Okay. Thank you, everyone, for joining us today. Welcome to our live webinar for CNCF. Kube Clarity, Bringing Clarity to your Kubernetes Artifacts Security. I'm Libby Schultz and I'll be moderating today's webinar. I'm going to read our code of conduct and then hand over to Alexey Kravtsov, Software Team Lead and Zohar Kaufman, Director of Engineering. Excuse me, Principal Engineer, both with Cisco. A few housekeeping items before we get started. During the webinar, you are not able to talk as an attendee. But you can see our lovely chat box on the right hand side. Please feel free to drop your questions there and we'll get to as many as we can. This is an official webinar of the CNCF and as such a subject to the CNCF code of conduct. Please do not add anything to the chat or questions that would be in violation of that code of conduct and please be respectful of all of our fellow participants and presenters. Please also note that the recording and slides will be posted later today to the CNCF online programs page at community.cncf.io under online programs. They are also available via your registration link that you use today and the recording will be on our online programs YouTube playlist on the CNCF channel. With that, I will hand things over to Alexey and Zohar to start our presentation today. Thank you very much Liby for this introduction. Good morning, good evening, good afternoon everyone wherever you are in the world. I'm Zohar Kaufman. I was the co-founder and CTO of Portshift. It was a startup in the Kubernetes security area that was acquired one and a half years ago by Cisco. And together with me today is Alexey Kravsov. Alexey, would you like to introduce yourself? Yeah, sure. Hello everybody. My name is Alexey Kravsov. Also from the days of Portshift, so we're leading the enforcement controller team and mainly active in the Kubernetes fields also open sources like Cube Clarity and API Clarity. Thank you. Okay, so today we will talk about how we can help you bring clarity to your Kubernetes artifacts. So before diving into the material that we organized for you today, I would like to discuss two big mishaps that happened in the last year. So one of them is Log4j. So Log4j is very popular. How popular? Every Java application or microservice that is out there is usually using Log4j. And it was discovered a very enormous flaw. It was just before Christmas last year. It allowed attackers to execute code remotely on the target computer, which would let them steal data, install malware or take control of all the old system. So there were hundreds of millions of attempts to attack and major breach were disclosed. And so let's go back to December 2021. I'm an owner of such an application that is using Java, that is probably using Log4j. How would they know if I'm vulnerable or not, if I'm actually using Log4j or not? So it's a good question. We will answer it in a moment. Another very big happening or mis-happening is the dependency confusion. So it happened again. It was publicized on September last year by a researcher named Alex Berson. So he is a nice guy, tried to hack into companies by contract. So letting them know that he's trying and winning money if he succeeds. And of course disclosing everything that he is doing. So it's all legal and everything is fine. So he tried to do it using packages. So any software now is using lots of packages. Some of them are probably open sourced. And these open source packages can be hosted either privately in the local registry of the company or maybe in the public. So he wanted to upload his code to the public registry and actually tricking developers in order to use it and then running code inside their applications. So he had a very nice trick of letting him know that somebody is using his code. He encoded all the information of the host and developer and everything inside a DNS request that was sent to him. And then he knew if such a DNS request followed through then he knew that his code is running somewhere. So the first thing he tried is typosquoting. It's an attack that leveraging typos. So I'm taking a very popular package. I'm doing like a minor typo and uploading this package with this typo in the public repository. So if a developer is instead of Q Web that is depicted here, he just prints Q Web with a typo then maybe he would use my version of the library. So this was not so successful. And then he thought about something much more clever. So there are package managers that are used widely within different languages. So for example, there is a pip of Python is using PyPy which is Python package index. And these package managers, if they are giving the relevant option with PyPy with minus, minus extra index URL, then they are searching also the public repositories and not only the private ones for the packages, and they are doing something that sounds logical. And just looking at the for package in all places and using the latest and greatest version of that package. So it sounds, you know, logical. I want to use the latest, but it's open up a door for hackers. So let's assume that I have a package that is only on my private registry. It's not anywhere in the public. And the version is like here 2<IP_ADDRESS>. And now somehow, someone knows that I'm using this private package. And this someone, Alex Burson in this case, is uploading a public package with the same name to some public repository, but with a enormously big version. So if someone is using this parameter and this package, then they will use Alex package and not their own. So he was not sure it's going to work. The way that he knew which packages are used privately is using in JavaScript, you have a filing name package.json. So it contains the name of all the JavaScript product dependencies. So some of them are public, some of them are private. So this way, he knew a list of private packages used around Microsoft, Apple, and various other big companies. And he tried them all and he uploaded many, many packages to the public repositories. And surprise, surprise, almost all the companies he targeted, he managed them to run his code inside their applications. And while you trust someone, someone code, then they can do anything on your machine. So this was a very, you know, very famous, very famous incident. And it raises the question, how do we know which packages we are actually using so we know that we wanted to use the private ones but which ones are actually used. So taking this into account, let's review our agenda. So first of all, we'll pinpoint the problem that we are going to solve, you know, bringing clarity to our runtime Kubernetes. And then we will talk about vulnerability detection challenges. We will introduce an open source named cube clarity and review its high level architecture, do a cool demo and also talk a little bit about the roadmap and of course we will be happy to answer any questions that you will have. So problem statement, we want to scan for vulnerabilities. And so the first thing that we want is to know the building blocks of our software. So which packages are we really using. And again, think about the dependency confusion. It's not such a trivial question. Second, we want also to detect vulnerabilities in these building blocks. So even if it are the these vulnerabilities are discovered post deployment so maybe see in CICD everything was okay but in runtime, during runtime, the log for J issue is discovered and I want to know that I'm now vulnerable. I would like to correlate all the vulnerable building blocks across my applications. So again, if we take take look for J, I would like to know all the application that I'm using a production that are actually vulnerable or using this look for J flawed version. So we want to do a remediation of all my applications following the discovered vulnerability. But we have few challenge before we introduce a solution to that we have we have few challenges that we need to solve. The first one is the vulnerability detection challenge of software bill of material, or in short as bomb. So as bomb is the base of any vulnerability system. So we need to know our building blocks and if we know the building blocks, then we, we can list the vulnerabilities for each of them. But it's not that easy to know the S bomb for our packet all our software applications and packages. The problem the challenges here is that various program languages are used and each of them may use different package managers. Some of them are listed here for example Java using Maven node is using NPA NPM Python is using pipeline and there are go models and the others. Next, the OS can also introduce vulnerabilities and are different than various OS distributions and and also their package dependency information, and it's not a while building the image probably we will strip it. So if we did just take the image that was produced by our CD maybe we lack this information of software bill of material. So taking all this into account, we need, we will see in a few minutes our solution to that. But let's assume that we have the, the software bill of material the S bomb. And now we just want to know which vulnerabilities are there in these list of packages. So, there are also challenges here. So, there are many, many vulnerability scanners or S bomb analyzer in the, in another name that can be used. Some of them are scanning containers other scanning directories of files. Some of them are better in specific languages, let's say Python others are good in JavaScript or Ruby or node. And there are of course, various linux distributions and maybe one scanner is very good at detecting vulnerabilities in the OS level, but it's not that good scanning JavaScript. So we try, we need to combine, let's say few scanners best of breed, but each of them has their own format, and maybe also their own way of ingesting the software bill of material, either SPD existed here or cyclone deeks. So it's not trivial to take all these and unite the results of few scanners. Next is, let's assume that every, every, we solved the two problems that we just discussed. How and when should we scan. So there are different phases of, you know, of the CI CD, there is a source code, and then it's pushed to a deep triple, and then we compile it and build images and then deploy and then have it in runtime. So each of these stages is adding actually is adding each of these adding a place where new vulnerabilities can be introduced and may where should we scan. So if we scan in all stages, maybe we are doing excessive work. Otherwise, if we are scanning only in one place, maybe we are losing information that we can gain if we scan for in other places. So, again, this is a challenge and we will see our solution to that challenge in a moment. So just to read just before going to the solution. So looking at the applications applications are built from application resources that are directories or images, each of them having packages and the packages may enclose vulnerabilities. So if we are good solution that to the challenges that we already described should should answer the question where should we store the S bomb and vulnerability information, how our applications are affected by new vulnerabilities that are discovered. And we, we should be able to traverse this graph very easily. So if I have an application, I should quickly know which resources and packages is it using and which vulnerabilities are in copas there. And also the vice versa, if I have a vulnerability look for Jay, I would like to know which packages application resources and applications are using this package. So this is it from my side and now we will turn to Alex say to show you our solution cube clarity. Thank you. So one second. Great. So, exactly for the problems that are described, we created this solution. So what it includes. So we tried to create, you can say an universal scanner and S bomb analyzers. So we, we actually use different scanners that you just gave him an image or the directory and they just calculated it for vulnerabilities. And then a newer scanner came which was better and we tried to understand how to compare this. And we eventually saw that if you get an accurate bill of materials that will lead yield in accurate vulnerability detection because if you don't analyze the certain package correctly. So you will definitely not find that vulnerability. So first of all, we split the vulnerability scan in two phases and each phase has its own benefits. Actually, it's not only for vulnerability detection. So that's first we treat images. We can analyze and scan images and directories. And it's also useful for serverless. So we can not only scan CI CD pipelines as described, but we can also scan runtime Kubernetes clusters, meaning all the pods that run in your cluster and I will show you that in a second. And so we don't try to be a scanner product. We don't try to create scanning logic or S bomb analyzing logic. Instead, we want to use the best tools. And we saw that if we combine the leading tools, we get the higher accuracy. And so that's what we did. We created basically a pluggable infrastructure to plug your own or the popular solutions for S bomb generation and also from vulnerability scanning. And so that's the pluggable and the universal scanner, you can call it. And so after that, after we scan all the resources, a bunch of directories and images, eventually we want to group them logically under certain applications. For example, I have my Kubernetes cluster and I have a pod that consists of five containers. I don't know, some heavy logic or somebody decided to do it. I want somehow to or even my application consists of several pods. I want to combine all the resources of the pods images, directories and so on into one logical application. So if I have an issue, I will know what application I should treat and maybe who I should alert about it. And of course, it's not only about vulnerabilities and as bomb gives you valuable information about the licenses that are being used in your software and also information about programming languages and more and more. And so the new and popular S bomb formats, they support a lot of major data actually on top of it. And so to address the scan stages, we can split like we said, we will splitting the content analyzer we call it the content analyze will eventually generate the S bomb using several S bomb generators. It will understand what packages consists from your in your image or directory and the output will be if the input is an image or file system. The output will be an S bomb and this S bomb can be used as the input for the vulnerability scanner and these are the two main components, the content analyzer and the vulnerability scanner, which again I'll show you in a second they all consist of parallel analyzers and scanners. And these are the two building blocks that we use across all our solution. So the first one is the content analyzer. So as I said, the input can be an image or directory, and then we need to actually the plugin or the converter needs to convert it into format of each analyzer. And we can also put S bomb as an input. So for example, if I want to analyze a my base image OS base image, and I want to put the S bomb of the code of my application I can merge the, the S bomb of the image. And the S bomb of the application into one big S bomb because that's eventually what is running in your application right it's the base image that you started from and the your logic that is on top of it. And of course we need to merge the S bomb result because there can be duplications and probably multiples analyzer will find the same so we need to flatten. And we will show exactly who found what and which one of the analyzer miss some and the same concept goes for the vulnerability scanners. We basically can scan a directory right away or we can use the S bomb that produced in the previous phase by the content analyzer. And again we need probably to format it to each scanner, how it expects it in order to scan the S bomb or the directory for vulnerabilities. And again it's kind of outputs the vulnerabilities in different format they are on private JSON or popular standards, maybe like Cyclone Beaks. But eventually we need to format and merge them all to get the clear result of all the scanners who found which vulnerabilities and some filtering logic of course to get the final result. And you can mix and match and spread these two building blocks across different phases. For example you can analyze your code when you build in the application you can analyze your image when you build in the image and then you can merge everything and to scan this one S bomb once after you have all the packages and all your dependencies across all the phases in your CICD pipelines. And on top of that like I said we offer runtime scans which I'll show you in the second it can also be used for serverless and also I'll show you how we manage all the resources I mean the images and how they belong to application. And how can I traverse the object tree that's all showed meaning how can I see what application has what which images, then these images consist of which packages and these packages links to vulnerabilities and any way you can just imagine in this tree. So that's a high level architecture of the whole solution. Basically we integrate with CICD pipelines like I showed you with the SCLI using two commands scan and analyze. We have a user interface that will show you in a second that the user can interact with. We have a database of S bombs just to cache stuff because we saw that the heavy logic is to fetch and extract the image and to go over all the layers to understand exactly the content so we keep this database for better performance and I will show you in a second what is the benefit of it. And we have the runtime scan orchestrator that basically spins a job a Kubernetes job for each unique image in the target namespaces and that I want to scan. And once each job is complete scan and analyzing again we have these two building blocks also in in our jobs. So the report the results are reported back to the back end stored in the database. And so if I have this one pod that consists from image one and two two jobs will be created for each image. If I have these two replicas this pod into replicas so I will do the same thing. I mean just once I will spin only two jobs in total each one for a unique image in the container. So what what is it good for so we saw that the scans are much faster now because to if you have already the S bomb which again the main consumer to produce it so it decreases from minutes like five minutes or even more for big images to just a few seconds. And that means that you can also integrate these tools in your admission control in Kubernetes where they are limited to a very low amount of time it can be said 10 or 30 seconds depends on the configuration. And again you can discover your vulnerabilities across your stages and not only after the image was built for example and you just prevent it from being pushed. And like Zor said some of the packages may be scrapped from the final binary and you just lose these dependencies and obviously the vulnerabilities and not lose the vulnerabilities but lose their detection. And eventually we saw it on ourselves so we bet on one scanner to be the best and then another scanner became the leading one and we needed to change everything and we said hey why not just plug in more and more scanners and then we will have the optimal solution and we actually saw that we. Got the highest detection percentage this method and I mentioned serverless again. And so cool so let's go to the demo. And show you. And so here is the repo and keep clarity under open clarity with some other interesting projects. And so basically it's everything that I described and it lists all the features and all you need to do to have it running in your Kubernetes cluster you just need to add the help repo and then. And you can create the help values you can configure it as much as you want you can set different analyzers or scanners and to configure a lot of stuff there. And then just a simple helm installation and then what I'm doing here I'm just port forwarding into two cube clarity is UI and I'm accessing it on the local port. So, I hope the port forwarding is still alive. Looks good. And that should be the UI of cube clarity. Great so as you can see this is the dashboard of cube clarity we try to make it as actionable as possible meaning we don't flood it with information but all these things are meant to be a really actionable and allow you to fix your vulnerabilities and gain insight of the components of your software. So for example, here we see I already ran a few scans before, but here you can see that I have this amount of vulnerabilities mind cluster. These out of these vulnerabilities I have 438, which are fixable. And here we sort them according to severity so for example, if I have critical vulnerabilities which are solvable like you can just click on this. And it takes me to the vulnerabilities page with all the filters are set only vulnerabilities which are critical and have fixes, I can sort them according to. Sorry, so here it is only critical but if I sort them, it also also sorts them according to the CVSS, in this case, 998. So the same goes for for the other severities if I want to tackle all the high severities separately. So here you see that I maybe want to try to handle this first, and maybe the lower CVSS correlator. And again, I can apply all the filters upon all fields here and columns. So if I'm going back to the dashboard, I can see that I can show my top five vulnerable applications sorted by severities. Again, the applications are totally logical grouping and I will show you how it's helpful in Kubernetes and also non Kubernetes. I can see which are the most vulnerable resources. So these are the images that are most vulnerable. I have this image with 31 vulnerabilities. Again, everything is clickable and I can go to the vulnerabilities. And I see that my free type package, for example, is the most vulnerable package in my system. So I can go also from here in a second, I will show you how I can traverse all the object tree and prefer scans and all that. So just another look. So here we have information which is not necessarily related to security. So here we count and show you the packages by their open source license or license. And then you can see some licenses that are the distribution. For example, if you want everything to be MIT or Apache or I don't know whatever you want. So you can monitor it here and of course, everything is clickable. So you can check and go filter these packages. Everything is filtered by MIT already. So it's not just to show you data, but you can also focus on all your Java applications, for example. And you can look at it this way. We also added here a new vulnerability trends.  So you scan it and scan it and each time you have 1000 vulnerabilities. So each scan, you will see 1000 vulnerabilities. Meaning if a new vulnerability will be discovered, you might miss it because what is 1000 versus 1001. So here we created a new vulnerability trends. Meaning if you one time scan 1000, great, it will be this kind. For example, in the next kind, if nothing new or discovered, you will see a flat line until a new vulnerability will be introduced. So this way you will, you are not distracted by existing vulnerabilities that you already attended and you only focusing on newly discovered vulnerabilities. So that's the dashboard. So as I said, here we have applications. For example, in runtime scan, all these were detected automatically. In this case, these are pods that are running in the Sockshop. This is the Sockshop demo application. It is running in the Sockshop environment. And these are the labels. All of these fields and information was filled automatically. Following the runtime scan, I will show you how this happened. Second, I didn't mention it, but we also do CS Docker benchmark on your images. So you can see the best practices of the way you created your image or you missed something in the Docker file or something like this. You can choose it all both in CI CD and in a runtime scan. I'll show you in a second. And of course, as I mentioned, you can traverse these objects. So for example, I have my user DB application. It has 113 packages. So if I click on this, this basically the S-bomb. But I can go first to the resources, for example. I see, okay, this is the image that the only image that belongs to this application and can go up the tree back to the application. So I can go back to the resource that I just saw. I can see all the packages of this resource and I can jump to the vulnerabilities for this package. So this is how I traverse the tree that Zor showed in the slide. I can go in every direction. So I can see, okay, this vulnerability, for example, in the log4j example that Zor gave. So I can, okay, I discovered, let's say this one is log4j. Let's see all the images that are affected by log4j and say, okay, these are the images. Cool. So I need to probably if I'll fix this application resource for CVE, this and this. So I will know what to treat in my image. And again, if I go going from packages and I can go to the application resources. So I, sorry, I clicked on drill down. I forgot to mention in each line, if you go, if you click on it, you see some more details about it. And here you can list all the applications and resources that use it in details. And whatever the image hashes, you can click on it. Of course, it will lead you back to the image. And here is the interesting part where we actually create a competition between SBOM analyzers. So we can see for each package. For example, if I executed several analyzers, I didn't mention, but we currently support SIFT and GOMOD DX, GOMOD, Cyclone DX analyzers. And in vulnerability scanners, we support the gripe and the dependency track. And we plan to plug more and more. And we, of course, welcome the community and everybody who wishes to donate more and more scanner integrations. So here you can say, okay, this scanner was better for JavaScript. Because this package wasn't detected by GOMOD or whatever. And so that's, that can be also useful for this. And yeah, so I basically that solves the management of your vulnerabilities and SBOMs and the traversal between the affected elements. And to see if you're interested in operational information like coding languages and license types and so on. So you can traverse it in any direction that you want. Of course, each screen here has filters to find exactly what you need and sort according to any property here. So I'll just show you real quick the runtime scan. I already executed it. So here we actually need to, we will introduce a schedule scan really quick in the upcoming days. So currently the only option is whether you want CS Docker benchmark or not. So for example, if I disable it, and I just start the scan, I can select the scope of the names. These names are detected automatically in my cluster. So if I want to scan, I want to add, I don't know, Istio system, I can remove it and I can just initiate the scan. So basically what is going on currently relates to the high level architecture that I showed you. We discover all the pods in the namespace. We discovered the unique images, spin a job for each image. And then we check in the SBOM DB and that's why the result was so quick. Now when I scan more than 10 images now. Yeah, so I see that 13 images were affected by the scan. I can also filter by application by vulnerability severity. For example, show me all the resources, elements, sorry, that are affected by critical vulnerabilities. So I have 42 critical vulnerabilities, which I can go there. As you can see, we have something that we call a system filter that show you the context that we are watching the screens now. So we reuse the same screens. We don't put the information in different places. So now I'm focusing on the vulnerabilities. So instead of each time going back here and clicking on packages, so I can go from here to vulnerabilities, back to packages, back to affected applications. And again, if I want to narrow the search, I can do it with a more critical vulnerability. As you can see, all the filters are set automatically here. And I can also delete this filter.  So yeah, just let me show you if I enable the CIS Docker benchmark again. So here you don't see the section, but if I scan it again, so it should take a bit longer because we are doing extra work here. It's not only S-BOM and vulnerability detection. We also benchmark for CIS Docker this time. So I hope that in a few seconds we can show the results. And again, all this is under active development. We change this every day adding more and more features to it. So yeah, this time you see the Docker benchmark. For example, you can filter it not only vulnerabilities. So Docker benchmark not related to packages and vulnerabilities, it's related to images. So I can see all the images that have fatal warning, for example. And again, I can drill down and see the exact reasons for that. So one last feature that I want to show is the integration maybe with CICD pipelines. So I can create my application manually. For example, demo app. I can say that's going to be a pod, because it doesn't really matter. App equals demo. I don't need to set the environment for now. So I can, we can search it from here, application name, for example, contains demo. And this is my application. So as you see, no vulnerabilities or Docker benchmark or packages or anything, because I don't know anything about it. I just created it. So I want to scan it in ICLI, which basically mimics the CICD. This CLI can be used in CITD pipeline. So again, everything is the read me of the project and just created it quickly. So I want to type it. This is the forwarding screen. Can you still see my screen? Zor? Yes, we can still see your screen. Okay. Sorry, I clicked on something. I hope it didn't hit the share. Okay. Cool. So basically here I copied all the CLI to analyze the NGINX, for example, the NGINX image. I just need to provide the application ID, which is created here. So, yeah, it could take, I don't know, about several seconds or up to a minute to analyze. Okay, great. It was quick to analyze the NGINX image. And so this actually produced the SBOM demo app dot SBOM. That's what I did. So you can see it here. So let's scan this SBOM file using our scanner. So I can also control the scanners that are used for simplicity and quickness. I will just use gripe for now. So basically it tells you to scan the demo app dot SBOM and the input type is SBOM and not an image. Again, I'll need the application ID here. I forgot to mention everything that you see in the UI. We have an API for it. So you don't have to go to the UI and stuff like this. We have a swagger and a generated code that you can create your own tools programmatically to fetch all the required information. So that's exactly what we use in the UI. So now I scanned this SBOM. And also if I want to also scan it for Docker file. So sorry, CS Docker benchmark. I can run this additionally in the app ID. So this also should take several seconds. And I will show you if I refresh, I will have all this information in the UI and actually in my backend. Because I use the, I'll show you, I'll use everywhere the minus E flag, which basically tells you to export the information to this address, which is currently local host, but it can be anything. I just use port forward. So if I refresh. So you can see that all the licenses are being analyzed. I know all the vulnerabilities, the CS Docker benchmark of this image. I know the packages. I can see the SBOM and all the vulnerabilities again, sort them and do whatever I want. Probably something was affected here in the newly discovered vulnerabilities. But I think that's pretty much overall view of all the pictures that we have. And just a quick word about our roadmap. So of course we're planning to integrate additional SBOM analyzers and scanners because this is the core of the tool and the idea to run as many as possible and the best that suits your needs and programming languages and always distributions to get the highest detection results. So we are working actively to integrate with supply chain security and six store and image signing. And all that tools like in total cosign and all the six store elements. So that's what we actively working on now. And of course system settings and user management is always nice. So that's the next to come. Thank you very much. Thank you. Yeah, let's go ahead and take some everybody pop them in the chat box if you have any. So until they will be populated, I'll just mention why we cared. This is because we are using this open source in our own soft in our own offering. And of course we are welcoming everybody in the community to contribute to that. So you and others may also use this generic scanner that is bringing you the best of all worlds. Anyone have any questions? There we go. Yes, so great question. The question is do we have repo containing fixed open source package versions under fixed pack mediation. So great question not yet. So we have fixed version and you can go to the external links that are known in the vulnerability database. But that's a great item. I think that we can add on the map. So we brought the remediation to the point where we detect which are the vulnerable elements and what application it affects. But I think that it will be great to maybe automate some procedure. Like maybe dependable is doing in GitHub that says, oh, I created already detected all the fixes and I prepared the full request for you just to prove it. So maybe for environment that don't have dependable and tools like this, maybe also can be useful. So thanks a lot for the advice. All right. Does anyone else have a question? Going once, going twice. Okay, well, with that, we'll go ahead and wrap up. Thank you so much, Alexi and Zohar for your presentation. Looks like it was very concise and everyone is pretty clear. If you want to share in the chat any channels where anyone can reach you or follow up with any additional questions, feel free to pop those into the chat now for everyone. And if not, we will see everyone the next time around in our, in another CNCF live webinar. Thank you both so much for hosting. Thanks a lot, Libby. Thanks a lot, everybody. Bye bye. Bye.


Hello lads, welcome back to the Q&A. First question from WonderingEye, greetings Golden One. I have noticed that you have some epic helmets on your bookshelf. And I've also seen some truly glorious pictures of you wearing different historical helmets. As someone who is considering to start collecting replicas of various historical helmets, armors, swords, etc. May ask where you have gotten your helmets from. Now first of all most these you see in the epic pictures are, they were supplied by the photographers. So they are not actually mine. But once on the bookshelf I can link from the store where I bought them from in the comment section. And yeah, moving on to the question. Also do you have any personal favorites among helmets, etc. from history? Some of my favorite helmets are the helmets found at Valseada and Germanby. And among swords I personally find Sabres to be an elegant weapon. Thank you for your glorious work. And thank you for your support. I really like the Corinthian Hellenic helmets. And I also like the Valseada Viking helmets or not Viking helmets, but Nordic helmets. So these two, obviously something I do not like. And what I never ever want to see is these typical Viking helmets with horns. These really silly ones. So that is absolutely absolutely blasphemous, if anything. But to answer the question in regards to helmets, at least the Corinthian Helms and also the Valseada style Nordic Helms. In regards to swords, etc. I don't have any particular preference there. Obviously a massive claymore is always testosterone. So yeah, that's my answer to that question. Great Lion of Sweden. It has been interesting of late to see how the issue of South American immigration to the United States has been handled by Trump. He has been good to his word on some things, but not all. How do you think he should handle the illegal caravan? Should it reach the border in light of the outraged level against his presidency? Well, I've said a few things about Trump in the past and I say the same thing now. He obviously has the content with a lot of different factions within the United States. He might have a lot of power, but he is not the only one in the United States that has a lot of power. He has the content with a deep state, so even if he has promised a wall, it is still a very rocky road to actually getting said wall. So obviously it can't come as a surprise to anyone who has an understanding of how the states in the West works. The president and the people who elected him, they are not the ultimate rulers. The ultimate rulers are the people behind the scenes and I'm not even talking about any particular ethnic group here. I'm talking about many different interests, many different factions that are vying for control and who are obviously looking out for their own interests. So that is my take on Donald Trump and everything he does. He needs to give some to get some. Hopefully he has given enough to at least Israel lobby to be able to get some support in the native affairs, so to speak. So anyway, I don't know if that was a good answer or not, but I think Trump is still good. He's trying at least to make America great again, but he has a lot of people against him. So it's not easy, but I salute him for trying and then obviously I don't endorse everything that he does. But yet again, he isn't the sole ruler of America. So, but anyway, I hope he gets the wall done at least. Next question. I recently bought the Byzantine two-headed eagle t-shirt from Ligigloria. I was wondering what does the black sun mean to you?  But for me, it's a reawakening or enlightenment or rebirth. So that is why I have it there. And obviously the Byzantine eagle stands for European unity. So the connection of the Byzantine eagle with the black sun stands for both European unity and for enlightenment or revival or reawakening. Next question. Great lion of bubonic proportions. Thank you. A most kind compliment. Who, in your humble view, is the most glorious, based and high-thumous Roman emperor of all time. Not including Martin Septim as he turned into a dragon god and that's hardly sporting. So Martin Septim is an emperor in Oblivion. So the game before Skyrim. Great game by the way. I would probably say Marcus Aurelius, just because of his reign, relatively peaceful. And he was on the throne or in the position of emperor for quite some time. And he wrote his meditations, which has to count for something. He tried to live in accord with higher ideals as should be done by someone who has the ultimate power. So he tried to be the best possible man he could be. And the meditations, that was notes to himself actually. So it wasn't really a guideline for others, it was a guideline for himself. But I think it's really impressive that an emperor who is yet the most powerful human on earth still takes that responsibility that he needs to be accountable to something or someone. And that is his own guidelines. So I would probably say Marcus Aurelius just because of that and based upon the reign of his empire. After him there was a number of really bad emperors and that's obviously not something that can be admired. So yeah. Last question. Greetings, northern brother. I recently partially dislocated my shoulder while practicing wrestling. I'm slowly getting back to weights, but it will take a few months until full recovery. I'm currently focusing on light weights to avoid pain and high reps. Also trying to include isolations, exercises. Do you have any training advice to give to any of your loyal legioners who got injured during battle? Any advice from you would be highly appreciated. Respectful regards. Well basically what you are doing now is the correct way to go about it. So definitely just light weights as soon as you feel even the slightest pain. Just decrease the weights even more. Focus fully on the range of motion, on contact with the muscles and just getting some blood flowing and keeping the body somewhat active until you recover. So the basic rule here is to try to train but as soon as you feel even the slightest discomfort then lower the weight. And also you can do a lot of walking as well if you want to get some sort of light cardio in. So put in a podcast, go for a walk of about 45 minutes or something like that. But anyway to conclude the answer there, just continue as you're doing. That's the correct way to go about it. So anyway, thank you for tuning in. XOXO. BOOM!


Hello everyone, this is Dave Vellante with theCUBE. On December 9th, theCUBE 365 will be hosting GreenLake Day brought to you by Hewlett Packard Enterprise. Now GreenLake is HPE's as a service initiative. It's designed to bring a cloud-like experience to your IT environment, regardless of physical location. Now let me give you my take on what's happening here. Look, if you're a company that has relied primarily on selling hardware and infrastructure software on premises for decades and you don't own a public cloud, public cloud, well, you'd better have a strategy that supports the single most important trend in the business over the past decade and that's cloud computing. HPE formally announced GreenLake a year ago and really was the first to do so in the modern era. We're seeing others follow suit and why not? The infrastructure world is taking a page out of the SaaS business from a transaction and pricing standpoint where SaaS models are being applied to large portfolios of companies that sell and service compute storage and networking gear and associated software. Now, like SaaS, these models generally require customers to lock in to a term of at least a year or more and they'll require the customer to commit to a minimum threshold of capacity. So it's not a perfect replica of the pure pay by the drink cancel anytime public cloud model. But as I've said, neither is most SaaS. For instance, when you buy from Workday and Salesforce and ServiceNow and many others, you have to commit to a term. Now with infrastructure, it's even more complex because the vendor has to install capacity and commit that to the customer. If you so choose, you can scale up or down and only pay for what you use as long as you commit to the term and pay for a certain minimum. So it's a shared risk model, which is a big step in the right direction. Now, I will tell you that initiatives like GreenLake involve much more than playing financial games. I mean, that technique has been around forever since the mainframe days. No, true as a service models require entirely new thinking around product design, Salesforce compensation, tooling to provide transparency and predictability, et cetera. For example, technology vendors, they got to get out of the mindset of selling boxes. They have to think about packaging services. When you sell a box, you drop it on the loading dock, you make sure it's delivered and deployed, you sign the customer up for a maintenance contract and you go on to the next one. In a model like GreenLake, the renewal process starts when the contract is signed. You have to earn the customer's loyalty every day. Not that you don't have to do so in the old model, but it's different in an as a service context because it's not just the services organization has to worry about the customer renewing, it's everyone from the CEO down to the support specialist. Look, Churn is the silent killer of an as a service model and an entirely new incentive and metric system has to emerge to support this change. Company also has to think about its portfolio, not as products, but as a suite of services, turning their product portfolio into a set of services with APIs and an ecosystem that can plug into that. It's a completely different mindset. Now also share that I think the infrastructure guys are playing catch up and it's high time we've seen this model emerge. Catch up to the SaaS folks that is, but I predict that it will continue to evolve. Let me give you an example. We're now seeing software companies challenge the traditional SaaS model to examples are Snowflake and Datadog who sell on a consumption basis. It's a true cloud model where the customer can leave anytime. And I predict that over time, as SaaS companies and eventually infrastructure players get more and more data, they're going to be forced to look at similar pricing strategies. And as they get more of this data and can better predict usage, they'll increase their confidence in deploying such a consumption model. Now back to HPE GreenLake. HPE by being first and committing the entire company to this approach from the top, Antonio Neary. He's like the CEO, he's a champion of this change. By being first, HPE believes that it has an advantage. The company also believes that it has some innovations that'll keep it ahead of the competition. So I encourage you to check out the link in the description of this video, register for GreenLake Day and decide for yourself. I'll be there with a number of HPE experts and customers to share what the future as a service will look like and what it means to you. So look, if you're a CIO, an infrastructure pro, a partner in the HPE ecosystem an existing customer or someone who's following these trends and wants to learn more, register for GreenLake Day and participate in the conversation. You'll have the opportunity to interact live with experts, ask questions and hopefully get answers that will help you plan for the future. We'll see you there.


The Tom O'Brien Show is produced every business day. Tom takes your phone calls toll-free at 1-877-927-6648 internationally at<PHONE_NUMBER>. Let's go to Phil in Puerto Rico. Hey, Phil, what's going on? Hey, Tom, doing great. Just wanted to thank you guys and the whole crew. Best content on the internet. Really appreciate everything you guys are doing. We appreciate you growling a problem with us out here. How did you find us? I just typed in live trading in YouTube one morning. Cool. I was looking for any type of live trading room you guys just came up. Awesome. I know the quality when I see it, or at least I like to think so.  I appreciate everything you guys do. Welcome to the Tiger film. We appreciate you growling a problem with us. My pleasure. Now, Tom O'Brien. Oh, welcome, folks. This is Tom O'Brien of TFNN. We go five days a week. We go seven hours a day. We go 24 hours a day on the internet. At TFNN.com. Always remember, folks, whatever you think about, you bring about whatever you focus on grows. Hope everyone's having a great day, safe day. Make a great night, folks. Don't make assumptions. Ask for what you want. Find the courage to ask for what you want. Others have the right to tell you yes and no, but you always have the right to ask. Likewise, everyone has the right to ask you for what they want and you have the right to say yes or no. Make it wise. Let's take a look at it out here. We have the Dow Industries down 94. Nasdaq is off 408. S&P's down 50. Gold contract up $35. Trading at $17.99. Ten and ounce. We've got Silver up 89 cents. $22.40 an ounce. Light sweet crude. Upper buck, $71.92 a barrel. Notes and bonds. The 10-year up 26. Trading 13104. The 30...up 13 ticks. Trading at $1.62.05. And check this out, man. This is pretty wild. You get the 10-year yield, folks, at 1.41. Pretty wild. King dollar. King dollar is down 451 ticks. Trading at 9606. Euro is at 113. The yen is out here at 113.60. And the British pound is trading at 133 to 1 US dollar. iPhone number is<PHONE_NUMBER>. Give us a call, folks. I want to know what's going on in your world. In the world of the S&P's, let's take a look at them. What do you have? Well, you made a new all-time high. Failed on price. It's not going to feel on volume, because it looks to me like we're going to have volume up here. Last high is $72 million. But it being only three o'clock, they can bang out like $95 million in there. And, you know, we'll see where this baby shakes out. There's no doubt that as soon as it hit that, as soon as it got over the highs today, they sold it big time. But that being said, this is still right next to the highs. That's how this thing shakes out. NDX100. We're going to take a look at the 3Qs. A little different ball game than the 3Qs. Is that you get over the highs of yesterday and then gave it up in spades. And then you are going to have... Let me look at this for a second, because it looks to me. You're going to be pushing. Yeah, we'll see it shakes out tomorrow. But what this is really doing, one more day out. One more day, you're going to actually be pushing that swing point with volume. And that means higher price also, pretty wild. The gold contract. What do we have with the gold contract? The gold contract out here trading up $34.30. We hit the 1800 mark. Does that mean anything? No, it doesn't. What means something is that we have the wide price spread going with us. You get the volume going this year. 158,000 contracts. You took out the consolidation. Next step up here is somewhere about 1825. 1925 is game. That's the way I'm looking at this market. We're going to take a look at the silver contract. Silver is always hiding more. Highly volatile in gold. Bottom line, finally caught a bid. It's up 90 cents. You're trading 53,000 contracts. It already had rejected the lower price from the last time we were down there on September 29. That's saying that Silver was back on the track to get up to $25.28. And I suspect Silver actually wants to go to the $28 mark right now. You're at $22.45. Let's go and take a look at the note and bond market. Because there is no doubt. You get the Fed coming out saying, okay, we're going to taper. We're going to bring that down quicker. We're going to go up in rates and guess what? Market is buying the bonds. And we very well might have a small ABC structure on the way up. The 10 years down, 1.2 million out here today. Most times when you have this type of price spread, you should be betting in about 1.7. So it can still use more volume. We are going against... Let's see what we're going against here. The high is... Yeah, the high is 2 million contracts. 2 million is the normal deal when you get a big day like this. And good old king dollar. So for us, metal bulls, king dollars helping tremendously out here. Any type of commodity bulls. That's the real bottom line. We'll see what shakes out. The lowest swing here is $95.517. My take is that we're coming back to the breakout area. And this is where we've been building cars. But there's no doubt it's been frustrating. Yesterday was a big day because yesterday you got over the swing high. It failed the whole price. It pulls all the way back. That's telling me that we have the breakout area that is game. Some of the higher volume equities. Let's go take a look at that out here today. So you have Apple down 7, almost 8 bucks right now. My bell finally caught a bid. That's up $1.48. You've got Nvidia down $22. That's having a problem out here. Pfizer's up $2. Look at that. That's getting smoked black. Holdings that's down $460. You've got Verizon up $2. So this is really strange, man. Look at the heck. So what the phone companies definitely did is that they got to the lower end of their consolidation. Rejected lower price. That's the price that wants to move. And I suspect with this whole move into the telecoms as well as the commodities folks, this is the inflation move. That's where to me it's just shaken up because you can see, you know, my bell at this price pays an 8.8% dividend. So you can get two different things out of this. You can get the aspect of the principal going higher, meaning the equity itself going higher, plus you get the kicker of a nice dividend. So pretty big number. Inside the NDX100, let's go take a look at the strength versus the weakness out here. Strength wise what you have, the Peloton is up by 2.7%. You've got Kraft Heinz up 2.1. Charter communications up 2.5. Taken away from it. Adobe's down 10.5%. You've got Skyworks down 9.5%. Nvidia's down 8. Nvidia's down 7. You can see it's always so intriguing watching how the Nasdaq likes to trade. Let's go to Adobe first because this is, you talk about taking it on the chin quick. Holy cow. In four days the stock has gone from 6.75 to 5.56. And we have volume. And it does as well, let's put this on a weekly and see what we've got up here. On a weekly, this is set up for, come back to the breakout area at least. That's 5.02. You can see this, there's no volume in highs. I mean none. And then you have volume off the high. What everyone should be doing right now is this. Over the weekend folks, bottom line, you want to look at equities and if any of your equities in a portfolio have volume off the high, I would put a stop right underneath it. Okay, give it nothing. Volume off the high. Most times sets up a very large correction. So as we come back, we're going to be talking about Newmont and you talk about Newmont family kitchen a bit. These are institutions buying this. Newmont's up 4.5%. Has volume behind the move. We have the gold going higher as well as the gold and silver equities. Stay right there folks, come right back. Are you looking for a way to consistently add winning trades to your portfolio? Tom O'Brien is here to help. Tom O'Brien has been successfully trading markets for over 30 years. A frequent contributor to TD Ameritrade Network and CNBC, Tom O'Brien founded TFNN over 20 years ago to help educate investors just like you. Tom's Daily Market Newsletter, Market Insights, is published every morning when the market's open to give you the competitive informational edge you need to succeed. These newsletters are packed full of Tom's advanced technical analysis and are geared to deliver comprehensive strategies for a successful portfolio. Get Tom O'Brien's newsletter, Market Insights today, and try all of our products and newsletters 30 days risk-free with our money-back guarantee at TFNN.com. TFNN, Educating Investors. The TAS Profile Scanner is the premier market-profile-based scanner. Powered by its acclaimed TAS proprietary algorithms, this feature-rich scanner instantly filters over 2,500-plus global financial markets such as stocks, ETFs, commodities, futures, and forex. This powerful suite of tools leverages instant trade filtering and strategy formulation to show you emerging trades before they happen.  Level the playing field with the TAS Profile Scanner, which you can find under the Services tab at TFNN.com. Sign up today! Sharpening your skills as an investor is like getting better at playing a musical instrument. You have to practice, sure, but you also need excellent instruction from experts at TFNN, you'll get advice and guidance from the authority in technical market analysis, and it's not just dry, tedious text, either. TFNN airs live financial content streamed live on TFNN.com and TFNN's YouTube channel with Tiger TV, live every market day from 8.30 a.m. to 4.00 p.m. Eastern. For free! Each host is an experienced trader and gives their take on the market while taking calls and questions live from around the world. From the moment the market opens until the closing bell sounds, Tiger TV has 8 different shows with expert hosts to help you make the right moves with your money. Watch online at TFNN.com or on TFNN's YouTube channel and become the investor you were born to be, TFNN. Educating investors. 7-3-7-6-1-8 Welcome back, folks. The Dow Industries right now are down to 59 to get the magic of 404. S&Ps are down to 47. So, let's go over... First, we're going to go take a look at Newmont. You're going to see how Newmont caught that bid. Now, what I want to show you here is that you have Invesco coming into Newmont here and I believe Invesco has some ETF structures too and that's where it may be, but I'm getting intrigued in watching this now. Okay, so Newmont, come on. NEW, no, N-E-M. Okay, so when we take a look at this, what we had is that you had Newmont, you had to come off the bottom with some strength. Well, first off, it basically took out its low, had a night of volumes that took it out, had some volume on it. Last four days, we were talking about volatility, we were at 57 on Monday. Yesterday, we were at 53. We were at 58 and a half and that's number one, you know, the swing point up here is running to 59 and if we take a look at this though, this is what is inviting. I want to go through a few more of these. I wanted to do a bunch of them when the commercial was on, but okay, see this right here? This is good. So, if you're watching Tiger TV, folks, okay, this is when, what ends up happening is that I've been doing the same equities for so long, folks, like, you know, you get used to, like, when these big funds come in and out. This is what you need for much higher price, okay, because it's not the retail market that basically brings you to higher price. It's the big institutions that come in that the retail market is buying. In this case, you can see it. See right down here? Yesterday, you had an investment go by 3 million more. Now, they had it only on 7 million prior to that, so they almost did 50% more with the position. Now, if I go like this, you're going to see it right at the very top. That's what we're looking for. And then if I pull this down, you're going to see that it's basically in one fund. Well, no, look it. No, they put them in every portfolio. Well, multiple portfolios. Multiple portfolios. And multiple portfolios, yeah. So, that one there, they bought, you can see, investment go diversified, investment go diversified, investment go income, investment go equity, investment go S&P 500. I don't know. Well, I guess, no, they could put that in the S&P 500 because you have new months in the 500. But this is that, I suspect it's going to be the beginning of a lot of buying. Now, let me do Royal Gold. What I had done during the break, folks, I did an eco-eagle. They're not in there yet. I did Barrick Gold. They're not in there yet. What I say not in there, what I'm explaining is that I didn't see any new buys. I'm looking for new buys this last two weeks. That's what we're looking for. And they're not here yet. Okay, so that's Royal Gold, FNV. We're going to do Franklin, Nevada. And 12. Nope, they're not there either. Hey, we'll find out what is the next one they're going to go after. But just so you can understand how that works, what I've seen is this, is that when the large funds start coming in, okay, the bottom line is that they don't buy it once.  When they sell, that's the bummer. You go downtown for a long period of time. Let's go to Tom and Dallas. Hey, Tom, what's going on? Hello, Tom. How you been? I've been doing great. I've been watching the stocks dropping. And over the years, several years, I've watched MUX vacillate between like 90 and maybe 140. It seems like a neat one to trade in the channels. And when it got down this time, I put in an order and then I pulled it out at 88 cents. And, of course, it jumped right through there. I see it's losing a lot. It seems like it's doing worse than it has been recently. And I know you're really close to the McEwen operation. What do you know about that? Is that something to stay really not get too involved with since their business doesn't seem to be doing as well? Let's take a look at it. These are some awesome questions, folks. So you've got McEwen mining. And, of course, we'll have to get Rob McEwen back on to talk to him. The low is 80 cents. The high is 170. This is a producer, folks. But they lose money at this price. They produce 37 million a year. And he's still saying he's going to lose 10 cents on that. And then he claims that the next year he's going to be making money. Now, to answer your question, this is really cool, man. I mean, because I don't have this one. I actually have Vista Gold. And Vista did the exact same thing.  Well, first off, if you liked this stock, I'd buy it right here. That's the other side of it. Because what you had is that they didn't all broke. This broke down. Vista broke down. That being said, though, you're going to get a rejection of lower price out here at 88, no, at 84. No, at 80. No, at 80. This thing went to 80. So you're at 84. At 80, you get a rejection. And the bottom line is that it wouldn't like this going to go to the top of the range now. And the top of the range on this is a lot higher, man. The buck's 70. So that'd be great if you could have him on it. And you could talk about that turnaround that he's playing. Because Gold's been up. It isn't that far off of the high. And yet, if he's kind of losing money with Gold at these levels, I just kind of was wondering how healthy the business is. That's a different issue than how low the stock actually went. And this is a great question that you have here, okay? Because specifically, I understand exactly what you're saying.  I mean, that's what you're saying, reality-wise. And that's how a lot of these equities traded. I mean, what you had, you had this last, let's say the last six weeks, right? What you did have is that normally when Gold and Silver runs, folks, okay, all the Gold and Silver stocks normally run. That is not what we had happen this time. What you had happen is that you had like Anglo Ashanti go from like $12 to $22. Newmont was going down as that's going up. Gold fields did the same thing. And so this was a different type of market, Tom, in that context. The smaller Gold and Silver equities, they broke bottoms. They just broke them out. That being said, you get a whole change out here today. But I will definitely get Holden McEwen to get him on to get his fundamental take on it for sure. That'd be great. That'd be a great show, Tom. Okay, man. You have a great one, a safe one. Have a good weekend. Thank you.<PHONE_NUMBER>. And there's no doubt, folks. I can, you know, the differences are huge. There's no doubt. That, if you've been in the gold market for a while, you know that's how it runs. If you're not in the gold market and you're going to get in the gold market, the best advice I could give you is do not get over your head. And hopefully you'll be able to stomach some of the twist and turns because the twist and turns are pretty intense. And if you do get in the gold market, I think you'd better have an understanding that why gold would have to go up. Because what I've found is this. If you have the understanding, meaning that, hey, man, we're spending more money, gold can just stay focused with that money, you'll be fine because you'll be a strong holder. Dow Industries up 14, Nasdaq down 361, S&Ps off 33. Stay right there, folks. Come right back. Are you having fun trading the markets but having trouble finding like-minded individuals to discuss your trading and investment ideas with? Become an Apex Predator in the trading markets and join the Tiger's Den trading room only at TFNN.com. The Tiger's Den is an exclusive trading room where successful traders from around the world come to exchange trades and ideas. Join the den and surround yourself with the sharpest minds in the trading world. Subscribers to the Tiger's Den are also the first to have their questions answered live on air and can privately chat with our TFNN hosts live during their shows. Interact with other Tigers and Tigers as they share trading ideas, news analysis, and discuss the market action all trading day. Subscribe to the Tiger's Den risk-free with our 30-day money-back guarantee and become part of the TFNN trading community. TFNN Educating Investors You could be making money off the stock market and if you're already making money off the stock market, you could be making a lot more. Check out TFNN and Tiger TV and get expert investing advice to give you the power to control your financial future. Go to TFNN.com and find the newsletter for you. Whether you're into trading gold, metals, futures, currencies, or options, you'll get advice and analysis to help you seriously get ahead. TFNN also features trading services with a 30-day money-back guarantee for new subscribers, as well as TFNN's Tiger Den trading room, trading software, and educational webinars for all trading levels. And make sure you check out Tiger TV for free on TFNN.com or TFNN's YouTube channel for live financial content from 8.30 a.m. to 4.00 p.m. eastern on market days.  TFNN Educating Investors TFNN is excited about our new software charting program, the Art of Timing the Trade Chart. In collaboration with Tom O'Brien and using his best-selling book, The Art of Timing the Trade, Your Ultimate Trading Mastery System, David White has programmed an outstanding piece of software that will complement any trader's methodology. Using this first-of-its-kind program, the Art of Timing the Trade Chart allows you to scan thousands of stocks for Fibonacci formation setups, including guardleys, ABCs, butterflies, and much more. The Art of Timing the Trade Chart is designed to help you when scouring the markets for stocks just beginning to form the trading patterns that many investors spend days, weeks, or even months searching to find. And right now, we're offering licenses available at only $79 a month. We are so confident that you're gonna love this new charting software that will even give you a 30-day, unconditional money-back guarantee. Don't miss out on this incredible new piece of software. Get your copy of the Art of Timing the Trade Chart today by visiting TFNN.com. This segment is brought to you by Think or Swim. For more information, just click the Think or Swim banner on the front page of TFNN.com. Welcome back, folks, Dow. Dow Industries right now, up 42 Nasdaq is down, 351 S&Ps are off, 32. So let's go look at Anglo Ashanti for a couple of the tigers out here. Now, I own the equity also, folks, okay? So, and this is what I was talking about when I was talking with Tom from Dallas. This is where we definitely had diversions inside of the gold equity market also. You can see, three months ago, the stock was at $14.00, it went all the way up to $22.00, okay? So, and that was a goal to consolidate going sideways, okay? So now what the question is, one of the tigers has got this, because this was an ABC structure on the way up. Bottom line, it basically turned into a complex ABC structure on the way up. And now, let me see what we have. Now you're going to, well, if we get more than 3.5 million tomorrow, you're going to have action. So first off, this is what the question is, should I take my money and run? I wouldn't take my money and run. This is why. There's two different issues here. The first one, I expect you're going to go to the high, because what you've just seen out here today is you're seeing buying inside of the sector. So when you have buying inside of the sector, the bottom line is that, that is saying we're going to go higher. You broke the downtrend, and the downtrend that's been in place for a couple of weeks, okay, and you broke it with conviction. Conviction is, why price spread accelerated volume? That's what we have, okay? So you get that there. Now, what, that's the smaller issue. This is the bigger issue, and this is where this gets cool. And this is when gold starts running, folks, okay? These things go very quick. So my take is that, number one, you're going to get to this 22. Then your next step up here is 2675. And if we get that, guess what, man? 38th game. So I'd stay right there.  I'll do it five years from now. You know, this has been a monster consolidation, but that's sticking out there, and that high bar that's out there has decent volume. So 32 to 38 is actually game inside of that equity. And we'll see if they, bottom line, we'll see whether they can pull it up. Because what we are going to get, now, this is where this always gets interesting, is that, do you know that, listen to this, this is how crazy this is.  That's how it works, folks. Okay, this is, you know, I've had the Gold Report for 21, 22 years. They don't even know another gold stock. Well, buy Newmont. Okay, that's what we're going to buy. Okay, so someone finally bought it. That's the bottom line. Okay, someone finally bought it. And that says, well, we know that the institution is in it now, because they just pulled it up. And you can see that Invesco bought three points up to a million shares yesterday, okay? So with Newmont, what you also have is that the bottom line is that your downturn's broken, and this has been going down, you know, forever. That says that Newmont now wants to run to 35. You're at 31, and you can see, oh, sorry, one second, no. That was the GDX. The reason I had the GDX up there is I want to talk about this. Because the GDX, what will end up happening is that the XAU, the HUI, and the GDX will start getting some traction. And when it gets traction, what will end up happening is plenty of people that only buy that. And they'll start here, and that's going up, and the other equities either going sideways or going down. This is when you really start getting action. We'll go back to Newmont for a second. What you're going to see on Newmont, you know, Newmont's up $4.42. You have the wide price spread. You have the volume. My take is that Newmont will not only blow this swing point away of $59, and if that's what we get, what you're going to see on Newmont is that, put that baby up, okay, that you're going to be $62 is the number. And you can see, see, let me look at this shot that the last time that we had big volume was $62 on the way down. Well, when you establish a bottom, and you can see there was really nothing wrong with this equity, okay? Other than if you're in it, it's a drag because, you know, the bottom line, if you're in it the last five weeks, you know, you had to take heat from $59 down to $53, consolidation, but you can see when we had broken topside in 2020, well, guess what? It came back to that breakout area and it still had light of volume in the breakout, then a breakout area. So, I suspect first it's going to be 50, let's say 60 bucks, then it's going to get some flack at $62.57. But if in fact this gold contract keeps going, gold loves doing straight line moves. And yeah, watch this, I'm going to put this, I talked about this yesterday, but now this is going to be, this hammer is going to be a more intense weekly hammer, I believe, okay? Because gold has, yeah it is, it's beautiful. So what gold has done folks is this, the gold contract has three higher lows and two higher highs, okay? And these lows all have these monster hammers. The biggest signal when I really went all in was in August, okay? So I've been sitting here for a while. Well, I'm not really sitting here because I'm ego-eagle and I mean I'm not Anglo-Chartin, you know, Goldfields went higher. But the bottom line is that in general it wasn't the run that I thought it would be. We'll see whether this comes out this time. But when you see, and I, you know, see this big hammer right here folks, okay? When I learned about this big hammer of how powerful they can be, and see it's on a monthly too, this is awesome, see that month? It's on a monthly, when I learned about this and, you know, yesterday when we were talking about the aspect of markets going higher, the Fed coming in and, you know, there's plenty of people if you shot the market, it's upsetting of course when the market goes up like it does. And depending on how, I know there's targets out there when I was live on the air folks, okay? In 1998. So the way we had built TFNN, I used to trade live on the air all the time, right? And in 1998, right, so pitch this, there's three of us doing the program. We were all doing really well because this was the downdraft of 1998. So what ends up happening is that I'm shot to the yin-yang, you know, we were doing fine for three or four weeks, the market was crashing, and it's 10 past three. And what ended up happening is that Greenspan and Reuben come out. And this has never happened, by the way, okay? Greenspan and Reuben come out. So picture, we're live. I'm live. I'm here. Mark is over there and Peter. There's three of us that used to do it, and we're all, Peter used to always trade options all the time. Mark and I would be trading equities. So we're banging out, banging out. And live, okay? Greenspan says, we're going down on the rates by a half a percent. Well, if you ever seen something flip around, the market went from, I don't know, maybe at that point we down 300, but 300 then would be like 1200 now, okay, because it's that long ago, and then went up 300. I'm just so, because a couple of tigers were upset yesterday with the Feders and I am screaming. This ain't fair! This ain't fair! I can't believe he did that when the market's open.  Bottom line, what did happen is that the size of that candle, okay, that market never looked back until the crash of 2000. So, pay attention to those monster candles, and I think that's what we have inside the gold market right now. Come right back, folks. Are you in the market for buying or selling real estate in the Bay Area, including the surrounding St. Petersburg, Tampa and Clearwater markets? Tiger Real Estate LLC is a firm that has extensive experience in the Tampa Bay Area. Whether you're looking to sell your current property for maximum value, or you're in the market for a second home or investment property, Tiger Realty has the experience across all areas of real estate in the Tampa Bay Area to help buyers and sellers make the most informed decisions across all price levels. From the price you should be paying per square foot in certain up-and-coming areas to the type of cash flow investment properties are capable of creating, Tiger Real Estate can help you make the best decision when it comes to all areas of the market. Before you make one of the biggest decisions of your financial future, call Tiger Real Estate LLC today at<PHONE_NUMBER> or email us at tiger at tfnn.com. That's<PHONE_NUMBER>. Call us today. The technology around us is changing every day. With so much happening, it can seem impossible to keep up with all the information. David White's investment newsletter, the Technology Insider, is designed to give you all the information you need to understand the technology that shapes today's markets and tomorrow's future. David White has made his living staying on the cutting edge of technology. His weekly newsletter will give you specific recommendations for valued tech stocks, as well as entry prices, target prices, and stops to set for each trade. Dave delivers his weekly newsletters every Friday with updates throughout the week. You can get the Technology Insider at tfnn.com for only $37.50. Sign up for David's newsletter, the Technology Insider, and get an inside look at everything the technology sector has to offer. Try it risk-free today with our 30-day money-back guarantee. TFNN, educating investors. Biotech is booming, but for how long? Bull has room to run, or has run its course, trade L-A-B-U or L-A-B-D. Directions daily, S-M-P Biotech three times, Bull and Bear ETFs. Visit DirectionInvestments.com slash Biotech today. An investor should consider the investment objectives, risks, charges, and expenses of the Direction Shares carefully before investing. The Prospectus and Summary Prospectus contain this and other information about Direction Shares. For the Summary Prospectus, please contact Direction Shares at<PHONE_NUMBER>. The Prospectus or Summary Prospectus should be read carefully before investing. An investment in the funds is subject to risk, including the possible loss of principal. The funds are designed to be utilized only by sophisticated investors such as traders and active investors. Distributor, Four Side Fund Services, LLC. I'm O'Brien. Welcome back folks to Dow. Dow Industrial is right now up 90, the NASDAQ is down 330, S-M-P's folks are only down 26. Gotta love this market, man. I'm going to talk about the market more right now. Right now though, I'm going to talk about the Tiger Dollar sale. So, we do this a couple times a year, folks, okay? If you're looking to save any money at TFNN, to get any subscriptions at TFNN, if you already have subscriptions at TFNN, that's how we basically get you to get more value for the premium that we deliver every day inside of not only the programs, but the newsletters. The way the Tiger Dollar sale, it ends on the 23rd. We do this a couple times a year. What happens is that you can save up to 40%. And the way this works is that you can buy 500 Tiger Dollars and you get 600, which is a 20% bonus. You can buy 1,000 and get 1,300, you can buy 1,500 and that's a max, which gives you a bonus of $600 or 21%, I mean, 40%. So, check it out in the front page of TFNN. Okay, now this is going to be cool, man. So, we're going to go look at the SMHs and we're going to show you what the SMHs are setting up. And the SMHs, folks, are setting up that they want lower price. Okay, so, when we bring the SMHs set up, where do you see this? And I'm not talking about right now, I'm talking about SMHs, more than likely, are going to bounce again. Now, the... Larry Pezzavento has said Joe did an appellate on it a few times. If you've heard him, it's great. Joe's... Joe and I actually went to the same high school in Rocksbury, Massachusetts. Boston Technical High School, which is pretty funny. And I didn't even know that when I was interviewing him over like 30, 35 years ago. So, make a long story short, it was a science math school all the above. So, he's a Fibonacci expert, no doubt. He comes in, this is called... This is a setup that he calls railroad tracks. And what it is, is this. Is that you get an update, then you get a down day. I'm just going to this one right here. Well, the way he has this set up, if you can... Let me pull this closer. Okay, so, let's see how I do this. Put this on... Oh, there we go. Okay. So, when you pull it closer, then... Actually, I'm going to do it this way. I'll do it intraday, because this is what you do. So, the way you trade this, this is four days. The way you trade this is you take this top bar from four days, range, period. You put five days so I can see this on. Okay, cool. So, you take the .618 retracement. I want to go this way, right? Yeah, beautiful. Okay. So, what he would do is this. He would wait for a bounce. And this set up, by the way, is really hard to do. And the set up bottom line, which is nice about it, is that you don't have to risk a lot in order to basically do pretty well. So, what he would do is that he would sell the next .618 retracement. Okay? So, right now, that would mean that he would like that equity to go up to this price point here, which just looks like .305. You're 297. You let it go all the way up there to .305. You're selling there. You're putting a stop on the other side of the high. And the bottom line is that you're looking for much lower price. When you have a railroad track, folks, it's a change of trend. And, you know, the bottom line is that you can go pretty far. That's on the upside. On the downside, it works the exact same way. And I do understand, trust me, on the downside, what ends up happening. If there's plenty of folks, if you're looking for lows and you get one of those, it's beautiful. It's, like, sick. You can stay in that stock for two or three years. That's kind of how that sets up. So, it's a heads up in general. And as I've said many times, I don't think we're done going up number one. But that being said, I think we're going into a long consolidation. And that long consolidation is going to wreck some nerves out here. That's my take on this market. And, you know, the Q's 350's game, you know, but the way this market is trading, I don't see that until the first of the year. I just don't see it. You can see, when you're taking a look at this market, they're coming in and buying, and this is something you want to look at, too. If you have, you can see the XAU, the XAU broke the down trend. That's the need, the need of the wide price spread on the break. So, that means the XAU is going to 144. Right now you're at 126. That's a monster move. The Gold Bugs Index is going to be the same thing. And what you're going to see here, most of it's going to be because of new months finally moving. Barrick is going to be next. That's what's going to have to stop moving next. The Gold Bugs Index did the same thing. That wants to run up to this 276 right now. You're at 247. So, it's going to be intriguing watching this thing shake out. But my larger take is that what you're actually seeing here is that you're seeing probably, it's not for the first time, because I remember saying this six or seven weeks ago, too, that these are trading differently. But you're starting to see real buyers come in here. And, you know, what we do know now is this. This is the second time that the market could get wrecked intraday and the Golds weren't down. Well, let me restate that. All of them weren't down. Normally the way that the gold market is traded for whatever, the market's low, every single equity's low. And we don't have that, so we'll see whether it's going to be different this time. The next thing I want to see, I want to see that Barrick starts moving. Barrick is up 75 cents, which isn't bad, but not compared with some of these other up. In fact, let's go look at the Pan-American Silver, P-A-A-S. That's got some juice. Okay, so the rejection of lower price, the hammer yesterday, that's saying that Pan-American Silver wants to run to $282 million, to $23.81 right now. That's always been, you know, a nice strong silver stock. There's no doubt about that. And what we will see, if this is going to happen, what you are going to see, you'll see silver start to move very quickly because what does happen is that there's many folks that really can't afford buying gold or buying the platinum, so they come in and buy the silver. That's all I have to do is buy the silver and that starts running that stock. And that's why I say, see that silver is much more volatile than gold. That's bottom line how it shakes out. Let's go take a look at the volumes I suspect there's going to be light volume. Right now you're at $679 inside the NYSE that's kind of light volume actually. Inside the NASDAQ composite you're at $4.1 billion. So that will do about $4.7. Let me put this composite up. Okay, so how does this shake out? Let's see. So that's going to be, we got to a higher price. Look at that. Hey, check this out, man. Oh, this is intense too. You say, you know what this is saying? This is saying that on the NASDAQ it's saying that the composite that's highs don't have to be hit. Because if we pay attention to this railroad track, this has the railroad track also. So the bottom line is that there will be people that will be looking to sell the .618 of this whole move out here today. There's no doubt that we are not the only ones that are basically Fibonacci theorist experts. There's a lot of people that like Fibonacci. And as I've said many times, what does happen in a market like this, what I've found is that the Fibonacci sequence gets hit much more when you have fast markets and highly volatile markets. Don't forget about the target all of the sale folks, okay? You can have, you know, bottom line save 10, I think it's 10, 20 and 40%. Folks who come right back, Dow Industries right now, up 20 and that is down 364, S&P 032 will come right back. Sharpening your skills as an investor is like getting better at playing a musical instrument. You have to practice sure, but you also need excellent instruction from experts. At TFNN, you'll get advice and guidance from the authority in technical market analysis. And it's not just dry, tedious text either. TFNN airs live financial content streamed live on TFNN.com and TFNN's YouTube channel with Tiger TV, live every market day from 8.30am to 4pm eastern for free. Each host is an experienced trader and gives their take on the market while taking calls and questions live from around the world. From the moment the market opens until the closing bell sounds Tiger TV has 8 different shows with expert hosts to help you make the right moves with your money. Watch online at TFNN.com or on TFNN's YouTube channel and become the investor you were born to be. TFNN Educating Investors You might think that if you want to be successful at trading in the stock market, you're going to need a crystal ball. After all, it's impossible to predict the future, right? Like any endeavor in life, before you decide it's impossible, get some advice from the experts. You might find that it's not so impossible after all. For daily market overviews that give you direction on the key indices, selective stocks and commodities, subscribe to the opening call newsletter at TFNN.com The opening call newsletter is written by Basil Chapman, creator of the trading methodology known as the Chapman Wave. The Chapman Wave up-down sequence gives you an edge in identifying price turns, finding the peaks and valleys in stock prices.  First-time subscribers also get a 30-day money back guarantee. If you're not satisfied, let us know and you'll get a full refund within 30 days of signing up.  The target first mortgage program may be the program for you. The best rate on a five-year CD in the country right now, according to bankrate.com is paying 1% per year or $1,000 per 100,000 invested. The target first mortgage program pays 7% per year paid monthly on secured, high-value billable properties in St. Petersburg, Florida. The investment is for four years paying 7% per year or $7,000 per 100,000 invested. Your investment is secured by high-value real estate in St. Petersburg, Florida. Your investment can be anywhere from 100,000 to 500,000. You want to make 1,000 per year on 100,000 invested or 7,000 per year on a secured, high-value first mortgage. The target first mortgage program may be just the program for you. The target first mortgage program pays 7% per year paid monthly. For more information you can call<PHONE_NUMBER> that's<PHONE_NUMBER>. Welcome back folks. Dow Industries right now down up 20. Now as that gets down 360 S&Ps are up 35. Let's go to the S&Ps first. So take a look at the S&Ps how this baby shook out. Okay, so you had a high out here today of 47-43. Oh man, look at the 101-point move in the S&P folks. Unbelievable. That being said, guess what?  So what you have here now is this. Let me see if I can do it this way. Oh, this will be interesting. I haven't done this for a while. This is the future volume. Ah, I see it's a new month but that's alright. Okay, so 2.3 million. Let me do this. Watch this. ES ESZ1 Let's just see what we had at a high in the futures. Okay. What I'm doing is this folks. I'm going back to the December contract so I can see what the volume was at the high and do the correlation. Oh, this is going to be good. So the correlation is 1.6 million contracts at the high. Okay, so ESH 1.1 million. 1.1 million. Oh, this is good. 1.1 million. And now you're hitting a high. You hit a high of 1.4 million. Oh, 1.9 million too. Damn. Okay, that's alright. That's alright. So you're hitting the highs with the same amount. 1.93. See that? Yep. So listen, that's saying that the S&P is not done on the way up. That's how you basically, that's how I read that anyway. When you push into a high, if you push into the high and in the future there, we had about the same amount of contract, you're not done. You're not done on the way up. The way on the way up is that here, watch this, STDL STDL STDL STDL This is, I just, I was doing this for a tiger earlier. Look at this here. So this is steel dynamics. This is what wants to go higher, but let me show this, I'm going to do this quick on a longer term basis. What you're going to see is that on the daily, come on baby. Oh well, it's going to be tomorrow. Always remember folks, the bank and Cloya, hide out the book and run you over and thank God, there's always another trade. Health happens in prosperity, have a great night, have a safe night. Come back and visit Tommy tomorrow morning, kicks us off 9am. Look at him folks.