Yep Yeah, it was awesome to be back out there man with the guys again Like you said it's been since two pre seasons ago that I've got to get out there really and play quarterback But it was awesome to be out there with the guys and and they come out with a whim for sure Yeah, I think so, you know, we ran the ball really well You know had a had a couple misfires early kind of got settled down a little bit And we started playing some good complimentary football, but overall I thought it was a pretty good night. Yeah Yeah Yeah, they definitely were blitzing a lot but I just got to do better of recognizing it early I'm trying to help the old line out and get the ball out quick I think as the game went on I tried to do a better job of that But yeah Arthur was definitely getting after me a little bit tonight, which was pretty funny I didn't talk to Dean after the game, but you know, it's football and it was good to see for me Just because you know, you see the blitzes in practice, but to get out there and actually get hit and realize You know, what's going on. It was good. It was good. Yeah I think me and Mason have spent a lot of time together, you know going back the last summer and then this summer Done a lot of throwing. He's always been there He's always been a guy I could count on throwing in the offseason and just carrying that over Tonight and through training camp. I think it's it's been beneficial for us, you know that work in the offseason It's really paid off for us. So it's been good Yeah, I missed bad early You know, it was a ball that if he could have got it and kind of took off for a long one And I told him when we got on sideline that it you know I just give him another shot and we got down the red zone and his number got called and I wanted to give him a Good ball and he went out and made a great play Yeah, I think it was business as usual You know a lot of a lot of young guys at first time playing in the NFL game So it was good for them to get in there and you know We just kind of took that approach just one drive at a time one play at a time and just a lot of communication in the huddle And you know, I think we did a good job. I think everybody for the most part was just pretty locked in You know, just common chatter here and there just trying to get guys going and try to be a leader in the huddle But for the most part, I feel like everybody was locked in and it was not it was good I think was that the job that we handed it off a couple times I think it we just really wanted to get the run game going and You know get that off the offensive line doing a good job of moving the front and you know I had a good opportunity for Tucker to come out kick a field goal. So it was good


TheCube presents HPE Discover 2022, brought to you by HPE. Welcome back to HPE Discover 2022. My name is Dave Vellantem here with my co-host, John Furrier. John, we've been watching the evolution of HP to HPE. We've seen Green Lake when Antonio Neri, I called it, I called it Burn the Boats. He goes, no, no, no, it wasn't Burn the Boats. I said, okay, burn the bridges, but it was all in on as a service on Green Lake. And we're going to talk about that. Brad Shapiro is here. He's the vice president and managing director of the enterprise business at HPE Financial Services. Brad, good to see you. Good to see you as well. Yeah, you guys got it all started when Antonio was trying to lay down the gauntlet and said, this is where we're going. Let's make it happen now. Of course, the first place he turned, I would imagine, is the financial services. He said, okay, how do we start this today? Can you help us? And they take us back to that. Yeah, sure. Yeah, HPE Financial Services, it's kind of a foundational element because when you think about it, asset management is really what we're doing here. And I know asset management's a big word, right? And it can mean lots of things to different people. In this context, we started looking at how do customers manage assets over the life cycle? And a lot of customers, while they were interested in a consumption model and looking at Green Lake for their private cloud, they were certainly looking at public cloud for certain workloads. And then maybe even traditional data center for other activities that they're running. So it's really that hybrid environment. But they were stuck going, well, hey, I'm in a CAPEX model today. How do I get out of CAPEX and really get into this hybrid model? And that's where asset management comes in. So one of the biggest initial focuses, and we continue to have that focus, we call it our accelerated migration offer. And it's really us going in and acquiring the customer assets, moving it on to HPE's balance sheet, and then figuring out what are we gonna do with those assets, which are gonna stay in use under a consumption model, which are excess, and we can put through our asset upcycling process. We monetize the majority of that, put that back into reuse, and then maybe a small amount gets recycled. So really focused on the assets and accelerating customers transition to green light. Did you see, or are you seeing a difference between traditional leasing customers who already kind of on that model, versus like what you just described as sort of the CAPEX was more complicated, you got to get, I presume, procurement involved, legal issues, and was there a lot less friction with the leasing customers? Well, you know, I look at leasing and financing very similar to CAPEX. It's a much more traditional model versus this new as a service experience. So if they were in a leasing model, we could convert those leases into GreenLake. I wouldn't say one was any more difficult than the other. They were both really traditional mindset and not really looking at a consumption model. So I think we had our fair share of both, and I think we have, and are able to address, both customers moving into a consumption model. Brett, how does this tie into sustainability because we have on one end of the spectrum the high end sustainability, the science and the behind it. Tactically speaking, companies still now want to operate in this kind of, there's a sustainable angle here. Talk about that piece of it. How does that tie in? Obviously consumption versus CAPEX, you're building, you're not building. What does that thread through the sustainability angle? Yeah, so first let me just say, sustainability is really important to our customers. And we're seeing it all over. It is real. The good thing is that you can get business value out of the solutions and have a more sustainable model. So when I think about, and I talk to customers about sustainability, there's a number of fronts they're focused on. One, their customers believe it's important. So they're focused on making sure they're driving sustainable models. I've seen an increasing number of customers, both commercial and public sector have sustainability requirements in their tenders, in their RFPs, and you have to be able to comply with those. Second, they look at it and go, how do I attract talent? It's increasingly important for them to attract talent. And then really if you- Because they want to work for a mission driven company that's sustainable. Absolutely, absolutely. And the third area is investors. The investment community is now looking at ESG in whole and certainly environmental impacts in where they're making an investment. So a quick personal story. I was talking to a friend of mine who works for a hedge fund and he was telling me over the last year they've hired a whole team that's focused on just doing analysis of companies ESG initiatives, determining where they're going to invest their money. So it's a Wall Street thing now. So this is real from a number of angles where sustainability has an impact. Now, how we play in that, clearly when you go to a Green Lake consumption model, the idea is improving utilization of the asset. So driving higher utilization means you need less assets. Over time, the secret is we're going to sell you less. You're going to have less assets but you're going to have higher utilization. That's good for the environment. Where HPFS comes in is when those assets are done, we put those assets back into reuse. So we have remarketing facilities, one in Andovermass, one in Erskine, Scotland and then we have 80 different facilities. We have partnerships around the world and our focus is how do we drive more reuse? 85% of the assets we get back go into reuse and when you look at servers and PCs and things like that, it's over 95% go into reuse. So a real focus on reuse is good for the environment as well. And then needless to say the new technology that goes into a Green Lake deal, we're seeing like 30% energy savings coming out of those environments. So all really good stuff related to this thing. It's interesting, I mean a couple of points there is one is, you know, Benioff kind of got it all started. Pre-pandemic, he was out talking about, you know, sustainability and ESG and a lot of people were like, no way, it's all about bottom line profits. So he was ahead of that and I guess, you know, back to Lisa, you were always in the residual value game but now it's a little different, isn't it? Yes, you got to figure out what the value of that asset's going to be but also there's a sustainability aspect of it as well. Yeah, absolutely and the pretty cool thing here is while you drive sustainability, we're also seeing customers that go into Green Lake. We had a good example with Kern County, a 42% savings over their capex environment when they moved to Green Lake. So it was better for the environment and significant savings.  You get better environmental impacts and you're getting better bottom line performance. There's a business case there too. Now, we kind of, I was talking up front about the early days of Green Lake it was a financial model and now it's evolving to actually a technology model. We heard Fidelma with the platform. How has that, or has that changed the way that financial services, your group, approaches the market? Yeah, so it's a great point. When people talk about Green Lake, they think about the old days and look, I've been around a while, I remember the flex capacity. Yeah, of course. This isn't flex capacity. I mean, the platform's amazing and it really starts to bring to life the whole thought when we talk about hybrid. There are workloads, sure they might belong best in the public cloud. There are workloads that belong best in the private cloud under the HPE Green Lake model and there are still workloads that customers may say, hey, look, I've got legacy applications. I'm going to continue to run them in a traditional data center. And so from an HPEFS perspective, we look at this not as a leasing and financing company, we're looking at this on how do we leverage the customer's existing assets? How do we create incremental budget using those existing assets? And then what kind of model best serves that workload and then how do you optimize the capacity and the spend on that? So, you know, an interesting note, in the past year, we put $500 million back into customer budgets by just leveraging their existing IT estate and it's not all HPE product. You know, we're monetizing third party products in the data center, in the network, in the workplace. So we can really look at, we call it any tech, any time, anywhere. We look at all the technology and really assess what's the best way to leverage that investment and get the most out of it. Yeah, I mean, it's really evolved from just recycling assets for profit, but integrating the business model into the value proposition, the core value proposition in GreenLeg. That's great innovation and congratulations on that. My question for you is more kind of zooming out at the market. From your perspective in financial services at HPE, what has the pandemic proven to you guys? How has it changed how you guys work and how has it changed the customer environment? Because you mentioned assets, I think real estate. Oh, no one's going back to work. No one's been in the office. How has the market changed with hybrids as a steady state now coming out of the pandemic? What are customers doing with the assets? What are some of the trends that you're seeing in the customer base? Yeah, so look, I'll give you my personal perspective of what I think about as a business leader. And when I talk to customers, I think we're all thinking about the same thing. So I start with experience. What experience do I want to create for my customers and very closely linked to that, my colleagues, right? So the people working in our organization, what experience am I creating for them so they can in turn create that experience for partners and customers externally? So experience is one thing. The second is innovation, right? We spend a lot of time thinking about what's next, where do we want to go? What's the innovation? And more and more that innovation is all digital, right? So digital transformation is huge within my organization and it's huge within all of our customers. Dave, I think the last time we talked, I was in my living room on a little laptop screen in Zoom and I think I used the analogy, every business is now a digital business, even my pizza shop in Jersey, right? I mean, everything was online, curbside pickup. So what I'm finding is the trends in terms of how to leverage technology is how do you create that customer experience and then how does digital now blend as we're coming out of the pandemic and you're now able to go into restaurants and stores? How do you blend digital with that in-person experience and maybe leverage the best of both, right? And how do you do that in a seamless way to really give customers choice and give them that smooth, seamless experience? So that's what I see happening and what we're trying to do with our asset management plays with the financial modeling we do is how do we get more of that spend going to innovation versus maintenance? And that's a big key because you have to be fast. So I talk about innovation, I talk about customer experience, speed to market. I mean, in the bar keeps getting higher, right? It's like, as soon as you think you're fast, you're slow because you have to keep, the ball keeps rolling. We heard yesterday on theCUBE from one of the HP Point Next executives said, you got to perform and transform. At the same time. At the same time and you got to know where the people are going to land and how the assets are going to be distributed. And to your point, Brad, from our virtual interview, you're so right. I mean, every business has to be a digital business and my personal story, and John, you know my brother, Rich, he was the executive chef at Legal Seafood, right, pandemic, so then that was a place, you wanted to go to that restaurant, the famous restaurant in Boston when they reopened, they weren't ready, right? They didn't have the digital story together. They ended up having us, we were just at Smith and Walensky's. They end up selling to Smith and Walensky's and you drive around, you see, a lot of these retail businesses are shut down, right? And so, okay, so they weren't able to get through that, cross that chasm and digital transformation. A lot of businesses were able to and make it a tailwind. Yeah, and look, the other thing I think all businesses are focused on right now with the labor market is talent. And so, when you think about all of these things tying together, you want to drive, you know, innovation, you want to drive your digital transformation, you want to make that environmentally sustainable and I think all of that, if you start putting all that together, those are the companies that are going to attract the talent in the marketplace and really there's a battle for talent. And you want to make it profitable. Of course. Brad Shapiro, thanks so much for coming. Thank you. Great to see you face to face. Yeah, likewise. Thanks. All right, keep it right there. John and I will be back. We're wrapping up day three of HPE Discover 2022. You're watching theCUBE.


Random assignment or random placement is an experimental technique for assigning human participants or animal subjects to different groups in an experiment e.g., a treatment group versus a control group using randomization, such as by a chance procedure e.g., flipping the coin or a random number generator. This ensures that each participant or subject has an equal chance of being placed in any group. Random assignment of participants helps to ensure that any differences between and within the groups are not systematic at the outset of the experiment. Thus, any differences between groups recorded at the end of the experiment can be more confidently attributed to the experimental procedure or treatment. Random assignment, blinding, and controlling are key aspects of the design of experiments, as they help ensure that the results are not spurious or deceptive via confounding. This is why randomized controlled trials are vital in clinical research, especially ones that can be double-blinded and placebo-controlled. Mathematically, there are distinctions between randomization, pseudo-randomization, and quasi-randomization, as well as between random number generators and pseudo-random number generators. How much these differences matter in experiments such as clinical trials is a matter of trial design and statistical rigor, which affect evidence grading. Studies done with pseudo- or quasi-randomization are usually given nearly the same weight as those with true randomization but are viewed with a bit more caution.


The Cavalcade of America presented by DuPont, maker of better things for better living through chemistry. Tonight the Cavalcade of America comes to you on a different day and to many of you at a different time. To our old friends and new friends alike, we say the Cavalcade is for you. If you will write and tell us which Cavalcade programs you have liked best in the past or would like to hear in the future, it will help us to select the best subjects for our future broadcasts from among the great number we have under consideration. Just address your letters or postcards to the DuPont company, Wilmington, Delaware. The Cavalcade of America presents the distinguished American actor, Paul Mune in the role of one of the most renowned players in the history of the American stage, Edwin Booth. Supporting Mr. Mune are the Cavalcade players in our original radio drama written by Norman Rostin. Our orchestra and the original musical score are under the direction of Don Vouries. DuPont, maker of better things for better living through chemistry, presents Paul Mune as Edwin Booth on the Cavalcade of America. A winter's night in the year 1873. It is three o'clock in the morning. Outside Edwin Booth's theater in New York City, the storm is still raging. Inside in the hushed gloom of the deserted playhouse where Edwin Booth made his home a figure appears with a lantern upon the empty stage. Then crosses into the wings and on through a heavily beamed door. Mr. Booth. Mr. Booth, wake up. What? Who is it? It's Gary, sir. You told me to wake you at three o'clock. Oh, yes. Yes. Help me with my coat, Gary. Yes, sir. Thank you. Now fetch the lantern, please. We're going to the furnace room. Is anything wrong, sir? No, Gary. Another thing. Except that I'm an old man. Wait. Let me stand here on the empty stage a moment. Nothing is as lonely as being in the middle of this dark universe. Yes, Mr. Booth. So strange and silent in the feather this hour of the night, isn't it, Gary? A little frightening, eh? You'd better take my arm, sir. Thank you. Here they are, sir. Good. Close the door, Gary. Yes, sir. You have the furnace man banked the fires as I ordered. You can see for yourself, Mr. Booth. Come here. Now we'll have those flames roaring soon enough. Gary, to that trunk. Help me drag it over to the furnace. Yes, sir. That's it. Now take that axe and cut the cords around it. Mr. Booth, you can't. You're not going to burn those cords. Let cords, Gary. Or I'll do it alone. Good. Now we'll open it. But it smells of death, doesn't it, Gary? These costumes look pretty, eh? They shall look prettier in the fire. You don't quite understand, Mr. Booth. I've decided to destroy a few ghosts. That is all. And the fire is strong now. It reaches out like little red hands. I've brought many gifts for you. All these costumes, these colors and capes and plumes. You will make ashes of them. Even the applause shall go up into the sky and be heard no more. Miss Cloak, you see it, Gary? Yes, Mr. Booth. It was my brothers. Your Cloak, John Wilkes, you sure haunt me no longer. You've given me enough grief for two lifetimes.  But yet so well, so royal. Mr. Booth, I can't bear to watch. Next this satin waistcoat and silk stockings and these velvet Othello slippers. And this jewel-studded shirt. Yes, I shall burn them too. You can't do that, Mr. Booth. How beautifully you posture in them, John Wilkes. How dazzlingly you walked with silver spurs. And what is this? And it's belted purple robe, trim with fur. My father's. I remember he had it for many years. Look at it now. Ancient, musty and torn. My father. He looked so kingly in this robe, Gary. Yes, sir. It takes me back to the first time I played a leading role on the stage.  It was Richard III. We're in Boston. I was alone with my father in his dressing room just before curtain time. Well, Edwin, how does your father look tonight? Handsome, huh? Very much like a king, father. I am that every inch King Richard III. Junius Brutus Booth is always ready. Set him upon a stage and call out the name of the play, and you shall have it. I seen by seen. My conscience hath a thousand several voices. Your tongue's father. Simple light of you to be correcting your father, Edwin. I'm a genius, lad. There can't be more than one in any family. You see these spurs? A mark of genius. My father wore them before me. They'll never be worn by another. I could but try to earn them. Curtain ready to go up, Mr. Booth?  That's your role. Father, why is it always the prompt book? And when shall I stop throwing lines to others? When I hold the prompt book, father, and the curtain rises, I become wondrously alive. There's a feeling of flying in my heart. My eyes open up on a kind of heaven. Is the true feeling, lad? I shall drink to it. To your dreaming. No, father, not after what happened in Hartford and last week in Providence. You're too great a man for that. I can't expect me to storm my way through five bloody acts of Shakespeare without one drink for each opinion. I feel better. No, I feel...faint. Father, what is it? I feel strangely ill. It's down here, son. Help me, Edwin. You're on in a moment. Mr. Poole. Edwin, what's happened here? What's the matter? Shall we haul the curtain? Hmm, same thing, Edwin. I don't think so, Mr. Scotty. Just all of a sudden fainted. Fainted? Drunk again. Don't say that. I'll say what I like. Quiet, quiet. There's a full house out there. What do we do? I know the lines, sir. Let me go on. I play Richard like all the kings in history. I'll play it with my head, my heart, my very blood. All right, Edwin. Get into the costume. I'll make the announcement.  Tell Edwin to be ready to go on as soon as I finish. I'll be briefing up. Listen, and somebody pray... Ladies and gentlemen, owing to a regrettable and unforeseen illness, Mr. Junius Frutus Booth will be unable to appear. In his place, in his place our company is proud to present Mr. Edwin Booth, the son of Junius Frutus Booth, who will essay in his father's stead the role of Richard Thurston. All right, I'm ready. I'm here. Let me fix that wager.  Thank you, Edwin. I'll pin the coat to your shoulder. Then you won't have to hold it. All right. All right, lad. Here's your chance. Ready? I am, sir. Bring out the curtain. Edwin, good luck to you. Oh, thank you. Thank you. Go out there, lad. You're on. I shall never forget that night, Gary. For the first time, my heart told me I was alive. I felt an awful silence like this empty theater above us. No sense of time nor space, nothing. I was alone in the universe. And then after an eternity, I seemed to hear somewhere from afar off the voice of Richard. Now is the winter of our discontent made glorious summer by the sun of York. Yes, it was I. I was speaking lines, Gary, the lines of Shakespeare. I was on the stage. I won my father's spurs that night. Yes. And wearing this very robe. Mr. Booth, sir, please don't burn that robe. I must, Gary.  Into the fire, I say. Yes, we shall purge by fire in more fire. Come now, what else have we? There's a setting cloak, Mr. Booth. Ah, that cloak? Romeo's cloak? Let me hold it a moment. For she held it once with me in it in the realms in life. I played Romeo once to the sweetest Juliet that ever lived. I've played Romeo many times, Gary. But only once did I find my real Juliet. I spoke to me as I was rehearsing the play with my company all through one long afternoon. That will be all. I believe we've had enough rehearsal for today. Oh, Miss Devlin. Yes. Would you stay? You want to scold me after school, is that it? Oh, no, not at all. You read very well. Someday shall I play opposite you then? Am I that appealing a Romeo? Oh, yes. Well, that is, we do read well together. Now, if you put the question to me, am I that appealing a Juliet? I should not know how to answer. Am I that appealing a Juliet, sir? Yes. Well, that is, we do read well together. Mary, there's so much I should like to say. Yes. But I don't know my cues here. There are no cues but those of the heart, and they're found in no prompt book. I can only recite a speech in blank verse, but that would be inadequate for you. I don't want a speech from Shakespeare. I want a few mere lines made from both. I find it difficult, Mary, there are lines in my head, but I've played them too often. There seems to be no speech for you. Perhaps then it's not the time for speaking. Thus for my lips by yours, my sin is purged. Juliet, my Juliet. Edwin. It shall not be easy for you. My work has already taken half my heart. But there must be a small warm place left for me to dwell in. I should be content as a minor heroine. You should be all my heroine, and most of all, my Juliet. But, Gary, it wasn't that the way it is in the play. My Juliet died first. Had I been the true Romeo, I should have been at a side as it was written. But no. My role was hamlet. Always hamlet. I never knew what was happening around me. Life always passed me before I could touch it. And it was that way with my own wife. I never understood what there was for me to do. I never acted, but that it was too late for action. You turned to be leaving in a moment. I shouldn't let you go by yourself. No, you couldn't nurse me anyway. All I need is some rest. I'll be ready to assume my duties again. Such as they are. Oh, but they are important to me. Suppose I cancel the hamlet tour and we'll go off together. Oh, but you can't. The tour is scheduled. You can't run away from your audience, not Edwin Boone. I shall become ill then. Better. I shall arrange to cut the tour and return home a month earlier. There. Whenever you're through, my darling, you're calm. I should be there waiting, just like a minor heroine. Oh, Mary, I really shouldn't let you go. Somehow I shouldn't. I shouldn't leave you. Goodbye. Play well, my dear. I should be with you somewhere in the applause, near you somehow. Left me that way, and I didn't know she was going off to die. And while I strutted the stage like a fool, she was like patience on the monument, smiling at grief. I never saw her alive again. She died, and then they told me. I was, I was even late for her death, Gary. I was late for all my queues, Gary. All my queues. Hand me that book there. Oh, no, Mr. Boone, no. All your notices are in this book. Thousands of clippings. It's your history, sir, the record of your art. My art, Gary. My art. Was it me? Was it Edwin Booth? Or had I become the part I played, and was the applause not for me, but for Hamlet? And was it really for Hamlet? No, it was for himself that each person wept and wondered. I made them each a Hamlet to suffer and die and be born again. That is the art of the player, Gary, and it is true real for even this fire to consume. I shouldn't have let you, sir. I shouldn't have let you do it. Enough of this talk, Gary. What else have we there in the trunk? Hmm? Those sandals. The cursed sandals of my brother John Wicks. There was the weight that pulled me down. There was the curse that blotted out my sun, my moon, and stars forever. God have mercy on your soul, John, for I have none. Caesar was a clay. I was Brutus, a new Anthony, John Wicks. That night when evil darkened my sky like a great cloud. To speak what I do know. You all did love him once, not without cause. What cause withholds you then to mourn for him? Judgment thus led to Brutus' death, and men have lost their reason. Now, wait a minute. Listen, everyone, listen to me. Southern blood is the rich red blood of the pioneers. It's trenching this soil now. John Wicks, you fool, have you lost your mind? But blood is being spilled by that abolitionist Abraham Lincoln. Drive him from the White House, I say. You listen to me, everybody. The day of judgment is at hand, I tell you. Abraham Lincoln is a traitor. Stop it.  I won't have any speeches, but those are the texts. Do you hear me? I have a speech to make, and by heaven I'll make it. By heavens, you won't. The presidents of the United States will not be desecrated in this house. Bring down the cartons. Why do you stop me? I didn't yet, but I shall now, with my hands, I'll tear your lying tongue from your mouth. Stop it, stop it, stop it. Here, here. I'm not doing this, both of you. Mr. Boone. My hands weren't held now, brother. I teach you in blood. Never mind the brother. I am a patriot.   Get out of this company. Good. Good. I have other things to do, not with words, but by deeds. We shall hear about the name Booth very soon. I never saw him again, Gary. He went away. I didn't know where. The months went by, and I dreaded the days and nights. I feared something would happen. And on one frightful day, Gary, my world came to an end. Unexpectedly, silently, without flood the earthquake, but by a simple act, my star was taken out of the heavens forever. What is the bell's ring for today, Patrick? It is holy work, sir. A special week for the bells, it is. Oh, yes. Is that the theatre ahead? Oh, it is, Mr. Boone.  It's a place for worship. But the worshipers have a way of changing their guard. Right, you are, Mr. Boone. And remember it had the old lady that. Here we are. Call for me at 5.30, will you, Patrick? 5.30, it is, sir. Good afternoon, gentlemen. Good afternoon to you all. Come on down from that carriage, you... We may kneel, Boone. We'll show you with a rope. But I... I don't understand, gentlemen. Assassin, done with it, Boone. Pull him down. Let me through, please. It's not your first day. Excuse me, let me through, if you please. Don't let him get away. What's going on, Stanley? Mr. Boone, we... we've had to cancel this afternoon's performance. Cancel? That's impossible. Is anyone ill? What was happening? The point is, it's all very sudden. Haven't you heard? What's happened? Speak, man. Those bells, sir. Haven't you heard? The President. Mr. Lincoln is dead. Tell me, Stanley, there's more. He was shot and killed by John Wilkes Booth. Mr. Booth. I will speak to him. He's cut. That crowd is wild. There. They've mistaken me for someone else. I'll explain it to them. I'm Edwin Booth. Don't they understand? Better not leave by the stage door, Mr. Booth. Go out by the front of the house. I'll go with you, sir. No, Stanley. No, I'll go myself. I must go myself. I must face this alone. You're very well, John. Fire becomes you. Fire has touched you before. Was it not a bond they set fire to?   And take you out of my life forever, John Wilkes. You are beautiful in ashes. Come, Gary. You have finished now. Close the door of the furnace. Okay, players, for their performance of Edwin Booth. And now DuPath brings you news of chemistry at work in our world. For centuries, the only cooling agent known to man was natural ice. Later, manufactured ice. Then, 20 years ago, the home-sized mechanical refrigerator made its appearance. Using it, 30 million American families today manufacture their own cold, cheaply, efficiently, and hygienically. The main spring of your mechanical refrigerator is a chemical fluid called a refrigerant, which circulates in the system, absorbs heat, and carries it to the outside air. Spectacular progress in refrigerating engineering has gone hand-in-hand with chemical research on new and better refrigerants. The result of this research is Freon refrigerant, efficient and safe. Today, stores, office buildings, theaters, railroad trains, buses, and homes are air-conditioned with Freon. Printers depend on Freon air conditioning to eliminate variations in humidity that would throw their fine multicolor printing out of register. New airplane factories are being air-conditioned throughout so that constant temperature may be maintained and tolerances of ten thousandths of an inch achieved on engine parts. With quick frozen foods, we now have corn on the cob in midwinter, and fish comes to us with the precious vitamins intact. Aided to by another chemical contribution, cellophane cellulose film for packaging, the frozen food industry is rapidly becoming a potent force in our national food supply. The laboratory story of Freon refrigerant is a thrilling one. It was known that such a compound existed. There was only one known way to make it, however, and it cost anywhere from five to fifteen dollars a pound. Then one day, a young DuPont chemist scribbled a curious chain of symbols on a pad. Beginning with charcoal, sulfur, common salt, and floor spar, he had mapped a new trail to a laboratory curiosity. Di-chlorodifluoromethane. Mechanics worked all night making the apparatus for his experiment. In the morning, it was ready. The first day, no results. The second day, down from a slim steel tube, fell twenty-two drops of Freon. Just twenty-two precious drops. Today, those twenty-two drops have become millions of pounds a year, and the price has been reduced to less than one-tenth of its original cost. And Freon's safe refrigerant has been added to DuPont's diversified list of better things for better living through chemistry. Next week, The Cavalcade of America presents an original radio drama by one of America's most distinguished playwrights, Maxwell Anderson. It's a story of John Keeps and America. We hope you'll join us on Cavalcade at the same time next week. On The Cavalcade of America, your announcer is Clayton Collier sending best wishes from DuPont. This is the national broadcasting company.


How you think about things and what your mental approach is matters Hey, everyone Dylan Schumacher Citadel Defense and I've ran into this concept before but I've been reading a book recently and in the beginning it talked about a Fixed mindset versus a growth mindset and in the book they addressed it a little bit differently than how I'm gonna address it However, I think it's worth considering and thinking about So the basic two dichotomies are once in one hand you have a fixed mindset, right?  I'm as smart as I'm gonna be when I see challenges And this is the big part that I think is helpful. I it's a test I either pass the test because I have what it takes or I fail the test because I don't have what it takes a Fixed mindset most of us by default Probably fall into the fixed mindset category and I certainly have about certain things in my life The other one would be a growth mindset, right which primarily views challenges as A way to grow and improve so I get to a challenge and I meet the challenge And I'm able to Grow and improve through the challenge the challenge helps me grow into a more proficient shooter a better person Etc. Etc. And those I think are really good big dichotomies Sorry, I'm in the middle of a lift here. Those are really good dichotomies for how to look at the world, right? And and how to approach the world in your life in general I don't want to give anything away here So I'm just gonna say I was in a class with an instructor once very good instructor And I remember him telling us Hey He gave us this test that most of us failed and I failed it and I was Superman and he said failure should feel good Failure should feel good because then you know where you need to grow Right, and I remember sitting there think feeling like crap and thinking this doesn't feel good I don't feel good at all.  I remember being mad about it But in some ways I was fulfilling what he was saying, right? So I was growing, right? But I think that's an important way to look at it when I've gone to a lot of gun classes and when I go to gun classes And for my first I don't know 80% of my gun classes. I definitely had the fixed mindset mentality I'm gonna go into this class in this class as a test. I remember like prepping for classes being like I'm gonna I gotta go to this class. I gotta I gotta perform. I gotta be good It's a test and I'm either gonna meet it or I'm not right That's how I looked at test and our classes and I thought that was a good way to look at it It's embarrassing to admit on the internet, but that's what it is, right? I thought that that was a pro a good way to look at it And now as I've taken more and grown more I look at it as like, you know what? I'm gonna show up to this class I'm gonna learn as much as I can. There's gonna be things. I don't do well That's why I'm going to the class to learn these things that I don't do well I know I don't know that that's why I'm going to pay money and take time to learn that So that I can do it better, right and you can apply this to just about anything in your life But I think that's an important way to look at it Do you have a growth mindset or a fixed mindset if you have a fixed mindset?  I've been there. I know people who have been there. I've had people take my classes who I see there, right? And I think it's important to be able to recognize that and say wait a second This isn't this isn't what we should be doing I don't need to be concerned with Failing or failing or succeeding here in a class, right?  This is this is the place to not be as good as you want to be and I think that's an important way to look at it We need to grow through the challenges. We go to class We learn things and we're looking to grow you go out to practice today And you're learning things and you did or did not hit your time for your build drill or whatever you're doing and you're looking As that is an opportunity to grow Right and you can quit you can take yourself out of it You take your ego out of it and you quit being so preoccupied with whether or not you Failed or succeeded, right and you start thinking that is a challenge. I need to grow through and I would even argue That extends to real things in life, okay? So if something real ever happens and you have to pull out your gun to save your life That may or may not go the way you want it, right now Hopefully it doesn't go really bad, right like someone dies that shouldn't or something like that But I think you need to look at those as growth opportunities. Why do you think people in the military and? Police organizations do after-action reports after real-life events where people die They do after-action reports. Why to grow through in part to grow through that opportunity Right to be okay. This happened. We're gonna learn some lessons from it and we're gonna move on We're gonna grow through it. We're all still alive So how can we grow from that and I think that's an important way to look at it So I would encourage you if you have a fixed mindset to one recognize it Hey, I have a fixed mindset. That's a problem I'm holding myself back and the problem with you fixed mindset people and again I put myself in this category at times is that you think that you're being responsible Right you oldest children you you think oh, I'm being responsible and I'm I'm I'm achieving and I make holding myself to a standard And I'm really accomplishing instead of being free to take your ego out of it and grow through it Okay, so if you're in that recognize it and then shift to a growth mindset and say I'm meeting Challenges and looking them as opportunities to grow sound super corny sound super business bookie But I'm telling you the way you look at it matters and you talk to any high-level performer in anything shooting professional athletes whatever and They're gonna tell you one of the biggest struggles is themselves and getting out of their own way Get out of your own way allow yourself to grow allow yourself to fail that failure should feel good so that you can grow Hope that's helpful. Do brave deeds and endure


Together we are competing as Nijafoss. An ex-gen mass concept successfully tackles or addresses a matter of problems that can evict the mass-wavering culture.


What is up guys, this is Josh for jasphyscasebrakes.com. We have filled another filler, and this one actually fills the break, so the break's gonna be coming up right after this, with Joe. We're giving away seven spots in the break, and we're giving away six spots in the filler, so the way this is gonna work, we're gonna give away those six spots in the filler, then we're gonna run the randomizer for the actual pack break, and then we will give away the spots in the break, so three separate randomizers, so strap in. So let's go ahead and start up the first one. This is for the filler spot giveaway, so you guys get six spots given away to you guys. Good luck. Seven times, lucky number seven, good luck, and we got 24 in there, perfect. Top six, get those spots, two more times. And seventh and final time, Chris, Logan, Martin, Kevin, Rick, and Logan.  And I'll get rid of the color. Thanks Pat, appreciate it man. There's just so much, just little things, gotta make sure you're doing the little things right, so. Alright, cool, so we got this set, perfect, we throw this into the list right here, and then we got our teams right there, perfect. So this next set of randomization is for the actual break, get rid of that. And it'll be the same dice roll for both, so good luck everybody. Three times, three times, good luck, one, two, and third and final time. There it is, Steve down to Martin. So that was the easy part, let's get into the teams, three times of the teams, good luck everybody, one, two, and third and final time. O's down to the White Sox, alright there are your teams, let me go ahead and do that. Check out your teams right here, there's no trig window for the fillers, but just so you guys can see it, let me print this out real quick, and then we will go ahead and open the actual pack. Search over to here, here's everybody who picked up spots and your teams, there you go, another quick little filler pack right here, and then I think Joe's going to run the break. Alright, good luck everybody, see if we got an auto in here or something, there's silver and another mosaic I think, so let's see, Monty Harrison, Zach McKimstree, Alex Kearlaw, nice rookie there, Edward Oliveris, David Fletcher, Rowdy Tulez, Framber Valdes, Jay Ram, Jose Ramirez, Josh Hader, Nick Solak, Ken Griffey Jr., Silver Paul Goldschmidt, Mosaic Alec Bohm, nice for the fillies, Eyes on the Prize, Sandy Kofax, and a rookie debut of Ryan Mountcastle. So that is going to do it for the pack filler, let's go ahead and give away those spots. So let's go back here, got everybody right here, and this is for the seven final spots, in that dual case, tops chrome black, tops seven get in, so good luck everybody, let's roll the dice, five times on the dice, good luck. And fifth and final time, Harry, Martin, Logan, Logan, Martin, Kevin, and Mark, congrats to you guys, you guys are the final spots in that break, so congratulations, I'm going to throw you guys on the break sheet right now, and Joe will be back here in a second to run the break, so alright, I'll deal with that in a second, but there we go, that was pack filler number 16, yes Mosaic number 16, so I'm Josh, take it easy guys, and good luck in the break.


Hyperion by Dan Simmons. I read this many years ago. I remember I couldn't put it down. The complexity, the scope of it was amazing. This group of characters on an interstellar spacecraft who find themselves traveling together to the planet Hyperion. This creature known as the Shrike, it was horrifying. Any time the Shrike showed up, you were afraid. And then the sequel, it was completely different. It was so bad, it made me never want to read Dan Simmons again, and I haven't. And because of this, I don't recommend Hyperion.


Alpha-fold 2 has originally been developed to provide highly accurate predictions of protein monomer structures. Here, the authors present a simple adaptation of Alpha-fold 2 that enables structural modelling of peptid protein complexes, and explore the underlying mechanisms and limitations of this approach. This article was authored by Tomatsarban, Julia K. Varga, Orliovrom, and others.


XC PNG migrating from other hypervisors so you can migrate from VMware, Microsoft Hyper-V KVM into XC PNG. I reference this because we're going to use some of the same commands in here but we're doing actually a P2V as in physical to virtual. This comes up because well, we like to consolidate old hardware or sometimes when clients have machines that they really need and the hardware may be getting aging and we got to bring that Windows install over to a nice good hypervisor system where we can manage it and keep an eye on it and make snapshots of it and then maintain it for whatever special purpose it may have. But this does work with not just older systems, this works with new systems as well. For our demo here, we're actually going to use a Windows 10 physical box and we're going to use disk2VHD. This is a free utility by Mark Krasinovich over a writer of sister internals. And this is download disk2VHD. So what this does is really simple utility that's going to convert the drive on a physical machine to a VHD and I've already started the process. So it's really simple. This is screen connect slash connectwise control. It is the utility by which we use to manage computers remotely. Remotely for this bigger computer is over on our workbench here at the office. So I connected to it, I'm in here recording and I'm kicking off this backup essentially creating an image. Now it's pretty straightforward. It selects the drives and by default it wants to select all the drives. This is an external USB3 and VME drive. I chose this one because well, it's fast and you have to give it a place to land that isn't the drive that you're actually copying. So these are part of the recovery partitions and boot partitions for Windows 10. This is the C drive for Windows 10 and we copied it over to D drive which is that USB drive desktop demo dot VHD. Now the only thing I had to do was uncheck this little box that says use VHDX because VHDX is not compatible with XP and G so we want to make sure we're exporting these as a VHD file and the other nice thing about this is you don't even have to shut down the system to do this. It's grabbing a volume shadow copy to create this file once you've created it awesome and then you can work on the file separately. It doesn't require me shutting this machine down. Matter of fact, it just moves over the way and now we can start working on the process to get this file moved over. Now the reason I'm referencing the Microsoft Hyper-V section of this is because there's a couple things we need to do. Now because it's already in VHD format there's not any more conversion. This VHD file can be copied over to XP and G. Now the way they said to do this is create a NFS share on that server. Mount the NFS share as a storage repository and these are perfectly good instructions but we can also bypass them for this particular setup and what we have here is I have XP and G with the local storage being EXT. Now EXT versus LVM storage, you can do some reading and search a net with XP and G but logical volume management is block storage, EXT with storage that has files that are completely available on the computer. It would be a lot more extensive and beyond my comprehension, well, beyond the scope of this video and not really comprehension for me to explain how to import them into LVM it's just easier to do it through EXT. Now you can always move them from EXT over to an LVM volume without any conversion within Zen Orchestra itself but for sake of this, this particular system happens to be EXT so that makes this easy. Now let's look right here is the UUID of the local storage. So go over here and we're gonna go and LS, actually I'm sorry, DF-H and we're gonna see run SR mount and that same UUID that we had here. So 136 ending in 87C, ending in 87C. So we wanna copy the files there. So if we go to CD slash run SR, oops, mount, it's a 85. And we see we have a couple of files in here already so great, we have them. Now what? Well we gotta get this one over here. This is my local computer and there I have the one terabyte USB NVMe and desktop demo VHD. Now, one of the instructions is if you notice this inside of here have to have a UUID themselves. So if we look at it, there's the UUID for that. So how do we create it? Well, go over here. UUID gen dash R. So we can go here and this is just utility generate a UUID. So we're gonna do that. Hey, look, we have a UUID. So I'm just gonna copy this. Whoops, gotta get all of it. Copy and we're going to rename desktop to this dot VHD. So now it's in a naming scheme compatible with Zen server. It's just a rename. So now that's that file name. So no big deal we just changed it. So we understand what it is. Now we can go from here and I'm gonna use SCP but if you were in Windows you could be doing these same steps with like a WinSCP to copy things over or learn how to load the bash shell inside of Windows is another way that this would work. So we're gonna SCP and we're gonna take this file here to the C6 and we're gonna go root at 172 16 69.215 that's the IP address of the XTP and G server which we're logged into up here colon slash and we wanna drop that file into here. Come on. Whoops. Copy, paste. And one too many slashes. That stuff matters. And have too many. So now we're just gonna take this file and copy it to this directory here and I'll speed this up cause it's take about four minutes and 50 seconds it'll get this file copied over. All right. So the file has been copied over and it's here and all set. So we now should see it inside of the Zen server, right? Dis, not there. Well, easy enough to set rescan dis. There we go. So this is our Windows 10 demo. Now the metadata around the dis name isn't there. That's where we're gonna name it now. So Windows 10 demo. They spelled Windows wrong. Probably DOWS. So there's our Windows 10 demo disk. We'll give it a description too. Demo drive. There we go. And as you can see, it's not attached to anything. It's just kind of hanging out here. So we have to get the VM set up. So we're gonna go ahead and create a new VM. Select the pool. This is Windows 10 64-bit, but you can choose whatever one you're importing. This is 10 U-Tube. There we go. We'll give it four CPUs, eight gigs of RAM. Tell it to boot PXE, ETH0 is fine. Local storage, yeah, that's fine. They don't have an option. This is one of the things that I'm gonna cover here real quick and why I'm doing it this way. There's not an easy option just to go ahead and automatically attach a VM. Also, please note of what the system was when you created it and moved it. So this was a UEFI system, so we have to set this to UEFI, click okay. It's just a notice we have to do. So boot VM after creation, I don't want. I don't want it to auto-power on and was gonna head and hit create now. We don't want to power on because a couple little housekeeping things you need to do. First, boot order. I don't care about network boot or DVD boot, so hit save. Next, this drive doesn't matter, it's not the right one. So we're gonna head and remove the VDI. You'll destroy all the data, sure will. No problem. Then we're gonna go attach disk and we just gotta get the Windows 10 demo disk on here. Hit attach. Windows 10 demo drive. There's that system like we were talking about. Now we can go over to the console and boot. Now like I said too, we wanna make sure. And if you forgot to set some of those things like the UEFI that can be set inside of here. This is where you set some of the other things. We're also gonna go ahead and turn on the Windows update utilities. People have asked about how to get the drivers in a couple times, just do that. That's fine so you can get the Windows update utilities in. But there's instructions on that. If you don't want the Windows update utility, you wanna load it. It is, to my knowledge, 100% compatible and I believe it's in our wiki with the Citrix tools if you wanna load those instead. So whichever one you wanted to do. Now let's go back over here to console. And now we're gonna start it. It'll give us a error the first time we start. Or it might not. Okay, it didn't, great. I've seen it sometimes when we move these, it'll give an error so it doesn't see the drive right away. You just select the drive and it'll boot. Also Windows 10 is a little bit more forgiving than some of the other operating systems. And there we go. We're setting up a QMU USB tablet. It actually uses a tablet driver for one of those things but it found the drivers. It's going ahead and using Windows update, load the drivers. I think it may ask me for a restart when it's done once, but we're done. That's it, that's all you have to do to get this in there. Hey, there we go. Device QMU tablet is set up ready to go. It's gonna pry down a little couple more drivers but you can see how quick that was. Pretty pain-free for getting this done. Of course, this is a pretty fast system. This particular server is going in to a client. Hey, there's our restart. We're gonna say no, restart in a second. This is a all flash array with an E2136 is the on CPU. It likes that this all flash array means this thing is just really, really fast. But we'll go ahead and restart it just to show you that it restarts with all the drivers. So we're gonna go ahead and restart system. And we'll do this in real time. I'm not gonna time compress this. That way you can see just how fast it boots up on a good piece of hardware. Even Windows 10 after loading drivers. There's the boot and it's booted. It's back up and running. The first thing you'd notice when it popped up, it said the session had been ended. That was actually because I ended that screen connect session. So that's all I had to do there. So, oh, one more restart it looks like. So we'll go ahead and do the one more restart and say yes again. But I think you get the idea that this system is fast. It's efficient to do it this way. I'll leave links for the disk to VHD and the tools but you can copy to the NFS volume. You can not copy it right to an EXT like I did there. Any EXT volume, just get that file over there. Make sure it's named properly. Use the unnamed HR to give it a name. Rescan the disk, attach the disk to the VM that you want. And now you virtualized it. That's pretty straight forward process. The hardest part about this is the waiting over time to wait for the files to copy. That's the only part that really takes a long time. And unfortunately, and this is gonna be the nature of where this machine is going to be living. It doesn't have 10 gig connections. So we have to do these migrations on only gig connections which is the same ones we just did them on here. So it took what five minutes to copy over a Windows basic with not too much data in it. I knew it was gonna be a little longer because there's some files on there. But that's it. All right, Anne thanks. Anne, thank you for making it to the end of the video. If you liked this video, please give it a thumbs up. If you'd like to see more content from the channel hit the subscribe button and hit the bell icon. If you'd like YouTube to notify you when new videos come out. If you'd like to hire us head over to laurancesystems.com fill out our contact page and let us know what we can help you with and what projects you'd like us to work together on. If you wanna carry on the discussion head over to forums.laurancesystems.com where we can carry on the discussion about this video, other videos or other tech topics in general even suggestions for new videos they're accepted right there on our forums which are free. Also if you'd like to help the channel in other ways head over to our affiliate page we have a lot of great tech offers for you and once again thanks for watching and see you next time.


All right, Tom here from Orange Systems, and I'm here with Dave from Huntress, and we're going to talk about how some of these MSPs get breached. I mean, sure, we see it in the news, and we're not here to name drop. We're not here to do anything more than provide some education based on the knowledge that, well, Huntress, you guys have been involved in a lot of these investigations. So, and you probably see a couple common things, am I right? Oh, yeah. Yeah. There's definitely some reoccurring patterns. Yeah. So we want to talk about those reoccurring patterns. They may seem obvious if you work in security. They may seem less obvious if you're living and working in MSP. As a matter of fact, we started to get off topic before we started to hit record because we talked about life as an MSP. There can be some real challenges because of all the alerts and everything else. You can lose sight of these. I narrowed it down to seven common reasons these MSPs get breached. So definitely some challenges in there, but yeah, what do you think, seven's a pretty good top number, right? Yeah. Seven's a good place to start. I mean, it's always chasing the, like we were talking about earlier, there's no, you can't get it to zero risk, right? Right. You can't get it to zero. But you can try to get as close as possible. And I think with some of these tips here, I think it's going to be a good step forward. So these are the seven most common. This is not like, do these and you're fine. These are just the most common reason things get breached. That's the best way I can describe it. So if you're doing all these and then you have more you do, awesome. You're ahead of the curve and you're probably not someone who's in the news or part of these, uh, other side of a debrief when you're, uh, going through a breach and everything that's, and we'll start with the first one here. It's 2020 and are we really still seeing lack of two FAA and privileged accounts? We are, you know, and, and people are tired of hearing everyone tell them they need to FAA. I'm sure they're like, yeah, yeah, I know we got it. But you know, this is, um, by far the most common thing that we see, right? Like it boils down to the human get attacked, right? And a fishing or, you know, something of that nature. And then someone gains control of that account. It's a privileged account and it doesn't have two FAA on it. And that's the most, that means overwhelmingly the most common reason that we see things breached in mass, like, uh, you know, an MSP tool, a backend tool, something of that nature. Um, and it's, it's unfortunate because it's, it's a pretty easy problem to solve these days. Yeah. I think pretty much every major software has it. The challenge might be that some of them, if they're legacy, they haven't forced them to do it. I know like if, even when I sign up, uh, in any of the tooling we use any new user add, it's like, it's a non option. They, you have to turn it on, but I think some people, cause the legacy stuff to like, ah, you know, we just haven't bothered upgrading it yet. I know it says that a reminder that I click okay to, and then I get my work done. So, um, but it's, this is a really simple one. I don't think there's any major player in the MSP space and that has a tooling product that doesn't support it. So it's low hanging fruit and easy to turn on, although we know it's inconvenient that I'm not going to argue them and wants to say that, but it's still there. I seen this one in, uh, Reddit, someone talking about, uh, a debrief on there.  Um, so this one's an interesting one. Yeah. And this comes kind of down to just sort of some best practices of just sort of like auditing accounts, you know, not even just API and service accounts, you know, as well as, as, you know, we'll talk about this in this, in this segment too is, you know, actual people accounts, just making sure that you don't have accounts that are laying around that, um, you know, we're not being used anymore or maybe they were set up a really long time ago. You know, maybe you've gotten integration from something, you know, two years ago, five years ago, whatever, and it still may be set up in a less secure manner. Maybe you go back and update that password to something more secure or something that too. But we've seen a few of, um, um, even kind of recently where there's been some, you know, some account that was created for some service, that service was discontinued or, or, or no longer, or maybe they changed the way that it was done and that old account was still there.  So attackers learn that and they can just brute force that one username. They don't have to guess both username and a password. And unfortunately that, that's been a way that we've seen folks get in before. Yeah. I've always liked that, um, you know, Google and the G suite service, they have that reminder as a security health check and you go, did I authorize all these things to talk to my Google account? You know, maybe some of that should be implemented occasionally with some of the other tooling. Yeah, absolutely. Uh, you know, it's, it's, I'm starting to see that in more and more services that I use, you know, I see, um, uh, uh, those kind of like reminders of like security health checks. A lot of social media, uh, kind of does that now.  Can you, can you kind of do a health check?  It should help eliminate this as being an issue. That makes sense. And this is that other side of it too. Terminate employee account left active. Yeah. Um, there, we were actually involved in one like this. Um, there was, uh, uh, a guy selling, um, access to an MST on the dark web. And that was kind of what this case was, right? It was a person who was terminated and many months later, that account was still active. And you know, he's on the dark web selling that account for like, I don't know, it was something very inexpensive, like $600 or something. I remember you guys said that right up. The person was, um, just unintelligent about how they were doing it. The fact they were selling access to an MSP for $600 was like, what? Like that's just. Yeah, you know, it's just trying to make a quick buck and, and, and you know, a lot of folks, you know, it's a shockingly low number, right? Cause if I'm an attacker and half the work or maybe more than half the work is done for me for $600, I mean, an MSP is far more valuable to, to me as an attacker than that. So that's a, that's a minimal investment. That's not really an issue at all there. Yeah. Cause you talk to this MSP, we have, you know, so much control over our clients and so much in with many customers. So you pivot, this is why the attacks MSP are so high. We are high value targets because we represent so many targets, one compromise and many end points potentially ran somewhere, not just one company, but all the companies we have access to. So $600, that's a drop in a bucket, man. Oh yeah. I mean, in terms of that, that's, it's a, it's a one to many business strategy as we'll call it there. So that works out really well for them. I've actually liked that they started referring to the ransomware people as cartels. I'm going, that's a good word for it. Yeah. I mean, there's a whole economy and stuff that's running in there and they're pushing that pretty good. So yeah, I like cartel. We can go with that. That works for me. It's fair enough. This one, RMM agent from previous or acquired MSP, we, when we do takeovers, I scrub and look hard because we do not know necessarily what they loaded. Cool. If we find common tools, but I also don't leave it at the assumption that that's what happened is that they only had, you know, one tool on it. I may have more, but this is obviously a pretty big hole that can get left in there. Absolutely. We've seen both of the, you know, there's previous and acquired. He's two separate incidents here and, and, you know, and unfortunately I've seen both, right? Like in, you know, kind of a simple scenario, right? Like you take over a client from an old MSP, didn't get around to removing that tool yet. You know, maybe they didn't audit it correctly.  And same exact scenario for an acquisition, a rather large MSP had inquired kind of a smaller one in the region they were trying to break into and they just hadn't, you know, I mean, unfortunately in that case they were in the process of going through all that, but you can understand, you know, acquisitions and whatnot. That's, that's complex. It can take a while to, to merge everything together there. And unfortunately, one of the assets from the acquired MSP was compromised during that phase and ended up causing, you know, all the customers that were part of that acquisition to get, to get ransomed. So it's, it's tough. You know, you got to get those, you got to get those tools that have that level of control out of there. When you, you know, you may have a very well put together security controlled environment, but when you're bringing in some external stuff, you know, you've got to bring that up to your standards just as quickly as possible.  So getting those tools out of there as soon as possible is just, it's paramount. Yeah. And I think one of the problems you have when, you know, acquisitions are really common in the MSP space because getting clients is rather difficult. So frequently larger MSPs buy smaller ones to keep getting bigger. They kind of swallow them up. But that also means the smaller MSP. Well, if they have 20 employees, they may not keep all 20 of them because there may be some redundancy. So you have this other attack vector could have been, well, hey, you know what, go ahead and I'll sell those credentials because I just got my job cut. You know, there could be some managers. Yeah, absolutely. So you're helping yourself out for risk. Yeah, there definitely could be some of that, you know, that scorned and bully type thing going on. I haven't been privy to as specific as, beside the one we just talked about a while ago. I haven't seen that being as super common, but it's definitely a window of opportunity.  Yes. When you take over, get rid of all the old stuff as fast as possible. Seems obvious, but yeah. And this kind of relates to that because not practicing proper lease privilege, and this is rampant in the enterprise because I can't ever figure out why someone in a C-suite has the level of access they do because I bet if you put the word why next to everything that they need access to, that would be enough to stop. And someone in a C-suite just says, well, my title is such that I should have access to firewalls, even though I manage finance, but this the same thing applies to the MSPs as well. Yeah, absolutely. That's the term I used to bounce around for that was executive privilege, right? Like it's because I'm an executive, I need that privilege and I experienced that when I was an IT director. I experienced that when I worked in an MSP and it's tough. And hey, at one point I was guilty of, I mean, we're going to rewind quite a bit, but I have logged in with my account being an admin or my account being an Office 365 administrator. But you can't do that anymore. Whatever your normal account is, your normal account, your fetch and all your email and stuff with, your normal account you log into your domain with, they should not have administrative credentials. You should be escalating to that externally. It should be a very well thought out process of like, I need to log in as this other account to do this action. That way, if for some reason you do manage to fall victim to phishing or something or your credentials are harvested, they probably don't get right into that privileged account. So and then don't share the password between your between your unprivileged and your privileged account as well. Yeah, I've seen that too where they this while just use the same password, but I'll put admin underscore and then my name on the admin one. But for convenience, I'll just. Yeah, absolutely. It's you got to kind of do it in the in the inconvenient method, right, for the security. But yeah, the least privilege is a that's just a really common thing. We see that in environments where oh, everyone's a local admin. Well, you know, it's another issue that happens too. Yeah, and even here, you know, as an MSP we take as we hire people in. I don't just throw them to the wind and have access to everything they have access to things as they're trained on it because there's also the oops factor giving the new guy high levels of privileges. Well, he could oops something out of the MSP world as well. So you're protecting yourself from that and it protects yourself from the just the fact that they as they're new. They do they really need it here reducing your threat surface as much as possible by that. Does the sales guy need access to the RMM tool or does he need a read only level of access just to see who's in there. Yeah, absolutely. And that's what happened with the one we talked about with the terminated employee that that employee was not employed by that MSP for a very long time. I think it was only a few months and that, you know, like it seemed it seemed as if really early in his tenure there, he had a crazy amount of access. I mean, full blown access to to create accounts in the like cloud hosting utilities and stuff. And that that just seemed a little yeah, that's out of protocol. Yeah, you know, that's that's probably a good point.  But also you got to mitigate risk and that's a big one. The same with I've seen and talked to other people that have their sales people in there or, you know, we're like, why does your sales guy have access to RMM? We just like to look things up. I'm like, there's probably better ways or read only ways to do that. Sales people are wonderfully social, but they're not always technical. We'll just. Yeah, absolutely. Yeah, no, we've all met them and we know we know and love them, right? But yeah, absolutely, at least privilege is something that's if you don't need to do it, then you you shouldn't have access to do it. And if you only do it every now and again, that should probably be in a separate account that is, you know, that is something you have to deliberately switch over to to perform actions that may be destructive or privileged. Yeah. And I, you know, there's actually a good seminar a while ago that Microsoft gave and they talked about some of the ways they handle things internally, you know, at the Microsoft scale, but it's like they temporarily elevate privileges on your very strict circumstances with verification and then as soon as the task is completed, they de-escalate that privilege back down. I mean, that's an extreme use case, but we are talking about when you start talking with these large MSPs, 10,000, 20,000 endpoints ransoming 20,000 endpoints is a disaster and you've seen some of these happen at scale. Yeah, absolutely. And it's a lot of it can be contributed to at least privilege as well because it's it's usually an account, you know, obviously, you have to have privilege to do those mass actions and things like that, depending on the account. So, you know, protecting that for just kind of reducing the number of people that have that access to the minimum required to efficiently, you know, get your job done. And that's a that's a win right there. Yep. MSP tool with vulnerability left unpatched. I think that a lot of the cloud ones are pretty good about it, but sometimes you still have to actively say update the endpoint agents. And I know people are worried it's going to break something. It's going to have a problem. I think Microsoft, I blame them because we all brace for impact whenever there's Windows updates. So maybe they have this mentality of updates break a lot. But I overall, I want to see the endpoint agent updates on most of tooling we've used have generally gone pretty well. And I also, you know, truly try to keep them up to date. But yeah, this is definitely another one out there. Yeah, this is getting better with a lot of the stuff shifting toward cloud hosting. You know, it's definitely getting it's definitely getting better. As far as, you know, like some of the self-hosted ones or whatnot, you know, I've seen some folks that, you know, we're helping with or whatever and they're using an on-premise version of an RMM or a remote control utility. And, you know, they're on some old version. And it's like, hey, you should probably look into this because somewhere in those patch notes, there are some security vulnerabilities that were patched. You know, this isn't super common, right? Like this is nowhere near as common as hacking. We're going down the list here. Yeah, yeah. It's nowhere near as common as hacking the humans, but it's definitely just good to kind of inventory the tools that you use and figure out how those vendors disseminate information about vulnerabilities. Do they have a security-focused page or they have a mailing list you can sign up for? Like, how do they give that information out? You know, and if you don't know, reach out to your rep for that tool and ask them, how do we get information from you about that sort of stuff and make sure that the right people are doing those. Again, if you kind of roll back to, we talked about executive privilege, you know, if the CEO is getting an email and ignoring it, that's not really helpful, right? Like, so make sure the right people are getting notified if you've got a security person or a lead tech or an engineer that's focused on handling, make sure those tools are up to date. You know, make sure there and then know as quickly as possible. Absolutely. Password re-utilizing for easy lateral movement, I know, I have, there's a couple MSPs we've taken over from and I like, it's kind of cringey, but someone will say, well, I'll get the password from them. Oh, you're using this company? And I'm like, they always use the same password and you're like, yeah. And I'm like, that is, that is such a no-no. Don't, don't do that. Do not use the common, even what they'll do is they'll use the same part of it's their company name, underscore administrator day, which create that account and then use the same password across all their clients. I mean, sure that's easy. Yeah, I'd say, but it makes it super easy to attack and, and you know, this is usually, this is usually stacked on one of the other ways that someone gets in and it just makes the attack so much more devastating and so much more efficient. If you're sharing local admin passwords or domain admin passwords and usernames across the entire client base, then that just, if, you know, if someone gets into one of the clients or if someone gets into one of the tools, it makes it very easy for them to spread because they're going to try that first, right? I mean, that's like, there's already pre, they've got pre-built scripts they're ready to go to start knocking at doors and the credentials that they already have in their hands are the first ones they're going to try. You know, so yeah, it's, it's, it just makes it, it makes them much more efficient attackers when they've already got the credentials.  It just makes it super easy to do and it's, it, you know, part of our, you know, part of our slogan here at Unstress is we're making them earn every inch of their access, you know, and the kind of methodology behind that is don't make it any, any easier, you know? Yeah. Yep. Even if it's just that a little bit more difficult by doing this one or two or three or a little extra things, just don't make it easy and then, you know, let, let the hack, the hackers want quick easy targets, right? They want those, they want to be efficient, they want to knock through it fast.  I mean, that's, that's kind of the takeaway there. Oh yeah. It's the low-hanging fruit gets picked. I mean, that's as simple as that. Now, that was all we had for the slides. Those simple seven things are the most common ones that you guys are seeing and that's, that's impressive. I mean, I really loved your work. I think John had published it, the hiding in plain sight, the really advanced malware and that's, you know, that's really cool and people think that's what cybersecurity all of it is. But until you get into the field and you're like, oh yeah, these debriefs were no 2FA fish passwords or company name 123 was the password. And yeah, we had a ton of fun with that hiding in plain sight and actually there's two separate blog articles on it because we found that first half and then, then we moved over and found the stuff that was all the cool, like DNS over HTTPS. John and I had a couple of late nights tearing that one apart. And then, but yeah, I mean, that's the cool stuff. That's the you know, that's the like, you know, Mr. Robot, Swordfish, Techno Music and the background hacking kind of stuff. But, but the reality of is that it really just comes down to, you know, just some really baseline security practices that I don't think anything that we said today here is like revolutionary, right? No. You shouldn't be blowing any minds, but it's all very simple things and that's really what it comes down to. Most of the attacks that we have been, you know, involved with, you know, that we've been able to, I don't say involved with, we didn't actually do it, but you know, involved in the kind of cleanup and remediation and assisting our partners and prospects with that. Most of those could have been prevented and that's what this education is about. Prevention starts with education and that's, you know, these should all be pretty simple to go through audit, you know, make these changes and hopefully harden your environment a little bit and just, you know, move yourself up that tree of fruit to not get picked as easily. Yeah. I mean, trust me, if they see someone with 2FA and someone not, they're going to go, I'll go with the 2FA one and the unfortunate thing, I mean, we had a tradecraft Tuesday that I flew out to you guys and did where we kind of think like an attacker, we actually didn't even publish in that video everything that we had found. Now, the table talk that me and Kyle did, we're like, wow, it's like, I was a few steps away of getting a cell phone number of a person MSP like, this guy has RDP exposed. He's got his name on here. I mean, I can't show this in the slide deck. This is, right. Absolutely. You know, there's so much low hanging fruit out there. You just got to close those holes up. Yeah, absolutely.  Like, these are all things that are probably options that just need to be turned on, things that need to be audited. I mean, some of it's just general housekeeping stuff. Yeah.  Like it's, that's what makes it, um, that's what makes it the worst. You know, hey, if it's, if it's some super elite zero day vulnerability that you get hit with or whatever, there's nothing you could have done about it.  But if you're just making it easy for them, then, you know, it's, it's uh, what can we say, right? Like what could we say to make that any better? Yeah, he just, yeah, there's nothing and that's unfortunately what a lot of them are, but hopefully, you're not watching this after you've been breached, you're watching this and go, I at least can do one or two of these things in a seven, hopefully not all seven. If, if you have to do all seven do them, whatever you need to do to get secure. Yeah, yeah. We don't really like seeing any more of these breaches. It'd be better if there was something else to talk about in the news, but yeah, absolutely. That's, that's the, that's the call to action, right? Now take some of these, you know, things start, even if you're like, oh, I know I've done that, but maybe you haven't done a watch, double check it, you know, take some time while you're, while you're sifting through one of your tools and just spot check stuff kind of as you go. And if, yeah, and if you make security sort of like an everyday part of your mindset and your posture of, hey, while I'm in here, let me look at this, let me see what's going on. Then it's not as, it's not as large of a task, as monumental of a task, if you just kind of continually do it as you go throughout your day to day. Yep. All right. Well, if you want to learn more about Huntress Labs, just huntresslabs.com. They're always in, check out their blog, they post all kinds of stuff that's not marketing, that's like these deep dives into technical things, especially to check out that hiding in plain sight. Yeah, definitely check that out. That's, that was a lot of fun, part one and part two. And of course, everyone knows what to find me, there's links below. I'll leave links to Huntress Labs and hey, thanks for joining us and hopefully this was educational. Thanks. Yeah, great. And thank you for making it to the end of the video. If you like this video, please give it a thumbs up. If you'd like to see more content from the channel, hit the subscribe button and hit the bell icon if you'd like YouTube to notify you when new videos come out. If you'd like to hire us, head over to laurancesystems.com, fill out our contact page and let us know what we can help you with and what projects you'd like us to work together on. If you want to carry on the discussion, head over to forums.laurancesystems.com where we can carry on the discussion about this video, other videos or other tech topics in general, even suggestions for new videos, they're accepted right there on our forums, which are free. Also, if you'd like to help the channel out in other ways, head over to our affiliate page. We have a lot of great tech offers for you and once again, thanks for watching and see you next time.