Hi guys, welcome to this channel, it's meix from the next creation. If it's your first time in crumbox, please consider subscribing. Don't forget to hit the notification bell because it's very important for you to get the updates. In today's video, we are going to look at what you call the medical fitness test. Most of you or most of us when we are coming from our countries, we get to underestimate what you call the medical fitness test. But the question that I'm posing to you or the question that you may be the same time posed to me or asked to me in the comments section is that where do we get to fail out with the medical test? Where do we get to fail out? Especially when we get to look at what you call most of the times, the very many scenarios we are getting or people being repatriated back or people being deported back because of medical failures or medical fitness test failures are normally coming from Africa. Why is it that way? Or why do we get into that kind of essence whereby we put in a lot of money in the recruitment agencies or we put in or whatever we have to put in to prepare to come then at the end of it all after reaching the country or coming to these Gulf countries. Then after doing the medical test you get to fail the medical test and you repatriated back to your country. Why? That is what we want to understand and that is what we want to discuss such that at the end of it all we know how to wipe up this. We know how better we can prepare ourselves when we are planning these journeys to come to these Gulf countries. Especially when we are talking about Qatar. For people who are coming in Qatar, for the medical fitness test, they are very strict. They are very strict but first of all let us try to know where is the problem coming from. Why do people fail what we call medical tests or medical fitness tests as we may say it. Remember when we were talking about the medical fitness test here in Qatar. They do test a lot. They will test age, they will test the blood, they will test the syphilis, they will test the sexually transmitted, they will test all of them. They will even test what they will take what we call the X-rays. They will test the bones, they will always want to make sure. The role of the medical test is always want to make sure that is this person fit for the job, is this person fit to work in the country, is this person fit to work in the labor force, is this person fit to live among the other people. That is the role of the medical test when it is being done in these countries. Otherwise we will only not be doing medical tests and we will just come from our own countries and come and start working, whatever kind of thing we have it to limit my concern. Or even at home they may know, they would not even ask for you to have a medical test as the procedure for you to come in the country. But let us try to know where is the problem coming from, where do we fail ourselves from, apart from the country failing us.  He injects money, he knows what is recruiting is the person he is going to use for his labor force to make sure that he does for him the jobs and he can get out of the profits and part of that profit can be given to this this employee as part of his also his salary. So this is where the problem comes from, especially people coming from Africa. When I talk about Africa, I talk about Uganda, I talk about Uganda, I talk about Kenya, I talk about those countries. The problem is that the problem of the recruitment agencies and you, most of the time this recruitment agencies will ask you money to go and do for you, medicals. In that kind of falses that you always want to bypass the system, you give them money before even you actually you go to the hospital to find out what may be wrong with you at that very time. So you find that most of the time, since this man recruitment agencies are profit oriented or they need profit or they need money out of you at that very time is what they will do, they will go and take you or try to for the certificates, try to take you to those clinics that are not fully equipped to check a full or thorough check of your body. So you find that you also contented a certificate is being printed for you. Falsifli you know this certificate is no treat and inside you may know your problem but you are trusting this man recruitment agency at that time to be the one that knows better your health than you know yourself. So you are living what you call denial, you live in what you call denial, you get the visa, you get the ticket, you come, you do the medicals from here the first time you fail the medicals, you do the medicals the second time you fail the medicals remember you've already injecting it the money you gave the money to the manpower company at whatever amount of money they made have asked for Mruyo, you gave them the money they did their work you already inside the country in Katal you go for the medical you first time you fail the medical the second time they will invite for the medical you fail the medicals why because of the x-rays then after your company has no way to accommodate you because the only way to live in this Gulf countries oh the only way to live in Katahia you must have what you call a residence permit or what you call a residence card that's what you call the Kata ID that signifies that you are eligible to live in the country and that ID must have been achieved in the first six months of the probation that is a period period that is given to to get what you call a residence card or residence permit once you don't get that Kata ID or don't get the residence permit within the six months then something's wrong maybe your medicals are not right what are you are waiting for at that time you are waiting to be returned back home because you cannot live in the population and they cannot accommodate you are not medically fit to be in that position or medically fit to do any work in this Gulf country but guys you know this before I will just give you an advice because most of these recruitment agencies use what you call poor equipped clinics poor equipped hospitals that do not have the necessary equipment to do a thorough checkup of your body and apart from that apart from that when we definitely look at what you call recruitment agencies also let us look at a scenario what is your role as you the person before you even think of traveling out of your country is to find out the status of your health you can do that go and to the hospital inject money in your in yourself go and find out what is the status of yourself before even you ford your life in one world because at the end of it all no one loses when you are being deported back you ready put in your money let's say you want to sample you injected in 5000 kata riyal if that quiver and forever you may be coming from the country and you deported back you become a failure you become a failure for anyone that will see you you will not even blame what you call the recruitment agencies because as the recruitment agencies his or her role was to get you on board get you the ticket get you under the interview then get into the you ready in the country so who are you going to blame at that time so before you think of even giving that amount of money to the recruitment agencies yes make a double sacrifice in case you really need the job and in case you are determined to have the job or before even you think of having an idea of moving out check your health if you've ever suffered from what you call the tb the tibaclosis you should thoroughly check you should thoroughly go to a hospital that is equipped the thoroughly check and see that you do not have any more stress any more stress of what you call the black sports on yourself because otherwise they will not accept the medicos here they will do even more than two times but they will not accept it if they try to try to find something that is not known so don't live in what you call denial to thinking that everything is going to be done by the recruitment agents for you even your health even the recruitment agents to know the status of your health you know yourself better before you get to travel very many people are being deported back because of that injecting money you sell what you have but again you fail out that is what normal happens so that is part of your role go to the hospital check if you are under treatment or you are under what you call treatment is it's not always true like they are always open finish up the opportunity finish up the treatment if you're given treatment for tibaclosis finish it up to see that you are finally fine that even if they get you out if they get you to put you in what you call annex rate you definitely prove to them that you are medically fit to do the job and you are eligible to work in the country so i think i've tried to share up something for you most people being deported repatriated back because of the medical fitness test so let us do our responsibility much as we go to those recruitment agencies let us not trust them a hundred percent with our life we know how life is better we know ourselves better if you must have suffered if you suffered from tibia to some extent yes you know it most of the time i keep on telling people why these countries you may look at tibia or you may look at the x-ray medical some diseases that you may think in your country are something small to these countries this is what you call a big issue or what you call a big step that they don't want to go back to remember most of these countries have eradicated or have gone off with such kind of diseases especially that we may have in africa they've got treatment and fought with them for a long period of time so they would not wish to spend an extra cost on one person who comes with this problem other than first treating his his himself at home to come when he's secure because the treatment may be costly that is what happens and even your employer is left with no choice he's left with no choice he's going to repatriate you back to go because that is the regulation by the government so hope i've tried to share something for you thank you so much for coming back to this channel it makes from the next question by the way it's your first time don't forget to hit notification bell because it will be updated whenever upload it will be by the way don't forget to follow me on my tiktok account is still at mex creation tv forest a short break of 15 25 minutes of the latest updates around the Gulf countries thank you so much see you again in the next video


Understanding Conflicts and Problems Resolve When you resolve something, you come to an agreement. For example, if you have a problem and you solve it, you have resolved the problem. Conflict Conflict means that people do not agree with one another. Knowing how to avoid or resolve conflicts is an important skill to have. Another word for find a solution is solve. If you find the answer to a problem, you have solved the problem. Solving problems is a way to avoid conflict. Fight Fight means to exchange angry words or gestures with someone. For example, younger children may fight over toys or who gets to be first in line. Concern When you are worried about something, you have a concern. If you have a big project to complete, you might be concerned about how you will get it done. Ignore When you don't pay attention to something, you ignore it. Many people will choose to ignore problems. This is not helpful because if you ignore a problem, it may get worse. Rude Someone who is rude is not polite and friendly. If someone is trying to speak to you and you ignore them, you are being rude. Problem-solving skills When you have problem-solving skills, you are able to work through the details of a problem. Employers like to hire people with good problem-solving skills. Describe When you describe something, you give details about it. If you have a problem, you can describe it to a friend so they can give you suggestions to solve it. Schedule Planning something for a specific time means that you schedule it. People with good time management skills have a schedule and stick to it. The End


Doku now, in line with the left corner of the box. He's going to try and weave his way through, which he does. He shoots and he scores. Clinical stuff from Manchester City. He's been causing form of problems, Jeremy Doku. Finds Walker and Doku again. He's going to try his luck down the right mark closely by Malcolm Twisting, turning side-footed in by Bernardo Silva. And that's just pure class from Manchester City. Doku weaving his way into the area. Here's Silva, right side of the box. One-on-one with Ryan Christie. Christie stands tall, but he finds Doku to the left. Doku left, but it's sharp from the end of the box and in. That's just far too easy from that distance from Manchester City. Doku's going to have a run at Max Ehrens, threads it into the middle. Phil Foden still goes. Phil Foden has scored. That's four for City. And it's Jeremy Doku with the assist again. And there's a sweeping pass from the left to right to Ehrens. Lovely touch from Ehrens. Square ball looking for Sinistera onto his right foot. Luis Sinistera scores for the Cherries. His first Bournemouth goal. And it'll be little more than a consolation, but what a lovely goal it was. Bernardo Silva's through, through on goal with Rado. Lloyd Kelly gets across, doesn't get there. And Bernardo Silva just lobs it over the top. It's cleared off the line. And then the rebound is put in. One of them will count. In amongst the goal. Here he is, square ball and headed in, diving header. And it's the former Bournemouth defender, Nathan Ackie.


You two team keep it clean. What's going on? It's engraving here with another video and in this video I love this question. This question came from my boy on snapchat nick though 410 Nick though 410 So i'm assuming he's up there in baltimore because that is an area called for baltimore and his question Love this question. Love it.  Who would that be? Who would that be? That is a great question and before we answer that question and it's a simple answer I know a lot of y'all already As soon as you even saw this video you like oh you already do the answer to that question And i'm sure you said it in your minds But before we answer that question, let me introduce myself. Me. I'm engraving visits to my youtube channel engraving vids and i'm a ravens fan What's up fatal monkey and even though i'm a ravens fan on this youtube channel We talk about ravens all the time, but we also talk about any team in nfl So if you're a fan of the ravens or you're just a fan of football period Make sure you subscribe to the channel turn your notifications on and like my guy ryan mallard always says Leave a like on the video because it is 100 free I've been really enjoying my off day from work today. I love it. Anyway, and you can follow me on instagram snapchat and twitter All three are engraving vids and shout out to my guy nick though for one note And the question again was who is the biggest bully on the ravens? Who would that be? Now when you define a bully bully somebody that can pick on somebody else and that can just Really, that's it. They can pick pick on somebody else take advantage of somebody else Talk trash to somebody else repeatedly even when the person might not even be talking trash back Who would that be?    They said it was a practice with Ryan Malley through five picks The infamous five pick practice That's the only time I've ever seen a Ravens practice before preseason get so much publicity Ryan Malley through five picks in practice Threl sucks told Ryan Malley You're supposed to be thrown to the to the uh the team with the opposite jerseys I mean you're supposed to be thrown to the team with the same color jerseys as you not the opposite ones He said that put it on record too So the world would know So if you wouldn't throw your own teammate under the bus like that And they didn't even really throwing him under the bus but calling him out like that And you wasn't gonna put it on record And you know, he ain't gonna come back at you.  That was a real good one. I like that This was a nice episode of questions from subscribers. I really liked that question. So thank you Um, thank you all for watching again Make sure you subscribe to the youtube channel if you haven't already turning notifications on for the channel if you haven't already And like my guy Ryan Malley says leave a like on the video too because it's free It's free. So I appreciate y'all watching and I'll see you in the next episode of questions from subscribers and I'm out


Live from Washington, DC. It's theCUBE, covering Oracle Cloud World. Brought to you by Oracle. Now your hosts, John Furrier and Dave Vellante. Okay, welcome back everyone. We are here live in Washington, DC. This is theCUBE's special presentation of Oracle Cloud World. I'm John Furrier, my co-host Dave Vellante and this is theCUBE, our flagship program. We go out to the events and extract the signal of noise. Our next guest is Melanie Posey, a research vice president at IDC, analyst on stage in the keynote. Welcome to theCUBE. Thank you for inviting me, glad to be here. See you again. The Oracle's pumping themselves up. They've got Oracle Cloud Machine, Oracle Cloud at customer program. Not a lot on the hallways, a lot of security conversations which I didn't really hear much in the keynote, but it's really about Oracle Cloud Machine running on-prem, game code based in the cloud. How real is that? Where are they on the progress bar on this program? Because they're not getting the credit in the press and market share. Amazon, I'll see number one, Microsoft number two, Google, we're in sales forces and that, so where is Oracle in the cloud right now? Oracle on the cloud is on the hybrid part of cloud. So if you think about AWS, of course, they're a game changer. They're the first big public cloud. They started in, what, 2006? So a lot of the attention and a lot of the market shares are about just that public cloud piece of things, but where Oracle takes it is they have public cloud, they have on-premise, they have the cloud machine appliance now, so it's more of an all-encompassing IT, diversified IT approach to things, whereas Amazon, public cloud, that's all you can do. Pure play, public. Where is the Oracle Cloud Machine fit in the positioning map? Is it kind of a hybrid, as you said? Is it just a hybrid? Is there other things going on there? Share your thoughts on the positioning of Oracle Cloud Machine. You can put it in a couple of, you can use it in a couple of different ways. I mean, it could be just a standalone, private cloud appliance that nothing that goes on inside that cloud machine is ever going to leave your enterprise data center. You could use it that way, but that would kind of be a waste because it's the same software stack that is in the cloud. So say you're an enterprise and you have an application that your customers in North America love, all of a sudden, boom, your customers in Asia-Pacific can't get enough of it. Do you deploy infrastructure in a data center in Asia-Pacific or do you take that application, push it up to the cloud and make it available to customers in another region that way? It gives you that speed, agility, flexibility, all the goodness of cloud. What's the progress bar look like? Obviously early days, Oracle's all in. It's one of those inflection points where they got all the company working towards the cloud, heard, was clear on that when I interviewed him a couple of months ago. Where are they in your mind on the progress? There's certain early days, that's what they're claiming. But you're seeing some deals. Are they really making it? Is there some bundling going on? How do you make sense of all the progress and can you share your thoughts on where they are? I think they're just from Thomas' presentation today, that some of that was news to me because I don't really cover the SaaS space as much as some of my colleagues do, that so many of these, not just categories of applications are available in the cloud, but different modules and different pieces of that application. So I would say Oracle on the software as a service side, they've made a lot of progress. Why? Because it's all about survival, right? You've got Salesforce out there in the cloud, you have your own CRM, you need to compete with them on the same basis, but at the same time, you can give Oracle, can give its customers something that FSDC can't get their customers, which is the ability to run it on-prem as well. And I think- That's a differentiator. It's definitely a differentiator. So instead of being in a disadvantage because you're not all in, in the cloud. You're doing some kind of off-premise cloud. And now today with the Oracle Cloud Machine, you're seeing Oracle try to replicate that experience on-prem. But it's different. It's like, we've never really seen anything like this before. So how in your view should customers be thinking about this system from the standpoint of their operational model, the pricing models, not exactly cloud, it's very cloud-like. What are the considerations that they should have in terms of adopting this? Should they adopt this? What does it mean to them? Well, I think it means a lot of different things to a lot of different types of companies, right? For some companies, they're very focused on keeping their data on-prem under their own control. But at the same time, you make that data available to applications outside of the enterprise. So this is one way to participate in the cloud without moving all of your data and all of your systems to the cloud. That you have kind of a data warehouse maybe inside your enterprise and your front-facing application is maybe running on a public cloud and it can call back, phone home to the mothership, it's the cloud appliance in the data center to get the data it needs without having to move the data. The application goes to get the data rather than the data having to move to the cloud itself. Okay, using the same operational model. So we're sort of talking off camera. We all know the story of Amazon, $8 billion growing at 70% a year, 20, whatever, 8% operating profits, very good story. Oracle today is trying to sort of create a new category essentially of cloud with this Oracle cloud machine. Is it game over? Because Amazon's so successful, I think I know the answer, why not? Why is it not game over? How are organizations, vendor, technology companies competing with Amazon? And again, what does it mean for customers? Right, I think at the end of the day when you're in a competitive situation with a very dominant, incumbent competitor, the worst thing you can do is try to beat them at their own game. You know, what you do is you create your own game and you beat them at that. So what a lot of companies like Oracle are doing is leveraging the enterprise customer base they've built up over the years. Maybe trying to compete with AWS on the same basis, Oracle is doing something different. It's giving customers the ability to use cloud for the right workloads at the right time. You're not being required to fit into this one-size-fits-all long-chosen model. Defensive move around Oracle's real estate or is it an offensive move or a combination? It's a combination, I'd say. I mean, I'd say at the end of the day what it really is is an evolution of a traditional business model where Oracle's software licenses can do it on-prem, you can do it on the cloud. It's the digital transformation of Oracle in the sense of moving to the next level is meeting customers' expectations on how they want to consume your product. Melanie, thanks for coming on theCUBE. Really appreciate it. Final word, what's the vibe of the show for the folks that aren't here that are watching live? What's the vibe here? Sure, so there's a lot of buzz because I think there are still a lot of people who don't realize how much Oracle is actually doing in the cloud because it's not necessarily front page, AWS types of things and yeah, I think that there's a lot of realization that there's more to the cloud than there is to the cloud. There's some meat on the bone here. It's not just sizzle, it's got the steak. Oracle Cloud World here inside theCUBE, we're breaking it down. IDC analysts breaking down all the action. We'll be right back with more live coverage in DC, Cloud World and Oracle after this short break.


Grand Canyon Guide The Grand Canyon National Park attracts in excess of 5 million visitors a year, making it one of the world's most popular natural attractions. Apart from simply enjoying the breathtaking views from the canyon's edge, visitors can explore the area via a range of exciting options, such as the Grand Canyon Railway, helicopter tours, Jeep tours, river rafting, mule rides, or old-school hiking. The park can be visited at any time of the year. Just be sure to check the local weather before setting off to avoid extreme heat during the summer months and snowfall during the winter. While in the area, why not check out some other great attractions, such as Bryce Canyon and Zion National Parks, the Hoover Dam, or the Bright Lights of Las Vegas.


Again now, Young's composite experiment, thickness T and location of sector maxima, where it is? Other friends, S1 and S2. Sir, we have the formula of the part. Sir, this needs to go down, right? So, this distance, the light... No, it should go down. Tell me, sir. Can I show it to you, sir? Sir, this is a little more like this, and it takes longer time for the light from S1 to S2. See, I think I understand the difference. The remaining distance, there is T. Why? Several great things. Where is it? How do you know this? There are two part difference.


Hello and welcome to the Ed Hollis show presented by Buffalo Wildlings. I'm Greg Royce joined by Stevenson head football coach Ed Hollis. Coach, you were home this past Saturday 11 Valley got up to a quick start, picked up your first home win of the season, kind of carried some momentum for a second quarter kind of carried that through and just talked about the game and how it went for you guys. Well, like you said Greg, it was the fast start was good getting the turn over quick and getting on the board quick was certainly advantageous for us. And I think the thing that strikes me about Saturday the most is it was a quality team win with great output, great effort from special teams, great output, great effort from the defense, you know, great output, great effort from the offensive side of the ball. So I think it was our most complete performance. I think there's still things we can work on and look at and get better at, but on a whole very proud of the guys for the team effort and the team win. Yeah, second quarter you talk about the opening turnover, but another big special team to play obviously Vince Lee 52 yard putt return for touchdown and then not like you said defense couple interceptions in that quarter that led to touchdown. So you were up 22, 0.5 just talking about how that momentum kind of built upon itself, you know, points off turnovers is something that we talk about often. Obviously, you know, the turnover, the takeaways on the defensive side are very important to us and something that we've talked about in the past. And when we're able to convert those turnovers to points is a huge momentum swing in a ballgame. And then obviously, you know, Vince's return and, you know, the number of guys that had big blocks on that return was impressive. And again, your special teams is something that, you know, we've really worked on and built throughout the years. You look back to week one, you know, we definitely had some issues on teams. So, you know, kind of recommitting ourselves over ourselves over the last couple of weeks is something that the guys have really kind of bought into in the efforts there and the execution starting to come along. Yeah, obviously on the offensive side of the ball had to make a couple changes. But Ty Kraub came in first career star and did pretty well for himself. Yeah, you know, he was, he made some mistakes, but he did a lot of positives as well. So for us, you know, as we work through this, you know, he's going to continue to grow and, you know, going to get better and better every week. And I think too, I think you've got to look at the offense as a whole. Right. Whenever you have that, that type of change, you know, in a very short amount of time, it takes a lot of adaptation, not only from the staff, but to the offensive line, receivers running backs, everything's going to feel a little bit differently. So to the credit of the entire group, to be able to go out and execute, you know, have almost 400 yards and, you know, score 30 points is certainly something that we're proud of. But again, you know, things we have to continue to build upon and still clean up some of the things from Saturday that, that, that, that, you know, there are still places to go with the offense. And it's going to be exciting to watch. Yeah, certainly, you know, put in a new offense, like you said, not just Ty, but it's new to everybody. So they're all going to be learning and improving, hopefully from snap to snap, play to play. Absolutely. And then I know we talked about, but just the defense, I mean, you know, they had the ball, I think, in your territory three times, two of them, one was the block punt and one was the fumble. So there was one time and it was late in the fourth quarter where they flying out of your territory. So keep doing a good job of keeping them on their side of the field. Absolutely. You know, we went back and looked at the drive chart and redid some of the numbers. Our first group only gave up 135 yards of total offense all day. And whenever you can hold a college offense, you know, to that, that type of number, you know, you're doing something right. And I think for those guys, they're starting to find their groove a little bit, you know, starting, you know, you watch them and you watch the pursuit and the energy that they're playing with on the defensive side of the ball. Even carrying back to two weeks ago, it has been significantly improved. And again, that's something that we've talked about. And we've got to continue to work and build upon it over the next four weeks. Yeah. Okay. So back in action again, once again this Saturday, travel up to Weiner for their homecoming game, a game, two teams. It's always a very physical, very emotional battle. Obviously, what do you need to do to go up there and come on with a victory on Saturday? We've got to maintain composure.  It's probably the most hostile environment that we'll play in this year.  And it's going to be fun for us. But the key for us is, you know, maintaining our composure, being the best football team that we can be for 60 minutes. And, you know, if we can do those two things, I think we'll have a shot. All right. All right, coach. We'll wish you the best of luck on Saturday and we'll chat next week. All right. All right. For Ed Hoddle, I'm Greg Royce. This has been the Ed Hoddle Show.


Hello everyone. Today we're going to talk to you about mapping a security to kill chain to a 100,000 plus daily container environment with using Falco. We've been using Falco for since about 2018 and we'll talk to you today about some more lessons learned, how we map these things, and how we can identify security risks. Hopefully you can take something away from that and apply it to your own environment. So before we get started, let's do a quick introduction. My name is Eric Hollis. I'm the team lead for the extended detection and response team at MathWorks as part of the larger information security group. Some of my interests are cloud security, automation, and threat hunting. And hi, I'm Natch. I'm a software engineer at MathWorks, and I work with Eric to ensure that all our cloud services are secure. So I manage a Kubernetes cluster and within our cluster we have a lot of containers. And some of our containers manage traffic from the public cloud. We dynamically scale our container to be able to handle all the traffic load. On a very busy day we have over 100,000 containers running in our cluster. Now because we handle public traffic, security is one of our top priority and we follow many security best practices. We make sure to properly configure our control plane. And we regularly scan our applications and kernel to make sure that there are no known vulnerabilities. We also make sure to configure our cloud provider to only expect the traffic. Now, despite all our effort to make our system secure, there's no such thing as a perfect security. And one day there could be zero-day vulnerabilities in the Kubernetes version that we use and the kernel version that we use. Or our developer might one day misconfigure Kubernetes cluster. And also there could be a security bug in our application or the packages that we include in our containers. So here comes 2020 and not everything in 2020 goes exactly according to plan. So there could be an attacker and one of the steps that the attacker can follow is the following. The attacker could port scan and maybe identify a service with vulnerable code execution. The attacker could next get access to the system and install packages like Metaspoid and then could leverage kernel vulnerability to break up the container. And lastly replace our service with a malicious program to steal data. So how do we trace back the attackers and more importantly, how do we improve our system so that we identify the attack at the earliest stage? Well, to be able to do so, we must be able to answer the following questions at different stages of the attack. And that's when we look into FALGO as the potential solution to answer these questions. FALGO is a cloud-native runtime security project and it can be deployed to the cluster and it detects abnormal activities in our cluster based on the API server audit events and the system calls. FALGO is Kubernetes and container aware and it allows us to write detection rules based on the Kubernetes context and container metadata. FALGO also offers flexible alert integrations. But how do we strategically and effectively use FALGO to monitor these events to make sure we catch the attack at the earliest stage? That's a good question, Notch. Let me walk through our strategy with FALGO. So we take an iterative approach to design our FALGO rules to maximize security observability in our system and to reduce false positives. So we have this cycle here that kind of constantly feeds itself and we're constantly analyzing our environment to better improve security prevention and detection. So we'll go through each stage as we move through this and I'll give you a better understanding of what that looks like. So let's first focus on system analysis. We follow this workflow to analyze our application both at the container and cluster level. So if you take a look here, you know, the system can be very complex. There's a lot of moving parts, a lot of different services that you have to really understand if you're going to build out your own FALGO detections. It can be really environment specific and doing a system analysis can really help drive how you would look at potential security risks in your environment. So some of the things we want to look at at the container level is in the network, we want to look at inbound and outbound connections. We want to understand what ports should be open, what connections we allow, and we want to be able to get an understanding of that so we know what to monitor. For file system, we want to look at things like sensitive files and make a list of those, white list those, or make a list so that we know what to closely monitor. For memory and CPU, we want to have an understanding of workload characterizations, what we would expect from the workload, and then start to monitor the unexpected. At the cluster level, we want to monitor things like role-based access control. We want to see who should have access if anyone into a production environment, and we want to really have an understanding of what that is so that we can then monitor more closely. We also want to whitelist our container images so that if there's an unexpected image in the environment, then we can further investigate. Really getting an understanding of your entire stack and application in a cluster, you get a better idea of what you should be looking out for. After we have that understanding of our system, we can then start to map that to a cyber security kill chain to analyze where our potential security risks are. I'll go into more detail about the different phases of the kill chain and give you an understanding of what that is. We've mapped to the Lockheed Martin cyber security kill chain. There are seven stages, and we'll go through all of these starting from reconnaissance. This is the common pattern that an attacker would use to compromise the system. They might not go through every phase here, but they're ultimately going to start at reconnaissance, which is fingerprinting the system, looking at what operating system is running, any ports that are open, what services are running. They're ultimately going to move their way down to delivering and exploiting the system, potentially installing malware and so on. You can start to map your different attack scenarios to this kill chain, and then start to identify where the risks are and build Falco rules off of that. Let's just go through a quick description of each stage here. Reconnaissance, like I said, this is the fingerprinting stage where an attacker is just trying to figure out what's going on in the system, what it's running, trying to figure out is it a containerized application, and that sort of thing. The next phase is weaponization. This is building out the exploit to use in the attack, so coupling malicious code with a known exploit to a vulnerability. Delivery is just getting that malicious code or that exploit onto the system that they're looking to target. Exploitation is the successful attempt at exploiting a vulnerability or a misconfiguration. Installation is once they've exploited the system and they want to install some malware or something to infect the host and move on with some of the other tasks that they want to do. Command and control is about establishing a communication channel between an attacker and the system. They exploit the system, but then they want to be able to establish communication so that they can continue on with whatever they're trying to do once they've compromised the host. Then action on objectives is the action related to the goals of the attacker. This could be a pretty wide variety. The attacker could be looking to exfiltrate and steal data. They could be looking to mine bitcoin. They could be looking to just establish persistence and then get a wider, broader feel for what environment they're in and what else they can compromise. We want to monitor at all of these stages. It's really worth pointing out that it's important to build prevention and detection throughout this whole kill chain to better protect your system.  Someone's just poking and prodding in the reconnaissance phase and there's a way to block IPs that are constantly port scanning your system. That's much better than if you detect it later on and they've already exploited the system. Now mapping the attack scenario that Notch outlined earlier to this kill chain, we can start to identify where these all land within the kill chain. For the first step of the attacker, scanning a port to identify services with a vulnerable remote code execution, those will be reconnaissance. They're scanning the system, they're trying to get an idea of what's going on and that would map directly to reconnaissance. For stage two with a metasploit installation, this would likely fall under the delivery stage where they're pulling down something to then use to exploit the system. Leveraging a kernel vulnerability to break out of a container, this would be part of the exploitation phase where they've now leveraged some malicious code as part of, in this case, metasploit and they've exploited a system broken out of the container. In the fourth stage about replacing a running service with a malicious program to exfiltrate data, this would be in action on the objective. Their intent is to steal data from the system and you want to have some rules in place for that. So now that we understand how the system behaves and the steps the attacker could take to compromise the system, it's time that we write some FALCO rules. We need to have these in place. We want to map these to those different phases within the kill chain. So here's an example of a FALCO rule. I'll break down the different components of it. And this one specifically is mapping to the first step of the attack, which is the reconnaissance phase with scanning ports to identify services running with a vulnerable remote code execution. And this is specifically, this rule is looking at unexpected traffic over the SSH port. So if an attacker is scanning a host and they scan port 22 for SSH, this would alert on that. So to break it down a little bit, the first section here highlighted in red is a macro to define a white list of allowed SSH hosts. So in this case, it's looking at an entire slash 24 CIDR block. And you could also do individual IPs, however you need. You could have nothing here. And anytime someone tries to connect or scan on port 22, if this would trigger every FALCO rule has to have a rule title, a description. The condition is the content that it's actually, you know, triggering and monitoring an alert on. So in this case, it's looking at either inbound or outbound network connection. So looking at SSH port, which is defined as port 22. And then it's looking at anything that's not on the allowed SSH hosts. For the output, this is what's going to get logged when an alert or an event is triggered. And this is going to be customized to capture, you know, specific information that you need. Priority is really so that in your own environment, you can classify the severity of an event. So this can go all the way from emergency, all the way down to informational or debug. And you can then use this to, you know, determine what the severity of the incident is. You can also have tags. So you can use this to just group your rule sets. You could actually use this too. If you wanted to map to the different security kill chain phases, you could name this, you know, you could tag this with reconnaissance. That can be helpful as well. So here's another example for a potential reconnaissance example of scanning a port. So this is looking at unexpected API server traffic for the Kubernetes API server. The API server is a critical component of Kubernetes. And, you know, from our system analysis, we identify and white listed all of our applications. So you can see here, we've white listed web app one and web app two. And those are allowed to communicate to the API server. And so we have this rule, if anything else is attempting to connect, we'll get alerted. You'll see here, this is where we're specifically saying anything that's not in our known contact list of accepted applications, then trigger an alert. Alright, so an example for the Metasploit installation detection. This is the unexpected package installation rule. So this is a default rule that's provided by Felco. And again, we can add a list of known package managers that are okay in this environment, but we can then trigger on anything, you know, someone were to do an app to get install on a Metasploit package and pull that down, then we would get alerted to it and we can then, you know, investigate further. For stage three, for leveraging kernel vulnerability to break out of a container, one of the things that we can monitor for is the creation of a sim link over sensitive files. If there was an exploit, you know, on the system, there could be some system file changes that would occur and sim links to, you know, malware or other things that could be leveraged to then break out of the container. So we can monitor that similar to the other rules. This has the same components there. For stage four with replacing a running service with the malicious program to exfiltrate data, an example of something we can monitor is Kubernetes deployment being deleted. There's also rules to look for a deployment being modified or created. And so this could be an attacker attempting to replace a Kubernetes deployment with malicious code to then look to exfiltrate data. And so we want to detect an alert on that as well. So we can take all of these rules. We can start to map them to the kill chain. There's a lot of great Falco rules, you know, right out of the box, as well as the ability to customize and focus in on exactly what we're looking for based on our system analysis. So next, Nach is going to talk about testing and qualifying our rules as well as provided demo. Thanks, Eric. We saw so many Falco rules for different stages of the security kill chain. This is great. But how do we verify that Falco rules and Falco itself behave as expected? At MathWorks, we stage Falco rules before we release them to production. Let me show you how we manually test Falco rules and how we automate them using Falco Event Generator. All right, so we have two windows open. I'll use one on the left to show output logs from Falco. And I'll use the right window to run commands. So the first thing I'll do is to port scan its service running my cluster. Port scanning tool like Nmap is a great way to get to know the system, what ports are running, what operating system and so on. In this demo, I'll use Nmap to see whether the SSH port is open. So as you can see, Falco does detect a traffic to the SSH port from the host that it doesn't recognize. This can be a good sign of someone trying to perform a recon on your system. Next, let me introduce you to my nginx service. This nginx service routes outside traffic to the other services inside my cluster. Let's assume that it has a remote code execution vulnerability. I'll exit into my nginx pod to run arbitrary commands. Okay, I have code execution access in the system. The first thing I want to do is installing packages like tcpdump. I'm not going to install it, but as you can see, Falco detects the package installation. This is a good detection as all containers should be immutable. So we do not expect any additional installation once the container is running. I could also try to replace files in the bin folder. And I could also try to write something to the schost files. As you can see, Falco detects any activities to the sensitive file system. Now, unfortunately, this nginx pod is not properly configured. The nginx service routes traffic to the other services in the cluster. So it shouldn't have to talk to the API server. However, its service account has the permission to list pods and its service account token is also mounted to the file system. The attacker can use the service account token to connect to the API server. Or the attacker could use the service account token to list the pods. And even worse, the attacker could maybe use the service account token to delete pods in the cluster. Luckily, the service account doesn't have the permission to delete the pods. And as you can see, Falco detects any unexpected connection from this nginx pod to the API server. It shows the exact API request and the pod ID the request originated from. I have shown you Falco interactions and ways to manually test the detection rules. Now, in a large-scale system, testing rules manually may not be scalable. Fortunately, Falco has a project named Falco Event Generator that you can use to automate testing. The best way to use the project is to run it inside a container as some of its action can make changes to your file system. You can use the list command to show all the actions that the generator supports. As you can see, the project can perform a few system calls and Kubernetes action. Let me show you Falco Event Generator in action. Pay attention to the Falco log on the left-hand side. For this demo, I'll show you an example of a system call generated by the project. I just used the project to make changes to the bin folder. Now, the Event Generator also supports integration tests against a running Falco instance. Here, I mount the Falco GRPC socket file to the Event Generator so that it can receive Falco events and validate the alert. The Event Generator run system calls tests. This is a good way to ensure that any rule changes and Falco version changes don't impact your security detection. The Event Generator is a very exciting project and you're very welcome to contribute to the project by adding more test cases. So, let's wrap up the demo. I have shown you ways to manually test the Falco detection rules and also ways to automate them with the project called Falco Event Generator. All right. Now, I'm going to talk about security observability and alert analysis.  We've written a bunch of rules, not just showed how we can test and qualify those rules and move things into production. Then we really need to have a system in place that we can distill down all of this information. We could generate a lot of logs for events and we need to be able to kind of bubble those things up from a security perspective to analyze the things that really matter. So, we've given you this picture of how Falco can help in this complex environment. And so, we're going to talk about security instant management. One of the benefits is that there's really flexible alert integrations. We can log things to syslog, to push into a SIM or a log aggregator. There's Standard Out, which was just in the example that Notch gave, where we'll just write to the terminal. There's Webhooks, so we can integrate in with things like Slack or Teams or other tooling in your environment, as well as TLS, GR, PC, which can be used to open a socket for testing for things like the Falco event generator, as Notch demonstrated. So, let's take a look at our dashboarding system that can be used to monitor some of our events and further investigate through the findings. So, you'll see here, we pull in information on the top row here around file system violations, and then we're mapping those over time. Then below, we're looking at network traffic violations and again, mapping them over time. One thing you'll see is that we capture the container ID here. And so, if something suspicious pops up, we can then pivot through some of our application logs, our container logs, and we can start to correlate this data to really try to figure out if there was a security event. In addition, we can use some of the other tooling that can come along with some of these applications. So, we can use machine learning to take a lot of data and start to look at outliers in that, which we wouldn't be able to do manually, and identify potential security risks there as well. So, I'm going to show you an example of how we do that and generate an email alert. The other thing worth noting is that in addition to the dashboarding, which is good for monitoring, we can also trigger the emails, but also generate a page or alert teams in other manners as well. So, here's an example of an alert where we are looking at outliers. So, we're monitoring for system commands, and we are then getting an average of how many system commands we would expect to see in our environment on one of our systems. The average is 1.6. And then, we're defining a threshold using the machine learning module, which will define an upper bound. So, anything over 13.59 system commands on one of our hosts should then become an outlier and trigger an email. In this case, you're seeing that there are 14. So, 14 system commands, which then trigger an alert. And you'll see we also capture the container ID. So, this alone, it could be an administrator making changes in a production environment, and we want to be able to follow up with them, because that shouldn't happen, or it could be that there's something malicious going on. So, we can take this container ID, and we can start to correlate that and try to figure out what's going on in our environment and how we can, you know, figure out exactly what's going on. So, with that, that's it for our talk today. We'd like to thank you for attending and hope that you can take something away from this. We learned a lot in this journey. I think it can be super helpful for security teams to work with dev teams to integrate something like this to, you know, help improve security. And we'll be available for Q&A. Thank you very much.


With a clerk, please read the poet for the day Thank you. Our power as individuals is multiplied when we gather together as a community with common goals Thank you very much the clerk, please call the roll our 12 present All the men born Damro and Carlson and Jose are excused Please stand and join me in the pledge of allegiance A Delegance to the flag of the United States of America and to the republic for which it stands one nation under God Indivisible with liberty and justice for all Today, I'd like to just introduce some of our guests from the Lakeshore Technical Colleges Sheboygan High School equivalency diploma students. They're here from Sharon Abel's class and civics, so I would welcome them tonight Next we'll move on with the approval of minutes from our last meeting Alderman Hammond Thank You mr. Mayor move to approve second. Thank for that motion and support. Is there any discussion on the minutes? Seeing none all those in favor, please signify by saying aye. Aye opposed motion passes Next we'll move on to resignation city attorney. We have one resignation Darryl Carlson is resigning from the Meade library board effective immediately Thank you very much Alderman Hammond. Thank you again. Mr. Merri move to accept in place on file second Thank you for that motion and support all those in favor of the motion, please signify by saying aye. Aye opposed Motion passes and if any of the alderman are interested in filling Darryl's position Please let me know and we'll make an appointment as soon as possible Are there any appointments for this evening? Okay, then we'll move on to public forum nothing this evening. Okay Under Mayor's announcements, we had a very interesting news come public this morning During our ocean conference in Valparaiso chili president Barack Obama today announced that for the first time since 2000 two new national marine sanctuaries have been identified by the National Oceanic and Atmospheric Agency for possible designation under the Marine Sanctuary Act In Wisconsin an 875 square mile area of Lake Michigan off the coastal waters of Polkport, Washington Sheboygan Manitowoc and two rivers received tremendous support from the community and was identified for possible designation The nominate area contains a collection of 39 known shipwrecks 15 of which are listed on the National Register of Historic Places Noah is seeking comment on the proposals and a public scoping meeting is being held on at UW Sheboygan Campus on November 19th of 2015 After receiving public input Noah will conduct resource analysis and prepare draft Legislation designation documents these documents will be released for public review When Noah will make a final decision on the designation and these final documents after review by the governor and Congress Will be approved. We're hoping that it follows that track copies of the information released today on your desk and also are posted to the city website I Also like to remind the public that we're beginning leaf collection today the city has been divided into five different districts and Each day they will come back out of the month of the week rather. They'll come back to the the proper district We also encourage our residents to mulch their leaves with the lawn when cutting the grass or begging the leaves and bringing them down to The drop-off center at the Department of Public Works. This will lessen the load for the leaf collection And that will continue until November 20th Okay, next we'll go on to our public hearing We have a hearing to amend the city's zoning map to establish the use district Classification of recently annexed property located on that's just north of Wheaton Creek Road in West of I-43 Is there anyone wishing to be heard? Is there anyone wishing to be heard? Is there anyone wishing to be heard? Alderman Hammond, thank you. Mr. Mayor move to close second Thank you for that motion to close the hearing that any discussion seeing none all those in favor Please signify by saying aye. Aye opposed motion passes Next we'll go on to the consent agenda and include items 3.2 through 3.8 Alderman Hammond Thank You mr. Mayor move to accept and follow all reports of officers accept and adopt all reports of committees and put all Resolutions and ordinance is upon their passage second. Thank you for that motion and support Those items are before us for any discussion Are any questions? See none all those where the clerk rather, please call the roll Got it 12 eyes Next will we go on to reports of officers? Item 4.1 will be held for 5.1 Items 4.2 through 4.8 will be referred to various committees under resolutions Item 5.1 Including 4.1 is a resolution by alderman bellinger authorizing entering into a contract with brain associates For consulting services related to programming and space needs analysis for City Hall Alderman Hammond Thank You mr. Mayor I'd like to make a motion to suspend the rules second Thank for that motion to suspend is there any objection to that? See none, please proceed thank you mr. Mayor. I'd like to accept and file the arrow and put the resolution upon his passage Second thank you for that motion and support. Is there any discussion on the motion? See none will a clerk. Please call the roll 12 eyes Motion passes item 5.2 is a resolution by alderman donahue Applying certain changes to the city's medical benefit and dental benefit plan to represented employees in the shabuigan professional police officers supervisory Association the shabuigan professional police officers Association and the International Association of Firefighters Local 4 83 effective for calendar year 2016 coverage in establishing the monthly premium and equivalent rates effective for January of 2016 coverage in thereafter Alderman Donahue Second thank you for that motion and support is there any discussion on the motion See none will the clerk. Please call the roll for passage 12 eyes Motion passes Items 5.3 through 5.7 will be referred to various committees Under reports of committee 6.1 is an RC by lawn licensing to who is referred our own number 108 of 1516 by the city clerk submitting various license applications and recommends that the beverage operators license number 29 excuse me 92-94 be denied based on her failure to accurate reveal all relevant convictions on her application her record of violations Related to the licensed activity and her record as a repeat law offender Alderman van der wheel thank you mr. Mayor move at the RC be accepted and adopted second Thank you for that motion and support under discussion is Monica Torres here this evening Okay, Monica is here she did Attend our meeting as we had requested She has a very lengthy record that the committee was concerned about as well as the police department Going back to 2005 she had has a disorderly conduct to to disorderly conduct Sorry, also a misdemeanor driving without a license in 2006 a disorderly conduct 2007 a disorderly conduct with the miss and a misdemeanor driving without a license in 2008 She had a disorderly conduct 2009 a disorderly conduct 2010 she had a contempt of court In 2011 she had failure to quarantine an animal 2012 a contempt of court 2013 disorderly conduct as well as a contempt of court obstructing and resisting and an Unlicensed animal and in 2014 she had a sort of a conduct at least one of the disorderly conducts the most recent or But in the last two years was did include drinking She held the license in 2010 2011 around that time, but she's had quite a few violations since that time we were concerned about how her conduct would be in a place of business Serving alcohol or selling it Is there any other discussion? Monica, would you like to make any statement to the council? Please step forward to the microphone Please proceed. I know I made my mistake This is my opportunity I actually need this job and actually working for a couple of you speak into the microphone a little bit more Thank you. I want to say I apologize for all these disorderly conducts I had and I recall and I thought I actually then Explained myself in order to get my liquor license, which I'm a single mother of three kids. I live on my own I do need this job Okay Did you want to add anything as the manager? Monica's worked for us for a short time. She works for us in a couple different stores And in doing so she has Not proven to do any mistakes. She's been an asset to us in our stores She's bilingual which is also an asset to us in the neighborhoods that she works in and has Not done any wrong in the three months that she's worked for us So I hope that you would at least if you don't issue her a full license Offer her a provisional license to prove to you that she can do a good job for us Thank you very much your excuse then. Is there any other discussion Alderman teal Before you leave, where is the place of employment by chance? Any other discussion? All of them in the side She came before us at our law and licensing meeting and she has eight disorderly conducts three contempt of court I was concerned about the issues of contempt of court and what that actually meant And it meant one of two things either she didn't show up or she didn't follow the judge's order and When she spoke to us at law and licensing She didn't say that she'd been at every one of her court hearings Which leads us to believe that she didn't do what the judge had ordered the police department was not comfortable in giving a favorable recommendation So I will not be voting in favor of approving this license. Thank you. Thank you for those comments any other discussion See none will the clerk, please call the roll on passage nine eyes three nose Motion passes Next we'll move on to matters laid over Item seven point one is our own number one forty seven of 1516 by the city Planning Commission to who is referred general ordinance number 18 of 15 16 by Alderman Bellinger I'm ending the city zoning map to establish the use district Classification of recently annexed property north of Wheaton Creek Road in West of I-43 Alderman Bellinger Thank you, mayor. I moved to accept and file and pass your ordinance second Thank you for that motion in support. Is there any discussion on the motion? See none will the clerk, please call the roll for passage 12 eyes Motion passes under other matters City Attorney, we do have one other matter 8.1 is an RO submitting various license applications for the period ending December 31st 2015 and June 30th 2017 that would be referred to the law and licensing committee I was remiss earlier in the meeting and not recognizing Boy Scout troop number 818 They're lightning patrol. They have several members here working on their government merit badge That's Grant Josevar Johnny George Nicholas Willekka and Alex Cunningham. They're all from immaculate conception parish Thanks for attending tonight Alderman Hammond Thank You, mr. Mayor I moved to convene in closed session under the exemption contained in section 1985 1e Wisconsin statutes for the purpose of deliberating the possible sale of public property We're competitive in bargaining reasons require a closed session related to the sugar property second Thank you for that motion in support the clerk, please call the roll for closed session well by's motion passes will take a five minute recess and Reconvene shortly


Welcome folks, we have the Dow Industrial Straighten down at $6.34 and Aztec off $263, S&Ps off $75. Gold. Gold content down $6.90 at $18.43 an ounce. We have Silver up $0.13, $22 flat, Light Sweet Crew down $0.18, $76.16 a barrel, notes and bonds. And your note down, 36th straight in $111.02, 30 year off a full point plus 21 ticks at $124.04 and the 10 year right now folks, $3.951. This baby and if we take a look at this 10 year bottom line, you know, right now we're at that $111.02, it wants to go to the $110. So $110 is going to put you right back over the 4%. King dollar. King dollar's up $303 ticks straight in $104.165, Euro 106, yen $134.94 and the British pound at $1.21 to $1.00 US. We get over and take a look at these markets, yeah, we're going to go to the S&P first because this is pretty cool how this thing is actually, it's been a down day all day and we take a look at this. You have a little divergence right now and it's going to be the cues that basically let us know where this thing wants to go. So watch what happened here. At $2.30, that was the first time all day that we actually got some volume on the way up. You can see that bar there, that got volume. Now watch this. This is why when I'm trading these, I'm always looking at both. Now if we go to the end cues, the end cues got the volume but the end cues are going to give it up, man. So this gets really intriguing. So watch this. The end cues, we open that up. It's not as visible inside of the end cues as it is to the S&Ps. So the bottom line, we'll see, my take is that the end cues are going to test the bottom again and, you know, if they break the bottom, it's going to be a real problem because, let me see this. What is that? That's $6,300. Yeah, see, because it looks to me like you actually got another ABC down here. Yeah, bottom line, this market wants a tremendously lower volume but we'll see where it shakes out. Not that we will see where it shakes out, meaning that this thing is going to have volume today. This is going to blow out on the way down. You're breaking the swings. Gold market couldn't handle higher price today, $18.56 or $18.43. We'll see how it attacks. We had volume at this $18.27 on Friday. So it's going to at least get to that point. My take is we're going to $17.95. Stay right there, folks. Come right back.


The Asian Swing continues this week. Now we're going over to Beijing for the first time in a while. Haven't been to China for four years. Of course the Shanghai Masters come out next week. The biggest tournament of the Asian Swing. But let's have a look at the players that are not going to be playing next week due to withdrawal. A few players are not playing. Batista Ragu, he's pulled out. Baratini, of course pulling out with injury. Karina Buster also injured and not playing. Taylor Fritz, he's pulled out and so has Tiafo. And Fritz and Tiafo of course played Leiva a couple last week. So you wonder whether or not it was just getting from Vancouver to China with the jet lag and all of that. Maybe they didn't want to play. But some big names there that won't be playing in this event. Let's get at the top of the draw because we have some massive names that are playing in this event. We have eight seeds in this one. No one gets a buy in the first round. Al-Qaraz back for the first time. He takes that number one seed. He's taken a qualifier in the first round. Winner of that match will take on the winner of Hashinob and Rousseti who are going at it in the first round. Then you've got another qualifier taken on Etcheverry. Winner of that will take on either Strouf or the number seven seed Rude. And those guys played a very fun match at the start of the season on the clay courts. Of course we haven't seen Strouf for a long time but that could be a really fun first round match. Speaking of first round matches, number three seed Runa. He takes on Felix Oshelia Seaman in the first round.  Of course FAA dropping down the rankings. That's why he's in the first round there. Unseeded, huge first round there. Winner of that will take on either McDonald or Dimitrov in the second round. Then we've got Song taken on Nishioca. Winner of that will take on either Evans. Or the number six seed Sinner. I mean there are some fire first round matches in this section. Not to mention fire second round matches as well. We've got a potential matchup in the semi-final. Elkress could take on Runa which has been a great match in the past. Elkress Sinner. We've seen that a few times this year and we'd love to see it again. Or if you want to go by something a little different you could go Rude versus Runa. Rude versus Sinner. Or some other combination of players but man it is a top-heavy draw. Going to the bottom half of the draw now we've got Zverev. The number eight seed taken on Schwartzman. Winner of that will take on either Fakina or Zoho in the second round. Then we've got a battle of the Qollies. Winner of that match will take on either Jarry or the number four seed. City passing the second round. That's a bang a first round match as well. We've got the number five seed. Rublev taken on Nori. Another crazy first round. Winner of that will take on either Umbair or Senego in the second round. Then we've got Dimitrov taken on Murray which is an insane first round again. But not as insane as this match. Paul will take on the number two seed Mevedev in that first round.  Jarry City pass. Schwartzman Zverev maybe two three years ago would have been interesting but not so much now. Dimitrov Murray that's going to take four hours. Paul Mevedev.  And then Rublev Nori. I mean there's some crazy matchups in the first round and potentially in the second round of this event. And if we're going by the seeds in this one we could be getting a City pass versus Mevedev semifinal. Or if you want to go by some form we can go with Mevedev versus Zverev in that semifinal. Or we could even get Rublev versus City pass. Rublev versus Zverev. Or any of the random matchups because I think we're going to get a lot of upsets in this one. So there you have it. They are the matchups for the first round. I mean this is a 500 event and it feels like a 1000 event. It feels like a grand slam without Djokovic but you know we've had a few of those lately.  And some players that are in form means Zverev's in a final tonight. We'll see what he looks like as of tomorrow when he wins.  Who's going to win this one? I don't know Mevedev I mean he's been good in Asia. Zverev's in form.  We could get an Unceded player. They'd have to beat a lot of good players to win but maybe an Unceded player. Let me know down in the comments below but the China open absolutely stacked for 2023.


Now Pakistan's Interior Ministry says a suicide car bombing at a checkpoint in the capital, Islamabad, has killed one police official and injured several others and killed many. Islamabad operations police chief Sohail Zafar told reporters initial information indicated there were a man and a woman in the car and the man blew himself up during a body search. The car was parked with explosives and headed for a high-value target in the capital. The bombing took place in Nepalese headquarters on the main road that leads to Govman building's house in the country's parliament and high offices.