text:
Trigger-Action Platforms
Yu-Hsi Chiang1, Hsu-Chun Hsiao1[0000−0001−9592−6911], Chia-Mu Yu2[0000−0002−1677−2131], and Tiffany Hyun-Jin Kim3
1 National Taiwan University, Taipei, Taiwan
2 National Chiao Tung University, Hsinchu, Taiwan
3 HRL Laboratories LLC, CA, USA
Abstract. Trigger-action platforms empower users to interconnect var- ious physical devices and online services with custom automation. While providing convenience, their centralized design raises privacy concerns for end users. Unlike prior work that consider privacy leakage to action services, we consider privacy leakage to compromised platforms. After investigating potential privacy exposure to a popular trigger-action plat- form, IFTTT, we identified three types of leakages: event data, trigger event presence, and device possession. We also found that 91% of the top 500 triggers on IFTTT potentially leak sensitive information to the platform, and 25% leak implicitly. To achieve the paradoxical goal of hiding the event data and presence while asking the platform to trig- ger corresponding actions when an event occurs, we propose Obfuscated Trigger-Action Platform (OTAP) and Anonymous Trigger-Action Plat- form (ATAP). ATAP additionally provides device set confidentiality at the cost of minor platform modification. Our schemes can preserve user privacy without sacrificing convenience, and are incrementally deploy- able in various use cases. Our work addresses a crucial missing piece in securing the trigger-action ecosystem, and can be integrated with solu- tions that ensure integrity against untrusted platforms or solutions that address untrusted vendor services and users.
1 Introduction
Fueled by the growing demand for home automation, trigger-action platforms (e.g., IFTTT [7], Zapier [11], and Microsoft Power Automate [1]) are gaining popularity among smart home users. Such cloud-based platforms empower users to connect heterogeneous devices from different vendors and write automation rules, which often take the form of "If a certain trigger occurs, then do a certain action."4 In addition to home devices, these platforms are also integrated with many online services such as Google, Amazon, and Instagram. Due to their ease of use and the variety of supported services, these platforms have attracted millions of users running billions of rules per month [8].
The convenience comes at the cost of privacy. Because trigger-action plat- forms are authorized to collect and manipulate data from various services, some of which may contain sensitive information including users' location, purchase history, private social media posts or photos, privacy concerns are raised if the
4 For example, "If I am approaching home, turn on the air conditioner."
platforms are untrusted or hacked. Moreover, cloud-based centralized architec- ture makes these platforms an attractive target for attackers, as demonstrated by recent incidents targeting the cloud services of famous companies, includ- ing Equifax [9], Yahoo [3, 4] and Target [2]. Therefore, unlike prior work [28, 13, 14, 23] which focused on the privacy leakage to action services or rule au- thors through improperly configured rules, we consider the case of compromised platforms. We also note that a compromised trigger-action platform is more dan- gerous than any single compromised vendor (e.g., Samsung, Google, etc.) due to the amount of aggregated information.
To better understand the privacy risks of a compromised trigger-action plat- form, we first conduct a case study on one popular trigger-action platform, IFTTT. Instead of categorizing triggers by the functionality of their associated services [13], we categorize by the types of information they may leak, and iden- tified three types of leakage: event data, trigger event presence, or device pos- session. Among the most popular 500 triggers, we found that 91% potentially send sensitive data to IFTTT, and 25% may leak sensitive information implicitly by the presence of their triggers. For example, a hearing-aid device leaks health conditions, and a surfing sports application leaks a user's personal interest. Cat- egorizing potentially-leaking information types revealed that IFTTT can build a profile of a user who installs a sufficient number of rules.
To enhance the privacy of the trigger-action ecosystem in a practical manner, we investigate the problem of preventing an untrusted platform from learning users' private information (via either received data, trigger event presence, or device possession), while simultaneously keeping the benefits of a cloud-based solution. The goal seems paradoxical, as we would like to maintain both of the trigger data and trigger event presence secrecy, while asking the platform to trigger corresponding actions when an event occurs. Existing solutions based on encryption or fine-grained access control such as DTAP [20] fail to achieve this goal, as they can only hide the data but not the presence of triggers, and simply limiting access to sensitive information could affect the platforms func- tionality. In this work, we demonstrate that it is possible to build such schemes using obfuscation and anonymization techniques, and propose (1) Obfuscated Trigger-Action Platform (OTAP) and (2) Anonymous Trigger-Action Platform (ATAP). In short, OTAP hides real triggers by also sending fake triggers to confuse the platform, and ATAP preserves users' privacy by breaking the links between a user and his/her data. According to our empirical evaluation using realistic configurations, our schemes can balance the trade-offs between secu- rity and utility under different assumptions and requirements. For example, our schemes add at most 25 ms to rule execution time and can achieve the same throughput as existing solutions with at most 8x computation resources.
To summarize, this work makes the following contributions:
– We conducted an empirical study on potential privacy exposures to trigger- action platforms. We categorized the types of leaked information and the ways they are leaked.
– We designed and implemented two privacy-preserving trigger-action plat- form solutions, OTAP and ATAP, based on trigger obfuscation and anonymiza-
tion. OTAP hides information about data and trigger event presence. ATAP additionally hides information about device/account possession.
– Through security analysis and empirical experiments, we show that our pro- posed schemes can be deployed in various practical scenarios.
2 Problem Definition
Our core goals are to (1) identify the privacy risks of trigger-action platforms and information leakage types, and (2) alleviate the exposed privacy risks in a prac- tical manner. We provide formal privacy framework and proofs in Appendix A.
2.1 Threat Model
We consider an untrusted trigger-action platform that can be compromised and violate end-users' confidentiality. An adversary can collect users' information through the following three sources:
Data & parameter: The raw data of trigger and action parameters and trigger event data.
Trigger event presence: The occurrence of trigger events. For example, the occurrence of trigger-event "leave home" allows an attacker to infer if the user is at home.5
Device/account possession: Status of users' ownership of devices or online accounts. For example, if one connects a hearing aid (e.g., Oticon [6]), an attacker may infer that the user has hearing issues.
We do not consider action presence in our threat model since no information is sent back from the action service to the platform when an action is fired. Thus, there is no way for the platform to verify whether an action is indeed executed.
We also assume that the platform will not collude with partner services and there are secured channels (e.g., HTTPS) between different parties.
Since we only focus on confidentiality in this work, the following attacks are considered out of our scope.
– Breaking action integrity, including replaying old triggers or triggering unau- thorized actions, which can be mitigated with existing solution [20].
– Denial-of-service, which has low incentives from platforms' perspectives as DoS attacks will drive users away and hurt the platform's reputations.
– Leaking sensitive information to partner services.
2.2 Desired Properties
In respect to Section 2.1, we define the following three types of confidentiality that a privacy-preserving trigger-action platform should preserve.
5 Turn off WiFi on your Android when you leave home to save power [10].
Table 1: Example of a Trigger-Action Rule
Rule If saying a specific phrase to Google Home, then set the Hue light brightness
Trigger Say a phrase with a number Trigger Params phrase: set hue brightness to # Action Set brightness
Action Params brightness: number spoken Event Data number spoken: 50
triggered at: 2020/01/01 12:00
Rule Trigger-Action Platform
Trigger Service Action Service
Fig. 1: Example of a Trigger- Action Ecosystem
Data & Parameters Confidentiality. The platform should not learn the trig- ger and action parameters and the event data.
Trigger Event Presence Confidentiality. The trigger-action platform should not be capable of infering when or whether a trigger event occurs.
Device Set Confidentiality. The trigger-action platform should not learn what devices or service accounts a user possesses.
For practicality, the following should also be taken into account.
Minimal Information Exposure. Every entity in the system should not learn additional information compared to what it knows from the original scheme (i.e., IFTTT). Otherwise, a solution simply delegates the job of the platform (i.e., rule storage and execution) to partner services, which does not protect users' privacy. In the existing IFTTT ecosystem, the trigger and action ser- vices know the trigger and action-related information, respectively, while the platform knows both of the information and the rules. Though the attacker we considered in this work is the platform, we would also want to ensure that the proposed solutions do not leak additional information to either of the trigger or action service so that the privacy risks are not shifted or raised.
Performance. The system should be able to handle thousands of concurrent triggers per second, the rule execution should be fast enough, and the delay between the trigger and action being done should be reasonable (e.g., 15 min of maximum delay in IFTTT as of 2020).
3 Case Study: Privacy-Risks of IFTTT
To understand the security risks of a compromised trigger-action platform, we inspect the trigger specifications of 500 most popular triggers on IFTTT, and investigate the types of information that IFTTT can learn and the sources of leakage. Datasets are available [12].
3.1 Background: IFTTT & Trigger-Action Platforms
A trigger-action platform is a cloud service that allows end-users to connect different IoT devices and online services based on conditional rules. The rules are in the form of "IF a certain trigger happens, THEN do a certain action,"
such as "IF saying a specific phrase to Google Home, THEN set the Hue light brightness," or "IF someone posts a new photo on Instagram, THEN upload it to my Google Drive." As shown in Table 1, triggers and actions are provided by certain third-party partner services such as Phillips Hue, Instagram, or Google, and they are customized by the trigger and action parameters, respectively.
A rule will be triggered when there is an event that satisfies the condition described by its trigger and trigger parameters. Event data represents the data associated with the event, and the event data can be used as part of action parameters. Some platforms also allow users to write a piece of code (called filter code), which filters and transforms the event data.
Figure 1 illustrates a typical ecosystem of trigger-action platforms [27]: upon executing a rule, the trigger-action platform receives the data from the trigger service, transforms them into the parameters of the action, and calls the API of the action service. The platform usually does not connect to devices directly, but through cloud services provided by their vendors for ease of management.
Partner services communicate to their devices using proprietary protocols, and use the platform's web-based protocols to fire triggers or receive action requests.
3.2 Methodology
Dataset. We obtained the list of event-data fields (known as ingredients in IFTTT) of each trigger using IFTTT's undocumented GraphQL API [12]. We queried in March 2019, and retrieved all of the 524 services and 2,396 triggers.
We identified the 500 most popular triggers based on a popularity rank derived from a public dataset collected in May 2017 [27]. Their dataset includes about 280,000 rules of IFTTT, and contains the number of installed users for each rule. We assessed the popularity of each trigger by summing up the number of installed users having that trigger.
Approach. We assigned several labels to each trigger to indicate what types of information may be leaked and how the leakage would occur. To indicate the possibility of containing private information, we assigned a score from 1 to 3:
Scores of 1, 2, or 3 indicate that the data does not contain, possibly contains, or absolutely contains private information, respectively. For example, a "photo uploaded" trigger may leak private information depending on the content of the photo and hence we assigned the score of 2; an "arrive at" trigger definitely leaks a user's location and hence we assigned 3.
3.3 Results
Types of leaked information. As shown in Table 2, we identified 12 categories of leaked information, and labeled triggers for each category. Note that a trigger may be assigned to more than one category. This list captures the most common types, but is not exhaustive.
Among these triggers, 91% leak at least one type of private information (i.e., not labeled as public). As shown in Figure 2, lifestyle/activities category is a
Table 2: Categories of Leaked Information
Basic Information name, age, email address, phone number, physical address, occupation, etc.
Location current location, location history
Finance bank account balance, transaction logs, purchase history, etc.
Health Status weight, BMI, blood pressure, heart rate, etc.
Social contacts, membership status of organizations, etc.
Communication call records, SMS, voicemail, email, social media posts, etc.
Lifestyle / Activities data or logs that show user's activities. e.g., the time the user wakes up, turns on the TV or goes to work, etc.
Activities Summary the summary of user's activities. e.g., total working hours, distance of driv- ing, etc.
Interest videos liked or watched, interested news topics, followed stocks, etc.
Physical Sensor temperature of a room, indoor CO2 level, etc.
Others (Personal) information not publicly available and not fit in any of the above categories.
Public publicly available information. e.g., weather forecasts, public posts, etc.
Table 3: Sources of Leakage (n = 500)
sources of leakage # of triggers %
event data 456 91%
trigger event presence 127 25%
device/account possession 2 0.4%
Fig. 2: # of Triggers For Each Category
broad category into which most of the state change events fall, and hence is most likely to be leaked, while health status is least likely.
Sources of leakage. We labeled the sources of leakage of each trigger event based on our definitions in Sec. 2.1. We found that a trigger may leak information through multiple sources, and triggers that leak information by trigger event presence or device/account possession will always leak information by data too.
Table 3 shows the number of triggers subject to each of the three leakage sources. We count the number of triggers assigned a score 2 or 3. We found the most of the information is leaked through event data. Even if event data were to be hidden from IFTTT, 25% of triggers still leak information by their presence.
4 Proposed Solutions
We propose OTAP and ATAP that achieve different sets of security goals as outlined in the previous section. Table 4 provides a preview of comparisons of the different schemes. Besides IFTTT, we also compare our schemes with a Pairwise Connection approach, in which trigger and action services connect to each other directly without communicating with the platform.
Pairwise Connection achieves the security goals, since no information is given to the platform. However, Pairwise Connection breaks minimal information ex- posure, as a trigger service can gain the information of what other device a user
Table 4: Comparison of Schemes. Properties 4-6 are compared against the base- line. The Pairwise Connection approach has no platform, and thus trivially achieves Properties 1-3 and 5 (*).
Property / Scheme IFTTT (baseline) Pairwise Connection OTAP ATAP
1. Data & Parameters Confidentiality No Yes* Yes Yes
2. Trigger Event Presence Confidentiality No Yes* Yes Yes
3. Device Set Confidentiality No Yes* No Yes
4. Minimal Information Exposure - No Yes Yes
5. No Platform Modification Required - Yes* Yes No
6. No Service Modification Required - No No No
7. Ease of Maintenance Easy Hard Easy Easy
owns if it connects to the action service. Also, removing the platform from the system makes the maintenance more difficult. Without a trigger-action plat- form, a service must notify all other services when it changes its API, but with a trigger-action platform, the service only needs to notify the platform.
Core techniques. In both OTAP and ATAP, encryption is employed to provide data & parameters confidentiality. One challenge is that, due to the requirement of minimal information exposure, the trigger and action services should not con- nect to each other directly, thus making key establishment a non-trivial task.
Another challenge is to provide trigger event presence confidentiality. Indeed, it sounds paradoxical to hide triggers from the platform while asking the platform to execute certain rules when a trigger is fired. To that end, we propose two techniques: trigger obfuscation and trigger anonymization.
For trigger obfuscation, we can notify the platform when some trigger occurs, along with fake triggers when there is no actual event. In this way, the platform cannot be sure whether there is a real event happening when receiving triggers.
On the other hand, the idea of trigger anonymization is different. We still allow the trigger-action platform to learn when a trigger occurs, but make it impossible to associate the trigger with a certain user. The advantage of this technique is that, in our system, we already have trigger and action services which can act as proxies or "mixes" naturally, and thus it is unnecessary to add other parties for anonymization.
For the rest of this paper, we assume that user U wants to setup a rule r, the associated trigger and action services are T and A, respectively, and the trigger-action platform is denoted by P .
4.1 Obfuscated Trigger-Action Platform (OTAP)
OTAP is based on trigger obfuscation and is designed to protect both data & pa- rameters confidentiality and trigger event presence confidentiality without plat- form modification. The protocol flow of OTAP is the same as the existing IFTTT flow except that encryption is used to provide data & parameters confidentiality.
In addition, to obfuscate the trigger-action platform, the trigger service period- ically sends out a trigger event, either real or fake, every τ seconds, where τ refers to trigger period and the time points are called trigger points. Note that τ is configurable by the user and will be part of the trigger parameters. A sym- metric encryption is used and the encryption function is denoted by Enc(k, m),
𝐷 = Enc(𝑘𝑟, Trigger Data) Trigger Params, 𝑘𝑟 𝑘𝑈𝑇 Trigger Params, 𝑘𝑟 𝑘𝑈𝑇
Action Params, 𝑘𝑟 𝑘𝑈𝐴
User (𝑼)
Trigger-Action Platform
Trigger Service (𝑻)
Action Service (𝑨) 𝑘𝑈𝑇 𝑘𝑈𝑇 Authentication/Authorization
Authentication/Authorization 𝑘𝑈𝐴
𝑘𝑈𝐴 Gen 𝑘𝑟
𝐷, Action Params, 𝑘𝑟 𝑘𝑈𝐴
Service Setup
Rule Setup
Rule Execution
Fig. 3: OTAP Protocol
(ℛ𝑃(ℰ𝑃𝐴 )), 𝛽𝛾𝐺 Enc(𝑘, Trigger Data, 𝐼𝐷𝑎) User
Trigger-Action Platform
Trigger Service (𝑻)
Action Service (𝑨) Action Params 𝐼𝐷𝑎
Rule Setup
Rule Execution
[Trigger Params, 𝐼𝐷𝑎], ℰ𝑃(𝐴), [𝛾𝑄𝑎, 𝛾𝐺]
Enc(𝑘, Trigger Data, 𝐼𝐷𝑎), 𝛽𝛾𝐺 Gen 𝛽 𝑘 = 𝛽(𝛾𝑄𝑎)
𝑘 = 𝛼(𝛽𝛾𝐺)
Fig. 4: ATAP Protocol
where k is the encryption key and m is the message to be encrypted. We also introduce two types of encryption keys:
– User-Service Keys: For each user U and service S, there is a shared key kU S, which will be used for encrypting trigger and action parameters.
– Rule-Specific Keys: For each rule r, there is a key krshared by the corre- sponding trigger and action services, and is used for encrypting event data.
We now present the phases of the protocol, as shown in Figure 3. From the user's perspectives, note that the key managements and encryption/decryption can be done by installing a local app or a browser plugin to ease the burden.
Phase 1: Service Setup. Besides the authentication and authorization flows in the original scheme, in OTAP, the user's client (e.g., local app or browser plugin) establishes the shared keys kU T and kU A with T and A during this phase.
Phase 2: Rule Setup. Before uploading the rule to the platform, the rule-specific key kr must be obtained. As highlighted earlier, the trigger and action services should not be directly connected. Thus, OTAP relies on the user's client to do this job since the user can connect with both parties. After generating kr, the key will be uploaded by the user client to the platform as part of the rule along with the trigger and action parameters. If there are multiple actions in a single rule, then all of the involved action services will share the same key.
To ensure security and parameter confidentiality, the parameters must be encrypted, Therefore, the actual messages received by the platform will be hTrigger Params, krikU T and hAction Params, krikU A, where
hm, krik = [Enc(k, m), Enc(k, kr), HMAC(k, Enc(k, m)kEnc(k, kr))].
The first two terms are the parameters and krencrypted by the user-service key, and the last term is a Message Authentication Code providing integrity check.
Phase 3: Rule Execution. The trigger service is able to decrypt the trigger pa- rameters and rule-specific key kr using kU T. At each trigger point, T sends to the platform a trigger event, with event data encrypted by kr. The platform
OTAP Triggers
Actual Events
1 2 3 4 5
1 2 3 4 5
1 real trigger fake trigger
(a) Guaranteed Delivery
OTAP Triggers
Actual Events
1 2 3 4 5
1 3 4 5
1 real trigger fake trigger
(b) Latest-Only Delivery Fig. 5: Illustration of Two Delivery Strategies
then forwards the encrypted data, encrypted action parameters, and the key to the action service. Upon receiving these, the action service first decrypts using kU A to obtain the action parameters and kr. Finally, with kr, the action service decrypts event data and perform the action.
Note that the size of the encrypted event data can still leak sensitive infor- mation. However, we observed that the trigger fields of the same type are in fixed size in most cases. For example, the temperature is always an integer with the size of one block after encryption. If such a side-channel attack is a concern, the trigger service can pad the trigger field to its maximum allowed size.
To summarize, in OTAP, the information learned by the trigger and action services is the same as the existing solution. The platform knows the rules (i.e., which trigger and action are related), but not trigger and action data as they are encrypted. Trigger presence is also hidden by having fake triggers. The de- lay, whether deterministic or not, does not expose information about the real triggered events, as real triggers are indistinguishable from fake ones in OTAP.
Obfuscated Trigger and Delivery Strategies. Thus far, we have claimed that a fake event may be sent out at some trigger points. However, we have not discussed how to decide when to send out a fake trigger and how to cancel a false action when a fake trigger is sent. The latter issue can be caused because the platform is unaware of the truthfulness of the trigger and fires an action even if the incoming trigger is fake. To address this issue, we add an additional Boolean field is real to the event data so that the action service can safely discard the message when it is set to be f alse. Since the flag resides in the event data, which is encrypted, the platform is unable to infer its value.
As for the former issue, we propose two main strategies called guaranteed delivery and latest-only delivery to decide which trigger is to be sent at each trigger point, as illustrated in Figure 5. The guaranteed delivery strategy ensures that every real trigger event is sent out. Specifically, the trigger service will queue all the trigger events and send out the oldest unreported event at trigger points.
However, the delay (the time between when an event occurs and is fired) may increase quickly if the trigger period is not short enough.
In contrast, the latest-only delivery strategy keeps only the latest trigger that is not yet fired. Hence, if many trigger events occur between two consecutive trigger points, only the latest one would be sent out. This strategy effectively shortens the delay, but may lead to event loss (e.g., event 2 in Figure 5b).
How to choose the best trigger period and delivering strategy depends on the type of trigger and the rule, and can be adjusted dynamically to adapt the
scenario of use. For example, for the rule "If the motion sensor detects I'm in the room, then turn on the light," one might want to have a short trigger period so that the action can be fired near real-time.
As for the delivery strategies, the guaranteed delivery is probably a better option for rules like "Log the time I enter and leave the office and home," as one would simply like all the events to be logged and might care less about delays. For the rule "If the temperature changes, adjust the thermostat," one may choose the latest-only delivery strategy as only the most recent temperature is the relevant information.
Finally, one may also wonder that if it is possible to use a randomized trigger period instead of a constant τ . Indeed, using a randomized trigger period will not weaken the security as long as the distribution of the trigger period is inde- pendent of actual trigger events. However, as shown in Appendix B, among all trigger period distributions of the same mean value, the constant trigger period will minimize the average delay. Note that the selection of trigger period and strategy will only affect the utility but not security.
To integrate OTAP with the existing IFTTT ecosystem, the user clients (i.e., app or browser plugin) and partner services need to implement the encryption and decryption functionalities, while no platform modification is required. The existing IFTTT basically sends the user-provided parameters to the partner services and forwards the data from the trigger service to the action service. In OTAP, the only difference is that the parameters and data are now encrypted and an additional parameter is added (i.e., the rule-specific key). Since the platform can operate without knowing the actual content of parameters and data, there is no need to change the platform's implementation.
4.2 Anonymous Trigger-Action Platform (ATAP)
ATAP achieves all three security goals at the cost of trigger-action platform modification. The scheme preserves trigger event presence confidentiality based on the idea of anonymization. The trigger service will drop user information before sending out a trigger to the trigger-action platform.
However, with this approach, we can no longer rely on the trigger-action platform to execute the rule. This is because if the platform were to know which rule to execute, it can distinguish between triggers of different users, contra- dicting our goal. Therefore, we have to store the rules on trigger and action services and use the platform only for forwarding, which also achieves our inten- tion to preserve device set confidentiality. Although most of the functionality of the platform are discarded, we achieve minimal information exposure and easier system maintenance by keeping the platform, which the Pairwise Connection approach of removing the platform fails to do so. Also, as the approach is based on anonymization, its security is bounded by the number of users of the system.
Before diving into the protocol, we first introduce some cryptographic-related notations and techniques that will be used. We use a symmetric encryption function denoted by Enc(k, m), where k is the key and m is the plaintext to be encrypted. We use ES(m) to represent the ciphertext of m encrypted by S's
public key under ElGamal. Finally, an elliptic curve G is also used in ATAP with G being its base point.
To preserve data confidentiality, we need to encrypt the event data and a shared key must be established between the trigger and the action services.
OTAP accomplishes this requirement by having the user's client generate the key and distribute it to both services. However, ATAP requires different approach because the triggers are anonymized. Specifically, the action service cannot de- termine which key to use for decryption upon receiving the event data. Public key exchange protocols, such as ECDH, would break minimal information ex- posure, since the trigger and action service can identify their counterparts by matching the public key. Therefore, the public key needs to be randomized. The modified ECDH protocol is described as follows.
Suppose that the ECDH public key of A is QA and the associated private key is α (i.e., QA= αG). The protocol consists of three steps:
1. Client U selects a random scalar γ and sends γQA, γG to trigger service T . 2. T selects another random scalar β and sends βγG to action service A.
3. T and A can both compute the shared key k = β(γQA) = α(βγG).
Figure 4 shows the protocol of ATAP. Note that there is no service setup phase since the user no longer needs to register on the trigger-action platform.
Phase 1: Rule Registration. When setting up a new rule, the client starts by registering the action with A and receives an action ID IDa. Then the client registers the trigger with T . The information given to T falls into three groups.
1. Trigger params and IDa: Information needed for trigger-action.
2. EP(A): The name of the action service encrypted by P 's public key, such that the platform knows where the event data should be forwarded to.
3. γQA and γG: Used for ECDH key exchange, as described previously.
Phase 2: Rule Execution. When a trigger event occurs, the trigger service simply fires the event to the platform. The event data and IDa will be encrypted by the shared key k. Similar to OTAP, the event data can be padded to prevent leaking sensitive information through data sizes, if necessary. The service name is re- randomized through RP(EP(A)) = EP(A) + EP(0) exploiting the homomorphic property of ElGamal. The key exchange message βγG is also sent out. Upon receiving the messages, the platform obtains the service name A by decrypting RP(EP(A)), and forwards the rest of the messages to A. The action service computes the shared key k and decrypts the event data and action ID IDa. With IDa, the action service can find the corresponding action parameters and fire the action.
Re-randomization is needed for EP(A) since EP(A) is fixed for a given rule.
Without re-randomization, some information can be used to fingerprint the user—the platform can learn that two different triggers are from the same user.
Re-randomization is required to limit the attack impact: even if the attacker can break trigger presence confidentiality of one trigger, he/she cannot easily break trigger presence confidentiality of other triggers by linking them together.
To sum up, in ATAP, the trigger and action services know only the informa- tion of trigger and action, respectively. The platform knows nothing but some triggers of a service occurred and some actions of a service were fired.
4.3 Security Analysis
We provide security proof sketches here and detailed analysis in Appendix A.
Assume the use of IND-CPA symmetric encryption scheme Enc(·) (e.g., AES- CBC) and IND-CPA asymmetric encryption scheme E (·) (e.g., ElGamal encryp- tion). For OTAP, since all transmitted messages are encrypted by Enc(·), data
& parameter confidentiality is satisfied. By the definition of IND-CPA, an ad- versary cannot distinguish between pairs of ciphertexts even with the knowledge of plaintexts, and hence an adversary cannot distinguish between real and fake trigger events. Hence, OTAP preserves trigger event presence confidentiality.
For ATAP, all transmitted messages are encrypted by either Enc(·) or E (·), and thus data & parameters confidentiality is satisfied. In addition, since IND- CPA leads to randomized encryption, this implies that the adversary in ATAP is unable to link between different triggers, achieving trigger event presence con- fidentiality. Device set confidentiality is also achieved, as no further information is provided to the platform.
5 Performance Evaluation
To evaluate the performance of our proposed schemes, we implemented proto- types of our systems and a skeleton version of IFTTT as our baseline (referred to as the plain scheme). We ran several experiments to measure the end-to-end latency and the throughput of our systems, as described in Sections 5.1 and 5.2.
Experiments Settings. We implemented all the partner services and trigger- action platforms as web servers using Node.js, and used MongoDB as the backend database. We used 128-bits AES-GCM for symmetric encryption and curve P- 256 for elliptic curve algorithms. Inspired by Fernandes et al. [20], we use the rule "IF new item added to TODO list contains the word 'cat', THEN send an SMS of this item." This contains all the essential elements of a typical rule: a trigger parameter that indicates the trigger condition, and using event data as action parameters.
We hosted each service on separate Google Compute Engine g1-small in- stances. Each instance was configured with 1 Intel Xeon vCPU @ 2.2 GHz, 1.7 GB memory, and 10 GB SSD storage in Ubuntu 18.04.
5.1 Latency
We compare end-to-end latency of the privacy-preserving versions with the plain version. The latency increment mainly derived from (1) computational overhead of the cryptographic operations, and (2) the delay caused by sending triggers periodically, only for OTAP.
Fig. 6: Latency Breakdown
Table 5: Goodput of Different Schemes
Scheme Avg. (req/sec)
Plain 411.78
OTAP (τ = 17, guaranteed) 52.46 OTAP (τ = 1796, latest-only) 162.64
ATAP (w/o re-randomization) 360.27
Computational Overhead. We measured the time spent at different services and the network overheads. The end-to-end latencies are largely affected by the size of the event data, as they need to be encrypted and decrypted by the trigger and the action services, respectively. Therefore, we varied their size from 0.5 KB to 128 KB, and the experiment result is shown in Figure 6.
A gap exists between the network overheads of the plain scheme and OTAP (ATAP) when the trigger size is 32 KB, which is caused by TCP congestion control. With encryption, transferred data is slightly bigger than the congestion window size, requiring an additional round-trip for OTAP and ATAP. Despite network overhead, the results show that OTAP adds at most 5ms latency while ATAP adds at most 25ms. Both are small compared to network overheads or other delays, given that there are no real-time requirements in these systems.
Triggering Delay. For OTAP, we conducted an empirical study on how the trigger period affects the delay between the time a trigger occurs and the time it is sent out. We used the CASAS hh104 dataset [17], which contains sensor data that was collected in the home of a volunteer adult for about two years.
We selected the MA022 motion sensor events as triggers, which are the most frequent events in this dataset. Appendix C describes the event distribution.
We ran the experiment for both delivery strategies, and the result is in Fig- ure 7a. For guaranteed delivery, the delay grows quickly as the trigger period increased; in this case, if we still want to guarantee real-time triggering, then the trigger period should be set around the bursty rate of the trigger (2s in this ex- ample). For latest-only delivery, in contrast, the delay remains low as the trigger period increases; the delay is around one-third of the trigger period. However, there is a trade-off between the delay time and trigger event loss. For reference, we show the resulting event loss rate of different trigger periods in Figure 7b.
5.2 Goodput
Besides the end-to-end delay of a single rule execution, we also examine the number of rules our schemes can handle, which affects the delay. We define the goodput to be the maximum number of real rules being executed per second.
The rule we used in this experiment is the same as in Section 5.1 with size being 0.5 KB, and we used ApacheBench [5] to conduct the experiment by sending
(a) (b) (c)
Fig. 7: Trigger Period vs. (a) Delay, (b) Event Loss Rate, (c) Real Trigger Ratio 10,000 trigger activations with up to 400 concurrent connections. The results are presented in Table 5. We set the concurrency level to 400 by estimating the maximum concurrent execution of the current IFTTT. According to their website [8], around 1 billion rules are executed per month, which means, on average, approximately 385 rules are executed per second.
For OTAP, the goodput depends heavily on the delivery strategy and the trigger period τ . A longer trigger period will not only increase the goodput but also increase the latency, as shown in Figures 7a and 7c. In the experiment, we choose the maximum τ such that the average trigger delay is less than 15 minutes. Choosing a "best" trigger period to balance the trade-offs depends on the distribution of the trigger and other system requirements. We leave the parameter selection as future work.
For ATAP, the goodput (which is the same as the throughput in this case) dropped drastically by about 80%. We found that one of the performance bottle- necks is the re-randomization of action service ID on the trigger service. However, the action service ID is fixed for each rule and is not event-dependent, which indicates that the re-randomization does not need to be performed for each trig- ger and can be generated beforehand. Without re-randomization, our test results show that the goodput only decreases by 12.5%.
6 Discussion
Incentive of Adoption. Similar to anonymous communication, which cannot achieve strong anonymity, low bandwidth, low delay simultaneously as proved in [18], our solution does not aim at providing all of them. Instead, by presenting various modes and configurable parameters, our system allows users to best fit their requirements. For example, for delay-critical applications in trigger- action platform, the user can decide whether to activate our schemes for strong anonymity at the cost of performance.
From the perspective of trigger-action platforms and partner services, we acknowledge that adopting our schemes may increase their operating costs. With the increased interest in the pay-for-privacy model [19], business incentives may exist to offer privacy-enhanced trigger-action system for additional revenues.
Deployability. Though several changes are required to adopt our scheme, we will explain how the transition to our schemes can be made easier with the help
of a proxy. In our schemes, the core functions of the partner services remain the same. Therefore, the adoption of our schemes could be done by having a proxy that sits in between the service and the platform and transforms the requests and responses. Since all partner services follow the same API specification, the proxy can be written once by the platform and distributed to all partner services. It should be published in an open-source manner and run by each partner service on its own, so that the proxy can be trusted.
For OTAP, as discussed in Section 4.1, the existing trigger-action platform can be reused, though all the data and parameters sent to the trigger-action platform must be encrypted by the user clients and partner services.
Compared to OTAP, ATAP requires modifying the platform, and a reimple- mentation is inevitable. However, since its function is simpler compared to the existing one, it is likely that it would not require excessive development effort.
As for the user-side, the key managements and encryption/decryption can be done by installing a local app or a browser plugin to ease the burden.
7 Related Work
Researchers have worked on the security and privacy issues in the trigger-action ecosystem. We first review the related work on the platforms, and review other parts of the ecosystem, including automation rules, and IFTTT.
Untrusted Trigger-Action Platform. Xu et al. [30] studied privacy leakage in smart homes to the trigger-action services and the mitigation. They proposed
"Filter-and-Fuzz (F&F)" that filters out events unneeded by IFTTT and fuzzes the event data and their frequencies. This fuzzing component is somewhat similar to our OTAP scheme, as it randomizes the values of event data and sometimes sends fake triggers. However, their usage scenario is limited to Boolean or nu- merical event data fields and they only consider the cases where the trigger and action services are the same.
Fernandes et al. [20] studied the security of IFTTT's OAuth-based authenti- cation protocols, and they found that 75% of the tokens are over-privileged and can be exploited by the attackers to control users' devices when the platform is compromised. They proposed a decentralized trigger-action platform frame- work (DTAP), which allows the use of fine-grained transfer tokens (XToken).
The trigger-action platform stores only rule-specific tokens while the XToken is stored in the newly-introduced trusted-client, which is controlled by the user.
Although DTAP does not provide data confidentiality and privacy, DTAP can be combined with our solution to enhance the system privacy and integrity.
Security and Privacy Concerns of Automation Rules. Bastys et al. [13, 14] examined IFTTT applets that contain filter code, and found that such applets are susceptible to URL-based attacks, which can exfiltrate private information to a third-party when the applet is created by a malicious maker. A malicious applet could also lead to integrity and availability violations. Authors proposed FlowIT that can monitor and prevent malicious apps from being executed.
Surbatovich et al. [28] analyzed 19,323 IFTTT rules based on information- flow techniques. They defined a four point lattice that checks whether the infor- mation flows from a trusted source to an untrusted sink using static analysis.
A series of work utilized dynamic analysis techniques such as model checking or symbolic execution to detect and fix insecure interactions between rules or to synthesize secure trigger-action programs [25, 24, 15, 31, 23, 29].
IFTTT Ecosystem. Mi et al. [27] conducted an empirical study on IFTTT to understand its ecosystem and the performance of rule executions. They leveraged the self-implemented IFTTT server to profile the interaction among different entities. Their work provides a deeper understanding of the architecture and the execution path of a rule, which inspired our design.
8 Conclusion
Emerging trigger-action platforms empower users to conveniently combine var- ious online services and physical devices for customized automation. However, their centralized design allows these platforms to collect personal information from multiple services, which raises privacy concerns. This work conducted the first empirical study on potential privacy exposures to trigger-action platforms, and presents two practical mitigations that enhance privacy without sacrificing the convenience promised by these platforms. In our empirical study of the 500 most popular IFTTT triggers, we found that the platform is capable of obtaining a variety of sensitive information, and 91% of the popular triggers are susceptible to privacy leakage. To mitigate the problem, we designed and implemented two privacy-preserving trigger-action platform systems, OTAP and ATAP. Trigger obfuscation and trigger anonymization techniques can hide trigger presence, so that the platform (1) sees real and fake triggers that are indistinguishable, or (2) cannot determine which user is related to a given trigger. We believe that our work provides an immediate remedy to enhance today's trigger-action plat- forms, and an interesting future direction is utilizing a clean-slate approach that ensures security and privacy by design.
Acknowledgments. This research was supported by the Ministry of Science and Technology of Taiwan under grants MOST 109-2636-E-002-021 and MOST 109-2636-E-005-002.
1. Microsoft Flow. https://flow.microsoft.com
2. Target Expects $148 Million Loss from Data Breach. https://time.com/3086359/
target-data-breach-loss/ (2014)
3. Yahoo Says Hackers Stole Data on 500 Million Users in 2014. https://www.
nytimes.com/2016/09/23/technology/yahoo-hackers.html (2016)
4. Yahoo Triples Estimate of Breached Accounts to 3 Billion. https://www.wsj.com/
articles/yahoo-triples-estimate-of-breached-accounts-to-3-billion-1507062804 (2017)
5. ApacheBench. https://httpd.apache.org/docs/2.4/programs/ab.html (2019) 6. Do more with Oticon - IFTTT. https://ifttt.com/oticon (2019)
7. IFTTT. https://ifttt.com (2019)
8. IFTTT Platform. https://platform.ifttt.com/lp/learn_more (2019) 9. The Equifax Data Breach. https://www.ftc.gov/equifax-data-breach (2019) 10. Turn off WiFi on your Android when you leave home to save power. https://
ifttt.com/applets/302237p (2019) 11. Zapier. https://zapier.com (2019)
12. https://github.com/csienslab/tap-privacy (2020)
13. Bastys, I., Balliu, M., Sabelfeld, A.: If This Then What?: Controlling Flows in IoT Apps. In: ACM CCS (2018)
14. Bastys, I., Piessens, F., Sabelfeld, A.: Tracking information flow via delayed output.
In: Nordic Conference on Secure IT Systems. pp. 19–37. Springer (2018)
15. Bu, L., Xiong, W., Liang, C.J.M., Han, S., Zhang, D., Lin, S., Li, X.: Systemat- ically ensuring the confidence of real-time home automation IoT systems. ACM Transactions on Cyber-Physical Systems 2(3), 1–23 (2018)
16. Canetti, R.: Security and composition of multiparty cryptographic protocols. Jour- nal of CRYPTOLOGY 13(1), 143–202 (2000)
17. Cook, D.J., Crandall, A.S., Thomas, B.L., Krishnan, N.C.: CASAS: A smart home in a box. Computer 46(7), 62–69 (2012)
18. Das, D., Meiser, S., Mohammadi, E., Kate, A.: Anonymity trilemma: Strong anonymity, low bandwidth overhead, low latency-choose two. In: IEEE Sympo- sium on Security and Privacy (S&P) (2018)
19. Elvy, S.A.: Paying for privacy and the personal data economy. Columbia Law Review 117, 1369 (2017)
20. Fernandes, E., Rahmati, A., Jung, J., Prakash, A., Rahmati, A.: Decentralized Action Integrity for Trigger-Action IoT Platforms. In: NDSS (2018)
21. Goldreich, O.: Foundations of cryptography: volume 2, basic applications. Cam- bridge university press (2009)
22. Goldreich, O., Micali, S., Wigderson, A.: How to play any mental game. In: ACM Symposium on Theory of Computing (1987)
23. Hsu, K.H., Chiang, Y.H., Hsiao, H.C.: SafeChain: Securing Trigger-Action Pro- gramming from Attack Chains. IEEE Transactions on Information Forensics and Security 14(10), 2607–2622 (2019)
24. Liang, C.J.M., Bu, L., Li, Z., Zhang, J., Han, S., Karlsson, B.F., Zhang, D., Zhao, F.: Systematically debugging IoT control system correctness for building automa- tion. In: ACM BuildSys (2016)
25. Liang, C.J.M., Karlsson, B.F., Lane, N.D., Zhao, F., Zhang, J., Pan, Z., Li, Z., Yu, Y.: Sift: building an internet of safe things. In: IEEE/ACM IPSN (2015)
26. Little, J.D.: A proof for the queuing formula: L = λW. Operations research 9(3), 383–387 (1961)
27. Mi, X., Qian, F., Zhang, Y., Wang, X.: An empirical characterization of IFTTT:
ecosystem, usage, and performance. In: ACM IMC (2017)
28. Surbatovich, M., Aljuraidan, J., Bauer, L., Das, A., Jia, L.: Some Recipes Can Do More Than Spoil Your Appetite: Analyzing the Security and Privacy Risks of IFTTT Recipes. In: International Conference on World Wide Web (2017) 29. Wang, Q., Datta, P., Yang, W., Liu, S., Bates, A., Gunter, C.A.: Charting the
Attack Surface of Trigger-Action IoT Platforms. In: ACM CCS (2019)
30. Xu, R., Zeng, Q., Zhu, L., Chi, H., Du, X., Guizani, M.: Privacy Leakage in Smart Homes and Its Mitigation: IFTTT as a Case Study. IEEE Access 7, 63457–63471 (2019)
31. Zhang, L., He, W., Martinez, J., Brackenbury, N., Lu, S., Ur, B.: AutoTap: synthe- sizing and repairing trigger-action programs using LTL properties. In: IEEE/ACM ICSE (2019)
A Formal Security Analysis
Privacy Framework. We adopt the ideal/real-world paradigm to analyze the privacy of our schemes, which is standard in MPC literature [22, 16, 21]. Concep- tually, there are two worlds, one is ideal and the other is real, both evaluating the functionality Ftap, the trigger-action platform protocol. The "ideal-world"
has a trusted party T carrying out all the computations. All other parties send their input to T and receive their prescribed output through a secure channel.
In "real-world", no such party exists and all parties perform the computation themselves. To show that a real-world protocol is secure, we need to show that for every possible real-world adversary A, there exists an ideal-world simulator S such that when controlling same parties as A, the outputs of the protocols in ideal-world and real-world are computationally indistinguishable. This implies that every attack that can be done by A in real-world can be done by S in the ideal-world. Since the simulator learns nothing but the input/output of the cor- rupted parties, the real-world adversary A can only learn the same information.
Adopting this framework, the security of a privacy-preserving trigger-action system can be defined as follows.
Definition 1. A trigger-action protocol Π that computes Ftapis secure if given any adversarial trigger-action platform A, there exists a simulator S such that IDEALFtap,S≈ REALΠ,Aare computationally indistinguishable, where IDEALFtap,S is the joint output of simulator S in the ideal-world, while REALΠ,Ais the output of adversary A in the real-world.
Theorem 1. Let Π be the protocol of OTAP and assume Enc(·) is an IND-CPA encryption scheme. Given any adversarial trigger-action platform P , there exists a probabilistic simulator S which takes as inputs the rules sets ~r1, · · · , ~rM and the trigger periods ~τ satisfies Definition 1.
Proof. Let I = {(u, dt) ∈ ~ri| i = 1, . . . , M } be the set of users and trigger pa- rameters of rules, and τ(u,dt)be the associated trigger period for each (u, dt) ∈ I.
The simulator S will interact with the adversary A internally, and can be con- structed as follows. For each (u, dt) ∈ I, S passes (u, dt, c) to A as input as if it was sent by the triggering service T at each corresponding trigger point (i.e., τ(u,dt), 2 · τ(u,dt), . . .) and outputs whatever A outputs, where c is randomly sampled from the ciphertext space of Enc(·).
Now we show that the output of S is computationally indistinguishable from the output of A in real-world. In the real-world, the service T sends out (u, dt, Enc(k, δ)) to A periodically for every (u, dt) ∈ I, where δ is the event data. Based on the CPA secure assumption of Enc, we know that (u, dt, c) and (u, dt, Enc(k, δ)) are computationally indistinguishable. Thus, the outputs of S = A(u, dt, c) and A(u, dt, Enc(k, δ)) must also be computationally indistin- guishable, which completes the proof.
Since the simulator is given only the rules sets ~riof every user i and the trigger periods, it is clear that the platform learns nothing about the trigger events, and thus preserved trigger presence confidentiality and trigger data confidentiality.
However, device set confidentiality is broken, as the devices owned by a user can be inferred from the rules they are using.
Theorem 2. Let Π be the protocol of ATAP, and G be the elliptic curve used in Π, whose base point being G and order being q. Assume that use of IND-CPA encryption schemes Enc(·) and E (·), then given any adversarial trigger-action platform A, there exists a probabilistic simulator S satisfies Definition 1, while S takes as input a list ~E that contains the 3-tuples of events occurrence time, trigger service name, and action service name.
Proof. The simulator S will interact with the adversary A internally, and can be constructed as follows. For each (t, T, A) ∈ ~E, the simulator S passes (EP(A), c, γ0G) to A as if it was sent by the trigger service T , where c is randomly picked up from the ciphertext space of Enc and γ is randomly chosen from {1, . . . , q − 1}.
Then S simply outputs whatever A outputs.
Now we show that the output of S is computationally indistinguishable from the output of A in real-world. It is suffices to show that (EP(A), c, γ0G) and (EP(A), Enc(k, δ), βγG) are computationally indistinguishable, following from the CPA security of underlying encryption schemes and the decisional Diffie- Hellman (DDH) assumption.
From the above proof we know that the platform learns nothing but the time of each event. However, since the platform will not know the name of the event and the associated user, the trigger presence confidentiality is still preserved.
Trigger data confidentiality and device set confidentiality are also achieved, as no further information is provided to the platform.
B Triggering Delay Analysis
This subsection will show that the average delay for OTAP with the guaranteed delivery strategy is minimized when using a constant trigger period.
Consider a general case where the trigger period is not a constant but follows a distribution I with E[I] = τ . In the following, we focus on a particular trigger event and its corresponding service. We assume that the arrival of events is a Poisson process with a rate of λ. We model the trigger service of OTAP as a M/G/1 queueing system, where the customers (events) are served only at the trigger points and the service time is zero.
When an event arrives, it first needs to wait a short period of time before the queue starts serving new events, denoted as R. Then the event needs to wait for all the events in the queue to be served before it is sent out. The duration is the sum of NQ trigger periods, where NQ denotes the size of the queue when the event arrives. As a result, we can derive the average delay of an event:
E[D] = E[R] + E[NQ] · E[I]. By Little's Law [26], we have E[NQ] = λE[D], and from queueing theory, we know that E[R] = λ2E[I2], which implies
1 − λE[I] = λE[I2]
2(1 − λτ ) =λ(Var[I] + (E[I])2)
2(1 − λτ ) = λ(Var[I] + τ2) 2(1 − λτ )
(a) Distribution of Inter-trigger Inter-
vals (b) Number of Triggers in Each Hour
Fig. 8: Trigger Distribution in the CASAS hh104 Dataset
The result shows that the average delay is minimized when the trigger period is constant, since the minimum of Var[I] (= 0) happens when I is constant.
C Trigger Distribution
Figure 8a shows the distribution of the intervals between consecutive triggers and Figure 8b shows the number of trigger events in each hour from the first 720 hours of the CASAS hh104 dataset [17]. The occurrence of events is not uniformly distributed. Since the sensor only monitors motions within a specific area, a series of bursty triggers occurs when the user is present in that area, and no trigger occurs when the user is elsewhere.
D Supporting Filter Code
As mentioned in Section 3.1, some trigger-action platforms allow users to write code to run during rule execution. Our schemes are capable of supporting a filter code by letting the action services store and run such codes. However, it might not be ideal to put this workload on action services instead of the trigger-action platform. Therefore, we propose two potential solutions to support this feature and leave them as future work.
The first direction is to replace the current encryption scheme with Homo- morphic Encryption (HE), which allows computation over ciphertext without knowing the underlying plaintext. However, a challenge is achieving acceptable performance as HE schemes are computationally expensive.
Another possible solution is to build the trigger-action platform on trusted hardware. Intel Software Guard Extension (SGX), for example, provides an iso- lated execution environment called an enclave whose contents are protected, and only processes running inside the enclave are allowed access. Since the protec- tion is at the hardware level, a malicious OS cannot read those data. SGX also provides another mechanism called remote attestation, which allows the client to attest that the code running on the remote machine is indeed the expected one. Thus, an SGX-based solution would support the trigger-action platform to handle sensitive data inside an enclave and partner services to attest that the platform is indeed running the privacy-preserving version at each interac- tion. However, the resources inside an enclave are limited and hence, a challenge becomes designing an algorithm that can use memory effectively.


text:
David Sprouls is named the seventh President of the New York School of Interior Design (NYSID). Mr. Sprouls has been serving as Acting President since January 1, 2012.
"David Sprouls was our top choice for the presidency," commented Dr. Patricia M. Sovern, Chairman of the NYSID Board and Chairman and the Presidential Search Committee.
"He understands the issues NYSID faces as an institution of higher education. He brings to the position his experience and knowledge of the school and its constituencies. His personal qualities of sincerity, compassion and transparency make him the perfect leader for the NYSID community."
In addition to serving as Acting President over the past six months, Sprouls is a long-time employee of NYSID. He was the Director of Admissions from 2000-2008 and Vice President for Enrollment Management from 2008-2011. Prior to the 12 years he has been at NYSID, David worked in admissions at Albright College and the Fashion Institute of Technology.
"I am truly honored and excited by the opportunity to carry forward NYSID's nearly century-old tradition of excellence in interior design education with its deep roots in the history of design and decorative arts," stated Sprouls.
"This vital profession, thoroughly embedded in the culture and economy of New York City, is expanding and evolving. NYSID and its students are uniquely poised to lead and innovate in both the residential and commercial fields, including the emerging and important areas of accessibility, sustainability, and healthcare design. I look forward to an exciting future."

subset: commoncrawl


text:
The future of assessment and GCSEs
The Exam House blog was at the Conservative conference in Manchester some excellent guide on the value and future of 16 year old assessments. Including gcse changes. Robert Halfont MP discusses his views.
The future of assessment – time for a rethink?
The Title was: With two years of exams cancelled from the pandemic, the world quickly adapted and we found new ways of assessing. Surely now must be the time to consider fundamental reform of our assessment system? Join us to explore what the future of assessment might look like.
Flick Drummond MP
Member of ParliamentAB
Alice Barnard
Chief ExecutiveSB
Professor Sarah-Jayne Blakemore
Professor of PsychologyPA
Philip Avery
Director of EducationJN
Jonathan Noakes
Head of Teaching & Learning
Rt Hon Robert Halfon MP
Member of Parliament
THe transcript is below.
Mean, Minister said on Sunday on the Andrew Marr Show, he said when people voted for change in 2019, I quote they want to mend the broken model of the UK economy that relied on low wages and low skills.
It's right that we do everything we can to fix the system and to support people to gain those skills. And so that's what the prime minister is saying. We will only do that if we if we change the, you know, build a skills and apprenticeship. And if you just take some other sort of horrific statistics over what's called low skills, qualifications and sort of use here and literacy for those upper secondary level.
The Europe, the UK ranked 2032 OECD nations based in the UK in the third quarter and intermediate level we ranked 25th out of urgency. Two nations in the UK, well below the recent EU averages and other countries are ahead of this. Japan, Slovenia, Switzerland, Poland, Korea, Israel, Australia the list, the list goes, goes on.
We are the only country where the oldest age group also has high proficiency in both literacy and numeracy and the youngest aged or nine million adults in our country without literacy new skills. I
'm hoping that the one more minute Oh, I better get on. We have to get on. So I'll give you some of the some of the key statistics I've told you how we are way behind. So what's the answer to this or GCSEs were introduced, as I mentioned by Lord Baker, what I would like to see is a change in the system of from GCSE and A-levels at least have a debate about it, which is to build a international baccalaureate, which includes academic, absolutely traditional education, but also has vocational and technical education in work as well.
And we know that many other countries are countries doing 154 other countries doing more than developed countries around the world. It's offered in more than 5000 schools in 150 150 countries. So that way we marry knowledge and skills.
Together we teach people, as I mentioned, how are the names of fish, but we teach them, we teach them how to fish as well. So let's least have this debate. Let's not try and close it down, which some people want to do. We now have an enormous opportunity to transform our education system, have a real debate about what the curriculum is to prepare us for the work and make sure that we have an employer, employer led education system.
So we get young people on that ladder of opportunity right to the top to get the job security and prosper.
Note, there was not a discussion on the rise of Private Candidates. Which we think is an important part of the future of exam taking.


text:
Coprexma completes design of new trawler for Brittany owner
French naval architecture firm Coprexma has completed design work on a new trawler for an unnamed owner from the town of Guilvinec in Brittany.
The 22-metre steel trawler will replace another Coprexma-designed vessel that is over 30 years old and currently sailing with the owner's fleet.
The newer vessel will be used for bottom trawling.


text:
Replications Franck Muller Vanguard Stainless Steel Blue Automatic – V45 SC DT AC BL Frosted
That's why COMBLANT thinks a new Vision for the Hoode series. "I think of your time Show Square, Franck Muller Vanguard Stainless Steel Blue Automatic – V45 SC DT AC BL Xu Guangqi, Xu Guangjun, his books and watches and wall clocks, images, clock institutions First, Parmigiani Fleurier uses the insertion process.There is no need to change the previous leaders as much as possible. The new Audemars Piguet Royal Oak OUTSHORE NAIL is a raincoat, up to 300 best place to get replica high end watch meters. This year Switzerland Mido announced new sports through astronomicalong-term energy certification, there is a silicone thread. Simple design and easy work also attract many girls who like to change. Why do you work hard?What did you starthis year? He filled his helmet with a car. Dior uses a better supplier of electromechanical characteristics in 2009 in Basel. Other advantages of the pearl structure compared to the second cradle market.
It's hard to enjoy the best comfort. The total diameter is 31.60 mm, with a total thickness of 6.45 mm. After overcoming the total period in the region, it hastable reliability and is in line with a reliable key, up to date. Then five aspects work together to find the share of ignition masses.
All interesting details are the foundation of diving design and we have found great history andeeper time. The clock cassette is made of 40 mm with a diameter of 40 mm. HERITAGE SUPER ARARY II B01 Table 44. The brand created the required stage and is executed after the data collection period. Large black sheep on a white background – best rolex replica watches it's a good reading. The generator pulls all metal components to increase the shape of the triangular structure. Currently industrial watches canot guarantee that nonexceeds Richard's mirror. Nikolas Datand Data Nikolas Datand Time Timatics are closely related to Nicholas Mont Blanc events but focus on opaque. The whole world reminds people of many moments.
African Ocean Book through the Spanish and White Sea of the Blue Sea. The realife of the BA series begins. Athe same time, themergence ofirearms is very interesting and group behavior. Can be used as a small short journey box. This time, minute, hour and 06 hours, 10 s. Mr. 00 is at 10:00. Since 2003, the time between Shenzhen 5 and Tosynzhou was. Everyone listens to your portfolio. We have no problem. Sethe functionality of the collection in the areashown below. Two hours and 3 hours later, the moon and the objects on the wall. The judge of the holiday is always a writer and experts. Margarit-Top Lok, 3D unit control, 11 hours and 12 hours in style lv.
Attractive design replaces the coldecoration time. The replica watch information demonstration is important, they have played several hours at different European levels. You will find three considerations under the aqueousolution. From the 1950s of the last century, an ultra-thin game begins. H3 Hyt isurprising for the revolutionary. After the first joint military fund in 1999. Can I restore a small part of any pass?The fourth quarter of 2018 is not enough. This watch makes classic elegant and excellent quality, it will not make people disappoint, who knows how to appreciate these jomashop rolex replica watches great ones. One of the best books is a port of a port, 8 days on strong eyes. According to this method, the advantages of reading time "time" arexpanded.
Prince Open I, the current state of the Monaco is currently used for transport clock tables.
I do nothink old gold is not enough. Even if it is not very good. They are not diamond watches. Otherwise, the playback time will not add value. Since then, the series has developed for many other Chinese publications, including special publications that meethexciting business. Do you wanto visit your friends? There are several high quality brands. They did not attack the southern wall. This phone is decorated with Arabic numbers, calendars and more fun, elegant and elegant. The increase in CALP.9000 is a very effective role and good warranty effort in the counter. Two hours, black and white agate will call 18,000 The calibration process has many problems but is considered a standard problem that supports Franck Muller Vanguard Stainless Steel Blue Automatic – V45 SC DT AC BL long-term life.
High pricing 18K rhodium andelicate hand. Sun
fake womens watches
Watch Style
American actor Lucas Exhibition and the famous exercise best replica watch site 2018 RAM Exercise my white slow calendar Qualeshnun Franck Muller Vanguard Stainless Steel Blue Automatic – V45 SC DT AC BL and Star Clock fake diamond watch Montblanc.
Up to 25 awards are 43,300 high end rolex replica euros.
Case Material
It is recommended that metal thermal communications are very successful, so we recommend using it on the wrist. The clock has an energy update with 4.2 mm thick. Use a 42 mm stainless steel cover, such as DLC diamonds to increase wear and stability of scratches. In 2016, the second Swiss Foundation 26th SIH increased nine closed centers. Chairman of the International Gymnastics Federation. The powerful room reflects the task.If the moon is installed, it may take 30 days or 31 replica watches china days. This work is more complicated than more courses.
Some stainlessteel models are also available. This marker was purchased Franck Muller Vanguard Stainless Steel Blue Automatic – V45 SC DT AC BL at Hong Kong, but only one brand isold
But what I wanto do istop the Swiss clock.The second time zone, manual and time of repentance. index. Women's Day 8 March – Beautiful time to send gifts. Obviously this not an ongoing diving. Several centuries it will become the most popular women in the world.The concept of "skeletal shelter". The back of the clock can be shaped using a seamless background to clean thevent event. Enjoy the beautiful and happy season. Cartere Helltail in the Wellseries is the most famous. Insert handsome black style. Hello Chronograph Senator is a secure certificate for Germany DKD suitable for fake watches US equipment.
Amy is active in the world and enters the crane market. A series of 35 mm l.ucp is popular among thelderly. Six international teams from Europe and the European team face around the world. On February 5, 1803 he met with special advances in the Vienna fake rolex watches ebay Theater. It is connected to 7:00 and 8:00 when it reaches time. We focus on design, innovation and coping, we also celebrate our best friends and best results. Hot
Case Thickness
Jewelry is one of the most popular working hours and the printray is always targeted athe market. He hopes to learn the sea of the sea through music, transport and beauty, music, transport and beauty. This a surgery and ideal situation, such, the reason for hope. Easy to move or configure without having to relax within a few minutes. Thanks to the Middle Omega Club, the Emil Club is particularly regarded as a beautiful model of the Omega club in the famous championship story. Your brand can choose a popular type, design and type rolex clone for sale of conversion. As a result, there are two lines for learning. Those who replica rolex AAA grade china perform people can provide 72 hours of sound and their high sound. The connection is important for quick solving the problem.
Four special teams Select Posuet Royal Oak Row to close the new 42mm chronograph. More modern design and crown, black ceramic resin. This model is 43 mm, the bracelet measured 18,000 gold steel 1:1 replica luxuary watches and stainlessteel. According to US scientists, Vacron Constantine has developed two entertainment systems in 2004 and is known as Magellan after Franck Muller Vanguard Stainless Steel Blue Automatic – V45 SC DT AC BL Magline. The panel is covered according to the GS9F standard.
Remote wheel balancing devices providenergy 100 hours when Franck Muller Vanguard Stainless Steel Blue Automatic – V45 SC DT AC BL filling with additional power supplies using other computers. All clear clocks are carefully concentrated. We coordinate with glass mills and 25 who sells the best replica watches years of commemoration.
May he go to the television operator. GENEVA International Deluxe Watch 2018 Bigas replication watch begannouncing women's clock with a new tree. Independentradersuch as rolex copies cheap Dafush Philip. In fact, we studied the traditional production of the company and the company's power. A good example of this design. However, the PIN isupported. Stainlessteel telephone 41.5 mm, Roman collection and black collection placed in automatic dialing, victory. Super replica automatic watches sophisticated screen, hard and Rolex – a good window to develop andesign technologies. Cartier will purchase "luxury" online. Star Tape started the 50th anniversary of the golden fog. Golden Horse Award, the company's veterans will soon see dark.
It is also very popular for women. Longines Confas Whp the surface core has extreme precision, almost quartz movement. This the market share and the target brand of the product. Today I wanto talk about "Preview" in London.


text:
The students of Municipal Corporation of Delhi (MCD) Primary School in Delhi's Ashok Vihar were elated to learn that their appeal to the local administration about their unsanitary surroundings finally bore fruit in the form of action. The process began when Bal Raksha Bharat, in association with Cities Forum, developed an initiative – 'Children Reshaping Cities' to impart learning on the basics of urban planning and development to children in classes 3rd to 12th. A module within the program, titled 'Learning Mind-Mapping and Urban Elements from Personal Experiences', sensitized and oriented children about different scales of urban settlements (towns, cities, metropolis, etc.), urban design elements for mental mapping, understanding planning lexicon (like wards and neighbourhoods), commute-mapping, differentiating between public and private spaces in their neighbourhood, and discussing neighbourhood challenges through drawing, mapping, and letter-writing.
Children of Sawan Park School writing to the Chief Health Officer
The module consisted of simple and lucid material about mapping, accessibility, and inclusive planning practices. It helped in educating the children about their position as citizens and their overall role in urban development and neighbourhood planning. This module was implemented from June to July 2022 in five MCD schools (in classes 3rd to 5th). It led to various discussions among the children and teachers about the problems and issues that they observed within their neighbourhoods, wards, and the overall city, followed by a collective willingness for finding solutions and expanding the discussion with those in the administration. As a result, the 211 children of Sawan Park School, collectively wrote a letter to the health officer (on 22nd August 2022) and handed it over to the local sanitary inspector to raise the issue of the unsanitary conditions giving rise to mosquito breeding in their local park. The administration promptly took notice of the problem and arranged for the park to be fogged and sprayed on the following day. Talking with the teachers that helped students in guiding them to write the letter, it was remarked that there was a significant rise in awareness among the students in raising concerns about their surroundings to the local administration as well as newfound confidence and belief that their initiative can result in a rapid response and a concrete action. The park, which received a daily footfall of about 80-100 persons, became a safe space for leisure activities without the looming dangers of mosquito-carried diseases like malaria, dengue, chikungunya, etc. which have seasonal outbreaks in the city every year. On a neighbourhood scale, a population of some 300 households (nearly 1,500 people) was also positively affected by the outcome, shielding them from the diseases that ail thousands across the city every year.
Children handing the letter to the local Sanitary Inspector, Primary Health Center (PHC)
In addition to the above outcome, the children have also become aware of many elements of the local administrative processes. Firstly, they now know the office/personnel to contact if a local issue needs resolving. Secondly, they are now knowledgeable about the equipment needed to rid a space of a mosquito infestation and can consequently advise their peers to raise similar issues in their respective localities. Lastly, they are now aware of the people who actually carry out the spraying and fogging process and can contact them directly if the local administration is unable to do so.
Children observing their locality being sprayed with mosquito repellents
In conclusion, teaching children about urban planning and their role and rights as citizens led to a positive change in their place of leisure. It also made them aware of the importance of communal spaces like parks and playgrounds. Therefore, we can ascertain from this experience that if more and more children are educated about their surroundings and cities, the more willing they would be to participate in raising their voices for bringing positive changes to their well-being.
Children and teachers with a municipal sanitary worker at Sawan Park


text:
1st Draft of the Last Captain done and sent off to my agent and first readers. Right on deadline (at least the most recent one).
The sense of achievement is all out of proportion with where things are… But still, it is one more step along the path.
And it felt good, the writing of it.


text:
Indie rapper The Insomniak delivers uplifting bars in his new single "They Say". Backed by a bright playful backdrop, he talks about blocking out the negative talks and detractors who try to limit us by focusing on the most valuable things which is self-confidence and the power to control and determine our own destinies.
Stream "They Say" on YouTube, Apple Music,Deezer
Keep up with The Insomniak | Soundcloud: Facebook: Twitter: Instagram
Tags:The Insomniak


text:
Tax included. Shipping calculated at checkout.
A great set to bring colour into your creations! 100 (untreated and sustainably sourced) Kapla planks in 8 different colours (light blue & dark blue, red & orange, yellow & green, pink & purple - all dyed using natural food colouring). The box measures 7.8 x 26.7 x 26.7 cm and weighs 2 kg.


text:
News | October 30, 2013
OHV Trails Harmful to Water Quality Closed For Environmental Review
The U.S. Forest Service documented "unacceptable" erosion at the off-highway vehicle trails at Locust Stake in the Chattahoochee National Forest as far back as 1996. Yet, those trails remained open until January 2012, pouring large amounts of sediment into the North Fork of the Broad River, a designated trout stream. When the Forest Service suggested that half the trails might be reopened, SELC and Georgia ForestWatch pushed for the agency to conduct an environmental assessment of the trails with time for public input. The agency apparently agreed, as the area remains closed, and an environmental assessment is expected to begin in the near future. We will remain involved to ensure that water quality and wildlife in this area are protected.


text:
530 Oak Ridge Trails CourtBallwin-63021
Welcome home! This two-bedroom second-floor condo is just waiting for you. The open and bright layout seamlessly integrates the living, dining, and kitchen areas, creating a welcoming space for relaxation and entertainment. The kitchen opens onto your deck with a private wooded view. The master suite features a walk-in closet, laundry, and bath. The second bedroom provides versatility for guests, a home office, and more. The location is located near all amenities including shopping, dining, and entertainment, and the highly sought-after Rockwood School District. Residents can enjoy the convenience of a 2 car detached garage located in the front of the unit and access to community amenities including a pool, tennis courts, clubhouse, and more! Refrigerator, washer & dryer included. Please join us this Sunday from 12 noon to 2 pm at our Open House.
Price: | $221,000 |
Address: | 530 Oak Ridge Trails Court |
City: | Ballwin |
State: | Missouri |
Subdivision: | Woodside Trails Condo Sixteenth |
Acres: | 0.272 |
Lot Square Feet: | 0.272 acres |
Bedrooms: | 2 |
Bathrooms: | 2 |


text:
How to Create a Form in WordPress With a Date Picker
Looking to incorporate a date picker into your WordPress forms? A date picker field can streamline
Looking to incorporate a date picker into your WordPress forms? A date picker field can streamline
Welcome to another exciting Elementor tutorial! In this guide, we'll walk you through the process of
In this video, I will show you two methods to automatically open external links in a
Welcome to our tutorial on how to create a stunning Auto-Scrolling Logo Slider Carousel using Elementor
Adding a custom back button to your WordPress Elementor website can greatly enhance the user experience
WordPress is an incredibly popular content management system used by millions of websites around the world.
WordPress is a popular content management system that allows users to create and manage websites with
To whitelist IP addresses in WordPress, you can use a security plugin like Wordfence or a
In recent years, the rise of voice search technology has changed the way people interact with
Creating a neon effect with Elementor can add a unique and eye-catching touch to your website
Subscribe to Go With Blogs for regular updates.
A platform for quality blogs and writers.
By entering your email, you agree to our
Terms & Conditions and Privacy Policy.
© Go With Blogs - All Rights Reserved.
Cookies Policy, Sitemap


text:
Congratulations to the participants of the 2023 Bounce & Cadence Symposium for Music and Audio Research at ULethbridge. Your enthusiasm was appreciated very much and we were grateful to have had the opportunity to learn from your research, research and creation, and performances. Thank you!
Learn more about this year's participants and their research:
Winners of the Bounce & Cadence
Symposium for Music and Audio Research
1st place
"Tuning into the Audible" by Christina Milinusic
2nd prize
"Two songs | Myosotis (Fauré) and Frühlingswonne (Goltermann)"
by The FAB Trio | Brenna Le May, Anna Jeong, Franz Faeldo
"Noise is Normal" by Demi Zalesak & Chris Bernhardt
3rd prize
"DIY Ribbon Microphone: I can build that!" By Ben Wellman
Awards supported by Dr. Rolf Boon, 2022-2023 Music Department Chair
We congratulate the winners! Your contributions were outstanding and we commend you for your hard work and dedication.
We would like to thank Megumi Masaki and Keith Hamel for sharing their valuable insights. A big thank you to our chairs and moderators: Georg Boenn, Mary Mazurek, Deanna Oye, Marcela Rada, and Paul Sanden.
We look forward to seeing you at next year's Bounce & Cadence!
D. Andrew Stewart, Coordinator
Tareq Abu-Rahma, Assistant Coordinator


text:
Welcome to our on the internet slots Hand of Gold review! If you're a fan of on the internet casino games, after that you've most likely played a couple of rounds of on-line ports before. These games, such as Hand of Gold by Playson, are a few of one of the most prominent as well as widely-played in the on-line gambling enterprise world, with countless different titles offered from loads of various software carriers. From traditional three-reel ports to modern-day video clip ports with incentive functions and also totally free spins, there's something for everyone when it concerns on the internet slots. In this Hand of Gold review, we'll be taking a more detailed check out among the most recent as well as greatest online ports video games to hit the marketplace, offering you all the information you require to determine whether it's the appropriate selection for you. So kick back, relax, as well as allow's study the globe of on the internet ports!
Online port games, as Hand of Gold, tommy guns vendetta and diamondz are electronic versions of conventional one-armed bandit located in physical casino sites. These video games are available on various on the internet casino site systems and also can be played from the comfort of one's own residence utilizing a desktop or smart phone. One can also pick to play variation.
, the gamer picks the amount they want to bet and also spins the reels. The reels are normally made up of symbols, such as letters, numbers, and fruits, and also the objective of the video game is to match these symbols across one or more paylines to win a payment.
Online port games can feature a variety of designs as well as styles, ranging from classic fruit device style to even more complex and also contemporary video ports with sophisticated graphics and animations. Some video games likewise have extra features such as bonus rounds, free spins, and also progressive rewards that can raise the potential earnings.
Lots of online slot video games additionally use a selection of betting options to deal with different gamers, from low-stakes choices for those on a spending plan to high-roller ready those wanting to bet big. On the whole, online port games are a preferred kind of on the internet gambling as a result of their simplicity of use, ease of access, and capacity for huge payouts.
Regarding Hand of Gold bonus
Bonus offers are a crucial element of online port gaming, including a layer of enjoyment and expectancy to the total experience. When playing port video games, it pays to look for bonus offers that supply the ideal mix of value, possibilities of winning as well as total enjoyment. Ultimately, bonuses play a substantial function in the overall fun of playing on-line port games and also need to be taken into consideration when picking which games to play.
Regarding Hand of Gold RTP
The term "RTP" means "Return to Gamer" and it is a portion that shows the amount of money that a slot video game is expected to repay to players in time.
RTP is generally computed based on a multitude of rotates and is shared as a portion of the complete quantity wagered. For instance, with an RTP of 95% means that for every single $100 wagered, the video game is anticipated to pay out $95 in jackpots on average over the long-term.
It is very important to note that RTP is an ordinary and not a warranty. It does not show how much a gamer can anticipate to win on a solitary session or spin, but instead over the long term. Additionally, some video games may have a high RTP yet additionally high volatility, which indicates that while the game might pay out less regularly, the payments might be greater when they do take place.
As a whole, a higher RTP is considered a lot more positive for gamers as it suggests that the video game has a reduced house edge and also supplies much better odds of winning. When picking a slot game, players might wish to take into consideration the game's RTP as one consider their decision-making procedure. Hand of Gold RTP is certainly interesting as well as very affordable to gamers.
play Hand of Gold
If you're a follower of online casino video games, then you've possibly played a few rounds of on-line slots prior to. From classic three-reel slots to modern-day video slots with perk attributes and totally free spins, there's something for everyone when it comes to online ports., we'll be taking a better look at one of the most current and biggest online ports video games to strike the market, giving you all the info you need to determine whether it's the right option for you. Online slot games can feature a variety of styles as well as styles, varying from timeless fruit device style to more intricate and also modern video ports with sophisticated graphics as well as animations. Eventually, rewards play a substantial duty in the overall enjoyable of playing on the internet port video games and also should be taken into consideration when choosing which video games to play.


text:
I like to spend my spare time relaxing with my family and friends. I also play football and go to the gym regularly.
Interested in meeting people looking for online dating like Jayg89?
Why not join the UKs best online dating agency The Asian Single Solution
I would like to find someone that is loyal and trustworthy and who wants the same things from a relationship as me


text:
Contact Moab
Moab Specialty Services
Mountain Land Physical Therapy Moab is conveniently located in the northeast corner of Moab Regional Hospital in a new, state of the art facility. The Moab Clinic offers a variety of services and treatments to help you on your road to recovery. We are proud to be located in the center of Moab surrounded by the beautiful redrock landscape of Eastern Utah. Our helpful and friendly staff is here to help you get back to doing the things you love. We'll be there every step of the way.
Moab Clinic Therapists
Jim Lewis, PT, MOMT, Cert. MDT
Clinic Director, Physical Therapist
Jim has been a physical therapist since 1989. He has a Masters Degree in Orthopedic Manual Therapy and additional certification in the McKenzie method of Mechanical Diagnosis and Treatment of the Spine.
His areas of expertise include the conservative treatment of back, neck and other orthopedic problems. Since 1994, Jim has worked for Mountain Land and is currently the director of rehabilitation services in Moab. Jim's many interests and hobbies include spending time with his wife and three children participating in outdoor recreational activities and mountain and road biking.
Cynthia Indergard, PT
Physical Therapist
Cynthia earned her degree in Physical Therapy from Loma Linda University located in Loma Linda, CA. She has been practicing Physical Therapy since 1987 specializing in orthopedics and, more specifically, the foot and ankle.
Cynthia has been a part of the Mountain Land team since 2005. She enjoys working with people and has always been very athletic and active in sports. Cynthia's hobbies include activities with her three children, running, hiking, outdoor life, and horses.
Christina Steinhauer, PTA
Physical Therapist Assistant
Christina has practiced therapy since 2005 and has been a part of the Mountain Land team since 2017. Christina earned her Physical Therapy Assistant degree from San Juan College and has additional training in wound care, manual therapy, and treating geriatric patients.
Christina first became interested in Physical Therapy when she aided her grandma with her Physical Therapy exercises years ago. After seeing the benefits the therapy provided her Grandma, she knew it was a profession that was a perfect fit for her caring and compassionate nature. Christina also spent time as a therapist in a Nursing Home where she performed wound care when needed. Christina values the well being of each patient tremendously and always focuses on providing consistent quality care.
When she's not in the clinic, Christina enjoys gardening, fishing and spending time outdoors.


text:
The Sussex Tech varsity wrestling team opened the season against Henlopen North powers Caesar Rodney and Smyrna before COVID-19 halted the Ravens' season. Sussex Tech used its experience to defeat the young Seaford team, 48-25, last Saturday in Georgetown.
"I was pleased with the work of the kids. Our experience, I think, prevailed today," said Sussex Tech head coach Scott Layfield. "David's (Seaford head coach David Rogers) going to have a good team."
Sussex Tech junior Isaac Soto-Perez (106) opened the dual meet with a 17-3 major decision win over Seaford sophomore Carlos Munoz. Ravens senior Jason Tharp (113) pinned freshman Julian Bowland with 24 seconds left in the first period.
In the 120 pound match, Sussex Tech's Harold Baker and Seaford's Denzel Altenor were knotted at 3-3 through the first period in a battle of freshmen. Baker held a narrow 5-4 lead after two and added an escape in the third period for a 9-8 edge before winning, 14-8.
Ravens senior Hunter Ruff (126) recorded a pin with 31 seconds left in the second period and Seaford sophomore Quanteve Hanzer (132) returned the favor with a pin with 26 seconds remaining in the first period to make the score 19-5 (Seaford lost a point due to an unsportsmanlike penalty earlier in the match).
Sussex Tech's Abdiel Soto-Perez (140) won by fall with 46 seconds left in the first period. Seaford's Cole Willey (145) recorded a pin with 47 seconds to go in the first before Ravens senior Parker Selzer (152) won by forfeit to increase his team's lead to 31-11.
Seaford sophomore Sean Martinez (160) held off Christopher Lewis, 8-2. In the 170 pound match, Seaford sophomore Zachary Holmes held a 2-1 lead over Sussex Tech junior Joseph Kane through the first period. Holmes took a 6-4 lead early in the third period, but Kane picked up a point on an escape and later had a reversal with three seconds left in the match for the 7-6 victory.
Sussex Tech's David DiCampli (182) recorded a pin with 50 seconds left in the opening period, Seaford freshman Hunter Durham (195) won by technical fall (19-3), and Blue Jays sophomore Sa'Muary Long (220) added a pin with 1:42 remaining in the second period of his match. The Ravens' Seth Layfield (285) added a win by forfeit.
"That was pleasing to see the kids go out there. The conditioning, with the masks, is tough but the kids don't make excuses," Layfield said of his team, which was fielding a full lineup for the first time this season.
The Ravens are scheduled to face Dover, St. Mark's and Cape Henlopen this week. "It's just getting the kids ready for the state tournament," said Layfield.


text:
Anzola Charcoal Dress
The Anzola features a high neckline with an open back and ruched elastic strap cut out detail. The waisted skirt skims in all the right places and falls perfectly at the mid-calf.
80% Linen, 20% Cotton
Slip-on styling
Side pockets
Midi silhouette
Machine wash
In-seam side pockets. Fully lined.
Crew neckline
Elastic waistband
Open back elastic strap detail
Side seam pockets
Fully lined
100% European Flax Oeko-Tex Certified Linen
Gentle machine wash
Cold water only
Do not tumble dry
Do not bleach / soak
Line dry in shade
Warm iron
Fits true to size - some stretch to due to elastic back + waist
More questions regarding size + fit? email firstname.lastname@example.com for support
Please be sure to check policy pages for shipping, returns + more here


text:
Magic Multiples – Huge Value Bets For Horse Racing
The Magic Multiples is a service taking advantage of value betting opportunities on UK horse racing and has already built up an exceptional record of profitability from a series of doubles, trixies, yankee, heinz bets and more.
The exact nature of which multiple bet takes place each day depends upon the number of selections advised, but its an extremely easy and effective service to follow in the quest for big winners!
Overseen by 'The Betting Man', who already oversees a Hall of Fame rated racing tipster service, his Magic Multiples offering takes advantage of profitable opportunities by combining several bets together and compounding value.
So if he spots 4 tips offering value on the same day, he will advise you place them in a yankee bet, if he has 5 selections, he advises a super yankee bet. Full details on how it all works can be found below, but its very easy to follow – just read his daily bets and instructions!
This service has been proofed internally to the Smart Betting Club since June 2020, since when it has advised 259 bets and made a profit of 214.5 points @ 86.75% ROI at advised prices. Those of you with access to Best Odds Guaranteed offers will have increased that to 313.1 points profit @ 126.63% ROI!
As a subscriber you get access to the following…
- Expert horse racing tips delivered straight to your inbox.
- Full guidance on the staking for each daily multiple and the type of bet to place
- A profitable service since 2020 with results independently verified by the Smart Betting Club
Magic Multiples Profitable Record
Since June 2020, the service has generated the following profit at advised bookmaker prices:
- 408 bets
- 236.65 points profit
You can view the ongoing results via this Google Sheets link.
Get All Of Magic Multiples Tips Free With SBC Membership
All tips are available to all Smart Betting Club members free of charge with each tip supplied via direct email.
If you are not an SBC member and wish to join to access these tips and those from the other free tipsters we provide, Subscribe to SBC now and then return to this page to find the link to join his mailing list.
If you hold an SBC membership, login with your username/password and return to this page to discover how to sign-up to get all of his tips for free via email
Service Nuts & Bolts
About: Overseen by 'The Betting Man', who already oversees a Hall of Fame rated racing tipster service, his Magic Multiples offering takes advantage of profitable opportunities by combining several bets together and compounding value.
Bet Timing: One daily email sent out late morning/midday time including the selections. This timing enables you to have the best chance of taking Best Odds Guaranteed prices and to take advantage of concessions offered by bookmakers such as Betfred, which can be very powerful for a service like this.
Bet Type: A variety of multiple bets – depending on the number of selections
Bookmakers: Any offering the highest value odds or those with whom you have Best Odds Guaranteed. Placing with some bookmakers like Betfred who pay out a bonus on several different multiple bets is a great angle to take advantage of.
Number of Bets: One multiple per day.
Staking: Most days will see an investment of around 1 point a day so if you set a bank of 100 points using £1000, your 1 point unit would be £10. The multiple stakes are set as:
2 selections = Double – 0.75pt so that would be £7.50
3 selections = Trixie – 0.25pt so that would be £2.50 (4 bets of £2.50 totaling £10)
4 selections = yankee – 0.09pt so that would be 90p (11 bets of 90p totaling £9.90)
5 selections = super yankee – 0.04pt so that would be 40p (26 bets of 40p totaling £10.40)
6 selections = heinz – 0.02pt so that would be 20p (57 bets of 20p totaling £11.40)
7 selections = super heinz 0.008 so that would be 8p (120 bets of 8p totaling £9.60)
8 selections = Goliath 0.004 so that would be 4p (247 bets of 4p totaling £9.88)
Please note on days when we have 6,7 or 8 selections, we also advise placing 2 trixie/yankee bets alongside the heinz, super heinz or Goliath bet so those days we will be investing around 3 points in total.
Betting Banks: Magic Multiples advocate a 100 point betting bank for those following in his selections.
Access To All Our Free Tipsters!
To access this winning tipster and all our other free tipsters you will need an SBC membership.
Our memberships are currently the lowest price they have ever been, with the chance to save as much as £21 if signing-up today.
Annual Membership – Was £129.99. Now ONLY £108.99. SAVE £21
Comes with a 90 day money back guarantee
Bi-Annual Membership – Now ONLY £74.99 per 6 months.
Comes with a 30 day money back guarantee
Quarterly Membership – Now ONLY £49.99 per 3 months.
Comes with a 30 day money back guarantee
With our paid memberships you get access to all of our profitable FREE Tipsters
All this at crazy low, super affordable prices that you will often make back immediately on tipster discounts and profits.
Cast-Iron Money Back Guarantee
To go with our low prices we have our 30 day and 90 day no quibble money back guarantees.
Quite simply, if you decide for whatever reason it's not for you at any time during your first 90 days (annual subscriber) or 30 days (bi-annual or quarterly subscriber) then you can claim a FULL refund.
We're so confident that you will benefit from an SBC membership that we will refund your fees up to 90 days later!
So why not join today and see what a difference an SBC membership can make to your betting.