 We're gonna kick off our closing ceremonies. We're gonna kick it off for the talk and To enter that talk a little bit. It's important to remember that aetherium aetherium is not just a technology It's a community. It's a movement and within those movements within this community We have values and one of those values is the importance of civil liberties civil rights and protecting those and for that I would like to introduce Kurt Oppsel from the Electronic frontier front frontation the deputy executive director and general counsel so big round of applause to Kurt Oppsel Thank you everybody. Thank you. It's so great to see so many people here today I've had a great time here at DevCon and I'm excited to talk at the closing ceremonies talking about some of the value of cryptocurrencies in supporting human rights these civil liberties Privacy free expression these rights that this whole community holds dear a little bit There we go back. Sorry about that. So a little bit about the electronic frontier foundation We are a nonprofit organization that has been around since 1990 fighting to preserve your rights online fighting for free expression for privacy for innovation trying to make a World that we would want to live in to make sure that the dystopia is there possible won't happen The sci-fi we read is not going to be necessarily the future unless it's the cool sci-fi with the utopias All right, so let's talk about how we as a community can be supporting rights and liberty There are a number of ways that cryptocurrencies can help support these rights And I'm gonna just talk about a few of them today because we only have a few minutes But decentralized financial options can allow and support political social moral views can provide more options by taking away some of the centralized choke points which are often used as a point of failure a point where control can be put onto a system and impose Push put push back on unfavor or disfavored viewpoints ideologies. So one of these Financial censorship. This is when a centralized financial service is under pressure from political regimes from social movements to say that something that may be lawful that may be You know within the bounds of what the law has said society can have But it goes outside of their code of conduct or their review or just is subject to pressure and they forbid lawful activities Another one which I know is very important to this community is the protection of privacy and I think we'd rather explore that a little bit What do we mean by protecting private? What is it doing? Privacy of course has its own value, but it's also fundamental for protecting other rights other rights that we hold dear like freedom of expression freedom of association and Making sure that that your information is protected by due process that Governments can't get access to the information without going through the appropriate steps Necessary and proportionate steps to ensure that there's not government overreach And another way that we can help doing this is enabling the decentralized web moving away from chunk points have other options that people can choose enable competition and Allow it so that there's not a single point of failure that will enable people to choose things that reflect their values and allow for their values So let's dive a little bit deeper into this avoiding central financial censorship One of the ways of this first came to my attention was 2010 with wiki leaks where wiki leaks had engaged in publishing some material about the Iraq war that Said a lot of people in the US government and they put a lot of pressure on MasterCard visa PayPal The sources of donations for wiki leaks. How are you allowing these funds to go to this or organization? This wasn't a legal plan that didn't pass a law to say that money could not go They just effectively made it extraordinarily difficult for people to fund wiki leaks And one of the ways that wiki leaks was able to get around that was by accepting Bitcoin Accepting cryptocurrency as a form of donation because it didn't go through those mechanisms And this is an effective form of censorship or can be an effective form of censorship Because these financial institutions are necessary for most people to be able to complete transactions But it can have serious ramifications for free expression by taking away the funding that an organization needs In order to put its expression out there in the world They rely these organizations rely upon financial institutions in order to enable their sites their operations So how does this affect people this comes up in a number of ways, you know membership in organizations You often reflect your values by joining an organization EFF is one there's the ACLU the NAACP the NRA There are many organizations around the world where people band together to reflect their values and they want to join become members and Show their financial support, but if those organizations are cut off from the financial system It can be harmful the organizations and make it difficult for people to band together use their right of association to Express their the right of expression Also, it's reflected in media that you purchase by supporting artists Video artists podcasters book writers who are giving you the information that one you want to read You have a right to read as part of your right of Free expression and this is also essential for free expression So you can see the ideas see the discourse and participate it by consuming media But if you can't get access to that because of a financial censorship Then that cuts you off and inhibits both the freedom of expression of the site that you're going to the publisher and your own freedom of expression by using your right to read and get these ideas and information and It persists to this day You know I pointed out I you know saw this with WikiLeaks, but it continues persists often it comes up in the context of Erotic material which is lawful, but disfavored and it gets cut off by some of the major Choke points in financial transactions and these would be things that if under US law and a lot of international principles of free expression it would be unconstitutional to say These things are not allowed. They are constitutionally permitted to exist But by putting pressure outside of the legislative system outside of that process They can cut off funding and make it more difficult for those things to survive and The internet if it's going to achieve its future as a global forum of expression as a way for people to exchange ideas We cannot deputize intermediaries to become the morality police and go outside of the legislative process go outside of the policy process Circumvent that and have a private entity become the morality police Now also protecting privacy and if I take a moment here Why do we care about privacy? What is it doing to do? There's a number of ways of looking at it There's a Louie Brandeis course I put up here on the slides that I think capsules are very well the right to be left alone To that's none of your business. That's my business. Just leave me alone and allow me to do my thing That is a core autonomy aspect of the right to privacy But it's also control over the flow of your information That where you give information, you know, what consents have you given have you consented to give it to one person? But then they're going to give it to another. Where does that go and having some ability to have it? I want this information about me to be available to my friends to my family another set of information I want to make available to colleagues a third set to the public but having some control over that flow of information can help Bring about a a way you can express yourself and keep the things you want private to be private and Also privacy today making your information confidential today. It's a protection Against dystopian future a future in which what was normal was okay Was not something that you felt endangered about forgetting out there and in the public today The rules might change a new government comes into power and what was previously No big deal now is a big deal by maintaining your privacy today You're providing a protection against a change in the environment where things that you thought were okay are no longer and Here's a sort of one Former board member of my organization wants for this protection against the robots from the future But we'll be able to look back data mine all the information from your past activities see what you are up to and Judge it by then the future standards, but if you have that information privacy protected you yourself are protected Also as I was mentioning before privacy is fundamental to lots of other rights and We're looking in this case Financial transactions in particular they can reveal deeply personal things Like we said, this is the this is the mirror image of the expression issue we hit before so Financial censorship was preventing organizational organizations from receiving the funds to have your membership But also your transaction reveals something about you it affects your private information by giving money to that organization just As the the supporting an organization or a media producer by by purchasing their product helps them It also reveals something about you about your interests your your ideas that you are consuming Your medical expenses can reveal a lot about your conditions that you might want to keep private and we also live in an era where some medical information can be Disfavored some medical treatments are politically or socially disfavored and The information that you're using your financial means to purchase these services can be used against you and use in a prosecution Shopping history shows a lot of what your interests are and often is used to make inferences about these interests What you're going to do what what intent do you have? Now anonymity can provide a lot of protection We were able to do things in an anonymous manner. It protects against the tyranny of the majority that allows for Views which are not a majority view not a popular view But you can have them and have protection from retribution for having these views by having anonymity or pseudonymity Allowing you to operate in the space without having to reveal Kitterell information about your identity So this comes a little bit of a challenge and one of the things I want to focus on here is when you have a public ledger and the public ledger is a list of a lot of transactions and Yeah, they're going to to a wallet and if you never Connect that wallet in any public way with your identity that might be a form of protection But not everybody is able to do that Most people will be using a service or at some point will use a service that ties their identity To their wallet and if you ever do your whole history of transactions becomes revealed This is a a challenge and then with that revelation all your shopping history your interests and such also become revealed and This is a it's a challenging thing to have a situation in which you might be able to use anonymity But if you make a mistake You could have a whole history revealed, you know more sophisticated people can do things like have multiple wallets use them for very purpose, but you still need to have a high level of sophistication and accuracy to do it well, so One solution to this which has come up a lot at least so I want to hit on it exactly Mixers and in particular tornado cash The tornado I'm sure many of you are familiar so I'll just go over very briefly what had happened back in August the Office of Financial Assets Control OFAC a part of the Department of Treasury they placed tornado cash on the especially designated nationals list and They they put a number of wallet addresses and so on but they also put you know tornado cash by name on there And they had a parenthetical a k a turn over cash classic a k a turn over cash Nova And this was on the list and this struck everybody is kind of weird because this is a you know piece of software It is a smart contract on the blockchain. There's also a DAO associated with it There is the you know the open-source project But what do they really mean by tornado cash because this list is usually for entities It can also be about property if you look at the list You'll see some like oligarch boats that are on there But on the whole it is designed and and built up to be about entities particular people and They're listing tornado cash Without any further definition was it was vague perhaps deliberately vague So this led to some consequences one of the most immediate consequences was that github which had hosted the canonical tornado cash repository took it down they also took down the accounts of three of the primary developers and this really hit home for EFF because Code being speech is one of the core Things that we've been fighting for we're fighting for this since the since the 90s coming up in the encryption wars And this was code being taken down for Well putting on a sanction list not even with a law about it, but just placed on this list Perhaps even mistakenly perhaps they didn't mean the code itself though if you'll notice in the way they defined it they aka's are Not easily confused like a tornado cash Nova was a beta that they had issued It's not easily confused with an entity now I tend to think that it's more likely that this was they had no idea what they were doing more than you know malice or at least Malice in the sense that they they intended to take it down But they still had no idea what they're doing secretary of state Blinken tweeted out right after the OFAC listing saying that they had gone after the the North Koreans and and taken them down Reflecting a very strong misunderstanding of what tornado cash was that tweet was deleted Very shortly thereafter, but it might be a clue into some of the confusion that they had but nevertheless It was on the list. So one of the things that we did was to We represent professor Matt Green. He's a cryptography professor at Johns Hopkins has been involved in Zcash and zero knowledge proofs and he also teaches about the blockchain and he wanted to use tornado cash as part of his teaching But he also wanted to put it back up there in part to show that you can put it up there You do have a right to it. So we agreed to represent him in this. He made a fork. He put it up back up And OFAC well didn't do anything about this and this helped show people that The code could still be published and that I believe That both github had the right to do it and Professor Green had the right to do it github as a private entity as a private entity can choose What is on its platform? But they had the right to keep it up and They had the right to keep up professor greens copy, which they have been doing But there still are a number of unanswered questions so Why why do we care about this? Well, I'm sure you all care about this, but I think it's good to Say what are the principles behind the code to speech issue? So Cryptocurrencies blockchain technologies, they're expressed in code and You will say this part of a community community has values you are expressing those values in the code that you write And code has both function and expression But function is a part of his expression when you're making something which is a privacy enhancing technology You're expressing this through the source code saying how it works. That's a very clear expression but also Having it be functional is part of what you're trying to express and part of that speech Recognizing code of speech as I was mentioning we've been fighting this since the the 1990s it came up in the encryption context in the first instance and in the Export control context was very similar to the sanction context. It was a program called snuffle open source encryption program During that time there were expert controls because encryption was being treated like a munition It was something that was a military technology It was a dual use technology But as a dual use technology you had to get permission to export it and there was a silly time period where Netscape Navigator the prominent web browser of that day had an international version and a domestic version and the domestic version had Much stronger encryption than the international version with the idea that now the NSA can more easily break the communications of the international version and That you know make their job easier It was ridiculous because it was trivial for someone to get a copy of the domestic version outside of the United States It wasn't very effective, but also it was interfering with the free expression of The cypher punks who wanted to have a world which had lots of cryptography in it and expressed that by making freely available code So we had support the first case Bernstein versus the United States Recognize the code was a kind of language They likened it to German French like, you know human languages But also music as a form of a language music has been done in notation as much for closer Mathematically to code and it is a way of expressing such and established that the source code that was put up by Dan Bernstein was speech Later there was a case younger versus daily that had another point which I think is very critical Recognizing that the fact that it course for it is not just speech. It's not just a poem but it is a Functionality that can be compiled and do things and that does not preclude the constitutional protection is still speech Now to be clear Disapplicing that something is speech is not the end of the story There then if it is speech in the United States the government has to pass a test if it is content based regulation on it has to go through strict scrutiny and there's intermediate scrutiny and You can look at the functionality as part of that scrutiny when trying to determine is the government doing You know the minimum necessary in order to achieve their function. They don't have collateral damage They are not going beyond their power the higher level of scrutiny The harder it is for the government to pass the test But it still has to have that protection and the government has to show Why this is the thing to do that is necessary to solve their problem and they are not hitting Untended consequences collateral damage along the way now these are United States courts But I wanted to say this is not just a United States principle So a while back we did a white paper on the American Convention on Human Rights Which is an international treaty throughout Latin America? Most countries are our signatories to it also enshrines freedom of expression in it We developed the argument looking at cases looking at president that under the American Convention of Human Rights Code should also be considered speech I think this is should be a universal understanding where you have free expression, which you have protected in many international human rights treaties that We need to make sure that people understand that code is a form of that expression and should likewise Be protected whether you're coding in Latin America in the United States or anywhere around the world which respects human rights So thank you So the OFAC did have a response. They issued some frequently asked questions and answers They did clarify that near publishing of the source code was okay. So that was great professor green was was in the clear They said that there's some dusting that occurred after they did the sanctions And they said that was low priority. They didn't say don't worry about it But that it was a low priority prosecution And they provided people with a way to apply for a license to get their money out of the mixer Though you have to give up the reason you use the mixer their privacy rights You're trying to protect in order to apply for this license. So it's not a really great solution that way They also used this word saying it was okay to interact with the source code But that's pretty vague word in the examples. They were using like teaching a class about it Publishing it studying it Well, those are good examples, right? But or interact was too vague and I would like to have OFAC clarify or maybe we have to have the courts clarify That things like contributing to the code is also Okay, that publishing the code publishing a compiled version is also Okay, now there's other questions that are open. Well Did they have jurisdiction to do this in the first place as we were mentioning? it's super weird to have a piece of source code a piece of software on an entity list and The entity list is a power that is granted through through the statutes as it have they gone beyond that jurisdiction Beyond what they are lawfully allowed to sanction So there have been a couple of legal challenges Coinbase is funding a lawsuit brought by a number of people who are challenging the Treasury Department sanctions They're asking for a tornado cash to be removed from the sanction list This week coin center also filed a lawsuit They're getting together also a bunch of plaintiffs and then in themselves included Again to delist tornado cash and they're Raising a number of these issues some of their focal points are on the jurisdiction of OFAC to put software on this Whether they have exceeded their authority whether they've acted arbitrarily and capriciously Outside of the scope of what their administrative authority is And they also raised some of the code of speech issues in the coinbase lawsuit It was talking about the ability to write the code to develop the code And brought that at issue in one of their claims and the coin center They're talking about receiving money anonymously as a nonprofit organization or member organization the ability to allow people To fund them in an anonymous and private manner the right of association, which is also under the First Amendment in the United States So these cases will be will be moving forward and You know, we may file on Mika's brief to help support them I think you should continue to follow them But now while we're finding let's take a moment to think about why this all matters Why do we care and a lot of it is about open source? there's a lot of open source as part of what this community builds and It is vital to be able to have lots of contributors adding the code be able to research develop the code make Poll request modify it find security holds fix them But if the contributors are going to be held responsible if later that software is used for something bad They shouldn't be held responsible merely because they contributed cold that would have a chilling effect on the development of software that is vital to our future and Not only is this chilling effect going to be you know bad for innovation But even the very information that you know the people who want to prevent money from going to North Korea and ransomware might like to see the innovation that might be able to improve upon the code so it can be providing the privacy that we need and Allowing for a way of stopping money from going to ransomware Privacy as we said it is a fundamental right and take a moment to think not just about Tornado cash mixers as a privacy protective tool But all the other ones that are out there that could be used to protect the privacy of someone who's hiding from the law But nevertheless are important for a free society Encrypted messaging encrypted communications being able to encrypt your information when you store it our line anonymous browsing anonymous servers File transfers all of these things Rely on being able to you know protect your rights by providing encryption anonymity technical protections and They are vital for our society even if they could be misused So we want to avoid that chilling effect and I say that I think that this is your rights to have and That the chilling effect should not dissuade you from writing the code But we want to establish that so hopefully in the courts or by OFAC Relenting but getting this clarified so we all know that we can go ahead and keep contributing to this code And so to wrap up I'm out of time here, but hopefully some time for some questions So saying together we can make a brighter future You can help chart this course you can do it through getting informed and getting involved talking to your Representatives getting involved in policy discussion trying to get your views known and acted upon and you can do it by building tools by building Civil liberties privacy into those tools making things safe making them usable making them so that they have Privacy built in from day one make sure they're they're decentralized There's not a single point of failure that the government can go after it can go to try and stop things and Together we can make that brighter future. Thank you Awesome incredible. We do have time. We do have time for some questions. So we have a couple of runners in the audience Who has questions in a couple minutes? I see one back there one hand up one hand up for a yeah for a yeah Okay, hi there. Um, hey, I Definitely agree with all that you've said except like then how does a criminal get caught if they're using like the internet for nefarious purposes like There's been some recent cases like there's this documentary I saw a Netflix of like a sex cult that was in South Korea and they only caught them because they were able to find the chat rooms the secret chat rooms in telegram That the cult leaders were using No, a good question, right? So how how does the police able to do its job when we have all these technological? Protections. Well, I mean my first response to that is we live in a golden age of surveillance the law enforcement authorities have more ability to conduct surveillance at scale surveillance of People like records about where you go your phone Is constantly talking to cell towers giving your location? They can get that information correlated with some other person's phone and see who's traveling together and get an idea of relationships the the ways in which the government has investigative tools at their disposal are legion and We're going into a telegram chat room. Well Traditional investigative measures having someone undercover pretending to be interested in that kind of thing and getting into the chat room That is the most often way in which they get inside encrypted chats Opsec is hard and traditional investigative techniques continue to work and What privacy-enhancing tools most protect you against is? Suspicionless surveillance where they want to do it at scale where they don't have a particular reason to go after you If they do have a particular reason to go after you there's other methods like trying to get a Network intrusion tool or a knit onto your phone and just look at the endpoint So it gets decrypted by your phone when you get that down there and they look at it At that point and it's like the NSA or the Mossad or the GRU is interested in you in particular Then probably a lot of these privacy enhancing tools You're gonna have to up your upset game a lot and the tools alone won't do it So what I'm trying to protect against is Suspicionless mass surveillance the government has to have a reason and want to spend the resources to go after it And not doing it on millions of ordinary people Okay, hi It's me. It's Alex here. So first thanks for your work, and I definitely agree with everything you said Thank you I was just wondering about Something you didn't say right? I missed seeing a name being talked on the tornado cash And that's of course, it's Alex Burtsev case and I wonder What any purpose are you are you did you do you want to say something about the case or about him about like so Yeah, you're talking about the case in the Netherlands Yes, so one of the challenging things about the case in the Netherlands is that he was arrested, but not yet charged So he's been held and he went to a hearing and asked like hey, am I free to go and they said no But he still hasn't been charged and I'd like to see what the charges are that they're trying to bring Before analyzing that situation because what I don't want to see is that he's been charged merely for Contributing to the code, but I also don't want to speculate as to what they might have against him that You know it is the government's job to say why someone is in jail Why someone has been charged and bring it and then we can look at what they say and say why that's wrong Why you know what the defenses are so I try not to speculate on things that are not charged But that is not to say I'm not sympathetic for a situation. I'm not a Netherlands lawyer So I don't know the Netherlands law Particularly well, but I think as a policy matter. It is unconscionable to arrest somebody criminally One and not charge them and let them know what the charges they can build a defense But also to create this chilling effect implication that because he contributed to some code That that's why he was charged and I wish they wouldn't have done that Okay today most all right we have time for one more question one more question. Yeah, great. I'm on hi Kurt I had the pleasure of seeing you at the Z cash convention in Las Vegas a few months ago And now you're here, so you're really making the rounds. I'm excited about that My question is with all of the ZK technology the privacy protecting technology and Z cash aetherium the competitions that are happening What's your general thoughts on that and also is there anything that's missing from a lot of them? Maybe philosophy or values perspective when they're building this So I think a good good questions one is that like I think zero knowledge technologies are Extraordinarily interesting and the way of being able to prove just one thing without sending extraneous data I think I've heard like while being here talk to various people and Ideas that are underway or being researched that if they come to fruition We'll be able to allow for a number of things that don't have this leakage of metadata around them that we often see So I'm very excited about the possibilities of these technologies the other part is what more could be done and I think one of the things that is going to make all of these kinds of Technologies is on the blockchain generally smart contracts, especially privacy enhancing ones to have the most value They must be able to be used by a wide range of people people who are not technically sophisticated who might not have the latest versions of software who are operating on a Five-year-old smart phone that doesn't get updated all the time and still they can make a secure Transaction because they can do something in a manner that they feel comfortable Knowing what they're doing that they're not going to make mistake and you know lose what they're trying to do So usability security keep it secret keep it safe and I think I would be I Mean people are all working on that but that's the area I want to be able to have it so that everyone can take advantage of it in an easy to understand in Easy-to-use correctly way All right. Thank you everybody Awesome amazing. Let's give a big round of applause for Kirk from the electronic frontier