OpenFest 2025 Day 1 Hall A

This talk introduces the Student Arkosmic Engineering Club, which is dedicated to building a functioning rocket that can reach space. The speaker, Filip Andonov, discusses the team's journey over the past eight months, highlighting their goals of fostering practical knowledge and craftsmanship amongst students. He explains the design and mechanics involved in rocket construction, including the differences between solid and liquid fuel engines, and emphasizes the importance of onboard computers for managing rocket flight. In addition to the technical overview, Filip shares the team’s organizational strategies, including the need to document their processes to ensure knowledge continuity. The speaker encourages participation from interested students and underlines the educational value of their project and practice through hands-on work. Lastly, he expresses gratitude to the OpenFest organizers and hopes to inspire and attract more aspiring engineers to their cause.

Come on, hey [music] So we have to start in a moment. Actually, we shouldn't have started now. We should have started, but as I see most people are in the same boat, so maybe I'll ask Erka again to went to shout and tell them to stop appear. We forgot our megaphone, but we have a few the people who have such a big voice to shout. A I

currently have one microphone and no you to I can tell you some kind of scene, However, all the jokes I can think of in At the moment, these are the ones I give as examples. What was not told from the stage? and x and you're on stream, we'll lose the audience. Yes, we will lose the audience. Exactly. It will be very scary. And so. Actually you You're

probably still confused. Ah, yes. Did you get angry yourself or did they get angry? No, they threw. Okay, I hope Yes, good. We'll start right now. I will I'm trying to remember some kind. Ask yourself, right? I'm not nice. You're not from here. You're not a fake. Yes. I'll check just in case. Ah, I hear. even. I'm not mad anymore. Yes, great. Yes, I'm going out. You

can mute me. calmly. So when you prompt me, just Shut up, so it doesn't show that I don't know. What am I talking about? It's not that they don't know me, it's that I don't know What am I saying, but still? Ah, right. let's see how many people came, became in this beautiful wet weather. They are coming, they are coming, they are coming. Yes, more and more.

Mhm. So what? Joke. I know. The main one, the only one, The one I can think of right now is how a woman walks past the cemeteries and she is very scared. Wondering what to do? right. He is very afraid and sees some This is a man who is leaving. I'm shouting, can I? to go with you, because something very, very bothers me It's scary here. Maybe,

he shouts, no problem. they leave, the two of them walk, then some time they almost reach the end and they ask: "Okay, not you." The woman asks: "Not you." It's raining fear, when you walk here it shouts: "I was afraid when I was alive and I remembered another one." Okay, maybe I'll tell you one more and then you can Let's see, let's get started. Ah, yes, three

bats they are hungry. They hang out in the cave and at one time one said, "Okay, I'll try." He returns in two hours, shouts: "Do you see "That forest over there?" I see, there's nothing to eating. The second one takes off. Call in four hours. Do you see that over there? that mountain? We see nothing for Elite three returns in five minutes and the whole muzzle in

blood and the other two look at him hungrily and They shout: "What happened? What happened?" Do you see that tree over there? We see "Well, I didn't see it." And Net, will you be back in five minutes? Let it begin, I think. I hope we can do it. Okay. Me too I hope you collected that much. Hmm. Good morning. Welcome to all who have risen in this

wet, nasty at Openfest 2025. I hope you managed to get a drink. morning coffee, morning tea, the morning brandy for some of you. And who hasn't had their coffee, there's this here and that below coffee that can to take, to get ready. In the sense of no overdo it, as far as I know, it's not much okay. We have some things to say. organizational, some related to

the event, after which we will continue with the first lecture and the following days are the delights of one OpenFest, organized by about 50 people. We have all kinds of fun things, I have, which Net will tell most of them. We have lectures, workshops, we have stands with strange things. There is a rest area at the back. and so on. Even an after party. There will be

more details in a moment. The organization was standard. adventure. For many people this was a big effort in the last month, for some in the last three months, for some in the last one year. We always have that moment. I get up Saturday morning, I come here and I think, but this actually happened, no I can believe it. And this is from things, which are too good

to be true. Simply there are so many and so different problems. We manage to deal with them. And now we've been doing this for over 20 years. event. One would think that we actually need to know what we are doing and that it has to happen. However, the fact is, that there are always new strange problems, with which we must fight. And for example this year our

schedule is two weeks early because we tried to catch club time. Obviously it we caught. there is some open source project, successor to the harp to control climate, however, they are not ready yet, so We will have to live with this. But from the outside there are awnings, and with food there are awnings, so and there are plenty of places to sit. We undermined chairs everywhere, so

it should that it's okay and that it doesn't bother us And we did it. Here yesterday in some moment a few people sat down to deceased. It wasn't easy for us, and besides, it wasn't at all After all, from difficult things, for example, you had to to take a break from work and this is very difficult, that was it. It took a long time. there is some

fun part. There is and there is not such a fun part of the lecture. It's been a pretty crappy year and I'm not talking about things like heaven will The fall will eat us all. Ah, we lost. a lot of people this year. Really them We have lost our commonality. This is Vlado Kaladan. I sat and wrote notes about what to say. and it was and still

is difficult for me to I say these things. And I don't know how many people, I don't know where he started. This is person. Probably most people have seen his photos that he took on events and cannot know they do not know that he did them, but he was like that a lot main photographer. aa participated, did many such interesting podcasts like I speak Speak Internet and

Tilda inclined. And he helped in all sorts of ways events in an organization, and for many years was involved in open source translations. There was a big contribution to our civil society and perhaps in general for we need to make it a separate one Atanas Bachvarov, who we knew as Cervarium or bowel obstruction. a strange and contradictory person, but actually very, very good a person, in the

sense that he was helping everyone was actually very nice person. And I'm sure that if he looks at me Somehow, he disagrees with me. But we miss you and Galya, which was such a very basic one for us reception organizer for many years, and also a volunteer at many other events. She was very much done and all sorts of things. And in general, things athletics, any international

relationships, and saving animals and You never refuse to help anyone. I rehearsed that lecture yesterday. and this kid keeps saying that I still don't understand I don't believe this happened, right? Okay, but I wanted to compensate with something, that it's not just that. Meaning, although It was a very bad year. at the expense of the people we lost, there was another event because of which also some

people can't be volunteers, there will be volunteers in the future. Here for example, you might see a child who seriously considering how to shave his father's beard. Look here how he sleeps peacefully, because he doesn't knows he'll be a volunteer in a few years with us. We have two here who will replace their father and they will buy cables. And here there are two very, very surprised

people who hear, who wonder what they will do and It looks strange. Many I'm glad that there are four of them here, and There are three previous photos. And actually I even wanted to put another one, which is on one stomach, but I decided not to I eat politely, but even that is still expected. And I'm thinking about stopping doing it. A I mentioned this organization. The

year, as always, was not easy. there was all sorts of strange things and I was wondering, right, what exactly the thought was in my head, why am I even here? I was busy and wrote what doesn't sound right okay, but I hope he succeeds convey the meaning of why we should at all We do these things because we have to. to deal with. And I will pass

on the rest to Nedelcho, yes, the more formal part, to tell you in some more meaningful things. Thank you. Oh, hello, It's my turn. Now I'll go through the more official part. I saw you warmed up your wrists like that. The applause. You're doing well. And Now I'm going to ask you for a little applause for our sponsors. Now we will list them. But these are the

people without whom we would not be how to make this event and this event to be free for everyone. and all of you can come here and you enjoy all the lectures that we have prepared for you today and tomorrow. Our biggest sponsor is Storpol. Please for your applause for them. Telelink Business Services grafanala ADD and GT Digital Rocket Studio as well as Hacksoft and Myln. Again,

I want to say that without these people we can't make this event happen, so we are infinitely many to them grateful for their support, as well as our partners Sofia Tech Park, deh, INITLab, FMI, Bullstream, FSD, IPAC and as well as all our volunteers, who are here today, you can see them with green t-shirts. I am the exception. I just want to tell you that today, when

Do you have any questions, people in green? T-shirts are the ones that can make you help with everything, and tomorrow the people in orange t-shirts. Therefore, to you show what the people of tomorrow will look like. I am the man from the future. So, a little intro. Which where can you find the one you want? I'll be a little like like that on the plane. Tick, tick.

That's right. Coffee shop. Very important thing. Early morning. That's the most important thing, right? Then in the afternoon too. There is a cafe. over there on the side, as well as on the bottom floor. So if there's a very big one there queue, you go downstairs and check downstairs. Water. You can find water here by the coffee, as well as at the other end, where they are

our partners. Toilets are the next thing. You can find the toilets again. left, right and bottom right. my right, so orient yourself accordingly my directions. And the children's corner, we have prepared a children's corner for our youngest visitors, so that you can listen to the lectures on peace of mind. And the children's corner you can find again on the left at the end of the corridor. Food,

something very important at noon. Our Partners from Arabia will be here. The food will be over there on the right, in the right side of the feno on the outside, and they will have food or so-called Manjavanchita, and where there will be a grill. A for those of you who don't consume meat, there will also be a variety of grilled vegetables, so there's something for you too

What to eat. We have a relaxation area that is It's located in the back, right behind the stage here. that you can go to, there are puffs, you can lie down, you can you are resting. And in this line of thought below we have one overflow, a tent in which a located down in front of the amphitheater, where is there you can go to a covenant. On

Okay, at least it won't rain. A you can go rest, be yourself you talk a little in the air, so yeah refresh with oxygen. And something very important, our workshops. And we have a lot of interesting workshops here. year, as well as previous years. And we have those that are for another year with us. These are tools that make a workshop for lockpicking. They are located below,

on downstairs, like most of us are workshops in real life. And we also have a workshop for for soldering. we have today a little later there is a very interesting workshop for Bash Script Fundamentals, which will be here. That's right. We also have a workshop here in the adjacent hall with Yes, with Aa also has one A actually not there, it's there in the back. That's right.

And we also have a quiet workshop that located at the back next to the relaxation area. That is, you have to go backstage again from the back side at that end. There you can to find the other workshop. It is small. hidden, so I want to tell you where is located so that you know it. And don't forget to visit our stands of partners and sponsors, yes

get to know them, see what a they have to show you what goes with what busy. There are many interesting things. The sponsors are super interesting. Our partners too. So there's something to look at, there's What to see. So, grab your t-shirts. Anyone who he ordered a t-shirt, Until tomorrow at noon, the t-shirts are safe. The t-shirts will be released after lunch tomorrow. freely, whoever wants to

take them. You have the opportunity this year to pay by card or in number. So for your convenience we are They even prepared this. The next important thing I want to tell you tell the After party mic 5 on Sunday 8 bracelet entrance. So take yours. the bracelets, don't lose them, they are yours entrance to the after party. And let's not forget, the sponsor of this one

author is Store Pool, as you can see you can also see it on the bracelets themselves. Without them not We could do this after party. like that. Lightning Talks. A very interesting part of the program us. Here we give everyone the opportunity of you who wants to go on stage, each one of you who wants to performances, to see how he would stand on stage or There's

just something he wants to tell us, something interesting he wants to tell us, can be booked at the reception, which is finds it there. That's right. It is being recorded. and he will have his five minutes of fame. He will he can come out and speak. If it is prepared a presentation, then it's I also prepared a laptop with HDMI, otherwise I won't it happens. But you

have these five minutes. You can talk about whatever topic you want, as long as it is in C ofct, of course, in meaning we should not overdo it. And I think this is the last thing, which I will deal with for you. Then I will tell you I leave it to the lectures. And we want your feedback on the sessions. When a lecture ends in the program

will appear one time to leave your feedback. Please do it. This is very important for us as well. organizers, as well as for the lecturers themselves. Each one of us understand how and what can be improved how can he do things better. Therefore, it is very important to You leave feedback and we really appreciate it. we appreciate this thing. So please, leave feedback on the lectures and

have a nice time at OpenFest 2025. Now let's see where our first lecturer is. loses. Philip, where are you? Philip, Philip, Philip, Philip, Philip. Ah, it's coming. Here it is, here it is. Hello, Hello. So, Philip is from the Student Club. asmiche aerospace engineering. Aerospace engineering. I wanted it. I'm confused, that's why I let you be the one you say. Okay, I got it wrong too. Well,

these things are happening now. It's normal. Everything is correct. That's right. Only let's see, let's get wired, let's see some Will there be any need for help? Will it go? Of course, like everyone else, one part, but it won't start from the first road. Here you are. The USB for the clicker. We are waiting for Ubuntu to boot. No. Ah, we're waiting for Windows to load, However,

the rebellion began. World fatherhood. At an Open Source conference, Windows will starts. I apologize. I tried Debian, there was no pip on it. Installers. We refuse. We tried Ubuntu, it didn't work. Yes, by the way, I apologize profusely. A while ago my laptop was working, but... decided to disappear out of nowhere. It wasn't. This is planned. Hey Windows, What can I tell you? And he woke up

in a rage. Returned to default settings. Come on. Okay. Well, besides jumping on the stage here, let's do a performance, while we wait. Do you have it uploaded somewhere? No, we do, but it's easier to just I wait. Okay, where is it hiding? I can Let's start without a presentation. Perfect then. come on. I'm getting off the stage and leaving you. then on stage. Please. Applause for

Philip. Hello, my name is Filip Andonov. Today I am here to introduce you to Student Arkosmic Engineering Club. We we are a self-organized group of students and pupils who have set themselves with the aim of building a rocket that we want to reach space and We land back. And the laptop booted up. Let's see if, however the presentation will also open on the screen. Okay, we have

some partial success. And that and as I told you, we are so one truly self-organized group and We started about eight months ago. We have set ourselves a pretty big goal, to which I will have the opportunity to tell you subsequently 45 minutes. Thanks to the organizers of OpenFest, who they really tried to do something very, very, very interesting for us here. And the truth is that

we we applied for a booth in the hope of we can touch a part of you. However, they took the initiative and they suggested we come here first lecture. Of course, I missed this one. idea with my presentation here, but a the interesting thing here is that of course we we accepted immediately. Ah, but after it passed the initial joy, we thought that these They are people,

but they practically don't know us. They know our work because we wrote with What are we doing, but they are not making any money? absolutely nothing to do with us coming here and to take this important lecture, and what so it really makes us think that they really they are doing this event with the idea of ​​making something positive for Bulgaria, to stir up our ecosystem and

we have great respect for their choice to help us, for which We sincerely thank you and are glad that there is so many people who are here among us and who will be able in the next a two days to have a great time. I wish we could all learn. the lessons, to get to know many new ones, cool people, let's learn to unlock padlocks and everything

else interesting, what the event offers. okay. So after we sat down to think together how to present our activity, we came to the conclusion that maybe okay first I to introduce myself in a few words, then which we can tell you a little more about the missiles, not so much from a technical point of view point of view, as much as from the point of view of

what role they play in our lives and not even historically, but rather more practically oriented why everyday life we wouldn't have it like it is and how they have changed a lot more than we have we suspect. And finally I will continue with the club itself, with what we do, the way we do it because I believe this is also quite interesting. Well, I myself am a

big fan of topic of computers, ever since I can remember and as a whole 11 years ago I first started time to program. I was just having fun. too much time in front of the computer. Our people kindly sent me away one-way to an academy. So Since then, my interest has actually been piqued. It turned out that this thing is quite a lot interesting. I find it

huge pleasure and then I was quite small, since I am 22, so I was 11 then. And of course I didn't have many opportunities to understand what That's exactly what it's about, but considering that there is a YouTube that has absolutely all possible videos on the topic computers. I looked at them, I tried. to learn, my interest increased. That's how I got into professional high school. It

wasn't long before I discovered that in fact, true knowledge is found in not so much on YouTube as in books, as much in internships as in the real professionals, wherever I started looking for a job. Before 16 years ago no one wanted to, that is, before 16 year old no one wanted to take me at work because I was too young, but at the first opportunity, of

course, I stepped up in that direction and so I got into a really pretty interesting environment where I started learning more and more. Accordingly, I began to go to events, read textbooks and That's how I ended up at university. I am now Technical University, fourth year, computer and software engineering. Like maybe in first year for the first time I touched on the topic of rockets, really. because

digging deep, and since I'm telling you again, I'm mainly interested to computer systems, digging into depth, I realized that the computer itself himself is useless. He must have some real-world application, for so that he can really play the role you are on something that can help humanity. And if there is a place where computers are very complex, so these are rockets, because the engineer has to try

to get the computer to work even when it breaks. So okay. And the clicker doesn't work perfectly. okay. So what's in a rocket? I promised you there wouldn't be much technical part, but there are still some basic things that everyone should know knows. And the rocket represents one a tool with which we can we carry cargo into space. This load is the reason it exists and if

he doesn't exists, in practice it is also useless just like a computer would was, if it did not do something useful for us. So this load is most commonly found from above in the rocket and or in so called the payload capsule. This capsule represents a very a large mechanical structure that should open beautifully while fly with 1000 m vskunda. But she herself is not sufficient in

itself because it it has to reach space. That is, this it is not a simple constructive solution, which needs to be built, but towards it engines should also be added. One A rocket has many engines. And these Engines are of different types. Most often the two most common are solid fuel and liquid fuel. Like the solid fuel you can imagine an engine as a tube into which

the very thing is poured fuel. It is quite similar to cement in the beginning. When it is poured into the pipe, dries and becomes hard. Just like cement. When and when this fuel is Once it starts, it starts a lot. a strong reaction that cannot be stopped. Or in other words, firmly the combustion engine is quite similar to one a firework, where we just light it and

We'll see where it goes. There's no way. stop, it's quite powerful, but it burns quickly. On the other hand, liquid bracelets engines are so pretty the more complex option. He much more also resembles the car, the automobile engine, because there's a lot of stuff in there, which happen simultaneously. There is chemical ingredients that are mixed and When the check engine light comes on, it gets pretty bad.

expensive and difficult to fix. So on practice this, although it is more complicated engine type and preferences when we're talking about putting a rocket in precise orbit in space, as we can we control exactly how much gas to we submit. These engines are interesting in several reasons. They have mostly liquid-cooled engines, they have two the tanks, which contain one fluid. We have an oxidizer that is the

oxygen of our reaction and we have the fuel, which can most often be kerosene, methane and all sorts of other things explosive mixtures. So these two fuels they are located very, very high pressure and respectively one of the most complicated things to do do, is how we design and how we should design a tank that withstand these pressures and what happens happens when the fuel runs out

because there must be something to it though space so that everything doesn't shrink. So this fuel, it is under very high pressure in the tank, however we have to we are under even more pressure. For the target has two turbines that are located in every single rocket engine. These turbines are mini rocket engines that they spin at quite high speeds the whole and which spin pumps with

quite a lot high rpm so that this fuel can to pour out and enter the fuel tank camera. And accordingly we have fuel a chamber that requires us to have combustion with many, many thousands of degrees Celsius, but it not to melt, even though the material usually melts much more easily, than that is, at a much lower temperature. This problem is being solved. by passing the fuel

itself through the engine itself, through its physical walls to cool it and that makes so the problem is quite complex. However, there is also something that is not sees directly into every single rocket and that are precisely the computer systems. They are not just a system that monitors the entire this process. They are a system that actively manages it and also and they are a system that

should guide the rocket and put it into the correct orbit. So there is a very, very serious mathematics that stands behind. But I won't to tell you about this. I will talk to you. rather about what the benefits are and why This rocket exists. Of course, she has the obvious benefits. For example, let's upload her satellite and this satellite ours allows us to do many things. For

example, how many of you have gotten lost in the last 10 years in the forest or in some unknown city? Is there anyone who got lost one, two? Okay. But the others are not. Did you know it has GPS? Ah, great. Despite that? Okay, so that's a lot. okay. Oh, but yes, we have GPS, the technology that allows us to we know where we are. Also, besides

to know where we are, our satellites allow us to look from above, yes look from space and see how us, the earth, and even if we look beyond our atmosphere things that in principle we can't see that they exist here. A and of course, so that this whole anything is possible, we also have one radio telecommunications link that however, it turns out to be quite useful when

let's say we want to call in the middle of the ocean or let's say in a place where we have no range. But not so interesting each of these each of these, that is, all of these things individually are not that interesting. It's interesting when we combine them. On practice the combination of them us allows us to be able to see when are importing drugs into our

country, which will reach the street and ours children. The combination of them allows us to be able to fly a plane that always arrive at its destination and to land precisely and clearly on the runway, on which to land, not aside and not to crash. Accordingly, another very useful thing, which our missiles unlock as it is possible to predict fires, yes we predict the weather, to know

whether today to come with glasses or to come with a jacket. besides the direct benefits of the rocket, there are also pretty much like that, a little more indirect. For example, many drugs are discovered in space, then replicated on the ground. A besides, there are also much more practical ones things we have in our daily lives, thanks to the rockets. For example, the screwdriver you are using

We head the furniture at home. He is open. along the line of space. The foam with which we insulate our houses again. This is it again. discovery from there. And we have wireless headphones that maybe some of you they have already put it on. They are also thanks to the rockets and even the pens we write with at school, and They come from this very field. So

understands and the scientific research that we help to and who help us to we learn more about ourselves and about physics of the world, such as gravitational waves and many other things. But for me the most interesting print that Rockets remain in our everyday lives, yes the invisible. It cannot be measured, but me, when I started dealing with this club, and that's when I first discovered it

time and it impressed me a lot. In fact, it turned out that a large part of the engineers and university professors have got fired up about this topic thanks to the rockets. That is, they first have seen the complexity of the challenge, they saw what wear it and then they started to they are studying, they have begun to explore physics, chemistry and so on. But for regrettable,

since in Bulgaria no one deals with such things, have become, let's say, engineers in the automotive sector or university professors. their inventions in practice directly support all other industries of our daily lives and the teachers who have decided to share their opinion, and that is, their knowledge, in practice they are prepared the next people who will support our economy. This is something which I say again, cannot

be measured, but I see it in conversations with people, with whom I share my passion and accordingly I started looking, okay, how could I Should I build a rocket? I really liked it, I am very interested. I started to I'm researching how this is possible. It turned out sure it's not from one person or at least it's not possible to do within the framework of one life.

Therefore, we as programmers What are we doing? We parallelize and as a so programmers the first idea is to let's go and get to know more people. I tried, that's how the idea came to me to create a rocket engineering club and this club should be aimed at people like me. People who want to create, they want to develop and they want to do something practical in

your student life years to learn how they happen So I started by forming a team or otherwise I say call all my friends who might show interest and invite them. And then I started researching and trying to founded such a club at the university, but I came to the conclusion that maybe it still either we are not mature for this thing, or the system itself is not

suitable for this stage. But on the other hand, looking for and support at the university, I met with an enormous number of teachers who contrary to popular belief, they turned out to be quite willing to help us. Quite a lot of They even invited me to their lectures to I can present the idea to students. And so I found it really interesting a group of very cool

people. We did our first meeting, which was held again at the university. And here in the picture you can see the people, who started this thing before about eight months, a little more. Most of them are still here, almost all of them. they are still here. But what's interesting is is that the people who have remained like this for a long time and as we got to

know each other better, we found quite a few commonalities. We have all come together to learn. We have all gathered because we want to work as a team. We want to we practice what we learn. Not just we want to learn it theoretically, the university already gives it to us, but we want to do something with our hands, to learn and face the problems that otherwise we

can't find out. We want to solve a problem that has not yet been solved. His decision is not written anywhere. and we want to launch the first Bulgarian a rocket to reach space. So on We finished the practice of this meeting and more something very useful. We made a plan. for action, as this is one very, a very large bite to take from the first time. And

that's why we decided that we need several stages so that we go step by step. The first stage is the preparatory stage. The idea here is to to get to know each other, to sort out the chaos, because we have no idea what we're doing and that's normal. We haven't done it. rockets, and this is a pretty complicated one a process in which there is an enormous

amount of dependencies. Everything depends on everything. the rest and everything else depends on this thing. When you change it, absolutely all the bills start over and there is no correct answer. Because of herself nonlinearity of the problem in practice we we need a whole period, in who we go through the whole process, yes we understand what's happening and only then let's start building one for real stable

foundation. So accordingly op, so respectively a stable basis ko What I'm talking about is the second stage. She is consists of building a rocket that to fly to a height of 100 m. The goal of this rocket is not that much to do a great achievement, as truly on it to develop things, so that they can be the foundation, above which we will build on until we

reach our future developments, with which we want to reach space itself. So on her we want to develop on-board electronics from scratch, flight software from scratch. We want to develop a solid fuel an engine that would allow us to be able to to test cheaply, efficiently, everything it's safe and we can have this, What's stopping us is not where you're from. deliver the fuel or where to

find it money for him, but rather to stop us only and only that it is not yet we are ready with a prototype. However, we can test it and yes move it faster forward. So, of course, you have to to also develop a simulation model, which will allow us to predict our How will the rocket behave? This includes many differential equations. This involves quite a bit of

math behind the scenes. Understands includes mechanical stresses and many other things. So we need to develop a structure that can withstand flight. But the most important part of this whole process is to not forget that we still We are students. It happens that a person disappear. It happens that a person has to to work, to do something else, to have no time. And one of the biggest

problems, that we want to solve and I would already say, that maybe we decided, is to find a way, on which we can both move forward and The know-how will not go with one person, who if he leaves, we hang. And the way we decided to do it do, is like we decided to describe absolutely everything we do and to do it we describe in very accessible

language. That is, let's say, I have to make a decision what is the perfect shape of a nose the rocket. The way we want it we do, it's like okay, I say, I open a document and write we make a nose of rocket. Accordingly, I take into account certain factors. He must be aerodynamic, must move fast, it must be smooth, it must be able to produce, it

should not be expensive and so onwards. Then we look at a few different options what are the possibilities, so that we can ultimately yes yes we make the nose itself and as a result we make a decision. This decision also we also describe it this way, if I am I left tomorrow and someone else came to my place. place or even if I'm there after one year,

I remember very well what a nose I am designed, and in this way they will be able new people to come in and learn from what I have discovered, without I need to actively dedicate my time to this. Of course, if I can help, I always would, but it's just not always possible. And in this way we too we create a database that it turns out that

she plus ourselves are equal to a very interesting environment, in which every single person from school or from the university can come to us a lot quickly get into the topic and start to think about the real problems, to start learning literally from the entrance door and this is one of our biggest goals. We also really want ours developments while we are doing them, to find a

way to show them in schools so that we motivate a little more people, especially from high schools, because unfortunately more or less 10th, 11th, 12th class, and many people refuse to study physics, many people are refuse to study mathematics because they don't see the point in it. Our idea is rather, let's show that Newton's law It's not about throwing myself all over the place during recess, but

rather to be able to develop something interesting, something new, something that to be useful to people. this prototype itself, of course it won't get anywhere. He needs of more work, but it's a very good one basis. We want to build on it by Let's go in the direction of a slightly higher flight. and this time the flight will be between 2 and 5 km. The goal of

this stage is to develop two main technologies. The first is active management. We want through in-laws or in other words yes we direct the engine so that our rocket to move only and only up and there are no problems when there is wind when there are any irregularities in the surface and so on. On this one way we will ensure that everything is safe and the way

to try it is by simply shooting higher. Therefore we raise the height. The problem when we raise the altitude, is that the rocket falling has a much greater chance of break if something goes wrong. This gives us and the ability to create telemetry, with which to download the data for absolute everything that happens on board in real time. This includes temperatures, this includes power supplies, this includes

currents on board, this includes absolutely everything, including all measurements from gyroscopes, barometers, all instruments on board. So will we be able to we nail a flight of several kilometers, which is stable, which we can measure correctly, on which we can rely trustworthy? Will we be able to develop the mathematical model that tells us how Will this thing happen? The next step is to make a liquid fuel

engine, because this technology will allow us two very serious things. First, we will allowed us to reach space, which of course it is also possible with solid fuel rocket. But the second more interesting thing, what it will allow us to do is to be able to We land our rocket. So accordingly shall we build the foundation? Our main goal will be to take off on 5 m

and land back. So after these 5 m follow 50, follow 500, 5000, 10,000 will follow and gradually we build on the design until we can we reach our goal. Of course I I've simplified a lot here, but of course, we will have many problems along the way, but Ultimately, the idea is to have one a solid foundation on which to build and even if we ourselves don't

continue this something, I really hope next year a year, two or three, in which we will work on this project, to involve everyone more and more new young people who to want to develop this thing because this is the only way can we continue it and accordingly, and That's good in theory. That's all, What I told you is a theory. We gathered. in this hall, we decided

this thing, however It's time for practice, for reality. The reality is that we, I repeat, nothing We don't know, we haven't solved this problem. Of course, we all have experience, we have all worked, we have a job internship or internship most of us have the great desire to learn, but we just haven't done it. So in practice and what do we do when we don't know what

to do do we do? Well, we get together and start being we are talking. And we decided to share, that is, we decided to determine who they are the main problems with rockets, what are they the main areas of science and everyone to take on what interests him. For example, I am interested in computers, I'm starting to research how to I study how computers work. the rocket.

Accordingly, the same applies to aerodynamics, physics and everything else. So we started getting together, we gather in groups. The idea was two hours ago. to separate, each to study a certain topic in advance and within this time to be able to imagine it one to another, to learn something new all together to gain a common basis. Okay, that's good. In theory, In practice, we gathered and separated

according to five, seven hours. We fell asleep at night, because we were just very interested and everyone had prepared well. So So, about two months passed, in which we learned a lot, we shared a lot works, but we have reached one a moment when everything is very good at theory, but we haven't done anything. That's why we decided then that moment coincided with a scientific conference, which

was after two and a half months. We decided for this scientific conference to we build a rocket and this rocket we understood it to be the following. It could be ugly, it could be anything, but it will fly at least 50 m and we will have done as much of it as possible, in order to Let's learn how to do it. So accordingly we started work, we

started work online because there was nowhere to go we collect. When things got going, We have to meet somewhere now. We found the opportunity to work in one garage in Lyulin. On the contrary, if you do rockets, Lyulin is the neighborhood, no one knows it I care what you do. And they even help The neighbors are having a nice time. curiosity. So this garage can also to

see it. Here we hung the rocket, because he doesn't listen to us. This is ours. wind tunnel. And in the end the result of the work is that we we succeeded. For two and a half months We built a rocket. This rocket reached height of 55 m, which is so much, as much as we simulated. And besides these 55 m, She flew for 11 seconds, opened her

parachute successfully. And all that you see here, we made it from scratch, with except for fuel. Unfortunately we didn't have time for that, but now we're working on the matter. So in practice we developed and the simulation, or at least we learned how yes let's do the simulation in the most basic type. We learned how to make the body. We designed it, we made it from whatever

we find. 3D printing, we purchased elements, processed, we made everything from scratch. Ah, we made the electronics, the software, which are the simplest thing possible, what we could do then. ESP32 with freerost, dual-core, that is, it is dual-core processor. We made it respectively relatively calm so a system that behaves stably and aa so the most interesting thing maybe like challenge we faced was to open the parachute.

So In practice, this showed us two things. He showed us the process of making rockets. Show us and show us what it is like the process of untying the knot, because this is really a pretty complicated knot, which, again, has many dependencies in it and showed us that and we have the need to organize ourselves a lot well, if we want this thing to succeed. We really

need to not let go the know-how should remain in one person. What about us? Let's all move up together. We have the need to know every single person on what it does, and how it does it, why it does it makes it so that everything can go together forward. And what it showed us is that we don't want anything on it that We don't understand. We don't

want there to be interrogative. We don't want there to be variables. We want everything to happen. exactly as we want it and exactly then and as a must happen. So something else that this rocket showed us, and that we really want to do it this thing. It gives us pleasure. This was the moment we let go, we launched successfully and everything happened wonderful. This fired us up

even more. This was our motivational launch. So now it's time for the second stage, in which time to make a really stable one basis. For this purpose, we develop entirely from zero on-board electronics, by stepping on STM. We have chosen one dual-core microcontroller, which will be our on-board computer. Besides him we want to develop a fairly modular a system that resembles a motif the industry in which

we want to develop the individual components of the rocket. so that they may be one standalone modules and we through standard interface so we can use them we connect. In this way, we will ensure that that even if we change something in the future, we we can attach it to the already working ones things and not worry that our system will not be tested, it will not

be sure or it won't work. But this is quite a small part because apart from the hardware need software. For software we have decided to we use C++, and we decided to make maximum number and so maximum serious code base and for this purpose we even decided to try to standardize to some percentage of the line of our code. We would also like to develop it so

more modularly so that in the future, when new students join, students, to have the opportunity to catch one module and do it well, to do it include in the system and see how work and how yes of course except software hardware there are many other things. We are developing absolutely from scratch mother model of MATP, which we will build on over time and we will make it

more and more accurate. A up in Yes, up in the corner you can see and our fuel test setup. We need to raise a lot. large infrastructure before we can we launch the rocket. The infrastructure will be both physical so that we can to test things, so that we can have it both virtual and so that we can to endure our labor purely organizationally, that is, to

have a code base, to have our own VPN network, in which we can upload everything we we do, so we can test it automatically, to make checks automatically. Yes and of course, and this is Okay, sorry, I'm getting distracted. So so yes, besides software and hardware, as you I mentioned, we are also developing a solid fuel engine, which involves a lot of research in the direction of

the purely physical interactions of materials and that, what is happening around us. Currently we find the right path and the logical one way, so let's get a good one reaction, to put it in a fairly narrow space and know how it will holds. And in the end, all of this we do it to learn. We do it, because we want to share it with people like us

and because we believe that these are too many things that can be learn effectively from one person alone. But if we all get together and we share what we learn, what we we understand, we can actually acquire a pretty good idea of ​​how the world around us works and to make something really new and something really interesting. But apart from the technical challenges, we also encounter several

other challenges that are so more hidden, more unexpected and at the same time they are and maybe so the more interesting ones because they show us real world problems that will we meet no matter what we do. And we are students and pupils and we are looking for people like us. it is certainly a challenge to reach more people who are passionate about the topic and who

want and can to join, which challenge, by the way, somehow it's only solved with myself, because it turned out that a lot people wanted to do things like that. There are an enormous number of stories that I meet on the way for schoolchildren and students, who made rockets or wanted to do. Even something that quite bothers me shocking, imagine the sight. An eighth grader buys 6 kg

of rocket fuel fuel and keeps it as a school stipend. There are just some people who can't Imagine how passionate they are about this thing, but we definitely need them find. We need to offer them what we do and I believe that this will It helped them a lot, as well as us. We are also young, of course, we have a lot of time, but on the

other hand, right, we can't stand this activity alone. It's not expensive, but it's certainly not it's also free. And we managed quite well. the question. And the way we endure this thing, is mostly about donating, by donating our time, by donating, Oh, we bring equipment from home and so on. onwards. And, of course, this activity, it there is a need for a physical base. A technical university

provided us with a hall, in which we can work, but this hall It is literally empty. Accordingly, we we started to gather tools, starting with the most basic things like screwdrivers. It happened a while ago. more serious ones like flexes, screwdrivers, pine machines and so at one point it starts to form a very good thing a bottle rack that can serve as well as for a rocket

site, so it can serve and that's why when man, one of us has a good idea, which he wants to implement and be able to catch and make it and and make so that it can help our work. And accordingly another very big problem, that we meet is to find advice from someone, which is quite strange before the fact that sex is always on your mind here

there is someone to give advice. No, it's not like that. Nobody has built rockets in our country, for regret. No one knows exactly how Things happen. Or if there are people who they built them, they either don't remember anymore, or we can't find them. So accordingly and most of all we encounter a problem in finding advice direction from legal from legal type. That is, we have no

one to ask how we are doing. launches a rocket legally at a certain height, because simply no one has it rules and there are no people who understand this thing. Of course, we are actively looking for if we think the area is gray, firmly yes, we don't do it because if we put black spot of this activity, we will tarnish the opportunity for all others who want

to start such a bunch in your university or your school. So on the contrary, we are trying to discover the right path and we try to do it Let's make it so that it is him. Ah, ah so one of the more interesting problems I expected yes, they are our main stopper, but it is to we gain access to machines that are a little more industrial, as

we managed to find access to a trunk, router and other such tools, but definitely a technology that many we want to learn to use and which we really want to learn to We are developing 3D printing with metal. We have quite a big problem finding people who have the ability to print with such things and that would separate us your time. But nevertheless challenges rather than us

motivate us, stop us, and yet we We work and we succeed. We continue to we are developing more and more interesting and more interesting things. We continue to burn. about this thing. We are now maybe 15 to 20 active people. I say active because so during these eight months interest in this thing was demonstrated by more than 80 people, who want to enter but either don't have

time, or they feel that this thing is not for them not wanting to do it. The active people are between 15 and 20. These are to all young people. The average age is 21-2 years. These are people who dream. to become engineers. These are people who They dream of becoming scientists, physicists. These are people who are very cool and who do it they do with the idea

of ​​doing something useful, to do something new and to learn along the way. So I would be happy if we can find more people like us here in the audience. This is the reason why contact the organizers of OpenFest. We have a stand there in the corner. we would fight We would be happy if you could come and talk. a little more and you could also find

us on social networks. Many thank you for your attention and I hope Let's meet in person soon. Thank you very much. A very interesting one That was a lecture. Many interesting things You are busy because time has advanced. There will be no time for questions. If you have questions, as he said, have their place in the other end with our partners, you can to go talk to

him about any interesting topics, to give them help in some way with advice and so on and in the end it's rock and science. In a sense, no questions asked. to ask him. Thank you. And I think we're ready to start now. with the next lecture. Actually, it's our second lecture today and it's a timeless classic. A timeless classic of Open Fеest. The lecture that everyone attends

every year vote for her. The lecture that every year is chosen. The lecture that is always top. Something that really I recommend it to every single person. And these are the words that will be spoken to us presented by Nikolay Tenev. Nicky, that's it. solution architect in Storpol. Oh, yes, some person there. He is also a Brazilian jujitsu master. Takacs folds clothes with people. inside them. So

I try not to It's very annoying. I try to be careful around him and I leave you to him to listen What interesting misadventures they had in Storpool and what they faced and what they should have fixed. Really Many interesting things happened there. Applause. Okay, hello. Thank you. They introduced me. I have nothing more to say about myself. Either way, the things we will I speak, they

come from municipalities experience in Storpool as a company. Ah so a few words about the company, but first a quick question. How many of The people in the hall know exactly who we are, with what are we doing or have we been watching previous versions of the hoes? Just hey That's how they are. Great. So we can skip this. in a hurry. And the idea of ​​this

slide is that from we have been on the market for a long time, we have made various things and because we continue to live and grow, we are most likely not they were so confused. I can't miss it. Just being you We talked about hoes and I listened to the heroes before that, who were speaking. 6 kg rocket gorilla in the dorm. What could go wrong? Yes.

At most, do it very quickly. the first student cosmonaut. I just couldn't miss it. So, we start with the first subtopic, which very thematic. Here we have one. a crocodile that has stepped on a [ __ ]. Like I said, a green crocodile. Do you remember? Who am I talking about? Okay, this information actually comes from So let's start with some fun with Linux bonding. You know,

this is old. technology. A combines two interfaces, two physical interfaces in one logical. can be used for, how to say, increasing the capacity of the relationship or as in our case, as we use it for in active B as mode. One route, the other is waiting, if something happens, yes yes take over the traffic. And I traced this thing to this one version of Karna from 1999.

Serishe is old. proven technology. It is most likely older than many people in the room. Yes. What is it? Two physical interfaces, combined into one logical for relationship stability, while the active interface is okay, The traffic will pass, if it takes that something falls out, backup interface, it has the traffic. So far, things look very pleasant. But here comes the question of what it means the interface

to drop out, to lose connectivity. By default in Linux Bonda a The connection status is monitored via an instrument called a mimo or monkey, I don't know exactly how to pronounce it. You know him. This is generally aa mechanism that gives us information whether we have a physical connection to the other person end. Generally speaking, whether the light lights up between two servers, between a server and

switch and so on. Other physical components. But in a world where we have switches or any other points on retransmission, verification becomes more complicated. And here already the question is not whether we have physical connectivity, and whether we can get to the distant point we need, because you know, even the physical connection to be up, the lights to be on, that's not means that somewhere along the

way something is wrong broken. There are a number of reasons why which this can happen. Switch does not forward traffic, glitch or hardware problem. Accepts the packages, The light is on, but the packages are not going. nowhere. Another option is the wrong faall. Same thing again. the packages arrive, in the case rejects them. Including can you also have a variant with a poorly configured Vanan. The package

comes in a case and He's going somewhere, no one knows where. He has gone. So in general, checking whether switch is up, but whether the link is up, it is not sufficient. We need to check and the search. And here comes one thing that will completely is called ARP monitoring. How does it work? Our host has predefined ARP IP targets, other machines on the network sends ARP

requests to them and listens to see if will receive an answer. If you don't get it answer, change to the other route or to one of the other routes, because in the bond there may be more than one participant. And all of this would work fine and to help, if it weren't for the strange behavior default of Linux bonding that it accepts every answer as validation, that

the connection is alive. Nothing, that the targets, that we have provided are not available. Someone on the network returns a response to him and he says, "I'm okay. Obviously we have problem. Here what can help us here is the R validate option. She tells the connection actually check the answers, who come, are they from the targets that we have configured, not from some in the network, exactly

from the specified configured addresses. And here there are three options. can be set to active. This means that the active is checked interface, but the backup or spares are not checked in this way mechanism through art requests and a little bit more We are in a fog. We don't know which backup We can count on a route. Can only be checked for backups interfaces. At least we'll

know there if something happens. where to switch to. However, again we are not aware of the active interface How far are we related? We only know that from the other side the device is working and can be set to check Oh, how badly they moved. So this option Oh, The plow is what we need. We are checking both active and backup routes. This should solve the problem,

if it worked. In our practice we have had quite a few situations in which, although they have been provided ARP IP targets and we have said ARP validate all, again the backup interface refuses to listen to the requests that come from the active interface in its group. After some time we were able to track these cases to two specific drivers I40 and Ice both for Intel network

cards. So, that colleague, that green crocodile, who researched this problem, buried himself in the Linux source code and reached That if you take the kernel code there in this file, the function that validates whether ARP trrafiic comes from a given target, is in the following way. Pay attention to the last two parameters. Source IP, target IP. Yes, but in the same file, a little further down, okay

3288, this function is called as follows. Target IP and Source IP are swapped. That's right. This means that when checking the traffic to the backup interface the only traffic that is considered valid and marks the interface, the backup interface as usable is the traffic, which has exited the active interface in the same group, but not traffic sent by others hosts. He doesn't count. This should be the

case in most cases. works. Usually both physically connections are connected to the same switch. or to two different ones with some connection between them. This is in most cases, only the hoes are where they aren't The problem starts with Linux the connection sets the same MAC address and on both interfaces on all interfaces, who participate in a bond. yes. I would answer the question later. why this

MAC address is like this. So the default behavior of the i40i the driver and the driver is, if a package comes, whose source mac address is the same like his, he just rejects it and doesn't deal with it. This behavior it might make sense in some situations, right, someone else shouldn't pretend you, but definitely when we have an active passive voucher with valid does not help us

at all. The good news is that for the i40i driver there is an option called sourcing, which when activated is here is very funny disable on, right, activate and deactivation. I don't know who did it. thought, but when this option activated, the driver no longer rejects packets that have a source mark address like his. Now the bad news for the driver is that this thing, this behavior

is the hardcore in And here is this green crocodile colleague released inquiry to the phone with a request, right, this one parameter to make it configurable, knowing how fast they are moving Intel, in a few years it might And at the end of the story, there's a QR code here. code that points to my colleague's blog, where he described in much more detail this problem, how did

it get there, how he solved it with references to documentation. Excuse me. And there you can read more detailed information, as there is a bonus, What additional entertainment is available? appear if you run source prni. Ah, you have virtual so-called VFs, virtual functions on a physical interface. Siric on one and the same physical interface are simulated a few more virtual ones, because that's where makes a logical

bridge and will remain Read what kind of party is going on there. And yes, in this case that's it. The next subtopic is fun with Security Groups in Open Level. I must emphasize that when I mention some project in some such lectures, when we speak, and we don't say whether the product is good or bad. The only one reason why we mention the name of the product,

it's just that we hit it there And nothing more, mistakes are made. In ultimately the only software in He who has no mistakes is he who has not yet written. So these Security Groups offer the administrator has a very convenient website, and to set fire rules that refer to the specific virtual machine of the hypervisor on which it runs. The administrator is not expected to the virtual

machine has fixed itself inside with a phallus. It is assumed that he does not know what to do. right. From this mechanism also It helps if someone from a virtual machine decided to be made of iron and does white in the net. Outside level hypervisor you can do some restrictions. And that's a very good idea. The mechanism is very simple. We have we interface, we introduce the

rules, they are combine, assemble IP rules and then applied to the respective firewall. And here I have a firewall. drew like three different boxes, because every virtual machine is gets its own IPA, in which they are her rules. A virtual machine, one IP table chain. And our story begins like this We receive this message from our client. The machine has no fault. He doesn't blame us, but

the person is simply asking for help. Doesn't know What's going on? Quite an unpleasant situation. My colleagues log in and really find that for this very virtual machine or chain is missing, or there were no rules in it. I don't remember which one. both were, but anyway there is no faall, who will protect her. However, in the Openable interface there is defined rules. Upon closer inspection. Okay,

now. let's try, without saying by raising the hand, does anyone see anything wrong? Here is the naughty boy. and especially the portraiture, definition from larger to smaller port. This thing will generate the following IP command. Now there at the end is it return set drop, it doesn't matter. The penultimate parameter is more interesting. Deposit from the larger one to the smaller one. And if you execute this

command even just in the shell of the machine, get this error message. Invid port range specified. Including if you check the command output, exit code, you will see that it is two, not zero. This should be very simple. check when things are coming together, but definitely IP tbles does not like the range in which the first port is larger than the last. And that was our first

question to Open Nab. Why their interface agrees with parameters that are specific to IP The answer was a little strange. So that the administrator can understand Is there a mistake and is everything in the past? to go to another window and there check the status of the virtual machine. You will open one. window, you write some rules, you give Alas, there is no error message, but you

you have to remember that you have to go somewhere else to check what's going on. And very intuitive. Discussions are currently underway with Opan Evela how can this problem be solved, where to output an error. For some time, for several months, honestly, I haven't looked recently how far they've come, but still there are some movement in that direction. yes no yes You are flying blind. But this

still answers our the question of why the virtual machine doesn't why does it remain with one wrong rule absolutely no protection. So, looking at the code and documentation at Open Nebela, my colleague colleague is enough until the next one. Another colleague, another one like that Crocodile comes to the following. If we start a virtual machine, and the security group rules in IPT is working and protected or

if they are missing The rules are off and no one does anything. can't do it to her until she gets them fix it. That's good, but what happens if we decide to add a new rule to the already a running virtual machine? It's a little different. If there is no error in them, everything works. As we expect flowers and roses. Exactly. If there is an error, the

rules are clear, the machine continues to work. We are already ready for uninvited guests, which was the case with our client. The external fileall has fallen and they visited it the people there. Open door. Why not? come in? Come, Wolf, eat me. Discussions are underway about what to do in this situation. There are also generally two strategies, two strategies revolve around the people. I still don't know

how far they've come. brought. One option is when they put rules on a working virtual machine, the old ones to be copied, the new ones to are applied and if an error occurs, the new ones should be deleted and returned the old ones that we know work. This is one option is for the machine to remain working. Another The other option is to remove the old ones

rules, new ones are added and if there are any error, the machine is forcibly shut down and The administrator should go fix it. whatever he wrote there. But with everyone situations we are not left unprotected machine, which is also an additional step in the right direction. A few additional nuances here, just as questions, without going into them. First, is the administrator really wanted to show a portrait?

I don't know how much It's clearly visible, there are two dots between 443 and 80. Or he got confused, he wanted to say two specific ports and instead of two dots is should have put a comma because in that generated rule that you I showed that if the two points are separated by comma, it passes. Plus this one portrait range between 4 and 3 and 80 I

don't know a bit what the author wanted to say. And why is it written from older to younger? smaller port? The administrator is not knew that this was unacceptable for IP. And Open Nevel has allowed such syntax. And which is important, because this client especially where it happened, it is from the Arab world. Well, those people write from right to left. He first wrote the small port,

then he wrote the big one. With him everything It's okay. And the other, last, third question is the one who wrote this part of the web the Open Nevel interface, knew at all is how to work with IP or just made a web form, which literally takes the values ​​from the boxes and assembles a rule, right, maybe yes. And the idea here is that if we want

to we use some external tool or library, well, it's good to know how just to throw commands, to we hope for magic. And in short, a conclusion from these three questions, somehow we can't count on that things around us will work as we wish wants, without us knowing them. That's a lot. optimistic approach to the world. And the other thing is that we can't expect that people

around us perceive and interact with the world in the same way, as well as us. And for us it is very natural to write from left to right, except that there is cultures that write from right to left. And honestly, I haven't checked what will happen in the Asian world, where they write from top to bottom. We just have to have these things. in mind when we

make software. But here We are already moving away from technological topics. She's getting a little more philosophical. The focus of this event is different. We finally found it, the problem is resolved, the customer is satisfied, the case closed. In open things move in the legal direction. The third case is Open Stack. virtual machine migration. How much things can go wrong here like with rocket fuel? As we

said a moment ago, we are not talking about the product, that's just where we aimed it. So Open Stack like most cloud clouds man systems like Open Mable, Cloud Stack, VW, in general its structure has some infrastructure, maybe physical, virtual machine, combination of several, but there is the main brain of the system, the so-called control. By the hypervisors where they need to work virtual machines, there's a

little piece of code from Open Stack, which plays the role of agent. The brain talks to itself the agent, gives him some instructions. He occasionally returns some and answer here through the red link. And in this scheme we have another green one network. I deliberately drew it separately. She can and be in other machines. There is storage there. some kind of story sharing, right? Virtual machines through

this green network use the disks from the black story. at the network traffic level and velani and here the picture is much more complicated, but there was no I can't get enough of the colors, nor the artistic skills to draw it. That's why I'm stopping, right, so much so that I hope it becomes clear. And what happens? The story from the management system it is obtained request

to one agent: "Migrate this virtual machine on the other hypervisor." Okay. That's right. It is important to note here, that when migration to Open began Stack via Lipvir, aa the agent of the sending machine is responsible for the entire process. control panel. He He just gave the command and is waiting for someone to he finally answered. And the process begins. The virtual machine is moved, the virtual

disk through the black storage it detaches and attaches to the other place. Everything is fine and now it's time to source the agent who leads this process, yes reported to the control panel and to the other hypervisor what happened. We moved machine, you are now responsible for it, it does not It is with me. Such post-install operations. This is exactly the moment. The machine is moved, works,

he must start to announce and this is exactly the moment when who comes a car of mler and kills the agent. That's fine, but we need a system. Kindly help. He sees that this service should be running and start it again. And from here on it begins to it's getting fun. Open Stack, agent of the second hyperwire starts spitting out errors in the logs that are not

visible in the Open Stack interface, that he is confused. He was told that the it should work 20 virtual machines, and he finds 21 workers. And this one he doesn't know what it is and starts to ask. the agent on the first machine knows that there should be 20 working machines, however sees 19 working and one in some error state, incomplete migration, however, no one doesn't tell

him what to do with it. Openst as a project has decided that in this situation they will automatically not They decide nothing. The administrator will come, The man will come, he will examine himself. This machine will assess the situation. yes it They moved, should they let her in, what should she do? The system administrator is coming, sees the problem and does the most logical thing something. Hard

reboot. Restart and it will be fine. Well, yes. But when in the area, when you say har reboot, what happens at the hypervisor level. If there is one defined virtual machine, it is deletes. it is redefined and released. The first host does not know that the second host has instance of that machine. As a result of which we end up with the following situation. Two instances of

virtual machines nothing they don't know about each other, but both write on the same blog device. What comes next from this work? Guaranteed data backup. which also happened to our client. Restart before the administrator oriented what the situation was, brought to an even bigger problem. So the strategy restarts and it will be fine. Let's rethink a bit. Yes, that's one conclusion. Yes no we rush to restart

before we know it What situation are we in? In this particular case, right, we can let's say that if the administrator was took a little more time to look around, it wouldn't have come to this any further Yes, the downtime is much less, than the data option. Then restore from snapshots, extract from baby, explain yourself to the customer What happened? It's not very pleasant. Yes. And as

always, I rush with time, because we are at the end of this Of all that I have said, the three things I really want to take from this meeting, is based on the first for The conclusion is that even a technology to be very old and tried, to still we check, let's not count on this, which worked six months ago, one year, will continue to work in

the same way way, especially if a new version comes out. And for Open Eve, if we use external tools, let's know them well, but really good, right? We just count, that if one spell passes and all others will work. And based on the third case, I I said several times, let's study and we understand the situation in which we find, not just chaotic yes yes We act

and see what happens. Sometimes it's better to slow down some time with the decision, than to apply an approach that then open even bigger ones for you yes, that's from me. Just a second like we talked about the hoes, now that I can to remember for a few seconds, this for What I remembered is hoes are sometimes software bugs, hardware bugs, and sometimes it's quite simple human

error. Like for example last week I received an email on Saturday at 12:00 from the Openfest organization at Saturday at 12:00 at Sofia University. Attend mandatory briefing. So, as a participant, I was invited to beers, they invited me to meetings, but mandatory briefing was not given to me invited. I just got confused about which people are in the address, but these are little things like that sometimes

they happen. Well, that's from me. Thank you. Now some questions. I will Do you answer them? I know them again. By the way, I have a speculation about this for the ports. Say. I think he tried to make himself port mapping. Man he tried to do port mapping, as is done in Yamola. Ah, that's it. It's like he wrote it on the dock the person that he

wants 443 to answer him port 80 on the virtual machine and there you go. Okay, that's why I hadn't thought of it, right, but and this is an option. And that's an option. Well no, those things are so absurd at times that everything is an option. And that's it. Okay. Does anyone else have it? any question? Tttt over there. So there is a microphone, if you can

go alone to him and ask yourself the question, so so that everyone can hear you and hopefully I can answer with something other than I don't know. I will ask, I will check. Yes. And the last two examples are not as much as architectural software problems. That there is no processing of errors of errors and no transaction transactional way did nothing. This is software problem. The first

is simple. error in the code, right? so it is difficult to isolate. A the other things are just plain buggy software and architectural bugs are not simple bugs just haven't been checked all cases check architectures there are no checks for errors implementation this yes in the third example with opensta indeed this is part of the problem that the agents of virtual on hypervisors you are not they

talk to each other they don't communicate first this second there is no such thing temporary mounting a block device and that's the point if there are proper transaction checks and safes regarding this will not be you happen things it won't start if there is there is an attempt to bring dual virtual machines to Yes. However, here comes the next moment. The role of the storage system is

to asked her for a disc, she gave it to him provided without asking questions, but Why do you want it? And here the question is Should the story system take care of it? for a disk not to appear on more than one place wrong way, because sometimes you have to appears or from top management The system should take care of it, right? architectural question. Yes, exactly. Everyone

says: "The problem is not mine." You're fine with that. Yes, literally. Okay, someone else some Are there any questions? We still have a little time, so we have time for more questions. If no, Nicky you can find him right here here. Like this from the front. Yes. From that door on the left or there by the beer. Well, that's it. Beer still early. The beer is still

early, but later and with beer it can So yes, if there are no other questions, then please one more time for Applause for Nikki See you at the next lecture after a little. Okay. เ Hello. Okay, I hear you. I see that more People are coming in, so I'll wait a bit longer. 20-30 seconds to sit down, to make them comfortable. That's right. I see everyone is

already settled. So, as I suppose everyone has read the title of today's topic, today we will we are talking about regulations, as at least some of us sometimes do They like it when they are with other people. Sometimes we don't like them when they don't like us. affect. And today we will find out how some of these and how do they affect us and open open source

and and text text the sphere. Today, Petar Kirkov will talk about this, who has been doing this for 20 years. He is a former civil servant and has certificate by iron fist. Strong iron ass. Please. Applause. And this is about the iron butt trap really a motorcycle license and I couldn't help but include XKCD. All of you have seen it. And what some of you may not

know you know that if this is too much for you specifically someone who maintains a piece of software from Nebraska, and I don't know Do you know who Chet Raimi is? The squad is from Ohio, not Nebraska, but from The year 93 maintains a small, almost a small piece of software called Bash. and actually yes, that's true and describes quite well the problems that exist in the

ecosystem. And the problems, especially lately, are not at all they are not few. And we already have a lot quite public supply attacks. Ah, we have a hell of a lot of vulnerabilities, in makes a hell of a lot of sense. Now I know that a lot of these things are interconnected. Um, I'm trying, I'm trying to describe what we see in the whole ecosystem with open

source. Ah, so starting with the malicious ones packages in which you want package managers NPM, PP, has malicious packages, imiver of packages, there is a typ, that is, if a person take it in the hurry, that you did it error in the package name, it will not gave an error because someone already has made such a package, only additional functionality, for example steals cryptocurrencies and all sorts

of other such things. there are no people, that is, there are no people who support open source tools, in as a result of which we have a content burnout. I apologize in advance, yesterday they had there was an online discussion about the correct Bulgarian and correct the correct words. I haven't found some things good. translation. Oh, some of the things have a translation that can It might

not be nice enough. So, if You should throw tomatoes at me, Throw me. This is a long topic. Ah, tantainer. Burnout is a fact. There is a huge amount small packages that at one point just they burn out because there's a bunch of stuff, which must be completed. They are started doing this thing, because they want to develop a new functionality. Some people are harassing them. to

actually patch up securities or to improve security, but that's not something exactly something that attracts them and so And there are a lot of complaints about VIP reports, and including I think last month aa Linus was another one, it wasn't an outburst, but it was quite so it became known. And regarding the thoughtless ones who they try to get in everywhere because someone has caught The AI

​​model produced something anyway. A huge amount of reports that are produced in this way, are also appear. And frankly, there are packages for example, and who frankly say: "Guys, if what you're sending me... there are no signs that it was written by a human, "I won't watch it at all." Um, of course, there are the rather unpleasant ones. changes to licenses. In a sense, something open source

has started, some kind of ecosystem has been built, Suddenly, abruptly, we change the license. And enough examples, big enough examples. Here there is, I think there are aa companies, so there is no I won't mention them by name, but don't They beat me. But about theft or commercialization I don't talk to myself at all. So there is extremely many cases in which literally taking something with open

source, Is it repackaged or just on top? the paint and we start selling it under one form or another, which is also Regulatory requirements are increasing. In most of the regulations there is exception. For example in EU Produil Directive has an exception, but this does not means we can that this exception is but universal. And we are talking about the so-called compliance drift. That is, How does

this happen? An auditor comes and says: "Well, that's good, this is open source, however you to a to have, you must provide and this." And accordingly they start to impose themselves some requirements, yes, they are not regulatory, but someone is starting to have some requirements for open source packages, to the open source tool that again leads to an increase in the necessary efforts to maintain any open

source tool. They are abandoned, in the sense that normal people they start doing something else, are entering a new phase of their lives, all all such things and there are extremely abandoned. How many of you have heard of XZ? What are the benefits? Three or four. Oh, well, there are people. For the rest XZ is again a modest little package that correct me if I'm wrong, it

was dealing with decompression. Compression. Decompression. That's right. For three years unknown AP Advance Press System 3 has only assumptions which are. They bully through social engineering the only person who supports him. In meaning harass, is not the right word, but little by little they are embedded, they begin to send patches, they start to they help. And several fake accounts start on mails to appear, to speak and

At one point, it rises in an organized manner pressure on the person and at some point he writes to the hat and says, "You did it "Take it." Naturally one of them says: "Yes, I will become the maintainer of this one." package." And it happens shortly after that, the package appears hardcoded keys. With the use of these hard-coded keys, thanks to downstream the integration of the package,

a person can acquire root access via ssh to any machine with debin, junto and so on. Nice a It is caught by absolute chance. a researcher who works in the field of a the field of high-performance machines, and he starts pushing him with 500 balls slower and the man starts digging. Why? And in one moment seizes him. Pure coincidence, which makes us wonder how many of these

there is experience. Ah kfr J is also good too famous. And in the interest of truth Bojanov will speak after me. And my first one meeting with Bozanov in his capacity as minister it was right on the subject of Lockforge, wasn't it, and to the question of what we are doing, my the question was what he could do. We We don't know where the KFRD is. Again

a little a packet embedded in some huge widely used other things. Ah, the statistics are that 60% of maintainers do not receive any financing. So things are looking very good for us. Where are we in terms of regulations? And the interesting thing is that for the first time I was on this scene 2017 and I spoke exactly for GDPR. In fact, things started before GDPR. Sometime in

2015, Europe realized that is not in the place he wants to be in terms of of IT. We don't have digital sovereignty, which means D. State companies, state government controls in mostly internet, DNS system for example. And we don't have any, because we are fragmented as countries, we have no general requirements for cybersecurity, we have no common requirements for data. And all this stuff leads to disadvantages,

but at a general economic level. In other words another way, various appetizers then basically financially motivated told us the game of businesses. 2018 GDPR, the first of its kind regulation, the first regulation that talking about data, the first regulation, which introduces the concept of Data in general Protection, Security by Design, introduces reporting incidents. And what happened is something very interesting, which is very sweet to the The

European Commission, that in fact, so as the regulation was very good, it was literally exported. There are goals geographies that took it almost entirely. In South America, Singapore is almost one in the same to one. Many geographies just her they took it because it's a good thing. This from international relations and is the European an alliance that has an impact, right? So we win some points, which

is nice and that is sweetened by some Eurobureaucrats. As a result of which everything else, what happened, they are trying to repeat this achievement, that is, to create innovative regulations that be spread as de facto standard worldwide. and there was quite an expansion of aa on regulations. And so. And here I must say that the names of the regulations are not the most best the chosen thing

in this field. Cyber securities act deals with, for example mainly with the powers of ENISA, the expansion of ENISA as a European cybersecurity agency and the certification. That is, how can do how can one get certified for all of Europe product something cybersecurity, not just a product. somewhere, somewhere out there 2018 is coming out actually comes out NIS Network and information Security first directive, and almost immediately

it starts writing NIS 2. In the 22nd year they came out in a package in package three the three regulations NIS 2, Dora and the regulation of critical critical infrastructure. Now here in Bulgaria, because we are interesting and because DANS does not they like critical infrastructure to be controlled by some Europeans. Here I have the principle of a fear object for national security. And the Ministry of

Interior is responsible for the non-critical infrastructure. physically safe. But here we are talking in the three of us are talking about cybersecurity organization level. That is, what are the minimum requirements for cybersecurity in an organization. Dore deals with financial matters, everything that is financial, banks, insurers and and so on. String 2 deals in some business sectors, where digitalization has penetrated far enough, to be a problem if

IT goes down. A problem at national and supranational level Cyberresilience came out at the end of the 24th year an act that talks about cybersecurity products. There the term is introduced there. product with a digit in the element, but after We'll talk about that a little bit. Cyber resili the act, as it is again extremely innovative. Something like that, no. has not been introduced until now, therefore

it has a very long period of entry into force. That is, it was published on December 24. year, but it will come into full force December 2027. Until then, you must a lot of things happen and we'll talk about Where is Enisa's place? The European cybersecurity agency. She except, that takes care of the cybersecurity of the European institutions, as well produces extremely valuable supporting documents. So here

we are talking about aa implementation documents. That is, how need how to implement 2 a came out relatively recently if you work in the area of ​​NIS 2, I recommend it to you. AA groups at the Ministry are developing the schemes for certification for cyber certification of for example, products. Right now this is the scheme that came out and EOCC based on cocriterion. Work is underway on

certification of cloud services. The scheme has not yet been adopted. mainly because of political struggles at the international level. as well as for 5G cyber certification. And some support the European scheme for vulnerability disclosure, and it actually shouldn't have been online yet. I think I should have planned online in December this year. A I don't know if you remember what happened, when Trump came to power, they

started cutting expenses with Mr. Musk and a cheerful little non-profit corporation. I think that's how it's done. Mitre. How many of Have you heard of Mitre? Well, there are hands, there are people who don't raise their hands. So Mitre san profit, which are engaged in a socially beneficial work. They support the so-called CV Common vulnerability numeration, that is, there it is register all the databases, where all

are registered vulnerabilities and get a number. So Mitri in at one point they shouted: "Well, guys, we we stop doing this because we don't have money." However, what happened was that three appeared alternatives. First they got out, okay? beta version, but they released UVD, which is 100% CV compatible and is in Europe, can be used. A circle that is Luxembourgish Sure, okay, let's call them that. Sure,

although that's a simplification. and they released a decentralized database vulnerability registration and sharing, and some group, honestly there's no longer I followed him, some group from the former Mitre management said dudes, we make our own CV with black and so are good things. Oh, so... they were given money, but in fact the community responded and we have three And this is super important, because in practice all

cybersecurity vendors it they use this thing and of course they are angry coordinates the risks, vulnerabilities, exchange of information, of any kind such things in aa in Europe. So, our beloved NIS 2. And my favorite pastime lately is when another merchant came to me, who says: "Buy my product and you decide the problems with Nice 2." I usually drive it to point a finger at Nis 2

who exactly member will be decided. More is more they're having a hard time because they haven't even read it. And I heard some interesting things, including that bakeries should match string two that fine 20 million euros is mandatory and any other such things, nothing of which is not true. But in terms of open source we implicitly start to we are talking about SBOM, zafuer B of materials.

That is, what software components are there in this piece of software. It's implicit, it's not explicitly described, but quite explicitly talk about supply chain. That is, those who are your suppliers, you you have to somehow to ensure their cybersecurity, contract or in some other way. That is, we are already starting to think about what from an open source perspective who is mine supplier, because yes they are

not for profit, I mean, I didn't pay, but there it is. an end user license agreement, right? there is a license that lawyers say, that it is a contract, and there is an obligation to patch, that is quite a lot of strong words in the text Having said that, this job is working for me, I won't ask for it, it won't work. I need it. We need

to patch it up. And by the way, we're not in this the only ones. In the States there are even a little earlier, and in the 21st, if not lie, emergency order, who are you, CIS says that SBM is mandatory. That's right. So, we're starting to have a little bit of more visibility into what components are in different and in different tools we use. Dora. The other

is the other regulation. And between the other is a directive. For those of you who don't know, the directive should to be transposed, not yet transposed in Bulgaria. None to comment on the topic that I was in meaning this is one of the last things, which I did as a civil servant. A Dore is a regulation, that is, there is no law, it enters into force. Dora

is applied in Bulgaria, the banks are seriously harassing them. And dora is the focus is the focus is in the financial sector with ICT risk. That is, the focus is ICT risk in the financial sector, as there is no longer a bank that to be able to work without any IT and communications. Ah, effective from January this year there is quite heavy aa reporting requirements. Four hours

for four to four hours an incident must be reported. Up to 24 hours should be for details. This is valid worldwide, throughout Europe. There is Pretty tough requirements for a penetration tests, and which must happen. And of course we have a register, because open source is a kind of provider to us, we we need to include them in a registry, risk register and we have to evaluate

them all open source tools and packages. there is also a pretty serious text, who says, right, due to the imposition of of risk assessment, of open source, there is also a text that says: "You you are obliged to provide and cybersecurity of these providers, which are in your registry. How will you do it? do? This is already off topic. of the regulation, but you have to the

text actually, which is in pretty unambiguous if there is a problem with some piece of open source code and you make a patch, you are obliged give this thing to the manufacturer, which is nice. Dora, yes, Dora is still in power. and banks. So this is something because before it started there was a little bit of that After all, here in Bulgaria, no one has heard of

it. The financial sector is already screaming. So this is applicable. The controlling body is the BNB. What a dream. she's not quite that one step back. CR talks about product cybersecurity with a digital element. That is, here we include anything that has a processor, anything, which software, anything that has some kind of intelligence. Ah, the vast majority of things are declarative principle, that is we control all

the things that are on market, the single market in Bulgaria between in Europe. By the way, C works through C marking. Those of you who don't know, CE is a safety mark for product. C marking is placed on children's toys, that there are no catch colors, on electrical appliances that won't beat you current. The production with a digital element will stands for cybersecurity. Effective from December 27th

year, complete. Before that a few other things are happening. The main thing A requirement is a security by default. This is all listed in the appendix. one. I won't go into details. And here we are talking about A, so first the product must not have any faults vulnerabilities and all configurations, who are about cybersecurity must be activated. And there shouldn't be default holes and any others The

vast majority of products are declarative principle. That is, who is entering the market in Europe, will you be manufacturer, will you be a distributor, Would you be a merchant if you brought them in? in the one market, it is your responsibility and You will be fined if you don't comply. A the vast majority of products are declarative. That is, you must declare How much time will you

provide? security patches for this product, and How long will you keep it like this? software. So when we go to your place buy, for example, a new phone or a new device, we should have informed decision to be able to make and what will it be for we pay. Some of the products must pass or authentication from a state structure in some of the European countries either

have to be under the certification scheme Regulation 881 of 2019. One more thing of the things that Ennis is developing. But here we start talking about a few first there are exceptions for open code. there is and in chapter two it is explicitly mentioned for open source, like when we worked on this because I've also worked a little by these texts, ah it was very clear that

the people who develop and maintain open source, not we can subject them to the same requirements that we place on each other manufacturer. What will happen will not happen. It will have a negative effect. That's why there are exceptions. They are described in detail. the exceptions. There are a lot of texts about not abuses this thing. What exactly is it? open source? There is an explicit requirement

for SBOM. Again, if your product uses open source, you must explicitly you have SBOM and you should say it this time too information to be findable. The term trustees of an open code. That is, here are all those who care about open source as such. They are removed from the fines, because here The fines are quite serious. From from regulations that we've talked about so far, here

the fine is up to 2.5% of the global turnover, which can become a lot. The detractors of open source are deducted from the fines and there are very small requirements. That is, they must to publish a policy for cybersecurity, but to create a way to vulnerabilities are reported to them, for example, say what they will do with these vulnerabilities. The requirements are not very high, so oh

well there are some and there are quite a few texts so that they can lawyers to have fun what is sale, what is open source delivery and so on and so forth. But quite consciously, and are not in the sense of quite quite consciously we talk about open source and describe what It will be done with the trustees. That's right. And there is still work to be

done here. This one December is expected to be released the implementing act, which further defines what is what. In the sense of what to understand via router, what is understood by this term, what is meant by that? term and other such important things. And next year it starts the obligation to report vulnerabilities on all products and already December We are entering into force for the 27th year.

And I've already told you some of these things, because I'm in a hurry. And for the winners of open source policies boom, and perhaps cryptographic signed releases. Ah, we're starting to talk about the fact that under the manufacturers who use in their products, in the sense commercial manufacturers commercial products that use in their products open source, they already have obligation to maintain it, which is not that

said you must maintain open source, and it is said the product is yours, it is your responsibility to maintain cybersecurity. We don't care. whether you chose open source. But you are obligated to do it. Ad, what was in Enisa together with The lyrics in Krav actually unite vulnerability information, that is the information that is for products in organizations, active exploitation. All this information is concentrated in Enisa

and it can be to a large extent degree can be used. And also in the end, this is something that still is subject to specific clarification, but the possibility is provided voluntarily products to be certified. That is, if your product is, for example, certified under the EUCC scheme for certification, it is assumed that corresponds to C, even if it falls into those 10%, which must be certified.

What we expect is that there will be increasing funding and support for open source. And these things are already Iofosa or Buckbauti in two phases from 2017 until 2024, if I'm not mistaken, then the second one comes in Bug phase the funding bugs, that is, it finances the fixing of bugs in open source software, which is used in European institutions. Ah, Open Open Source Security Foundation, I

guess you've heard of her. To at this moment they do not provide funding, but they do provide information. Very useful CA Playbook are wrote. So if you maintain something with open source, check it out. Valuable the information there. A sovereign wealth fund is financed by the German government, which in right now is not the best thing because there are political problems there, they don't final budget, and

so it's currently working on provisional budget, but they have 22 million euros, with which they finance precisely through digital sovereignty they fund open source projects. And based on this thing, there is actually proposal for E Sover Techфund, which is of Open forum Europe, which is currently under discussion. So, if your topic is interesting if you want to be active, this is something you can support as citizens

of the European Union. A GHub GitHub also has a fund. So theirs they raise money from sponsors, and in general case give I think it was about $000 of a project precisely with the idea of ​​supporting. There are quite a few projects, some of them The snacks are at the reception. And precisely to maintain support such open source products, which are critical digital Aa most of these

fundings They go through Yes. What I didn't say under the regulations, that somewhere there anyway Europe realized that it could not keep quiet It's not possible with just the stand, you have to there is also a carrot. And Europe actually created in Bucharest and Triple C. ELC is an agency, a European agency that actually manages the funding related to cybersecurity. So here we are talking and for

Digital Europe, we are talking about Horizon Europe, that is, everything from research to implementation, product development. An agency that actually works on the topic, there are quite a few stakes open, which are specific to products with open source, for tools with open code, which can also be used. Next generation internet. The fund is also there between 5 and 50,000 for open source projects and so on and

and so on. That is, there is and we expect that This thing will continue to develop. If I could take a look at it a little... the crystal ball. All these regulations, what we see is that actually increase visibility. Not anymore can a person hide that they are using something with boms, vulnerability reporting, patches, and all this thing is transparency and this transparency actually increases the opportunity

to be improved first the license protection, that is, all of this, what we were talking about stealing code, but he is open, he is free, thus increasing the requirements for the organizations that are actually consumers, organizations with money that they make money. through the use of open source projects And we see elevation, creation, and increasing funding in a way of financing such things. So we have and

we are currently on shift the paradigm and and again these are not just things that are happening in Europe. These are and things that happen in the rest of the world part of the world. We have a change of the paradigm. Open source is starting to becomes strategic digital and we start and we start little by little to enter into other tracks, in which actually with a

trance but with an elevated transparency, increased collaboration we actually have a lot of funding, of course, we have much higher requirements and we can ensure quality, better quality open source. Well, we expect them to develop, for example. automated tools that can help with the entire process. Ah, we expect some standardization, expects more funding is coming in and so on My concern is that if we use them

right, regulations can actually improve the ecosystem. The key here is to use them correctly. The regulations are subject to interpretation. A large part of these actions and these initiatives I talked about need of support, including from you as a voice, like a skill, like a shoulder. I think we are at a turning point. and the future is in our hands. Thank you. And thank you that no

one accused me of tomatoes. There is none. Ah, poor preparation. Okay, so we still have plenty of time. left over and instead of tomatoes, which has If you wish, I can throw questions at you. We have a microphone in the middle of the hall. First of all, thank you for the wonderful presentation. My question is a little related more like close to the Bulgarian reality. In Bulgaria

we have PMS 181 since 2009. Yes. We have a law for We have a cybersecurity strategy and at the same time you are talking about some wonderful European regulations. So my question is this. In what way? you see the implementation of the European legislation in the Bulgarian reality? Thank you very much. You needed it, right? You needed it. That's right. Ah okay. For those who don't know,

as a former national coordinator, I these are the things, some of the things that I was busy. including leading the working group, who wrote the first version of the wall of ZKS, that is, what should be transposed two. The truth is that because of the current political situation, and The texts are ready, they are hanging. Everyone can see them, among other things, in Parliament website. Ah, they

hang for more than a year. That's right. And there are rumors. So there are rumors, but these are the type of woman who said that having texts or suggestions for texts in which they would limit for example Chinese Chinese suppliers, that's why there's international pressure on this thing to slow down as much as possible. Maybe, maybe it's just not that priority of the current administration. The fact

is that because of string 2 and because of the directive, which is for the critical infrastructure, Bulgaria is in a penal situation procedure. And maybe it will happen now. half a year, maybe more. Per day Yes, €000 per day. Thanks July. A yes, that's the situation. Therefore I make the difference between what is a regulation and what is included. in force we want or we don't want,

what should yes, but what should be a directive, it has to go through the law. The truth is, that not everything can be a regulation, so like the countries in Europe we are very different. You can't write some rules. By the way, it's not just us with string 2, including Germany, they crashed, because they tried to go too far ambitious, in my opinion. And there they are

federated structure. The point is, no. you can write some rules that are applicable to cybersecurity, and for Germany, and they should be applicable to and for Bulgaria. Totally different markets we are, a totally different structure, including companies, right? Or you will kill some of them, which is scary, or the others will not be regulated, which it's also scary. So some things they just have to go through

a through transposition, through the refraction in the local through local reality. But that is also GDPR compliant. For example, GDPR every the state had to say how many years onwards, where is the limit of a child, that is How old is a child and not a child? must be connected to the others laws in the state. That's the situation, right? I'm sorry for the lecture on lawmaking,

for regulation, but that's it. So when Will it be ready? I can't say. A by the way, when Bozanov came here on this scene, ask him, because he has a better, better view of things. No, no, seriously. Meaning, maybe can say more. I I don't know. Already I am not a civil servant. Others awkward questions? Hello, thanks for the interesting lecture. And in the presentation of several

times you mentioned GDPR as relatively a good example of regulation and I am somewhat I agree. But the effect that we observed a few years after GDPR, was the outbreak of is the models that They stole data. What is your worst-case scenario prediction? after the introduction of C? Like this thing that is happening now in the moment explodes, we all use it on maximum, people make crazy

money and so some people claim to make crazy money, to put it this way, in the sense that this way, that way this logic the whole concept of shares and A bond is fake money, right? And they people make money. Yes. Okay. You're for the same thing. we are talking. And isn't AI a bubble? It's a good one. topic, but we won't touch on it now. A

C in most of it, so let me return it, the whole idea is that all these regulations actually try to holistically to encompass ah every thing we need to cybersecurity, because cybersecurity is very horizontal. And currently the largest botnets that they do, the biggest DIDOS attacks, are composed of cameras, routers, IoT devices that are plugged in somewhere and no one touches them. And a large part of

the things that are sold in the market are absolutely no uncontrolled. How many of you they bought, for example, a Japanese IP camera? You find any problem, write on the ven and the ventora says, "Akopi is the new one, that doesn't bother me at all This and CR is the way to try to we address this thing. The vast majority of CR is actually awareness. So when

I go and buy something, this manufacturer should tell me, right? that's why it's through C, through safety, this manufacturer to tell me, "Yeah, well, "I'll patch it up for you for four years." The other manufacturer will sell something cheaper and will say: "Oh, I'll give it to you I've been patching for two years so you can consciously make this decision what do you prefer, right, at the

end of "In the end you are right." And the main thing meaning of CR. How? Can it be? broken? There will certainly be attempts to be violated. I certainly will. most likely someone will be able to score with luggage in the trunk one bag, things from Turkey, who knows, right? The other thing is that this is also part of the difficulty. That's why CR takes so long

to be introduced because we need to create oh, by we I mean all of Europe we need to create an organization for market surveillance, for control of the market. That is, someone who understands cybersecurity, who can controls the entire market. Yes, yes, yes. This it is difficult. Who will control the controllers? This is a separate topic. But let me say this, in Bulgaria I personally participated in

the sense of a I saw organizations that said we are not we. No, no, no, no, no. We don't care about that. we understand. Okay, people, we'll teach you. No, no, no, no, no, no. That's right. I don't know How far have these conversations gone? In other countries are much further ahead. And then it's also about cyber certification, but yes there is a lot of work that

needs to be done to be finished. The devil is in the details. Implementation is important. We see even in Bulgaria GDPR and I honestly have comments on the way in which implemented and the way in which, for example Personal Data Protection Commission interprets some things. The last thing I saw was when you send a request for a to you hide personal data, in this request You must

include three names and a personal identification number. Yes. And so there is still a lot of work to do. I don't know how to answer you further. this question. The worst case scenario in your opinion, because in my opinion the worst case scenario is simply We will all start buying Chinese. Either way, it's assembled there. and nothing will be produced here. That's right. But not you at

the moment when you introduce a product to the market, that is you import it or you produce it, in this case you import it, The responsibility is yours. That is, you have to you tell the Chinese who produces it for you, because you ordered it. Exactly these bunny with MP3 player, with I agree, but no one controls S the boms that the Chinese will give or whatever.

I just want to end the conversation because We've gone a little over our time. It in There are no upcoming lectures at the moment and it is lunchtime. rest, so anyone who wants can to stay here or outside the hall to ask personal questions, to continue personally your questions. Otherwise, applause for the wonderful Hello everyone on the stream. Thank you for watching our stream. Hello everyone. I

hope you are rested, ate, and let's continue with full steam ahead. Namely with us on stage Bozhidar Bozhanov will come up and tell us talks about the law of use and the development of artificial intelligence. Please thunderous applause for him. Hello. Are we hearing each other well? I think, that yes. Today I will talk about a bill, as often happens to me at OpenFest, but before that

this morning I noticed of something that a person, having passed from the private sector, from the IT sector in so the vanguard of political life, very Things change, but at least for me one thing one thing remains constant and that is that every I'm speaking at Open Fest this year and I hope this to continue. Thank you. Otherwise, the biographical slide does not need to be I

quote him. I am still currently opposition member of parliament, which means that the laws that I suggest, they rarely pass, but still they create some noise at best. Now in terms of artificial intelligence, artificial intelligence, you know, like technology people but it's a little more overrated, than the headlines make it out to be. And with This way we can be on the same page. Yes. And there's

a lot of hype, there's a lot of hope, a lot of investments, a lot of things. And this is revolution, this is the next internet, the next three blockchains and 12 clouds. But but we must accept and acknowledge that however, the latest developments in this a family of technologies and are serious, useful and can be quite transformative for many industries. Unlike other hypes before this, blockchain, cloud,

whatever else you remember, and here the application is quite horizontally. In many industries it can see any real benefit. In the software industry, of course, extremely with all the pros and cons of this, but in quite a lot industries, including in the state management. And yet it is not some revolution, because he has been in the field since, let's say, the 1960s of scientific interest. I am

at the university. taught him. Neural networks, artificial intellect, we have done some things. Of course, with the available computing resources resources, and information things are on next level. And yet I don't I think I told someone the other day on a business forum, it may not be that nothing drastic will happen tomorrow changes, but it can be very fast evolution and we must be ready for it.

The problem is, if Bulgaria as a country and The European Union, of course, as political union miss the train and we say no, it's artificial intelligence, there are some models, some startups in the States, we stop at one Europe. Business as usual, however, It turns out that it is not exactly as usual, there is a risk our economies to lag behind and that has serious negative effects.

And if so let's climb smartly, carefully into some of the the front cars of this train, then we have any chance of overtaking growth. Now, as I said a moment ago, we shouldn't be techno-utopians, overly optimists and so on. I am 23 years old, when GPT chat came out, shortly after, and I wrote an article about why I'm not so worried about jobs and AI. Then, as

before, someone comes out enthusiast and says: "Here's to a year So-and-so sector disappears, so-and-so who are you? jobs disappear and so on." And I try to be both then and now realistic on this topic and let's not overdo it things, but the fact is that from technology, technologies and potential benefits There are significant risks, too. Now in this regard, why should we even propose law? The law,

by the way, was introduced in the National Assembly two weeks ago, if I'm not mistaken. And why do we need it? such a law? There is a European regulation, artificial intelligence act. What then in Does Bulgaria need one? And first, because Bulgaria must arrange how implements the European act. must say this article applies it here this one administration, this article applies it is that administration. And here's

who you are is responsible in conjunction with so and so for regulatory laboratories, that's who market surveillance authority, and the other is responsible for protecting fundamental rights, things that the European regulation leaves it to the Member States and obliges them to settle them. But we have to do this anyway, yeah we apply the European regulation, which by the way, we can't add anything, but This will reach

him soon. A we can help the competitiveness of the economy, we can help attract investments, because everyone even if let's assume it's some huge hype and and so the substance is less, and despite this is all investment and we can to attract them here, whatever there is positive side effect. And it's good to prepare the workforce to adapt, reduce risk and for workers and employees. This, in

its simplest form, means to teach them how to use GPT chat for the things you do in your daily life working life. But not only that. A we can use this technology, yes improve where there are, administrative services, public services, to improve how we the state administration is working, that is, she herself should implement some technologies with artificial intelligence, to let's call it, and so make life

and its own and the citizens' easier. And of course we need to limit risks from unethical use, which in the private sector let's say that the regulation gives certain limitations and restrictions. And in the state and in the power sector especially the regulation allows all sorts of things, no all sorts of things, of course, but things that are potentially high-risk and I'll get to soon to them.

Why is it good to self-limiting? Now, a basic principle of what we offer as is not to introduce additional regulations of business. The European regulation introduces enough, enough framework. Even some criticize it for being too bureaucratic. We don't have any anyway. right to add it. We have no right to we add things, we have no right to remove things. And because the idea of ​​the European right

in this case is that it is harmonized that a company that deals with this technology or with some other, and falls under regulation only from one regulatory act, not each member state to add it and respectively someone who wants to do business in the European Union, you have to corresponds to 15, 20, 25 laws, not only one. So anyway we we have no right to do that.

Some countries they are trying to do it. We stand aside from this idea. Now the main measures that we propose anyway and they need to be settled, I said so implementation of the act on artificial intellect. And that includes a lot bureaucratic things that I will address very very top in a moment. And we suggest using systems with artificial interest in the public sector, that is, in

the state administration and in sectors such as education, healthcare and security. A the development of workers' skills and state administration employees, that is, civil servants, and who, right? the image for them is that a both before and after digitalization again the spoiler, you know the meme aa in the cadastre. But beyond that, their first understanding of it at all What are technologies? And because, as with both

in business and in the public sector, and when they start talking about a new one technology, whether it was for blockchain before years or now for artificial intelligence. A and when this becomes too popular, people are starting to learn things that are They've been like this for decades, but they're just now they are reaching them. Every single digital transformation, regardless of the technological medium, creates environment for

a little more understanding in civil servants and so on. And in education, healthcare, security and so on. It's okay too. employees in their field of competence but to learn how to use and how not to use this type And promoting investment, of course and in the development of technologies, use and limitation of the risks. Now what I said and a while ago, by encouraging the use of

any technology or family from technology, and we encourage digital transformation as a whole. This is true in both the private and public sectors. the public one, because when we say, here we are, here we go you now a voucher for the implementation of artificial intelligence. This is one of the possible measures that are proposed in the bill. And what does he get? the business? Gets the opportunity

to transforms processes. Yes, in this There will be little process transformation OCR, there will be some CH GPT, there will be maybe some later things, but overall someone will see their processes. Someone consultant, some company, no. themselves with internal resource, and they'll also say, "Wow, there is a place here to digitize these processes and optimize them." And yes, part of this process will be the implementation and

artificial intelligence. Now on to the more bureaucratic part aa state policy in the field of artificial intelligence somehow conducts. Right now it's a full chaos. Oh, even Ministry of e-Government, which in principle should be deals with this. And when I was minister three years ago in the bylaws, this is the organizational document of one ministry, we had written down by name some more cutting-edge technologies. A artificial

intelligence was one of them. Now, unfortunately in the latest edition this is removed from there, how ironic to sound, right, the artificial you already everyone knows what it is then not everyone knew what it was. So it's not like everyone now knows what it is, but everyone has heard it. Going to be more precise. And now this thing is disappeared from there. I hope this is just

a bureaucratic thing. sign, not and not the real understanding of for the goals of the ministry itself. But so or else some kind of structure who is responsible for this in the state, who is responsible for making it invested in such things, who is responsible for being to be published data, to publish documents. For the licenses of these documents, all that operational stuff someone has to be

responsible for them. A because as you know in the administration by going to a counter and asking some questions, they tell you: "This is not for me." And when you go through 14 counters, turned out to be for no one, because in some law is not specified, in some No structural regulations are specified. And Finally, I said I'm not responsible for this. A so the idea is

to go from the full chaos that is currently, to anyway some kind of structure minister of electronic governance to be responsible for use and development in terms of of the public sector, the Minister of innovation and growth in terms of the promotion in the private sector, that is outside the public sector and have one national coordinator, who is a person an orchestra along with some team, of

course someone who understands the subject matter professional because we can't we participate one or another minister to be inside and the most current developments in a given technology. However, the coordinator on the other hand, it can and should right. And of course we create one ethical use advisory board of artificial intelligence. These are the bureaucratic things that couldn't be done not to introduce you. But because one

law, at the level of law must regulate the framework of public relations, and without to go into too much detail, in too much specificity, especially technological specifics, because while right now a technology is popular, it might be tempting to rearrange it to level law and then to find out after three years that this is absolutely inadequate, that it is absolutely backward, and yet The laws shouldn't change

until so much. And that's why anyway the law is more comprehensive, but still yes let's move on to the slightly more interesting and technological aspects. And first we introduce prohibitions, but these prohibitions are prohibitions What can the state use for this? that is, the state should limit itself in how it can apply these technologies. Because in the motive for this thing is when a country is not

developed enough democracy when there is not enough control mechanisms when abuses of especially force structures are serious, we shouldn't give more chances someone creatively misuses this. We prohibit the use of such remote biometric systems identification. In theory, the regulation allows this. such to be used in certain cases of terrorism and persecution of serious crimes. But what does this mean? practice in our environment? It means that you

will there is one foot of video There's a camera everywhere you can think of. The Ministry of Interior has installed cameras, the municipality has installed them cameras, private cameras and so on. And this whole video could be his you turn on facial recognition. But only for people who are terrorists or have committed a serious crime, you have to find them. And that's great, right? However, in our

case, where people they are being tapped because they are opposition, people are being listened to because they need to be heard take the business and so on. And these are established facts, so to speak, where is called, surely they will listen to me too right now, right, outside the hall where I hope they at least listen to what I have to say. so that in this environment

we can give such an opportunity that would certainly be useful in some borderline cases, but it is significant risk to include facial recognition in other cases too, because there is no one to control them. There is no one to log into the servers at the Ministry of Interior and see now What did you upload here? And there is no one to ensures that the National Bureau of

control of special intelligence funds for example or Protection Commission of personal data and will implement such control. She will go to the Ministry of Interior, she will say: "Ah, no, no, no, you are here illegally They put these five through facial recognition the opposition man and these three businessmen, investors and so on. And therefore we will make you a prescription, fine and so on." This will not

happen right now, because in Personal Data Protection Commission, and you may have seen, I asked the hearing some relatively trivial questions regarding the protection of personal data and the person exposed himself so, that the whole internet understood what kind of policeman, who understands nothing of this is. But it is put there precisely so that it does not exerts control, not to carry out control functions, and in

order for some things to happen so under the radar and beyond the law. And from this point of view, such Self-restraint is absolutely necessary. And of course, the use is prohibited. of artificial interest systems related with elections and referendums. Something that is again marked as high risk in the regulation, but again it's in theory allowed in some borderline cases. We We say there's no need to bother

each other, but consciousness with these borderline cases, Are they useful or are they not useful? Especially in a country where the majority of parliamentaryly represented parties thinks I'm touching the machine code, Like if we put artificial intelligence in there, It will turn out that I am touching an artificial intellect, I talk to him every night and I tell him what to do. And so We better save

this. Not from point of view of how I will I feel and how I will have fun on their back, and in general from the point of view of trust in technology. And it is forbidden the use of artificial intelligence systems intelligence application of special intelligence means, and besides, of course, when preparing the the text content. That is, if someone a criminal can be eavesdropped on, and

it can be take the recording and tell the system with artificial intelligence, come on now transcribe this here something, then I'll Of course, one can pass by and look at it. But still, to save some manual labor work. For this, maybe for everything else, to apply, to use, for a clearing records for example because maybe that's why someone will try it uses and so that some can

be inserted a word here and there. From this point of view We prohibit this too. Now, one thing, which is specifically permitted to be clearly it is allowed, this is at surveillance of the state border can to identify whether an object is human or not human, without identifies who he is without identifies against databases and so on onwards, but still be known as someone crosses the border,

and is this a dog, a wolf, a swallow or a wave migrants passing through the fence. A This is what we consider a reasonable balance, again I say, without performing identification or as a categorization of persons. We have other prohibitions, of course, because that's the most interesting thing. And we prohibit gambling operators from they use artificial intelligence. Oh, this is it. in view of addiction to this

type of games. We have a serious gambling problem. We have broken families, destinies and lives and so let's not use this either, to recommend more and more maximally fishing games, roulettes and all kinds other things. We also prohibit it in the judicial system power to use artificial intelligence for interpreting facts and law, because for many reasons there is enough scientific literature on the topic. In there was

experiments, although many years ago in several countries, one in the States, one in At least I've read about Australia, where to see what verdict based on the facts and based on the law will get through an artificial intelligence system. A completely expected it relies on previous convictions and accordingly it is much more likely, for example, in The States, I think in Oregon, had tried to implement it,

completely expected at same circumstances a black person is much more likely to be convicted than a white man American, stepping on a training ground sets. The training set is like this. This, Of course, it can be fantasized, it can it's getting better, but just in case and anyway It would also be constitutionally compliant to we don't let artificial intelligence take decisions about the fate of people, especially

considering that very often he cannot explained them, and with all the risks involved hallucinations and so on it was irresponsibly to leave when pronouncing This should be taken into account when sentencing. We criminalize, that is, not just We prohibit it, but we make it a crime. the creation and use of artificial intelligence for the so-called child seual abuse material, child pornography and similar materials. It turns out

that no just spread AI generated such materials, but are distributed models and scripts to work with you build such models that you generate such materials and on this way you avoid existing compositions, because it is currently forbidden to distributes child pornography, but Is it forbidden to distribute AI? models and tools to use do you generate such things? It turned out that it is not. And that is

why we criminalize and And exceptionally Worrying things are already happening. So this is not for me, it's theoretical. It occurred to me that this could happen. It turned out that this is already happening. And here I will allow myself one bracket related to this type of content. The use of artificial intelligence for scanning and search for such content client site in Messenger or as it became a

popular draft regulation of The European Union for Chat Control, and it is very bad idea. I know it's not quite right. the topic is not related to our law, but to the draft regulation, but I am obliged to say what I can publicly, privately I am doing this so that this one is not accepted. regulation in its current form, nor with fuzzy hashing, establishing a child's pornography

on phones in messenger before sending, neither with AI nor with anything else. I explain. wherever I can, to whomever I can, as I can, that this is a bad idea and should not go through. Fortunately, once again, it has postponed the vote because there is no majority for this thing in the European advice and I hope it stays that way a very long time. And I close

the bracket for chat control, which I hope doesn't happen to us. We continue with the restrictions. Deep fake. And of course, such content must be downloaded. Had is a case of fake prime minister, president, prime minister, who sit on Facebook for days, despite the reports from the Ministry of Interior, despite the reports from Ministry of Electronic management, and Facebook doesn't take them down either. Now, of course,

by giving authority to someone to download, download content, You also have to give an account. Therefore, with the latest amendments to the law on cybersecurity was adopted, it is not yet has not been finally adopted, but in the report on the final vote was passed with anything that takes down DG Bob. and yes be reported to parliament and respectively publicly every six months. We apply the same

principle here. Every phew, Whoever downloaded GDBOB somewhere should take it with them. in a register and send it to parliament. Accordingly, these reports are public, so that practically the entire society. A restriction on use of AI services from third countries like China, Russia, Iran in state administration and critical infrastructure. You can You can use DPC as much as you want. in AECK Zlodu and maybe it's not

good to uses a typist. The most striking example of in education limiting this artificial intelligence to assess student performance works unmotivated because it can to try to help the teacher, to give him under it helps with motivating a given grade, but just to score him on a test or one essay and he'll give you a B It's not a good idea at all. and mandatory noting the

use of artificial intelligence in election materials and draft regulations. Election materials clearly. It turned out that colleagues in parliament, some of them already have started using artificial intellect, by writing the laws. This but it's not quite obvious, is it, especially in the motives. Even sometimes in speeches from the podium come out with one something written, they start reading it. A I'm pretty sure that if we take

it out of the transcript and we put it in some tool to determine if it was generated with artificial intelligence or not, it will light up someone. So here we are simply fulfilling an obligation. So, a duty for a discologist. Used Are you an artificial intelligence when it comes to writing? or not. I open a bracket and it's not at all good artificial intelligence with normative acts.

I'm trying to do research on given topics in European law, in Bulgarian law, in secondary legislation. They all make it up. In a sense, you are asking, you ask him where this is arranged, how in Article 22, paragraph 4 of the regulation, who are you? You go there, there's no such thing. I'm shouting, but there is no such thing there. Ah, yes, true, right. you are. It's

in recital 23. You're going to Recital 23. Well, it's not there either. It it is actually in a by-law. Who is a statutory fact? Who are you? Well, he It's not there. Well, yes, you're right. It is not settled nowhere. And then using these technologies in including in my work we must be extremely careful, especially when we use it to write normative actor, because such things can

make it appear that we are amended the constitution between the first and second reading somewhere. A risk mitigation and systems for recommending content to many large online platforms. These are Facebook, TikTok, YouTube, which have recendation engines and These recommendation engines are black boxes. I spoke many years ago about Open Fest for algorithmic transparency, and and I have touched on this topic in depth, and namely, that they,

being black boxes, actually promote more sensationally content, more than extreme content, more hate, clickbait and all sorts of other things like that. And they too, however continue with black boxes. And I think that this is a risk not just for someone to see more stupidity and to become dull, and a risk for national security, as it leads to gradual radicalization of individual groups of people. That is

why we offer SANS should have the right to access as much as is it possible the source code of these recommendation english, to data, to documentation, to some sandbox. And so that it can be tried, regardless of the provider itself, but how they actually work these systems. Now you will ask why Dance, because these policemen need to be deal with this, can they even do they do

it? In general, not really. However, a these platforms are regulated by another a European regulation, which is also fully harmonized and we have no right let's add it. We have no right to we are adding new obligations for the platforms, one exception to the contract for functioning of the European Union, that when it comes to national security, any kind of things can be done And we also

get hung up on this exception and we say, since it is about national security, please go you, let us see based on what Do you recommend one or the other? content that you recommend the Kremlin's backers and so actively so you are actually undermining the national interest. Will this work, will it? the big platforms won't say, "No Let's give it to you, let's see what "You will

do to us." It is a matter of discussion, but that's the reason it's a dance, since it must be related to national security. We anticipate methodologies related to risks for addiction of children, to encourage of criminal behavior, of self-harm, addiction and discrimination. And I will give one example. recently chat GPT, if I'm not mistaken. a helped a teenager to suicide, gave him advice. The Safeguards, which are

supposedly in place and should stop these things, they don't actually exist, so the models that are currently popular, are conformists. They want to give an answer that is liked by the user and therefore often they hallucinate and then they say and they start with a great question. Yes, I will now. I answer very well. Ah, but that leads to such risks. There is in India for example

many people self-medicate with and it turned out that this leads to some risks that if you don't get treatment on time right, then it's too late. And from this one point of view we have foreseen CRC in relation to addiction minors, and the Executive Agency medical supervision in connection with self-medication, and the Ministry of Interior in connection with criminal behavior, agency for child protection in relation to

self-harm, to prepare some methodologies to periodically test popular models, but to see how they respond to these types of prompts and yes report promptly to both the European Center, as well as the supplier, and so that they can be taken some operational measures. Will this solve the problem, it won't solve it, naturally, because it is fundamental. But still, there will be someone who will follow these models,

are there any risks to encourage such behavior. And of course, when using in the public sector, in the administration, in healthcare, in the Ministry of Interior, and to performs an analysis of what hallucinations give and accordingly to give feedback from suppliers models. Now let's move a little from limiting risks to incentives. And relief for open models from the existing European regulation. The European regulation says there are

open models. And and says the current argument does not apply for artificial intelligence systems in general, and provided under a free license, open source unless they are released to market or put into service as high-risk systems. And that is to say here for something, if you upload to GitHub, no you have to deal with the whole bureaucracy, to put it bluntly. That says, a exceptions are by

agreement, by documentation, from completing the sales representatives. So open source is a little favored in itself regulation. There is a problem in the regulation itself with the translation, as it uses free, instead of free. No need. to this audience to explain this difference, but clearly the translators of The European Commission will prevail. Now we introduce in the draft law open models for artificial intelligence or the most

artificial intelligence with a common purpose. And we introduce a definition and it has one goal to attract companies, who develop open models, but true open models, not quasi ones fake open models. The condition is that it is with a free license, be open source, be trained with publicly available data. And because there are models that they say: "We are open source models. I won't get into this

controversy. However In fact, nothing is open to us except a little code for what we decided to show you let's go. Neither is the license open, by the way you can't use it, we can limit you for whatever you are we want and so on. And I think that on the the meta model is like that and it should be removed from this definition because otherwise everyone

can claim, I am open model. The benefits of this thing. It why would anyone benefit from doing basic open model? First, because it we give the right to train with public personal data, with reasonable exceptions, of course. And Facebook's problem with training Lama and why Lama was not released in European Union, is because it was not clear Can they train with public? posts of their own users.

M there were long discussions. European Board of data protection, a long-term solution the topic and Facebook said meta. They said no, no, we won't deal with that here These things are very complicated, but bureaucracy. The idea here is to ease this bureaucracy, let's say, if you are open model, you can do this you do. And we also equate these models of such with scientific research purpose, with

a view to non-application of certain other restrictions of the regulation. For example, there is one a limit that is imposed for how much petaflops can be a computational power necessary for what you are. And and this does not apply to resarch and And to get around this thing and to let's do it like this incentive for people, which for companies, we create a legal fiction, we equate

open models of research models and we say this does not apply. And whether the European a committee would adopt such a legal fiction is a matter of discussion, but I think that it is reasonable. And another thing that is offered with the law, is to support training of models, publishing all documents in the administration. The administration has tons of documents, some are in a structured form, that

is, in Urdu, in PDF and the other part are scanned, it doesn't matter. Where it is sure there is no personal data because they are some internal acts, not general administrative acts, that is, they do not affect specific individuals, everything can be poured out publicly. There is already one. current law on access to public information that says that this is so or else it should be done.

Simply a catalog should be made, and this administration, all its documents for training purposes are here on this one address, pull, train. A publication of all judicial acts without personal data, of course, they are already impersonal anyway, that is, I can get caught and published. And yes made a catalog of public registers. The public procurement register has tons of documents. And this is to take them out

one by one, to find who and to It's awkward to shout right now, but if be poured out, catalogued properly, to allow them to be pulled relatively easy, but it's huge useful resource too. Other systems, none to quote why he is SUN and what he is for uses. And textbooks on magic in Education Ministry pays for the development of textbooks, and they are funded by the budget.

Accordingly, the whole should this material can also be published for training purposes. So and since there is this feature in the edit we last put in, however, in the settlement of copyrights rights should be mentioned for what can be used and what not can be used. Yes, it is paid. from the state. Copyright is owned by publishing house, but for the purposes of training can be used.

Ah, so that won't happen. from tomorrow for the current ones, but for everyone next should happen. Provided to the archives of BNT, BNR, BTA and whatever else you can think of. The same The quality of these archives is exceptional. question, their completeness is separate question, but that they can be used to train models of Bulgarian language is quite important because aa they work very well in English,

You know these models. in Bulgarian sometimes still even the best and not they fix it and at some point they even pass in English, by raising their hands and saying Here now I will ask you in English, because we made a mistake. Ah and of course training with science publicly funded literature funds. But it's also important to have it, because the state pays for the production of

some scientific work, and accordingly, it, having been published, must to be free to use. We have regulated such a thing in the law for copyright a year ago and now we say that for the purposes of training models should also can be used. And a little more other preventive measures. Free providing cleaning resources, and supercomputers for scientific research activity, apparently aa targeted funding to build tools, services

and processes, components with artificial intelligence, open source. That is, the state can set aside some, there is no let's call it a fund for short, with which to promote precisely tools with open source, with artificial intelligence, and administrative relief for attracting to scientists from third countries, because this It may sound a little strange, but exemplary, who have a lot of good so world-class learning is they deal

with this matter there, ah and no only, of course, in other institutes in Sofia University and so on, It turns out that in order to attract a third party country scientist aa have heavy bureaucracy. The problem when these people come is that they they don't even have the right to health care insurance. They should go to the health center insurance and must renew their every year the

permit for residence. In other countries these renewals are every three years, every five years. We allow with health insurance. And so we offer such and such reliefs that are not are only associated with artificial intelligence scientists intellect, with all the scientists, but still and and for these apply. And one information center for small and medium-sized enterprises enterprises. And going towards the end of the self-declarative part, we

use in the public sector, we propose to provide administrative services a little more convenient, that is, not to go in and search for the huge forms where what to do fill, and with one little more interactive, right chatbot for providing administrative services. Maybe it's something Obviously, however, it hasn't happened yet. So we propose that one thing happen a smarter system to support policy making. This is what

needs to happen right now. made a legal amendment, and experts in a given field are caught ministry and they are starting to think now What are the problems here, what are the the solutions, what are the alternatives, what is the impact on business, on the administration, on revenues, on expenses. All these things get a little wet from your fingers, you have to to acknowledge you. And when

in management we were preparing an amendment legally, it turned out that only one colleague and I can actually get along with describing an impact assessment with data, with numbers, with how it will affect municipal revenues, expenditures, etc. onwards. And such a system would be useful to the administration. We also offer such a system, expert a healthcare system that assists doctors. Not people to self-medicate, not doctors to

lie down and say: "Tell him there that yours is sick and yes go away, including saving errors. For example, he collects and what are they? your symptoms, collects research, they enter the system, he says, "I think, that this is it, and I prescribe this, which one you are medicine." However, the system can say, wait now, maybe you're not here seen, however, there is one factor in research,

which predisposes to risk of allergies and see if what you you have prescribed, it will not kill the man with two words. And so from the point of view of patient protection and support the doctor, such expert systems in healthcare exist around the world and can and should be used. We propose to create a system for money laundering prevention. And and of course any of the above

systems should be open source and possibility with open models, as required by the law on electronic management since 2016. In conclusion all these things that we offer, they of course they require some kind of capacity in the administration, in the public sector as a whole, as in There is nothing special about the moment, except that it doesn't have to have it if there is no pressure in

this direction. And we, as a country, are obliged to we are not completely inadequate because other countries are already adequate. That one day aa colleague from the parliamentary group Mrs. Yordanova was on Parliamentary Assembly of the Council of Europe. Oh, in other parliaments there are subcommittees with expert analyses, with people, who understand this business. We here we are on Gola Polyana and so that we are not

on A bare meadow, we offer this, and so as not to fall behind because the risk is if we are too inadequate as a state, yes, the private sector will cope, there will be developments, The IT sector will work, there will be outsourcing, there will be startups and so on onwards. But the broader business and the public sector will be so so backward that we will wonder

again what we are last in the latest ranking in The European Union. And if, along with this an attempt to ensure that the state is not inadequate, something is stimulated, something gets better, we attract some other investment, we will be great. Thank you. Thanks for the great lecture. Someone, if there are any questions, you can stop by the center in front of the microphone. Is everything clear?

Okay. Quick reminder. Yes. There is a question. Just ask. forbid the law. And since while you talked about them, you explained that right? Some things cannot be allowed to happen. be left behind. for example for personal data and a was still to thought rather my question is if they prohibit from this law how it will be Is this thing controlled? That is, we do not we allow

the use of aa visually recognition in let's say in feeds that the government has them, but what about this So how far do we limit it? Approximately can you buy a Chinese camera, which has this feature built-in for facial recognition for example? Well, that's exactly what's good. Lotto of these prohibits, but that the moment someone ordered something, will it be a system, will it it will be

an individual camera and so on, most of these orders are still public. Software for something, hardware and someone sees that they have ordered something that is in violation of the law. This is based on the internal control mechanisms and especially the public reaction, and most likely will follow scandal and suspension of the relevant order. If it is allowed, If you buy such things, they will say: "We,

of course we only use it to search terrorists for nothing else." And so there are no guarantees, of course, as the control mechanisms do not work the internal ones, that someone doesn't have a secret order to buy such a system, because such things happen in customs. They are on a secret order. bought scanners for customs. Nobody can understand what they even bought and whether it works. But

this is also violation of the law and right now this is scandal. The European Union will stop them financing and so on. So even when they try to hide it, but it still isn't hassle-free. So to summarize we create an obstacle for them. Not 100% cent an obstacle, but an obstacle. And an important clarification that we have introduced such bans for use in the public sector, does

not mean, that Bulgarian IT companies will not be able to to do such things for export, so as the regulation itself allows and these are not prohibited models. Okay, thank you. And I have the following question. There is a specified ban on using artificial intelligence for judicial questions. However, not less important and questions simply municipal administrations and other administrations, who can provide some solutions concerning requests and

there fate of people simply because of its price tag. And this dore povazhno čto, for example in the court and we lawyer and we procedure however when to refuse or to make any decision difficult to overcome similar solutions? Well, that's a good question. In principle, in many cases should not exist decisions on expediency of the administration. The decisions of the administration almost always has to are legal.

Does it answer? this is against the law, doesn't this comply with the law. Now is this true? practice is a separate issue. But even if assume that it is always right, there is such a thing so-called licensing regimes, where the administration must decide on objectives conformity. And in this sense, where shouts, I'll make a note so we can see including this, where entire conformity or not be

able to use the artificial when he uses it, should it pass through a person and he can evaluate the corresponding result. Here, I'm writing it down, as they say. Hello, thank you for the lecture. I have two questions. One is if I am so well versed in importing of any regulatory acts wants an impact assessment and because You say things like that, which are suggests they have

a much more positive effect, or at least that's how you present them, What is the impact assessment? Is there one? so can it be done? the submitters so since this will be quite more engaging for people who are interested in the topic lateral and distant and and they don't see directly the benefits. This is my first one. question. And my second question is related about the prohibitions.

Ah on the one hand you said that this law does not bring related prohibitions to the EUI act, but in at the same time, right, the things you said about recommender systems and how He will be controlling various things for a long time and otherwise, at least to me they look like upgrade, because according to AK These systems are outside his scope and Actually, that's where we

get something from. more specifically for these providers. So question. Thank you. Yes. Now to the first question, a little bit. The impact assessment of the regulatory acts are made in two the form. National Assembly format, when MPs are importers, which is very limited, very tiny. You write some things in free text and no one reads them is watching. Even recently, colleagues from a new At first they

introduced a law, but a lot in a hurry. And so that he doesn't have to deal with impact assessment, it was one line that said this is good for all Bulgarian citizens. And something about this one spirit. Now knowing that this is a new law, but always for a completely new law in the form of the executive branch must be done full impact assessment. And that's why

we, although not required by the rules of procedure of the National Assembly, we have prepared a full assessment of the impact of this law. Now she of course it doesn't go that far numbers, as these would be speculation, but who is interested, should have been uploaded along with the whole bill on the parliament website, and on our website. It's long, I can't read it. I'll retell it

now. It is considered in different scenarios, and the different components that are proposed and so on. And by regarding recommender systems, they are actually subject to regulation by the Digital Services Act, not the Digital Services Act artificial intelligence and as such are actually harmonized, as I said, in European law and the states members cannot add anything to each other, except for the purposes of national security. That

is, where it comes to national security, we can be we add things. Is this balance done right, aren't we have overextended the topic with a national security because it really can be it from how we protect the NPP to whether or not are recommended foreign propaganda in Bulgarian citizens. All this under the DANS law is national security. does it fall into the exceptions to the contract for

functioning of the European Union and whether allows us to add someone regulation is a little bit, but it is a difficult assessment, which including subsequently as one of these platforms starts appealing some act that is written will have to and European Union court to decide. I I think that in this case it is proportionally. Thank you for your questions. If anyone has more questions, you can find

our lecturer. Please, applause again. Thank you very much for the nice lecture. Hello, it works well. Thanks for the wait. Everything is already set. So today's next topic is simple, however, not with little weight. Today we will show how a person can be themselves make a computer without our cool boxes and expensive, overpriced video cards today days. And this is what Denis Chakarov will show us. Please

Thank you. Yes. This is eight-bit computer on breadboard. Oh, right. I am Denis Chakarv, a programmer. I am a professional. I have given some here Link on LinkedIn. I won't talk much about yourself. I will try to talk more. for the computer. And so. First, let me just say that this is... something is not my original creation. Me too I've followed Ben's tutorials, lectures Eater, and who

has been involved for a long time with training at the Khan Academy and explains extremely well for this project. His YouTube videos are somewhere around 40-40 and a few were. Ah, quite big. The person made an effort to do it. A and so just the admirations actually they should be towards him. I was just following. tutorials and I did it and I decided to do it I

am sharing it here with a Bulgarian audience. Oh, I was so surprised, I mean I didn't know whether it's a lecture or a workshop. In general, if it was a workshop, it would take a lot of time. It took me four or five months to free time yes and to do this computer and I haven't come up with a solution yet, in which it is relatively normal

the workshop, so that it doesn't take so long to prepared. That's right. And so I decided to just have one lecture, to show you what it is the computer. I'm here and I've released one. link to videos I've made time of making a on the computer and they are in Bulgarian, that is, for Bulgarian And so. This is a sketch of the architecture of And I don't

know how familiar you are with depth like that is actually here computer or processor. This is in basic processor lines with very little peripherals has to him. And so it is. and there is register A, register B, which are use it for content information. has an arithmetic logic unit, which can actually only collect or to extract the contents of register A and Um we have a memory

address, that is, there is RAM and there is something separate to it like a little a memory address register that saves and what do you want to access in RAM. There is an elder through which these modules are communicate. And there is an instruction register, which preserves the instruction that must to be processed at the given moment. I have a counter that actually keeps track of which

step you are from the program in RAM. They there are 16 addresses in only and in this computer. It's pretty minimal. RAM, so only 16 instructions can fit. And in fact you to them a release one after another, you need something to count them for you, that is, which one is first, which one is second, how far you have come. And this is program counter. Oh, and

finally there's an output register, which actually contains the information, that you want to show. Like the display This is a very strong display. They are four a hx displays that can only display numbers or letters. And so. Like each of these modules, you see these little arrows on the side are their signals. Like sub-signals, right? You have this is current, who either submits or is not there.

And also this way you control the module what to perform. And the bus is actually the bus some wires through which these modules can communicate. And and at the same time, right, there is such a rule, Only one module can be used at a time. has an output, that is, to run current through these wires and only one module can reads. This is a rule that should

keep them in mind so they don't get confused communication between the different modules. A In general, this is about architecture. And here I have shown what this looks like on actually on the model. I'll give it to you in a moment. show it in action, but first only on I'll run it through the slides quickly. And this it's actually a module that I didn't show you here.

It is for a clock frequency or So in English it's a clock. M of this The clock frequency depends on the speed of the execution of the program. And like here is the clock frequency, the maximum is 1 kxz. It's quite slow, but for such learning objectives are sufficient. You want to see how it actually works. the execution of the program itself is taking place and that

is enough. You even for 1 khz you don't see what's happening, but you should to reduce. There is an option to reduce It's much slower and you can see how are the signals going? And next here are the three registers. A register, B register, A instruction registry. And there are some wires like this, which mm stick out quite a bit on this is on LA U module,

and where there is already patience I ran out of time and couldn't do them. as good as Benter. Yes. And I said to myself, that's it, they'll fly. And I left them like that. Mm. That's right. Yes, this is the unit itself that you I said, with the wires spinning. He just he non-stop aa adds or subtracts the two registers. And RAM is quite limited. This is

actually the most serious limitation of this computer. There are only 16 addresses, eight bits. However, like here, to put some program, there is no normal interface through which something to write and enter inside the computer. There are actually two types circuit breakers. One type is on top only for memory address, and below it is actually for the contents of the memory and they are once there are

four switches and in second place there are eight circuit breakers. You set them up and there is a separate a switch that, when you press it, turns on saves the contents in memory. That's how it is actually programmed manually with these bit-level switches. And so. This is the program counter. Here there are only four. These LEDs are in a little while I'll put them on video, see

how they shine. They are. That's B2YC. It shows itself and its number is four, because we have 16 addresses 2 on 4. So counter actually the interesting thing is that when you want to have a jump instruction, because this is defacto, it's like excluding memory is tinge. There is a conditional jumping. And actually this jumping is in the program the counter. Jmp represents directly writing to it

given value. If you want to jump to address zero, you write zero to it. If you want 1 if you want 16, right? This is Jump. Program counter to accept m That's right. This is the output register. And also and accordingly the display with these numbers, which are not lit in the photo. And it was quite a game to play there. do. In fact, there's even a

romchip, Who are you recording for yourself? a table in which to be able to light up every single line of this display, you're actually coding what What does value mean? And actually it was quite a toy there. There was also problems. Even when I was doing it, it was burnt chip. I had to order it. again and so on. Down here is control logic, which actually this

control logic here I'm a little ahead of myself, but given instruction here for example low a lda is it is written 001. This is so that the computer can understand what represents, you actually have signals that mean you want a specific module, for example memory the address, but to accept, and instruction register to output, that is, what is in the instructions, and to enter the memory address.

And this, for to understand in some way from the machine, you need this control, this module with control logic, where here you actually have such rum again chips that are a and POM, which is electrically, programmable read-only memory. Oh, and actually these are some tables that you actually say to yourself a you de facto program them with value, The one in front of you is your address,

right? is with low a in this case 001 step and two and output, right, to measure the chap with this address we want to output 01 001 and only zeros until the end. And so, actually every day the instruction and one instruction has up to five or six steps and actually here you see on the second line especially on low a there is r means ram out

and register a in. And this is the second one. the second step, right, from the instruction and it actually arrives with a different address, because the step is part of the address. That's right. I won't be able to do everything. explains as well as Ben Itri. He explains it at length. Here I don't have that much time to explain it all. okay. I'm trying from top to

top to you Tell me what's happening. That's right. And yes, here are actually some of the the instructions. I have them on a sheet of paper. most. I can show you them with the video. and the rest. That's right. Here I wanted to show you what if someone says, if they say register, what does that mean, and also as we start from one bit, and a register

for one bit, what does it represent here? That's it. and a logical scheme to some extent. So, the one where it says D, with the end the square with a Q is a flip-flop that actually it can contain state, but this one State is actually current. Is there electricity? the exit or there is none. Oh, right. And actually You have an entrance, that is, do you have

data, do you have a unit or zero. And this is the entrance and you have a signal, which is load. Write it down in this register. or don't write it down. And here already There is one gate that is the end, right? And who takes the boat and the children. If both are units, is a unit. The next gate is or a provided that unit, he already

is a unit, enters the flip-flop, the child is recorded and because then there is feedback from the flip-flop, which enters the upper endgate, until, right, at the moment when writes, it does its thing, passes current. The moment the signal for stops and there is no more electricity there, but there is one inverter, which enters the gggate as zero, not the other way around, that is, the allod

has stopped the signal with the inverter with this unit, enters to the gate as a unit and because of the feedback Gate continues to give a unit. in a or the gate still comes out one and so on the state of the unit is preserved and of the current in a register that is one bit. And now the rest of the registers here in this case this

is an eight-bit computer, they are eight household. And the registers are actually This scheme is repeated eight times and RAM works on the same principle, but this is the expensive RAM option that stat RAM that no one actually has buys, and in computers it's not accurate either like that. Too expensive is something and it is bulky to work this way. Modern ones are already in a different

way, but here the registers and frame actually of this machine are like that. And so. Now here I wanted to show you a program, but first I'll tell you a little I'll explain it and then we'll code it. This should happen relatively quickly. program. It is a situational jumping. And actually the idea is that it can count to 255. This is the maximum of aa with right

with eight bits that you can display and back. And the first instruction is out, which is output. Show this, which has aa in register a is in principle. And at the beginning it will start from scratch, it will show zero. The second instruction is a 15, since it's 15, add 15. However, here it is memory address. And in Memory address 15 we'll write one, so yes, I'll

add always one. Addition is always to register A, so this instruction as executed will add one to register A, which was zero initially. Ah then the next instruction is jump carry to ah four. four is an operand, right? Address, aa as it will not be fulfilled, until there is no Kerry. Well, when it comes to 255, because that's the maximum of the eight bit. If you add

one more time, there is a keriflag that keeps you wanting to transfer it this unit to the next register, and in the next bit that we we don't have it here, but it can be detected that there is such a jump carry moment and like reaches 255, in fact Jump carry will be valid, otherwise it will not be before valid and will reach the next instruction, fourth,

where jump zero is to the left and will start to rotate towards zero, and so it will be performed until reaches 255 and Jumper Cryri does not enter strength. When it comes into force, it will go to aa at the fourth address, which is step five. However, we have a reserved m there instruction subtract 15 address is still unit. It will start subtracting units. And the next

step is output. will be show on the displays. Next step is jump Zero, which is valid if only if the sum between register A and B is zero, will not be valid, while a while subtracting from 255 to until reaches zero, it will not be valid. The next step is JMP for will reach at a fourth address, where it continues to subtracts. This is how the second

cycle will spin, until it reaches zero. When it arrives to zero, and Jump Zero will take effect and will return to the very first step and It will spin like this forever. And this is a simple program that I hope to be able to in a little while. I'll show you. Well, the next one is a little Here are the capabilities of this computer, as I said,

they are just to collect and subtracts, which means that if you want to do multiplication, you need program. Actually, she is quite And I don't know whether to go into an explanation of the program. Maybe if there's time I will we try. Maybe later. Oh, and here too I want, right, this is the code for the program, how multiplication is done. It is actually adding x number

of times. If you want to add y, you add yx to number of times. This is multiplication. Oh, right. there are two m two important points here, but maybe we'll I'll show you them in a moment. I just want to be here. to show you the instructions for this program. These are 11 instructions, but since we have four promels here too actually in this one and in

this address Space 16 they are for and for the instructions and for variables, so your program must be collected in aa in 16 addresses. Quite a few apps and limited there is. So it represents this, so that if there is still time to show it and if you want to show it, itself and entering these instructions takes about 9 minutes just playing, to flip the switches. Maybe

it will be. too much for you to stand and watch 9 minutes ticking away. That's right. Here are some frequently asked questions: I will answer, right? Yes. You are already here. I said it's 16 addresses, 16 baht bytes, which is 128 bits. Quite limited. A people were asking if the karateka was leaving, no goes, neither goes, nor will go with a with such a memory. It took

about four or five months of work in my free time. Debugging is not easy for me either. It took me time, but I tried my best. I manage sometimes on my own, sometimes with comments from internet and it actually helps you understand from electronics, because actually the programs were associated with tensions and voltage drops. And even then it wasn't very easy to I can guess what's happening.

Oh, yes. The Imetic logic unit only supports addition, subtraction. We don't have bitwise operations, no end, no or, no not, There are no such things. Well, now I'll ask someone to come here. assistant to me. Please give Tanya a round of applause as she comes. That's right. No, we will try to do Can you expand it? Yes. This is the extension. Well, I guess that's from Yes.

From people with the video can ah they can try to expand it possibly. Can you see it? Something is visible, but you have to. But come soon, yes. That's how he'll shoot. That's how it happens. We might just let it go and see. Now in there is nothing coded at the moment and these are I don't know what's going on. Some Random things happen. There is none.

idea. And by the way, I forgot something. very important. I don't have a screwdriver. If any of If someone can get some much Little girl, I will be very grateful. And she won't need you right away, but yes. Oh, thank you. Great. You will put in the work. at some point. Yes, I knew I forgot something. And so. Let's show the program. Yes, yes. Now we will

show a program. No. Oh, no, you don't need to show the program. You can actually show what you want. I enter here. Now this is it, now it is a mode in which things are going normally aa the clock, the clock frequency. Can turn it off and I can manually enter impulses. I won't do that now. I I would like to introduce program, right? This is here.

And I'm including address, memory to work normally or manually yes to enter values. In this case I choose manually and now this is memory address 0 40 and I wrote it here on the program. what should I enter every time. That's right. And now in the first case m the first instruction there are three ones and only zeros. That's how this lights up. You see directly what

you entered. That's right. I'm going to now. next address, next instruction. We introduce add 15 this thing which is 30 unit and only units is 15 byres. That's right. The next address is two. That's right. Oh, and we have a JM carry 4 for two. Jumpmrito three units by the way. And if there is You are welcome later. Whoever wants I'll somehow crack it open outside. Let's

find electricity somewhere. If anyone is interested can enter and also to click on some small programs. M, mkiri three units 01. So three units 01. So now address 3 is Jump Zero. is 00 two units Well two ones only zeros. If I mess up one instruction, then I I wonder what's going on and go, look at every single address in memory whether it is the right thing

to do. address 4 is 00 only units. Only units. Address 5 That's right. Three samolas. Address five. Address six. Address six is ​​easy per unit and samoly. Address seven 1 1 That's right. Address seven. And now at address 15 we add one. Address 15 Now the moment of truth. We turn it on. She is normal. the front. It doesn't turn on. I have to Let's start counting.

But it didn't start. count. I made a mistake. Is this this one? We had to start from scratch, but no started from scratch. That's right. Either I'm confused or something is wrong. The game has been told about his transfer. But now we'll see. On Andres 15 there is unit. Okay, that's easy. Oh, I haven't reset. Let's see. Yes, no I had pressed the all-important reset button. I

Let's see what we'll do now. There is still some problem. So debugging demo. This is a classic. Zero. Okay. And 15 is on the first one Well, yes. This is my first instruction. 10. Okay, let's see if it's just her? You're lucky. It's not just her. There is something else. Austrian one up. Address 2 03 01 Okay It's not natural that I mixed them up and in

a row I'm confused. okay. The death was confused. The fourth