🎈 当你学会独自一个人慢慢消化悲伤/负面情绪时，那就证明你真的长大了。

Emotional and psychological dependency makes the heart vulnerable. Find someone who genuinely cares about you, understands you best, serves as your rock and safe space, ready to commit, makes you feel accepted, and supports you through your breakdowns. If not, live your life and be happy.

美國AI國安報告的3個思考

林育中
2021-03-18

美國加速AI發展與布局，其實只是中美競局的一隅。李建樑攝
美國AI國家安全委員會(National Security Committee on AI)月初通過、發表了其工作了2年多的最終報告，這份長達756頁的報告分為2個部分：一是在AI世代防禦美國、一是在科技競爭中勝出。這委員會成員名攤開來就是美國AI公司的「who is who」，包括委員會主席Alphabet前執行長Eric Schmidt、主要撰稿的甲骨文(Oracle)執行長Safra Catz、AWS執行長Andrew Jassy人等。

文中開宗明義地說這是美國自二戰以來最脆弱的時刻。美國過去的優勢一向靠科技的領先，現在改變了，但是這報吿沒有延伸至背後的主要競爭脈絡。參照過去的美蘇之爭與現在的中美之爭，最大的對照是冷戰時期美國是以名目上的科技競賽、實質上是在經濟上把蘇聯拖垮的。蘇聯在許多科技競爭上並不遜色，像史普尼克號(Sputnik)衛星的發射就對當時的美國投下震撼彈。即使到冷戰末期，蘇聯在科技上的競爭也不是全然的落後。以現在正快速興起的量子電腦為例，講量子計算概念的興起，公平的引文除了大家熟知的費因曼外，還應該有曼寧(Yuri Manin)，他是蘇聯的數學與物理學家。

中美科技競爭本質上更像是科技產業的競爭，技術只有在產業化之後才能轉化為實質的國力積累，而中國的人力資源與市場對美國的確足以構成威脅，也因此這次科技競爭最早從先進製造(advanced manufacturing)打到5G，再到目前採取廣泛、正式行動的AI。未來會以此形式採取行動的科技領域還有微電子、量子計算、5G、生物科技、3D列印、儲能技術等，這也與中國大陸近期發布的十四五中八項發展科技目標人工智慧、微電子、量子信息、生物技術、腦科學、航太科技、深海深地科技有一半以上是對撞的，這些都有產業化的後續發展潛力。

一個自然的問題是中美科技競爭干卿何事？這份報吿中台灣被提到24次，大部分與半導體有關。文中216頁講到「The dependency of the United States on semiconductor imports, particularly from Taiwan, creates a strategic vulnerability for both its economy and military to adverse foreign government action, natural disaster, and other events that can disrupt the supply chains for electronics.」文字仔細推敲起來令人驚悚。美國對台灣的需索主要有三：一是晶圓廠到美國設廠；二是對美國科技產業的投資；三是技術研發的聯盟。如果台灣終將被捲入此次競爭，第三項我樂見其成。台灣的半導體必會被邀約，這個也許可以換取其他領域的門票，譬如量子信息或生物科技共同研發的門票。

幾個意見。一是報吿對於採取行動的進程是迫在眉睫，2025年前美國要建立整合AI的基礎，而且情報部門及國防部也要完成對駭客、假消息以及使用AI於戰爭的凖備。所以這是一個clear and present danger。美國對台灣的部分需索—在美國境內建立晶圓廠—也早就在報告完成之前就提出了，其他的部分如何因應要早為之計。

二是產業布局可能要重新思考。對於「矽屏障」的主張是因為太重要了以致於相互制衡所產生防衛效果，這只是假設。但是另一種場景也許也應該想想。看一看二戰片中美德雙方對於戰略資源石油庫即將失去控制權的一方，會採取什麼標凖戰術行動？

最後看一看美國科技產業政策如何制定？不是諮詢，也不是開個論壇盍各言爾志的交代過去，而是讓產業的人直接來制定、執筆政策。這個做法直接決定了科技產業政策的良策。

資料來源：https://www.digitimes.com.tw/col/article.asp?id=1286&fbclid=IwAR2XSIQgdDYb-Ed2TUiFAkZHPKNabmeNxgVCEXSeogyzniwGkbUpMJ4yagE

Ref: https://security.googleblog.com/2021/06/introducing-slsa-end-to-end-framework.html

今天要探討的是一個由 Google Blog 於上個月所推廣的軟體安全性框架，該框架名為 SLSA，全名則是 Supply Chain Levels for Software Artifacts，中文部分我不知道該怎麼翻譯才可以精準達到意思，所以建議就唸英文就好了。

該框架的目的是希望於整個軟體生產鏈中能夠進一步的去提升且確保所有產物的完整性(Integrity 這個詞該怎麼翻呢..)。

文章中用了一個很簡易的流程來清楚的解釋到底何謂 Software Supply Chain 以及整個流程中可能會有什麼問題。

Software Supply Chain 一個範例譬如
1. 開發者撰寫程式碼，並且提交到遠方的 SCM Repository
2. SCM Repo 因為程式碼改變，所以觸發相關的 CI/CD 流程
3. CI/CD 建置結束後則需要打包整個程式碼，產生最後的 Package.
4. 產生後的 Packet 則可以正式上場使用

文章認為上述的流程中有兩個不同類別的安全性問題，分別是
1. Source Integrity
2. Build Integrity.

Source Integrity 這邊主要是針對 Source Code 相關的問題，譬如
1. 開發者是否有意的故意塞入一些會不懷好意的程式碼到 SCM Repo 內。
範例: Linux Hypocrite commits, 之前美國某大學研究團隊基於研究嘗試上傳一些不太好的程式碼而影響的討論風波
2. SCM 的管理平台是否可能被惡意攻擊
範例: PHP 事件: 之前自架的 PHP Git Server 被攻擊者惡意攻擊並且塞入兩筆不懷好意的 Commit

而 Build Integrity 本身則是有更多不同的面向，譬如
1. SCM 觸發 CI/CD 過程是否有可能有問題
範例: Webmin 事件，攻擊者去修改團隊的建置系統去使用沒有被 SCM 所記錄的修改檔案。
2. CI/CD 建置系統本身被攻擊
範例: SolarWinds 事件，攻擊者攻破建置系統去安裝一些軟體來修改整的建置流程
3. CI/CD 建置過程中引用到錯誤的 Dependency
4. 攻擊者上傳一些惡意產物到應該只有 CI/CD 系統才可以存取的場所。
... 等

目前來說， SLSA 還處於非常早期階段，經由業界的共識來思考每個領域有什麼好的措施與指引來避免與偵測系統是否被攻破。其最終目標狀態是希望能夠根據環境自動產生出一套可整合到系統中的產物，並且最後可以給出 SLSA 憑證來給平台或是建置後的 Package。

對 SLSA 這個專案有興趣看看的請參考原始連結，內容不長但是頗有趣的

✨本集來賓：Sean 是我在 Instagram 紐約的同事

- 我們雖然在 IG 不同 Team 在一些project合作過的經驗 | Projects we collaborated on at IG on different teams
- 在Facebook可怕的升遷制度學到的經驗 | Lessons learned from Facebook's tough promotion
- 如何在大公司內離開舒適圈 | Leaving your comfort zone at a big company
- 哪一本書讓Sean學到如何對自己的快樂負責走出低潮療癒自我 | The book that helped Sean take responsibility of happiness & self healing
- 忙碌的幻覺 | The mirage of busyness
- 一個健康的感情該有的依賴獨立觀念 | What a healthy relationship looks like in terms of dependency
- 還有Sean 做很多有趣的自我實驗 | Interesting social experiments Sean did

📚 Books mentioned:
- The Happiness Project
- Essentialism
- Extreme Ownership
- 7 Habits of Highly Effective People
- Working Out Loud

我們每集都會辦抽書活動，記得 follow 我們 🤩
IG: https://www.instagram.com/leftsideescalator.jacky/
FB: https://www.facebook.com/LeftSideEscalator.Jacky/

***

(00:02:20) 紐約疫情爆發的恐怖經驗 | Covid19 disaster in New York
(00:04:55) 台灣長大，美國念書的文化衝擊，如何融入 | Growing up in Taiwan, moving to the US, culture shock and assimilating
(00:07:27) 回來當兵？！| Military Service?
(00:07:40) 進Facebook的經驗，Instagram的工作經驗 | Experience joining Facebook and working at Instagram
(00:12:47) 如何在大公司跳出舒適圈，挑戰新領域 | Leaving your comfort zone at a big company, trying a new area
(00:17:25) Instagram工作的有趣經歷 | Interesting working experience at Instagram
(00:20:02) 職涯的意義 | Sean's career meaning
(00:23:48) 大家不喜歡「改變」這件事 | People resist change
(00:27:35) Kobe的啟發跟過世 | Kobe's inspiration & legacy
(00:32:22) 5am 早起運動，借助團體的力量達成更好的自律 | 5 am workouts, the power of communities
(00:34:12) 時間管理的好習慣 | Time management habits
(00:37:15) 最有影響的書幫他走出低潮療癒自我 | Most influential book to get through dark time & self heal
(00:39:41) 健康感情如何不失去自我 | How to not lose yourself in a healthy relationship
(00:44:26) 從 Facebook 升遷的壓力學到的慘痛經驗，解決問題代替責怪 | Lesson learned from Facebook's tough promotion pressure, ownership over blame game
(00:49:56) 如何改進 反省自己 | How to self reflect & improve
(00:52:40) 成功的定義 | Definition of success
(00:54:39) 快樂的定義 | Definition of happiness
(00:55:56) 如何改變世界 | How to change the world
(00:57:43) 一年吃素挑戰 | Vegetarian challenge for a year
(1:03:01) 總結 | Conclusion

只是想跟大家分享一下偶們的作業哈哈哈
還有這個議題也很直得大家去關注～大家有興趣可以多多去了解一下Article13～
然後沒錯 這支影片包含裡面的新聞 全部是我剪的?
The current decade will be known as a decade of digital dependency. The proportion of people accessing the internet has increased from 20% almost a decade ago, to 72% in 2018. (Ofcom, 2018). With the existence of network publics, online expressions are automatically recorded and archived, Content made out of bits can be duplicated and can be accessed through various ways (Boyd, 2010). Websites like YouTube, Facebook and twitter have changed the online marketing trend with the help of content creators, brand influencers etc. who enjoy the freedom of expression on the internet across the world, but big changes are coming to online copyright across the European Union. Article 13 of the European Union directive on the digital single market requires the likes of Youtube, Facebook and Twitter to take more responsibility for copyrighted material being shared on the platforms (Reynolds,2013). Therefore, this video intends to provide awareness to a mass segment of internet users and content creators on the internet about the Political issue of Article 13 and recommend the viewers to raise their opinion against it but we realized that a number of millennials are not aware about the issue of Article 13 and the main reason for the unawareness is ignorance. People tend to ignore the obvious things according to the psychology of willful blindness. So, in this case, people ignore the news of article 13 which they could and should have known but don’t know because it made them feel better to not know it ( Popova, 2018) Our aim is to show to the audience what the cost of inaction can result in. Upon an informal survey conducted in regards to Article 13 , we discovered, Everyone has heard about it, but no one knows about it

Viewers of the video are recommended to raise their opinion by signing an online petition by visiting the website https://savetheinternet.info/. The reason behind choosing this website among several other online petitions was the number of supporters. This online petition has over 5 million supporters who have signed to show the politicians their disapproval towards the reform. History suggests that online petitions have been successful in bringing change with number of instances.

The viral progression of the video has been supported by a number of strategies. Viral Videos tend to be exceptional.` The media chosen to inspire the audience to propagate this video are Facebook, Instagram, YouTube and Twitter. The major target audience will be millennials and people who belong to Generation Z. In order to attract and connect with the target audience, elements such as websites, news channels, and content from internet content creators such as 9Gag, PewDiePie were shown in the video. The target audience has a huge potential to push the video to a larger audience. The viral progression of the video is heavily dependent on Word-of-Mouth marketing which is the intentional influencing of consumer communications by professional marketing techniques (Kozinets, 2010). We aim the share the video with the hashtag #SaveYourInternet as we believe that hashtags can serve a motivational role for viewers to consume and distribute the content as per spreadability theory from the SPIN framework. ( Mills,2012 ) The video also highlights the behavior of the protagonist, who ignores such political news that has so much relevance in his actual life. We believe that the target audience will be able to relate themselves with the video and share it. Apart from that, the relevance of the issue of Article 13 can help the propagability and strengthen the integration among the viewers to become aware and act against it.

PS4のFALLOUT 4（フォールアウト4）プレイ動画です、Part 85 Dependency（Side Quest）。

サイドクエスト：
・Dependency（完了）
受注場所 - Vault 81。Hole in the Wall完了後、ティナから受注
難易度 - Normal

FALLOUT 4 プレイ動画 Playlist：
⇒https://www.youtube.com/playlist?list=PL4fd59i0eA3UMnLPoMQ3BDN8ZETBjRy9n

======================

- ゲームタイトル： FALLOUT 4（日本語版）
- 発売日： 2015年12月17日 (日本)
- 価格： 7,980円＋税
- ジャンル： オープンワールドアクションRPG
- CERO： Z
- 開発： ベセスダ・ソフトワークス / ゼニマックス・アジア(日本)
- 発売： ベセスダ・ゲーム・スタジオ

=======================

BETHESDA GAMES COPYRIGHT & VIDEO POLICY:
⇒http://www.bethblog.com/bethesda-video-policy/

=======================

"Copyright Disclaimer Under Section 107 of the Copyright Act 1976,
allowance is made for "fair use" for purposes such as criticism,
comment, news reporting, teaching, scholarship, and research.
Fair use is a use permitted by copyright statute that might otherwise
be infringing. Non-profit, educational or personal use tips the balance
in favor of fair use."

=======================