I used to be CIO of the Dutch Ministry of Health. Now I got worse. I'm deputy general for digitalization of the Dutch government. So I'm paid to look out of windows during office hours. I'll do this together with Browno and a lot of us at the first row. It's about how we combined looking out of windows with hackers mentality to fight the pandemic. And this is his laptop. So this is Browno. Browno, please introduce yourself. Hi, I'm Browno. I'm a hacker. I use Linux Mint. He is a government worker. He's boring. He uses Linux Arch. Sorry. And they develop software for Debian, which I don't have. Fighting infectious diseases is ages old. And we still do it the same way. We identify people who got sick. We trace people who were in contact and isolate them. That's it. It was so for the plague. It was so for the Spanish flu. And it's the same when fighting the current pandemic. But in the old days, you knew everyone you met. You didn't forget them. Nowadays, you meet a lot of people. And most of them you don't know. And if you're as old as I am, the rest you don't remember. So the National Institute for Public Health in the Netherlands as well as abroad said, please do two things, try two things using digital means. One is, please warn in context that you don't remember because you're old. And secondly, see if you can help contact tracing experts in doing their work. So what we did, this kind of stupid, I had to stay at home. And I was watching television to a press conference on April 6, 2020. And there was this minister of health who was telling this story about cell phones knowing exactly how far they were apart with Bluetooth. And that was one of those fine moments that I used Twitter to the max. And it became even funnier because he started an epithon. A what? An epithon.  Yeah, what we did, we had a weekend. We prepared that in two weeks. And over the weekend, we tested seven apps available on the market. Two of those, I don't say that often, were rolled out in countries. Two separate European Union member states. But after the weekend, seven apps contested. After the weekend, we concluded none of them was good enough. So I made a lot of fun about that. And I called it to say the hoogmiss of the techno-optimism. The high mass of the techno-optimism. So Ron let me know. Well, I called him and I called some others that were, to say the least, a bit skeptical on the internet on social media. And I said, if you know best, join me. And he did. Ho, ho, ho. There are some non-negotiables here. First, privacy is secured. Second one, security is non-negotiable. And third, if you build something, it should be available to everybody. And then Ron said, of course, OK. And then there were a whole bunch of people. What we did, instead of doing it with people that stare out of windows, sorry, we did it also with people from the outside. So I had the honor to work with a team that would never work with me, that would always work against me, amongst which are large names. And I said, well, you may say that I should take privacy seriously. And I should take security seriously. I should take accessibility seriously. But those are my failures too. So we aimed for the highest.  Let's see. Oh. Please work, yeah. This is one of our blind testers. We had blind people working on the team. We had blind people testing everything we did on a daily or weekly basis. This was at the same speed. She read the screen, which is a lot quicker than we would read it. She just heard it. So everything we did, we tested to the max. And yes, it is fully accessible what we develop. We were the first government website with no cookies at all. Yeah, that's actually, oh, that was actually kind of a thing because normally you have to have cookies on the government website. And we promised not to track anybody. So what we said is if you do cookies, then basically you're tracking people. Let's not do that. It's your part. Yeah, that's true. So let's not do that. So then people called me working against government standards. So I went like, yes, I know. And that was basically the end of the discussion. We did a lot of other things. Some were basically part of the framework that we used. But for instance, one of the things that we did, we made it a crime if you try to force somebody to use this app. And only a few countries that did so. You have to exchange keys. Well, if you're sorted by alphabet, you basically have a way that you can't trace where these keys are coming from. We made sure that the municipal health services couldn't really see anything about if somebody was really uploading. So it's OK that if you're uploading keys or saying, yes, I am uploading keys, it's OK to lie so that you remain anonymous. And we had a lot of privacy features built in that basically helped out a big time. One of the fun things was as well, and we underestimated that one a little bit, we didn't make any backups because backups is data that you keep on, for instance, Google drives and that type of stuff. You don't want that. So then some people lost their phones and went like, yeah, I've lost my keys as well. Yep, that's true. So we can't recover that. Nope, you can't. So that was one of the things. And if there's abuse, we won't allow me to have a team to go after people that tried to be funny and say like, OK, let's see if we can trace people. Then we also had to assess, OK, what's the risk really and who are we fighting against? And basically, there were some people within the government that said like, you're fighting state actors. Good luck with that. And very vocal people, I can basically make it very easy to say, everybody hates us. And that's what you have to secure against. The next one, thank you. Then we did something else. One of the things to gain trust is to show that things are OK. How can you show things are OK by showing the researchers that have been done in that? So all the pentests, code reviews, et cetera, have been sent to parliament and made publicly available. That was really the first time, I believe, that it ever happened within the Dutch government. And proactively, not wait for a FOIA request, do it proactively. The verification, that is honestly something that I didn't do, but Dirk Willem van Gullijk, who is here somewhere as well, thought of. But if you publish code, how do I prove that that code is really the same software that is planted on your cell phone? So we made the process to certify that by notary. So that, well, I think most of you wouldn't trust the government fully. So the only thing to do that is, how can I show that the GitHub code is the same code as in the Apple App Store? Having a notary proof that compiling that code leads to the app that's in the App Store.  And one of the funny things was when we passed the law in parliament, privacy and security were not a concern anymore, because they had all the documentations there. And we were transparent to the max. How many people were contacting the public health institutes because they were warrant? We published that every day, daily, on a daily basis. All the scientific research into does it work or not? We published every single research report we got. So everything we did was not only open by code, open by process, but also open by everything we got from research or reports. So we know who used, used. We stopped it. We stopped the app because it wasn't needed anymore. People didn't think we would. We stopped it, but we knew who were using it. And when we stopped it, we hired auditors to verify that we really stopped the app. And not only the code is open, the designs are open, the documentation is open, the UX research is open, the translations are open, and made by the public also or improved by the public. And all discussions were open. So press had to get used to it. We published the first code, and the morning papers opened with first app version published, which was not true. It was just the first code. The first commit. It was the first commit. Press had to get used to doing that. We had designs for the icons. And Yellow Prince, one of the main designers for Uber, for example, did that and did that on Twitter. One of the things that I believe in for years is that making mistakes is cool. Because if things go wrong, you can do better next time and learn. But you can also, by going by mistakes, assess risks easier. It's far easier to say what can go wrong than to say what is the risk. So I introduced the fill your mode effect analysis as risk assessment methodology. And now, like two years later, people, before they call me, they say automatically, yeah, we should do an FMEA. So they already know that, but whatever question they are going to ask if it's a bit complex, you start to think on how you do things wrong. And it helps, oh, one last thing. It helps also in making design more robust. And of course, you don't punish people.  That's one good thing of wrong, by the way. Just one. Yeah, that's only one. Just one. Is that whenever something went wrong, one would say, OK, this is my mistake. I own it. Instead of go like, how could you do this wrong? And that gives, of course, the confidence that it works. Then I was lucky. I was just there. And I saw on the news that one of the subsidiaries of the ministry basically had a very basic issue in their website, URL manipulation. So why wasn't this in the pentest? So I wrote around an email, hey, Ron, don't you people do pentests in this building? So yes, of course they did. And then I looked at it. And basically didn't contain the test they did. Most pentests are basically a list of things that the researcher thinks is not OK. So when we started with procurement for pentests, I realized I need to be able to follow the entire process. So what we did is basically have standards. If you find something, I want to understand how serious it is not by a thermometer or whatever, no, by a standard. And if we're talking about testing, let at first at least do the OWAS top 10 on the WSTG or the MSSTG. Because then at least I know which tests have been done. Yes, it's OK to do more, but that. And then, of course, we wrote the report will be public. So we asked 10 companies to help us. Six of them said like, oh, no, with public reports, we don't. So that was kind of interesting. And recently, we adopted the policy that our internal pentesters do a pentest and an external auditor will verify the pentest by the documents alone. So they need to be written in such a way that the auditor can understand each and every test that has been done. And you see a car here. If you have an old car, you have to have it inspected once a year or else you're not allowed to drive it in the Netherlands. That's basically what we do.  No, they're not. Most issues are with the basics. And then the vaccinations came. Liberation had lost. Erron, how do they register this vaccination thing to the EHR so that the National Institute of Public Health knows about the vaccination? And then we discussed eight weeks before the first vaccination round started that around 15% of doctors don't use a system that can report about vaccinations to the national government after they have been done. So we just had eight weeks, six weeks. No, we had three weeks. It was December 15. So what did we do? Well, we were at lunch.  Then some people started to escalate. Then we stopped the blah. Yeah, then some people escalated. We stopped hiring. And then I said, OK, I'll help you out here. So let's start a project on this. And then the manager came into my office and said like, it might be the case that the Ministry of Defense starts to vaccinate. And then the project needs to have a code name. So I went like, OK, if this is really what you're worried about, meet my cat, Brani. And by now I killed her. I call her Brani-Banani. So the project was called Brani-Banani. Then we went to basically I phoned a mental phone. And we phoned all sorts of hackerspaces and basically said, like, help. So they came to help. And then, are you busy on the project? Yeah, is that more important than COVID? No, then you work for me. And on the other hand, OK, next.  So we built a website, brani-banani.nl. This will be the webshop for all your bananas. And behind that was the vaccination registration system. So if you wonder why I have a t-shirt with BRBA, you cannot name a formal official government website, brani-banani.nl. But you can name it brba.nl. And in official documentation to the Dutch parliament, it has a total different acronym. We made up afterwards de beveiligte registratie voor bijzondere assets in Dutch. So if you look back in government files, if you look at the parliament files, if you look back on technical briefings, they'll use brba.nl. So now you know it's about cats. It's Hiro, Brani en Kijkho. En Kijkho, it can complain a lot. So I called her Kijkho de Zijkho as well. And this is how it looks in a government system. Brani, banana, Zijkho, Kijkho, and Hiro. And afterwards what we did, anytime we met, for example, a nurse in Rotterdam that helped us, we asked, do you have a cat? And now every part of the system has a cat name in it from one of the participants in working with us.  That's kind of cool. So I don't want to. I got to. So if you now see Red Hat, for example, using animal names, I don't see anything. No, that's it. I stopped there. One of the things that I did with all the projects is use hardware security modules. For those that don't know what is that, that's a cryptography thing. And Ron always says it's a big working prison for keys that will be born there and die there. But the issue with this is that it takes a couple of weeks before you have them, and we had only three weeks. So somebody said, you know what? Use a software HSM, a software hardware security module. No. On Windows. No. So I phoned Mendel and said, OK, I don't know what to do, but think of something. So the next morning, Mendel said, you know what we could do? We could do an HSM on a YubiKey. So I went, oh, yeah, that sounds cool. You should try that. And go do that. And he said, nope, I already did that. So there we were on January 2 in a data center putting YubiKey into a service with a ceremony that Derk Wilhelm von Gulich wrote himself in, I believe, four or five hours doing an official HSM ceremony with everything and made together with Anne-Yan and made a total chaos out of it. But that's a whole different lecture. Oh, yeah. And then, of course, the credentials had been distributed. You could have heard it yesterday already, but we used the army for that. And that was kind of cool because within two hours you started to see on LinkedIn all happy nurses and doctors that all of a sudden could log into the system. Because with hospitals, we've got 118 in the Netherlands. So 118 times two credentials, that's easy, you know, for the defense to distribute. But then I asked Ron, how many other doctors are there that would need the system? And then we were silent again. And then Ron looked at me and was like, OK, I declare this that we are not in control. Let's have lunch. So then the Anne-Yan's and Mendel and thought of things again like, you know what? Let's use this card that doctors have to log in. And then Ron said, can't do that. Well, at that time, I was responsible for that card. It's a card distributed by the ministry to doctors to log in to systems to identify patients and communicate securely. And we didn't have an open source implementation how to interact with that card. We now have. It's the Uzi card and the project has been called Puzi. And yes. Then people started like, OK, we've grown bigger as a team. So you have to have a security team. So you will be audio security. I mean, like, no. So I thought like, what is important in life? Well, cats and Indonesian food. So I like Indonesian food a lot. So we called the team Red Team in Indonesia, which is Tim Abang. So our team is now called Tim Abang. And I had a nice photo of Kaiko the Zyco. And we transformed that into a logo. And then, of course, we did all the marketing and branding that you need to do within the ministry. Almost everything we do now is open source and on GitHub. And we had the first minister worldwide to do a commitment on GitHub. Never done before. How many repos do we have now? Someone? Anyone doesn't even know. Dozens.  And then, something else happened. And you probably know when you traveled within Europe or had to enter a promise showing a QR code. We were asked to try out what was needed if you would ask people if they were tested negatively or not when entering, for example, a restaurant and in a pilot phase. And that was before the European DCC. We started before. And we said, if we do it the same way we do contact tracing, for example, you don't want people to be linked between two events. So you walk from one restaurant to another. You do not want to be linkable between the two. You do not want people to be able to register that you were there. And you wanted to be accessible too. So if you and I skip something, I go to this. We developed a Dutch QR code. On the left is the European QR code. Within it, all the data itself about vaccination, test, and recovery. The Dutch QR code, which is now stopped, by the way, because it's not needed anymore, has just the first letter of surname and forename and day and month of birth. If you have that code, you are safe. Not knowing who you are. Not knowing why you have the code. Not knowing why you're safe. It's just a proof that you were eligible to enter. So when we had our own QR code, it had no data. Not about why you were safe and not about who you were. And we went at length doing that. We even added to the code we used, for example, that if you were safe because you had had a vaccine, you were safe for about six months. A test is 24 hours. You didn't get more than 24 hours in the QR code. So no one could see if that was because of having been tested or having had a vaccination. That's what you get when working with hackers. And it is fair to say that, especially thanks to Dirk Wilhelm von Gullig, that the European list is smaller than they initially wanted to do. So we developed three apps. The holder app, the scanner app for domestic use, and the scanner app for international use. So we had our own domestic QR. And based on how many people had Q as a first name, you wouldn't show the Q. So when a first name was not used too much in combination with the last name, for example, there wouldn't be a letter. There would be a dash. So we developed the apps. They were accessible, tested, and many languages. No credentials in the QR code. And just first name, last name, day of birth, and month of birth. And I say that again, that's what you get when you work with people who normally work against you. And you don't get a reason why the code is not accepted. You just get a not valid. The portfolio behind this, and Anjan just said, over 50 public repos is huge. Built by just a dozen, just some dozens of people in the past two years. And that's what I have to say, thank you. It has been a wonderful journey.  People that normally work against me, now they work with me and brought something on a table that you normally would not expect. People would expect hackers bring hackability. They bring privacy. They bring security. And they bring it in a way that most of society wouldn't expect. So thank you. And there is someone here in the room that managed to get a hammock into the ministry. So he deserves his own slide. Thank you, Mendel. We managed to have fun. Lots of fun. My fellow workers at the ministry didn't always recognize what we were doing. But we started a book bound to 1337 on the 10th of January 2021, which is at sub-242. No one discovered that. So it went, it got into parliament and we did it at specifically that time. We started a book bounty for one of our apps.  We had lots of fun. And the minister of justice said, this is a team of wizards with the heart at the right place and still have fun. The soap dispensers at the ministry now have stickers stating that they are emptied at every end of the day. And that licking there leads to herd immunity. It is possible to have people like you, and thank you for that, working in a place where you would normally not expect them, and excel and do that together. And from my new job, you all want it. We need people like you doing that. And I don't think Bert is in the room, but the main point I learned, and for whom of you knows the block about the toaster from Bert Hubert? For the others, read it. It's about if you don't have people who know what they're doing, you're not able to drive, change, and have others do what they need to do. It's a block you should read about the toaster of Bert Hubert. So are there any questions? We stole that from people yesterday. So we have some sample questions like, have you considered naming things after dogs? Or why did you use Comic Sans on one slide? Sorry, Jan Jan. Yeah. Hello. Thank you for the excellent talk. I have a small question, and especially for Ron. Did I give you more of a headache in your old job or in your new job? At least that's much fun. For the people not aware, follow him on Twitter, my minister said in parliament that source code of the government can be made public, should be made or can be made public because the law states so, and he just demanded the source code for one of our identity teams. Yeah. I wanted to know if you also will open source all the hidden jokes because all the applications are now done. Can you also open source the jokes that were hidden because I know there were many more. I'd love to do so. I'm not responsible anymore, but you can. The microphone in the back, please. Hello, I'm Thijs. I reported the vulnerability in this app. I tried to email it to you, but the email bounced. Could you get a bit closer to the microphone, please? Oh, we know that. I tried to report the vulnerability in your app, the Corona Check App, but the email bounced, and eventually we reached out to you. And then, Brenno, you promised us tickets for MCH. Yes. We didn't get them yet. Don't want to be impatient. No, no, no, no, no, no, no, no. Yeah, no. Hold on, hold on. Can you frame this as a question, please? Excuse me, I didn't get the question. When can we expect them? Aha. As I have told you and mailed you, probably, but I also told him, let me know where to send them, and I will send them. And you never did. OK, wait, wait, wait. Have a beer. Maybe this is good for a discussion after. There are five tickets that have been handed out to people, so we did do what we promised. I think it's best to come over after the talk. Yeah, yeah. We'll make something up, probably. Yeah, for example. That's nice. Microphone in the front, please. It's not on. Oh, yes, it will come on. Just keep on talking. Yeah. My question is, what assumptions did you have about the other party? It's a question for both of you that got invalidated when working together. OK, for me, the one that comes to mind first is, and how is there a good Dutch-to-English translator in the room? It's the word burger hat. What would that be in English? Yeah, I know, it's not that. The amount of time people put into helping every other citizen having problem with everything we did, I wouldn't expect that. So the amount of time spent at helping people who were not able to get a QR code and not wanting them to be left behind, I was touched. That you would never see around places where I could normally. And then, Brenno, I don't look out of the windows after 5 o'clock, that's it, right? Yeah, what for me was, what's called really invalidated is that I had always an image that people were anti-transparency. And I just noticed that it wasn't really that, but that people find it scary and just need to be helped a little bit. And that's one of the things that you can make a change there. And that people like me use arch and augment, right? Yeah, that was a disappointment. That was a big disappointment, yeah. Thank you. Thanks for everything, especially for doing, I guess, decent job, even if you didn't get all the tickets separately, I don't know. What is the biggest failure that you had, and how would you do it differently next time? What's your biggest failure? Yeah, I know one. At a certain point, we started getting people who were defrauding the system. And at a certain point, we had one testing company that we closed down for a day because we thought they were committing fraud and they weren't. That's, for me, the one mistake where I thought that I should have been sharper on the whole process myself and be more aggressive in how to deal with that. We closed it down and we shouldn't have done that. That was my biggest, that I should have been a lot more aggressive on the processes. And, of course, we changed that. But that was my biggest mistake. For me, it was always balancing parliamentary language and internal language. And I had several occasions where I used too many parliamentary language internally. And numerous where I used non-parliamentary languages where I should have. I won't go into details about that. So does everyone have to be bilingual in government and informatics? Yeah, it's translating every day, every minute. I used to, I've studied computer science. And I always, in my mind, it buckles when one, two languages are not easily translatable. And those two are not. So, hey, thanks for the talk. So, in your view, what needs to change at other ministries for them to adopt this mentality? And how will you do that? Oh, wow. For one, Mendel said, his first question was how many, what was it about having, how are the differences between how I interact with him now? They never heard of Club Mathe. So they hadn't had the right rings. One of my co-workers bought a crate of Club Mathe to have the right discussions with Mendel. It's a culture clash. And I don't know yet how to combine the two. What we sure have to. Need more hackers, please. We need more hackers, yeah. Hey, the Dutch government does a lot of work with big consultancy firms. And they spend a lot of taxpayers' money on it. And as a Dutch taxpayer, I would like to understand, are there any learnings from this process that you're going to take into when the next request for proposal is being sent out for a company to bid to? Yes, the parliament asked for those learnings. And for the Dutch-speaking people amongst you, the bid had bid, or the Advisculation ECT, the Council for ICT, I'm tested. Don't know how to say it in English. Made up with all the. And the CIO of the Dutch government will implement those. And there amongst them are about how to hire the right people, for example. Yeah. And thank you for visiting. Please stand close to the microphone. And you can pull it down if you want. Don't worry. Thanks, Koen. Somewhere in the beginning, you mentioned that you enforce and or approve that the code is actually the same on the app as in the repo. How does it work? That's a very good question. I'm just looking if the Dirk Willem, where are you? Because you invented this. And also, I'm just taking your credits. Dirk Willem. Dirk Willem. Well, he invented it. So, yeah. William, please. Right. Could you keep the microphone close to your? Dirk Willem. To your mouth, not to your stomach. All right. So basically, I think the real proper answer, I think it's probably best to go tomorrow, or I think it's today, to the airmark talk. Because basically, they'll explain a lot more about the technology and the cryptography behind it, which is basically something called EDEMIX, which is essentially something called a zero-knowledge proof where you prove to the other side that there are certain properties that are true at the time of you showing it. And that property can be like, I'm vaccinated, or I'm OK to enter here, or my first initial is a D. My month is February. Oh, sorry. It was about the notary explanation of having this. That one. Oh, sorry about that. All right. I missed that. So one of the big issues we have is that at some point, you've got a chunk of source code. It's in GitHub. It's tagged. And you basically build something which goes on to the app store, and you ultimately fetch it from the app store. And what you really want to know, of course, is that as a citizen, that piece of code which ends up in the app store is really the piece of code you're actually basically you've seen going there in public. And the reason you want that is for many, many reasons, because basically there may be all sorts of threat actors and parties which hopefully can change that, including, of course, people in the government themselves. Even the government themselves could sort of be entrusted and be unfair. So basically what we did there is we did two things. Firstly, we basically used an s-crow service to absolutely document exactly what the source code was which was going into the build. So you really sort of know this is sort of like, whatever went into this build process is basically corresponds to this GipTec and these are the shahashes and everything else. So basically at that point you can reproduce it. And the second thing we did is that we had this observed by a notary. So someone entirely independent outside the government which would basically observe this process and sort of like see through it that this entire process onto the app store basically was essentially sort of like handled as agreed and so on. And then after each of those releases we publish those statements basically sort of like a record by the notary as well as the s-crow statement about what that was in GitHub so basically anyone can verify that. As a hacker I have to say, it's a little bit sad we didn't get the level of doing proper reproducible builds because that would be sort of like the next level up but that was simply not possible with technologies available. And there was this one person who said like, I don't trust notaries. I want to decompile the app and check it myself and I invited him to do so but unfortunately he never came around and I wrote another email like, what can we do to facilitate this? Did sort of like do that internally and if you look at some of the earlier pentests you'll actually see that these pentests started at the sort of like the submission to the app store and sort of like worked back to actually confirm that was in order. Thanks. The main goal here was trust. Hi, thank you and your team for your work and the talk. Thank you also for these example questions and now since there seems to be time anyway why did you use Comic Sans on one slide? Because it's a very interesting one. Yeah, yeah, because I wanted to take the pisset on a young. Just because we could. Yeah. Any last question? There's a long coming up. It's going to be a dangerous one. No, no, my name is Niels from ZZ. Why did you develop OpenCAD and what is it? Come to my talk tomorrow at 8 p.m. Thank you. No, no, no, I love this. I think you have a more extensive answer to that. No, it does. Now it does. I have a teaser. Um, we have extensive testing to do ourselves with numerous testing providers, for example, that provided Corona tests and we had to make sure that all the network was secure. So what we did was build a open source tool when we just open source that on the Ministry's GitHub to do that. And that's CAD and it's OpenCAD. And for people enjoying Annie Allen's graphics, it's FreeCAD.NL. But tomorrow there's a talk about that. Cads, OpenCAD. It's about catacombs, octopus. Cats. Cats. OK, this is now I'm going to end this. This is going nowhere now. Ladies and gentlemen, please a big hand for these guys here. Rond Rosenaal, Renner de Winter.


Yeah. So I've worked with almost 200 speakers in the manager at this point.  And, you know, a small percentage of them, 97, 98% of them are amazing men, but I have positive long-term relationships with 5, 10, 15 years at a time, right?  These are men I take, I literally take a bullet for. If I had to, I would take a bullet for you guys, partly because I'm as younger than you and I'm probably going to survive better than you would, just to be honest, but I really would. I really would. Yeah, that's real.  And that's what you see in this wing of the Manisphere. And that's why the McTail guy, dictionary guys are so riled up.   But what did they do?  They go after the same super toxic element because they're so fake and they're phony. They're politicians. They're not Manisphere leaders. They're not authors and not content creators. They're frauds.   That's how they spot them. Takes one to no one. That's why they're fucking, there's like a little miniature silverware going on. I think it's beautiful. It's a great thing, man. It's like the Manisphere cleaning itself, right? It's cleaning itself out. Why is everybody so, well, I'm going to say, why is Donovan so concerned about everybody getting along? And he talked about, and he talked about the end goal. But I don't see a unified end goal from a content consumer, not a content creator. I thought you were going to say con artist for a second. Yeah. No, that's all fake. I mean, John Samiz and Cotrick Adams talk about unity, and they're serious and they're sincere and they're genuine.  I'm taking bullets and knife stabs and bombs from the back all day long, whatever, man. But those guys, their head and their heart is in the right place.  It's all just politician talk, right? Like, look at the Democrats now, like unity, unity, unity. And then they're like, I'm actually going to have an MSNBC. They call for drone strikes on Trump supporters, domestic terrorists, right?  She's going to go on for Trump supporters. Those are the same people gaslighting you. They're like, we want unity. They don't want unity. They want conformity. They want control, and they want money.     You know why? Because I love this community.  I found this community. It has built my life into what it is today and I'm very proud of it.    I want to go to Gonzo. Gonzo is is we'll call him new to the man a sphere. He's is the newest probably guy that's on this panel that has consumed man a sphere content. What do you think of this? What's your thought process? Then we're gonna go to man.


What's up everyone? It's your girl Kenzie here from Layton Sports Guards and I'm ripping a couple of personals here for Brad and Brad. We got both of your orders here together that will rip. We've got a Order of the Father's Day Packs, a 2022 Panini Illuminates football hobby, a 2021 Diamond Kings baseball hobby, and a 2022 Panini Diamond Kings baseball hobby. All right, we're going to start here with the Father's Day Packs. Again, these come in bundles of five. We've got one, two, three, four, and five. Good luck. We've got Kawhi Leonard and Christian Polissen, Trevor Lawrence, and Rookie of Sam Howell. We've got Jalen Durran and Red, Kevin Durran, 72 of 99, for Stefan Marbury and Josh Getty Rookie. Last pack of the Father's Day. We've got Lamar Jackson and Foil of Kate Cunningham. Nice. 86 of 199 on the Cade. Nice packs there. All right, we're going to do the Diamond King. We're going to start with 2021. Again, no base shift out of this that includes Rookie's. Here we go. Good luck, Brad. We've got Grabs Joe Wood. We've got Gray Border of Bob Gibson. Hardest pallet, Warm Soto. Magical. We've got Galleria Starr as well as Wagner. We've got a Pavin Smith on the Dual Relic, 90 of 99, D-Vex, Joe Jackson, Bar Show, Blankenhorn, Ricky Henderson, Shazam, and Evan White. Pashinato, Anthony Rendon, girl, Willindore, Biller, Mike Schmidt, Alindia, Dylan Carlson, Gray Border of DJ Lamekyu, Carl Hoogle, Galleria Starr's Tatis, Kyle Lewis, Alec Baum. We'll put an auto here. Here it is. And Boston, Bobby Dahlback on the Dual Relic Auto. Nice one there for you. Here you go, Brad. Hardest pallet, Joey Gallo, Fleming, Oliver, Cal Ripken, Rasmussen. Last pack of the 2021 Diamond Kings. Then we'll get into the 2022 for you. Elegance, Manny Wachado, and Christian Javier. All right. On to the 2022 box. Again, no base shift out of this, including Rookie's. I will pick out the Wanderers and O'Neil Cruise for you, though. Terry Williams, Gray Border of Paul Goldschmidt, Campanella, Adams, Pez, Buham. We've got a base Garrett Cole. I'm tripping. No, I feel so safe. Yeah, this isn't Heritage where it's like different stock. I'm tripping. I'm sorry. Trevor's Story, Shane Boss. It's like, wait a second, because those are like super short print in Heritage. Where is that, the beer? Got Art Nouveau, Charlie Blackman for the Rockies. Rosarina, a little three of Ace Vito. Aaron Ashby. We've got Cabrion Hayes, Artist Proof, that is 31 of 49. Bogarts, Peekman, Gavin Sheets, Perez, Ty Cobb, Siebel, level three. Juan de Franco, level one. Zerba, we've got Lou Gehrig, Ami Gray Border there. Bryce Harper, Jose Ciri, level two. Rital, Detmerz, Machado. Aaron Judge, Sprin and Marshall, level two. Dallas Gray. Got Matt Veerling on the Dual Relic Auto Phillies. Yo, Brad, on your Dual Relic Auto. Newt Bar, level three. Oh, our Plum Border, level two, Rookie Camillo DuVall. Kyle Lewis and Mike Baum, in level two. O'Neal Cruz, Rookie Base. Garrett Cole, Kunya Jr. and Josh Low. Last pack. Italian Kraus Hoffman, Pastros of Garrett Cole and Spencer Schreider, Rookie Level Two. Those ship. All right, last but not least here for you, Brad, your Luminance. Look for three autos and one memcar. Here we go. Rookie's Tindall, Records. We've got Logan Hall, 217 of 249, Bucks. And we've got Calvin Austin, the third on the Blue Year One. Steelers for that one. Vestage, Josh Allen. Brickie, Tyler Allager, Ignac B, Jermaine Johnson, the second. Got Green, Austin Eckler, 39 of 99 for the Chargers. And we've got Gabe Davis on the Memento Swatches for the Bills, having a solid year so far. And Dynamic of Patrick Mahomes, two autos in these last two packs. Price Rookie, a George Pickens Rookie for the Steelers. Sorry, Jordan Davis, Eagles. We've got Orange Dynamic, Jameson Williams, 24 of 100. Out of 249, Tom Brady for the Bucks. Nice one there. Then we have Packers, Rookie Otto, 333 of 349, Tyler Goodson, Fusion, Trevor Lawrence, Kyle Hamilton, White, Joe Burrow out of 149, Bangles. We've got Bills, James Koch, Rookie Otto, 55 of 100. Bills and Sheesh of Justin Herbert. Alrighty, Brad. That will do it for your personals there. Thanks again for hopping in. We appreciate it and we will get these right out to you.


Welcome to the Adam Does Movies podcast. I'm Adam, of course, and on today's episode I'm gonna be talking about movie sensitivity How people watch films how they react to film criticism and why we have a problem on our hands in some instances I myself, of course, love movies. I talk about them all the time I do the podcast every Monday plus I do live streams on my channel Adam Does Movies Every Tuesday and Friday and then on top of that I go out and see every new movie that comes out on a Thursday night Plus I review the movie and even go back and talk about older films. I live and breathe this stuff This is my church. I worship at the altar of film Maybe not that over the top of course that no one should have an unhealthy obsession with anything And I know I just painted a picture like I do But I can assure you I'm also into video games. I also like sports I also have kids who I do a lot of stuff with and I have a wife So there's plenty of things rounding me out as a well-adjusted individual Some people I can't say the same for in this space or people that just go out and see a movie and feel like They have the need to make things personal I'm watching this video on as I'm recording out of the video version of my shirt just keeps like it doesn't know what it's doing It just wants to push me away from it. It's bizarre. Anyway, let me let me focus So I really wanted to go over this because lately when I've been posting reviews These kind of out-of-theater reviews that are less than 60 seconds for YouTube and TikTok shorts and Instagram Areals or whatever the hell they're called. I will just quickly leave the movie and I will bring up my phone and I'll give you a few thoughts about what you can expect Spoiler-free. I'll say like hey, I really enjoyed this movie because of A, B, and C or hey, this kind of worked Here's some things to look out for that didn't and that's it and I Understand that these types of videos go out to people all over the place Not just the subscribers on my channel and that's the idea. You want to reach more people with these But when you reach more people, you bring in a lot of douchebags You bring in a lot of people that don't know you or your content or maybe they saw the movie themselves And now they feel personally attacked by your opinion Which is bizarre. I've had a couple lately Where I just scratch my head and wonder why what at what end does this serve? So here's an example. I saw Fast and the Furious 10 a month or so back I did the outside the theater review Got if I don't know 40 or 50,000 views on some of the different platforms and the comments on I think it was TikTok probably TikTok and YouTube were just vicious Just going off about how I'm not a fan I never liked Fast and the Furious and all this they just made all these assumptions and The the criticism I gave was so top-level So obvious that it just makes me think really this is what you're worked up about. I said obvious things So what I said when I walked out of the movie was hey Fast and Furious 10. It's just as dumb It's just as family as the other ones if you love these movies up until 10 you're going to like this one I don't see any reason why you wouldn't however, if you're like me and it's lost you along the way This one's not going to pull you back. That's I mean obviously not verbatim, but that's pretty close to what I said I also said there's lots of action lots of explosions, etc Giving people a picture of what they can understand when they go into the film if they're on the fence about seeing it I don't see how that was insulting. I don't see how I mean I I mean I guess it's insulting if you think Fast and the Furious is Shakespeare if you think that it's citizen Kane levels of writing But I have to imagine even the people that truly enjoy these flicks know they're dumb as shit, right? They know that the script is Is like AI generated at this point.    He doesn't he's just a hater. He's a shill.  I mean Larry the cable guy was the thing at one point. So Polly Shore was the thing at one point.  That's okay Another recent example was the blackening I didn't actually see a trailer for this movie. My wife said Lindsay. She said Adam you should go watch this movie It's getting some good buzz. The trailer is really funny looking. You'll probably enjoy it. And so I said, all right, well Probably predominantly black cast. Let's show some support, right? Let's let's it's a brand new movie Let's give it. Let's give it some bucks. So I go out and see it. It doesn't really work for me at all Some of the jokes landed some of them were complete misses and it was the tone that bothered me It wasn't that I didn't but we'll get to that we'll get back to it So anyway, I leave the theater. I say hey, I saw the blackening and it was okay. Not that not my favorite This is one you could probably just watch it home on Netflix. It looked cheap the dialogue was very Stilted and it didn't feel natural And I was just giving people things to expect when going to the movie this one I was put on blast over and I Guess I wasn't expecting this criticism to come up as much as it did.  I think I was only called that once the one thing I was told over and over and over again was you just didn't get the movie or don't listen to this dude He's white. This movie's not for him. He doesn't understand the culture. He doesn't understand this or that It's it's a lot of I don't understand anything mentality Because I didn't think the movie was as great as this person did so therefore I didn't get it I just watched a movie the other night with my wife It was the Cheeto movie red flaming hot Cheetos or whatever the corporate movie about Hispanic worker that's a janitor that comes up with the new flavor that saves the free-to-ol a company or at least brings them back into You know full capacity again saves a bunch of jobs. I enjoyed that movie I didn't think it was anything amazing, but it was solid and it was about a Hispanic family. I Barely know any Hispanic families My neighbor is Hispanic, but I don't I haven't been to any sort of you know events Or I don't know much of their culture or their history yet. I still enjoyed this film So the whole idea that I couldn't enjoy the blackening because I didn't know the lingo or I wasn't up to date on all the Historical references or don't realize or I don't understand how they speak behind closed doors is absolute bullshit a Movie shouldn't be just so segregated to one culture or to one type of person that it alienates everyone else from liking it And I don't think that's at all. What happened here In fact the blackening the black jokes the humor that were at the expense of white people.  That was fair game Jim Crow monopoly. That was funny. There was good stuff when they were playing the game What I didn't think worked was how they discussed things with each other the topics that would come up felt unnatural it didn't feel organic to the movie it just sounded preachy and Preachy and preachy like it was to college campus kids having a discussion back and forth in a debate format It didn't feel like friends hanging out and actually having natural conversation Now I was told this is how the black community talks and if that is the case I feel very sad for those individuals that think their entire life needs to evolve Around just arguing who who's the blackest in the group or who's the way it is in the group? I don't believe that's the case But again, I grew up in Minnesota in the suburbs So seeing a black person in that area was like finding a unicorn. It just wasn't something that happened very often That said the dialogue being a little stiff and on the nose was just one of the many critiques I gave in that short little span of 60 seconds I did have a full review too, but I'm speaking to this because this is the one that triggered people I also said the movie looked cheap Whether it's intentional or otherwise To harken back to the old-school black comedies and older films. It doesn't matter. It didn't look good It wasn't a good-looking film and you can make an old-school retro style of flick But still modernize it in a way that's pleasing on the eyes. This one wasn't it didn't have an interesting location It didn't have an interesting reveal the deaths were all tamest crap. So I said exactly that It's a pretty mid-movie all across the board. I wouldn't rush out to see this But yeah, that was enough to piss a lot of people off and say don't listen to this guy It's not for him and then where do we go from there when you have that kind of outlook? I then am supposed to turn around and say well I hope you're not going to 90% of the other movies that are made in Hollywood because they're not for you Because they're predominantly white people that is not a healthy place to be or a true place Movies should be accessible to everyone But they can also have nuance and they can also have deeper meaning for individual groups or individual You know whatever if you watch a movie about a hockey team for instance like the mighty docks or something cheesy like that There is gonna be deeper meaning for someone that plays hockey and understands how the rules of the game work This is a weird example to give but I think you see where I'm getting out with it Or books books is a great one So the Harry Potter movies I love them I didn't read the books ahead of time and I still really like the movies after reading the books the movies even felt better They had more meaning they felt more special to me because I had that deeper connection with the characters and the material Someone that hadn't seen or someone that's watched the movie but has never read the books They're gonna be missing that little bit extra But that doesn't make the movie bad and it doesn't mean the person didn't understand it or appreciate it for what it was a Good movie is able to tell a story without having to have all these little extra pieces of homework for the viewer At least that's that's how I feel about it So yeah, the movie wasn't for you That's a big one. I've been seeing lately or you didn't understand the movie. That's the other one It's rare. I think when most people don't understand a film unless it's a Christopher Nolan head trippy thing or Something like Mulholland Drive. That's more experimental and artsy It's pretty much on the nose 90% of the time So saying you didn't understand it.  He doesn't understand anything and that's where we're at It's an extreme absolute position And there's nothing you can say to it The other one that I've brought up before on my channel. This is my favorite of them Why don't you make the movie then if you're such an expert? Why don't you do it? I? Love this one so much. Yeah, okay Let's let's really unpack what you just said there Why don't you make Ant-Man and the Wasp? Quantimania a film that has a 200 million dollar budget or something ridiculous like that.  Why don't you make the movie then if you're such an expert? Do should I say that to you? Anytime you have a hard time Appreciating something maybe you go to a restaurant and you order food and it's not very good tasting you say Oh, this is gross should I turn to you because I'm for some reason there along along for the journey and say Why don't you make the meal if you're such an expert? Why don't you do it? No, people don't talk like that because it's asinine This book sucked.  You see how this doesn't hold any water at all.  I type that and then I hold back hitting enter every single time. I have to show restraint I have to rise above that petty. I should really just not read any of this. That's the healthiest thing to do Is not read any of the comments But there's that part of me that's just I just hate myself I have to do it But no, I refrain from ever telling people to take a hike or to, you know, jump off a bridge or do anything like that because That that's what they're looking for. They're looking to ruffle feathers they're looking to rile me up or other people up by the Toxic comments that they give and they have to understand or I hope they understand that what they're saying is complete loony tunes It's ludicrous Why don't you go make the movie expert?  And there is appreciation there is respect and that's the thing that seems to be people seem to be not grasping with film criticism Because I see so many movies and plenty of people in my audience do as well We do have We have a knack for knowing what works and what doesn't now what works for us and others doesn't necessarily line up every time And you can see that from the critic and the review score which I'm gonna be talking about next week on the podcast I'm gonna be going over why people don't trust movie critics like they used to But for the time being on this conversation There's a rubric I use when I when I watch movies and it's not like I'm there to analyze my first jobs Just go to the movie and have a good time and try to see where the film is coming from See if I'm engaged at the end of it if it's working if it's firing or if it's just kind of towing the line or terrible and then I try my best to give a reaction and a review That I think fits the quality of the film not even necessarily my own personal beefs or issues with it But like a well-rounded review so hey, I didn't like this because X but However, I can see someone liking it because of why or Z and I also like this part of it So it kind of cancels out. You know what I'm saying. It's not just that this is the worst movie in the world every time This is the greatest movie in the world every time unless I'm using it as a joke in which case I'll make that clear But there's this personal attachment that the people feel so offended When you say that something sucks and you give actual reasons why you believe that It's just in one ear and out the other to them.   My my real job is I'm a front-end developer and web designer Everybody has opinions on everything We have experts in the field for a reason people that have an eye for things people that have an ear for things People have a hand at design for things and so I do visual design for websites for apps things like that and Every single time I put out a design There's a comment or a critique whether it's in-house or from someone outside a third party or the client that we're working for Might say I don't like that color I don't like how this works and then it's my job to both listen and also push back and say the reasons why I made the decision I made and that's the piece.  It's a lot more civil And so when I get a critique about a design, hey, this doesn't work. Why'd you think this would I will tell them? Well, the reason I put this here is because the eye reads from right to left So I wanted to lead them to this area so that they could make a decision about how to proceed next on this website And it's the same way I approach movie reviews Yeah, I didn't like this movie because the way it started the way it ended did not line up well for me The tone of the movie did not match from where it started or the acting felt Disingenuous it didn't feel it didn't feel intact all the way through it felt You know disconnected from the plot and that's the kind of stuff that I look for and for most people that only see a couple movies a year That's going to trigger them Because the black anine or fast the furious 10 or ant-man in the wasp that was one of three movies they saw in theaters and So they had a great time they spent like 30 or 40 bucks to go to this movie with a couple of their kids 50 bucks 60 bucks. It's expensive now So they are not gonna go into this movie feeling like they wasted their money and their time And they're gonna let the person have it online who's giving them these criticisms The other thing that the last thing that I think is so funny is Well when I post one of these shorter reviews and they do show up on a person's phone or on their computer And they're you know They're quickly swiping through them and they stop on mine where I'm reviewing the blackening for instance and I say I didn't care for the movie that much They then put in the comments don't listen to this jackass or this this movie wasn't for this guy. I Didn't ask you to watch this review. I Could just as well say this review wasn't for you and my Criticism would be far more correct Because this person didn't actually want to hear what someone else had to say about the movie They just wanted to hear this movie. It was great. I loved it.  Why not just swipe past and be like, oh, yeah, this guy doesn't agree I don't care to hear from him. This movie wasn't for him. Keep it in your head. I Don't get it. I truly don't But I also don't comment on things Online in a negative manner. I Usually don't comment at all and if I do it's hey, this was great or keep it up or this movie looks promising Or this movie looks bad if it's a bad movie trailer I might once in a while say that usually I don't but I don't directly go to the director and say hey your movie sucks You shouldn't make movies anymore You don't understand how to make movies. That's insane and I know a lot of people do that too That's what Twitter is for right to harass celebrities and actors and directors.  We live in a weird world Anyway, that that's the thought that came to me this week Movies are coming out people see them and then they for some reason take everything personally when there's a different opinion about them I'd love to know if you run into this in your real world I know the online world has become almost as real as everything else now So maybe you live online in which case you probably have come across this have you got in debates with people? About said movies and it felt like it turned into a more personal attack than anything else If you're on YouTube these go alive Monday night So please join me there live and we can talk about this in the chat or you can put a comment in the comment Underneath the video. Let me know some of your experiences This goes up earlier on Spotify and Apple music or Apple podcast, whatever it's called at 9 a.m So you get a little earlier on on the Audio side of things, but then you get to see my beautiful face with this dressy park shirt That's ill-fitting now does it doesn't work at all probably gonna have to lose it and get a new one Anyway, yeah, that's the that's the concept. That's the idea. Let me know your thoughts. Please share the podcast around It's still in its infancy. We're only nine or ten episodes deep. So we got a long way to go hopefully you're enjoying it and I will I will catch you next time.