The following is a presentation of TFNN. The Trader's Edge with Steve Rhodes. Toll free at 1-877-927-6648 or internationally at<PHONE_NUMBER>. The Trader's Edge. Now, Steve Rhodes. Good morning, folks. Welcome to the January 20... What is it? 24th? 25th? The January 25th. Additionally, a terrific Thursday edition of today's Trader's Edge show. I'm your host, Steve, Perseverance Rhodes, who absolutely knows that each of us should always be pioneers of our future versus prisoners of our past. Hope everyone out there is having a great day. Let's make sure we have an extraordinary one. Now, the easiest way to do that is to always remember that life is happening for us. Not to us. That's right. When you and I make that one little two-by-four shift, it means we can find the gift and every set of circumstance that life is going to toss at us. Now, today you and I are going to go check on the circumstance of these markets. We'll go figure out what those bulls and bears, what those buyers and sellers are communicating to you and I at just past 11 o'clock in the morning. I want you to know I'm absolutely grateful for your presence here. But even more important than that, and that's this during the next 53 minutes, I am here to serve you. So feel free to pick up that phone. Dial on in at<PHONE_NUMBER>. Now, if you've got a question but you can't dial in, we've got your back. You can send me an email. Send that off to Steve at tfnn.com. And inside that subject heading, please put radio show question. Of course, if you're inside our Tigers, then well, then any and every ping will do. So let's go ahead and get this show started on terrific Thursday. Of course, this is Tiger Financial News Network. I'm Steve Rhodes. Welcome to the show. We begin our day with AC of green out there. All the U.S. cities trade in the upside. In fact, most everything is traded upside, exceptions being Tesla, the Euro, the healthcare sector, and natural gas, which is basically flat out there. But you got the Dow up 74 points. S&P's up 20. NASDAQ 187. Russell's up 10. Semi's are up 45 points out there. Trendy's are up 116. Gold's up 4 bucks. Silver's up 7 pennies. Light's we could have buck 78. Third year treasure up 26 ticks printed out at 120.01. Leading our charge to the upside, dollar-wise, is United Rentals. A $73 move, almost 13% lamb research. $41, almost 5%. Asmel Holdings, $31. 3 and 6, 10%. Equinix 25, 3%. IBM is up 22 bucks. That's a 12% move there. The shakers to the downside, Humana. 58 bucks, 15%. Northrop Gummett, 37 bucks, 8%. United Health, 32 bucks, 6%. Tesla, 22 bucks. And Molina Healthcare's down 17. Printing out at 349.27. So let's begin our day by doing what? Well, let's go see how futures are trading. You know what we're going to do here. Let's do this. Brent called yesterday with a question about the annual charts. How price is trading? What kind of meaning can we draw from it? So why don't we do that? Why don't we step through this here? So one step at a time. So I'm going to change back and forth through a couple of screens out here. So let's start by taking a look at the U.S. indices and understand where we're at. These are all the U.S. indices that we're taking a look at.  Now, that doesn't mean it's not going to pull back. It doesn't mean it won't top. It just means that is a bullish signal. If we just establish that, it's like driving down the expressway. You come into some traffic. You get past that traffic. You get your Waze app out there. There's no police anywhere and you can floor it. You can open it up. And that's what happens when you're trading at new all-time highs out there. So if we take a look at the Dow Jones Industries, these are the yearly charts that we're looking at out here. We are trading above last year's high. That isn't a bullish condition. The S&P 500, the exact same thing. The Nasdaq 100, the exact same thing. The Russell, not so much. Not only are we not near its all-time highs. We're not even close. Well, we're close, but not that close to last year's high out there. Semiconductors, they're on fire. They're trading above last year's high. The transports are not. The Nasdaq composite is not just yet, nor the New York Stock Exchange. So what does all this... Oh, and then one last thing out here. Let's take a look at the XAU. The XAU right now. It's trading below last year's open. It's not trading below last year's low out there, but certainly something for us to keep an eye on. But let's come back to these indices that are trading above their highs. They are in bullish conditions here. So someone might say, well, and I think someone should say, well, I don't know, Stevie, that's the U.S. What's going on around the globe? And I think that's a good question. Let me see what else is going on around the globe. We should be able to find some charts that help us do that. Let me see if this is it. This is... So this is one way of taking a look at it. These are yearly charts out here. And I put this together so that each of you at home can do the same thing. In other words, I'm not showing the indices. I'm showing the ETFs. So as long as you've got some type of data connection out there, you're going to be able to pull these up. You could recreate this chart or maybe even something better. But here I'm showing the Dow diamonds. The all-time high... Well, the all-time high is basically a couple days ago at 381.08, but 377.69 is last year's high out there. As long as price remains... But yesterday was actually a test and rejection on a daily time frame of last year's high out there. If we take a look at what's going on over in the U.K., look how far away it is from an all-time high. This is the EWU, by the way. So we're looking at these ETF structures out here. Not above the 2023 high, nor is the Australian ETF EWA, nor is the Canadian ETF EWC. The MCHI, this is the China shares out here, has been trading. Right now it's trading... It's still trading below. Yes, trading below last year's low out there. So just like if you trade above last year's high, you're in a bullish condition. You start trading below last year's low. You're in a bearish condition out there. You are starting to get very close. You're trading by two pennies above the INDA. That's the India ETF out there. You're getting close to last year's high inside the EWG. That's related to Germany. Japan is the EWJ. That is trading above last year's high. It suggests that it wants to go target. It's all-time high out there. And then finally got the EEM, the low and the high from last year. So again, when we take a look at this, in the U.S. we have clear breakouts above last year's high. We take a look at what's going on internationally. We don't. Who do you want to bet on? Who do you want to put your money on? If you are global capital, global capital out there.  That's why they like the Dow. I know many people like to trash the Dow. But boy, the Dow can provide us with a ton of information to understanding international capital flows. All right. So what else can we clean out of this? This is the ESMini, the NQ and the Dow. So we're back to the futures contract. We're back to the daily timeframe. And each of these are priced in dollars. That's on your left-hand side. Next to that is euros. Next to that is pounds. Next to that is yen. We are at new all-time highs with regard to the ESMini. We haven't made a new high today yet in terms of dollars, but we most certainly have in terms of euros. If you're taking a look at that candle, it's today's candle alone, the ESMini in euros.  Again, on a daily basis, we get a topping signal, something along those lines. I get it. But basically, there are buyers out there. And they're going to remain to be buyers out there. This is breaking out big time. Well above the 2023 high, we've got a breakout going inside the ESMini in British pounds. In yen, it made a new all-time high yesterday, very close to doing that again today. This is where capital is flowing. You know that Jerry McGuire movie, right? Show me the money. I'm showing you the money, and I'm showing you where it's going in its U.S. based. Steve Rhodes with Tf&N will be right back. If you're looking for potential trading setups in the stock market, then Rocket Equities & Options Report is a newsletter you should try. Tommy O'Brien delivers options and equity trades when the markets present them using a combination of fundamentals and technicals. Sign up for Rocket Equities & Options Report today with a 30-day money-back guarantee so you have nothing to risk. For all the details and to start your subscription today, visit the front page of Tf&N.com. Tf&N Educating Investors. You might think that if you want to be successful at trading in the stock market, you're going to need a crystal ball. After all, it's impossible to predict the future, right? Like any endeavor in life, before you decide it's impossible, get some advice from the experts. You might find that it's not so impossible after all. For daily market overviews that give you direction on the key indices, selective stocks and commodities, subscribe to the opening call newsletter at Tf&N.com. The opening call newsletter is written by Basil Chapman, creator of the trading methodology known as the Chapman Wave. The Chapman Wave up-down sequence gives you an edge in identifying price turns, finding the peaks and valleys in stock prices.  First-time subscribers also get a 30-day money back guarantee. If you're not satisfied, let us know and you'll get a full refund within 30 days of signing up. Tf&N.com. Educating Investors. Steve Rhodes started his trading career as a student almost 20 years ago and the student has now become the master. Steve won the prestigious Timer of the Year award in 2018 and barely missed that mark again in 2019, finishing at number 2 for the year. An amazing accomplishment. Steve Rhodes is committed to sharing his techniques and knowledge with anyone who wants to learn and he shares his vast amount of trading knowledge every day in his Mastering Probability newsletter. Steve's award-winning newsletter Mastering Probability is delivered every trading day with updates throughout the afternoon. Steve's Market Newsletter Mastering Probability and you'll receive access to 7 of Steve's educational webinars absolutely free. At Tf&N, all our newsletters come with a 30-day money back guarantee so you have absolutely nothing to worry about. Visit Tf&N.com and try Mastering Probability 30 days risk-free today. Tf&N Educating Investors. Tf&N has launched the Tiger's Den. Tf&N has been educating traders for more than 20 years with live programming hosted by a variety of professional traders during market hours. The Tiger's Den. Available to all tigers and tigers for just $1 for the year. There's no catch or added costs when you join our community of traders. Sign up today and become a part of this educational community of traders. Just visit the front page of Tf&N.com. Tf&N at<PHONE_NUMBER>. Looking back, folks, so to summarize that last segment I mean, we're looking at the charts. I'm just narrating the charts for you. I'm showing you how instruments are trading in multiple currencies out there that's so important. Why? Because let's just say you're over in Europe right now. Let's just say you're over in Italy. We're over in Italy. Let's go to Sicily. You and I. What are the local people thinking? They're thinking in terms of their currency. They're thinking in terms of the Europe. We go over to the U.K. We decide that, well, we could start going to a pub over in the U.K., right? Five-hour time difference this time of year out there. We're just about to get started. But there we're going to be thinking in terms of pounds. Well, that's how they're thinking of the instruments that also take a look at Tesla. We've got Tesla up on our screens right now as an example. They're looking at that in terms of their currency. They're looking at that trade in those currencies. And as long as there is capital, that is global capital that's flowing into the U.S., what that tells us is that any retracement, any moves lower should be relatively mild out there. Okay, let's take a look at Tesla since it's up on our screen out here. We talked about Tesla yesterday. We were trying to get a feel for where this might head to. And what we said was, we said that if Tesla would trigger it well below that, that it would trigger bar number nine of the following bar number nine of a TD9 account. So on a daily basis, Tesla is going to go ahead and complete a TD9 account bottom pattern. Period end of story. Now the cool thing about that is Tesla is also going to go ahead and confirm an A to B equal CD pattern to the downside. The swing point that it's dealing with out here, that was the swing point from the trading session of, come on, Stevie, work that cursor, would you? It looks like October the 30th. So October 30th, it was 136 million shares. We're at 93 million right now. I'm assuming we're going to get more than 136 million shares. Now we confirm an A to B equal CD to the downside. On a weekly basis though, I'm not so sure about that. The weekly volume at the swing point is 621 million shares. So far, we're at 441. On a daily basis like yesterday, Tesla did volume of 123 the day before 100 million, day before that 100 million. So we're looking at about 125, 30 million shares maybe added to where we're at, 445, 4570. So this is taking out that swing point, the weekly swing point with lighter volume. Doesn't mean that it won't go ahead and complete the pattern. How will you know if it's going to complete the pattern? Well that's the beauty of today's candle. You've got the TD9 account pattern completing. If price starts trading below, not trading below, but closes below today's low, whatever that is, then that's going to tell us that this A to B equal CD pattern is likely to be fulfilled. Again, that initial price projection level would get us down to 159.91. We can see on the monthly timeframe chart that we've got bullish profile structured support between 144 and 165 out there. So that becomes a target with the caveat that we could see a bounce. You could see a bottom today out here inside of Tesla because of that TD9 account pattern out there. Okay, nobody asked about it, but it just happened to be on my screen, I believe from yesterday. So Brett, I hope that helped you out with regard to the annual charts out there. Let's go to our next question. The next question is coming in from Hector. And Hector and Patty asked this question. By the way, I don't know if any of you saw. I know the full moon turns full this afternoon or maybe within the next hour or two out there, but it looked pretty darn full last night. So it was a pretty moon out there. It should go take a look at it this evening. But the question is, does the full moon have any impact on the S&P 500 or gold? So that's a great question and luckily because of the great folks over at Season X, we can answer that question. We can answer it for whatever years we want to go ahead and take a look at. What I've got up here right now is the S&P 500. You can see that in the upper left-hand corner. Over in the right-hand area, you can see the years I've selected 25 years. Hopefully that's enough data. And what I've got out here, we're not taking a look just yet at the full moon. We're taking a look at the US GDP report. Why? Because I wanted to share this with subscribers this morning. What we looked at this morning was the Dow. So I just switched that over to the S&P 500. What we can see here is that typically this vertical line represents today. And what typically transpires or at least has transpired on average over the next 10 days is price moves higher. Typically in the S&P 500, the S&P 500 rallies for 7 days out there. So that's what it tells us. Now, let's go ahead and take a look at full moons out here. To look at full moons, Stevie's just got to find it. There we go. So look, this is pretty cool because we've got, I was going to say it's cool, we've got full moons, lunar eclipse, solar eclipse. I used to, we got the Super Bowl, AFC, NFC, government shutdowns even. So let's go take a look at the full moon out here. Again, we still have the S&P 500 up on our screen. And we can see that the full moon typically leads to a rally inside of gold that lasts for four days. One blip to the downside and then it resumes its way up to the upside. So this is the impact of the full moons over a 25-year period of time. How about 96 years, Stevie? Well, if you take a look at 96 years, it doesn't change the pattern that much. But if that's too much data, we want 10 years worth of data. There's your 10 years worth of data on the full moon for the S&P 500 pretty much a similar type pattern out there. Now let's go take a look at gold. Let's pull down goldilocks and see how does gold trade during full moon. So here we've got to go grab that event again. What's the full moon? Not the Fed rate change. Let's get down to this miscellaneous. I think that's where we had it. We got the full moon. Now what I've got up here right now is I've got 10 years worth of data. We're looking at goldilocks here. We can see that typically gold trades higher for about three days flat to lower for a couple of days and then starts to resume its move higher. Let's take a look at 55 years worth of data. 55 years worth of data is not saying that what we looked at on 10 years worth of data isn't correct out there. Now that's gold. That's for 55 years. That is for the full moon out there. So we've got the full moon on goldilocks. We did it on an S&P 500. So to answer your question, what effect does the full moon have on the markets at least the S&P and gold? It's a positive bias. Doesn't guarantee that that's what you're going to get. But great question Hector and Patty. Thanks so much for offering it up. All right. So the next question is coming in from Black. 777 Black inside the Tigers Den. 777 Black would like to take a look at Bitcoin. I believe the question was something like it's made about a 50% retracement. What do our charts tell us out here? So I'm going to look at the data. I'm looking to the February Future contract for Bitcoin out here trading right now at about $40,125. Let's take a look at the daily time frame chart. Let's pull this back so we got a good view of it. And what we can see out here, Jack, is that this formed a rogement indicator top back on January 11. That was a daily time frame that we're looking at. That was a bearish and golfing candle. And it closed below that green oscillator and change line. So it was also telling us momentum had waned. The very next trading session price gets back inside his profile. And then a couple trading sessions ago, four trading sessions ago, back on the 22nd, price closed below the bottom of that profile. That generated really the following day is what really generated a profile change in trend signal. That suggests that price should head lower. If you're asking me where should price head lower to, the price target would be $35,750. Jack, $35,750 is the TD-9 breakout level. Now what price needs to do, if you were to see, this is very much like the Tesla chart out here. In fact, almost exactly like it. If today or tomorrow price is able to spike below spike below $38,840, that will trigger a TD-9 count bottom. Short of that, we don't have any kind of a bottom here. And that suggests that that $35,750 level is its next price target. So $777 black. I hope that helps you out with regard to Bitcoin. Weekly chart I show prices also got a rogement indicator top out here, and prices below profile. We'll be right back. The Gold Report As a precious metal gold is still king. It continues to hold the most effective safe haven and hedging properties across the global major trading hubs of the London OTC market, the US futures market, and the Shanghai Gold Exchange. The Gold Report Tom O'Brien publishes his weekly Gold Report every Monday morning for subscribers, consisting of coverage of XAU, HUI, GDX, The Dollar, Bonds, The South African Rand, as well as 25 different mining equities with specific buy-sell recommendations. The Gold Report New subscribers get a 30-day money back guarantee so you have nothing to risk. Subscribe to Tom O'Brien's Gold Report newsletter now at TFNN.com at playing a musical instrument. You have to practice, sure, but you also need excellent instruction from experts. At TFNN, you'll get advice and guidance from the authority in technical market analysis, and it's not just dry, tedious text either. TFNN airs live financial content streamed live on TFNN.com and TFNN's YouTube channel with Tiger TV, live every market day from 8.30 am to 4.00 pm eastern for free. Each host is an experienced trader and gives their take on the market while taking calls and questions live from around the world. From the moment the market opens until the closing bell sounds, Tiger TV has 8 different shows with expert hosts to help you make the right moves with your money. Watch online at TFNN.com or on TFNN's YouTube channel and become the investor you were born to be. TFNN Educating Investors just launched their new trading room, the Tiger's Den, hosted at Discord. TFNN has been educating traders for more than 20 years with live programming hosted by a variety of professional traders during market hours and now they are expanding their reach with the Tiger's Den, available to all Tigers and Tigresses for just $1 for the year. There's no cash or added costs when you join our community of traders. In the Tiger's Den, you can look over the shoulders of Tom O'Brien and the other TFNN hosts while they analyze charts during their live Tiger TV programs and join an interactive trading community with hundreds of members exchanging ideas, interact with other Tigers and Tigresses as they share trading ideas, news analysis and discuss the market action all trading day, even at night and on the weekends. The Tiger's Den at Discord is accessible on mobile or tablets as well, so it's always at your reach.  Go to TFNN.com and hit Watch Tiger TV. That's TFNN.com and hit Watch Tiger TV. Good back folks. I still got the charts for Bitcoin on my screen out here. I was showing the wrong screen out there, so just to go through this real quickly out here, Bitcoin on the daily timeframe, Roadsman we got a profile change of trend because price is below that profile. That's at $47.36 and as long as that remains the case, $35.750 becomes that price target that's on the daily TD Nackle breakout level. You can see Roadsman to Midecator top on the weekly chart. Price is below the Yasseter and Chains line. It's lost its momentum out there. What else does DVC? Nothing else really other than that, so it looks like Bitcoin wants to head lower out there. Let's move on to our next request. It's from Kota inside the Tiger's Den and Kota would like to take a look at FXI, so momentarily we'll get over to those charts. This is not going to be it, but if you give me a minute we'll get up there and here we go. So we take a look at FXI, China Related. This becomes complicated out here Kota for me to really give you a great read on this. The daily timeframe because of all of the currency issues that we've got, you've got all these gaps out there becomes very difficult. OK, if I take a look at the weekly timeframe chart, it cuts out some of the noise. It's maybe a little bit easier and here what we can see is that a TD nine count bottom pattern is going to complete this week is going to unless this thing rallies substantially if you'll have a TD nine count bottom pattern that will complete this week. You also have an A to B equal CD to the downside. Let me open up the chart though and make sure of that or your back at a prior swing point that had a TD nine count bottom as well. So let's check out the volume. So I don't know if we've tested. First, let's see if we've tested low. So the low on a weekly basis for FXI was a week of November 4th. That low was 2087. We got down this week to 2086 one penny. How about that? So now that's a test of that swing point. The volume was 278 back in November this week so far we are at 273 well that's a bummer. So you're testing that swing point with volume. You know what that typically says out here Kota, even if the price at this stage here is rejected it, that price should get back down there and retest that low at least again out there. So you are going to, you have a potential wave number seven. We don't really need that because a TD nine count bottom is already in there. Now remember that pattern completes tomorrow. Maybe tomorrow is a retest of that low on lighter volume out there. Regardless the one thing you need to see FXI do on a weekly basis tell you that this is more than just a counter trend move would be to close about 2374 and the reason for that Kota is because this was a bullish structured profile and price has now been below that profile level for more than two weeks. That tells us about a weekly change in trend signal out there. When you have bullish structured profiles and price closes below them and then price tries to get back in where price will find resistance is either at the bottom or at the center. So really the correct response Stevie would have been to say where the counter trend rally, if this is only a counter trend move would fail would be between 2328 and 2374. So that's the weekly time frame chart we take a look at FXI. It's got potential. It's just that it's just that weekly volume issue that you've got to deal with. You wanted to also take a look at KWEB out there. Now again on the daily time frame just simply substantially difficult for me to really give you a great read out of this mess out there but the weekly chart not the same. Here on the weekly time frame you've got bar number 8 that looks like it will complete this week. Bar number 9 needs to that means next week you need to see a close below 2588. If you get that KWEB will go ahead and confirm a TD9 count. Bottom pattern remember that bottom pattern could complete the following week out there but the weekly time frame chart is saying there's something here. The daily time frame chart what I can share with you their code is price is trading above resistance that's the top of its profile if it remains above 2462 today the signal there is you've got a daily change in profile change in trend signal and that would suggest to move to 2646 out there. 2564 though is another resistance level that's the weekly asset and change line low behold on KWEB just like you had with FXI Coda you've got a bowler structured profile that price has been below so if it's only a counter trend move inside of KWEB it will find resistance between 2604 and 2661 you close above 2661 and then there's something else that is going on so hope that helps out Coda with both FXI and KWEB thank you so much for taking the time to put in those request. Duncan Steve inside the Tiger's Den has got a couple as well the first one is Uber out there and Uber looks like it wants to go ahead and negate its TD9 count top out there it'll accomplish that task it also has a roadsman dominicator top it'll accomplish that task today with a close above 6561 so if Uber close above 6561 that's in breakout mode and says it wants to add higher I know you'd like me to give you some possible price targets out there we're going to have to go back to my black background screens I think to do that the weekly time frame chart this has negated a TD9 count top out there that's bullish you're trading above profile that's bullish you're above the green oscillator change line that's bullish the weekly chart for Uber is in a bullish breakout mode the same can be said for the monthly time frame and this monthly time frame chart is taking out as prior high which was a TD9 count top out there so Uber looks Uber good and that was for Duncan Steve now let's try to figure out where Uber might be going to and to do that we're going to go ahead and change our screens again hopefully I remember to change back I know somebody will remind me if I don't but let's get these Uber charts up here and let's try to figure out where maybe this is headed to so how are we going to do that I'm looking for the chart with the least amount of noise that's the monthly chart out here so now we take a look at the monthly chart we can draw in an A to B equal CD pattern and this is going to apply certainly to the other charts as well so I would say that what Uber is doing here is going to go target 66 69, 69 how about that 69, 69 is the initial price the reason I say initial price target is the retracement was just slightly less than a .382 retracement we can see that price along the left side of that C to D leg typically when you do a .382 retracement or something less than a .618 you're going to do more than a 1 to 1 A to B equal CD to the upside certainly when you start traveling along the left hand side of that C to D leg tells you about a stronger move that's another reason for this to do more than a 1 to 1 so Uber should target that 29, 60 level out there Duncan I hope that helps you out you also want to take a look at ticker symbol C-A-R-T let me just push this up here on the black background screens and that was to remind myself so this is not been trading very long so the information on cart could be pretty minimal but let's go take a look and see what we can do for Duncan Steve on cart which is Maple Bear ink out there Maple Bear ink so now what I can share with you about Maple Bear ink is this formed a wave number 7 and roads meant to be at the bottom it accomplished that task on January the 8th now we have price that's moved higher it's pulled back and tested it's also a change line after trading changing color this is a bullish signal out here I would say that what cart is going to do out here Duncan is go at least test the top of that daily profile that's one that formed yesterday 2741 what might have really taken place yesterday is the C-point of an A to B equal CDT upside don't know we won't know volume today so far in this is about 592,000 shares the swing point itself has got volume of 2.7 million so you're not up towards that just yet but you'd love to see this thing pick up some steam but I would have to say what's cart going to do should go target 2741 so hope that helps you out Duncan thanks much for the request we come back from this break we're going to take a look at TSM for Nicholas FDX Federal Express for David Panama City LB wants to take a look at URNM and FLECH and FU we'll be right back currencies, commodities and bond markets are as important as ever right now with how they're driving the volatility in equity markets across the globe which is why it's a great time to try out Teddy Kegstad's Tiger 4X report Teddy Kegstad breaks down the 4X markets every Monday using his 30 plus years of experience as a trading veteran of futures, 4X stocks and options Teddy releases his weekly Tiger 4X report every Monday morning with coverage of all the major currency pairs including the dollar index the euro dollar, pound dollar dollar swiss, dollar yen as well as many more and he also has weekly coverage of the crude oil market and the 30 year t-bonds as they both influence 4X markets tremendously when you sign up for the Tiger 4X report you also gain instant access to Teddy's 60 minute webinar archive he just hosted 4X strategies and fundamentals what is behind the Tiger 4X report for all the details and to start your 30 day Tiger 4X report subscription today visit the front page of TFNN.com TFNN Educating Investors To stay on top of stock patterns you can take advantage of, sign up for the Fibonacci 24-7 newsletter at TFNN.com when you subscribe you'll get a weekly report from veteran day trader Larry Pezzavento on stocks you need to pay attention to and you can trust Larry's analysis after all he's got 45 years experience as a day trader Larry will also provide daily charts videos and data on the key markets that he's tracking expect notifications from Larry on market movement you need to act on at any time first time subscribers also get a 30 day money back guarantee if you're not satisfied let us know and you'll get a full refund within 30 days of signing up subscribe to the Fibonacci 24-7 newsletter today TFNN.com Educating Investors Will the S&P 500 continue to climb for bold trades on US large cap stocks in either direction trade SPXL SPUU or SPXS directions daily S&P 500, bull and bear leveraged ETFs direction leveraged ETFs an investor should carefully consider a funds investment objective, risks charges and expenses before investing a funds prospectus and summary prospectus contain this and other information about direction shares to obtain a funds prospectus and summary prospectus call<PHONE_NUMBER> or visit directioninvestments.com a funds prospectus and summary prospectus should be read carefully before investing an investment in the funds is subject to risk including the possible loss of principal the funds are designed to be utilized only by sophisticated investors such as traders and active investors distributor for side fund services LLC this program is brought to you by Vista Gold traded on the NYSEOh fuzz skrility this morning I don't know if you were 5 o'clock this morning it was the Cocoa Goff and Sabiona There was a great first set Let's get back to the services out here Nicklıs' question An online chat a home game out there. But his question is buy, sell, or hold when you take a look at the charts here for Taiwan Semiconductor. What say you out there? I'm listening. Everybody just excellent. That was a unanimous decision out there, Nicholas. The unanimous decision was hold. Definitely hold. So what do we got with Taiwan Semiconductor? It's only the 25th. Well, geez, that means we're almost at the end of the month. And guess what?  That's right. The B point out here, which is actually labeled number B, that's part of the Chapman wave, not the B point of the A to B equals CD. Although it happens to be that as well out there, that happens to be from the trading month of June of 2023. Volume there was 247 million shares. We're at 256 as we speak right now. Your one to one A to B equals CD pattern that gets us up into 1.3519. 1.2866 is a TD9 Cal breakdown resistance. That's where this has a party. It's a party between 1.28 and 1.35. And if we can close above the 1.28 level, even though 1.35 is next up, I'd say this gets all the way back to its all time highs out there and it tackles that swing point out here from January of 2022. On a weekly basis, the B point had volume out here of 74 million shares. That was passed last week with 125 million shares. So there's confirmed A to B equals CD patterns to the upside, whether it's daily that we look at, weekly that we look at, monthly that we look at. So I would say, I would agree with everybody in the audience there, they all said, hold, hold this puppy out there. So I hope that that helps you out, Nicholas. And thanks so much for taking the time to write in. David in Panama City is asking the question, will Federal Express go ahead and fill the gap out there? And that is a gigantic gap. And the answer to that question will really come from whether or not it can close above the top of its daily profile. And the top of its daily profile was tested today. And so far, that level is held. That's at $254.52. Does that mean you should sell? No, it just means that price ran into resistance out here. Now, with regard to Federal Express, look at the daily timeframe. I don't have any kind of a bottoming pattern out there. So without a bottoming pattern, this suggests that Federal Express might want to move lower, move lower and get back and test the October 26th lows out there. Would I make that call just yet? No, it would make that call until we get back below the swing point out here from January the 17th. But right now you're asking, can it fill that gap? And I think you've got options that are expiring here shortly. And this thing has run smack dab right up into resistance. That's at that $254 level. The only other benchmark that maybe I could look at here, David, is the swing point from December 29. And the problem with that, that's December 29. That slight volume was 1.9 million shares. When we hit that yesterday, it was with 2.4. 2.4 going into 1.9. And the 1.9 was during a holiday. Huh. Today so far, in a little over two hours of trading, $594. So you're at about 1.8 as you move into that swing point. That's got 1.9 or so. You'd like to see price pushing to that swing point with volume. But you're up against resistance. I apologize. I don't have access to that email. I just simply wrote it down and I don't recall the timing that you're looking at out here. The monthly chart looks pretty good. Looks like it may want to go retarget $270.95 in the weekly, $259.21. But that's really not what you're dealing with. You're dealing with daily. And maybe by providing you with that profile number, that's going to assist you with regard to that. As far as federal express on an intraday time period out here, intraday, you've got a Rosemont Dominicator top that just formed for the 65-minute timeframe. Let's see what we've got going on on the 30-minute basis out here. 30-minute chart, also Rosemont Dominicator top. Suggestion moved back to about the $249 to $250 level out there. So that's what I see when I take a look at federal express. David, thanks so much for taking the time to write in. LB wants to go take a look at uranium. URNM is the ticker symbol. Let's get over to that. See what that is doing. And the question here, I think I've had this question here lately, is where to get in on this. So we've got that wave 7. We are trading below the bottom of its below-structured daily profile. We saw one close below it a few days ago, and then it got back up. So we haven't had two consecutive closes out here. Price is moving into this gap. This gap had volume out here of 2.2 million shares. So far today, 238,000 shares have traded. So you could be getting towards a buy level. We'd want to see some type of confirmed pattern on an intraday chart out here. I look at the weekly chart lead, and it's got supported 52-22. That's that green oscillator and change line. And no topping pattern that is in place out here. So let's look at a 30-minute chart and see if we can figure this out. URNM does not have a bottom. It does not have a TD-9 count bottom. Did this create an A to B equal CD pattern? Struggling here with this side. There we go. Yeah, I don't know about that. Let me try a 15-minute chart out there. Let's see what the 15-minute chart says here, Lee. 15-minute chart's got a TD-9 count bottom. So if price can close by 53 bucks, that would suggest at least a further rally up to 54-20. So what else can I share with you about uranium out here? It's sure like to see it at least touch that swing point. I don't think it has. The swing point high is 52-37. The low today is, I take it back, it did 52-36. So you might really be there, Lee. Let's look at consecutive days up and down out here for URNM. Let's see what we have here that we can pass on to you. It looks like today will become day number two. So you should at least. We've only really seen mostly two-day knee-jerk reaction lows out there. So if this really is a knee-jerk reaction low, then today could be it. It also would suggest to us though, so volume on the trading day of January 22nd was 1 million shares, and today we've done 240. So we're still coming in light. I was going to say a price did close below that low out there. That low, by the way, from a few days ago that was on the 22nd was 52-74. Lee, if you got a close below that, that would trigger an A to B equal CD pattern to the downside. We don't have that just yet. We're coming in with light volume. I'm good with starting to position right now out here inside of URNM. So I hope that helps you out. I would have preferred to have a better bottoming pattern on the daily timeframe, but you take what you can get out there and no complaints. Fletch wants to take a look at NU out here. So let's pull those charts up. NU is trading out at about $9.25 and it is taking on the top of its daily profile. The top of that daily profile is at $9.25 out there. So let me pull this back on the daily timeframe. See what I see out here. See if there's anything, any other patterns or anything. Pull this back even further out here. So there's an A to B equal CD, but that should be on the weekly timeframe as well out here. So on the daily timeframe, I'm going to go with that. I don't really see a top here just yet. I just see a consolidation on Fletch with inside. It's a profile level and if you can close above, well, you're trading into a swing point. This is a daily timeframe. This swing point has volume of 45 million so far today. You're up with 10 million. So you're moving into that swing point with light volume. You've got a consolidation going on right now inside that profile. Again, your resistance was up at the 9.25 and support is down at 8.75. Steve Rhodes with TFN will be right back. You might think that if you want to be successful at trading in the stock market, you're going to need a crystal ball. After all, it's impossible to predict the future, right?  Get some advice from the experts. You might find that it's not so impossible after all for daily market overviews that give you direction on the key indices, selective stocks and commodities. Subscribe to the opening call newsletter at TFNN.com. The opening call newsletter is written by Basil Chapman, creator of the trading methodology known as the Chapman wave. The Chapman wave up down sequence gives you an edge in identifying price turns, finding the peaks and valleys in stock prices.  First time subscribers also get a 30 day money back guarantee. If you're not satisfied, let us know and you'll get a full refund within 30 days of signing up. TFNN.com. Educating investors. Everything in the universe is governed by the Fibonacci sequence. This mathematical principle is responsible for everything from the most aesthetically pleasing artwork to patterns in the stock market. To stay on top of stock patterns you can take advantage of, sign up for the Fibonacci 24-7 newsletter at TFNN.com. When you subscribe, you'll get a weekly report from Veteran Day Trader Larry Pesavento on stocks you need to pay attention to and you can trust Larry's analysis. After all, he's got 45 years experience as a day trader. Larry will also provide daily charts, videos and data on the key markets that he's tracking. Expect notifications from Larry on market movement you need to act on at any time. First time subscribers also get a 30 day money back guarantee. If you're not satisfied, let us know and you'll get a full refund within 30 days of signing up. Subscribe to the Fibonacci 24-7 newsletter today. TFNN.com. Educating investors. TFNN has just launched their new trading room, the Tiger's Den, hosted at Discord. TFNN has been educating traders for more than 20 years with live programming hosted by a variety of professional traders during market hours and now they are expanding their reach with the Tiger's Den. Available to all Tigers and Tigresses for just $1 for the year. There's no catch or added costs when you join our community of traders. In the Tiger's Den, you can look over the shoulders of Tom O'Brien and the other TFNN hosts while they analyze charts during their live Tiger TV programs and join an interactive trading community with hundreds of members exchanging ideas, interact with other Tigers and Tigresses as they share trading ideas, news analysis and discuss the market action all trading day, even at night and on the weekends. The Tiger's Den at Discord is accessible on mobile or tablets as well, so it's always at your reach to sign up today and become a part of this educational community of traders. Just visit the front page of TFNN.com. Welcome back folks. To finish off new for Fletcha, I wanted to share with you that new on a monthly basis look like it's going to negate a TD9 count top. That suggests making a run for its IPO high out there. We're trading inside that candle. We're doing it with volume. So that looks positive on the weekly chart. Everything is all out bullish. You're above a green oscillator and chainsline. You're above the top of the profile. So just a consolidation inside the daily timeframe, but otherwise everything else looks hunky-dory. Let's go take a look at IBCP. This is from a guppy inside the Tiger's Den. IBCP, IBCP is what? Well, it's trading at 24.48 right now, and that is below the bottom of its bullish structured daily profile. So what I can share with you first Fletch is that if we get a close below that, it's signaling a potential change in trend, profile change in trend, a second close tomorrow below that level would confirm that. Now, you've got a rose meant to indicator top. I got a wave number seven pattern that is also in place out here. Price should go target 2302. I say should because right now when price is done, you've got a weekly TD9 count top. You've got a weekly rose meant to indicator top, but price has found support at that green oscillator and chainsline. That's at 24.30. And not until price gets below that, closing below that will this chart change its signal to bearish from now neutral. Why neutral? Because it had a top. When you have a top, you find out that I'll be you will start watching for support. How does price react at support? In this case here for IBCP support is held on that weekly timeframe. So watch that 24.30 level. If you get a close below that, 2302 is wide open. Lastly, let's go take a look at ticker symbol BTAI. That's for Dan inside the Tiger's Den and Dan. You got to love this BTAI. If it can close today above 305, this is going to give you a confirmed change in trend signal out there because price will now be a close above a TD9 account breakdown resistance level. So 305 is the number you're looking for. If price closes above that, then you're looking for moving to the 369 level. 369 is the center of its bearish structured weekly profile. Folks, thank you all so much for all those requests. Look at that. It took us right through the end of the show. As Tom likes to say, that's a beautiful thing. And stay tuned, folks, for all the great program we've got lined up for you. I'll be back tomorrow on Fantastic Friday. Have a terrific Thursday. Be safe out there.


Good day to all of you. I am going to give you a 15 minute talk on the topic of how to be smart. In fact, how to be smarter? Because I am assuming that all of you are smart already and I am going to position this after understanding or thinking about what it means to be smart. So, for example, if you go to the net and do a Google search on the word smart, you will see these adjectives or attributes – clever, bright, intelligent, energetic, swift, lively, sharp, bitter and so on. So, you can understand that sharp has a number of different dimensions to the term. And so, let us take one example. Suppose I call an auditorium as smart and I am going to use this example in the rest of my talk to illustrate what is it that computer scientists can do to make things smarter and in the process also understand how humans can become smarter by doing the same sort of things that we provide smart artifacts to make them smarter. So, let us understand what a smart auditorium might do and use that as example as a way to illustrate other smart devices, smart artifacts including humans. So, I am going to talk to you about the smart auditorium as an example of artifacts which have or can have the attribute of smartness. So, a smart auditorium might tell people who are in the back of the auditorium to move to the front rows, why would it do that? In that case, people in the back do not need light because there is nobody there and the air conditioning for the auditorium can be adjusted so that the energy can be saved. And it might conclude by looking at the number of people in the auditorium that if they all moved forward 30 percent energy could be saved. How did it come up with the term 30 percent, the number 30 percent by doing analysis? Or it might say that current energy prices at this time of the day will contribute to a reduction of 600 rupees in the energy bill for the auditorium. Or it might say that the energy now is coming from fossil fuel and other resources which are required to produce that energy will contribute to the loss of 2.5 trees. So, all these are equivalent in some sense, but giving you different dimensions to the savings. So, now all of this requires you to know what the power consumption is, how many people are there, what is the outside temperature, what is the limit of the maximum power available to use in the auditorium. So, with all these questions answered with analysis, with data from sensors, we can respond by asking people to move forward. So, you have a sense followed by respond. In fact, there is something more and that is that we have dependence on whole bunch of sensors. For example, here we are going to use smart electricity meters to tell us how much energy is going to be consumed in the process of cooling the auditorium. Another example would be a smart door.  This could be possible by having somebody's capabilities in terms of entry and exit stored in their smart phones. And this is read by the door and then it allows only those people who have access privileges.  In fact, all it does is counting. We need something more. For example, we need to identify the people so that only those people whose identifications or whose identities are stored in a database are allowed entry or exit through the door. Let us start with counting first. What we will do is to look at those two lasers which have cut in one direction, one after the other will mean entry and the other direction will mean exit. And when you know that somebody has entered, you add to the occupancy count of the area into which you have access through the door and vice versa for the exit. Now, if I want to know who is coming in, then I have to also know their identity. But before we talk about this, I want to just mention that a good decision, for example, decision about whether to increase the temperature or decrease the temperature inside the auditorium or whether to ask people to come forward is based on knowledge and not simply number. The knowledge that we are talking about here is identity. This identity information can be derived only through analysis. For example, suppose I know that certain people who are inside the room have a combination of height and weight which makes them unique, then I can use that information to determine who is inside the auditorium, inside the lab, inside the office as the case may be. So, in general, you can answer these questions through analysis. How many people are there? Where are they seated? For example, if I take a picture of the camera in front of the auditorium, then I know where they are seated. I can do temperature sensing to figure out what the variations across the space are for the temperature values. I can look at outside temperature. I can look at the power structure, power price structure and all these analysis capabilities will let me respond in a meaningful way. Also, I want to know what I need to sense at any point in time so that I can focus on certain sense values to make me analysis more meaningful also. So, I need to be sensing meaningfully, analyzing meaningfully and responding meaningfully to answer questions such as how many people are there. And secondly, the response has to be timely. If I do the analysis now and give the response to this question of where should people be seated tomorrow after the whole event is over, then the response is no meaning. So, I need to sense meaningfully, analyze and respond in a timely way. So, now if you look at the blue colored letters, you see the word smart emerging out of it. Sense meaningfully, analyze and respond timely. So, if somebody asked you whether an artifact is smart, ask the question is the sensing its environment in a meaningful fashion? Is it doing analysis with the sense of information and is it responding timely? And all of this has to happen in a feedback driven fashion because as we all know, we remember and analyze the current situation in the context of what we remember from the past. So, there is a feedback loop here as you can see from sensing to analysis to response back to sensing. So, now you see that everything comes together. We sense meaningfully to understand the, to get the responses to the questions what, when, how, where, which, things have to be sensed. Analyze to produce a right kind of response and what do we analyze? We analyze archival data, real time data, aggregated or disaggregated. And response will be in terms of who should be responding, when should we respond, where should we respond? All of that should be done in a timely fashion. And one more item I want you to think about is remembering the response. Now, if each one of us were to do analysis, every time we have to face a situation, that will take a long time. So, humans have a way to remember. Memory serves the purpose of remembering and if you are taking the context of a computer, it will have to be put in its memory in a way that the memory will survive failures and so on. So, when you come back to situation after having gone to sleep, you still remember that situation the next day. And this whole thing happens in a loop, in a feedback driven fashion. And another thing to remember, build smartness into the whole auditorium, not only during run time, that is to say when I am going to be using it for a certain performance or an event, but also during initialization time. For example, in the morning when I come in, I might set the temperature to start with at a certain value, depending on what events are going to happen that day. Or I can do the deployment time, for example, this might be something where I have envisaged the use of the space as an auditorium, that is the deployment of the space as an auditorium. And I might make some decisions then as to where to position the vents for the airflow and so forth. Or I might do it at design time, when I ask the question how should this whole area be designed to make it possible for it to be used as an auditorium also. So, smartness will be applied to all of these times and that means they ask questions relevant to that particular time, design, deployment, initialization or run time and make whole artifacts smart. So, what I have shown you so far is one aspect of smart energy solutions. What we have done here is to understand which devices which vents can be closed, which lights can be turned off to avoid or reduce consumption. Similarly, I can make the air conditioners or the vents be open in a staggered mode. So, as to optimize the level of consumption across large time span. So, this is demand supply matching, demand made by the appliances like ACs for energy. Supply is the amount of energy available. So, you want to make these two match. Flat profiles are important because peaks contribute to large difference between normal and maximum requirement and those are bad for pricing for example. Renewable resources are very important because they are better from the environment point of view and of course, you want to store energy when plentiful energy is available and use them when the amount of energy required is much larger than what is available. So, all of these require smart approaches which means what? Which means we have to sense, we have to analyze and we would like to respond in a timely fashion. So, let me close my short description of smart things with some thoughts. Anytime we answer a question or make a decision just like the AC did or the auditorium did, the responses reflect our smartness and smartness can be applied at all stages design time, deployment time, initialization time, run time is continuous feedback driven resource and time constraint. And we there is an observation that people are made that all humans become smarter as time progresses. This is true for individuals and also generations of humans also become smarter and smarter as time goes by. The reason for that is because they are learning from the previous generation or the previous day if it is an individual. Then of course, issues of introduction, privacy, security that come in whenever you sense and analyze and respond, we then get into that today. The other thing is that sensing cost money, analysis cost time and response cost infrastructure which means that the high tech solution that we are proposing here for being smart does have cost implications. So, we will have to be worried about the payback and computer science is a major role in terms of optimizing these costs in such a way that the benefits are more than the costs involved. So, finally, I would like to find you that if you think about all of the components of being smart, all topics in computer science and electrical engineering come together, databases, operating systems, autonomic computing, embedded systems, AI is on and on. And so, any aspect of computer science, any topic in computer science has a role to play in building smart things. And that I will close and thank you very much. And also thanks to all my collaborators through whom I have gotten the insight about being smart. So, hopefully you not only know what smart artifacts are, but also know how to use the attributes of smartness for your own future. Thank you very much.


Thank you. So, I guess we can start now. We have numbers. Yes. So, welcome everyone to this weekly call server implementation meetup. In this meeting we do discuss issues of administration. We started last year, the last month, December, and October, November, December. But then we proceeded to break, two weeks breaks before the year ended for the Christmas holidays. Last time we had this call, Bob was interviewing our security, Michael, and today's call is kind of going to extend on the same. We want to talk about ways that we can improve our server security. At least on a fresh install we make sure that at least a few security, basic security controls appeared too. So, I prepared a few slides that we're going to go through while I'll be explaining those security checks. So, let me share my screen. So, yes. So, when we talk about server security, there are security models that we do follow. And one of the models is a model where we want to make sure that whoever accesses the server is authenticated and they are who they say they are. We also limit what they can access. And by that I mean, even though you really are the person that you're claiming to be and you have access to the server, it's not that you cannot, you can access everything on that server, but only you are allowed to access and when by that we follow the principle of least privilege.  And there's also an aspect of accounting. That means everything that you do is accounted it's written somewhere and in case of an incident that can be tracked easily. It also can be can be implemented in multi layer. That is, you want to look down your server, not only on one layer, but on multiple layers that is from the host level to the application level. And in our case, our standard deployment of DHS to instance is done on on on LXC containers, and with that it adds an additional layer of security. And even within those LXD containers, we do run a filtering network filtering. It's a firewall, which blocks things that we don't want to access that particular container. And on even application level, we don't just we still do limit what can be accessed. Our deployments mostly is automated. We are using Ansible Scripts. One of them and and and and by scripts, which automates the whole process of deploying the applications and with automated deployment, these security checks security controls are just implemented on flag. You don't have to go back later and and or you don't have to do that manually. If you adopt deploying your app or the application DHS to application using automated automated way then these checks are just fixed on on fly. So we have components that we want to to secure. And first of all, as much as you deploy your application on a given host, there are components that are related to the application. In our case, we have proxy Tomcat server database and and finally backup well backup is not one of the components but it's a security feature that we want to in every installation to implement. However, things that we do have installed during the automated installation proxy Tomcat server and the database. So we want to break down our security discussions into these details. And the first one on our list is that is the is the host OS. So mostly our deployment happens on the on the Ubuntu server and all deployments can be running old LTS releases. But then LTS releases are just supported five years, like for instance Ubuntu 18.04 LTS release, its support is, its support is expiring this year. So that means if you are running your DHS to instance on 18.04, you do have to upgrade to at least the next LTS which is 2004 and it is supported until 2025. So on the host level, we at least have a firewall running and it is uncomplicated firewall just to demonstrate that I can I can look into one of the servers and show you. And one of the servers that I do have an instance running is this one it's running on some cloud environment. So it has a firewall running and I can demonstrate that by showing you have W status. So it has a firewall running. And as you have seen, the status shows that the firewall is active and only one port is allowed or is just open from the from the internet and the port is a 22 that port is specifically for SSH traffic. Anything else is really is really locked. If you try to access any other port from the internet, apart from port 22, then you will not be able to access it access it. Of course, the server is listening to other ports. It's not only SSH listening right now. We can check with SS command. We have other services running even SSH is listening on port 22, but that is not open on the on the firewall. That means even if you try accessing your, your secure shell on port 22, you will not be allowed in because that is locked on the on the firewall level. So, even though SSH is is the only way it's only get away that we can access this album. It needs also to be to be secured. Password authentication, key based authentication, and we do advise that we adopt key based authentication and we disable password authentication. So that is the case in our installation. And you can enforce that by editing it see SSHD configuration file and turning off password authentication and enabling only key based authentication. There are other security practices that you can also adopt like you leveraging on failed to burn to which really checks or monitors your SSH attempt logins and it blocks access. It's going past a certain number of times. And with SSH also, you want to use a different port, not necessarily an added security practice, but it in a way because both on the internet and even the attackers do try to access your server on on the default port, which is both 22. So you want to limit the kind of looks or those access attempts and use a different port so that even though they try beating your server on port 22, it will not be listening on that port and it will be on a different port. You want your server to be patched timely, you could enable automated updates and upgrades. And you, as I mentioned before, you should make sure that your server is at least running supported LTS release. For instance, right now, 16.04 is not on that list. And the last on that list is 18.04 LTS, which is going to its support is going to expire very soon. So on a fresh install of your server, we recommend it to be minimal. However, sometimes you might have an OS that has packages that you don't you don't really use. So we recommend also that you do ensure that you have packages that you use and and those that you don't use to delete them from the system. This is going to help you. At least at least packages that you have. It's just one of the command that you can use to list the packages that you have. And here you could potentially note those packages that you are not actively using, and you can delete them with sudo apt removed command. Next, on our list is the is the Tomcat Tomcat is the is this web application is it's a it's a web app. It's a web server that's used to run Java based applications and our DHS to is is Java based and it's run on top of Tomcat. So on a fresh install of Tomcat, it has extraneous extra files that you don't need like root. You want to delete that on your web apps directory and ensure that you have files that you really, you really require. It also, it also comes with the default install is not appearing to the best configuration configuration permissions. For instance, I'll file. Let me just demonstrate on the login. Let's see. This is, of course, the application is running with Tomcat user. So he wants to make sure that Catalina home or Catalina base is is owned by the admin user. And number two, that is is is also within Tomcat group, it's owned by them. The group is Tomcat, and that's read write permissions are restricted only to root user and Tomcat group and others are not given permissions to read write or execute to that to that directory. Let me find Alexi EXERC, HMIS. Yes, you can just take this. This is one of them. It's Catalina home for this, at least this container. It's owned by Tomcat. The fact that the directory is owned by root user and group is Tomcat. And on top of that, only root user is given access, read write execute access to that directory and group Tomcat is given read execute permissions. So others are not given are given zero permissions on that on that directory. So we also make sure that our Tomcat instance is is is running behind proxy. And we can do use, we do use either Apache tool or IngenX. And we are basing basing our guides on the on the CIS benchmark security checklist, which is a hard one here, which is something like this, that it gives you the checklist which you have to do when you have your Tomcat installed. This is just a small list. It goes to 10. Something. If you can see the next part of this CIS benchmark, it goes up to 10. And these are the checks that you need to follow after you have installed your DHS to instance. And these all checks are automated, of course, with the DHS to installation script, that after the installation is finished, you're going to have your Catalina home adhering to the permissions as stipulated on these CIS checkmarks. So, even, even disabling the shutdown port. Of course, our apps are running on LXC containers. All our applications are running on LXC containers. And on top of that, they are running container based firewall. Let me just show you that. So within the container itself, we just limit access to them to the application and we are limiting access from specific IP address. As you can see here, 17219.2.2 is just an address for the proxy. So we want our Tomcat instance to be accessible only from the proxy. And if the IP address is different from this, then it cannot hit port 8080. So port 4000 is for muning and it's only accessible again from the proxy. And then 4949 is the muning node and it's only accessible from the muning server. So, as much as we have post based firewall, we also filter traffic on the container running that particular instance. Same applies to the Postgres container. We want to limit access to that Postgres container to be only accessible from instances. For instance here, this is the Postgres container that plans database and you can check its firewall status. It's running and it's only allowing access from one. These top two are the instances and those are actually really Tomcat instances. They're allowed to access the database. And partly is them, of course, the port 4949, which is opening its access from the muning server. So, yeah. Do you want us to ask questions or we'll make comments? Yeah, you can. Just on the Tomcat setup. The biggest, one of the biggest problems we see is when people download the binary Tomcat, often they might do this because they want to run a particular version and then they just get the tarji zip file and then they untar it. And that's usually where you find all the permissions and everything is wrong. Generally speaking, the Ubuntu and Debian packaging of Tomcat is actually quite good. So usually if you just deploy using apt-get install Tomcat 9, most of those controls are actually already implemented the CIS controls, which is good. Recently, they started disabling the shutdown port that used to be the case up until version 9. The only thing I think that we do with the tools on Tomcat's container is changing the ownership of the web apps directory. Because that's one thing that is left owned by Tomcat with the apt install. So that's something a lot of these, I think the thing to bear in mind is that a lot of work is done in that Ubuntu package. And if you're not going to use the package, but are going to unpack the Tomcat yourself, then you really have quite a lot to do in terms of verifying all the permissions and stuff on different directories. Exactly. Then that is when you need to at least appear to that checklist and make sure that those controls are met. And we don't implement all of the controls either. And I think this is maybe something Michael is also going to be working on. We're kind of cherry pick, I guess, what we figure are the most important ones. One in particular that I'm thinking of is the, what do they call it, running the security sandbox thing in Java. Yeah. We currently not running, I think it's probably down near the bottom. We don't, we're not using client cert authentication, for example, because we're not, we're not running HTTPS on the Tomcat. And we also, we're not running it under the security manager would be quite nice to run it under the security manager, but there's quite a lot of things that are potentially broken when you do that. Anyway, that didn't mean to interrupt. I was just adding a few thoughts to watch it. That's welcome. On the firewall stuff. And you showed the one of the things that's important to bear in mind because you've got quite strict access to that Tomcat container is if you're going to set up something we typically going to see this if you've got an integration layer or something. If you've got some API based, you know, maybe it's Apache camel base root that's doing integration with your Tomcat from a different IP. You do need to remember that you're going to have to create a separate firewall rule for that is by default, you will be able to access it. Yeah. So, yes, the firewall rules running on the on the on the DHS or other instance container looks like these ones. And these are very strict. And as Bob mentioned, if you, he wants to open access from some different integration content, then you have to add an extra rule there. Okay. So next is the is the is the database post classical database. Yeah, so, as I mentioned, there is firewall of course running within them, the database container. So we also with with the configuration files, edit them with Ansible edit them PG HP configuration and ensure that access is only allowed from a given IP address. In our case, it's, it's instances running DHS to application. So, as much as we are blocking on the on the firewall level, we do really, again, restrict on the Postgres SQL application level. And that matches not only the IP address but which database do you want to access and with which user. So it's restricting not only with the IP but with other details. The URL is edited during that deployment and it's on HTC Postgres. The last line so during the automated deployment. These two lines are added depending on the number of instances that you want to to install. So those two line restricts. The way your database is going to be accessed, it only allows access from, from hard-coded IP addresses. And number two is to which database and with which user. Yeah, so even if you have a user added in your database, and you want to access it from network and its entry is not here, then you will not be able to access with that user. So, yeah. That explains the three components that I have within the database that firewall is enforced and PGA configurations have had coded entries that allows access to different IP address with some given user and and its password, of course, is from the application side. And next is the proxy. We do not access our applications directly. That is Tomcat app directly from the internet. You can go through the proxy, reverse proxy. And in our case we are using Apache to and and and engine X for that matter. And with proxy you could implement other security controls. One is you could limit access to your, your services, say, with geographical location. If you want to say you don't want if you want to block access from certain region, then you can enforce that on the engine next level or even Apache to level proxy levels for that matter. You could also, if there is a known vulnerability, and its patch is under development, then you could also potentially block access to certain endpoints which is vulnerable until its patch is, is, is available. It's on, on those proxies that we implement strict transport layer security, TLS and SSL. And with proxy, you could also potentially monitor the access logs and and and and error logs. So it adds, it gives you an extra layer of security and and it abstracts your, your applications from the external access, you know, because users and clients to interact with the proxy and the proxy do proxy for your request to the backend application. So most of the, our cases we have more than one running instances of DHS to you could have production instance, which is used for production purposes and another test instance. So if it was not for for the proxy, then how else would we proxy somehow route those requests to different applications. So you have one DNS sub domain and he wants to match the request address and proxy for to the two different backend applications. So it's also from the proxy that we do routing to the apps that we have running, and it can be more than one. So, yeah. Next is backups. We want to plan, you know, backing up or planning for backup is also a security that we want to ensure that we plan even before the installation, because without backup and you have an incident and it's a problem so just doing or planning for backup, planning for backup is one thing but then you need to also test your backup and ensure that in case of or other your recovery works because it would not make sense if you have a backup that is not working. So you want to test your backups and ensure that they are working and ensure that you have your backups pushed somewhere else. Well, you could use a server running somewhere offside and you do your local backups and push to that side. And of course you can automate that so that it runs. It's a stipulated time times following a policy that you you do configure and you could also push it to cloud. Well, the cloud providers made the cloud providers to provide S3 bucket storage so you can push to that can procure that service and push your backup to to that endpoint. So backup is an interesting topic and we're going to have a future conversation around backups and even use cases, how do you guys implement backups in your environment. So yes, that is all I have today in this quick presentation. Any questions? I got a quick comment again, if you don't mind.  We're good but it can be a little bit tighter still you mentioned a bit about fail to ban, you know fail to ban will will protect against the repeated attempts to brute force on the SSH port. But in even with UFW instead of using allow if you use limit. So your firewall rule instead of instead of saying allow does limit instead, then it will limit. I think six attempts on the SSH port within 30 seconds. If you do more than six attempts, then it will temporarily ban you. So it's kind of got a, it's got to behave a little bit similar to. Yeah, yeah, like that. That's actually a little bit better than just doing UFW just doing allow.  Small point. Thank you. So yeah, so this this this checks that I've just talked about most of them are automated with them. If you use our tools, which is the HS to unstable tools. So you don't have to to kind of take the checks one by one when you do your installation. However, if you you're planning to do manual setup where you do set the post cares. Proxy and and and even your instance separately, then you need to at least have a checklist which you follow to make sure that your deployment at least meets these basic security. checks. And, and, however, if if you want to just go away with that and and and be able to kind of have a secure system on a fly, then you have to, if you use the tools, then it's going to fix that for you. So any other comments from people I see they still got a few people in there we've been paying attention throughout. Matthew, Mohammed, Moses, Naseef, any thoughts? How does this is anything there which is new which you're not doing in your own installations? Are you using the DHS tools? None from me. Alice? Alice? Are you trying to say something? I can't hear you. No. Tito, have you had any thoughts about? I know you need to chat with Michael probably a little bit about this, but you know the CIS checklist you refer to. There's many, many, many of them. And what we do with DHS too is we kind of pick the core set of ones that applies that we should at some point write down a checklist rather than just have the tools which are implementing all the controls. Well, we should write down the checklist of all of the controls that should be applied to the Tomcat and the proxy and also the database. I'll have a discussion with Michael and I already have a list that I do use when developing the DHS tools, ensuring that I meet most of these security checklists. But I'll have a discussion and come with Michael and come up with a list that at least we will be following at least for the installation. However, this list has a lot of checks which we don't use all of them. So we need to go through this list again and decide there could be some of them that we're not doing them, we should be doing them. Part of it is, so it's a matter of, I did this with the proxy and it took me almost a week. There's like 170 pages of controls on the Apache proxy to actually go through page by page control by control and deciding which one to implement and which one's not. So I've done for them for the Tomcat, but then not not all the controls are implemented. And I'm planning to also check one for Postgres and one for for Indian X proxy. And at least those that that will not break anything are at least configured. Yeah, I think we need to get this onto a spreadsheet somehow, which is a bit awkward because it comes in a PDF, but where for each control, we can say it's implemented or it's not implemented. And if it's not implemented, why it's not implemented. Okay. Because it's not a requirement to implement everything, but we, if you don't implement something and it's got to have a particular reason for it. Where, for example, application specific logging. Now that applies if you've got maybe different war files running on the same Tomcat, right, so you're running a couple of different applications, then each different application would have its own logging. And in this case, because we really only have one DHS to running on one Tomcat, we don't necessarily have to implement that control. So we've got a justification for it. Similarly, with 6.1, we don't have client cert authentication, and we don't have 6.2, because the SSL termination is done by the proxy. So not all the checks here really, as you mentioned, we can implement now because already some. When we don't implement it, we need to have a justification for why not. So that might be useful spreadsheet to make. Otherwise though, thanks Tito. That's all for me. That was useful. So I'm planning to go one by one, and I'll prepare the spreadsheet for all the components that we have. One of them is of course Apache Tomcat, and I'll check one for Postgres and one for the proxy. Then I'll have at least check all those, the security checks that at least are recommended by CIS. Then I'll have a meeting with Michael and discuss extensively, which ones are we going to implement and which one are we are not going to implement. And at least if we are not give reasons. It sounds like a good plan. Moses, you have comments. Oh yeah. No, thank you very much. I think this has been very informative. Okay. So I think for today we can stop there. Unless anybody else has a comment, additions. Well for me, thanks Tito. Thank you everyone for joining. Have a good day. Thank you.


Article 2 addresses the Executive Office of the President of the United States. To be fully understood, this must be seen in light of the sovereignty of we the people in their capacity to delegate authority to this national officer. The President can only have such powers as the people are able to provide to the office. Where the people do not have powers and authorities, they cannot delegate these to any officer through agreement among themselves. This is specifically limited where some citizens might want to govern over other citizens. Also, authority that is delegated is for a purpose. It is to provide government to perfect the union and to satisfy the purposes set in the preamble of this larger agreement. These are stated purposes and they are to be applied to the government through this agreement. To this, we also add the limits placed on the larger government and that is not to honor the office holder above the people. And this is a government of law rather than sovereign authority exercised through public office holders. And yet, we the people recognize the need for a central figure to represent the United States to other nations and peoples. We recognize it, even as we recognize the consistent abuse of people under such leaders in the past. By Article 2, the executive power of the United States rests on the person elected as president. We have a history of confusion as to the extent and limits of the authorities and powers of the president, even though they are effectively set within this constitutional agreement. The first power is granted to execute the laws of the nation. A specific note is that sovereign citizens have no power to avoid or refuse properly enacted law. They cannot delegate any right or privilege to deny the law to any president. The president is personally responsible for executing all the laws passed by Congress, where he has ability and opportunity to execute these within the authority otherwise granted to the president. As will be discussed later, the function of the judicial branch of government includes review of laws. This is not a function of the president. His function is execution of law. There is no presidential determination of what elements of law are to be executed and what are to be ignored or opposed. The method for election of a president is set in the writing, and it addresses how to establish the president as the people's representative. The method of election is not as important as assuring that the people are given sufficient voice in the election, that the representation of we the people is assured. As it was for members of Congress, this presidential election includes electors, representatives who are expected to carry the representation of we the people into a central election process. In today's environment, this stated method is awkward at best and contains risks of non-representation that are unnecessary. Its inclusion in the main document is not to be received as some sort of statement of what will be right for all time, but serves the purpose of assuring representation in the time and situation of the early decades of the United States. It was probably meant to continue until changed. We will address changes in discussion of articles of amendment. We also have specific personal qualifications set on those who might be allowed to be president. There are birth requirements assuring that the president is a person born into the society of people of this nation. The apparent purpose is to assure that the president has family ties to citizens of the United States, superior to potential ties in other lands. There is an age requirement indicating a minimum level of maturity. There is a residency requirement assuring a common knowledge of the people that the president is to serve. In terms of this constitutional agreement, any person who fails to fulfill these requirements is ineligible to be president no matter what other qualifications they may have. Gathering sufficient votes to be elected does not overcome these requirements. As with members of Congress, the president is to be paid from the Treasury for his services as president. Election is to be a hiring process and the president is to serve his or her employer. This employer is not just the United States as a corporate entity. For the funds that pay his or her salary are also the property of we the people, those under whose authority the president has been elected and in whose delegated authority he or she will be required to act and from whom the Treasury contents were largely collected for the purpose of operating the people's government. This article addresses some of the powers of the president. It opens with remarkable statement that the president shall be a commander in chief of the United States military forces. What is startling is that ruling over the military is not considered to be a general function of the nation's chief executive. It is something to which the U.S. president must be appointed. The relation between the president and the military is not defined as a sovereign rule but as agreed by we the people. Commander in chief is not directly defined but obviously includes the duties and responsibilities associated with being a commander within a military organization. It includes responsibility for the people who are military commanders. It includes the ability to issue orders that must be obeyed and authority to enforce orders by whatever means are appropriate to the environment in which the military effort is required. The big difference from prior military government relations is that the commander in chief is not a sovereign ruler who personally directs the military where he feels that you go. A commander is also an officer who accepts orders from higher officers. In this case the constituting agreement is the higher authority and it is able to set alternative authority upon others so that they can issue effective orders to the commander in chief. The ability to require written opinions from other senior officers is again new. It provides that the officers be willing to support their commander with written records. They can be required to put their opinions in writing wherever they may be held accountable at a later time. It strengthens the president's orders and directives to the military without granting office additional legal powers. The final statement in this paragraph speaks to an ability to issue pardons for federal offenses. By placement in this article it might read as applying only to the military. It has, in accord with other writing, been taken to address a general right to pardon for both military and civilian offenses. It is hereby placement, specific to the appointments of the commander in chief. We next have a list of specific powers with limitations. The limitation, in accord with the rebellious history of the colonies, deals with avoiding an imperial presidency. It denies ultimate authority in the president to take special actions on behalf of the United States without the application of regulation through law. The power to make enforceable treaties was limited by requiring the overwhelming support of the Senate. Agreements with foreign powers were not to be made as a sovereign leader, but as a representative's executive, acting with the concurrence of the territorial representatives of the United States. This puts much of the same restraints on benefiting some of the states as the expense of others as have been placed on Congress for passing of laws. The apparent purpose was to perfect the union, to bring people together in support of the acts by government leaders. It is also indicative that two-thirds of the Senate must concur before the president can act. Dealing with foreign interests as a sovereign entity is a power denied to both the president and to the Congress. They have to come together before the United States government is authorized to act on behalf of we the people. You will note a light requirement for even empowering ambassadors. The president is not able to simply direct senior officers who deal with other nations. They are only empowered after the Senate puts in support to their employment. It is possible as an oversight that the representatives of the whole United States do not have to answer to the Senate after appointment, but are supervised directly out of the office of the president. There is no established means for the Senate to withdraw support for an ambassador who misrepresented the United States, nor is their reporting requirement back to Congress for their actions and representations to other nations. For answering only to the authority the president might assure consistency, it does permit a certain level of imperial authority in presenting the United States to foreign nations. The limits of senatorial approval are only for written instruments to which the United States will be legally bound. Other significant officers of the United States are likewise to be supported by a similar requirement for senatorial approval, including members of the Supreme Court. Appointments are subject to exceptional agreement in the Senate. The final paragraph addresses administrative necessity and convenience, allowing the president to temporarily fill vacancies without the blessing of Congress when they are not readily available to perform their process of approval. In short, the business of government is to continue through times of congressional recess. The third section, in requiring congressional communication of the State of the Union, has been interpreted as a duty for an annual event, which does not appear to be either within the purpose or character of the constitutional agreement. It is more properly addressed as an ongoing communication duty, one to keep the Congress informed of the needs for legislation and potential misbehavior in office situations that come to the notice of the president as a chief executive officer. There is no intent in the wording to limit communications to an annual event. It is consistent with the rest of the constitutional agreement in that the president is to work with the Congress to see to the purpose of governance as set forth in the preamble. We also have specific powers granted to the executive in calling Congress into session to meet the needs of the chief executive in operating the government and enforcing the laws that Congress has passed. It is worthy to mention that the purpose is not separation of powers so much as coordination of powers. Also, it is the president's duty to deal with other nations as representative leader of the United States, and the office has given powers to suggest the use of subordinate offices to further this purpose. Again, the president cannot just choose his own subordinates, but must have them approved by the Senate. There is language in this article to specifically limit the president's running of the presidency as some sovereign leader. This is emphasized in section 4. It provides specific instructions for and limits upon a process for removing a president who abuses the office. This is specifically addressed as a matter of impeachment and trial. It is not a summary process. It is also not to be for minor matters, but only for treason, bribery, and other high crimes and misdemeanors. These are not subject to definition in the common law in place at the time of the signing of the constitutional agreement. They were matters of feudal rulers, with these rulers no longer an authority in the United States. For example, treason no longer was an offense against the Crown, nor was the U.S. government a sovereign authority that could take offense as a government. It was created by sovereign people. Bribery was well-defined, but had been a necessary part of feudal government. The very existence of the feud required supporting the privilege of a ruler with unearned payments. That was the very key to the nature of privilege. The application of this in the new environment of a sovereign citizen agreement was probably like to payments that interfere with the representation of citizens, or they gave reason to avoid duties and responsibilities set on government leaders by this constituting agreement. It is here where a modern political government is put to the test. Does this work challenge the election of any candidate who accepts funds from a political party? The President is not a separate but equal part of government. He is its chief officer in operations with a purpose set upon implementing what Congress directs, working with Congress to establish needs for legislation, and acting as the chief representative of the authority of the United States with other nations. Presidents do not have the option of refusing to implement laws. That is an impeachable offense. Once the people representative has set their course of direction through law, the President is bound to pursue it. The President does not have power to reprogram public funds, taking them from the purpose set by law in Congress to redirect them to meet presidential priorities.  The very purpose written into the articles of the Constitution is a government in three parts, each doing its part of the larger governance effort in coordination and harmony with the other two.