Coming up on DTNS good news and bad news for Xbox fans how computer vision 5g and Starlink might make your cotton t-shirts cheaper and Lamar gives us the lowdown on whether Instagram reels is for everyone This is the daily tech news for Tuesday August 11th 2020 in Los Angeles. I'm Tom Merritt and from studio Redwood I'm Sarah Lane also in Los Angeles. I'm Lamar Wilson Not the shows but and I'm the shows producer Roger Chang. Are you sure? Yes, I am You are Hey, we were just talking about pie and cake and claim jumper and all kinds of good stuff on good day internet If you want in on that fun, you got to become a member and get your patreon on at patreon.com Slice DTNS. Let's start with a few tech things you should know Well, we were off by just one day a tease from Nvidia on Monday implied that an announcement would come on August 31st But Tuesday Nvidia announced an event at 12 p.m. Eastern Time September 1st Expect a new line of g-force video cards likely the RT yx 3000 series and a successor to the RTX 2080 Dell announced a new latitude 7410 Chromebook enterprise that can be configured as a tool one it comes with a 10th generation Intel Core i7 processor and up to 16 gigs of DDR4 RAM now Dell promises up to 21 hours of battery life no pricing or available Vability yet got a lot of products today feels like CES TCL announced a new line of mid-range five and six series 4k TVs They run the Roku OS support HDR 10 Dolby vision and HLG The 50 inch 5 series starts at $400 with a QLED screen and a 60 Hertz refresh rate And the six series adds mini LED backlighting to the QLD ED screens starting with a 55 inch for $900 that's such a good price. I know I know you gotta be in that Roku University More product announcements Xiaomi announced the Mi 10 ultra phone with 120 X hybrid zoom 50 watt wireless charging 120 watt wireless watt wired charging rather the 6.67 inch OLED phone starts at 5299 one which is about 760 US dollars for 8 gigabytes of RAM in black silver and transparent Xiaomi also announced a 55 inch transparent TV the Mi TV looks OLED at transparent edition Similar to previous TVs from Samsung and LG. It looks like a piece of glass when it's turned off It cost 9991 or about 7200 US dollars and coming to China on August 16th buying it So remember how it looked like Twitter had launched the option to limit replies to tweets But then Twitter said it hadn't well now it's officially launched Look for a globe icon at the bottom of your tweet to limit who can't reply. Oh good the in real and Real light mixed reality glasses are available now in Korea KO R. Yeah for 699,000 won That's around 586 dollars US also bundled with a galaxy note 20 or LG velvet for a little more the real The and real glasses look like sunglasses and connect by a wire to your phone for computing That's why they're doing the bundles the glasses come with various nose clips a corrective lens insert And a VR cover to block out light and make for a clearer picture and real promises support for Chrome Facebook and Instagram among others at launch you can pre-order now with store arrival coming August 21st Google announced a new category of apps coming to Android Auto starting with a Google Calendar app other new Categories coming soon for third-party apps include parking like spot hero more EV charging options like a charge point and more Navigation beyond Google Maps and Waze including at Sygic There's also an actual settings app that will run on the dashboard and give you a little bit more control of what you're doing Calendar and settings are coming over the next month with third-party apps coming in beta by the end of the year San Francisco. Oh, sorry bit much my lip What did San Francisco ever do to you Bite your lip something bad San Francisco Superior Court Judge Ethan Shulman issued a preliminary injunction ordering Uber and Lyft to classify their California drivers as employees Now the judge ruled that drivers do not perform work outside the usual course of Uber and Lyft business business Wanting out drivers on central not 10 Tengen what's that word? Okay, I've never used that before to the business the injunction as stayed for 10 days to allow for both companies to appeal Which they will yeah, they definitely will bite your tongue. I Don't want you. It really hurt not again. No And news we've been keeping you up to date on vaccines Even though it's a little bit outside of technology and you may have heard Russia announced It has registered a SARS-CoV-2 vaccine from Gamalaya Institute That has not yet entered phase 3 trials if you're like wait a minute I didn't hear you mentioned this before It will be administered to volunteers outside of clinical trials phase 3 trials as you recall are the last stage before Approval and that phase is used to ensure safety and effectiveness There are five vaccines for SARS-CoV-2 in phase 3 trials right now one from AstraZeneca and Oxford University That's on track if all goes well to gain approval in October Vaccines both from Moderna and BioNTech Pfizer and Shanghai Fosin could see approval as early as November So the Russian one is not approved after a phase 3 trial It's the government saying we're gonna let volunteers take it after the phase 2 trial Which some people say may or may not be dangerous. So there you go. All right, let's talk a little bit about Xbox Yeah, so the good news first Xbox Game Pass Ultimate subscribers with an Android device can start playing games streaming from the cloud as part of project xCloud beta That started Tuesday You use the beta of the game pass app not the project xCloud preview app as that one goes away September 11th now the beta launches with about 30 titles of the expected 100 that eventually be there at launch Project xCloud officially launches on September 15th. Now, that's the good news Also, good news. Hold on Microsoft said in a blog post that it will launch the Xbox Series X in November. So now we have kind of a almost date But here's the bad news The official Halo account tweeted that Halo if an it's release date will be shifted to 2021 due to multiple factors Including lockdowns caused by the virus now Halo infinite was supposed to be included at the launch of the Xbox Series X That is Unfortunate news. I mean, we obviously wanted to have a launch game with the console and you know and PC, but I Rather them kind of get the game, right Yeah, yeah, I mean, yeah, we were talking about that before the show too Like they they went out of their way to say one of the factors was the lockdown and and and the pandemic So it's out of like there were probably some other things that they wanted to fix as well, which might have led to this being delayed anyway Yeah, there was a lot of blowback from the the demo they showed a couple few weeks back and so They could have been a factor and I'm also mentioned in a pre show I could have you know, like people are also working from home We don't know how powerful the computers are how long it takes to get things on it Just could just be delayed and it's like hey take your time We have a bunch of games coming out in the next few months Like I don't know if I would have jumped on Halo day one anyway with all the all the crazy triple-a games coming out So I'm like take your time. We ain't going nowhere unless we let's let's we do go somewhere I mean, it's not great. Halo. Halo is a popular title for for an Xbox launch So they're not loving having to delay it But yeah, and it'll be interesting to see what the response is to to the project X cloud beta Which is you know has been favorably compared to stadia, wouldn't you say? Yeah, I would say and I was in the first beta. I'm this just kind of dropped today So I had a chance to play with the the one today. I gotta say and again, this is on an Android phone I was running on Wi-Fi to be to you know be clear seamless I was playing Gears for I believe it was Or whatever the latest gears was and trying that out There's a couple hiccups, you know, but again for playing on my phone that was pretty pretty seamless I I think this The comparison of this being like the Netflix of games is very apt The why stadia didn't do this is why they're not getting the kind of positive Coverage that they're getting I'm not to say that stadia is bad because it's not I've tried it I also have tried it on mobile. It's a good service. It works really well But it's the model of how you get the games is the problem. Yeah, you don't have to think about it with xCloud It's just there, right? It's just there. Yeah, yeah Well, Google announced the Android earthquake alerts system something you would want to know is there an attempt to use phone accelerometers to detect and then alert people of Earthquakes it's similar to an app called my shake from the University of California at Berkeley that detects P waves from Earthquakes early and then can warn users before the damaging s-wave shocks reach them at least in some cases Usually it's only a minute or so of heads up warning But sometimes that is plenty the Google system would not rely on users installing apps though because it would be built into Android itself The company is working with California's shake alert system. It's the same one underpinning my shake To combine accelerometer data with seismometers for better predictions and alerts Pardon me. The feature will come through Google Play services update and beyond for anybody with location services on Proactive alerts will launch first in California and come to other areas over time. Yeah, it strikes me how similar this is to the Exposure notification system that Google and Apple worked on together, which is you can have an app But people have to go and install the app make it part of the operating system Yeah, suddenly you're gonna get a lot more data in the system a lot more accelerometers contributing stuff here And of course being in California where we have earthquakes frequently This is this is pertinent to us in particular, but there are a lot of earthquake Regions around the world Peru, Japan and more and you need to have The back end for this to work right that you needed to have the system that we have in California that has actual seismometers out There so it can take the accelerometer data and pool it with the actual seismometer data for it to work That's why it's launching first in California But once you can get those kinds of systems up and running elsewhere or integrate into the existing ones like they have in Japan For instance, I think we'll see this in more places Men it's not a lot but man if it's enough to get you, you know out of into a doorway or under a desk or whatever you need to Do that's good. Yeah, could wrap up what I'm doing in the bathroom, you know, right save them Right if I'm sitting there or not, you know, but I might be When you got in there, but yeah, no, it's it's a lot of people in like a minute I mean, we need like an hour to like drive away or something.  I'm made it to save your life for sure. Yeah All right, let's shift gears from from saving lives to annoying podcasters whole different situation Equire says amazon music and audible have sent emails to podcasters asking them to submit their shows to a new catalog of podcasts That will be added to both services. That's good news for all of us, right? Yeah, sure Yeah, one more place to, you know get discovered The email that they sent to podcasters said first of all that the information was confidential, which That's one of my pet peeves is somebody says under embargo, and I'm like, I never agreed to the embargo Like you can't just say I'm going to give you all this information But hey, it's confidential, which is why it leaked out It also invited podcasters to submit their show in advance of the launch of the service Podcasters who clicked through to submit their own show found a license agreement totally normal And you're gonna have a license agreement and some eagle eyed podcasters noticed that the license agreement said quote Your content may not include advertising or messages that disparage or are directed against amazon or any service So I ever I mean Any amazon service? Yeah I I I don't remember getting this email, but you know, there may have been I don't know. Maybe it's, you know, podcasters associated with Yeah, I got like 12 of them Because I do that many podcasts Uh and right or who knows maybe I did and I just haven't seen it yet But you know the the whole thing of you can't disparage amazon That's a little silly, but if it were me I'd be like, well, okay, but I don't So that's fine. But yet then you get into some gray areas like on here on this show What if we were covering a story? Where it was amazon amazon against another company and it was reported as news But amazon decided to take issue with the way that it was reported like there It's just a strange thing to to tell people We really want you to be part of, you know, our new podcast universe, but with some serious restrictions Yeah, they need to be agnostic just like apple and and google and spotify all of them are and just Yeah, unless they're gonna pay you You know, you get you get to be part of a premium tier where you get some ad sharing I can see this kind of thing in there and then it's up to your judgment where you want to be part of that or not That's still that's still like, you know, a weird situation But at least you're getting something for it But just to to Blake you tell you you can't talk bad about them. It's is uh, it's really silly I maybe I shouldn't have said I got these emails because it was required of me to be confidential Uh, but I did I didn't click through on them because we have a cast and it said in the email You know, if you have a platform, you're a part of your platform will take care of it So I I pinged a cast I was like, hey you gone this they're like, yeah, we're on and it's fine And so I didn't think twice about it Which is why I never read the terms of service, which is why I didn't see this I don't think amazon is really trying to trick podcasters into never saying anything negative about them No news service. No this show particularly would not submit to those terms. Absolutely not We are free to say whatever evaluative statements we want to say about anybody It that is not something we would ever agree to and even non-new shows wouldn't because they don't want to get caught Like sarah was saying like, well, we don't really like what you said Even if it wasn't disparaging we're gonna say it is this was boilerplate Stuff that was put in a terms of service without thinking and uh, I fully expect and the Amazon will take it out immediately, right amazon I actually do have an amazon affiliate links that can we not say anything bad about them just You know, I love you amazon Anyway, let's talk about google Google has wrote out a new feature for search in india that lets anyone create a virtual visiting card What you might call a calling card or business card now google calls them people cards When you sign it to google you search for your name or add me to search and look for the prompt add yourself to google search You'll be asked to verify a phone number that you can get from Where you can write a description of yourself and other information like links to websites and social media phone number address work Education details email address all optional now your picture is a is your google account picture But you can change it if you want now each account can only Create one card and cards can be reported for things like spam or impersonation You can delete your own card at any time People cards is now available in india in english on mobile Yeah, so I I uh took a little trip through my vpn to Mumbai uh and tried this out Uh, you can only do it on mobile. You can only do it on your phone, but it was easy I I searched add me to search Uh, and it popped right up like oh, would you would you like to add yourself to search? Here you go. Click click click. It required me to verify my phone number It sent me a code because I said, oh, yeah, this is my phone number. It sent me the code I entered the code. It's like, okay, great I didn't end up creating the people card because it failed at the end I think it may have failed because it knew I was on vpn somehow at the at the verification stage But it was really easy to fill out and it had a a lot of information you could choose to add uh home experience work experience Uh address phone number if you're a business. I think this would be really good for you Uh, it's sometimes being described as maybe a competitor for LinkedIn Uh, I think it's for people who are like, yeah, LinkedIn's too much. I just want to have, you know, I'm a consultant Uh, or I'm a freelancer. I'm a small business. I just want to have my information out there Here's an easy way for me to get it out there I'm I wonder how much it really helps because if people aren't searching for you anyway Uh, this isn't going to solve that But if they are and it's kind of like, you know, I've done this before where There's a person and I'm I'm just kind of verifying. Oh, is this the lawyer person with this name? Or is it some other person, you know, it and kind of do a google search and just sort of see what comes up If something that was specifically About the person in question and there was some information because maybe I did want a phone number, you know, or an address or A peel box or or more information about that person's website then I can see this being a Quick search you're already in google anyway. And yeah, you mentioned LinkedIn I mean, LinkedIn works really well for people who use the platform But it requires some upkeep and there's a lot of social interaction and and it's it's also Not just in search where you were already Yeah, I think I think it's interesting and I'm curious, uh, how it does in india, uh, how it takes off It, you know, this this is a thing that apparently according to google anyway, people have been requesting and people have been asking for so Uh, any indian listeners out there? Let us know if you try this out. Uh, how it works for you I love it when new features are introduced like people have been wanting this. Okay. That's why we made it John Deere subsidiary blue river technology published a post friday about its sea and spray computer vision product The software uses a database of plant imagery to train a computer vision system on the open source pie torch machine Learning platform to identify weeds between crops and only spray those with herbicide This could reduce the amount of herbicide used by up to 90 And also keep unwanted chemicals off the crops that we end up eating The system is aimed for use in cotton and soybeans Protocol.com spoke with blue rivers director of computer vision chris padwick about the project So if you'd like to read more that would be a good place to go Padwick mentions they use invidia cards in the tractors through Eventual 5g or star link rollout could make a cloud system possible as well That would allow for more power and faster updates to the model. Yeah, this is a fascinating read folks If you're one of those people who've been like, what's 5g gonna do for me? Uh, it could make your t-shirt cheaper It could make your tofu cheaper This this is really interesting the use of invidia cards in the tractors the speculation That they had with padwick about like, well, could you do a cloud service? And he just he sort of entertained it He's like, well, you know star I'm really interested in star link because that could give us some rural connectivity 5g might be there But it's gonna take a while for it to get out in the rural areas that we needed to But he's like once we did have cloud system Then yeah, we could we could actually do a lot more data collection He was more excited about the data collection than then powering the actual tractors in the cloud because You could do real-time collection and and updating as conditions change and and stuff The it was also the other interesting thing in this article was How computer vision had a challenge In training Because we're really good at telling a cat from a dog and being able to label stuff for a machine learning algorithm to be like That's a cat. That's a dog It takes specialists to be able to tell velvet leaf from soybean, right? Like I most people won't be able to look at it and tell you which is which so you need agronomists You need people who know this easily to be able to at scale go and label this stuff for computer vision So if you want some good examples of you know, what is AI quote-unquote writ large good for this is a great example You said it all man I try Hey folks, if you want to get all the tech headlines each day in about five minutes be sure to subscribe dailytechheadlines.com While tiktok is under the gun from the indian and us governments and as of today the french who have started a data handling probe of tiktok instagram reels is out there hoping to steal tiktok's thunder and It may be working business insider reports It has talked to people who claim to have sold enough fake views on reels To pay for quote a good car and a decent home. They didn't say where but still that's a lot Well, we don't condone using a botnet to pump up your view count on any platform The arrival and success of scammers is certainly one sign that a platform is viable Like if you can make money selling fake views to people there must be people who are valuing that platform However, is it good for law by people as well? Lamar, you've been trying it out since the launch on august 5th What do you think are real so far?  Uh, it is a knockoff tiktok Uh, however for someone like me who had had a didn't really have a big tiktok showing or or or viewership You know, I just I never promoted it to have something like that in my instagram We was already with viewers it it took off. I've done. See it came out with six days ago I've done 11 so far and some of it is Uh are things I put on tiktok But some of it has been original content thing, you know, little memes of things that come up with and I've been having a ball I've been having a ball and you know Like almost all of them are getting 50 000 views or higher in it and it's it's not some for me It's not so much the views it's getting a new audience that had no idea who I was before To to to see to see what I do. So it's been it I look at reels as a Silly side of instagram as if instagram wasn't already silly So so it's just a sillier side that you know, none of that content means anything. You just throw it up to be funny Um, and then and then you got the other parts that want to be more serious with ig tv I can uh, or you know over just or stories if I want to vlog So it's to me. It's completed the app and I know instagram is literally ripped off from everyone from snapchat from youtube to to to now tiktok, but It's worked. I I think it's going to be a success You know, it's not going to be a tiktok replacement right now unless they close then it's the closest thing to it But but uh, it's great. I'm having so much fun with it right now You know every time instagram well at this point I don't actually feel that way anymore But it used to be that when instagram would rip off something super blatantly snapchat great example I was like no, yeah This is so stupid. Like how do they sleep at night? You know, there's already this they ripped off every single feature It even looks the same. I'm not using this. I already have a network for this. Well, I was I was off and alone and those thoughts because people are like well No, I I don't care about that other service that I wasn't using anyway But I like what I'm seeing in instagram now and I was already here I mean people like to hang out in one app and do a lot of things they do and that you know that I I'm sort of changing my tune now because I I feel the same way where I make but tiktok I love so much and that's it's an own thing instagram is a very different place to me You know, it's a lot more sort of beauty shots and life is so great But it like you mentioned the silly aspect of it And I mean there's plenty of silly stuff on instagram But introducing more of that and allowing people to be creative in ways that it was never really known for It's it's an interesting concept and I wonder how many people will adopt it I I think Lamar one of the things that you mentioned and sir You kind of back this up is that the advantage instagram has and it's an interesting thing because facebook the parent company of instagram doesn't seem to be able to do this But instagram does is take an imitation and work it into their existing User base so that people adopt it stories didn't torpedo snapchat Uh, it just got a bunch of people who might not have ever used snapchat to start using snapchat like functionality And what that's what you're describing is not that you never use tiktok But you're like man, I'd have to work really hard to build up an audience on tiktok I already have an audience on instagram so reels makes sense because I can just use it Yeah, and I know I know youtube is going to try to do their own thing but that's I don't you too was like Like your granddad, you know like, you know For them to try to come up with a service like that is like meh because they have stories They they they they have stories there and uh, I just I I know no one uses it Well, I think that's a good question that some people may have what is the difference between A story on instagram, which is essentially snapchat, right? It's a short video and reels, which is also a short video Well, it goes uh stories are are uh go away after 24 hours Yeah, yeah, I'll try to come up with the word. Thank you. They're ephemeral. So which I wish tweets were but that's another story So but yeah, so they go they go away And reels are very loopy. They're designed to be edited differently and they stay honest until you delete them Which most people I don't think they're going to delete them So right and it's but it's more me me stuff. Um, it's very me as in meme like things And that I mean tiktok has been so successful just with getting people to we're all going to do something funny to the same song And it's going to be like millions of people doing this and there's like a really fun community aspect of it That even though I'm totally an observer. I've never made one tiktok anything Um, I I I really enjoy that stuff and instagram Has a huge user base and so even if a small portion of especially some of the creators with larger audiences Get ahold of this then yeah, it wouldn't make sense to to move over to tiktok unless you were already really really popular there Really? I got that Yeah, make sure a challenge to you sir. Uh by the end of this week.  All right Challenge accepted lamar. All right And the challenge to the rest of the audience is to find the one real I made You may want I did I did nobody nobody's nobody's seen it So you could be the first go check it out. Hey, uh, thanks to everybody who participates in our subreddit folks Submit your stories and vote on them at daily tech news show reddit.com. I just told sarah's read so now she can have mine Uh tom I would wait for you to tell me to check out the mail bag. But you know what I'm just going to do it on my own Regarding mail malls rather, uh, this is from rick in kingwood, texas Regarding malls and the story about amazon possibly taking over anchor stores to be warehouses. We talked about this yesterday Anchor stores can veto changes says rick and many of the leases to non anchor tenants Those are the the smaller stores kind of in the middle of the mall have clauses that lower their rent When anchor store traffic goes down or leaves altogether And houston the san jis into a mall redevelopment was held up for years because the anchor stores wouldn't agree to changes that the mall owner Wanted to implement if the empty anchor stores become distribution centers Then they don't bring any retail traffic to the mall possibly triggering the other tenants rent reduction or even closure Yeah, and so rick's expected maybe uh, simon mall the the folks that we talked about wanting to possibly, uh, you know, give Give tenancy to amazon for distribution centers Could be using that as as a way to put pressure on other anchor stores to say well We could we could just hand your contract over to somebody else the san jis into a mall. I looked into it Those anchor stores had long term restrictive contracts and uh, I think that was probably a lesson for a lot of mall owners too Not to give long term restrictive contracts to people So I I wonder how many other malls would have to get an anchor tenant to agree to sell its contract To amazon in order to hand this over because that that's what doomed that mall in houston Real quick. You we say anchor you mean like mcglummery ward or jc pennies. Yeah jc pennies sears I'm so sorry mcglummery ward. They do not Sticks barren fuller. Yeah the Emporium Hey, shout out to patrons at our master and grandmaster levels including tony glass jeffry zilx and steve aya dorolla Also, thanks to lamar wilson for being with us today. Oh, we's a pleasure. Can't wait to see all your reels What else you got going on? Yeah, so uh, yeah, i'm doing a lot of content on uh on reels as you as you mentioned i g tv But uh, i'm also supporting some of the i g tv content over to youtube So you can check it out on youtube.com slash lamar wilson right now I got a reaction series going on where I actually literally just reacted to them. Hey, little infinite thing and yesterday Uh, why she's not on youtube yet, but like tomorrow to be on youtube I'm gonna react to a three hundred dollar toaster and why that exists That's uh pray see to see a smart a smart toaster with a screen on it Yeah, why is that why does that exist? So check me out on yeah on my youtube appreciate it youtube.com slash lamar wilson There's two r's in all the best names including lamar at youtube.com slash lamar wilson Hey folks, uh, we are in the process of putting some new stuff in the store So you might want to go keep an eye out over there. We've got hoodies We got hats. We've got mugs. We've got masks. It's all there It's got a dts logo on it and you could be like zoe brings bacon And just cover yourself in dts logos. Go check it out daily tech news show dot com slash store And if you've got an email that you're just waiting to write us Now's the time feedback at daily tech news show dot com. We're live money through friday 4 30 p.m. Eastern. That's 2030 utc And you can find out more at daily tech news show dot com slash live back tomorrow with scott johnson. Dr Then This show is part of the frog pants network get more at frog pants dot com I hope you have enjoyed this brover


Welcome folks. This is Tom O'Brien of TFNN. We go 5 days a week, we go 7 hours a day, we go 24 hours a day on the internet at TFNN.com. Always remember folks, what if you think about you, bring about whatever you focus on, Garou, so everyone's having a great day, safe day. Today, folks, was Dave White's birthday. So we want to say happy birthday, Dave.  Don't take anything personally. Your truth is personal to you. Your own opinions and point of view reflect your own agreements and their personal to you. It's no one's truth but yours. Mockin' the wise. Let's take a look at it out here. We have the Dow Industries down eight NASDAQ up 90 S&Ps up 14. Gold. Gold contract up $10.90 trading at 2,053 an ounce. We have silver up 23 cents. $22.87 an ounce. Late sweet crew down 49 cents. $78.05 a barrel notes and bonds. A 10-year note. Up four ticks. Trading $109.30. The third year up 16 ticks at $109.08 in Kingdoll. Kingdoll is up $176.104, $143. Euro right now, $108.00. The end is trading $149.00. British pound is at $126.00 to $1.00 at U.S. dollar. Our phone number is<PHONE_NUMBER>. Give us a call, folks. We'll know what's going on in your world and the world of the S&Ps. Let's take a look at them. Well, we might as well go right into the futures because what's happening with the futures, folks, is that I expect they're going to run it right into the close again. The reason I'm saying that when I show you this, take a look at this. So we've had a load today of 5,060. The high of 5105. The 5105, if you see this bar, that's a high-volume bar. Bottom line, you get a high-volume bar and wants to get tested. So I suspect we just did a .382 from the last load that was generated out here. We did a .382. You get an hour to run into the highs. And you got winder dressing happening. We go over to the spy. We take a look at the spy. We have with the spy out here. Yeah, we'll have some volume here. You're right next to the high. Bottom line, let's see. That high had $63 million. You're not going to do 63 million, but we're not at the high yet. We're going to do probably about 55. You're at 41 right now. I don't think it's going to give it up either. We take a look at the cues. The cues got some juice in it today. And you get volume. We already have as much volume as we had yesterday, $33 million. $31 million, rather. The cues are up $3 right now. They're going right after that high. And they're going to have about the same volume as that high had. So we'll see. I don't think we're going to. No, we're not going to take that high out today. But bottom line is that you're going to get a nice setup happening that you can blow it away again, which is pretty wild. Gold. Now, what we have is this. We have volume on gold and we have price on gold. So we take a look at the gold contract out here. We've got an expansion of volume, $212,000 contracts, which we needed. And bottom line, it's taking out this last consolidation. So what we do have, nice. We've got a small ABC up. Oh, man, I wish I could see. I'll get that number at the break, folks. What that A to B is, I've got to get these screens closer to me. I've got to do something. So what has happened is that my eyes that I'm blind in, I'm really blind in now. My left eye.  Anyway, it's not the end of the world. But gold wants higher price. Now, that being said, we go over to the dollar, this dollar, man. Each and every time it tries to go into that lower range. It says, see ya. Don't want to be a, we take a look at this and you're going to see it right down to it again today. And I said, nope, I'm not staying there. 103, 650. We're trading at 104, 137. I think that's intriguing is that the S&Ps are still up. And that's kind of quite a move out there, you know, notes and bonds. We take a look at the note and bond market, you know, the CPI out here, this one, the PCE, deflation, deflator market, you know, bottom line, shook it off and said, okay, I like it. Now, the 10-year, this is dicey, man. The 10-year only is 550,000 contracts. That's not good. It's rejected lower price again. We hit 109, 16. But that volume's got to go up dramatically, man. I mean, you're talking dramatically. I mean, it's very unusual that the 10-year only does 550,000. Oh, hold on one second. I know what's going on. One second. I got to do, I got to do TYA. That's what I got to do. One second. We must be rolling right now. Let me see this. Yeah, yeah, yeah, yeah, yeah. Okay. See, that's still bringing up TYM. No, no, I guess we're not. I thought we were rolling. We probably are rolling, though, and I just can't, I'm just not bringing up the right symbol at this particular point. We take a look at the small caps. Let's go over to the small caps here. Look at these small caps. Oh, look at this. That's interesting, man. The small caps are actually leading. Look at this. Yeah, these small caps want to bust out, man. You're up $1.20. IWM we're looking at right now. We can get it at $203. And you get volume behind the move. This is quite a setup, man. Let me see what else is. They got a long way to go. That's for sure. But this is a decent setup. Yeah. Okay, so now the small caps are going to start running. They are. Because if you have here, folks, this is a huge consolidation, man. This is a consolidation. They goes back. What do I get this on a monthly? Oh my God. He's talking about years, but years in it. 20, 20, 2022. You get a two year consolidation. You break out a two year consolidation, man. You are going to have some high numbers coming at you. No doubt. Silver. Let's go take a look at the silver market out here. Yeah, $54,000 contract, not bad. Silver wants higher price. You know, we'll see how that shakes out. That dollar, though, you got to be careful, you know, in general. Today's very unique that we do have that dollar rejecting lower price and the S&Ps are still staying strong. I suspect what you have here, though, we're walking right at the window dressing, you know, bottom line. You get the 29th, March, 1, 2, 3, bottom line. The way this market's running, there's going to be a lot of buying. Stay right there, folks. Come right back.


Howdy how's it going? My name's Davy Chappy and I've made and helped make a lot of characters in D&D to the point where I eventually got so tired of doing it over and over again that I made a handy little YouTube channel to help answer all the burning questions that I didn't have to. But something I've missed in my efforts to cover everything that D&D has to offer is the most basic of things. How do you make a character for the first time if you've never done it before? Well, slip on that tabletop because we're gonna be going over how to make a character from a mechanical point of view. And if you want a video talking about how to craft a story for your character then I recommend watching my backstory guide right after this video. And real quick, I want to give a shout out to my new patrons this month. David Martenskyu, the spread prism, Senpai Gotzuma, Jesse Powell, Zachary Cheney, Andrew Dion Villafana, Kobe Gordon, Mr. Mann, the man in the pinstripe suit. And Julie, thank you so much for continuing to give me money even in these trying times. Know that the next time that you see me at a convention buying an overpriced board game, that was you. But wait, there is another name that must be called. Another challenger that approaches the early video announcements of CHAP. Why? It's Stibbles Codex of Companions. That's right, your favorite advertisement is back to tell you that you are not alone. Isolation is not eternal. There is another way with Stibbles Codex of Companions.  And that's not all. When you buy Stibbles Codex of Companions, you gain access to new spells, feats, and companion loyalty mechanics tailored to fit in with your new battle buddy. And for those of you fashion is the end game purists out there, Stibbles Codex of Companions comes with its own personality generators for your little fluff so that you can get the role playing experience that you deserve. So click that link down in the description below and pledge yourself to the Kickstarter for Stibbles Codex of Companions. Big gnome, tiny shorts. But without a way, let's begin. So making a character in D&D comes down to three fundamental features.  Your race dictates what kind of boning happened to make you and may influence the way that you're treated within the D&D world.  And your background is a largely story based choice that gives minor perks to show off the sort of upbringing that your character found themselves in. Making a character usually goes in that order. Race, class, and background just for simplicity's sake. Picking your race is probably the easiest thing. You just pick whatever you think is the sexiest and then you write down their traits. These include their age and alignment, which don't matter. Their ability score improvement, which you'll want to make note of and save for later. Their size and speed, which is almost exclusively going to be medium and 30 feet. And then a few features that represent what your character is capable of within the game. You might also have your choice of sub-race, which will give you more features. But as long as you keep your features in mind, it's very rare that your race will give you anything throughout the game. So for all intents and purposes, you're good on your race. Now when choosing your class, you've got 12 main choices. Plus one if you buy an expansion book. And they can be split up into magic and non-magic. You'll find that most classes start out with magic, and even those that don't start with it can usually get it later on.  Once you've picked your class based on who has the best character artwork, the next thing you're going to want to fill out are your ability scores. You've got six of them to represent your overall skill at doing things. And if you look at your class's quick build section, it'll tell you which stat your class specializes in. When in doubt, dexterity and constitution help you not get hit and then survive longer when you do get hit. So these are always the best choices after your main stat. Now there are a lot of ways to assign points to each stat. And every DM does it differently, so I won't confuse you by throwing out how I do it. You should just ask your DM and they'll be sure to tell you. Just remember to add those ability score bonuses that your race gives and you'll be fine and dandy. Next, you're going to want to look at this table. As daunting as it looks, this table isn't that bad. It just tells you what your character gets and at what level. You've got your proficiency bonus, which you'll add to your rolls whenever you roll something that your character knows how to use, your features, which we'll get into in a bit, and your spells if your character happens to have them. If your character does use spells, then you should have been given another piece of paper that looks like this. If not, ask your DM and we can go over spells at the end of this video. The table might also have some other things that are specific to that class's abilities, but for now, you don't have to worry about that. Just make note of it on your sheet, probably here, and move on for now. The table is just a quick reference that'll make more sense once you read your features. The next thing you're going to want to look at are hit points, proficiencies, and equipment. Hit points are easy. Just follow the hit points at first level and move on. For proficiencies, you just want to write down what your character knows how to use right here and make sure that you make a note of saving throws and choose the skills that you think you'd enjoy having your character know. Being proficient in all these things means that your character understands how to use them properly and so you'll add your proficiency bonus whenever you make roles involving these things. Finally, you want to select your equipment. Now, what people don't realize right away is that this section is really just asking you what kind of fighter you want to be. Do you want a weapon and a shield or two weapons? Do you want a bow and arrow? Sounds good. Just pick what you like because there aren't really any wrong answers here, but just make sure to write down your weapon attacks so that you don't forget them. Also, all of the packs are filled with like a million different starter items grouped together in a theme. Technically, you should care about them, but I've never had a problem with just buying things that I might want in a store so you can really just write down your pack and make a note to check what's inside of it later. Finally, the last thing that every character needs to worry about are their features. Just like racial features, these class features are additional abilities that your class has that make them stand out from all the other classes. Every feature is different and you should write them down to remember them because they're almost always important to keep in mind. As you gain levels, you'll get more features that just further differentiate you from the other classes, and once you get your archetype at first, second or third level, that archetype will also give you more exclusive features that only your archetype gets. There are so many features, and all of them do different things, so I'll trust you to remember them. If you're starting at level one, this shouldn't be that hard, but if you're starting at a different level, just keep the book with you. Once you have all those features written down, you're done filling out your class, and that's most of your sheet done. The last thing that you have to do is pick out a background by comparing how tragic of a backstory it gives you, and then writing down the proficiencies and equipment that it provides. It might also come with a language, but beyond that, there isn't really anything more to do with a background. If you're not playing a spellcaster, you can just pick a name for your new character by smacking your lips together and writing down the sound that comes out, and then go plunder some dungeons.   With this, you've gotta write down a few things. If you flip to the spellcasting section of your class or your subclass, then it should tell you what your spellcasting ability score is, how to calculate your spell save DC and your spell attack mod, and it should also tell you how many spells you can prepare, and possibly of what school of magic. If it doesn't tell you any of this, then you can just check the handy-dandy reference chart, which will tell you instead, and that chart will also tell you how many spell slots your character has to cast. Keep that number in mind because that's how you can do all of your cool shit, and that is the end of making a character. I hope you enjoyed this video. Be sure to give a like, comment, subscribe, ring the bell, let me know what other mechanical explanations you want me to go over in the future, and maybe support me on Patreon so that I can one day teach an entire world to revolve around D&D. But yeah, Dabby out.


For me the most challenging thing is not being able to, I guess in a way, physically assist. When you're on the phone it can be a very hopeless feeling when you hear someone yelling or running or trying to deal with the situation and the best you can do is try and get the information you can over the phone and get someone there as a priority. I get inspired by being able to make a difference in the community, being that first point of call for a lot of people in emergency situations and also being able to support the officers on the road. I love that feeling of being able to help someone when they really need it. In a lot of the jobs I've done, whether I was being a detective or tactic crime group that sort of stuff, you could see the outcome in real time. I think it's a bit more different in that you know you've got resources going to help people. You don't realise how much of an impact that you make in the community, especially when you're behind a phone and you're not on the front line and you're not seeing everything that's happening in the community, but you definitely do hear about it and you hear a lot of the emotion through the phone. So my job is that opportunity to reach out and help people. The most important thing is to answer all questions you are asked because that's going to help us get police fire ambulance there to assist you in a timely manner.


Did you know that you are 10 times more likely to be killed in a road crash if you are not wearing your seat belt? Road safety is your future.


Ready to talk about our back. Everybody's favorite subject, right? Yes, we love our back. I have candy imported straight from Los Angeles for the best questions or whoever wants it when we're done. So I was told Laffy Taffy, atomic fireballs, and that's it. But yes, please come see me after the talk. So we're going to discuss our back. And hopefully we can have fun while talking about our friend, role-based access control. So if you want the slides now, later, you can go to this tinyurl.com. Slash rback-to-the-future. I promise it's not malware. So we're going to not really talk about what Kubernetes is. I assume we're good, right? Everybody talks about that. We'll have one slide, one second, and we'll talk about that. And why identity is so freaking important these days, right? Who you are, what you can do, what you have access to, and why we're kind of missing out on Kubernetes. There's a lot of opportunity to do this better. Then terminology, roles, cluster roles, role bindings, verbs, subjects, all these things that we made deal with every day, and they could be net new. So we're going to just cover that. And then a little bit of the off-end, off-see flow. And most importantly, some gotchas. So I've given this talk one time before, like three months ago in Norway, and since then we have a new CVE that was released last week that's super exciting along the lines of RBAC and privilege escalation, which is, well, bad and good. So let's dive in. We know what Kubernetes is. It's really, really important, or we wouldn't be here. We're running it everywhere. People access Kubernetes, and robots do too, right? Service accounts or programmatic access. And that's enough about that. So identity is the new perimeter, right? We have lots and lots of vendors downstairs talking about just-in-time access and kind of auditing access to things and zero trust. We hear this phrase thrown around a lot, but what does that mean in Kubernetes, right? And it's kind of a complicated relationship, right? Just because you have a token or a certificate or you have an IAM role or something in your cloud provider, that doesn't mean you should automatically be granted access to every single cluster and have cluster admin. So it's a very tangled web of configuration, and that's kind of why we're working on untangling it. I haven't even watched Back to the Future in probably 10 years, but I thought it sounded good. So there will be references sprinkled throughout. Hopefully you'll enjoy that. As Ben mentioned, I am the project lead for the OWASP top 10 for Kubernetes, the Open Web Application Security Project. That doesn't sound very infrastructure related, but it's getting there, right? We're starting to see developers who kind of write application code be involved in some of these decisions, and there was a real need and draw towards this project. You can see the top 10 over here and highlighted. You'll see overly permissive RBAC configurations. That's because this is a big deal, right? You've heard about this thing called cluster admin, I'm sure, and some of the built-in cluster roles and using wild cards. That's what we're going to talk about today, right? And it does make the top 10. I'd argue it's even higher, but that's where it landed when it was first created. So time will tell. Please visit the project and contribute, add comments, pull requests, et cetera. So let's talk about the flow of getting access to Kubernetes, right? And there's a number of ways we do this, but it kind of boils down to the API server. This is probably a flow you've seen before, but you can see up top we have kubectl, kubectl access. These are humans debugging things, creating pods, et cetera. We have service accounts, typically programmatic access of things from the outside or inside that need to talk, retrieve data from Kubernetes, the cluster itself, things like client go. The gist is there's a variety of ways to talk to the API server and get the job done that you need to get done. And the kind of magic happens inside of the API server, right? At first, you see, hey, is this even a valid user? Do they have the right credential to be requesting this sort of thing? And a little bit later in the talk, hopefully we get there, we're going to talk about how kind of a case study, I guess, about how AWS is EKS, kind of authentication, authorization flow works, because it's pretty wild, like if you actually deconstruct it and blow it up. And then the second step, authorization, right? That's what we're going to be focusing most of our time today, authentication, different talk, different day, different beast, right? Authorization is really what can this entity do, right? And that's a really important step in this flow. And then we have our friend, Admission Control, right? Policies that govern the request. Do we accept this type of workload to be scheduled onto the cluster itself? And then obviously, SED persistence and things being scheduled on the node. But for today, the middle box, AuthC, is really important to us. So authorization in Kubernetes can be called role-based access control, or what we would just say RBAC, right? And this is a very fine-grained configuration that you, the operator, somebody who's built the cluster, maintains the cluster, maybe in partnership with the security team, needs to scope down to limit access to service accounts, humans, et cetera. And it sounds easy in practice until you realize the different pieces that make up RBAC, right? At the end of the day, you need to access Kubernetes, right? There's some engineers somewhere, some service account, some dashboard that needs to talk to the API, do the thing it needs to do. And we have to grant that access and nothing more, right? This is our favorite term, least privilege access, right? Which is pretty hard, as we'll see throughout this journey. So within the RBAC ecosystem, we have three main components, right? And we're really just constructing a collection of these when we build an RBAC policy. It's not a single file. It's not usually a single YAML file, especially. But it's a collection of these, right? So you have users, which can be humans or machines, right? Jimmy at ksock.com or a service account that the Kubernetes dashboard, something like that. We have resources, right? There's lots of these. This is not a comprehensive list. This is what's available in that given version of Kubernetes that the API has for us to interrogate or talk to, namespaces, pods, deployments, et cetera. And then operations, right? These are pretty much like HTTP verbs that we are performing on the Kubernetes API server. So simply put, RBAC is combining these together in some logical way to give a person or machine access to the resources that it needs. So some of the terminology, maybe you've seen these. Maybe you haven't, but we have roles, cluster roles, role bindings and cluster role bindings. Sorry, there's YAML at 5.30 p.m. that you have to look at on the screen. I knew you didn't plan for that. You could be out having fun or partying. But roles really are built to give you that verb and resource connection. And they're typically tied to a namespace. There are nuances here. We're gonna keep this pretty simple. But for example sake, we have pod reader and we want to, well, this is gonna do more than read pods. So it's already gonna fail the audit. But this is a wild card or star on all resources and it's going to allow git watch and list. We don't have denies here. It's allow and that's it. And as we kind of keep going down the path, we have cluster roles, right? You see this is fairly similar. It's called a cluster role, but it's actually tied to the entire cluster. And then we bind these roles and cluster roles through the use of role bindings and cluster role bindings, right? So kind of two separate objects in Kubernetes. And we want to take Jimmy as a subject or Jimmy as part of this group or a service account. And we want to bind that entity to that role or cluster role, right? So here you see this user, Jane, is now bound to the role pod reader. That completes the loop. So now we have the ability for Jane in this example to do everything that's encompassed in that pod reader role. Great, okay, Jane can do what Jane needs to do. Similar for cluster role binding, right? I think we get the gist. You can do things scoped down to namespace, but you can also keep it cluster wide. So kind of best practice tip number one, I would probably limit the use of cluster roles and cluster role bindings, right? Your cluster has lots of namespaces in it. This encompasses the Kube system namespace. This also includes the default namespace and the Istio namespace, whatever you're running. So you automatically bring all of that in to your policy, right? So when possible, we should use roles and role bindings versus cluster roles and cluster role bindings. And Kubernetes gives us some of these out of the box. You can likely guess which one's most dangerous. And most of the time, we do a lot of audits for our back. Been doing this for a long time. And it's surprising how many folks kind of just fall back on our good friend cluster admin at the top. Have we ever used cluster admin? Yeah, you should keep your hand down, no. This is all you need to do everything possible under the sun in your Kubernetes cluster, right? It's necessary probably. It's kind of like your AWS root account. It is just wild cards or as my coworker calls it, the five star review, right? It has star, star, star, star, star. And it should be used very sparingly, if at all. And then we have admin, edit and view, each of which have their place. And these are really good getting started sort of placeholders, right? Oftentimes we wanna scope down permission. So we'll give developers edit, right? Read, write access to most objects in a namespace. That couldn't be more vague. So we also want to do better than this, right? And that's kind of what we'll dive into. The other, you know, there's a really good reference here written by some awesome folks. I love the title of it. It's an official Kubernetes doc called RBAC good practices. Cause I think we wanna get away from the term best practices potentially. That's a really good reference for some of these things to help you kind of deconstruct what's going on. What's wrong with this picture? Is this a good snippet of YAML? No, why is it not good? It sounds like the service account can do the job it needs to do though. Yeah, cluster admin, yeah. You're welcome to some candy after the talk. Yeah, so I actually didn't think this would be a packed house. I would have definitely brought more. So what's going on here? We have a cluster role binding called redacted-rbac and we have some subjects, right? What is the default? What's the default service account in the default namespace? Have we encountered this special little Kubernetes feature? Yeah, so it's a service account that there's one of them in every single namespace. It's just available. You can just use it. You can grab it from pretty much any pod that spins up unless you tell it otherwise. And this is in the default namespace which is even more sketchy and it's actually bound to what? The cluster role of cluster-admin. So imagine you're in a position where you have a web application running in the default namespace. You have mounted this service account into every pod. Remote code execution happens or somebody accesses the file system. They take that token and present it back to the Kubernetes API server. Who are they? Cluster admin, right? Like that's not a good blast radius, right? That's a pretty bad situation. And if you were at KubeCon in San Diego in 2019 we did a 90-minute workshop on some of this that we have lots and lots of documentation about this. So this is the kind of audit you need to do in your organization and Kubernetes doesn't necessarily make that easy. So we want to try to aggregate our permissions when possible. Here's some open-source tooling. You know, RBAC tool from Alceed and Rackus. We have Crane. We've built an RBAC aggregation and visualization tool that handles a lot of this for you. There's, you know, crew plugins. There's, you know, you can do Kube-CTL canine command, which is attacker's best friend. But the long, the kind of long story short is like this is pretty hard to get to the root of who has access to what, right? If a security person had this information they would be very surprised with the level of openness that is existing inside of Kubernetes. So this was a contribution to the OWASP top 10. Time check. Not too long ago that I thought, you know, it's also made it into the RBAC best practices guide. But we have to be really careful with list and watch as verbs, right? You would assume when you do kind of this Kube-CTL get secrets command, you're gonna print out a list of the secrets that are available. But under the hood, you can actually access the contents of those secrets, right? And that could be misleading. It's not really a bug in Kubernetes. It's not really a vulnerability. It's just how these verbs work. And you won't always be super clear on the output of get or specifically list and watch. So there's a longer write up in the Kubernetes best practices guide, but also the OWASP top 10 has a really detailed kind of how to do this exactly. And it's kind of eye-opening when you show people like, well, you know, I don't want to see the contents of every secret across all namespaces because I granted this one permission, right? And you can see here, this is, you know, if you see something like this, and I'll show you a CVE that kind of surfaced in sort of this vein recently with like list secrets, right? This would be something in human language when I see list and secrets, I would just want to see the names of the secrets probably. But if you run a curl command instead of kubectl or if you do dash capital A dash O YAML, you're actually gonna print the contents out even if you only have that watch or list verb. So a little misleading and it's under documented and it's one of the things that it's really, really hard to detect. So this was a recent CVE as of last week that CubeFS, which is a CNCF project, nothing against CubeFS. This is, it's not really the point here. The point is that we're starting to see this surface in CVE output, which is super interesting, right? Because I wouldn't see this as like, it's not like a zero day. This is just what CubeFS asked to do when you do helm install CubeFS into your cluster. You don't actually read the RBAC that's included probably, you should, but not many folks are out there doing a code audit of what they're installing. And this is a snippet from what CubeFS, what their daemon set needs, secrets get and list, right? Which is kind of right back to that example before. So the CubeFS daemon set running in your cluster via RBAC can access all your secrets, all the contents of your secrets. It'd be the same as doing, it'd be the same as dumping them straight from SED pretty much, which was somebody deemed it bad enough to create a CVE. So that's going to keep happening and we're gonna see more and more of this as folks audit third party sort of helm charts and open source projects that run in your cluster. You can use, that's a little hard to see, but you can detect some of this stuff, right? These are just manifests that exist as YAML, whether that's in CI or whether that's in cluster. Good start is using something like open policy agent or Kiverno or Ksock to find these, right? And you can go in and look at the manifest and look for what is this? The five star review, right? And it's basically flux, which again, not a dig to flux, but because flux needs to do a bunch of things under the hood, but at least you're aware now, right? That these wildcards exist in kind of a static analysis format in your cluster. So how do we get better, right? You can start with logs sometime, has anybody gone like API audit logs, belunking, have we looked into the audit logs that are generated a little bit here and there? Yeah, if you run an EKS, you probably have it turned on already, maybe you're not using it to its full capacity, but every request that goes into the Kubernetes API is pretty well documented in what it did and the decision that was made via RBAC, right? This can help you craft better RBAC policies. It's not gonna solve all your issues, but it's definitely a start, right? This is kind of a classic project that has stood the test of time audit to RBAC, and it basically takes your audit logs and then generates an RBAC policy that makes sense for what's actually happening in your cluster, right? That's the mentality you want to be in. Okay, I wanna watch what's going across the wire, what RBAC policies are actually being used and then I want to create RBAC that makes sense. We wanna get back to this principle of least privilege, right? So you can see here, this is actually an event that's created by the Kubernetes API server, and if you haven't seen anything that looks like this, that's fine. It's got a lot of information from a security practitioner's point of view, like who are you? What source IP did you come from? What was the response? Like I care about 503s and I wanna see when there's a spike in 503s maybe, when it happened, but for the conversation today, really it's about your username, group, and then the authorization reason, right? That line below is gold, right? Where it says RBAC allowed by role binding inventory of role inventory, et cetera, et cetera, right? This is the Kubernetes API server saying, yeah, here's the response in that second box, that authorization box, wasn't allow or deny. If you see somebody or something getting consecutive denies from an IP that you don't expect and they're trying to list secrets or get secrets in the Kube system namespace, it's potentially an anomaly, right? It's probably something your security team would care about that's happening live to your cluster, right? Or if you see some service account token that's usually only used from inside, all of a sudden you start seeing it coming in from the internet, from places you don't expect and there's some denies mixed in, that's another interesting event, right? So these autologs are really powerful beyond just crafting RBAC. I think there's a lot of potential for security practitioners to use these. So there's other considerations, right? There's no shortage of RBAC insanity, especially there's been some interesting revelations with what Kubelet has access to do, that's a conversation for a different day, like the actual internals of Kubernetes, they use RBAC also. But the easy ones are kind of verbs to look for. Again, static analysis, like you could write some brago to find this pretty easily and do an audit of your cluster of escalate, impersonate, and bind verbs, right? These are not verbs that you encounter every day when you're writing RBAC policies, you're typically dealing with get and list, et cetera, more kind of simple verbs, but these just sound bad, right? Escalate is a verb, you can use it and you can build a policy that has that built in, but these are really made for privilege escalation, which is needed sometimes, or impersonation, which is also privilege escalation, or binding to a different role, and that web gets very messy very fast. So you're gonna wanna know if you have RBAC policies that are using these verbs, and if they're actively being used, you should know why, right? That could be a good reason, it's very plausible, but they are dangerous left kind of unattended to. And then the other one, persistent volumes. So there's kind of these interesting corner cases of RBAC where if you allow somebody or something to create persistent volumes, well, that persistent volume probably has access to the host file system, and then you can break out of the container context, right, of that workload or the pods that are part of that deployment, which is a really interesting attack path, right? If you're a developer and you start on day one and you have very limited access to the Kubernetes cluster, but you just happen to be able to do this with persistent volumes, you've just escaped out of the container and landed yourself on the node, it's on the node, the underlying host. So let's walk through how auth n interacts with auth z. I created this wild flow chart. Let's see if I can follow it myself. So on the left, back to the key players, who's acting on the Kubernetes API? And this is in particular how EKS handles at a pretty high level, authentication, but also authorization. There's some interesting handoffs here, right? This isn't really a threat model. This is just showing the complication that exists under the hood that you don't even see, right? When you run Cube CTL and you're authenticated with AWS IM, you don't really see this. So at first, you're going to present your IAM token, right? You've authenticated AWS somehow, we'll skip how, but you wanna do a thing. Cube CTL, Git pods, all namespaces. Present that to the API server and then the Kubernetes API server is gonna pass that IAM token over to a special, it's a daemon set called the AWS IM authenticator server. That's responsible for talking to AWS, right?  And then there's a response with an identity. Again, identity is the new perimeter, right? That identity is then passed to, has anybody ever had to deal with this AWS auth config map? It's a really special fun part of EKS, but that's a very important piece of the mapping puzzle, right? That identity is mapped, it's hard to see to a Kubernetes subject, right? AWS doesn't speak native Kubernetes in terms of subjects. So that config map does some pretty heavy lifting and you can go check it out in your own EKS clusters. It's translated to a Kubernetes subject and that subjects pass back to the API server combined with the original action, the intent that you had. And then RBAC says yes or no, right? So, you know, meanwhile, you're just sitting there like smashing away Cube CTL commands and writing scripts or whatever, but under the hood, there's a lot going on, right? And this again is not like saying this is bad or this is a security issue, but it's good to understand how these things work together. And every cloud handle this a little differently, right? You know, similar flow, but this kind of token translation, RBAC, there's room for error here, to say the least. So I think I'm nearing the end of my time. I don't know if I got my five minute warning, but there is a one note at the bottom, this is just a link, but we are writing, we are bringing a top 10 security project to the CNCF. There's two in under review right now. We're kind of translating and moving a lot of the Kubernetes top 10 over the CNCF under tag security, and there's an Istio top 10 coming out. And I imagine we'll do something with RBAC. So if you wanna get involved or if you are already involved in tag security, here's the random link to the GitHub issue, but it is some good conversation happening there. I think there's a lot still to be kind of dissected, shared and yeah, we have a booth downstairs if you wanna talk or I'll stick around after this and I'll give you all some candy.  Thank you for coming and see you soon.


Hello everyone, this is Alice Gao. In this video, I will discuss the motivation for using heuristic search algorithms. So far, I've discussed several uninformed search algorithms, depth-first search, breadth-first search, and iterative deepening search. Is there anything unsatisfying about these algorithms? Let's look at the eight puzzle again. Here are two states of the eight puzzle. If both states are on the frontier, which one should we expand next? For an uninformed search algorithm, the two states appear equivalent. The algorithm will decide on which state to expand based on an arbitrarily predefined order. In other words, the algorithm treats the states as black boxes. It doesn't know anything about the internal structure of the state. The only thing the algorithm can do is to test whether the state is a goal state or not. That's about it. What if a human, instead of an algorithm, is making the decision? A human would most likely expand the state on the right since this state is much closer to the goal. How did we figure that out? Intuitively, we will estimate how many moves it takes to transform this state to a goal state. And we're using this intuition to guide our search. The state on the right is one move from the goal state. For the state on the left, it's unclear how many moves it requires to transform the state to the goal state. Definitely more than one move. We will use this intuition or domain knowledge to build a heuristic function and use a heuristic function to search more efficiently. This is the main idea behind heuristic search algorithms. Let's compare the uninformed and heuristic search algorithms at a high level. An uninformed search algorithm does not actively reason about the goal states. Every state appears equivalent to the algorithm. The algorithm is not guaranteed to find an optimal solution because it does not consider the cost of the edges. Heuristic search algorithms can do much better. This is because the algorithm actively reasons about the goal states. The heuristic function estimates the cost of the shortest path from the current state to a goal state by using domain knowledge about the problem. The estimate may not be accurate, but it is the best that we have. The accuracy of the heuristic estimates heavily influences the efficiency of the search algorithm. With the heuristic function, we can find the goal state much faster. That's everything on the motivation for using heuristic search algorithms. Let me summarize. After watching this video, you should be able to do the following. Explain the advantage of using a heuristic search algorithm versus using an uninformed search algorithm. Give an example to illustrate this advantage. Thank you very much for watching. I will see you in the next video. Bye for now.


Navy morale, welfare and recreation brings entertainers from the states to service members overseas throughout the year. Petty Officer Jeremy Graham shows us how one of those entertainers put his audience to sleep. Sailors and their families gathered for a night of laughs, hosted by entertainer Chuck Milligan. Honestly what I do is I'm a director of a program that volunteers from the audience put on. It's an hour and a half one man comedy show. We get volunteers to come up out of the audience and we put them into hypnosis and then we give them a series of silly things to do. Chuck has been doing this show for a long time and performing for service members overseas has always been part of his act. Maybe somebody's away from home for their first time and they're depressed or they wish they were home, I can take them away from that for an hour, maybe an hour and a half and give them something to laugh and giggle about and forget that they're here. Petty Officer Jeremy Graham, Fleet Activities, South Subo, Japan.


VOA Learning English takes a look at world events that shaped 2017. Violence. The year began with an attack on a nightclub in Turkey. Extremists were blamed for it and attacks in Mogadishu, London and New York City. Terrorists were blamed for an attack at a music concert in England and places of worship in Egypt. The American city of Las Vegas saw the worst mass shooting in modern U.S. history. Natural disasters. Powerful storms in the Philippines and Vietnam brought heavy damage and loss of life. Three big storms in the Caribbean Sea and southern United States caused huge flooding and damage. Wildfires destroyed and threatened communities in Portugal and California in the U.S. The Thomas Fire was the largest wildfire in California's history. Civilians fleeing conflict. Amnesty International says about 73,000 civilians left Africa and the Middle East for safety in 2017. In Myanmar, over 600,000 Rohingya refugees fled to Bangladesh for safety. Civil war in Syria and Yemen brought hunger and disease to millions who live there, including children. Political crises and calls for change. In South America, large protests were held against the president of Venezuela because of its social and economic problems. In Zimbabwe, President Mugabe was ousted after leading one of Africa's most economically troubled nations for 37 years. In the Catalonia region of Spain and the Kurdish area of Iraq, voters wanted but did not gain independence. Changes in world policies. The January inauguration of President Donald Trump brought many policy changes in the United States. President Trump ordered restrictions on immigrants from several Muslim-majority countries. He pulled out of international trade agreements and the Paris Agreement on climate. The Prime Minister of Japan called for an expanded military program. South Korea raised the THAAD anti-missile system over protests from China. North Korea made progress in its missile program. It tested several missiles in 2017, including one in November that flew higher and farther than any earlier missile.  Women and men around the world used the hashtag MeToo to share their own experiences of sexual abuse. Good News Nigeria celebrated the release of more than 80 Chibaq girls that were taken by Islamic militants in 2014. In Syria and Iraq, the Islamic State Group is said to have collapsed and the US economy grew more quickly than expected. The Good News has many people hopeful for a better 2018.


Smiley led quite a short life during his existence as a chemical weapon and sea creature hybrid. However, the one thing he did manage to achieve was subscribing to the Ground Line Review and unlocking regular One Piece content uploaded straight into his YouTube feed. And here is a picture of Smiley after subscribing, making an ooh face at the site of all of the new content now available to him. Hello and welcome to the Ground Line Review, your source for everything One Piece. And today for the Devil for Encyclopedia, we have quite possibly one of the most bizarre situations we have ever seen a devil fruit applied to, which in this case involves an examination of the Sarasara No Mi model axolotl. The Sarasara No Mi model axolotl is a zoan type fruit that would give it's theoretically human user the ability to transform into an axolotl as well as a human axolotl hybrid. And I say theoretically because we have not yet seen a human example using this fruit and instead in the series it was used by a creature known as Smiley and made its first appearance, of course, during the punk hazard art. So as a typical zoan fruit, this little guy has both a broad family as well as a specific model name, a matter of which speaks for itself. In regards to the initial portion of the name though, Sarasara is derived from the Japanese word for salamander, which is very simply salamander because axolotls are actually a type of salamander, which I honestly did not know before it popped up in One Piece. So there you go, etcher order providing another fantastic education there. As for the model though, I would like to point out that axolotl, like many words, does not translate very nicely into Japanese like salamander does, because fun fact in Japanese there is no X. So when taking an English word featuring the letter X, that sound needs to be improvised somehow. And in this case, we have landed on the word ahorotoru. So as a result, the English equivalent does end up being fairly straightforward with VizElecting to translate it as the salasala fruit axolotl model, which notably uses an L rather than an R, because in Japanese, L and R sounds are kind of interchangeable, although more accurately the sounds are combined and it's this weird sort of strange mess at play like an ear sound. But to properly connect it to the salamander roots in English, becoming the salasala fruit is just fine. So we've got a very strange one here because as demonstrated in the series, this devil fruit was more of a scientific experiment by Susan Clown in order to create a chemical weapon. So what has essentially happened is that Mr. Susan Clown has used whatever super special technique Dr. Vagapunk found and imbued this Owen fruit into a condensed blob of gas, resulting in the strangest axolotl this world has ever and probably will ever see. And that's a pretty big statement because these things are already pretty damn weird as is. Known commonly as the Mexican walking fish, I think it's first of all important to point out if it wasn't already obvious that an axolotl is not a fish. It is an amphibian, although it is an aquatic dweller found primarily in freshwater lakes and ponds. And that is immediately interesting because this makes the sara-sara nomi an example of the zoan type devil fruit that produces an aquatic animal, something that we have arguably never seen before. I mean, you could perhaps argue that the kama-kama nomi, to Bipocons is an aquatic fruit because it turns its user into a turtle. But at the same time, turtles are very, very capable of dwelling permanently on land, although they are referred to as tortoises. Axolotls, however, do not have this kind of special exception and they do live their entire lives in water. And that is a big, big, big, big, big, big, big problem when we're talking about the devil fruit world.  So this is the most massive red flag possible right here because even if this fruit were to be consumed by something that wasn't a plot of poisonous gas, then breathing may very well become impossible at the very least because axolotls do so through gills and cannot survive out of water. However, if the user of this fruit tries to use the full beast mode in water, then they will lose all mobility and end up like Jack after being wrecked by a Zunisha, eternally stuck at the bottom of the ocean floor until someone comes along to rescue them. They would be able to breathe, of course, but not move in any way. And just to anyone out there who holds the belief that it is only sea water that affects devil fruit users, that is actually not true. As Oda has stated in the SPS of Volume 41, that devil fruit users are affected by all types of water, which becomes very problematic for them when bathing. So someone like Robin, who Oda displays bathing fairly often, does need to be very, very careful. And the user of the axolotl fruit would have no real way of invoking the large majority of their axolotl nature because they probably won't be able to breathe on land and they won't be able to function whatsoever in water. And there is an argument to be made that the human beast hybrid form of this devil fruit would not fare much better because it's all dependent on how much physically changes and what the breathing infrastructure becomes. At the very least, I can't see the human hybrid axolotl form benefiting the human user too much. Although maybe it can, but that's a pretty big maybe to be honest. And you know, if it isn't clear by now, I'm not entirely sold on this fruit at all. However, I will say that there is one very potential area of relevance to examine here because fun fact, axolotls can regrow their limbs up to five times allegedly. So if you were say shanks and the user of this fruit, then you should be able to conjure up another arm just like that. So I think that is a surprisingly impressive benefit, albeit one that I don't know the average individual would have much need of. Well, you know what actually maybe after acquiring that power, your life would turn into a sort of Dragon Ball style situation. Because when you think about it, isn't it really, really weird that generally the only characters who lose limbs are those who can easily regrow them. If you're like looking back on it, Piccolo loses a limb at least once per arc. And then there are characters like Cell and Boo, all of whom can regenerate essentially infinitely. So I do feel like unlocking the ability to regenerate limbs in media actually puts you at a great disadvantage because it makes you roughly 1 million percent more likely to actually experience the pain of losing a limb. Of course, that's not relevant to reality in any way, shape or form, but just you keep that in mind when dwelling on the might of the axolotl. But for what it's worth, let's move on to how Smiley makes use of this devil fruit. And honestly, this feels weird to say, but Smiley is almost certainly one of, if not the most ideal user of the Sarasaramimi, Arbalaxolotl. First of all, as previous explorations of objects imbued with its own powers, the fact that it grants Smiley life and some form of sentience is nothing short of miraculous. Plus, Smiley, due to its initial composition, also seems to be able to avoid any problem in regards to breathing on land via the fact that it is a gas blob. And so it never required that pesky mechanism of breathing anyway. But due to the combination of devil fruit and sheer blobbiness, Smiley has also been shown very capable of molding and transforming its body to suit varying situations, and it can even launch part of itself and retain sentience within those individual portions, which is actually incredibly cool because it means that one super big Smiley could split itself down to hundreds, perhaps even thousands of smaller Smiles and then do whatever it is it wants to do. I have no idea what Smiley's goals in life are other than to subscribe to this channel, of course, but this ability is a very unexpected result of this strange combination. Unfortunately, those seas are hard and arguably still doesn't have any interest in life. And Smiley is one of the great tragedies of One Piece because in the end, it was created for the purpose of being killed. Smiley serves as a glorified storage unit for Caesar's weapon.  But something else I should also point out is that the Sarasara Nome, although Axolotl, is one of the very few devil fruits that we have actually seen in its fruit form. And it was also one that gave us a glimpse into the mechanism of how devil fruits function because after Smiley's passing, the Sarasara Nome reincarnated itself in the form of a strategically placed nearby apple and assumedly Caesar was well aware of this interaction and planned it out so that he could reuse the fruit to create another Smiley. So as somewhat heartbreaking as it was to see the death of this very lethal creature, Smiley will always be remembered for contributing an answer to the puzzle that is devil fruits. And not only that, it's also a fruit that we may potentially see again in the future, although I don't think it's all that likely because at the moment, the ultimate fate of the fruit was to be covered by the chemical weapon that Smiley became and so it currently sits in the middle of absolutely nowhere on Pancasad, covered in the paralyzing ash, which, you know, I guess it could have wrote over time, but the real question mark here is why would anybody actually travel to Pancasad, much less explore it in enough depth to stumble upon the fruit? And if it is recovered, I imagine that it would be by the Marines because I can't see pirates having invested interest in the island, although perhaps the Revolutionary Army would. They at the very least are concerned with the goings on of the world government, so who knows, they might be able to pick up a nice piece of fruit here, although I'm really not sure that they would want anybody eating it. So for now, this fruit still remains sitting all by its lonesome, but then the realm of Pancasad. And now to the obligatory awakening category, and I think the results of this awakening would be very simple. As with most sawn fruits, it would just become a giant axolotl, which would probably be equally as useless as the rest of its forms for a human user. And the tricky thing to consider about the Sarasara enemy is that if it were to be consumed by something that wasn't an object or a substance, and I believe it would actually be impossible to awaken because while we don't understand the exact science of that process, it very clearly involves a mastery and escalation of base double fruit powers. And for a fruit user who cannot access the large majority of their abilities, if they can indeed use any of them, then there is very little room for growth in that aspect. So really the only chance the world has to see an awakened Sarasara enemy model axolotl would be in the form of something like Smiley. And I guess you would just have to hope that its basic instincts lead it down the path of awakening, which I don't know, man. Axolotls are naturally incredibly placid and chilled creatures, so I don't think you'd be finding any of them who are truly keen to push themselves beyond that and into the realm of peak axolotl. Some other miscellaneous things to consider when becoming an axolotl human thing. This isn't anything at all relevant, but it's something I enjoy because the word axolotl comes from the ancient Aztecs actually, who always have great names for everything, but in this case axolotl translates into water dog, which simultaneously makes it sound far less creative but also far more adorable. And furthermore, if you are still intent on consuming this fruit, then do keep in mind that the axolotl breeding ritual includes a funky dance. So if you do find yourself a partner, then you had better get to choreographing because your inner axolotl may feel the need to bust a move before getting down to business. And so where does this leave us? And I guess, oh boy. I think the conclusion for this one is fairly obvious. Don't eat this fruit. It would be a ridiculously stupid idea because pretty much all of your new abilities would be based in the realm of aquatics, which is a zone that you as a double fruit user will be permanently unable to access for the rest of your life. And yes, there is potential in a hybrid form and limb regeneration might be useful in some way, depending on who you are and what you do. But in all honesty, this is almost certainly one of the worst double fruits in existence. And I feel bad that I have not considered it for either of my top five worst double fruits lists. So there is one fruit on each of those video lists that simply does not deserve to be there over this one. But I guess if you had the know-how and you wanted to imbue an object to become a weird axolotl pet friend, then that is probably the only decent use that this fruit has going for it. So it's a bit of a shame, but yes, this is almost certainly one of the few double fruits in the series that you would not want to eat under any circumstances. And with that, we are going to commit the Sara Sara No Mi model axolotl to the double fruit encyclopedia. Next time on the double fruit encyclopedia, we are going to examine a much better fruit as we are heading back into Logia town population Monet in order to cast our gaze upon the snow time fun that is the Yuki Yuki No Mi. But what do you guys think? Please do leave your thoughts in the comments below or even join my Discord server. And if you'd like to see some more videos like this then please do go and check out my other content. I'll even subscribe to the channel for more glorious one piece business uploaded straight into your YouTube feeds. But for now, this has been the Grand Line Review and I'll see you next time.