You switch to the camera. Hey, now we can see you before you weren't sharing your camera So I think that was the trick. I was sharing my camera But I have my camera control panel open because Skype likes to take control my camera and change my field of view So I think it was walking sky from actually attaching my camera. Got it Yeah, so let me just double-check and make sure that my field of view is set up Yeah, no problem, and it is. Yeah, looks good.  You look great. The camera looks great I'm I said we're having issues over here, and I know we got the echo so we're gonna finish it up So Bobby let's talk about Identity 100 take it away. Sure. You're screen. I am looking for the screen share Where is it? It is the button that does not look like a screen share It is right next to the little heart and be right chat There it is. Okay, and I'd like to share that screen Okay, hopefully Everybody can see what I'm seeing right now so This talk is a one-on-one introduction to identity The intention here is to learn some of the basic concepts and jargon in the space It'll be very conceptual, but in the end I hope you'll have a good understanding of why things exist and what problems they're intended to solve So Hello, everyone. I'm Bobby Johnson a developer advocate engineer at off zero I hail from the damp city of Olympia, Washington Which is known for the riot girl punk sound of bands like bikini kill and sleeter Kenny Just a little bit about me. I'm a developer advocate engineer at identity and access management company called off zero I run the Seattle identity and security meetup as well as the off-zero online meetups Both of which you can find on meetup.com I'll be hosting online meetups every week in October for security awareness month So if you're into online events, you might dig those as well I'm an avid twitch streamer and a member of Jeff fritz's live coders team So you can find me there I've been a software developer for about 20 years focused mainly on web development but I've also done a little bit of mobile development as well and This is me and my dog Louie and I hanging out in the beautiful Pacific Northwest and the Chinook pass and the northern Cascades mountain range At the bottom of my slides. You'll notice a bitly link That will take you to a place where you can find my slides Including all the notes for me giving this presentation. So don't feel you have to take screenshots of anything You'll have my slide deck available to you So while back I asked on Twitter What are common reasons to roll your own authentication and I got several good reasons? Of course all of them are wrong And let's talk about the problem that we're trying to solve when we talk about identity The idea is that you have a resource somewhere and that resource could be a capability like executing a specific process It could be a bit of sensitive data Or pretty much anything else that you can think of when you're using an application And you have a user somewhere that would like to access this resource in a secure way meaning it only allows proper usage of that resource There are not only authentication aspects of these of this transaction, but also authorization as well The problem is deceivingly simple You have a user who wants to access a resource if you look at the diagram on the screen right now It looks pretty easy, right? There are several things to consider though that raise the complexity level pretty quickly Firstly the problem space we're talking about is extremely critical if something goes wrong. It goes catastrophically wrong Think like 11.4 million euros level of catastrophe in the event of a breach This fact alone makes it one that requires a lot of attention Next the resources are complex and so are consuming those resources We exist in a world where everything is programmable Everything has an API exposed and those resources can be accessed by a large variety of devices Not only your computer, but your phone your watch your thermostat I recently went to home depot to buy a new refrigerator and they had several models with the ability to tweet I have no idea why I'd want to tweet from my fridge, but I immediately find the security of such devices suspect Finally the accounts we use to access all of these resources existed in an incredibly wide variety of sources Users can come from businesses through enterprise directories or users can come from social networks I imagine everyone that's watching right now has at least a Facebook or Twitter or LinkedIn account Users can come from entirely custom solutions where an independent software vendor or startup decides to put all of their users in their own database And wrap them in their own rules Now consider the Cartesian product of all the possible devices resources and users and you can see why the problem can become complex very quickly Also consider that developers implementing these things in an organization are not typically experts in the identity space And they have little desire to become an expert in identity and security They're mainly focused on shipping product and solving problems for their end users Identity is an infrastructure concern at best to them So let's take a historical tour and see how the industry evolved the various standards from the simplest to the most modern protocols that are in use today So here I have a user and a web application Think about the application and what it's trying to achieve Is it Amazon and I'm trying to buy something Is it an expense system or I'm trying to track expenditures to get reimbursed Or is it a tax system and I'm trying to file my taxes All of these applications perform a business function of some type and for each of those functions there'll be a different set of attributes which define me as a user that's relevant to that application For example, Amazon will want to know my credit card number and physical address so they can charge me and send me stuff And a tax system will want to know my yearly income and maybe my tax identification number These attributes still represent me I am the person I am the same person but depending on the application I am working with my attributes or digital identity will be different Let's say that yesterday I connected to this application for the first time and entered my digital identity into the system Then today I come back to the application How does that application know it should use my digital identity Versus one of the other people that use that particular website I must provide credentials in the form of a username and password Between the application and myself is an agreement to a shared secret Something that only I and the application know I'll provide this secret to the application to reassure it that I'm the same person who shut up yesterday So retrieve my digital identity that belongs to me and use it in the scope of the business process that the application provides So even though this is a primitive approach, username and passwords are still in use every day today Which is one of the interesting aspects of identity There isn't a strict replacement of old methods when a new one comes along Typically new techniques come along to address new scenarios that weren't possible before And it evolves to increased complexity However the old protocols and approaches, if they still work and there's no direct competitor Then there's still be in use The next evolutionary step that was intended to solve a very specific problem Think for a second about what happens within a business Within the boundaries of a company or enterprise, you can expect a user to use multiple applications If we use the same username and password approaches before We'll end up with every user having their credentials stored in every application The user must authenticate with every application they wish to use Requiring them to remember passwords for each application Or worse, using a single password for them Ensuring they are compromised in multiple places if that password leaks In general, having multiple apps deal with attributes collection and credential management Separately is a colossal waste of resources for everyone For the developer, they need to duplicate the same functionality in every application And keep that up to date For the user, they need to deal with provisioning all of these accounts and managing passwords But above all and very important for our business Our administrators need to chase every application and make sure every user is configured correctly The username and password approach doesn't scale in that scenario In my example here, I only have four applications, but your typical enterprise could have hundreds of applications It's just not going to work So the industry reacted to this by creating what is known as a directory This is a .NET conference, so we're all probably familiar with Active Directory A directory is a centralized repository that performs the credentials management and digital identity storage that I talked about earlier Directories centralize this functionality in one place, and everyone's happier The user only needs to authenticate once with one central entity And then they will be signed in automatically to all the applications they require to perform their job Which is very convenient for them The applications don't need to deal with authentication directly, so there's a time and cost savings there There's also a security benefit as well A centralized directory offers a smaller security surface Finally, administrators have one central place to provision a user or update when a user leaves the company Causing that user to gain or lose access to all the applications at once Within the boundaries of an enterprise, directories solve a critical problem However, this is far from being the end Consider one of the most straightforward business scenarios, a retailer A retailer has all of its own internal flows and user management requirements But the business goes beyond the boundaries of that enterprise A retailer has suppliers, people managing their warehouses Corporate customers with whom they have an organization-to-organization relationship Which is different from an individual customer Internal directory-based single sign-on and authentication within the boundaries of an enterprise No longer work when you have more than one company that need to collaborate over the public internet In particular, think of this scenario here Imagine there's a web application in the domain on the right that a user from the domain on the left needs to access The domain controller on the right only knows about the users within the boundaries of the company on the right The user from the other company doesn't exist in that directory So what do we do now? The industry addressed this by raising the level of abstraction in the world of protocols Kerberos and the protocols that work within the boundaries of an enterprise operate at the network level To operate at the network level, the solution needs to be within a well-known boundary And even possibly requiring a certain type of network hardware All of which is not possible when you want to collaborate across the public internet People at the time looked at the roles, messages and primitives defined at the network level And created a representation of those things at the higher application level These protocols were named SAML or Security Assertion Markup Language SAML is a protocol that describes the roles the entities can play in the context of identity transactions SAML defines messages exchanged across the different entities, specifying high level transactions Used for connecting the separate entities without knowing implementation details Raising the level of abstraction to the application level removes the need to rely on special network hardware So can work over the public internet How does SAML work though? Imagine sitting in front of the web application on the right is some software The specific kind of software doesn't really matter But it's typically implemented in such a way that it can intercept and act on a request Without the application's direct knowledge In this example, in the example of two companies collaborating The one on the right must configure their system to have a trust relationship with the one on the left Trust means the application for the company on the right will believe anything the identity provider belonging to the company on the left says about users If the identity provider on the left says that the user is valid and authenticated correctly The application on the right will trust that assertion When the user in the domain on the left requests access to the application on the domain on the right The SAML implementation will intercept that request and determine if the user is unauthenticated The SAML implementation then crafts a sign-in message using a well-known format And redirects the browser of the user to the trusted identity provider in their own domain That provider is some local resource to the user from the company on the left In most cases, the user is already authenticated with that identity provider Because it's within the boundary of the company on the left's enterprise This is a good demonstration of how the various protocols layer on top of each other to provide additional functionality The company on the left could be an entirely Microsoft shop using Active Directory to provide directory services to the company And the company on the right could be using a completely different directory service The SAML implementation sitting on top of both of them provides the seamless integration point translating between the two boundaries Once the user successfully authenticates the identity provider on the left issues an entity called a security token A security token is just a bunch of bits that represents the proof that the user has successfully authenticated with the trusted identity provider A SAML-based security token consists of an XML payload and a digital signature The digital signature provides confidence that the content of the XML payload is truly coming from the trusted identity provider This concept is key to maintaining trust The company on the right can say they trust what the identity provider on the left says about users But there must be a way to verify the message is actually coming from the identity provider on the left The signature actually needs to is there to do that role So I can hear you guys in the control room Not sure if it's coming through on my mic though So another aspect of the SAML security token is that it can contain user specific attributes that describe the user in question Which allows the application consuming the token to have no need to cache those attributes It can actually receive the attributes as they are imported It can receive the attributes that are important for the function it provides directly from the token That information is simply supplied on the fly An attribute that travels inside a security token describing a user is called a claim A claim is an attribute combined with a signature asserting the attribute came from a specific source So to make this more clear, consider the difference between me putting my name on a post-it note And trying to enter Canada versus pulling out my passport that shows my name The medium here makes all the difference The passport is allegedly difficult to counterfeit Whoever receives it can validate it's a good passport and can have the trust that the US government says my full name is Robert Presley Johnson The post-it note on the other hand has no credibility whatsoever It could have come from anywhere and I may or may not have even written it myself Claims in a security token can be trusted because we trust the issuer of the token And can validate that that token came from that issuer So so far we've been exploring years of the history of identity in the world of business Meanwhile the consumer world was pretty much at a standstill Each public-facing website allowed consumers to log in with a username and password to access their services But a problem arose when these services began attempting to access other publicly available services on the user's behalf So consider the following scenario Say I'm a generic internet user using both LinkedIn and Gmail LinkedIn decides that it would like to take advantage of the fact that I already have contacts in Gmail to send LinkedIn invitations to my friends and acquaintances For example, assume that Gmail has its API that they use in their applications to send emails, list contacts, and similar email type things LinkedIn just wants to take advantage of that API A common pattern that exists today to solve this problem is for LinkedIn to request my Gmail credentials Gmail has a database containing my username and password credentials and user attributes similar to what I've described before LinkedIn simply asks for those credentials which it stores and uses to access my Gmail contacts and send invites on my behalf Giving Gmail your Gmail and username and password to LinkedIn presents a significant problem though It might be legitimate for both LinkedIn and Gmail and me to want to do this feature that I want to do, especially if I want to expand my LinkedIn network It's to the advantage of all parties involved to automate that process, but the implementation in this case is kind of terrible I must now rely on LinkedIn to protect my Gmail credentials LinkedIn might not be as committed to that protection as Gmail because they don't own them, Gmail does What happens if LinkedIn doesn't adequately secure the connection between my browser and their site when they're asking me for my Gmail credentials? It might be possible for someone on the Wi-Fi network at Starbucks to intercept those credentials and then have access to my Gmail account Of course, Gmail would never make that mistake because their business depends on the security of my Gmail credentials But LinkedIn, on the other hand, maybe not They're asking for the credentials for a one-off little feature of their application It's not as critical to LinkedIn as it is to Gmail There's an even more subtle problem here though With the Gmail username and password, LinkedIn now has full access to everything in my Gmail account Not only can they harvest my contacts, but they can also read my emails, send emails on my behalf, delete things, including the account So they can do whatever they like, which is crazy of course Why would LinkedIn want to do that? I'm just saying the possibility is there In general, people should never give credentials to any place other than the origin of those credentials The industry introduced OAuth as an open standard to address precisely this problem that I've just described OAuth is a delegated authorization protocol It allows a user to delegate authorization to one resource to act on another resource without exposing the user's credentials OAuth is a standard that defines two endpoints, which resources such as Gmail and LinkedIn can expose for helping people do delegated authorization flows Let's go back to the scenario Following OAuth, LinkedIn directs my browser to what is called an authorization server hosted by Gmail An authorization server is just a collection of two endpoints defined by OAuth An authorization endpoint, which serves up UI, and a token endpoint, which deals with API access Gmail's authorization server receives the redirected request from LinkedIn This request is formatted to say something like Dear Gmail, I'm LinkedIn You know me because I'm registered with you, and I'm a known client I have a user, I would like you to grant access to their contacts and the ability to send emails on this user's behalf At this point, my browser is pointed at Gmail Gmail will authenticate my session if I'm not currently logged in This authentication is happening in the proper way, I'm sending my Gmail credentials to Gmail Once Gmail has validated my credentials, it examines the incoming request and prompts me saying Dear user, here's LinkedIn They would like to access your contacts and to send emails on your behalf Are you okay with that? I as a user am given a chance to give my consent that I'm okay with LinkedIn having this specific access to my Gmail account Once granted, Gmail's authorization server will generate an authorization code and redirect my browser back to LinkedIn with it So far this handshake has performed directly in my browser over the public internet Once my browser is redirected back to LinkedIn with the authorization code, LinkedIn will continue the flow server side LinkedIn will take the authorization code along with its set of client credentials and call Gmail's authorization server's token endpoint This message is saying Dear Gmail, I'm LinkedIn, here's proof I have a code that proves this user gave consent for me to access your API on their behalf Gmail's authorization server will first evaluate the client credentials and then the authorization code If everything checks out, it'll generate an opaque access token I as a user consented to giving access and this token proves that as well as the permissions granted These permissions are typically expressed in the context of OAuth as scopes I say this is an opaque token because it contains no valuable information for LinkedIn The token only has meaning to Gmail, the issuer of the token The OAuth specification has no advice on the format for tokens as long as it's capable of conveying meaning to Gmail, the issuer of the token This is how the industry solved the delegation problem and OAuth 2 is a very popular protocol today Of course, things didn't end there Quickly people started to use OAuth not for delegation but as an authentication mechanism Consider our final scenario Imagine that LinkedIn does not want to maintain its own username and password store They would have no way of signing in to LinkedIn directly LinkedIn could do the same OAuth dance that I just subscribed earlier to gain delegated access to Gmail's API with an anonymous user As soon as the OAuth flow is completed successfully, LinkedIn could assume that since the user has proven they are a valid Gmail user They are considered authenticated by LinkedIn as well Drop a session cookie and continue on But remember with OAuth the access token is opaque The token issued by Gmail has no meaning to LinkedIn If someone manages to make an attack and the access token that I get from Gmail happens to belong to another user LinkedIn has no way of telling LinkedIn will be given the illusion of being authenticated when in reality the token belongs to someone else completely This is a fairly well-known attack called the confused deputy attack The industry took OAuth and added some details on top of it known as OpenID Connect to solve exactly the problem that I just described OpenID Connect takes OAuth and adds primitives for correctly achieving single sign-on OIDC adds a new type of token called an ID token This token is no longer opaque, it follows a specified format, the JSON web token format, or JOT for short This token is meant to carry pretty much the same information that I described earlier with a SAML security token It carries user information and can be validated OIDC has also introduced a standard API interface to the authorization server for querying identity information called the user InfoAPI Finally, OIDC introduces a way to get ID tokens directly as a part as an authorization endpoint flow Which brings the public internet up to parity with SAML basically And now we've come to modern times OpenID Connect is widely used as an identity protocol on the internet right now And we've visited the main scenarios that prompted the evolution of protocols in the identity space Of course, this was just a taste of the world of identity and how identity has evolved from simple username and passwords all the way to OpenID Connect So if you'd like to keep up with me, you can find me in these places Once again, you can find all the presentation materials at the bit.ly link at the bottom of this slide I want to thank the organizers and all the people behind the scenes at .netcom for having me And most of all, I want to thank you for your time listening to me I hope I've armed you with a bit of context around identity Thank you To the Q&A, can you hear us okay there? Bobby And I think you guys are muted Oh, come on Yeah, the context on the window switched out So hey, can you hear us okay now Bobby? Yeah, I can hear you good Perfect. Hey, I got two questions for you over here Okay So the first question Michael Jolie was asking If you're using JWTs to authenticate requests, is it okay to store that token in local storage or a cookie while it's valid? If not, where should I hold it? Sure So your application architecture kind of dictates the answer to that question But if you are working on a system where you can store HTTP-only cookies Putting that token in there on traditional server-side rendered type web applications is totally viable You just need to be aware that you won't be able to access it client-side And if you're attempting to use that token for say Hitting an API that's not on the same domain as where that cookie was served up It's not going to work for you In your single-page applications when you receive any type of token It's generally bad form to store them in local storage Local storage is a resource that is available to all scripts running on a given page So if you happen to have a malicious script loaded via an ad network Or even maybe an MPM module that is suspect that happened to get into your single-page application They would be able to scrape your token So generally we say to avoid storing them there The best bet is to store your tokens in your actual application memory itself So like say in your React applications you're going to have an authorization module That just holds a variable reference to the token itself And then when a user circles back around and loads the page again You can reach out silently to the authorization server to retrieve those tokens You don't necessarily have to prompt the user to log in again Gotcha, that's a great answer It was more like a statement but I kind of went through and reworded it as an answer So it kind of makes sense, it's from Cobra 2 And this is my rephrasing of it Is the implicit flow of OAuth deprecated? And if so, can I... Is authorization code the replacement? Sure, so the implicit flow is what we've typically used in the past for single-page applications It is not deprecated but a new flow has come out called authorization code flow for proof key for code exchange We call it pixie for short Which brings single-page applications kind of up to parity with what mobile developers have been doing for a while So while the implicit flow there aren't necessarily any new exploits you need to be concerned about Pixie is a little bit more secure and if you're building new applications and your authorization server supports it You should probably go with pixie over implicit flow But if you have a bunch of applications currently that are using implicit flow There's no new attacks out there you need to be concerned about Perfect, sounds great I don't see any more questions And since we're kind of right at 6.59 a figure we can finish up and get the next speaker Because we have Martin here on studio Hey Martin, good luck Thank you so much for taking the time to speak with us And we all learned a lot about identity Awesome, thank you for asking me We're going to get things here shifted a bit and we'll be right back


Well, thanks, everybody. Can you hear me? All right. As you clapped before I got started, I couldn't help but think of what Archbishop Fulton J. Sheen used to say. And am I the only old person that remembers Archbishop Fulton J. Sheen? He said, he used to say, applause at the beginning of a talk is an act of faith. And then he said, applause in the middle of a talk is an act of hope. Now, you can imagine, as he said, at the end of a talk, if it's outstanding applause, it's a great act of charity. So I thank you for that initial applause. And Ron, thank you so much for the, not only the invitation, but also the wonderful warm welcome. I appreciate that very much. You know, I have to say this. This is my second visit to Franciscan University. This is not my talk, by the way. I just as a pre-talk. I am really impressed. I was here probably 15 years ago to give a mass, have a mass with those who were involved in kind of pre-theology. They were considering the possibility of the priesthood. And I was impressed then, but meeting so many of you who are here. And then listening to the witness of Shannon and Jeff, I was just so impressed by the witness that is given here. Don't you agree? Thank God for the presence of Franciscan University. So I told you that I come from Louisville, Kentucky. And you know, we have a little horse race there every year. Are you familiar with that? I go to the horse race. I go to the Kentucky Derby every year. I'm in my ninth year as archbishop. And I think I've been at eight. And this past year was my most successful. I lost only $13. So about three years ago, and by the way, I go in my collar. About three years ago, I got on the elevator to go up to the seat that I had. I was on the elevator. A man was on there. And a man looked at me. He looked at my collar. And he said, father, are priests allowed to bet? And I don't know why I said this. I said, well, I think we're allowed to bet, but we're not allowed to win. And like this, the man said to me, you know, I believe I may have a vocation.  That actually is a true story. It really is. But I do want to talk to you about vocation, because you're catechists. And you're all in different levels of what it means to be a catechist. Many of you come with great experiences. I know that. I've always liked to teach. When I first was ordained a priest, I was assigned to a high school. It was probably the hardest thing. I don't think I was all that successful, to be honest with you. And I thought, gee, maybe I'm just not caught out for this work. I don't mean a priest. I meant cut out to be a catechist or a teacher. So I know it's not easy to teach. And I thank you, because if the world ever, ever needed catechists who are formed and committed in love and truth, and I hear this at Franciscan University all the time, not just love and not just truth, but both, we need people who are willing to be evangelizers of both. So I thank you for being formed. You're serious about it, or you wouldn't be here. Now, I noticed that Ron, when he introduced me, he started with when I was ordained a priest. Did you know I actually lived before that? And I want to talk to you about that. And I'll tell you why. I'll tell you why I was 25 when I was ordained a priest. But I want to tell you tonight, I want to talk to you about a very unique part of reaching out in mercy. And that is the capacity for you and me to enter into the presence of another person. Now, obviously, where I'm going with this is studying the gospels. Because if you want to know how to enter into the life of another person, study Jesus. But the truth is that if we don't enter into the life of another person, what we say will not be heard. You agree with that, don't you? I think it was the great sister. And by the way, before I quote sister, let me quote George Burns. Any of you remember George Burns? George Burns was asked, he was asked, how would you characterize a good homily? And he said, well, now, first of all, I'm not Catholic. But he said, since I'm asked, I will let you know. He says, I think a good homily begins with a very sharp beginning. It ends with a very powerful ending, and it has very little room in between. So that's not this talk tonight. Cicero, here's what he said. Cicero was the great orator from the glories of Rome. And he said, a great speech teaches delights and sways. He said, to teach is a necessity. To delight makes all agreeable, but to sway brings victory. This is important for us who are wanting to be catechists. To teach is a necessity, he's not saying not to teach. To delight makes all agreeable. People will not listen to you if you're boring. I hope I don't prove that tonight. But to sway, you know what we would say to bring about conversion? To change hearts, to change hearts brings about victory. I'd like to talk to you about the art of accompaniment. Our Holy Father Pope Francis says that the first act of mercy is to walk with another person. Now, we know we walk with them in love and in truth. We need to lead people somewhere we don't walk in circles. But we begin by walking with another person. I never used the phrase accompaniment in my life, I don't think, nor the art of accompaniment. But guess what? When I was ordained a priest in 1972, the very priests that I looked around and saw and thought, you know, I want to be like that priest. You know what I'm talking about.  Even if I don't ever talk to this person, I'm going to watch what this person does and imitate what they do. Well, that's how I was as a young priest. I thought, I want to be like this priest or that priest. And you know what was good about them? They were no nonsense. They preached the truth. But they always had a capacity to join people, to befriend people. That's why I like the Chrisea where it said, do you remember it says, make a friend? Am I the only one who knows that one? Make a friend, be a friend. Bring a friend to Christ. Make a friend, be a friend. Jesus in all the gospel passages. Do you remember, I think it was at John 1, Andrew was following Jesus. Jesus turns around and he says, what are you looking for? I think Andrew was Irish because he answered the question with another question. And he said, Lord, where do you live? And do you remember what Jesus said? Come and see. So the good catechist always begins with invitation because that's what Jesus did. Now when Jesus said, go, he often added, go and be converted. He actually, remember, he actually said, go and sin no more. So it wasn't as if we don't deal with the truth. It is so important if we are going to have victory, if we're going to sway people. So we can only imitate Jesus within our own abilities to be true to ourself, as I said in the homily, not like Sinatra said. So I have to be in touch with the gifts that I grew up with. I was born in a coal town in the northeast part of Pennsylvania. Now I'll tell you why I'm telling you this story. You're going to say, oh my gosh, it's like going on vacation with them. No, I'm doing this because I want you to be thinking, all right, well, what are the gifts that you have? What is it that you will need to do to join other people? I'm a social worker too. And so I understand that if you're ever going to help someone, if you're going to lead someone to the truth, the first thing you have to do is join them, be one with them. It's the reason I told you the thing about the derby. I knew you'd laugh. It breaks, I think, gives you a chance to get to know me. It's not just me getting to know you. It's you getting to know me. It's not just you getting to know the people that you are going to be teaching or catechizing. It's giving them a chance to get to know you, right? That's what accompaniment is about. So I was born in a little coal town. It was at the time in which coal was pretty much gone from the northeast part of Pennsylvania, at least the little town of Mahonui City. It was in the northeast part of Pennsylvania. OK, I'll admit it. I was the baby in the family. I hope I'm not the only one here. Is there anyone else who's the baby in the family? Oh, thank god. I love it. I love that. I love that. There were three older sisters. I love them. I love my older sisters. And most days, really, they loved me. Now, they were already, by the time I came along, most of my sisters were already married or in high school getting ready to get out of high school. None of my family went to college. So when they got out of high school, they either got a job away from Mahonui City because there were no jobs there. So most of my time growing up occurred with myself and my older brother. My older brother, Georgie, had down syndrome. Do any of you know anybody who had down syndrome? Oh, OK, I see a couple of hands. I'm a big, listen, know yourself and know your family. If somebody, if I meet a family where there's a child or an adult with down syndrome, it's as if I've known them for 50 years. If you have a gift, a particular gift, use it to join other people. This is very important if we are to be instruments of mercy. So I had a brother, my brother, Georgie, had down syndrome. Georgie was five years older than I. And he went to grade school more for, my mom would call it discipline, but it was more for what they call today socialization. And our little Slovak school closed when he was in seventh grade and I was in third grade. I went on to another school he didn't. So that was the extent of his education. He's very, very smart. I remember when I was in fourth grade, I was worried that he wasn't going to school. So I'd come home and teach him the times tables. I even had some of my buddies teaching him. He was very patient with us. But that was a good thing. I didn't know that I was being called to be a priest until I was probably in 10th grade. But all of that was God's grace working. Just think back now to the way God's grace was working in you when you were in third grade or fourth grade. That's very important if you're going to be a good catechist because you're going to then understand how God's grace is working in those people you want to serve. I became a priest as Ron told you in 1972. My dad died in 1977 and my mom died in 1989. And I became legal guardian for my brother Georgie. One of the best things that ever happened to me. You've got to understand that Georgie was the big brother. And if anybody forgot that, he would have a way of reminding me. There was no doubt about it. Who was the big brother? And I must admit that I, and people will say this, that I learned more from my brother George in terms of slowing down, in terms of appreciating people. And you know what else? In terms of meeting people. Georgie would go into a room like this and he would talk to each person. I remember saying to him, George, where did you learn to do that? He said, my mom told me. He says, it's called chit chat. He did. I thought, now, my mom was very, very wise. And you have to understand I'm going to fast forward a little bit when my mom died in 1989 and we cleaned out the house. Georgie was coming to the rectory to live with me. My mom's mirror was a little holy card. And you ever see how holy cards are stuck against the rim of the mirror? And this one must have been pulled out every day because it was well-worn. And you know what it was?  Now, I hope you have had a chance to discover someone who has been praying for you. I hope in your life you've had some opportunity. And I hope that if you do it, you discover it in a surprise, that you never knew it. And then you begin to think, ah, I wonder if those things that I thought I was doing such a good job with. You know what I'm talking about? I wonder if that was intercessory prayer. So I'm telling you all these things so that you can kind of get to think, well, now, what are the gifts from my own growing up? And growing up, some of you have problems or things, no family's perfect. Not my family was not perfect. But it's very important to know your family. And I liked what Jeff said earlier about the importance of us taking responsibility. We're, I'm in the midst as president today, of trying to come up with a task force to help our bishops and dioceses deal with the tremendous amount of violence and lack of civility and lack of respect, prejudgements. But that can only be all of this relates to the announcement of the good news of Jesus Christ. So that's a little bit about my family growing up. In 10th grade, I started to go to chapel and I thought God's maybe calling me to something more. We were taking all those tests that I think where people enter into Francis can do so well with. And I thought to myself, well, I don't think I'm called to a career. I'm not sure what it is, but I feel like I'm called to serve. I think that was the influence of my brother, George, because my mom all through the time would say, now don't forget to take Georgie with you. In other words, when I go out to a ball game or when we play ball or something like that. And that became part of the integrity. That was the greatest blessing I got from that. So think about the blessing, Jim. So that's the first thing I wanted to say. I know Curtis Martin spoke here, I think, last year. And he makes a distinction of the two Spanish words, the difference between saber, which means to know, and connoisseur, which means to know. And you'd say, well, wait a minute. They both mean to know. Yeah, well, and there's some, I think I'm just talking. Am I right on that? Okay, but saber, I hate this because there's somebody who's an expert in Spanish here.  But because mi espanyol es muy pobre, disculpa me. But saber means kind of to know facts. And when I first started as a catechus, blame me for it, concentrated almost completely on knowing the truth of the faith. Was it wrong? No. Was it effective? No. Connoisseur means to come to know a person. Very different. If you're gonna do saber, you gotta first do connoisseur. That's the key. So when I became a pastor in 1988, I began to take the parish pictorial directory with me to my holy hour. Now I'll admit it, I did it precisely because I thought, well, I'm giving the Lord an hour. I don't think he'd mind if I do a little side work for 10 minutes and learn a few of the names of the parishioners. Well, what I didn't realize is that this would become a pattern in my holy hours that I would give at least 10 minutes to a page every day. It used to be a page of the pictorial directory. You know what I'm talking about by a pictorial directory? The pictorial directory in my parish where I was serving. And I was amazed at how much I knew about these people. I was amazed because when you're standing, talking to people as they leave church or when you're going on visitation or when you're visiting people in the hospital or when you're part of a catechetical thing and especially one of the kids has a problem at a school and you have to meet with the parents, you know, all those things. There's a richness to how much we know. It's amazing how much we know. But when you know it in prayer, when you begin to reflect, you're coming to know the people you're serving more deeply. So in 2007, I was announced that I was gonna be going as the Archbishop of Louisville and Archbishop Kelly, whom I'm succeeding. He said to me, I wanna give you some information about the Archdiocese. Is there anything you want? I said, would you send me the priest pictorial directory? And so every day now I've been praying one page of priests. I can't imagine you wouldn't wanna do this if you haven't already done it. Just to get the group that you're serving and begin to pray by face. Not only are you going to get to know their names and faces, that was my shameful reason for interrupting my prayer, but you're gonna find that there's tremendous richness because as you uncover the needs of people, you begin to pray for their richness. That is coming to Conocere so that they can share with them. Now there's another way that I can explain it. I'm gonna use the example of bowling. How many of you are bowlers? How many of you have gone bowling? Well, I went bowling about three years ago. There was one of these things. People love to have auctions for doing this, fill in the blank, with the Archbishop. So it's everything. So, and I don't mind, I like to golf, et cetera, and I'm fine with golfing and all, but there was one that was bowling and I thought, geez, I bowled all through grade school and high school, I'd be able to bowl. Here's the lesson. If you haven't bowled for 35 years, sit out the third game. I couldn't move the next day. Well, so this is all based on Robert Putnam's book on bowling alone. Are you familiar with that book? It's a sociological book. It was pretty influential in the late 90s, but he did a book on bowling alone and basically what he was saying is people aren't joining societies anymore. Back in the 50s and 60s, everybody was part of a bowling league. Now, nobody's bowling. One of our priests that I play golf with, Father Tom Gentile, he said to me that in 1973, when he was ordained a priest, at a particular country club that he belongs to, it's not a very expensive. Truth is known, I think they got the thing free from that mistake, but at any rate, he said there were 23 priests who belong to that country club and now he's the only one who golfs. But that's not the story I wanted to tell you. It's about what I learned about how to be a successful bowler. I increased my average from about 155 to about one, let's see, to about 240. Here's what you do. The alley is about 60 feet long.  You will be amazed. You will be amazed at the change in your scores. Now, I'm gonna tell you the principle of this is summarized in four words. Error increases with distance. Do you know when that was first told? At a men's conference, a father's conference.  Oh, they said we're pitiful, we probably spend only about 15 minutes a day. They said, would you mind if we strap on a machine so that we can measure it? And they said, sure, no, we'll do that. And you know what they ended up with? The average each day, 39 seconds, 39 seconds.  It's a commodity, because there's only so much of it. So it calls for great priority. But the catechist who does not want to give time to the person with whom they want to have a conversion in Christ is not gonna have victory.  I'm using that as an example, but remember those four words. Error increases with distance. It doesn't mean that we're perfect when we get closer to people, but it means if we're distant from people, a priest or a pastor who's distant from his people, a catechist who really doesn't care about the young people that you're, or whatever age the people are, that you're helping to learn, the more distant you are, the greater chance of error. Does that make sense to you? Yeah, so that's just a little something I wanted to say to you. So the example of a catechetical victory is the road to Emmaus. Jesus, the people, I don't know if he said anything at first, did he? He talked with the people, he listened to them. What things happened? Are you the only one in Jerusalem who doesn't know the things that happen these days, remember? He just let them talk, and then they said he started to explain to them the scriptures. He waited until they were ready to hear, and he started to explain to them the scriptures. And then, of course, there was the stopping and the breaking of the bread. So clearly a sign of the Holy Euchar, what they said.  That was Jesus. And that's basically, he's the one who's teaching us. I think the most modern one I'll be talking about at the University of Mass for the ACE Progradias. It's the feast of, anybody know? Mary Magdalene, the feast of Mary Magdalene, and now she's the first of the apostles that our Holy Father, Pope Francis, has just raised up the level of that feast day to make it the same as one of the 12 apostles. So remember her example after the resurrection. And Jesus appeared to her. He must have been reading his pictorial director because he said Mary, he said her name, right? That's all he said, he didn't give any instructions. He just the name and then she said Roboni teacher. She recognized his voice. She wanted to clean us for another sermon and he said, do not cling to me. He was going off to Gavoli with his wounds, by the way. And if we wanna see Jesus in others because when she goes to announce Jesus, she announces him risen with his wounds. And so that's gonna be important for us in whatever level of catechesis that we are attentive to the wounds of the people we're serving that sometimes block them from understanding. That's so much going on in our name. So I wanna, you get the thing with accompaniment, it's not that, it's not rocket science. But what it is, is it's saying to you in order for us to teach the truth. And remember Saint Teresa Benedicta of the Cross, former Edith Stein. I don't think I have her quote exactly right, I think maybe I wrote it down here. I did write it down, but on a different paper. She said, do not accept as true anything that is not presented with love. And do not accept anything as loving that is not presented as truth. She did not ask as truth and love as a multiple choice. Now I wanna concentrate and I wish I had made copies of Evangelium Nunciandi, number 80. How many of you are familiar with Paul VI's Apostolic Exhortation? No, it was actually, it was an Apostolic Exhortation or an Encyclical, Apostolic Exhortation. Any of you familiar with the Apostolic Exhortation? Right, Nuncian, Evangelium Nunciandi? I noticed that it was December 8th, 1975 and that was exactly 10 days, excuse me, 10 years after the end of the Second Vatican Council to the point. So it was 10 years after the Second Vatican Council ended, so 40 years ago this last December. So I went back and I read paragraph 80. Paragraph 80 is this page plus another half. These are not small paragraphs. That's why I thought, Doran, I should have made a copy for you, but you don't mind if I read a little bit of it, do you? Because it gives you a sense of, if you wanna understand Pope Francis, one of the things to be clear of is he rightly says that Evangelium Nunciandi, he thinks is a core document. He thinks it's the best Apostolic Exhortation ever written and there have been some good ones, Apostolist Abavobus, I could go in to a lot of them that our Holy Father has written. But let me tell you what he says. First of all, he talks about a lack of fervor. He says one of the problems we have with Catechists is that they have lost their fervor. Do you remember Revelations 2.4? Are you familiar with Revelations 2.4? I'd love to give $50 to the person who knows Revelations 2.4. One time I see a hand up now, one time I was in Meade County, it was the 200th anniversary and I said to somebody, I'd love to give $50 to the person who, I know, I'm gonna get to you. I'm gonna get to you, be patient, be patient. He's got his Bible opened. I mean, I said I'd love to give $50 to the person who knows who the Pope was in 1808 when Bardstown was founded. And a hand went up in the back of church and my heart sank. And I said, yes ma'am, she said your excellency, I think it was pious to seventh. Who in the world would know that it was pious to seventh? So I said to her, well, man, you're correct. And you notice I said I would love to give. So I negotiated, I went away from that church $20 lighter. Okay, who has the answer of, go ahead, shout it out. Say it again. Yeah, it says I hold this against you. I think that's close. That's close.  We'll talk after the session. You lost your first love. You lost your first love, that's exactly right. I hold this against you. This is the translation I like. I hold this against you. You have less love than you used to. Well, that's what our Holy Father back in 1975 said, one of the biggest difficulties is a loss of fervor. He said, and it is all the more serious because it comes from within. It is manifested in fatigue, disenchantment, compromise, lack of interest, and above all, a lack is a good document, isn't it? And then he says, but there are insidious things going on. This is after the Second Vatican Council that are almost claiming that we should not teach. He said, too frequently, one hears it said in various terms that to impose a truth, be that of the gospel or to impose a way, be that of salvation, cannot but be a violation of religious liberty. Then he goes on to say, this is, you're gonna wanna read chapter 80. This is a good verse 80, number 80. He said, it is certainly an error to impose something on the conscience. But then he says, to propose to their consciences the truth of the gospel and salvation in Jesus Christ with complete clarity and with the total respect for the free options which it presents, far from being an attack on religious liberty, fully respects that liberty. In other words, we should not be bashful in being fervent and taking an interest in the person we're cataclyzing and being convinced to share the truth with that person. Now, here's the part I wanna read to you especially. It's at the end of it. This is a, oh, hey, I found the quote on St. Teresa Benedicta. All right, here's the quote. Let us therefore persevere, excuse me, preserve our fervor of spirit. Let us preserve the delightful and comforting joy of evangelizing. Even when it is in tears that we must sow. May it mean for us as it did for John the Baptist, for Peter and Paul, for the other disciples, and for the multitude of splendid evangelizers all through the church's history. An interior enthusiasm that nobody and nothing can quench. An inside, may it be the great joy of our consecrated lives. And I don't think he means their consecrated lives of like a consecrated vocation. I think he's talking about each one of us in baptism is consecrated to the truth. And may the world of our time which is searching, sometimes with anguish, sometimes with hope be enabled to receive the good news not from an evangelizer. Now here's the part. This is the part we don't wanna be. Not from an evangelizer who is dejected, discouraged, impatient, or anxious. Who wants to go on vacation with somebody like that? But from a minister of the gospel whose lives grow with fervor who have first received the joy of Christ and who are willing to risk their lives so that the kingdom may be proclaimed and the church established in the midst of the world. Now are you telling me that's not a great paragraph? That's paragraph 80, Evangelium Nunciandi. Did you wanna hear the exact quote of St. Teresa Benedicta? Do not accept anything as truth if it lacks love and do not accept anything as love which lacks truth. Good, good statement. We desperately need this. How many of you have read the book by David Brooks called The Road to Character? It's about a two years old or so, year and a half old. Very, very good book. He's a columnist for the New York Times. He basically is criticizing our culture. He's saying there are many good things about our culture but one of the difficult things is that people today think they know everything. They're know-it-alls. They're too sure of themselves. And he said we have so much self-confidence that it's ruining us. We're not listening to each other. We just wanna tell each other what we think is the right thing, what our truth is. He said instead you don't want so much self-confidence as much as self-esteem. And self-esteem he says means I'm a better person than I used to be. See self-esteem has something that involves renewal. His name is David Brooks. He's on C-SPAN. He's on a couple of those Sunday morning programs when you're in church. So you can tape them and see. I wanna talk about one other hero because I think, how are we doing with my time? Does this mean I have that much left? Okay. No, we're all right. I'm delaying because I don't have to pay that money back there. I mentioned to you in the homily about the book by Survey's Pink Hares, a very good book. It's called The Spirituality of Martyrdom. And his basic point is to say that we've gotten away from the early church's commitment to what a martyr is. He said Stephen was not a martyr because he gave up his life. He was a martyr because he witnessed in his behavior to Jesus and nothing could stop him. It was the witness to the behavior. So it doesn't take courage as much as it takes humility to be a martyr. And my big hero right now because of my brother, Georgie, is Dr. Jerome Lejeune. How many of you know Dr. Jerome Lejeune? Okay, I see a couple of hands. Let me just tell you quickly who he was. He died in 1994. Now when he died in 1994, he was from France. He was a husband and a father, very faithful husband and father. He loved his family. He was a family doctor. He was also a geneticist. And in 1959, he discovered the cause down syndrome. And it was, he called it trisomy 21. If he had called it Lejeune syndrome, you'd all be raising your hands. But he was a humble guy. He went to San Francisco in 1969. And it was, he was given, I forget the group that was honoring him, but he was giving an award. And he spoke very bravely there. And he spoke about the fact that he hopes he will not regret the discovery he made because he fears that people will begin to take the lives of a child discovered to have down syndrome in the womb. That's happening terribly today. You know this, I think. They called it, the people who reported it called it the two earthquakes that occurred in San Francisco that day. Because there was a little tremor, literally an earthquake, but then there was his words. He was blackballed so much that he lost a lot of government contracts in France. He used to do all his research. He would meet with people with down syndrome and their families every morning, and then he would do his research in the afternoon. And he called the people he met to disinherit it. He said they were the ones that nobody cared about. He probably lost the capacity to get a Nobel Peace Prize. But he said over and over again, there's only one thing that matters, none for the least of your brother or sister. Thank God for saying John Paul II because John Paul II recognized him and actually appointed him president of the Pontifical Academy for Life in 1994, just months before he died. He never did, I have a meeting, but he was appointed the president there. He's also, there's a cause for canonization. What's the first level called? Servant of the Lord. I hope you will tell real hero stories to the people whom you, because nobody can touch the hearts of other people as real, I don't mean that everybody sets out to become a hero, but people who are, there's a lot of faithful people around, I'm sure in this room tell their story about things like de la June. We're moving it away from it simply being a debate on life as if people have options. I think we've seen it occur in the United States with the way in which, thank God for the little sisters of the poor because they have become, I told them they're the poster child for religious freedom. When people, I was on one day in the morning on Fox and Friends and in the afternoon, I was on Wolf Blitzer's situation room all because of the little sisters of the poor, because that gets the attention of our culture. We need to talk about real people. So let me give you, fortunately, it looks like, Ron looks like we're not gonna have that question and answer thing. You don't mind if I use up all 60 minutes. So I'm gonna give you then one, two, three, four, five, the five things that would be next steps on what I think you can do and I can do to help sway someone as you move that person to conversion to the truth and love of Jesus Christ. The first one, to pray for the gift of service. Pray to serve other people. It was C.S. Lewis who said that when we are in heaven, as we rejoice now whenever we're successful in life here on earth, when we have a success, when we're in heaven, we'll have that same sense of joy when that success happens in the life of another. It's a beautiful way to look at heaven. Pray that you will have that gift here on earth to be able to serve in such a way that when someone you're serving has had a success, that will fill you with such joy that joy will be transparent. Joy is not something that you can seek out. It shows up. It's discovered in your life. That's the first thing. Secondly, look into your life and your history to find what in your life are interested in, deeply to Jesus Christ. I mentioned to you at the beginning of this, I joked about the Kentucky Derby, but I mentioned my brother, Georgie, and that touched your hearts, many of you, I could see. You need to look and see what are the things that touch your life. Secondly, or thirdly, rather, be humble enough to know that in weakness, you will have success. There's a story told, it's a true story, of a seminarian who, on his first day in his apostolic work in a hospital, was told to go in and visit Mrs. Murphy. And he says, and by the way, she doesn't seem to be in a good mood. So he got all nervous and he went in there and he kicked her bed. And he somehow stumbled through talking about what was the gospel passage for the week. And he went out and he thought, oh my gosh, I can't believe I did that. I was, I got flustered, I was a complete failure. Maybe I'm not cut out for this. So he went back, every Thursday they did this, so he went back the next week. And he said, it was a little sheepish, and he went and the nurse at the nurse's station said, oh, aren't you the one who saw Mrs. Murphy last week? He said, yeah, I am. She said, I don't know what you did, but she made a turn for the better. So he kind of filled up with a little pride. And he walked into the room and he saw her and he says, Mrs. Murphy, she smiled at him.  And she said, you were. But she said, after you left, I thought to myself, I felt so sorry for you, it's a true story. This really is a true story. And she said, then it dawned on me that was the first time in a month that I thought of anybody but myself. In weakness, the fourth thing, there's only five. The fourth thing is in your prayer to exalt in the richness of the students you serve. Take enough of an interest that you begin to not just make up compliments because people can see through that, but genuinely see what the gifts are that are in this person that Christ wants to build on. I think it was why I mentioned to you for a while the pictorial directory. Find your way of getting to know more deeply and almost preparing yourself to think out of yourself. I'll tell you a story about Mother Teresa Calcutta, whom you know, they used to tell people, they'd say, Mother Teresa, you're only this big. Why is it that you can talk to a crowd of 1,000 people? And she said, well, when I was first a sister, I was conscious of my material, what I was gonna say. Then she said, I became conscious, the people that I was speaking to. And the first thing she said was no, I was conscious of how I looked actually, was the first thing she said. I was conscious of how I looked. Was my hair straight and all the rest of this stuff. Then I looked nervous. Then I was conscious of material. Then I was conscious of others. But she said, since I began my holy hour, conscious of God, God's presence in that room. And it frees us to be conscious, because we can just be ourselves and let God, and the final one that I'll mention has to do with the gift of mercy. Mercy does not belong to me or to you. It is lavishly given to us by our merciful Father. Jesus is the one who has constantly reached out through the Gospels and I hope in your life to touch your heart and make you aware of his lavish love and gift to you. It is simply that gift, like St. Mary Magdalene did on the first Easter, that is shared with others. Thank you for being good cats.


Going on everyone Sam here with late in sports cards. We are doing sports card Almanac ultra high-end multi-sport volume 11 case break number one Live hit draft style. So before we start We're going to randomize the case number and the names in the draft the same amount of times We have 10 participants 10 cases right now. This is number one. So once the case is picked up I'm going to open it. We're gonna show off every single card. It's gonna happen is once we are done showing the cards We're gonna have a live hit draft everybody will have Two minutes to make their selections if you do not make your selection in the a lot in amount of time We are I'm going to select a card for you based on to the best of my ability in terms of value at what spot you're at so again, I will put all of the Cards up here so you could see them. I have 10 cards. Thank you just grab them. They're out on the table there Sorry, I have 10 card stands. That's where the cards will go So you just you make your selection in YouTube or in Twitch What you'll do is write down your first name last initial and either your zip code or your order number one of the art to verify That it is you we'll have it up and we'll go that so let's do it everybody I'm gonna go over to our randomizer. This is gonna be for our case number and here are 10 participants as well I'm gonna roll the dice random each nine times good luck guys nine times one two three four five six seven eight nine That it's gonna be case number 10 case number 10 is what we're gonna be rolling with Case number 10 and then we're gonna go nine times on our draft order So what's gonna happen with this is whatever names on top will be pick number one all the way down to pick number 10 So good luck here guys nine times again. We've got nine times on the case. We're gonna go nine times on the names one two three four five six seven eight nine It's gonna be Chris a down to Joey a Chris a at the one spot Like I said, I will take you guys over here That is your draft order Chris a1 max g2 Greg m3 Alexandros for drew m5 Joey a6 John a7 Thomas J 8 Brandon a9 and Joey a10 good luck here everybody Let's get it started again while we are doing the draft no influencing the draft no discussing card values Zero tolerance on that you will get either timed out or banned if you do too many times. So yeah in case number 10. Good luck here guys You're writing a first name on yeah, you could do it on those you do have sticky note Whatever you want to do first then last name and order Yeah, yeah, we get easier on the Yeah, we're technically like sorting it. Yeah, yeah There we go again, you could see it from the top Yes, that is the order. Yes. Yes max Yes. All right. Here we go. Let's do it. Make sure I don't have any messages here. Good. Oh, I'm boy, huh boycotting All right, I'll pass them over to you again just keep them in order Yep Here we go Snatch by Craig visual card. All right first hit Wow to a five Hank Aaron from 2016 tops legacy of baseball Hammering Hank Aaron. Good Lord, dude. Oh my god.  Good luck on that everybody that is card number one Yeah, we still have three spots to go in the next one. Just so you guys know Well scared me for a second there on the case because they were in a weird. Wow, that's sick Upper deck exquisite one of 25 Sabrina, I and Esco Good Lord. That is like the grail of Sabrina I and Esco's 2020 21 Exquisite rookie patch auto Sabrina I and Esco. That's nasty Good luck on that one everybody Sabrina I and Esco. Good Lord, dude Good Lord, that is nasty Make sure I Got my hand card number three It's gonna be that is Josh giddy Panini one in one downtown That's sick, dude Heck yeah, man. That is fantastic Fantastic card right there Josh giddy on the downtown Very nice one there for everybody Steve taking a spot Carrie taking a spot in number two We are down to two to go and number two now guys. We drop you that link really quick. Yeah, we're doing all 10 tonight Jacob. Yes, sir To go guys makes time 10 per Simpleton 10 per case so there's a hundred spots total on the night or how much are they? 2200 2200 a spot That is gonna be wow Johnny you night is one of one cut auto That's that's awesome. That is not something you see every day from 2019 flawless Johnny you night is Johnny you on the cut auto man. Good gosh. That is sweet Johnny you Wow, that's awesome, man. It picks the camera a little bit here too. I got a little too excited and knocked it Is What's up wondering what that's on now probably like maybe a check or something. I Didn't see that Joshua. All right number five now guys. That could be true. That's a good point. What who's we got first slab of the day here? Yeah, that's gonna be wow 2016 Panini spectra Cristiano Ronaldo Good Lord man global icons autograph 28 of 40 for Portugal Cristiano Ronaldo There we go. Yeah, no discussing card value or influencing the draft in any way no tolerance. There it is classic 2011 tops update Mike trout one of the most Iconic cards of the 2000s Mike trout that is awesome, man Mike trout PSA 10 tops update I own to the next one now guys. Good luck. All right. We got bgs That's so sick dude 2016 tops triple threads Ken Griffey, Jr. bgs 9 5 10 true gem point 5 away from a 10 from a pristine that is Quad or trip 9 5's and a 10 9 5 10 Ken Griffey, Jr. Good Lord, man. Good Lord other PSA Ho-ho 2018 Panini Kaboom Yadis on tentacumpo the Greek freak PSA 10 That's an early ish Kaboom right there And that is awesome 2018 Kaboom Yadis backflip at a hundred likes on stream. I heard that too actually. Yeah, I heard that too as well 1987 Raphael Merrill card Our PSA is the first MJ. Oh, wow that is 2011 upper deck exquisite championship bling auto Authentic auto 10 of Michael Jordan the greatest of all time 25 of 99 MJ Michael Jordan. No, I don't see Bradley's messages We're doing this guy again. Got about this guy. Got it. Got it. Got it. He did this last almanac Now because you can make a new account That's okay All right, 21 punini contenders Championship auto or rookie ticket auto PSA 9 Trevor Lawrence T law That is sick dude Good luck to everybody on that one 21 punini contenders Trevor Lawrence PSA 9 All right guys. Let me get Sabrina gitty downtown Johnny you cut auto Christiana Ronaldo. Yeah, we can't just we can't talk about comps. Unfortunately max. Yeah, no discussing card value I know you're you're like a legit guy. I know you're just you're not like, you know No, no, you're good. You're good. You're good You're good riffy Kaboom, yeah That is the wise little Isaac and see law make sure I get everything into the stream here Again, if you guys would like to see any other cards up close Let me start the timer really quick. We've got Chris a Chris a Two minutes on the clock Chris again if You want to see a card up close, let me know we're gonna start the timer now though All the cards are up like I said if you want to see any of the cards up close again Let me know just when you are making your draft selection Please make sure to include either your zip code or your order number Chris a picking up the Jordan Let me double-check you have the order number up to just confirm that order or the zip code for Chris a Yeah, Chris a picking up the Michael Jordan Congrats Chris Michael Jordan Get that out of the way. Yes. Trevor Lawrence is out of 49 max. You are up now. I'm gonna start the two-minute timer I can show you the T Lawrence or the T law again PSA 9 on the T law again max when you make your selection. Just make sure to Include your Order number or your zip code max max g is up next about a minute 15 left on the clock here max About a minute 15 if you'd like to see any of the cards up close here. I'll let you guys See it again a little bit of everything Oh Gotcha, yeah And got max up next Danny see taking a spot next one down to just one left on the next Next break about 30 seconds or so left on the clock That is accurate max going with the T law congrats on that one buddy That's he law Alright Greg M up next One second here guys Greg gonna put two minutes on the clock for you my friend Two minutes on the clock get that card stand out of the way Start moving these around a little bit and you got the Sabrina you kind of see everything now got trout in the front you got the Greg going with the kaboom 3304 sounds good Greg got the kaboom buddy kaboom going to Greg M. There we go Greg Greg with the quick quick draw congrats, man Alexandros Alexandros s now at number four Alexandros at number four at the best view here. All right, Alexandros putting two minutes on the clock for you my friend Let's do it Joel be taking a spot in nine taking Joel Alexandros number four Thanks, there's always again Alexandros appreciate you buddy. Yeah, it's Alexandros Again, you've got the Hank Aaron Sabrina Inesco Josh Giddy Johnny United's cut auto Mike trout PSA 10 tops update one of the classics You've got the Ken Griffey jr. Two of three Sorry John try to get the best view for you here. I'm gonna do that maybe turn the Griffey I'm gonna say we need like to have a camera on like a hire on a hires go like that. I guess right there. There you go And Alexandros down to about 30 seconds left on the clock Johnny United's cut in the back there. It's a PSA nine Christiana Ronaldo specter to 40 two of three is gonna be Ken Griffey jr No problem, John Yes, then yes double-check emails here as well Could you potentially zoom in the top cam and just facing for the top camera fear you could but I'd probably go against it I'll give you about another 30 seconds or so Alexandros If not at that point, I will have to select for you Yeah, something elevated place the back row might be the move. No, we could do Let's try um, we'll keep the almanac box We'll keep like two almanac two or three almanac boxes. We'll put those up and then they'll be above about 30 more seconds Alexandros Keep twitch open just in case Let's see anything there Yeah, true gonna go with the Ken Griffey jr. For you two of three Ken Griffey jr. Two of three there you go Alexandros congrats my friend very nice very nice All right, we got drew em coming up next drew em on the clock Let me type that in really quick It's up trash. All right drew starting your clock right now Drew em drew you're gonna have to confirm with a you have to confirm with a zip code for us Or an order number doesn't really matter Yeah, that's true Move everything a little bit closer for you guys as well And he saw the trout PSA 10 Hank Aaron in the back as well Trying to move everything as best as possible Johnny United's cut auto Josh Giddy downtown You've got the Christiana Ronaldo PSA 9 spectra Auto as well drew em on this one drew em on this one for everything mess all the messages are coming through Looks like it. Yeah, if you'd like to see any card up close Drew you're down to about minute now Drew down to 23 seconds now Drew with 10 seconds to go now drew em number two is also sold out everybody I'll give you about another three. Come on. Give me about another three seconds here Or so drew unfortunately, I will have to select for you If not Last couple of seconds here for you drew. I drew we are on drama to take you the PSA 10 trout I'll be going to drew up next. We are on to Joey a Joey a next Before I do that. Let me do one thing and create a blog post For here's a link again to the draft order we got Joey a up next Joey a 10 seconds on the clock for you Joey got Joey John Thomas Brandon Joey Two minutes Joey Ronaldo 7 7 9 5 4 Yep, sometimes I'm a 9 5 4 there you go going to Joey. Thank you Joey John you're up now John a up next These hit draft these card stands out of the way move these up a little for you John again John if you want to see one up close Let me know this leading the best as possible Hank Aaron as well Good luck here John John a we've got she's how he got banned Going Hank Aaron John do you mind just I know it's you do you mind just dropping an order number and a zip code for us I Got trust me. I I know it's you but just I haven't seen it come through on this man Johnny nice John. I'll just have you zero seven seven two eight Off the last number zero seven seven two eight Hank Aaron zero seven seven two two Yeah, perfect. That's right. There you go John. Sorry about that John.  You're good. No worries John Thomas Jay. Let's go Derek picking up a spot number four I nescue. Let's go, baby Love it Thomas Six oh five two seven for Thomas Jay pick up the I nescue. That's awesome. Congrats One of 25 Exquisite RPA very nice. John. No, you're good man. You're good. You're good. No worries. No worries at all Like I said, I know it's you. I trust you Obviously, so no worries at all my friend. All right, we're down to Brandon a Between the unites and the giddy whichever one Brandon does not take we'll go to Joey. We'll go to Joey So Brandon a on the clock Brandon a on the clock Giddy two three five four sixteen There you go, I'll go giddy And that means Joey at the 10 spot we'll pick up the Johnny United's cut auto. There you go, Joey Alright It's gonna do it for the break guys. Thanks again For again this filled up up next. We've got number two. We got nine still to go tonight guys. Appreciate you very much


What's up everyone? My name is Alex. I'm one of the co-founders of MyInvestingClub.com, and I want to let you guys know about something special we're doing for our viewers on YouTube. So the most common question we get asked is, you know, how do I start day trading? So what me and my mentor about it is we create a free two-hour mentorship course for the brand new trader. It's going to be available at MyInvestingClub.co. The link is going to be right here. This is a free webinar that reveals our 12 secrets that every single brand new day trader should know before they start. I also want to let you guys know about something that's very unique to MIC. So if you have any questions about trading or you're curious about trading or you don't know if MIC is the right fit for you, now you can text our head mentor, Tash, whose number is going to be right here and he'll answer all the questions that you have in less than 24 hours. Thank you and enjoy the video. What's up guys? It's Harry Haas here. And today I'm going to be kind of going over a simple dip and rip pattern that everyone can learn. As always, I'm not a licensed financial advisor. This is not investment advice even if it seems like it. Education purposes only. But yeah, I just thought that I could talk about this pattern a little bit because it is something that I have been seeing occurring a lot lately. And I thought instead of going over all my trades and stuff like that, I'm just going to go over this kind of pattern for this week because I think it's like a really big kind of pattern. And so yeah, let's just jump right into it. This type of pattern is something that you can focus on a lot. It's something that I've been seeing occur a lot. And I guess it's really something that is more like a play it as you see it pattern. You can't come into every single day saying, all right, I'm just going to play the dip and rip pattern. I'm just going to do this because I think that kind of mindset is a little bit toxic. And I think that kind of mindset, we're really just looking to kind of play line to line. We can't go into every single day expecting the stock to do this pattern. I think it's good to kind of learn multiple patterns. So when you learn first bounce, you can kind of play it as you see it, right? You can say, okay, wow, I've identified a niche right here. This is something that I need to. There are people that do focus on like the low hanging fruit setup. That's something that's like, you know, a type of pattern that is usually kind of guaranteed to happen because on these day twos that are kind of broken and dead, we know that the odds are significantly in short favors. But for stuff like this, you know, this could spike all the way at the open and then you're like, oh my God, like I missed it, you know, I've, you know, maybe you're looking to play a first bounce on a scenario where it doesn't do something like this and it does something completely opposite. So this pattern is always kind of a play it as you see it one. You know, you can't be going into every single day saying, okay, I'm only going to focus on the different strategy because, you know, we might not get different reps for a week and you're trying to long every consolidation after a death candle. And then you kind of get screwed, right? It's just like people who go into the market saying, all right, I'm only going to focus on first bounce. I'm only going to focus on first bounce. You know, what if what if first bounces don't come in this type of pattern comes around? I think what everyone should do is I believe that, you know, this strategy is kind of, you know, it's not similar to the first bounce, but it's like if you have kind of a toolbox of patterns you've learned from watching the video, you know, it's just like kind of a lot of things like, you know, there are some patterns that happen a lot more frequently than others. This is a pattern that I've been seeing has been more frequent and these type of market conditions.  There are so many different scenarios that can occur. This is just one. So if you've watched my first bounce videos, you know, don't just throw away first bounce every day, you know, actively be looking for first bounce and actively be looking for other long patterns that I kind of talk about in my videos, you know, there was one pattern that I talked about a while ago where we kind of go up at the open, we consolidate on VWAP and then we go higher, you know, that that pattern happened with, I don't know, it started with an A and it happened on Thursday. But I remember watching that pattern and say, wow, that's straight out of my video, you know, but it's like, you need to kind of, I think you need to learn like maybe two or three patterns and say, okay, I know what the first bounce looks like, but you know, there's no first bounces today. So instead of just, you know, throwing in the towel and walk your way, you can, you can kind of learn like multiple kind of long patterns and say, wow, this is the dip and rip straight out of here is video.  This is something that I'm going to take, or maybe you've seen the VWAP one again, where we watch, you know, the stock kind of come up, grind on VWAP and then go higher. So all my videos, I think are really, really, it's important that you watch all of them and not just say, because if you focus on one thing, I think a problem is, and when I read the DMs every single day, it's people just trying to focus on one thing. They're like, well, I watched your volume video and I saw that there was, you know, some volume kind of that dried up. So I took along there. I'm like, yeah, man, but this is right after a death candle, you know, the stock is dead now.  So I think having two, three, four, uh, you know, uh, things that are going your way for the trade is something that's really important. Like if you're like, okay, it's a hot chick, you know, just down dump to a crucial support level, it's holding, I think we can go higher, that's four things already that you have, that's four things.  Are we down trending? Is there a death candle? You know, I see a lot of questions in weekend mentoring that are like, man, I saw a death candle and it recovered. I don't think the death candle strategy is a viable strategy.   And that's why we have risk management. So I think it's really important, like not to look for a sure thing every day. I think, you know, learning multiple patterns is really good. If you have a playbook of three patterns, I think that's really all you need. Hey guys, my name is Tosh Bradley. I'm one of the head mentors and moderators of my investing club. If you have any questions about getting started in trading, getting started in the MIC, MIC in general, text me at two, one, three, four, five, eight, five, nine, nine, seven. This is not a robot. It is me directly on the other end of my business line. And we'll get you in the club. We also have special promotions going on that I can get to you depending on your trading needs. Hit me up. That's a video. You know, there's a lot of people who are consistent with low hanging fruit doing the same thing every day.  But as a long trader, you know, we're bombarded with multiple things every day on these hot chicks, right? We have stocks that go straight up and then dump. We have so many different scenarios. So I think longing is something where it has kind of turned into an art for me because I'm like, oh, wow, there's the different pattern. That's something that I like.  So I think it's important to kind of watch multiple videos, definitely get educated and, you know, use, use my videos to say, okay, well, I put this and this and this together. Now I have a proper kind of playbook instead of just saying, oh, well, first bounce hasn't came for the week. I guess I'm not making any trades, right? You can learn something like this. And at least you are having, you know, two patterns in your playbook. Now you watch another one of my videos. There you go. Three patterns in the playbook. You can back test. You can get better. You can watch on demand. So I really would kind of, if you're looking to get into longing or if you all are already longing, I think it is really, really important that you kind of focus on trying to learn multiple things, multiple strategies, find what works for you, you know, always have a set risk, always stop out. But I think it is very, very important that you're kind of trying to learn multiple, multiple patterns because we have different things every single day that can make you successful. But anyway, that was just a little, little rant on kind of building a playbook, how to kind of do it. So yeah, let's get into the criteria for this one. So obviously we have a pre-market, we have a pre-market push, we have some nice actions, some nice uptrend pre-market. The market opens at 930. We kind of get a dip down.  It's usually kind of a stuff move or a lot of anxious longs trying to get in, hoping that it goes higher, breaks is high. Usually it's like a whole number or a half dollar kind of up here. That's kind of what I usually find. So we kind of get a stuff into that number and then we kind of go lower. What we're getting around this 945-ish area or it could even be 935, you know, it's just kind of ish because there are, you know, different things that can happen at different times. So we're kind of getting some consolidation right here. It's showing me that it can't break down. It can't break down. If the stock is a little bit under view at, that does not bother me. If this is a very, very big death candle, that bothers me. So we kind of want a slight pullback rather than a big, big death candle and a big, big panic. But again, that's why we kind of have this consolidation for a couple minutes to show us, okay, the stock is kind of starting to grind higher. It doesn't want to go lower. It's grinding higher. It's trapping shorts down here because, you know, the minute that this stock pops to an area like this, we have all longs chasing. We have all shorts pressing the buy button. The odds for longing are significantly higher because you have all these shorts who are trapped. They're forced to cover. You have all these chaser longs, then combine it with a pumper, combine it with other things, and you have a really good case for a long trade. You know, I'm a fan of taking the strength while you can. So that's why I like to sell a little bit early on these. I like to sell, you know, when I like to sell into strength because the minute the strength goes away, we could be in for a big dump. Because remember, we have all these people who are chasing when they finally see it start selling off. They get scared. They get anxious. They press sell. They're like, I'm already in the money. I'm just going to take it off here, right? So that's something that we need to remember. We need to think about everyone's motions. We have trapped shorts, number one. We have chaser longs, number two. And now we have pumpers. And usually we're going to almost always have a pumper. And usually up here when they see the stock start to go, they're like, all right, I'm in 20,000 shares or, you know, whatever they say. But, you know, that's also something that you want to be kind of aware of. So this is the kind of play by play. Obviously, I've talked about this hot check or hot check. You know, it's an uptrend. It's usually a lower float. You know, don't don't chase within the first few minutes. Wait for a dip down to support. Wait for some consolidation so it doesn't dump. Let shorts get trapped chasing the weakness. That that's something that is also because a lot of people who are short and are usually shorting into this kind of support. I mean, at MIC, we're always teaching to short into pops. You'll never hear me or Tosh or any of the mods talk about shorting into weakness. We always say, wait for a pop, wait for a pop. And, you know, kind of risk like into like kind of risk a little bit over that pop. But on a hot check and something like this, you're going to hear some someone like Alex say, you know, this is an avoid to short in the first place because this stock is a hot check and a stock that someone is really paying attention to. Right. So yeah, and we're always looking to sell into strength.   So that's why I'm always a big advocate of always selling into strength. I think it works really well. It's just like, you know, covering into weakness when you're covering into a dump. Right. So it's always something that I am always aware of. I'm always in chat, you know, hit me up, send me a DM and maybe we could even, you know, talk about stuff like this. Thank you so much for watching our video. If you want to see more of our videos, please subscribe to our YouTube channel by clicking the button here. We do our best to post a new video every single day. If you have any questions about MIC or any general trading questions, please text Tosh using the number here. Also stay up to date by watching some of our most recent videos right over here.