    image: your-app-image:latest
  database:
    image: aptible/database:postgresql-14
    command: postgres -D /data
    volumes:
      - /var/data
    ports:
      - "5432:5432"
  backups:
    image: aptible/database:backups In this example, we introduce a service dedicated to backups, ensuring that data is protected and can be restored as needed. Compliance features For organizations in regulated industries, compliance is non-negotiable. Aptible Enclave simplifies compliance management through features like automated compliance checks, audit logging, and detailed reporting. Here's an example of defining compliance checks in Aptible Enclave: version: "2"
comply:
  containers:
    - name: web
      command:
        - "bundle"
        - "exec"
        - "rails"
        - "server"
      env:
        - name: RAILS_ENV
          value: production
      ports:
        - 3000 In this example, we define compliance checks for a web service, ensuring that the application adheres to regulatory standards. Scalability Aptible Enclave allows for seamless database scaling to accommodate application demands. As your application grows, you can adjust the database infrastructure with confidence, knowing that data security remains intact. Here's an example of scaling a database with Aptible Enclave: version: "2"
services:
  web:
    image: your-app-image:latest
  database:
    image: aptible/database:postgresql-14
    command: postgres -D /data
    volumes:
      - /var/data
    ports:
      - "5432:5432"
    scale:
      count: 3 In this example, we specify a scale count of 3, indicating that the database can be scaled to accommodate the growing application load securely. Conclusion Aptible Enclave is a powerful solution that enhances data security in DevOps. By providing a secure infrastructure for database management it allows organizations to embrace the speed and agility of without sacrificing the protection of sensitive data. In many industries where data security and compliance are non-negotiable, Aptible Enclave becomes a critical tool for success. DevOps practices

Aptible Enclave: Elevating Data Security in DevOps Environments

Life in 2050 According to Jail-Broken GPT-4o 

Swarm Summit 2024 Recap

Microarchitectural Security of AWS Firecracker VMM: Conclusion, Acknowledgments, and References

AWS ফায়ারক্র্যাকার VMM এর মাইক্রোআর্কিটেকচারাল নিরাপত্তা: উপসংহার, স্বীকৃতি এবং রেফারেন্স

Mikroarchitektonische Sicherheit von AWS Firecracker VMM: Fazit, Danksagungen und Referenzen

Seguridad microarquitectónica de AWS Firecracker VMM: conclusión, reconocimientos y referencias

Sécurité microarchitecturale d'AWS Firecracker VMM : conclusion, remerciements et références

AWS फायरक्रैकर VMM की माइक्रोआर्किटेक्चरल सुरक्षा: निष्कर्ष, आभार और संदर्भ

AWS Firecracker VMM のマイクロアーキテクチャセキュリティ: 結論、謝辞、参考文献

AWS Firecracker VMM의 마이크로아키텍처 보안: 결론, 승인 및 참조

Segurança microarquitetônica do AWS Firecracker VMM: conclusão, agradecimentos e referências

Микроархитектурная безопасность AWS Firecracker VMM: заключение, благодарности и ссылки

AWS Firecracker VMM'nin Mikro Mimari Güvenliği: Sonuç, Teşekkür ve Referanslar

Bảo mật vi kiến trúc của AWS Firecracker VMM: Kết luận, Lời cảm ơn và Tài liệu tham khảo

AWS Firecracker VMM 的微架构安全性：结论、致谢和参考文献

Since your private keys never leave the KMS HSM, you don't have to worry about seed phrase or device vulnerabilities. And if you forget your password, you can recover it seamlessly through your own self-hosted Amazon Cognito server supporting MFA via SMS, email, and soon, passkeys. The Llavero Wallet Some weeks ago I made Llavero Wallet-a self-service solution that gives you complete control over your digital keys and assets-public. “Llavero” means “keyring” in Spanish, and this wallet lives up to its name by providing you with the tools you need to secure your digital world. This initial MVP release is aimed at technical users for now. However, I need feedback from knowledgeable people to improve and simplify things for a broader audience down the road. So I’m hoping this generates interest from potential contributors. Love the problem: Effortless Secure Self-Custody Let’s be real — managing your own keys in a completely secure way is hard work. Understanding and mitigating all the hardware, software, and seed phrase vulnerabilities requires a huge investment of time and effort that most people can’t make. For regular users, it’s a daunting prospect to have a cold hardware wallet stored in a safe somewhere, paper backups, and detailed instructions for loved ones on what to do if something happens to you. They understandably fear losing keys, getting robbed, or messing up backup procedures. It’s not a very user-friendly or reassuring solution for daily digital asset use. People are used to the simplicity and safety nets of modern online banking — recovering passwords via MFA, bio-metrics, simple KYC processes, and having some recourse if things go wrong. Self-custody needs to be effortless while maintaining privacy and true ownership. How it Works Llavero Wallet provides a self-custodial and secure way to manage your cryptocurrency assets through a user-friendly cloud infrastructure deployed using AWS Cloud Development Kit (CDK). It sets up a Next.js frontend hosted on Amazon CloudFront (Content Delivery Network), with the backend powered by Lambda functions, and data storage using Amazon DynamoDB and S3. The core is the AWS Key Management Service (KMS), a cloud HSM that generates and safeguards your private keys. KMS acts as a dedicated hardware wallet in the cloud, ensuring your keys never leave its hardened enclave. For authentication, Llavero uses Amazon Cognito to provide a self-hosted user directory supporting MFA via SMS, email, and soon passkey. The transaction signing workflow is: Initiate transaction on Llavero frontend


Request signature from Cognito for MFA


Verify MFA (SMS, email, authenticator)


Provide MFA confirmation to frontend


Frontend requests KMS to sign transaction


KMS signs transaction and sends to blockchain


Transaction confirmation relayed back By utilizing AWS free tiers for services like CloudFront, DynamoDB, S3, Cognito and KMS, the entire Llavero infrastructure has a recurring cost of only around $1 monthly for an individual. Future roadmap: Enable installation across multiple clouds and personal hardware using cryptographic techniques like Shamir secret sharing or multi-party computation (MPC) to split and reconstruct the private key across a decentralized web of nodes without any single point of control. The goal is an effortless way to deploy resilient, censorship-resistant and vendor-agnostic self-custodial infrastructure tailored to desired security posture. Llavero Wallet quick demo: https://youtu.be/J8gbE7SFlyU?si=DDWWeaPJDBembOCO&embedable=true Finding a Niche “blockchain purists” people who truly grok self-custody likely won’t ever trust a cloud-based product like Llavero Wallet. They already have a hardware wallet like Ledger stashed in a safe, stamped backups in safe deposit boxes, and a thoroughly documented dead man’s switch set up with their family. For them, a dedicated offline cold wallet is the only acceptable way. And you know what? They’re not wrong. A hardware wallet hidden in a secure home location is exceedingly safe in general. It’s about as robust as physical security gets. But…that’s just not a viable solution for most regular people doing daily digital life and asset management. If you set everything up correctly with a hardware wallet, the hassles and key vulnerability risks are still pretty high for a blockchain newbie. So Llavero’s niche will be tricky to find at first. I’m hoping it resonates with blockchain newbies, plus tech-savvy folks who want self-custody without the super hardline approach. Easing the UX while maintaining robust security. My Long-Term Vision I believe every individual should have seamless access to their own sovereign personal infrastructure stack — a resilient service stack that’s essentially effortless to use and own. In the coming AI era, cyber-security will become even more crucial as threats evolve. And like physical security, favoring isolation reduces risk from cascading mass attacks. Each person having their own fully isolated stack makes systematic compromise far more difficult. Here’s the high-level road-map for getting there: AWS Installation — Really cheap self-hosted cloud with SaaS companies removed. This is Llavero’s first MVP version.
Agnostic Cloud — The ability for users to easily migrate between different cloud providers like AWS, Azure, Google Cloud etc.
Censorship Resistance — Supporting a multi-provider, multi-PaaS/SaaS architecture. Using novel crypto techniques like Shamir’s Secret Sharing or multi-party computation to split trust.
Hardware Backups — Mixing cloud services with owned local hardware like Raspberry Pis or repurposed old cellphones/laptops.
Family & Friends Network — Extending trust to a decentralized web of people you trust, for ultimate redundancy and resilience. Today, cloud and software costs are already very inexpensive, and in the following years they will continue dropping towards zero cost as these technologies become further commoditized. Truly sovereign personal infrastructure should be free or ultra-low cost for everyone. Join Llavero Llavero represents my first step toward that vision of individual empowerment and effortless self-sovereign security. It’s my attempt to make AWS’s powerful KMS accessible and self-custodial for people. I hope you’ll check it out, provide feedback, and consider contributing your skills! I’m aiming to have over 10 people engaged in conversations about contributing code, security expertise, QA testing, or architectural input within the next few weeks. Let’s work together to make truly effortless self-custody a reality — bringing enterprise-grade security and privacy to the people. The vault for the people. https://llavero.app https://github.com/llaverowallet/llavero Since your private keys never leave the KMS HSM, you don't have to worry about seed phrase or device vulnerabilities. And if you forget your password, you can recover it seamlessly through your own self-hosted Amazon Cognito server supporting MFA via SMS, email, and soon, passkeys. Since your private keys never leave the KMS HSM, you don't have to worry about seed phrase or device vulnerabilities. And if you forget your password, you can recover it seamlessly through your own self-hosted Amazon Cognito server supporting MFA via SMS, email, and soon, passkeys. Since your private keys never leave the KMS HSM, you don't have to worry about seed phrase or device vulnerabilities. And if you forget your password, you can recover it seamlessly through your own self-hosted Amazon Cognito server supporting MFA via SMS, email, and soon, passkeys. The Llavero Wallet Some weeks ago I made Llavero Wallet-a self-service solution that gives you complete control over your digital keys and assets-public. “Llavero” means “keyring” in Spanish, and this wallet lives up to its name by providing you with the tools you need to secure your digital world. This initial MVP release is aimed at technical users for now. However, I need feedback from knowledgeable people to improve and simplify things for a broader audience down the road. So I’m hoping this generates interest from potential contributors. Love the problem: Effortless Secure Self-Custody Love the problem: Effortless Secure Self-Custody Let’s be real — managing your own keys in a completely secure way is hard work. Understanding and mitigating all the hardware, software, and seed phrase vulnerabilities requires a huge investment of time and effort that most people can’t make. For regular users, it’s a daunting prospect to have a cold hardware wallet stored in a safe somewhere, paper backups, and detailed instructions for loved ones on what to do if something happens to you. They understandably fear losing keys, getting robbed, or messing up backup procedures. It’s not a very user-friendly or reassuring solution for daily digital asset use. People are used to the simplicity and safety nets of modern online banking — recovering passwords via MFA, bio-metrics, simple KYC processes, and having some recourse if things go wrong. Self-custody needs to be effortless while maintaining privacy and true ownership. How it Works Llavero Wallet provides a self-custodial and secure way to manage your cryptocurrency assets through a user-friendly cloud infrastructure deployed using AWS Cloud Development Kit (CDK). It sets up a Next.js frontend hosted on Amazon CloudFront (Content Delivery Network), with the backend powered by Lambda functions, and data storage using Amazon DynamoDB and S3. The core is the AWS Key Management Service (KMS), a cloud HSM that generates and safeguards your private keys. KMS acts as a dedicated hardware wallet in the cloud, ensuring your keys never leave its hardened enclave. For authentication, Llavero uses Amazon Cognito to provide a self-hosted user directory supporting MFA via SMS, email, and soon passkey. The transaction signing workflow is: The transaction signing workflow is: Initiate transaction on Llavero frontend Request signature from Cognito for MFA Verify MFA (SMS, email, authenticator) Provide MFA confirmation to frontend Frontend requests KMS to sign transaction KMS signs transaction and sends to blockchain Transaction confirmation relayed back Initiate transaction on Llavero frontend Initiate transaction on Llavero frontend Request signature from Cognito for MFA Request signature from Cognito for MFA Verify MFA (SMS, email, authenticator) Verify MFA (SMS, email, authenticator) Provide MFA confirmation to frontend Provide MFA confirmation to frontend Frontend requests KMS to sign transaction Frontend requests KMS to sign transaction KMS signs transaction and sends to blockchain KMS signs transaction and sends to blockchain Transaction confirmation relayed back Transaction confirmation relayed back By utilizing AWS free tiers for services like CloudFront, DynamoDB, S3, Cognito and KMS, the entire Llavero infrastructure has a recurring cost of only around $1 monthly for an individual. Future roadmap: Enable installation across multiple clouds and personal hardware using cryptographic techniques like Shamir secret sharing or multi-party computation (MPC) to split and reconstruct the private key across a decentralized web of nodes without any single point of control. The goal is an effortless way to deploy resilient, censorship-resistant and vendor-agnostic self-custodial infrastructure tailored to desired security posture. Llavero Wallet quick demo: https://youtu.be/J8gbE7SFlyU?si=DDWWeaPJDBembOCO&embedable=true https://youtu.be/J8gbE7SFlyU?si=DDWWeaPJDBembOCO&embedable=true Finding a Niche Finding a Niche “blockchain purists” people who truly grok self-custody likely won’t ever trust a cloud-based product like Llavero Wallet. They already have a hardware wallet like Ledger stashed in a safe, stamped backups in safe deposit boxes, and a thoroughly documented dead man’s switch set up with their family. For them, a dedicated offline cold wallet is the only acceptable way. And you know what? They’re not wrong. A hardware wallet hidden in a secure home location is exceedingly safe in general. It’s about as robust as physical security gets. But…that’s just not a viable solution for most regular people doing daily digital life and asset management. If you set everything up correctly with a hardware wallet, the hassles and key vulnerability risks are still pretty high for a blockchain newbie. So Llavero’s niche will be tricky to find at first. I’m hoping it resonates with blockchain newbies, plus tech-savvy folks who want self-custody without the super hardline approach. Easing the UX while maintaining robust security. My Long-Term Vision I believe every individual should have seamless access to their own sovereign personal infrastructure stack — a resilient service stack that’s essentially effortless to use and own. In the coming AI era, cyber-security will become even more crucial as threats evolve. And like physical security, favoring isolation reduces risk from cascading mass attacks. Each person having their own fully isolated stack makes systematic compromise far more difficult. Here’s the high-level road-map for getting there: Here’s the high-level road-map for getting there: AWS Installation — Really cheap self-hosted cloud with SaaS companies removed. This is Llavero’s first MVP version. Agnostic Cloud — The ability for users to easily migrate between different cloud providers like AWS, Azure, Google Cloud etc. Censorship Resistance — Supporting a multi-provider, multi-PaaS/SaaS architecture. Using novel crypto techniques like Shamir’s Secret Sharing or multi-party computation to split trust. Hardware Backups — Mixing cloud services with owned local hardware like Raspberry Pis or repurposed old cellphones/laptops. Family & Friends Network — Extending trust to a decentralized web of people you trust, for ultimate redundancy and resilience. AWS Installation — Really cheap self-hosted cloud with SaaS companies removed. This is Llavero’s first MVP version. AWS Installation Agnostic Cloud — The ability for users to easily migrate between different cloud providers like AWS, Azure, Google Cloud etc. Agnostic Cloud Censorship Resistance — Supporting a multi-provider, multi-PaaS/SaaS architecture. Using novel crypto techniques like Shamir’s Secret Sharing or multi-party computation to split trust. Censorship Resistance Hardware Backups — Mixing cloud services with owned local hardware like Raspberry Pis or repurposed old cellphones/laptops. Hardware Backups Family & Friends Network — Extending trust to a decentralized web of people you trust, for ultimate redundancy and resilience. Family & Friends Network Today, cloud and software costs are already very inexpensive, and in the following years they will continue dropping towards zero cost as these technologies become further commoditized. Truly sovereign personal infrastructure should be free or ultra-low cost for everyone. Join Llavero Llavero represents my first step toward that vision of individual empowerment and effortless self-sovereign security. It’s my attempt to make AWS’s powerful KMS accessible and self-custodial for people. I hope you’ll check it out, provide feedback, and consider contributing your skills! I’m aiming to have over 10 people engaged in conversations about contributing code, security expertise, QA testing, or architectural input within the next few weeks. Let’s work together to make truly effortless self-custody a reality — bringing enterprise-grade security and privacy to the people. The vault for the people. https://llavero.app https://llavero.app https://github.com/llaverowallet/llavero https://github.com/llaverowallet/llavero

Introducing Llavero: The $1 Hardware Wallet!

Llavero উপস্থাপন করা হচ্ছে: $1 হার্ডওয়্যার ওয়ালেট!

Wir stellen vor: Llavero: Die 1-Dollar-Hardware-Wallet!

Presentamos Llavero: ¡La billetera de hardware de $1!

Présentation de Llavero : le portefeuille matériel à 1 $ !

लावेरो का परिचय: $1 हार्डवेयर वॉलेट!

Llavero のご紹介: 1 ドルのハードウェア ウォレット!

Llavero 소개: $1 하드웨어 지갑!

Apresentando Llavero: a carteira de hardware de US$ 1!

Представляем Llavero: аппаратный кошелек за 1 доллар!

Llavero'yla Tanışın: 1 Dolarlık Donanım Cüzdanı!

Giới thiệu Llavero: Ví phần cứng trị giá $1!

推出 Llavero：1 美元硬件钱包！

The idea behind the Internet of Value (IoV) is that , with the help of cryptocurrency and blockchain technology. money should be able to be sent as quickly as information This change is similar to how the internet changed the way people share knowledge. The internet made it possible to instantly send and receive information around the world. Cryptocurrencies and blockchain aim to do the same for value, making transactions faster and more transparent without the need for middlemen. Decentralized Payment Protocols in the Internet of Value Decentralized payment protocols are an interesting shift in how we handle digital transactions. Instead of relying on centralized systems or sticking with the isolated nature of traditional blockchains, these protocols aim to streamline things by cutting out the middleman and allowing transactions to happen directly between peers. The idea is pretty simple: decentralized payment protocols use a network of nodes to verify and validate transactions instead of a single authority overseeing transactions. This decentralized approach contrasts with traditional systems, where banks or other central entities usually handle transaction processing, often leading to delays and extra costs. What's intriguing is how these protocols are designed to work across different blockchains, a big departure from how things typically operate. This interoperability means you can move your assets between various networks more seamlessly without relying on third-party exchanges or complex conversions. Security is also a key consideration. While some systems heavily depend on smart contracts to enforce transaction terms, decentralized payment protocols take a different route, aiming for simplicity and robustness. They use advanced cryptographic techniques and consensus algorithms to ensure secure and reliable transactions. How Decentralized Payment Protocols Work Within the IoV Decentralized payment systems make it possible for money to be sent quickly and easily across the internet by leveraging blockchain technology. They are also pretty versatile, catering to different needs, including the integration of cryptocurrency payments for businesses. Below are some examples of decentralized payment platforms and how they enable the transfer of value across different use cases. How RippleNet Enables Cross-Border Payment Solutions RippleNet is a platform that enhances cross-border payment efficiency through its  messaging, settlement, and foreign exchange (FX) management features. One of the essential aspects of RippleNet is RippleNet Home, which streamlines management tasks across the network. Users can initiate and monitor payments, troubleshoot issues, analyze payment execution, manage accounts and user profiles, and retrieve API credentials, among other functionalities. RippleNet Home is a centralized hub for overseeing various aspects of business operations within the RippleNet ecosystem. On-Demand Liquidity (ODL) is a liquidity solution offered by RippleNet. It enables instant settlement without needing pre-funded capital in destination markets. ODL facilitates real-time settlement of payment funds, access to global payout rails, upfront visibility of fees, and automatic payout to beneficiaries' bank accounts, enhancing the efficiency and transparency of cross-border transactions. RippleNet's flexibility, particularly with ODL integration, caters to diverse customer needs across multiple use cases. Payment service providers can leverage ODL for cross-border remittances, while fintech companies can facilitate business-to-business transactions for small-to-medium enterprises. Additionally, corporations can utilize ODL for internal treasury payments to accounts in foreign countries, optimizing liquidity management and reducing transaction costs. Various transaction types are supported within the RippleNet ecosystem, each tailored to specific use cases. Individual payments involve settling individual customer or business payments using ODL, with XRP funding the sender wallet and recipients receiving fiat payouts in receive markets. Bulk funding allows instant topping up of sender positions with receivers, facilitating efficient remittances and B2B payments. Internal treasury transactions enable intra-company transfers for customers with accounts in foreign countries, streamlining cross-border treasury operations. How Kima Enables Asset Transfers without Smart Contracts Kima facilitates asset transfers across various blockchain networks and traditional bank accounts, employing a specialized chain designed for direct transactions with the source and destination networks or banks. Unlike relying on smart contracts, which can be susceptible to exploits, Kima ensures the security of sensitive funds in transit by utilizing proven technologies such as Threshold Signature Schemes (TSS) and Trusted Execution Environments (TEEs) like Intel SGX, which have demonstrated resilience in real-world scenarios. In its approach to settlement security, Kima adopts a straightforward principle: if assets aren't present in a vulnerable environment, they can't be compromised. This philosophy drives Kima's avoidance of smart contracts, oracles, and external relayers, eliminating potential points of failure. Instead, Kima's technical framework comprises three key components: External Accounts (EOAs), TSS and TEEs, and Efficient Liquidity Management (LiMa). EOAs serve as native blockchain wallets acting as pools, enhancing security by eliminating the need for smart contracts across every blockchain and mitigating vulnerabilities associated with cross-contract messaging. TSS and TEEs enable secure key sharing among parties without direct exposure, bolstering the system's resilience against critical compromises. Additionally, Kima employs a Liquidity Management algorithm to optimize the distribution of assets across pools, ensuring effective service delivery. Additionally, Kima bridges the gap between traditional and decentralized finance systems by offering support for fiat integration through an opt-in compliance system. This protocol-level integration enables access to legacy systems like fiat payments while adhering to regulatory requirements, including KYC anti-money laundering verifications. Recognizing the challenges inherent in achieving compatibility within the web3 ecosystem, Kima emphasizes a holistic approach. Rather than treating compatibility issues as isolated problems, Kima views them as interconnected symptoms of a broader issue. Kima keeps liquidity pools on each combined layer-1 blockchain by enabling smooth cross-chain exchange without token wrapping. This lets users move assets directly between chains without creating synthetic tokens. At the core of Kima's functionality lies its blockchain, orchestrating asset synchronization across multiple layer-1 blockchains through committee-based consensus. This consensus mechanism relies on rotating sets of wardens responsible for ensuring asset pool synchronization and authorizing withdrawals on destination chains only upon confirmation of corresponding deposits on source chains. Kima leverages TSS protocols within TEEs to enhance security and privacy in cross-chain transfers. By employing TSS, Kima enables participants to collaboratively generate and control signing keys securely, ensuring that a predetermined threshold of participants must engage in authorizing transactions. Through proactive secret sharing and the use of Intel SGX enclaves, Kima fortifies the security of its TSS implementation, minimizing the risk of key compromises and unauthorized access. How Coinbase Commerce Integrates Cryptocurrencies into Retail Transactions Coinbase Commerce facilitates the integration of cryptocurrency payments into merchants' operations via an API or user interface. This enables customers to pay directly from their devices using the blockchain for settlement. Merchants and customers benefit from guaranteed settlement without exposure to cryptocurrency volatility. Payments are automatically settled into stablecoins, providing merchants with stability. Additionally, Coinbase Commerce supports various wallets and exchanges, allowing merchants to deposit funds into their preferred storage solutions. The Commerce Onchain Payment Protocol simplifies the payment process, enabling merchants to accept various cryptocurrencies. Customers can utilize their verified Coinbase accounts to make seamless payments to any Commerce merchant. Transactions are confirmed instantly, leveraging cost-effective networks like Base and Polygon. Coinbase Commerce operates on the Onchain Payment Protocol, an open-source standard to streamline cryptocurrency payments. Unlike traditional pull payments, where merchants initiate transactions, cryptocurrency payments rely on a push system initiated by customers. Upon payment initiation, Coinbase Commerce creates a Charge representing the requested payment, generating a unique payment link and Universally Unique Identifier (UUID). Customer transactions are broadcast to the cryptocurrency network for validation, with Coinbase monitoring the blockchain for inbound payments and updating charge statuses accordingly. For non-developers, Coinbase Commerce offers user-friendly solutions such as embedding payment buttons on websites or creating hosted checkout pages. These options require minimal coding and provide a straightforward experience for customers. Merchants can integrate Coinbase Commerce into existing e-commerce platforms to accept cryptocurrency payments without extensive technical expertise. Final Thoughts As blockchain technology improves and decentralized payment systems improve, the Internet of Value looks like it could have a bright future. Adding digital assets to financial systems and creating new decentralized financial services could lead to significant growth and broad use. The IoV could affect e-commerce, banks, and money transfers, making things easier, cheaper, and safer. In general, I'm hopeful about the IoV's future.

The Role of Decentralized Payment Platforms in the Internet of Value

Overview According to statistics, there were 34 funding rounds executed in the global blockchain market from February 19 to February 25, totaling 240.81 million dollars. The number of funding rounds increased by 13 and the amount of funds increased by 75.7%, compared with the previous week. The number of funding rounds in sectors of Infrastructure and DeFi is the highest, 11 of which are in the infrastructure and 7 in the DeFi area. The funds raised in the infrastructure sector are the highest, which is 170 million dollars. Funding in different sectors Infrastructure EigenLayer Round Series B Amount $100M Investors a16z, Polychain… Project Intro: EigenLayer is a protocol built on Ethereum that introduces restaking, a new primitive in cryptoeconomic security. This primitive enables the rehypothecation of ETH on the consensus layer. Users who stake ETH can opt-in to EigenLayer smart contracts to restake their ETH and extend cryptoeconomic security to additional applications on the network. Part of EigenLayer's potential lies in its ability to aggregate and extend cryptoeconomic security through restaking, and to validate new applications being built on top of Ethereum. AltLayer Round Strategic Amount $14.4M Investors Polychain, Hack VC… Project Intro: AltLayer is a system of highly scalable, application-dedicated execution layers that derive security from an underlying L1/L2. It is designed as a modular and pluggable framework for a multi-chain and multi-VM world. At its core, AltLayer consists of several optimistic rollup-like execution layers called flash layers, featuring a novel innovation that makes them disposable and thus highly resource-optimized. Flare Network Round / Amount $35M Investors DWF Labs Project Intro: Flare is a Layer-1 blockchain that enables secure, universal interoperability between chains, scaling blockchain use by allowing all digital assets and on-chain information to flow freely. Its consensus protocol for external data allows decentralized applications on Flare to safely and trustlessly acquire and use information from other blockchains and real-world data sources, solving the oracle problem and ushering in a new era of utility. Clave Round Pre-Seed Amount $1.6M Investors zkSync Labs Clave is an easy-to-use non-custodial smart wallet powered by Account Abstraction and the Hardware Elements (e.g Secure Enclave, Android Trustzone etc.), offering a unique onboarding process. Helius Round Series A Amount $9.5M Investors Foundation Capital, Reciprocal Ventures Helius aims to help creators overcome these obstacles by providing APIs (or application programming interfaces) to understand on-chain data and query transactions, as well as webhooks that enable automations and bots, plus RPC nodes that allow Solana apps to interact with the blockchain. All in all, they are designed to simplify complexity and facilitate application development. NodeShift Round Seed Amount $3.2M Investors Inovo VC NodeShift is a decentralized cloud service provider that provides a single API for accessing independent data center operators' redundant compute, storage and graphics accelerators and connecting to low-cost decentralized web services such as Akash and Filecoin. BEVM Round / Amount / Investors ViaBTC Capital BEVM is a decentralized EVM-compatible Bitcoin L2 that uses BTC as Gas. It allows all DApps which can run in the Ethereum ecosystem to operate on Bitcoin L2. Citrea Round Seed Amount $2.7M Investors Galaxy Citrea is a Bitcoin’s ZK rollup and an execution layer that settles on Bitcoin. Every transaction occurring on Citrea is fully secured by zero-knowledge proofs and verified by Bitcoin through BitVM. Inco Network Round Seed Amount $4.5M Investors 1kx, Circle Ventures Inco Network is an EVM Layer-1, utilizing fully homomorphic encryption (FHE) to enable composable and operable confidential states. Its fhEVM (FHE + EVM) makes it possible to write private smart contracts and perform computations on top of encrypted data without requiring its decryption. This innovation unlocks a wide range use cases with confidentiality components, such as card games, DID, private voting, dark pools, etc. - paving the way for a new era of possibilities. Nest Wallet Round Seed Amount $3.6M Investors Inception Capital, Orange DAO Nest Wallet is a multi-chain wallet built for traders. Powered by Safe, Nest Wallet adds a more friendly UI/UX for team to easily manage multiple Safe wallets and streamline the transaction signing process. DeFi ZeroLend Round Seed Amount $3M Investors Momentum 6 ZeroLend is a decentralized lending protocol on zkSync. Designed to provide individuals and businesses with a secure and transparent platform for borrowing and lending digital assets. The protocol operates in a peer-to-peer manner, eliminating the need for intermediaries such as banks or traditional financial institutions. After announcing the launch of their platform token $ZERO, ZeroLend has introduced a series of activities to encourage users to complete tasks and accumulate points. Recently, they have collaborated with the growth platform TaskOn to release a new set of activities. Shutter Round IDO Amount $8.31M Investors OKX Ventures Shutter Network is an open-source project that aims to prevent front running on Ethereum by using a threshold cryptography-based distributed key generation (DKG) protocol.Shutter allows users to send encrypted transactions in a way that protects them from front runners on their path through the dark forest (the metaphorical hunting ground of front runners that each transaction must cross). OX.FUN Round / Amount $4M Investors Gen Block Capital OX.FUN is a crypto derivatives trading platform. The core element of the gamified experience on OX.FUN revolves around the OX Farm. User can also expect to see leaderboards, competitions and copy trading vaults to help maximize the trading adventure. Renzo Round / Amount / Investors OKX Ventures, Binance Labs Renzo is a restaking protocol based on EigenLayer. Renzo abstracts the complex process of re-staking for end users, and stakers do not have to worry about the active selection and management of operators and reward strategies. ezETH is Renzo’s liquid, heavily-collateralized token that automatically captures rewards and ensures liquidity. ezETH allows users to participate in DeFi while retaining re-collateralization rewards. Singularity Round / Amount $2.2M Investors OKX Ventures, Binance Labs Singularity is a compliant institutional DeFi access layer that provides access to popular protocols for institutional on-chain participants with commercial confidentiality. Users will have their wallet addresses obfuscated whilst leveraging existing DeFi liquidity. Singularity uses the state-of-the-art UltraPLONK proof system with zero-knowledge circuits based on Noir. Honeypot Finance Round Pre-seed Amount / Investors AC Capital Honeypot Finance is whipping up a community-run DeFi Hub that have a honey-flavored flywheel model that churns out dual incentives. INIT Capital Round Seed Amount $3.1M Investors Robot Ventures, Mirana Ventures… INIT Capital is a Liquidity Hook Money Market: Lend, Borrow, and Access Yield Strategies with Liquidity Hook. Serving as the DeFi liquidity infrastructure for dApps to build on top, INIT facilitates diverse activities, including lending, borrowing, and yield strategies. INIT is where dApps and users meet, offering both permissionless access to a unified liquidity pool and efficient yield strategy management. GameFi Shuffle Round Seed Amount $2.5M Investors Karatage, Cypher Capital Shuffle is an all-new crypto casino that support numerous games and jackpots available for players. Matr1x Round Strategic Amount / Investors Animoca Brands, SevenX Ventures… Matr1x is the brand of Metaverse, planning to build the brand through high-quality games developed by themselves or in collaboration with third parties, game IP development and cooperation, and global Esports tournaments. Matr1x will express its game trilogy (Cyber Earth - Mars Immigration - Interstellar Exploration) through three large-scale games with a unified worldview: Matr1x FIRE (First-person shooter), Matr1x WAR (Shooting+MMORPG), and Matr1x EVOLUTION (SOC). Monkey Tilt Round Private Amount $21M Investors Polychain, Hack VC… Monkey Tilt is an online gambling platform focused on the convergence of cryptocurrencies and online gambling. Players can win real money by correctly predicting whether the player they choose will exceed or fall short of their statistical prediction. Crystal Fun Round Seed Amount $5M Investors Waterdrip Capital, Kucoin Ventures… Crystal Fun is a decentralized gaming mega-ecosystem and studio. It aims to seamlessly integrate high-quality games within sustainable economic systems, ushering in a groundbreaking gaming experience into Web3. Loong City Round / Amount $2M Investors MAZARINE SEA Loong City is the first original IP PFP metaverse project based on an improved ERC404 protocol. Autopunk and traditional China constitute the core elements of Dragon City. Each PFP is an entry ticket to this fictional world. NFT Prom Round / Amount / Investors DWF Labs Prom is the primary access point to the Web3 gaming ecosystem. With a robust marketplace at its core for trading and exchanging NFT assets, Prom offers an array of services including rental and mortgage solutions, comprehensive asset management tools, and an educational section with in-depth guides. Tools FortyTwo Round Strategic Amount / Investors LBankLong, Hash Ventures FortyTwo is a Cosmos Portfolio View Platform that allows users to clearly see the breakdown of their Cosmos holdings. Users can can connect one or a bundle of wallets. Tornado Blast Round Strategic Amount / Investors Atka Capital Tornado Blast is a Blast L2-native bot to trade and snipe tokens. User can earn $BLAST, $TRNDO & revenue share reward SocialFi Beoble Round Seed Amount $5M Investors Hashkey Capital, DWF Labs… Beoble is a communication infrastructure and ecosystem that allows users to chat between wallets. Its product includes a web-based chat app, as well as a toolkit that allows Dapps to integrate. Others HackQuest Round Pre-Seed Amount $1.1M Investors HashKey Capital HackQuest is the gateway to the Web3 development world, providing a comprehensive, one-stop educational infrastructure that minimizes friction and helps onboard developers and nondevelopers to the world of Web3. TruePNL Round M&A Amount / Investors Gate.io Labs, Magic Square.. TruePNL is a multi-chain launchpad that connects blockchain projects and crypto investors, providing a convenient, transparent, and secure mechanism for raising capital, investing, and distributing tokens. The platform enables cryptocurrency projects to raise funds by creating token exchange pools and launching public or private sale rounds using smart contracts on the Ethereum and Binance Smart Chain networks. Superfluid Round Strategic Amount $5.1M Investors Fabric Ventures, Multicoin Capital… Superfluid is a Web3 streaming payments protocol for handling subscriptions, salaries, rewards, or any other composable stream of value on a per-second basis. Its core feature is "streaming" payments, where money flows from one address to another in real-time, based on programmable logic and a single on-chain transaction. Silencio Round Pre-seed Amount $1M Investors Borderless Capital, Moonrock Capital Silencio is a global network that measure noise pollution. User will get rewarded for measuring noise pollution with phone. CeFi Januar Round Seed Plus Amount $12M Investors CMT Digital Januar is a European payment gate for crypto companies. Innovative EU crypto companies use Januar's payment account solutions to accept payments and send payouts while maintaining full compliance and stable business operations.

The Crypto Investment Weekly Recap for Feb 19 - Feb 25

Account Abstraction is not just another chat topic. It will allow blockchain and crypto to go from geek love to mass use by traditional businesses. How will it be, and how will companies provide exciting brand experiences with Account Abstraction? Let’s figure it out together in this article! My name is . I'm a Blockchain Product Marketing and Branding Expert. I build awareness and trust in blockchain products among users, developers, and VC funds. Daria Volkova I’m interested in the Ethereum ecosystem and researching it deeply because now, it’s the most promising blockchain for building products that can bring mass blockchain adoption. Vitalik Buterin shares his crypto user experience. Why is this important, and how is it related to Account Abstraction? There is a where he shares his experience using crypto as a payment method at coffee shops and restaurants. He mentioned that he faced different kinds of challenges, including poor Internet connection, Ethereum gas limits, minimum exchange deposit, and others. blog post on Vitalik Buterin’s website Vitalik had to seek the Internet or overpay several times the order cost to pay with cryptocurrency. Most people who are not so interested in paying with cryptocurrency and are not ready to spend extra time on experiments will conclude that paying with cryptocurrency for ordinary things is very inconvenient. That’s why he concluded his text with a phrase I like so much: Good user experience is not about the average case; it is about the worst case. Such unfortunate situations could be overcome if merchants have payment providers with Account Abstraction. A Short Description of Account Abstraction Account Abstraction is a blockchain and cryptocurrency technology concept that makes blockchain accounts more flexible and programmable. In the context of the Ethereum wallet, , which now occur as one continuous process. Accordingly, smart wallets allow you to configure each process flexibly, which opens up more opportunities for optimizing the user experience. "abstraction" means separating the verification and execution of transactions Account Abstraction refers to Currently, the wallet and the user are essentially one whole because only the owner of the seed phrase or private key can send assets, and only the owner of the public address can receive assets. separating an account and its owner. Account Abstraction will allow you to run a smart contract as a wallet, controlled by code in the EVM and not by a bunch of public and private keys. This expands the supported authentication methods and security features of the wallet. The main goal of the account abstraction and the EIP-4337 update is to replace EOA wallets with smart wallets (CA). This will provide developers with more opportunities to create high-quality user experiences. Business Necessity of Account Abstraction To explain the business necessity of AA, I should describe what kind of features smart wallets have: Verification logic allows flexible configuration of user authentication options. These can be used with a trusted email, a biometric authenticator, or a whitelisted device. Various authentication options. With Account Abstraction, you can pay a fee in any token you want; you can even mint NFT from the brand you love without paying any fee because the brand will pay for you. It's possible because of - one of the key components in Account Abstraction. Flexible fee payment mechanisms. Paymaster Visa deployed two sets of Paymaster contracts to demonstrate how gas fees on the blockchain can be redesigned for enhanced user convenience. Read more here. , A user no longer needs to use ETH to interact with dApps which reduces the entry barrier for beginners. Additional security settings may include, in addition to the authentication method, multi-signatures, a daily spending limit or time lags for transactions. This will help even if an attacker has accessed the account. Advanced account security settings. protect the user's funds You can forget the numerous signatures needed to conduct the first swap on a DEX, purchase an NFT, or otherwise interact with dApps. Atomic multi-operations. The new type of wallets will be more similar in functionality to accounts than MetaMask and Ledger. Google or Apple ID you can allow your customers to mint NFTs, make transactions, save data, track progress, and use other benefits from the blockchain and As a founder of a Web3 startup or a traditional business, pay fees instead of them. Also, instead of forcing customers to remember the seed phrase, you can allow them to enter a blockchain account using email only. In September 2023, the successful conclusion of the ERC-4337 Account Abstraction grant round. This grant initiative will support 18 teams in their efforts to build diverse projects centered around the ERC-4337 standard. The Ethereum Foundation announced Such massive investment in AA-supporting projects shows that the concept is promising and will be explored and implemented as much as possible. Among those who received funding, the following cases are worth noting: is a smart contract account compatible with the above standard. The core is modular, which allows you to connect additional plugins. ZeroDev Kernel - the service allows you to register and authenticate using your email and DKIM password. The solution is designed to lower the entry barrier and attract more users to the ecosystem. Ambire is an easy-to-use, non-custodial smart wallet powered by Account Abstraction and the Hardware Elements (e.g., Secure Enclave, Android Trustzone, etc.), offering a unique onboarding process. The Clave team is the winner of the ETHGlobal Hackathon 2023. Clave is the partner of zkSync. Clave - Zero Knowledge Proof (ZKP) based wallet. The wallet uses zkSNARK to confirm account access. IoTeX is an authentication module for protocols with OpenID. When combined with ERC-4337, this solution facilitates one-click OAuth login and account creation for new users using social logins such as Google and Apple. UniPass By addressing the impact of ERC-4337 on on-chain data analysis and exploring the native account abstraction mechanism in other Layer2 and EVM chains, this project can provide valuable insights and resources for data analysts working in the Ethereum ecosystem. . SixdegreeLab The Ethereum Foundation team believes that This ambitious goal is achievable if many traditional businesses implement this standard. ERC-4337 can attract the next 1 billion users. In the following part of this article, I will uncover how companies can use Account Abstraction to seamlessly onboard users to Web3 if blockchain is relevant to their business models. Account Abstraction Use Cases for Businesses In this section, I describe four user cases where AA creates additional value for the company's brand. Case №1. Future of Loyalty Brand loyalty is essential for any successful brand today to survive and continue to thrive. Loyalty programs are used by all types of businesses - from coffee shops to hospitals. This picture shows how loyalty programs become more personalized and scalable, bringing more value to the business customer. One of the trends of the last two years has been the use of NFTs as collectibles that provide access to unique experiences. NFTs allowed brands to supercharge membership and loyalty programs. With NFTs, customers can own their membership and loyalty status, meaning the more they interact with a brand, the more perks and benefits they accumulate over time, making their NFT more valuable. There are three main ways how NFTs can be used in loyalty programs: These tokens enable users who are eligible to receive cashback from the brands for various offers or offers to reward loyalty in the form of NFTs or tradeable cryptocurrencies. Utility Tokens. Customers can be rewarded with membership tokens that are Soul-bound in nature. A user's loyalty and interactions with the brand can be cited using an NFT-based loyalty system where a user's actions are recorded and reflected via these dynamic Soul-bound NFTs. Soul Bound Membership Tokens. These are a collection of NFTs representing a history of the user's interactions with the brand. They include POAPs, loyalty points, badges, and collectibles collected from the brand. By the way, do you collect POAPs? I have four items in my collection. Reputation Tokens. No matter what type of tokens you use for your loyalty program, . Any customer can join your loyalty program, even without a wallet and technical knowledge. Pay fees and reward your customers using the blockchain that works best for you. AA will help you simplify the flow for the user Digital and Physical Worlds Case №2. Connection Between Bridging the digital and physical gap is key to Web3’s mass adoption. By utilizing blockchain technology to build immersive, interactive experiences, brands can bring the power of Web3 to a billion users in a way that is easy to onboard, fun, and accessible. In September 2023, Web3 brand released its Pudgy Toys at 2,000+ stores across the U.S., connecting technology and the broader Web3 community with America’s largest retailer. Pudgy Penguins Walmart zkSync Pudgy Penguins offer two ways to play — physical and digital. Both the plush and figures come with a digital adoption certificate that kids can redeem on , the open-world digital social experience. Through the digital adoption certificate, kids can unlock their digital Penguin, which they can use to play games and interact with other kids in Pudgy World. Pudgy Penguins pudgeworld.com To get it and activate it, the user must scan a QR code and, with the help of Account Abstraction, unlock their Forever Pudgy Penguin without needing a digital wallet or having ETH on it. were chosen as Pudgy World’s foundational technology to enable an immersive user experience, lightning-fast speeds, and affordability. zkSync and Ethereum Web3’s mass adoption becomes closer through fun and easy access. You can read more about this case here. Case №3. Onboarding Gamers to the Blockchain According to , approximately people worldwide play video games. 89.5% of video game sales happen in By 2025, the mobile games industry will reach True List 3.26 billion the digital world. 138 billion US dollars. This means that gamers are a huge number of users who can potentially become users of blockchain-based products if these products can improve their gaming experience. Some gamers are already users of the products or platforms. Others, on the contrary, not trusting them or are too young to assess risks and make decisions. They only want to play and get achievements. GameFi Play2Earn ignore blockchain and crypto products, What if the game allows users to keep their game achievements and items in the blockchain in the NFT format? Authorization to the game account can unblock their smart contract wallet. Also, the game platform can pay a fee instead of the user with the help of the paymaster. So gamers will not need to create an account before starting the game. They can enjoy the process, and under the hood, there will be a blockchain that will ensure that all game achievements are saved and will be able to convert game skins to NFT. Conclusion Account Abstraction and its capabilities look promising for anyone interested in implementing mass blockchain usage. Most businesses (Nike, Gucci, Starbucks, and others) have joined Web3 by launching NFT collections or identity verification and supply chain management through platforms like Everledger. Now, companies that want to be technological pioneers have more tools to implement, thus opening up a field for experimentation. You can read more about in the article by . He shares a comprehensive guide on improving user experience as a crucial requirement for mass blockchain adoption and provides several cases divided by users’ needs. AA as a true path to mass blockchain adoption , Product Designer of zkSync Andrii Bondar I strongly advise traditional businesses to add not only AI but also blockchain to their business processes and user immersion in brand experiences. If relevant and possible, implement something that will increase interest in and loyalty to your brand. Read my previous articles about and about . Web3 Product-Market Fit and Marketing Strategy For Blockchain Startups in 2024 Personal Branding in the Age of Web3 Follow me on social media if you like my content: , , and LinkedIn X . YouTube Also published here

Blockchain Mass Adoption and Exciting Brand Experiences With  Account Abstraction: ERC-4337

225 Stories To Learn About Money

229 Stories To Learn About Data Analytics

154 Stories To Learn About Computer Science

In the dynamic world of cryptocurrencies, the excitement of Web3 innovations is often shadowed by the challenges faced by everyday users in navigating the complexities of wallet creation. For too long, the common individual has grappled with the daunting task of securing seed phrases, a process that demands time, attention, and a level of technical understanding that extends beyond the comfort zone of most. Lost seed phrases and forgotten passwords have become the tales of the crypto space, deterring potential enthusiasts from participating in the revolution. It is within this backdrop of accessibility concerns and security trade-offs that Core introduces its groundbreaking Seed Abstraction—a solution poised to not only mitigate these challenges but to redefine the very fabric of how we conceive and interact with Web3 wallets. Breaking the Mold: Core's Unprecedented Seed Abstraction Revolutionizes Wallet Creation has emerged as a harbinger of change with its revolutionary Seed Abstraction, addressing head-on the challenges faced by everyday users in the intricate process of wallet creation. Unlike traditional methods laden with the complexities of seed phrases, Core introduces an innovative approach that eliminates these hurdles. Core It seamlessly integrates Web2 methods, allowing users to effortlessly create wallets and multi-chain seed phrases through platforms like Gmail and Apple logins. This not only democratizes access to crypto but also signifies a profound leap toward simplifying the user experience in the Web3 era. As we delve into the transformative journey ushered in by Core's innovation, we witness a departure from the conventional norms that have long hindered the widespread adoption of Web3 technologies. Seeding Simplicity: Core's Web2 Integration for Effortless Wallet Creation The days of seed phrase jargon are behind us, thanks to Core's ingenious integration of familiar Web2 methods. Creating a wallet and generating multi-chain seed phrases have become as intuitive as logging into your favorite email account. By embracing platforms like Gmail and Apple logins, Core is ushering in a new era of accessibility, making the world of crypto more inviting for newcomers and veterans alike. This strategic move not only expands Core's user base but also signifies a broader commitment to simplifying the Web3 experience. Core's Seed Abstraction isn't just a technological leap; it's a user-centric approach that aligns with how the majority of internet users interact with digital platforms. Universal Abstraction: Core's Seamless Cross-Chain Functionality and Fortified Security In the realm of crypto, Core has emerged as the solver with its universal Seed Abstraction. Unlike conventional methods confined to specific blockchains or virtual machines, Core empowers users to traverse a multitude of blockchains—from Bitcoin to EVMs—without the headaches of multiple contracts or cross-chain compatibility issues. This universal seed abstraction isn't just a feature; it's a testament to Core's commitment to providing a seamless and user-friendly experience across the vast landscape of cryptocurrencies. Beneath the surface, Core fortifies its security measures by leveraging ’s CubeSigner non-custodial signing service. This service not only ensures secure social logins but also manages keys within an impervious hardware fortress. Through advanced encryption methods and a secure enclave, Core guarantees that private keys remain shielded even during the most sensitive transaction signings. This commitment to robust security measures positions Core as a reliable custodian of digital assets, instilling confidence in users navigating the complexities of the crypto world. Cubist Accessing a Core account is a multi-layered process designed to thwart any potential phishing attempts. Users need both their login details and a physical authentication device, significantly reducing the risk of unauthorized access. CubeSigner's export protocols add an extra layer of protection, introducing additional security measures and waiting periods to counter potential attacks like SIM swapping. This meticulous attention to security protocols not only safeguards user accounts but also sets a new standard for protecting digital assets in an increasingly sophisticated threat landscape. In the quest for seamless Web3 adoption, Core stands out by successfully addressing a significant pain point for everyday users—seed phrases. Akash Gupta, Head of Consumer Products at Ava Labs, emphasizes the importance of preserving self-custody and high security while providing a user-friendly experience. "Core's users are free to choose their favorite form(s) of sign-up, login, and recovery without any trepidation or anxiety," Gupta affirms. This empowerment of choice ensures that users can tailor their crypto journey according to their preferences, striking a balance between accessibility and security. Ava Labs: Pioneering the Web3 Revolution Behind Core's innovative strides stands Ava Labs, a visionary force leading the charge in redefining the way people build and use open, permissionless networks. Founded by Cornell computer scientists in collaboration with Wall Street veterans and early Web3 leaders, Ava Labs is committed to simplifying the deployment of high-performance solutions for Web3. As the driving force behind Core's groundbreaking Seed Abstraction, Ava Labs plays a pivotal role in shaping the future of decentralized finance and ushering in an era where the complexities of crypto are replaced with intuitive, secure, and universally accessible solutions. Core's Seed Abstraction—A Revolutionary Leap in Web3 In conclusion, Core's Seed Abstraction not only mitigates the risks associated with traditional seed phrases but also paves the way for a more intuitive, secure, and accessible Web3 wallet experience. As this revolutionary leap unfolds, the crypto community eagerly anticipates the broader impact of Core's innovation, setting new standards for accessibility, security, and simplicity in the ever-evolving landscape of Web3. Core has not merely introduced a feature; it has ignited a paradigm shift, unlocking the future of crypto for a global audience. Don’t forget to like and share the story! : Vested Interest Disclosure This author is an independent contributor publishing via our . Be it through direct compensation, media partnerships, or networking, the author has a vested interest in the company/ies mentioned in this story. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR brand-as-author program

Unlocking the Future: Core's Seed Abstraction Redefines Web3 Wallet Creation

ভবিষ্যৎ আনলক করা: কোরের বীজ বিমূর্ততা Web3 ওয়ালেট তৈরিকে পুনরায় সংজ্ঞায়িত করে

Die Zukunft erschließen: Core's Seed Abstraction definiert die Erstellung von Web3-Wallets neu

Liberando el futuro: la abstracción de semillas de Core redefine la creación de billeteras Web3

Ouvrir l'avenir : l'abstraction des semences de Core redéfinit la création de portefeuille Web3

भविष्य को अनलॉक करना: कोर का बीज एब्स्ट्रैक्शन वेब3 वॉलेट निर्माण को फिर से परिभाषित करता है

未来の扉を開く: Core のシード抽象化が Web3 ウォレットの作成を再定義する

미래를 열다: 코어의 시드 추상화로 Web3 지갑 생성을 재정의

Desbloqueando o futuro: a abstração de sementes do Core redefine a criação de carteira Web3

Открывая будущее: абстракция исходного кода Core переопределяет создание кошелька Web3

Geleceğin Kilidini Açmak: Core'un Tohum Soyutlaması Web3 Cüzdan Oluşturmayı Yeniden Tanımlıyor

Mở khóa tương lai: Sự trừu tượng hóa hạt giống của Core xác định lại việc tạo ví Web3

解锁未来：Core 的种子抽象重新定义 Web3 钱包创建

This article was originally published on by . ProPublica Cezary Podkul Mr. Big had a problem. He needed to move what he called “fraud funds” back to China, but a crackdown was making that difficult. So in August, Mr. Big, who, needless to say, did not list his real name, posted an ad on a Telegram channel. He sought a “group of smuggling teams” to, as he put it, “complete the final conversion” of the stolen money by smuggling gold and precious stones from Myanmar into southern China, in exchange for a 10% cut. It’s unclear whether Mr. Big ultimately succeeded; his ad has since been deleted, and ProPublica was unable to reach him. But the online forum where he posted his ad says a lot about why Americans and people around the world have found themselves targeted by an unprecedented wave of fraud originating out of Southeast Asia, whose vast scale is now becoming apparent. In a single recent criminal investigation, Singapore police in money laundered from a to organized crime, including “scams and online gambling.” seized more than $2 billion syndicate with alleged ties The Telegram channel that featured Mr. Big’s plea for assistance was a Chinese-language forum offering access to “white capital” — money that has been laundered — “guaranteed” by a casino operator in Myanmar, , that purports to ensure that deals struck on the forum go through. Fully Light Group Fully Light also operates its own Telegram channels that advertise similar services. One such channel, with 117,000 participants, featured offers to swap cryptocurrency for “pure white” Chinese renminbi or “white capital” Singaporean dollars. (Telegram took down that channel after ProPublica inquired about it. Fully Light did not respond to requests for comment.) The presence of a casino in facilitating such deals is no coincidence. A growing number of gambling operations across Southeast Asia have become key pillars in a vast underground banking system serving organized criminal groups, according to new research by the United Nations Office on Drugs and Crime. The research has not been published, but the agency shared its findings with ProPublica. There are now over 340 physical casinos across Southeast Asia (as well as countless online ones), and many of them show accelerating levels of infiltration by organized crime, according to the UNODC. The casinos function as “a shadow banking system that allows people to move money quickly, seamlessly, jurisdiction-to-jurisdiction, with almost no restriction,” Jeremy Douglas, UNODC’s top official , told ProPublica in September. in Southeast Asia That has made money laundering “easier than ever before,” he said, and it’s been “fundamental to the expansion of the transnational criminal economy” in the region — especially cybercrime. , Southeast Asia has become a major hub for cryptocurrency investment scams that often start as innocent-sounding . As ProPublica reported in detail last year “wrong number”-type text messages The messages frequently originate from seedy casino towns in Cambodia, Laos and Myanmar, where criminal syndicates lure workers with the promise of lucrative jobs, only to force them to work as online scammers. UNODC’s map of known or suspected scam compounds shows a clear overlap with gambling hubs in Laos, Myanmar and Cambodia, where allegations of forced online scam labor have become so widespread that they recently prompted Interpol to issue a , which the international police agency said was occurring on “an industrial scale.” global warning about the problem Gambling has long attracted organized crime, but never more than in Myanmar, Cambodia, Laos and the Philippines, where loose regulations and endemic corruption allow casinos to operate with little oversight or responsibility to report suspicious transactions. Before the COVID-19 pandemic began, officials in those countries in an effort to attract foreign direct investment. wooed Chinese casino operators Criminal bosses, facing a crackdown in China , began investing in casinos and cutting deals to run their own special economic zones in Myanmar and elsewhere where they could operate unfettered. and sanctions imposed by the U.S. When the pandemic struck in 2020, travel restrictions emptied newly built casinos, hotels and offices of workers and visitors across the region. Criminal syndicates repurposed the facilities to house online fraud operations and turned to human smugglers to staff them up. (For example, when Philippine authorities raided several online gambling operators between May and August, they discovered more than 4,400 laborers, most of them .) human trafficking victims forced to perpetrate online fraud Online casinos can be easily used for money laundering: They often accept cryptocurrency deposits that can be converted to virtual chips and placed in bets or cashed out in currency, making them seem like proceeds of legitimate gambling. is becoming increasingly common in Southeast Asia. That method of money laundering Physical casinos have their own attractions for money laundering. They have become a draw for a parallel industry of junket operators, who organize gambling trips for high-rollers. Those junkets also attract organized criminal groups that need to move money across borders and do so using junkets’ gambling accounts, according to recent prosecutions by Chinese authorities. Last year, 36 individuals connected to Suncity Group, once one of the biggest junket operators in the world, were about $160 million in illegal cross-border payments and transactions. convicted in China of facilitating The company’s ex-CEO, Alvin Chau, is in jail for . running a criminal syndicate and other charges In northeast Myanmar, Fully Light Group has emerged as a “multi-billion-dollar business conglomerate and a key player” in casinos and illegal online gambling, according to , Myanmar country director for the United States Institute of Peace. research by Jason Tower “These are not normal casinos in any way,” Tower said, because they’re located in what he calls “criminal enclaves” that are more under the control of organized crime than any government authority. For instance, hundreds of criminal convictions by Chinese courts related to illegal casinos, fraud, kidnapping, drugs and weapons charges in the Kokang Special Administrative Zone, near Myanmar’s border with China, where Fully Light is based. Tower found In its review, UNODC found Kokang casinos — both those owned by Fully Light and by others — also played a major role in money laundering. They operate Telegram channels that openly advertise money laundering services, including some that link back to official Fully Light channels and offer the company’s guarantee to cross-border exchanges of cryptocurrencies. Some Fully Light-affiliated Telegram channels include solicitations to participate in what are known as money mule “motorcades” that move funds through multiple cryptocurrency wallets or bank accounts. Billions of dollars more are likely flowing into the region, thanks to online scams that show no signs of abating. Nick Smart of the cryptocurrency analytics firm Crystal Blockchain has been tracing the flows of crypto funds deposited into online platforms that are set up to look like investing sites in order to fleece victims. Following the money trail from just one such website, which he suspects to be linked to criminal organizations in Myanmar, led him to a wallet that also pooled funds from 14 other known crypto scams. The wallet received about $44 million in various cryptocurrencies between December and July, when it ceased activity. With thousands of such websites popping up every day, victims’ losses are easily “in the billions,” said Smart, the director of blockchain intelligence at Crystal. The global cybercrime spree has prompted countries across the region to take a bolder tack. In June, Thailand to two cyberfraud hot spots across its border with Myanmar (with ). More recently, six illegal cellular towers suspected of providing internet service to scam compounds in Myanmar. cut off electricity disappointing results Thai officials shut down Chinese authorities have also in dramatic operations that included a of hundreds of suspected cybercriminals across a border crossing from Myanmar to China’s southern Yunnan Province on Sept. 6. arrested thousands of their own citizens humiliating perp walk On Sept. 26, UNODC with China and the 10-member Association of Southeast Asian Nations to jointly and human trafficking linked with casinos and scams. An accompanying the agreement calls on the countries to “make anti-money laundering and wider anti-corruption efforts a higher priority.” unveiled an agreement combat organized crime action plan But the challenge is steep. Even as multiple countries crack down, Laos, one of the poorest nations in the region, is online gambling operators to set up shop within its borders and target foreigners. getting ready to allow And governments need to broaden their focus. Anti-money-laundering regulations often zero in on bank cash transfers of $10,000 or more. The UNODC’s Douglas said governments will need to turn their attention to casinos and other nontraditional financial players. “Everyone’s been focusing on transactions of $10,000 going through banks and flagging suspicious transactions,” Douglas said, “and these guys are moving millions around the corner through the casino, laughing at the system.” Photo by on Carl Raw Unsplash

Southeast Asian Casinos Are Helping Global Cybercrime

দক্ষিণ-পূর্ব এশীয় ক্যাসিনো গ্লোবাল সাইবার অপরাধে সহায়তা করছে

Südostasiatische Casinos unterstützen die globale Cyberkriminalität

Los casinos del Sudeste Asiático están ayudando al cibercrimen global

Les casinos d’Asie du Sud-Est contribuent à la cybercriminalité mondiale

दक्षिण पूर्व एशियाई कैसीनो वैश्विक साइबर अपराध में मदद कर रहे हैं

東南アジアのカジノが世界的なサイバー犯罪を助長している

동남아시아 카지노가 글로벌 사이버 범죄를 돕고 있습니다

Os cassinos do sudeste asiático estão ajudando o crime cibernético global

Казино Юго-Восточной Азии помогают глобальной киберпреступности

Güneydoğu Asya Kumarhaneleri Küresel Siber Suçlara Yardımcı Oluyor

Sòng bạc Đông Nam Á đang hỗ trợ tội phạm mạng toàn cầu

东南亚赌场正在助长全球网络犯罪

Storing crypto on an exchange or a hardware wallet is risky. Instead, you should use a multi-sig setup. I used to store my in hardware wallets like Ledger, but for large amounts, it is still risky. If somebody steals your ledger or its seed phrase, you are doomed. If a fire or earthquake destroys them, you are doomed. I used to keep two copies of seed phrases in different locations for this latter risk. But that poses another risk - what if somebody steals from my second location when I am not present, and I do not know until it’s too late? crypto The solution is to use a multi-signature wallet, which is a setup in which a threshold of devices must be confirmed to execute a transaction. I put this off for way too long but finally got around to it. Bitcoin Multisig For Bitcoin, there are two main providers I’d suggest - or . Both are self-custody, meaning you are the holders of the keys. No FTX-like risk here. Both have also raised much in venture capital and have great customer experiences. I actually spoke to Unchained Capital four years ago when they were just getting started and raising their first round of seed capital. Now, they have raised $100M+. Casa Unchained Capital Casa vs Unchained Casa costs $250 a year (they also offer more expensive services, which I won’t go into here), while Unchained Capital offers a free tier of service. However, the latter requires KYC while the former does not. How It Works For Casa, there is an app. You control two of the keys; Casa controls the third. You need 2 of 3 keys to send funds out. Your mobile serves as one key, and a hardware device like a ledger as the other. For the key that Casa controls, you answer security questions that you’d re-enter if you want Casa to sign for you in the future. . Casa would sign after a seven-day buffer. It is highly recommended you write down your answer to the security questions and put it somewhere safe. You would use this if one of your two keys was compromised You also have the option to use two hardware devices instead of the mobile. Unchained Capital is mostly similar, but they only offer the two hardware wallet solutions, no mobile. Also, while they are free, they charge a $20 co-signature fee if you need to rely on their third key. instead, they can verify via a method like video call when you need them to sign. They have a 72-hour buffer period before signing. Since they KYC, they don’t require security questions; hence you don’t need to worry about writing it down and storing it safely somewhere; While KYC has this convenience, a downside is that if Unchained’s data gets compromised, your identity and crypto holdings will be revealed. To be clear, your crypto would still be safe in such a scenario because you control two of the keys. Alternatively, the downside of Casa with no KYC is that you are responsible for storing the answers to your security questions safely. Finally, for a higher fee, you can do more complex options like 5 keys and white glove service with either Casa or Unchained. One mobile & one hardware wallet or two hardware wallets? One Mobile & One Hardware Wallet: With mobile, it’s almost always on you, so if somebody steals your hardware wallet, you’ll still have your phone with you, which some may argue adds a degree of safety. If you choose to keep one of the hardware wallets in your residence, you can conveniently transact anytime using it and your mobile device. Alternatively, if you choose to keep your hardware wallet separate from your primary residence, you’d need to go there to transact, which is less convenient but arguably even safer. Finally, if a natural disaster destroys your hardware wallet and phone, you can get back your mobile key from a cloud backup (more later), and use this with Casa’s key to recover your balance. Two Hardware Wallets: While mobile can be convenient, the two-hardware wallet solution is a great option, too, and even more secure for those who don’t expect to transact much if kept in different locations. If kept in different locations, you’ll need to bring your first hardware wallet to your second location whenever you need to transact. See by Unchained for different setup ideas for two hardware wallets. The maximum security setup would involve four locations that each have one of your two hardware wallets and two seed phrases. Very secure, but at the cost of inconvenience. A middle ground solution is keeping each pair of hardware wallet + seed phrase in two locations. here Is mobile safe? Yes. The mobile private key is literally on your device in a secure enclave that can’t be accessed by anyone, not even your mobile device manufacturer. This means that even if somebody stole your Casa login credentials and logged in on their phone, they still can’t sign because they need your exact mobile device. What if I change or lose phones? It is backed up to iCloud for iPhone and Google Drive for Android and can be re-established on a new phone. Risk Scenarios: : If a thief somehow manages to steal two of your keys (whether it’s two hardware or one mobile and one hardware) and get through the security needed to use those devices, (Casa or Unchained). This is because signing a transaction requires two private keys, but also the three public keys . The three public keys are accessed automatically through your multisig provider when you log in to transact. Somebody steals your two keys they’d still need to know your login to your multisig provider (note: public key is different from your address; your address is derived from your public key through hashing) You can send funds out using open-source software like Electrum or Spectrum. This process is called . For Casa, you’d basically export your mobile private key and seed phrase and re-establish your wallet on Electrum or Spectrum using your hardware device, mobile, and the Casa public key. For Unchained, you’d do the same using your two hardware wallets. Both Casa and Unchained provide detailed instructions on their website if this is ever needed. Multisig provider goes down: Sovereign Recovery Ethereum Multisig For Ethereum, Casa offers an ETH vault that basically uses (rebranded from Gnosis Safe) under the hood and comes for free if you use their BTC vault. However, it does not allow altcoins beyond USDC and Tether yet. Unchained is Bitcoin only by philosophy (something that Bitcoin maxis appreciate) so it does not offer ETH multisig. Safe Alternatively, you can use Safe directly, as it’s free to use, and you can hold any altcoin. It is the dominant DIY open-source multisig solution on Ethereum used by all decentralized orgs. They recently raised $100M on a $1B valuation. I got to be familiar with using it, as my most recent startup was built on the Safe protocol. nestwallet.xyz (this mobile private key and seed phrase can be exported out, but you’d only do so for Sovereign Recovery). The main difference to note between using Casa and Safe directly is that with Safe, you are responsible for safeguarding all your signer devices and their seed phrases, whereas with Casa, you can rely on them to hold one key (Casa key), while the mobile key will be held on your phone and accessed through their app without requiring you to write down a seed phrase For Safe, you can set it up however you want, like 2/3 signers, 3/5, 2/2, etc. Safe also has a mobile app that can serve as a key, but as I mentioned above, you’ll have to write down the seed phrase for it in a secure location if you choose to use it. The other signers can be hardware wallets, hot wallets (like Metamask), or a combination. The most important thing is to keep the seed phrases in separate geographic locations. Let me know what you think Hopefully, this was helpful as you think about safeguarding your own crypto. It’s a question I’ve thought a lot about, and it is important to have a solution that is immune to all the major risks - theft of a single device, natural disaster, or an exchange going down (a la FTX or the multitude of others). Use this as a starting point, but I recommend doing your own research and choosing the setup that best fits your needs. Feel free to reach out to me directly if you have questions, and I’ll do my best to answer them. Also published . here

Safeguarding Your Bitcoin & Ethereum: Exploring Multi-Sig Wallets for Enhanced Security

There are many approaches to XAI (Explainable Artificial Intelligence) that seek to grasp the factors that were most influential in models’ decision-making as they classify or predict against a problem space. One of the most popular methods is LIME (Local Interpretable Model-Agnostic Explanation), a feature importance algorithm that tries to analyze the decision-making of an AI by creating an explainable model that gives the same or similar results to the AI under examination. The originators of this approach describe the method . here Obvious use cases for ethics in applied artificial intelligence reveal themselves in situations where machines are making decisions directly impacting people. A clear example we will explore here is the granting of credit or a home loan. But there is ambiguity everywhere, including the edge cases, because even with industrial applications of AI, such as a machine learning model that calculates optimal petroleum mixes, there are human values embedded in the process and the outcome, whether those values were introduced consciously or not. Is the AI optimizing for viscosity or efficient combustion to the exclusion of pollution reduction? Similarly, we can ask whether an AI algorithm used for machining car parts is optimizing for speed of production, accuracy, or quality and the safety of the passengers. Additionally, as a person with a disability, I am keenly aware when using a search engine whether it is aware that someone with mobility issues will need a different entrance to a building than the able-bodied. Setting aside the examples above, we can turn to the case of a machine learning model that determines eligibility and interest rates for home loans as a situation where the human impact of an AI that does not operate ethically is clear. Can a Machine Learning Model Discriminate? It should be obvious that a machine learning model that uses race, gender, sexual orientation, or even self-disclosed disabilities on the part of the applicant as inputs to make decisions would be more likely to exhibit behavior that might be considered unjustly discriminatory in both a legal and ethical sense. The difficulty arises when proxies for these traits are used by machine learning models to make decisions. One proxy for the race of applicants came into use before the widespread adoption of machine learning, when the banks used the zip codes of applicants as a reason to deny loans. The fact that humans sometimes live in ethnic enclaves was sufficient for the zip code to become a proxy for race that the banks then used to deny loans to minorities. This practice became known as redlining, and it was outlawed decades ago. However, are we sure that all the machine learning models that determine creditworthiness and home loan availability today are well-versed in the laws governing redlining? Simply removing race and zip code from the models’ input might not be sufficient. What about the town the applicant lives in or the school they attended? Might those features, when used by a machine learning model, become proxies for race or gender, especially in the case of schools? Additionally, products and media consumed by applicants can be used as a proxy for race, gender, and other characteristics. If a sports streaming network is planning their marketing spend, and depending on AI to create audiences with demographics likely to subscribe, might the viewing and spending habits of those audiences be used by machine learning models to market to men over women? If more men buy certain pay-per-view events to stream than women, is it ethical for a model to use those purchases as a feature to determine the demographics of the audience they will market to? It’s clear that humans know more than machines about what proxies in the real world can be used for discriminatory decision-making by humans and machines. How do teach machines to avoid using proxies, other than specifically forbidding certain features and criteria from use by models? Can we train models to detect their own human biases? These are questions that I and my colleagues are exploring as we work with media companies, e-commerce giants, and others to implement AI that mitigates the negative impact of proxy-based decision-making on protected groups and all others because everyone deserves fair treatment.

Ethical AI/ML: A Practical Example

You can jump to any section of the US Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial here. Section 3 - Definitions. For purposes of this order: (a)  The term “agency” means each agency described in 44 U.S.C. 3502(1), except for the independent regulatory agencies described in 44 U.S.C. 3502(5). (b)  The term “artificial intelligence” or “AI” has the meaning set forth in 15 U.S.C. 9401(3):  a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments.  Artificial intelligence systems use machine- and human-based inputs to perceive real and virtual environments; abstract such perceptions into models through analysis in an automated manner; and use model inference to formulate options for information or action. (c)  The term “AI model” means a component of an information system that implements AI technology and uses computational, statistical, or machine-learning techniques to produce outputs from a given set of inputs. (d)  The term “AI red-teaming” means a structured testing effort to find flaws and vulnerabilities in an AI system, often in a controlled environment and in collaboration with developers of AI.  Artificial Intelligence red-teaming is most often performed by dedicated “red teams” that adopt adversarial methods to identify flaws and vulnerabilities, such as harmful or discriminatory outputs from an AI system, unforeseen or undesirable system behaviors, limitations, or potential risks associated with the misuse of the system. (e)  The term “AI system” means any data system, software, hardware, application, tool, or utility that operates in whole or in part using AI. (f)  The term “commercially available information” means any information or data about an individual or group of individuals, including an individual’s or group of individuals’ device or location, that is made available or obtainable and sold, leased, or licensed to the general public or to governmental or non-governmental entities. (g)  The term “crime forecasting” means the use of analytical techniques to attempt to predict future crimes or crime-related information.  It can include machine-generated predictions that use algorithms to analyze large volumes of data, as well as other forecasts that are generated without machines and based on statistics, such as historical crime statistics. (h)  The term “critical and emerging technologies” means those technologies listed in the February 2022 Critical and Emerging Technologies List Update issued by the National Science and Technology Council (NSTC), as amended by subsequent updates to the list issued by the NSTC. (i)  The term “critical infrastructure” has the meaning set forth in section 1016(e) of the USA PATRIOT Act of 2001, 42 U.S.C. 5195c(e). (j)  The term “differential-privacy guarantee” means protections that allow information about a group to be shared while provably limiting the improper access, use, or disclosure of personal information about particular entities. (k)  The term “dual-use foundation model” means an AI model that is trained on broad data; generally uses self-supervision; contains at least tens of billions of parameters; is applicable across a wide range of contexts; and that exhibits, or could be easily modified to exhibit, high levels of performance at tasks that pose a serious risk to security, national economic security, national public health or safety, or any combination of those matters, such as by: (i)    substantially lowering the barrier of entry for non-experts to design, synthesize, acquire, or use chemical, biological, radiological, or nuclear (CBRN) weapons; (ii)   enabling powerful offensive cyber operations through automated vulnerability discovery and exploitation against a wide range of potential targets of cyber attacks; or (iii)  permitting the evasion of human control or oversight through means of deception or obfuscation. Models meet this definition even if they are provided to end users with technical safeguards that attempt to prevent users from taking advantage of the relevant unsafe capabilities. (l)  The term “Federal law enforcement agency” has the meaning set forth in section 21(a) of Executive Order 14074 of May 25, 2022 (Advancing Effective, Accountable Policing and Criminal Justice Practices To Enhance Public Trust and Public Safety). (m)  The term “floating-point operation” means any mathematical operation or assignment involving floating-point numbers, which are a subset of the real numbers typically represented on computers by an integer of fixed precision scaled by an integer exponent of a fixed base. (n)  The term “foreign person” has the meaning set forth in section 5(c) of Executive Order 13984 of January 19, 2021 (Taking Additional Steps To Address the National Emergency With Respect to Significant Malicious Cyber-Enabled Activities). (o)  The terms “foreign reseller” and “foreign reseller of United States Infrastructure as a Service Products” mean a foreign person who has established an Infrastructure as a Service Account to provide Infrastructure as a Service Products subsequently, in whole or in part, to a third party. (p)  The term “generative AI” means the class of AI models that emulate the structure and characteristics of input data in order to generate derived synthetic content.  This can include images, videos, audio, text, and other digital content. (q)  The terms “Infrastructure as a Service Product,” “United States Infrastructure as a Service Product,” “United States Infrastructure as a Service Provider,” and “Infrastructure as a Service Account” each have the respective meanings given to those terms in section 5 of Executive Order 13984. (r)  The term “integer operation” means any mathematical operation or assignment involving only integers, or whole numbers expressed without a decimal point. (s)  The term “Intelligence Community” has the meaning given to that term in section 3.5(h) of Executive Order 12333 of December 4, 1981 (United States Intelligence Activities), as amended. (t)  The term “machine learning” means a set of techniques that can be used to train AI algorithms to improve performance at a task based on data. (u)  The term “model weight” means a numerical parameter within an AI model that helps determine the model’s outputs in response to inputs. (v)  The term “national security system” has the meaning set forth in 44 U.S.C. 3552(b)(6). (w)  The term “omics” means biomolecules, including nucleic acids, proteins, and metabolites, that make up a cell or cellular system. (x)  The term “Open RAN” means the Open Radio Access Network approach to telecommunications-network standardization adopted by the O-RAN Alliance, Third Generation Partnership Project, or any similar set of published open standards for multi-vendor network equipment interoperability. (y)  The term “personally identifiable information” has the meaning set forth in Office of Management and Budget (OMB) Circular No. A-130. (z)  The term “privacy-enhancing technology” means any software or hardware solution, technical process, technique, or other technological means of mitigating privacy risks arising from data processing, including by enhancing predictability, manageability, disassociability, storage, security, and confidentiality.  These technological means may include secure multiparty computation, homomorphic encryption, zero-knowledge proofs, federated learning, secure enclaves, differential privacy, and synthetic-data-generation tools.  This is also sometimes referred to as “privacy-preserving technology.” (aa)  The term “privacy impact assessment” has the meaning set forth in OMB Circular No. A-130. (bb)  The term “Sector Risk Management Agency” has the meaning set forth in 6 U.S.C. 650(23). (cc)  The term “self-healing network” means a telecommunications network that automatically diagnoses and addresses network issues to permit self-restoration. (dd)  The term “synthetic biology” means a field of science that involves redesigning organisms, or the biomolecules of organisms, at the genetic level to give them new characteristics.  Synthetic nucleic acids are a type of biomolecule redesigned through synthetic-biology methods. (ee)  The term “synthetic content” means information, such as images, videos, audio clips, and text, that has been significantly modified or generated by algorithms, including by AI. (ff)  The term “testbed” means a facility or mechanism equipped for conducting rigorous, transparent, and replicable testing of tools and technologies, including AI and PETs, to help evaluate the functionality, usability, and performance of those tools or technologies. (gg)  The term “watermarking” means the act of embedding information, which is typically difficult to remove, into outputs created by AI — including into outputs such as photos, videos, audio clips, or text — for the purposes of verifying the authenticity of the output or the identity or characteristics of its provenance, modifications, or conveyance. This content was published on October 30, 2023, on . WhiteHouse.gov Attribution - Creative Commons 3.0

Defining Key Terms in the Presidential Order on AI Governance

Let's learn about via these 62 free stories. They are ordered by most time reading created on HackerNoon. Visit the to find the most read stories about any technology. Collaboration /Learn Repo 1. Working Together: How Designers and Developers Can Collaborate While Building Products The success of your website or app strongly depends on the cooperation between the designers and the developers. It’s not about the professional skills of either group. You get a competent designer to make you a beautiful layout which you then pass on to an equally professional and experienced developer. Suddenly it turns out it can’t be realized without major changes! 2. How to See Which Branch Your Teammates are on in VS Code In VS Code, open up the team tab by clicking on the GitLive icon on the activity bar. Locate the teammate you are interested in and click the arrow 3. Sensor-based Control in Cobots: Its Opportunities and Challenges Introduction of the very basic formulation of the major sensor-servo problem, and then presenting its most common approaches like touch-based, 4. Teamwork and Collaboration: The Beauty of Being Replaceable Through teamwork and collaboration, you can make yourself replaceable. This ensures the project stays stable and has benefits for you and for the team. 5. Cross Functional Teams Cross Functional Teams 6. How To Create an Engaging and Collaborative Delivery Team For Your Business Does your team feel its alignment with business where what it delivers solve business problems and achieve business desired outcome? 7. Badly Designed Authorization Is Technical Debt Hard-coded authorization leads to technical debt. Decouple your authorization decisions to be a more effective business. 8. How to Solve the Accessibility Conundrum of Web 3.0 Here are some suggestions to make beginners comfortable with the Web3 space. 9. Why Service Desk Is an Essential Component of Collaboration IT teams must keep up with demand effectively and align business needs with user needs. 10. The Best Content Collaboration Solutions for Content Production Comaring 9 different content collaboration tools and platforms to determine which is the best for developer blog management. 11. Selling Your Million-Dollar Idea to Management The relevance and priority of a new idea to management depends heavily on how you package it. Here is a step-by-step guide to get them excited about your idea. 12. Startup Interview with David A. Smith, Founder & CTO, and John Payne, CEO of Croquet The Croquet Collaboration Library and Frameworks are the easiest & most powerful way for developers to create instantaneous shared experiences. 13. When an Employee's Pet Passes, Give Them Time and Space to Grieve People who know my co-founder (and wife) Rena and me or who follow our cats and dogs on Instagram know we have a Gaffigan-esque number of four-legged family members. 14. Product Roadmaps reloaded If this was 40 years ago and you were doing a cross-country road trip from the American east coast to the west coast, you'ld probably have a roadmap. You'ld be updating it every few days depending on the weather and the news you picked up along the way. You might have stayed a night longer in a beautiful town and might have decided to skip another. 15. Important Aspects of using GitLive I’m Sunny, and I’m a junior developer at GitLive. Since we are making a tool by developers, for developers, I wanted to share how I use our own product on a day to day basis. 16. How to Build High-Performing Product Teams A product team is the backbone of any company with a digital offering. They're responsible for constructing goods or a service that not only provides value to users but is also a reflection of the organization they work for. Product teams spin many plates at once, spanning duties from product management, product marketing, user experience, and product analytics. In the below article, we talk through the 4 characteristics that make up a high-performing product team. 17. 5 Team Communication Tools That Will Skyrocket Your Productivity Teams come in all sizes and these days from all parts of the world. Geography is no longer a limitation with messaging tools that can connect you with anyone in the world. The right communication tools can skyrocket your team’s productivity, as ability to easily share information and ideas with all your stakeholders is key to driving productivity. 18. Taking the Harder Path Is almost never the right answer when developing systems, at least the sort that I build. The easy path is almost always best and that feeling of “something being easy” is often a sure sign of being on the right track. 19. Why is Quick Dev Collaboration A Massive Headache? COVID-19 has undoubtedly exacerbated the feeling, but who else thinks collaborating or merely communicating with your teammates on code is far from convenient, especially when it comes to quick problem resolution? 20. How to Develop Interpersonal Skills for Collaborative Work New in office? Learn about the necessary skills required for effective teamwork, collaboration and develop interpersonal skills and excel in the workplace. 21. What's wrong with the Token Economy  and How to Fix It Well, if you remember, two years ago, blockchain was so hot a trending, a disruptive technology that seemed to be able to solve all the problems the world has. 22. DLTs Are Effecting A Marked Shift In How We Look At Multi-Party Collaboration In today’s new office normal, legacy process management techniques stand up to the test. How do we keep processes intact when stakeholders are scattered around the globe, or show up occasionally just to check in on the progress made? 23. How to Make Effective Collaborations and Hire the Best Collab Managers Detailed guide on how to create collaboration with or without a collab manager to promote your NFT collection. 24. Get Your Pull Requests Approved and Merged in No Time Have you ever faced a call to completely redesign your code in one of your pull requests? I have and then thought what are the ways to avoid this. Call it a pull request or merge request, basically, it is a set of changes you want to go ahead and merge to the main branch to deploy to production and complete your task. This post is going to highlight a semi silver bullet to get your pull requests merged faster :), carry on reading. 25. How to Collaborate With Other Startups for Success in Web3 Collaboration is key in Web3. Learn how to collaborate with other startups in the NFT, metaverse, cryptocurrency, and Web3 spaces. 26. What are the Best Dev-friendly collaboration Tools for Remote Teams? The right tools for remote developers can help engineers overcome most difficulties. 27. How to Choose the Best online Whiteboard for Your Team The use of online whiteboards has really become prevalent over the past year due to the covid pandemic and picking the right one has become very important. 28. Why I Will Be Opening an Office in 2021 I used to be the biggest proponent of working remotely. 29. Secure Enclaves and ML using MC² Announcing the official release of MC², a platform for secure analytics and machine learning. 30. Telegram and The Collaborative Community Telegram strives to maintain an active and healthy community of volunteers. However, the big question is, why create these spaces for participation? 31. An Interview with an Oil Painter Writing For HackerNoon I threw away the box a long time ago! 32. Startup Interview with Stefan Opsal, RendezView Co-founder RendezView was nominated as one of the best startups in Honolulu in Startups of the Year hosted by HackerNoon. 33. Content Isn't Community in the Same Way the Map Isn't the Territory What's the difference between community and it's digital representation? 34. I Asked 200 Dev Teams How Well They Work Together - Here's What I Learned I asked 200 cross-functional development teams how well their developers and non-developers communicate and collaborate while developing products together. 35. The Only Decoupling Checklist You Need To Know About My team has recently successfully decoupled one of the critical business domains of the company. The initial integration had such a tough deadline that the only way to meet it was to add code to the monolith. And… The feature that went from conception to production in three weeks ended up taking almost one year to decouple. 36. Is Cross-Functional Really a Dysfunctional? 75% of cross-functional teams are dysfunctional — starts an article in Harvard Business Review. The detailed study that served as a basis of the article investigated 95 teams in 25 leading companies that revealed the dreadful numbers. These companies were from a wide range of industries, including communication, software, pharmaceuticals, agricultural, retail, government, and banking. What they’ve discovered is that most of the teams in there giant companies had no clear goals or didn’t meet their specification (i.e. schedule, budget or were unable to achieve results expected by the management). Moreover, many of the surveyed companies weren’t even aware or concerned about these problems. 37. Why Multichain Collaboration Is Critical To The Future Of Web3 Web3 is going to be built by a network of engineers working towards common goals using multichain collaboration to make it as interconnected as possible. 38. All Blockchain Governance Protocols (2020 Edition) - Reviewed Although human kicked off a quite challenging start of the year 2020, for most governance protocols of DAOs, they have made pretty great progress and gained a lot of attractions alongside DeFi. 39. Using Experimentation Frameworks To Strengthen Team Collaboration Team collaboration can be brought to a new level by establishing a culture of experimentation through frameworks such as Execution and dispersed model. 40. How to Gain Support for Your Ideas and Get Heard Most of us think our ideas are great and rally them around with the expectation to turn them into something big. 41. Andros Wong's Wonder is Providing DAOs with Technical Infrastructure Wonder has one key concept and it is that “the future is collaborative” 42. Microsoft’s Collaboration with ChatGPT Could Spell Trouble for Google’s Dominance What does Microsoft's collaboration with OpenAi mean for the search industry? Will Bing finally be able to challenge Google? Here's what I think 43. How to Choose the Team Collaboration Software Teams spread over remote locations as well as the office are increasingly in vogue. As the coronavirus pandemic spreads in 2020, it has also resulted in increased reliance on distributed teams. These teams provide a huge amount of benefits and also pose a set of unique problems. Businesses are not surprisingly continually updating how they manage distributed teams. They are also increasingly using team collaboration software to overcome the challenges that distributed teams pose. So continue reading, to find the latest information on software that helps in the coordination and managing of distributed teams. 44. The Wolfram Physics Project: A New Kind of (Doing) Science The Wolfram Physics Project is an example of how open science can be done. The world of theoretical physics is not full of crazy billionaires with a vision to advance humanity. Fortunately, there is Stephen Wolfram, founder and CEO of Wolfram Research, designer of Mathematica and the Wolfram Alpha answer engine, the brain behind the Wolfram Language and author of the 1000+ pages scientific book A New Kind of Science. I suggest reading his vita to learn of an eccentric, terribly interesting man who has polarized the science community for decades. 45. Engineering Teams Need Inspiration to Thrive and Succeed We don’t deserve the team we can’t inspire. Camaraderie, purpose, and appreciation need to become our priority. 46. Finance != Future of Blockchain But Cross-Domain Collaboration is Once upon a time, the emerging of the blockchain seemed to initiate a parallel new era, a utopia of the Value Internet. However, now the tide has receded, Bitcoin and Ethereum, as the flagships of the blockchain, are still struggling to get out of the dark tunnel, and the difficulty of landing various blockchain applications still has not been resolved. 47. 5 Benefits of Project Planning and Management Here are some of the reasons you should create a plan and layout your project before you get started. 48. 3 Key Challenges to Effective Team Collaboration and How to Face Them A collaborative work environment leads to a more engaged and high-performing workforce. According to a study, collaborative teams are five times higher performing than their non-collaborative counterparts as they feel more motivated to reach common team goals. 49. Context-Switching and Why Developers Are So Allergic to It Developers hate context-switching. A lot. This article looks at why they hate it so much and the main approaches to addressing this critical issue 50. Unbundling Social Networks and Thoughts on The Third Pillar Two ways to make money in software: bundling and unbundling. Centralized socials polarized views and fueled tribalism. Socializing is about to go vertical 51. How To Work With Influencers Without Violating The FTC Guidelines The Federal Trade Commission (FTC) has guidelines regarding influencer marketing.  Be informed and follow the rules - that's our advice. 52. Enterprise Intranets: How Well Are You Protected? Intranets are vital communication hubs for many companies. According to Simpplr’s Employee Engagement Statistics: 2018, over 70% of professionals involved in employee engagement and internal communications consider intranets to be an essential aspect of their strategy. Indeed, it is on corporate intranets where employees not only collaborate but also share their ideas, express opinions and attitudes to everything that happens in a company. 53. 4 Reasons Why Email Is Obsolete, and You Should Move On Chances are, your business’ primary mode of internal communication is email. And you’re using instant messaging (IM) apps for virtual meetups and updates from the team, thanks to the coronavirus. Don’t get me wrong, email is great and all for internal communication (if you lived in the 20th century that is). But did you know your email to your teammates gets lost in a sea of unimportant emails? And irrelevant emails account for about 62% of the total emails in an average inbox! 54. Salesforce vs. NetSuite When people research new CRM tools to use, Salesforce and NetSuite are two options they’ll come across. Here’s what individuals who might use them should know. 55. Who Are You Writing That Code For Anyway? Special thanks to a number of people who reviewed this article and gave useful feedback and suggestions to me: Anya Roltsch, Frank Schubert, Olga Hollister, Ravi Varshney, Ashansu Pant, Marcus Blankenship, Sandra Jones, Taylor Davenport. 56. Talking to a Developer [Part 1] Approaching a developer in the wild might seem intimidating. We have a bad habit of mixing words and phrases into our vocabulary that make us sound like Geordi La Forge geeking out on how warp engines function. 57. The Feedback Fairy 🧚‍♀️ Shouldn't feedback be one of the easiest things we do as designers or developers? Just look at Who Wants to Be A Millionaire. When you get stuck, just phone-a-friend and make a million dollars. Easy right? 58. What it Takes to Get Your Team to Collaborate in 2019 Ever felt like you just nailed your team collaboration issues but run into more of them a few weeks later? 59. Top 10 Questions Managers are asking in REAL Team Meetings to 🚀 productivity My team meeting is crucial. I get everyone in a room and get everything I need out of them — with the added bonus of the team getting in sync, right? Wrong. Turns out, managers are blind to how crucial that meeting is to others. Only 4–9% of problems are known to managers... gulp 60. Get Beyond Small Talk To Forming Meaningful Connections At Work Striking up a conversation at work can be intimidating. We avoid eye contact, turn our heads away and pretend to be busy on our phones all in an attempt to save ourselves from the awkward moment of meeting someone and not sure what to say. 61. Evolution of Multiplayer Software: From Games to Tools ⚡ Have you heard the news? Epic Games, the developer of a wildly successful multiplayer game Fortnite, has just announced a massive $1.78 billion funding round. Want to know what it has to do with collaboration software? 62. How to Approach A Case Study For A Product Management Interview Product Management Case Study approach by using feature prioritization techniques. A brief introduction to the Product Management field. Thank you for checking out the 62 most read stories about Collaboration on HackerNoon. to find the most read stories about any technology. Visit the /Learn Repo

62 Stories To Learn About Collaboration

Stories, News & Mentions about ENCLAIVE

Enclaive’s Stories on HackerNoon