All right, thank you all for coming. So my name is Major Hayden. I work at Rackspace. And today, I'm going to talk to you about holistic security for OpenStack Clouds. And so just to get an idea before we get started, how many of you would say that you spend greater than 50% of your work week working on security? Oh, fantastic, all right. My people are here. OK, so as I said, we're going to talk about the approach that I take and some of the folks to securing OpenStack today. But what I want to do to get started is kind of put us in the right frame of mind. So for those of us that do security on a regular basis, we probably understand this, but the other folks might not. And let me see if I can advance the slide. All right, so take a look at this picture. It's one of my favorites. If you look, there's a storm coming in. It's in an older time. There's people on this boat. You can see some of them on the back looking to see where potentially they could go. The waves are getting bad. You could tell there's already cargo that's fallen out of the boat. There's some rocks over there. Things are not looking good. So this is one of those situations where everyone on the boat is doing everything they've been trained to do, pulling in sails, doing all these things, getting on top of the deck, helping out. But in the end, they're kind of rolling with those waves. And those waves might calm down at some point and they can get out of there. It might turn their ship over. It might slam it into the rocks. They're not sure. But they're doing the best they can. And there's really no way to get extra help. It's not like someone can go leave port and go over there. In these times, it kind of waves and rescue somebody. There's not a cell phone. There's not a helicopter. There's not Coast Guard, anything like that. And so if you don't work with security on a regular basis, sometimes doing security and working with breaches feels exactly like that. Where it feels like you're in the waves. They're rolling over you. You're doing absolutely best you can. You're doing the industry best practices. But you're kind of going with the waves until it finishes. So it can feel like a very lonely, very challenging venture. And it can get worse as you start to look at more complex systems. So when you start thinking about scaling horizontally, adding more systems, adding more networks, maybe a new data center, and then you think about all the user requirements that have to come into it. And then users say, well, I want my infrastructure right now. Well, then how do you work security into that as well? So this just keeps compounding the situation and creates more challenges for everyone. And so sometimes securing an open stack can feel like a trip to the upside down. So how many people have seen Stranger Things? I'm kind of subset. OK, it's very popular in America right now. But yeah, sometimes it feels like you're going to another world, that you're going to a flipside to figure out how everything connects together. And sometimes it pits you against users. Sometimes it pits you against people in the business. And sometimes it pits you against other people on your team. But today, I want to propose that it doesn't have to be that way, even with something as complex as open stack. I think there's a way for all of us to reduce stress, have our workday feel a little bit more like this, as opposed to a boat rolling out in the waves. So hopefully by the end of the talk today, we'll have that under wraps. And so for me, I feel like the key to this is taking the right approach to securing open stack. People have those phrases like, don't eat the elephant, one bite, and all these kind of strange phrases. I don't know why people are eating elephants all the time. But yeah, it's a completely different approach. So just to tell you a little bit about me, I've been at Rackspace for almost 10 years. I've worked with open stack since 2012. And right now, a lot of what I'm doing is taking a look at our Rackspace private cloud and figuring out how we can make it more secure, how we can make it more compliant, and then also how we can find more ways to protect our customers that are kind of new and innovative. And so outside of work, I work on Fedora Linux a lot. Anybody use Fedora in here? All right, there's some of us. Okay, great. So I work with the security team and the server working group with Fedora. And also I have a terrible habit of purchasing domain names. For some reason I'll get an idea and then I'll run out and buy it and put like a cat picture on it or something so please don't give me any ideas. And so we talked about holistic on the first slide and I think everyone has different definition of it. So the Oxford English Dictionary says, it's characterized by the comprehension of parts of something as intimately interconnected and explicable only by reference to the whole. That's really hard to understand for me. It's a lot of very large words that are oddly organized. And so to me what holistic feels like is it's a lot of very small things that when you look at each one of them individually, you may not see a whole lot of value, you may not see a game changer, but when you start piling them together, it kind of starts to make sense and it begins to have more values. So instead of being one plus one equals two, it's a multiplier, it's logarithmic in that type of way. And so at least in the United States, we have a concept of holistic medicine.  So it may mean that if a human is having a medical issue, does that really require medication? Does it really require surgery? Or maybe does this person need to go talk to somebody about challenges they're having in their life? And then of course spirit means something a little bit different to everybody as well. But each one of these have to be working in tandem and if you're only looking at one, you're not getting the whole picture, you're not getting the whole spectrum of who someone is. And so if we bring this down to OpenStack, we think about OpenStack as servers, software, and a business goal. And if any of those three is out of whack, you're gonna start having trouble. So I've seen a lot of people say, I wanna do OpenStack, and they go and get servers and get some software, but they don't have a goal. They don't know where they wanna go with it. And I've also seen people who rush out and get servers and they have a business goal, but they don't know how to deploy their software. They're like, our software has to sit on one giant server that's over in the corner that we've run in the same place since 1988. Well that's probably not a great candidate to just toss into OpenStack. And so if you've worked in security for a while, you hear the whole people process and technology all the time. And these three things have to go together as well. You may look at a particular process within your organization and say, why does this process exist? But if you look at it in isolation, it may not make a whole lot of sense. But when it's brought together with the people who follow it and the technology that enforces it, it starts to make a lot more sense and have more value. And so it's not a new concept. So Aristotle said most of this, the whole is greater than the sum of its parts, especially in the case of OpenStack. So I think if you take a look at Nova all by itself, it can go build compute. That's pretty cool, it's great. Like okay, I can build compute right now. But when you think about okay, we're gonna combine it with Glance and then we'll combine it with Keystone and we'll hook Keystone into our corporate LDAP server and then we'll have sender offering block storage. Obviously there's a lot more value that comes out of it at that point. All right, so it's a whole lot of fluff. How does this actually apply to securing an OpenStack cloud? So for those of you who do security on a regular basis, you may be a little bit bored for a second, but we'll get everybody up to speed. So the first thing is assume that attackers will get in eventually. So all of your sentences when you talk about, oh, if an attacker ever breaks in or if we ever have a breach, just change the ifs to wins and just change the way you think about that. They will get inside eventually. So it's, and you have different groups of attackers as well. So if people really do wanna get into your environment, they eventually will, they'll find a way. And so attackers are on offense and they can be wrong a ton of times, but a defender only has to be wrong once for the offense to get a goal. Sorry, I've been watching a little football since I've been here in Spain. And so a lot of people say, well, why don't we just secure the outer perimeter? I'm gonna build a castle. I'm gonna put an awesome moat around it. The moat's gonna be huge. It's gonna have sharks with laser beams. It's gonna be great. No one's breaking into this thing. Fantastic. And so since I can't make a slide deck without a meme, I've decided to add a meme in here to help explain this. So if you've seen Inception, you'll like it. So you get into these conversations where you say, hey, we need to secure our open stack cloud. We need to go deeper. And then someone jumps in and says, hey, wait a minute, we just bought that expensive firewall for the perimeter. You know, it's huge, sharks with laser beams. Isn't that gonna be enough? And then you get in this situation where you just look back and you're like, no, it's not enough. It's 2016, we need more than that. And so if you've ever heard about defense in depth, that's the whole idea of it. It's just building small security improvements at multiple layers. So that way, you say, hey, look, what if somebody does cross the moat? What if the sharks with laser beams don't work or they're asleep or something happens? What are you gonna do then? And so that's the rest of the security strategy. So individually, like as we've been saying already, if you take a look at some of these changes, you might not see the value. But as you start putting these things together and looking at what you can do when everything is working in tandem, that's where a lot of the value comes from. So enough fluff. Let's get to the good stuff. I like ice cream, so I put ice cream in there. Anybody else like ice cream? Yeah, I like ice cream. So the way that I recommend people to think about it, especially people that are first getting started, is I say work from the outside in. So when I was younger, my mom, I guess thought I had terrible manners. And so she sent me to, in the US, we had something called Catillion, which in the south is like learning how to do ballroom dancing and go to fancy dinners and introduce yourself to grown-ups. And so we'd always be taught, work from the outside in. Grab the forks on the outside first and work your way in. And it's the same thing when you're doing security with OpenStack. Start on the outside and work your way in. So as we start to peel back the layers of this onion today, that's the last metaphor I have, I think. I'll quit doing it after this. So we have four layers. We have the outer perimeter, which we kind of already talked about a little bit. And then controlling data planes. And if you don't know what that terminology means, I'll go into that in detail here in a second. And then we'll take a deep dive into the control plane where we'll talk about the OpenStack services and then what I kind of call the back-end services. And then we'll go even deeper into the OpenStack services themselves with a horribly done graph-vis diagram that everyone will probably run out of the room when they see it. So talking about the outer perimeter. So this is where you prevent the people from getting in in the first place. You make it really hard for them to get in. So the goal here is convince your attackers that it's easier to attack someone else's cloud. So it's kind of a strange concept. And I heard a CSO say this at the RSA conference out of all places. And it didn't make sense at first, but in the end, those attackers are gonna break into somebody's cloud. They're gonna break into someone's environment. What you wanna do is make sure when they try and go after yours, that they look at it like, oh, this is annoying. Like this person actually thought about security, whatever. Like leave that one on the list, we'll go to the next one. And then they'll go to the next one. So that's what you wanna do. You wanna create that speed bump in the attacker's day. And so the concepts here is that, like we said, make it expensive for them to breach that outer wall. Make it to where every time they try and find another way in, they're delayed or it's irritating or something changes or something like that. And then when they do make it through, make sure you know about it right off the bat. Have some logging, have some monitoring that comes out of those logs. We'll go into some of the details in a second as we go a little bit lower. And the other thing to keep in mind is that perimeters have multiple openings on them. So let's say, for example, you have an OpenStack cloud that is partially exposed to the internet and partially exposed to your corporate network. A lot of times I'll see people will go and they'll secure the outside like crazy. They'll put a VPN and then they'll have a WAF and then they'll like, they'll have all this huge stack. But then on the inside, there's nothing. It's directly connected to their internal corporate network. And so someone breaks into something internally or maybe you have an unwilling internal attacker, maybe someone that has a compromised laptop or something. They can make it from there and go straight into that cloud without going through a firewall, without going through a VPN, no VLAN changes, anything like that. And so if we start to break this down and get a little bit more tactical, we already talked about it, like require VPN from the outside. Give them that one extra hop that they would have to get through to get to your OpenStack cloud. And we'll go into detail on some of the APIs in a second. And then also make sure you're segregating your internal network. Make it so that if someone is on your internal network and they don't need to be in that OpenStack cloud that they can't reach it. And monitor all logins, successful and unsuccessful. So unsuccessful obviously makes sense to almost all of us that practice security because it can show that maybe someone has lost their credentials or lost part of their credentials and someone's trying something or trying to break a password. But the successful ones are almost as useful. So take for example, you have a billing user and that billing user always just goes in horizon, grabs a report, logs out. Like that's what that person does once a week. But then that person logs in Thursday night at 10 p.m. and is querying every neutron network that exists on the host. Okay, well that's kind of a problem. So look for those things. Look for that behavior that's a little bit unusual. And then track the bandwidth usage trends. Know if someone is exfiltrating data out of the environment. Know if they're pulling something out. Is someone downloading all of your glance images? Is someone dragging data out of VMs that they shouldn't be doing? So monitor that as well. And so if we put this into visual form on the left, you would see the access to the internet. So the suggestion here is have a VPN there. The role of that VPN, number one is to create a, well not really an air gap, but create a gap between the outside world and the OpenStack cloud. But what it also does is any traffic that comes through there is attributable to a user. So any valid traffic that comes through there, you can attribute back to the user that did it. And in valid traffic you can go back and say look, someone's credentials are compromised or maybe their laptop has been compromised or a mobile device or something like that. And then on the right side, have everything feed into a logging system that then you alert on. So go in there and understand what does an unsuccessful login look like? Or what is, if someone fails to log in to Keystone a certain amount of times, do you alert on that? So have all that fed in and NetFlow as well. Look at that bandwidth monitoring. Look at the metadata within the packets themselves and really try to understand what that traffic is. And so if we go a little bit deeper, we get into this concept of control and data planes. And so this may be kind of a foreign naming scheme to some folks, but within Rackspace this is what we call it a lot of times. So we think about breaking these things up. The control plane to us is all the OpenStack services like Keystone, Nova, Glance, Neutron, but then all the services that help those services run. So RabbitMQ, Memcache, MySQL, these kinds of things. And then you have what we call a data plane. And so that's where you're gonna have hypervisors, you're gonna have all the tenant infrastructure, maybe their networks, maybe their VMs, maybe their containers, any storage that anyone creates. And you can imagine, you don't really wanna have these two things interconnected heavily. It could create problems. So at this step, what our goal is, is to keep the inner workings of the OpenStack cloud separate from the tenant infrastructure. And there's quite a few reasons for that and we'll go into that in a second. And so the key concepts here is that the tenant infrastructure has to have very limited access to that control plane and vice versa. You don't want someone that maybe has a misconfigured VM, let's say they don't have a security policy applied or they don't have a firewall applied or their password is password or something like that. And someone breaks in and uses that level of access to wander into Nove API, let's say, or wander into MySQL. Like maybe someone's got a MySQL server where they never set the root password and someone just kind of wanders in and dumps all the data that's in there. And then also we'll talk about protecting your cloud from exploits where someone can break out of the virtual machine and get access to the hypervisor itself. Because that may be where you have Nova compute running and we'll get into that a little bit more with the OpenStack services. So specific things to do there is separate these three things, note that there's three, there's the control plane, the hypervisors and the tenant infrastructure. Make sure all three of those are separated so that way traffic cannot easily get between any of them without going through a firewall, without meeting a policy. So worst case scenario, let's say someone had a VM exit exploit and they get access to the hypervisor as a normal user or as root. You don't want them to be able to go use that access to then go wander into your control plane and get more access to the environment. And then always use SCLinux or AppArmor or Tamoyo on hypervisors to reduce the impact of a VM exploit.  And so if you're not familiar with Linux security modules, there's three main implementations. AppArmor, you're gonna find a lot more often on Debian and Ubuntu, SCLinux you'll find on CentOS, Red Hat, Fedora. And then Tamoyo, a lot of people like it. I think it's really popular in Japan last time I talked to some folks. And then when you look at Libvert, what Libvert does when it goes to actually build a VM is it ensures that that VM is labeled or has an appropriate AppArmor profile so that that VM can only touch the storage and the networking and any other devices that it needs to touch. So the nice thing about this is that if there is a VM exit exploit, like let's say someone knows of an exploiting KVM or in the Linux kernel that they can use to break out, they end up being inside this little red box that you see on the slide. So they break out but now they have access to the hypervisor but they can't wander out of a very small little sandbox that they're in. So sure, they could go and destroy the disk for that VM but if they were root already they could have destroyed it from the inside. Now they're just destroying it from the outside. And they can only touch the network devices or other devices that have been assigned to that VM. So they're pretty much stuck. At that point they would need to have a vulnerability in SE Linux or AppArmor or the Linux kernel to be able to break out of that and keep going further. So the moral of the story here is do not disable SE Linux or AppArmor on your hypervisors ever. It's a terrible idea. And the performance impact is very, very small. The last, I think the last study that I saw so the performance impact is like less than 1% of CPU to have it running on your average host. So that's very, very small. And so now as we go one level deeper we're digging into that control plane. So that left circle that you saw in that slide before. And so this is where we wanna restrict lateral movement. And if you're not familiar with lateral movement what we're talking about here is like let's say for example, an attacker finds a way to break into something within your corporate environment. Maybe they get access to a printer that hasn't been updated or they get access to a laptop or something's infected. They get that initial foothold and then they start kind of moving around to see what's available around them. Like a lot of times they'll go and try and find Active Directory or LDAP and things like that. But sometimes people might be able to break into one piece of a cloud and then kind of move around and get access to other things. And I'll talk about the crown jewels regularly through here. And what I'm really talking about here are the databases and the message queues that are involved with OpenStack Clouds because that's your critical infrastructure for running the cloud. And so we kind of split into two more circles now. So the circle on the left is the OpenStack services. That's all the like Keystone, Nova, Glantz, Cinder. Then the back end services where you'll find MySQL, RabbitMQ and Support Services and hopefully your SysLog server as well. So the crown jewels are in that red circle. If someone gets access to your database, your Nova database, they can go and deny service. They can add access for themselves. They get access to the Keystone database. They can have a lot of fun in there. And then also if they can inject or reject messages from the message queue, they can also cause problems. So if you're trying to send through a password reset, they could go and block those so that they wouldn't be able to get into the environment.   And then you're kind of stuck trying to figure out what's going on. So if we dig into the key concepts here, obviously we want to allow the least amount of access between these two groups as possible. And we want to be able to restrict it down to the source destination and the port. So for example, if Nova needs to go and talk to MySQL, put an IP tables rule inside of the MySQL container. Hopefully you're deploying in the containers and not on bare metal with OpenStack.  I will accept connections on port 3306 from the Nova API IP address, which is this. And that's it. And then go ahead and add those IPs in there. If you're deploying with Ansible and you have inventory set up, that becomes really easy to template out. And so as I said, if you deploy these services in the containers, you have a lot more fine-grained control on process limits, networking, all that kind of stuff. There was a good talk from IBM earlier about securing things within containers. And that's a key concept that helps a lot. It's something we use as well. And so when we think tactically about this, you can create that load balancer of firewall between things like Nova and MySQL or Nova and RabbitMQ. The nice thing there is you have a choke point. So it's a choke point for monitoring. So you can monitor like hit counts on a Cisco device or you can monitor throughput or net flow. But the other nice thing is, is that if you get into a breach situation and you're like, what is going on? What are these people doing? We know they're inside. You can actually just cut all access right there in front of the MySQL database server and RabbitMQ. And that way, no further damage can happen in the environment. So someone could keep banging on an API or maybe if they had access to Nova API, they could keep trying to get access and do things with it, but they couldn't because there's no way to drop a message off. There's no way to add something to the database. Obviously you wanna monitor those backend services very closely. If you have a MySQL dump running at two o'clock in the afternoon and you know your database backups don't happen until four o'clock in the morning, obviously that's a huge concern. So if you see a spike on a graph or something, go and investigate it. And then one of the most critical things that's often forgotten is use unique credentials for every single service that reaches into MySQL and RabbitMQ. So for example, one thing that we use, we use OpenStack Ansible at Rackspace. And so Nova will have different credentials for MySQL than Keystone will. And it'll be different than what Neutron's credentials are. Same thing with RabbitMQ. They'll be in separate virtual hosts, separate databases every time. So that way if someone breaks into your Nova API server, sure they'll have access to Nova database, but they won't be able to go in the Keystone database very easily. They'll have to find another way in. And so finally the last group here is taking a deep dive into the OpenStack services themselves. So all the Python based services that you're gonna be running in there. And the goal here is know what the valid communication looks like and then alert on everything else. So this herein becomes a challenge. Then you start thinking about, you're like, okay, well I got my Nova, I got my Keystone, I got all this. Well, Nova's not just Nova. Nova is Nova API and then you have conductor and then you have compute node. Neutron's broken up into a lot of pieces with agents and things like that. So you're thinking, man, that's a lot of communication. How do I do that? So what I did was built out an OpenStack cloud and then did an analysis on all the traffic that was coming through. And I'll send these slides out. So if this looks like an iChart, don't worry. You'll get a full-size copy. Oh, that was nice. All right, so wow, even the projector hates it. Make sure it's not wiggling over here. Oh no, oh man. I should've turned the Bluetooth off before I got started. So the idea here is that there's lots of predictable interactions. So for example, if you see all the red lines, that's where services are talking to Keystone. They all talk to Keystone only on two ports. And then if you look, there's quite a few orange lines. That's all the communication going to RabbitMQ. And so those only happen on a couple of ports, depending on if you're using SSL or not. And then the same thing with MySQL or Galera, you're gonna see the same types of connections.  Yeah, sorry about the craziness going on there. There's a whole bunch of connections, like for example, coming out of Horizon. I don't know if it's loose. I tried to push it back in. There's a lot of connections coming out of Horizon that go into other OpenStack services, but all of these are predictable. So this chart may be able to help you get through that. Oh, it looks like it calmed down a little bit. All right, so if we think about the key concepts at this level, so think about that iChart and bring it down to the concepts. These are all very heavily connected, but the connections are predictable. You know what's gonna talk to what and you know what is not going to talk to what. Oh, go ahead. You just swap it. I'll just quit moving. I'll just stay perfectly like this, okay? Okay, cool, all right. We'll just cross our fingers. So they're heavily interconnected, but you can predict all these connections. So for example, if I see Nova API drop a message in the message queue and Neutron, I mean, sorry, Neutron API drop a message in the message queue and Neutron's L3 agent picks it up. I'm not worried. That's something that it's gonna do all day. That's predictable, that's fine. But if I see Keystone trying to hit Nova on port like 850, I'm gonna be like, what is going on here? Like that's unusual. So these are things that you can go in there and create firewall rules that allow all the valid traffic. And then if you see anything strange like that where Nova randomly talks to something on another port, that's a really good sign that it's time to go in there and investigate what's happening. It could be a bug or it could be a new feature, but it also could be a breach. And so when we start talking about getting tactical, obviously use IP tables to limit the connectivity and alert on everything else. So have it log, drop packets and take a look at those packets, alert on those. And then as I said before, give each service a different, and this time around, give them each a different Keystone service account with different credentials as well. So that way if one service gets compromised, you're not worried about it causing issues with other services. And then finally monitor for high bandwidth usage and high connection counts. So if normally you have a certain amount of connections between Nova and Neutron or maybe between Nova and Keystone, all of a sudden that goes up by a factor of 10 one day and there's not a deployment or something like that. It could be a sign there's a bug. It could be a sign there's a compromise. Maybe someone's trying to expose data within the environment. So now that we've gone through all four parts, let's wrap up. Over and over again today I've gone through these four steps. So analyze what's happening in the environment. Understand what's valid, understand what's invalid and then find a way to isolate everything that's in that chain. So once you know what talks to what and why it does start trying to put walls in between there with very, very, very small holes in them. And then continually monitor those. If strange stuff goes through that tiny hole that you poked in the wall then obviously that's something to take a look at. Or if there's a new connection that's trying to occur that you're not allowing it may be a new feature it may be something you're using that you haven't used before and consider changing those firewall rules. And then finally repeat. So especially when it comes to a breach really try to understand how do they get in? What processes did we mess up? Was it a technology issue? What was it? And go through this process over and over until you get it more and more secure. And so these small changes add up to a very strong defense. And the other nice thing is that all the changes are very small so it's not like you're coming down like the Spanish Inquisition to go find out what's going on in the environment. Because no one likes it when corporate security comes down and says we need to talk to you about your OpenStack Cloud. Like that's I've worked in corporate security so I've had to do that a couple of times. But yeah, nobody likes that but people love it when they say hey can we make this small change? It's part of this bigger goal that we're trying to get to and we've already tested it in your environment and we know that it's gonna work. Those conversations work a lot better than I have a ream of paper that shows everything that you need to go do to your OpenStack Cloud. It's a little bit rough. And so finally if you wanna try this out in a very quick way try out OpenStack Ansible. So it's an OpenStack project that we contribute to and quite a few other companies contribute to it as well. What it does is deploy as enterprise grade OpenStack Clouds with Ansible. And so a lot of these features, oh here we go again, maybe it's the white, man what it is it's like that bright white on there. So a lot of these features are already implemented in OpenStack Ansible and if they're not they're actually on the way to being discussed to get in there. So if you have any questions like roll in there and take a look at that. And then also I'd be remiss not to mention our Rackspace Private Cloud powered by OpenStack which is Rackspace's enterprise grade OpenStack Cloud. So if you go down to our booth in the OpenStack Marketplace we can definitely talk about security or private cloud or anything like that in more detail. And so that's it for me. If you all have any questions I'll be more than happy to answer them. I think there's one mic right here or y'all can yell and I'll repeat it either way, whatever works. Oh yeah, so first question was how did I make that diagram that made the projector go absolutely crazy? So what I did with that one was bootstrapped to cloud with OpenStack Ansible, shut all the services off and then started running T-SpeedUm to do a packet capture and then I just rolled through that data to basically just smash it down into just the single connections and then Python GraphViz to get it into the graph which that was the hardest part actually getting the graph to work out because I don't know if anybody's ever used GraphViz it makes great stuff but when you have a lot of nodes they just kind of go everywhere. So in the second half of that, oh dealing with the fire hose. I think the first thing is you got to capture all the logs make sure all the logs are going into one place and then find out what you want to look at. So pick out the log lines in there that are problematic. So I think obviously a lot of them like when an error shows up those are ones you can trigger on. I know I was in a talk just the other day and I'm trying to remember which one it was where someone had a list of like error log items to ignore. Like things that just show up in OpenStack regularly and are not a huge sign of a security issue or a big problem and I wish I could remember who put the list together but it was fantastic. If I think about it I'll tweet it or something. Cool, any other questions? Okay, so the questions about so mainly what I was focused on was private clouds. What if you were gonna take this same stuff and apply it to a public cloud? I think you could do a lot of things in a similar way. Obviously your scale would be a lot different. So you get into some issues and obviously adding IP tables into areas where it hasn't been before then you start dealing with connection tracking and you have to make sure that you have those counts high enough and that kind of thing. But I think a lot of it is very similar. I think you have to be a little more careful about your logging and what you're gonna capture and what you're not gonna capture and what you're gonna trigger on. And then also you don't know as much about your users. So that's more of a challenge. So you have to kind of figure out you have to look at things more in aggregate I would say. So you may be able to profile what a user normally does in the environment. So if a user normally hits your API or a particular one of your APIs, maybe Keystone let's say, five times a week and then one time they come by and do it 5,000. Maybe that's a way to have like a flag that comes up in the customer's account where someone in support could reach out and say, hey look, is there an issue or are you not caching tokens or like what can we work with you or redirect them to a knowledge base or something like that. But still I think a lot of the same things apply. It's just that you wouldn't know your users quite as well. You wouldn't be able to go and attribute it back or have someone go through a VPN to get there. I know there's some projects like Repose that aim to do that where you can put Repose in front of the API and it could do the rate limiting and some of the filtering and then some of the handoff of the tokens and stuff like that. Would I use them under the log files? So at Rackspace we use just elastic search and Elk Stack and so then we'll go through and pull out certain ones that we know are problematic. I know some folks really enjoy using some of the, like some security vendors have log manager products that will alert on those things. I know some people are using a capacitor that goes along with Telegraph and that whole stack, the Telegraph and Inflex DB and that kind of thing. Oh, so the question is like do you monitor for the successful and unsuccessful log ins in such a way? That really depends because all of our customers are different. So we have some customers where their private cloud is like a dev and test environment and so for them security is important but it's not like on their list of important things it's like towards the bottom and then you have somewhere, that's where they do their critical marketing, like new product releases and things like that. And so a lot of times what we urge those customers to do is have the authentication hooked up to a centralized authentication source and have that source already configured to do all that type of monitoring. So that way the company knows their users better and they would be able to go and do the auditing at that level. So the question was how do we hook up Keystone to a centralized authentication solution? Like I said, it depends on the customer. Some customers have Active Directory and they wanna use that. Some customers just have plain LDAP and they wanna use that. I don't see SAML too often but it is something that some customers prefer to use. What else? Recommendations on web application firewalls. Oh man, I was gonna try and stay vendor neutral except for my own company but I don't know. That's a good question. I've seen some good ones over the years but I think it's, that one's tough. I still kinda go back to mod security every once in a while. I mean it's a bear to configure. Like I mean it's rough but the price is right for sure. But no, there are some good vendors out there but I think it's a little bit less choosing the vendor and more making sure you're putting actual good rules in there and that you understand how your application works. So I think that came up in the security ops session. Yesterday about doing some kind of filtering in front of OpenStack APIs and maybe if we had like an open source mod security list that you could put in front of there. So that could turn into a project at some point. All right, anything else? All right, well thank you all very much. I appreciate it.


G'day Moodlers and welcome to this demonstration of Moodle for iPad Okay, so I am assuming that you are running at least Moodle version 2.2 And your system administrator has selected the my mobile theme for mobile and tablet devices in the theme selector settings Okay, they're two prerequisites if you like to be able to do what I'm demonstrating here So let's first log in To our Moodle site So upon log in the user is presented with a neat two column layout It's a white and blue looking theme and as a predominantly monochrome icon set So we're situated on the front page In the left column You can see various blocks that have been made visible on the front page Um They're in collapse form other than the student block. You can see there it's expanded there's three button links contained within the student block my home my profile and log out So if we go to my home This is essentially the my Moodle dashboard. It displays personalized information Including the courses you're enrolled in Assignments that are due upcoming chat sessions and so forth My profile displays the said user's profile information Now if we follow the settings link You can see on this page here we're able to Choose our preferred language edit our profile change our password and so forth I'll just click the Home button situated at the top right And that takes us back to the front page so on the right column That essentially consists of the site news forum And a combo list containing course categories and courses naturally Your assist administrator can configure the front page To your requirements what we will do is navigate our way into a course So we just follow the link And this is a typical layout in a course using the my mobile theme for either your smartphone or tablet device So up the top we've got the course name in the page header and then we have three button style links to settings which takes us to our user profile page jump is an anchor that takes us to the bottom of the course page up returns us and navigation So navigation is a useful way to navigate the course and your Moodle site on the left the leftmost column We can see again the course name the course description and then the The blocks that have been made visible in the set course in in collapse form with these blocks It's it's as easy as clicking the little plus button It expands out the functions or features within that block Click it again to collapse Now further down incidentally, this is not just on the front page, but there's also an independent setting in Each course we can toggle the second column. It's on at the moment if we Toggle it off as you can see here. We've now got a one column layout in this course If we want to go back to the way it was toggle again And we get that two column layout back So we're in uh quite happily that the theme displays in landscape or we could go to portrait view Like so more importantly This mobile friendly theme enables users to participate in a course You know via their mobile device In in in more or less the fashion that they're familiar with via the desktop so we can naturally Engage with assignments blogs chats forms messaging wikis quizzes and so forth And naturally admins and teachers can perform additional functions for their respective roles So I hope you've enjoyed this demonstration Happy muddling


Hello everybody, Andrew Maeski here. I am a registered dental hygienist who has been working for about 14 years now But I now have my own dental hygiene practice where I do teeth cleaning and teeth whitening So I am going to be talking to you guys about the more commonly asked questions about teeth whitening because spring is now here I find a lot more people are starting to ask about teeth whitening because they're either planning to go on a trip They're they're getting married. They are going to a wedding or they just simply want to Refresh their look overall for the spring time spring summer time And ask anybody we all would probably say that we want whiter teeth Nobody ever says that they don't want whiter teeth. We all do so the first commonly asked question is how much does whitening cost? So with my with my own business I I do charge $200 and that includes full whitening meaning you see Results right away. It takes about one hour. That's it plus I give you a tray and a whitening syringe to take home to boost the results about a week later because It's kind of like your hair, you know You can do it it looks awesome, but then it does tend to fade over time But with the systems that I use it's a little bit different I use a mix of carbamide peroxide and hydrogen peroxide So that helps to make the teeth whiter But also helps it to last and then the booster helps it to last even more So I do something a little bit different. That's a relatively new New thing, but it does It does work now typically at dental offices and I know this because I still work at two of them Part time they charge about $300 to $500. Yes, there is a big difference Depending on what system they use So I use the same system I take it a step further to give you guys a booster that is included for only $150 so that's pretty good, right? Right? I would say so So but that's how much things typically cost and I tell patients You can get those crest um, the white strips package for 60 to 70 dollars depending on the package you buy Doesn't it make more sense to spend a little bit more have your teeth whittened by a dental professional Who knows what she's doing and can make sure that you are happy with your new shade So spend a little bit more and get so much more, right? So that's a very common question The next question is well, how does the whitening work? So there are different systems We call the first system in office whitening. So that just means that a dental Hygienist or the dentist depending on the the office does the whitening in their chair And it takes about one hour to an hour and a half depending on the system that they use and then You will see your teeth a lot lighter after that like right away But there's another another option where you can save some money typically and that is The booster that I was telling you about so the take home option We like to call it so so there's the one the in office option and two the take home option So the take home option is where we would give you a tray or trays for the top and the bottom The booster that I have it actually gives you one tray That will fit in the top and the bottom the same time So less time less it's just a lot nicer in my opinion than having to put in two trays, but anyways But that's the take home option where we would give you The whitening syringe to take home and do that in your own trays at home So you would typically wear the trays for about a half an hour to an to an hour every single night For a week to two weeks depending on how light you want your shade to go So that's another question is what are the different options? Typically that take home option is a lot less expensive because you're not taking up chair time and more product To whiten the teeth right away and you're using less product. So does that make sense? So I do offer both to my patients But I like to offer the the in office option plus the take home option all for 150 so because it's just something that I like to provide for my patients, right? So that's just what I do Um, another commonly asked question is will it hurt my teeth and does it? Harm your teeth harm the enamel in any way. No, it does not but something to make note of is And I'll use the same analogy if you were to color your hair Is that healthy for your hair? Well, no, but is it going to kill you? No Same thing with whiting. I'm not saying that it's not healthy But you're penetrating your enamel a little bit, right? So any time you don't have to put something extra in the mouth Is probably better, you know, because it's technically hydrogen peroxide and carbon my peroxide, but do I Yes, do I consider I'm harming myself? No, so that's just my Real honest answer to that is it's pretty safe, you know Is it better to not whiten probably but then you won't have nice white teeth, right? And I've been a dental hygienist for 14 years I see patients all the time who get whitening every six months to every year And they're fine, you know But it can make the teeth cold sensitive. So I tell all of my patients use a Sensitive toothpaste to Use on the teeth so brush With that twice a day every day for at least a week to even two weeks Leading up to the time that you are going to get the whitening because that will actually help To prevent cold sensitivity if you're saying well, I'm not cold sensitive I would still spend the extra money to buy Sensitine so then that way you you know for sure that you're not going to be cold sensitive because remember how I said Um whitening penetrates your enamel, right? So it's not, you know, you don't want something to penetrate your enamel, but that's how whitening works So that's why people can be a little bit cold sensitive not all the time but typically But I can say the patients that I have suggested to use sencine and the ones that do use the sencine They're not cold sensitive. So talk about awesome, right? Um, another question is if you are getting married When should you whiten do not whiten the day before? It's not the end of the world if you do but if for some reason your teeth are cold sensitive If you have a reaction to the whitening which never happens, but it could happen because it's a you know hydrogen peroxide Um, you don't want to have to deal with that the next day for your wedding day, right? You don't want to lose sleep because your to your teeth are just so cold sensitive So I tell people to whiten at least one week to two weeks before the big day Um typically when I go do the wedding parties, it's about two weeks before because a week before They're all doing something else, right? The bride has stuff to do You know the bridal party the wedding parties they all have stuff to do So they don't even have time for even me to go to them, but they're doing other things, right? So I typically tell bridal parties that I will come to you about two weeks before Just so that way it's not too far out So the teeth do look as white as possible plus I do give everybody that tray And the um booster syringe to whiten about a couple days before anyway like just to give it that That new teeth white look if that makes sense Uh, what else what system should you use? This is what everybody's asking me Every dental office has a different system. There are so many different systems out there But the differences are some of them take 30 minutes some of them take an hour Some of them take an hour and a half some of them use a light some of them don't You know, I find just every hygienist has a preference I have used probably four whiting systems in my 14 years experience and I am using the one now That I like the best that seems to yield the best Results and does not make the teeth sensitive. So it took me time to kind of find that happy medium, right? And I'm a portable dental hygienist too. So I don't want something that needs a big light Um, I don't want something that takes two hours to whiten because I don't want to just hang around for two hours, right? More does the patient want me to be there for two hours? So I had to find something that was an hour or less I do have a light, but it's a handheld um light I take before and after photos people love that And it works. It's amazing. But trust me that took time like I as I mentioned I have used a variety of systems even a couple systems that I had used in a dental office I did try for my Patience where I travel to and then I thought, oh, you know what? I don't really love this Like I don't love the results. It's giving me, you know So if I'm not happy then my patients aren't going to be happy either. So I did kind of switch things up Change things around and now I am super duper happy with the system that I do have What else? Oh, how often should you whiten? That's different for everybody again It's the same thing as coloring your hair. I get my hair done probably every three or four months I would love to go every six weeks, but I just don't have time for that Don't have the money for that So I get my hair typically done every three to four months The whitening is the same.  So nice thing is is if you buy that full whitening package say the one that I have for 150 dollars The touch-ups are so much cheaper. The touch-ups are 20 bucks. That's it And then that will give you lighter teeth once again, you know, because I I I will give you The refill syringe to use at home 20 bucks. That's it. You have perfectly white teeth once again So a lot more cost-effective than the crest white strips because They don't offer you touch-ups, right? And they don't really work as well either because the trays Or uh, sorry the strips are not customized for your mouth. So be careful with that another common question speaking of um, white strips or pretty much any company is why Why is the whitening so expensive in the dental office? When the crest white strips or or other systems are like 30 dollars 60 dollars? Well, it's because over the counter products They can only use a certain percentage of hydrogen peroxide usually up to one or two percent In office our our percentages start at 10 percent Up to 35 percent So I check to see what shade you have now And then I will Determine what's uh syringe what percentages you need to get the teeth lighter So if you have a very average shape a 10 percent hydrogen peroxide might be enough To get very very white teeth if you've been smoking for 10 years you might need Um upwards to a 35 percent, right? But again hydro um crest white strips have up to 2 percent hydrogen peroxide The ones that I can give you are 10 percent up to 35. So gee, I wonder which one does a better result, right? So that is something that not a lot of people know um Do the whitening toothpaste work? That's a fun one. So whitening toothpaste do take off surface stains, honestly um, there's a whitening toothpaste actually that I like because it takes off Surface stains, but it does also coat the teeth Afterwards so that more stain can't get back in That toothpaste is amazing But typically the whitening toothpaste do not work because they tend to be more coarse More abrasive. So yes, they take away stain But more stain comes back because now the tooth is more coarse So it's just better to get your teeth whitened with a dental professional If you guys have any more questions, please let me know. I am so happy to help and I will see you guys in the next one


Hey guys, it's Andy Elliott. Welcome to the one percenter podcast today I've got a special guest a real treat. He's an overcomer. I Love watching people that come up. Okay. I mean a lot of you right now. You got scars. Okay?  There's this thing called fulfillment the art of achievement and the art of fulfillment The art of achievement. He's crushing it making a ton of money But he's got this fulfillment now where he's teaching a lot of people How to make money and how to kill it and crush it and how to not waste any more time where you got this short life And you got a lot to do. Okay, so man, thanks for being with us today number one I should tell everybody what you're doing now, right? Like what you're doing today Yeah, and and I've spent a lot of time with him guys. I vouch for this guy. He's amazing I just got back from Florida. He's got a beautiful wife kids are super cool So he's an amazing person outside of business. Let me just say that because I think that's important to know But but also I want it. I want you to tell him what you're doing now Yeah, but then let's go back because you know like I was talking to Andy Frazzell He's a good buddy of mine and and I like when he goes back to and he tells me when they were buying the plywood And they're opening their first business and they didn't make money. How did they get through that, right? So I want you to tell your story guys a story is gonna change your life And I think a lot of you are gonna identify with him He can do it so can you but tell him what you're doing now and then let's go back and let's just go up The things that you learn the lessons things you did right the things you did wrong. Yeah, and what yeah, there's a lot of it Yeah, so my name is Eric Klein 42 years old Happily married to my beautiful wife Shila. I have two amazing kids my daughter's 21 In college right now senior year. I got an 11 year old son and I just watched and witnessed you have an amazing Conversation with him and kids of the future man, man When I when I tell you I was I was standing back honestly try not to get emotional Because that the conversation was powerful and I appreciate you for having that Yes, it's it's everything to me because 14 years ago. I never thought I'd be sitting where I am today My family obviously being one of my my best accomplishments. I've ever done but today, what am I doing today I I Just under three years ago jumped into the the wholesaling industry for real estate I had just come off of a massive lawsuit that I'll I'll get into when we go back in the story But I didn't you know ended a lawsuit was wondering what I was gonna do now as a grown man with a family, you know just Was getting ready to exit a company for stupid cash And I lost it all man I lost I lost everything but four million dollars and I was you know me and my wife were making really good money And we were looking at a nine-figure exit and we went to I want to tell everybody This is when you get tested. Yeah, okay I always say the stress test your your marriage Stress test the things that are important to your stress testing because I see a lot of people and things like this happen And I see you and your wife here today and you're thriving. I know that that was hard Yes, but but that's how I know that you guys are gonna be together till you die. Yeah, because when you make it through that Well, that's that's how you're powerful And that's why this second round it might be the 20th round you get stronger and each time Most people can't take a blow like that when you think something's gonna happen what you'll tell a story Yeah, most people crumble and they're like my life's over your life's never over, right? Okay in the middle of it. It seems like it do listen. I always tell people like dude in three days Yeah, you're gonna look back and you're gonna realize that everything's okay Yeah, you just got to give it a couple days till that time by yeah, I mean by the way But that's what that's why I think you're so uniquely Qualified immensely qualified to coach and help people because the things that have happened to you You can make sure that they don't happen to anyone else. Yep, dude. I love a coach with experience I love a coach that has been burned. I love a coach that has burned people so they know that that's about you I love people that have been through challenges because dude as I'm as I'm coming up and and somebody's gonna help me like I Want to know not what to just look for but also like like what to like stay away from course Hey guys, what's going on? It's Andy a lot of you leave comments telling me that you need help Do me a favor I'm gonna take the best way to get a hold of me shoot me a text message right now 918 210254 918 210254 I'll help you with whatever you need.   Yeah, that never came back and then there's ones that went 20 times bigger I feel like that's where me and my wife are exactly Yeah, you're getting ready that happened for you to get ready for the big daddy one, of course Anyways, let's keep going so that happens In three years you've been able to build this whole this real estate wholesale game Yes to a whole new level now you teach all virtual cells all virtual, but you've you've you have a niche for wholesale real estate You learned really quick. Yeah, and you're making a lot of money with it But you're teaching people how to make a lot of money with it. Yeah, so my my first 12 months in the wholesaling industry. I didn't know anything about real estate outside of buying personal residents for me and my Why that was it? That's all I knew. I've never flipped a home I didn't know what an ARV was how to run comps how to underwrite a deal none of that But I picked I knew how to get someone on the phone. I knew how to generate leads no sales That's it and how to generate the traffic the leads to get people on call centers and stuff too, right for the last 15 years That's that's all I've done. So you know how to generate leads in market. Yes, you know how to sell Yep, so you're in the wholesale game now and you said in 12 months. You did what first 12 months I did a hundred and 18 contracts for 2.6 million and I netted it at 58% Which was 1.5. Yeah, and I had new industry new brand new industry Netted a million and a half my first 12 months. Love that and anybody can do that, right? Yes, this is super easy. Yeah anybody watching this right now. Just so we're aware, okay? If you're not making a million a year by the way, you did this all through the phone Oh, I'd never walked in a single where everybody understand that you create your own life You do it from a phone. Yep, you guys will see a number on the screen. We guys just text that number He's literally built out a training curriculum showing exactly how he did it and you can just do it Rents repeat. It's done. Yeah. All right. Let's keep rolling. So I'm in now just coming up on three years in that the industry have done Just just over eight million dollars again all virtual. I don't go out to these properties In that short period of time. I've also built for the wholesaling industry I own my own proprietary software for a CRM that they can get on it's super important. Yep, and then I've Have a pretty sizable call center that generates leads for the real estate space. Good guys So as you're watching this remember that number I gave you guys can text them You can ask them questions about a CRM you can ask them questions about Obviously, it's programmed what they're doing and then you can just learn. I mean, maybe you need leads I mean, I'm just giving example whatever it is you guys Context remember anything that I can do to provide value to our audience Like there's a lot of people right now that are on their journey.  Yeah, I don't know who it was But they planted a seed that made you get wholesale real estate. Of course.    How are you raised?   Yeah, they can start today and go get it So the the guy sitting here today Was not the same guy. Let's say 15 years ago. We can go all the way back to my childhood listen I grew up in a broken family My parents got divorced when I was in sixth grade and I was a middle child And I remember you know, my my older brother was the jock my younger brother was the mama's boy Nothing wrong with that but I was in the middle and I was lost and when my parents Went out when I was in sixth grade decided to get a divorce.  Hey guys already interrupt the podcast All right, so as you're listening to my man Obviously cool killer comeback story. This guy's crushing and killing the game if you're in virtual cells He does so many things if you're in virtual cells It means that like you make a living by the phone you guys you see this number on the screen You need to text this number this guy's training modules as courses that you can take his curriculum will absolutely show you how to Be a ninja on the phone not only how to smash everybody in the industry But just how to be the best and make what you're worth So if you're gonna take the time to you know be on the phone you might as well get paid all the dough Right so you guys text this number below He'll train you he'll help you any questions you have shoot him a text and let's get back to the video and knock on wood man, I'm the only one right now in my family outside of my sister that that is still married today. Everyone's gotten divorced and and I Remember picking my father because I felt bad for him And it was one of those I made a decision that wasn't I knew wasn't best for me But it I felt bad for somebody those people pleasing so I Remember like at sixth grade the first time I put a mood or mind altering substance in my body. I was 13 years old Going on 14 and the first time I ever drank I blacked out drunk and It was the best feeling because I didn't have to feel anything anymore and from from from 13 to 28 years old I Medicated myself heavily with With the drug that ultimately brought me to my knees was crack cocaine. I was kicked out of high school I was kicked out of the military Didn't get my license till I was 28 lost it at 22 for DUIs five driving on suspenders like I was a Everyone in my family disowned me not cuz they they didn't love me.  I'm saying hey Let me tell you what I see in you. Let me tell you what you're gonna do Yeah, this is what I see happening over the next five months. Yeah, there wasn't people telling us that when we were younger No, okay, like I did the same thing kind of like on your deal Hey, if I could have just found something to find interest in yeah I could have been really good at a lot of things earlier in life But proximity is power.    Yeah, I mean my father was my drinking buddy for many many years Right. Yeah so the the for me what kind of it was my aha moment Andy is I Was blackballed from all the the union jobs in Chicago. I was a union carpenter at the time and I was at this time I'm 28 years old and I was able to get the my union to give me out of my annuity I was able to have them. I manipulated $3,500 Saying like I needed it for a place. I was getting evicted out of or whatever and at this time I was renting a house a Bedroom from a Chicago police officer and he would rent these rooms out to all these college students Well, I just so happened to be the one guy in there that wasn't going to college. I was actually in there doing dope and I had $3,500 and I Remember the dope man would come to the to the back door like clockwork for eight days straight and I was I was smoking crack and I I was so paranoid if I doubt anybody in this room has went eight days without sleeping before But I was I was consecutively up to eight days with no sleep. This is crazy well You'll see by the end of the story how crazy it really was but it was ultimately the the Pivotable moment for me that changed my life is I'm pissing in the corner of the room because I couldn't go out of the The bedroom to use the restroom. I was that paranoid I'm at this point 128 pounds I'm stripping extension cords to gut them and pack sockets to put the crack on it to go out in the You know get the courage to go out into the to the kitchen and light a gas stove And I was I was smoking the the socket off of this heat But I had to get so close to the flame.   Well, no, but they won't tell anything.  Yeah, you can beat it Decision so tell us this this pivotal moment. So I get it now. I see All right, I see the picture. I'm all right. All right. You got it. All right. Did I paint it good enough? But but it's real like there's no sugarcoat in here it for so I'm I'm eight days into this and and at this point You know, I'm under my my covers in my room just shaking sweating and I hear the Helicopter start going over the house I hear the the the police lying the street the ambulance show up the front door gets kicked in and I'm just in my room Paranoid is can be thinking the gigs up My family know everyone knows and I remember I'm coming down the hallway You could hear the commotion coming down the hallway. My mom's out there crying hysterically Just saying leave him alone. He's dead leave him alone. He's dead. My brother's out there You know wrestling with the cops and the paramedics and finally after all this and I'm again I'm in my bed just knuckles clenched to the sheets like this and I didn't want to say anything, you know, I was thinking maybe they didn't know I was even in there and I heard they get they get everybody back And I the paramedics, you know open click the stretcher up a little bit because they had to pivot it to get it in the room and They said on three we're gonna kick the door and I heard him say that and they got you know, everyone was back it was calm and I hear one Two so I jump out of bed and I open the door and I'm like I'm alive And there was no one there it was me in a hallway in my underwear by myself and it was it was August 9th of 2009 and It's crazy It was the day I literally decided to To start living for the first time at 28.  You know, that's gone Yeah, so you want to know it's what's weird is I've told that story. I've been clean now almost 15 years from all mood or mind alter and substances nothing's went in my body and I Used to tell the story of I hallucinated and I didn't say I hallucinated on this time telling the story to you and I Went and spoke in front of right.  You didn't hallucinate He goes that was that was the power greater than you. It's gone. Absolutely. So I quit saying I hallucinated Yeah, that's his holy spirit without a shadow of a doubt. Listen. It's like when you go to a store and Something says pay for this person's groceries. Yes That doesn't happen all the time, right, but when it happens It doesn't just accidentally happen. Yeah, you're like This is weird I'm gonna pay And they're like no no no no my take the card man. We're paying for the groceries It's like cuz I can't I have to do this.  Mm-hmm. You know I'm saying and that's all it was Yeah, I love it. But did that is cool dude.  So yeah, so what do you do? You start cleaning yourself up? Yep You start you start going and obviously the next couple years you get back at work. You start exercising. What do you do? Yep, hey guys already interrupt the podcast. All right So as you're listening to my man, obviously cool killer comeback story This guy's crushing a kill in the game if you're in virtual cells He does so many things if you're in virtual cells It means that like you make a living by the phone you guys you see this number on the screen Text this number this guy's training modules his courses that you can take his curriculum will absolutely show you how to be a ninja on The phone not only how to smash everybody in the industry But just how to be the best and make what you're worth So if you're gonna take the time to you know be on the phone you might as well get paid all the dough, right? So you guys text this number below He'll train you he'll help you any questions you have shoot him a text and let's get back to the video I'll tell you exactly what I did I started taking suggestions for the first time in my life Because my way that's a good one my way did not work for 20 they start running a new play Start running a new play if someone that's done it before me I had eight dollars to my name hopped on a train that brought me back to my hometown Which ultimately there was a guy there that threw me on a plane to go out to Fort Lauderdale to check myself into a treatment center and This time I wasn't getting clean to save a job save a relationship make my mother happy I was literally getting clean to save my life for the first time. I wasn't doing for anyone other than myself But I was taking suggestions from people that had some clean time already that were you know used to be drug addicts or alcoholics and He threw me on a plane brought me down to South Florida Checked myself into a treatment center stayed in that facility for like 60 to 70 days somewhere in that range and while I was in there I thought I was just gonna go back to Chicago. I cleaned myself up and I was gonna get back in the Union and Again where I said I started taking suggestions that some of the facilitators in that treatment center They were like I don't think it's good for you to go home. I think you should check yourself into a halfway house So I went into a halfway house. I stayed there for like six or seven months now The day I walked out of treatment was the day I met my wife I actually met her three days prior to get in out of treatment She met me at my all-time lowest. I was literally still in a treatment center She had four and a half years clean now at this time because she used she used to bang heroin. Yeah, and So you guys grow together for this but she was way ahead of you She was ahead of me and she saw something in me that I definitely didn't see in myself yet That's cool. She had the confidence in the you know I always say she's my number one cheerleader man whenever I have that self-doubt She's always there next to me saying you got this come on now, man So I ended up getting in went to a halfway house started, you know, she went and bought me a nice You know slacks and a button-up shirt and this tattoo makeup to try and go and find the job and Nobody would hire me like I legitimately could not find a job I ended up being a bus boy like I was a bus boy at a restaurant at 28 years old Two buses there two buses home. I worked there for like a Two weeks three weeks they ended up handing me a paycheck For two weeks worth of work. It was a hundred and forty six or a hundred and forty seven dollars still have that check today and and I Remember she picked me up and I had the efforts.   Now mind you she's paying my halfway house rent where I got a rent of bed and At one moment one point of me living in this halfway house. There was bed bugs like all this stuff Sure, and she drops me off at my halfway house walk around I get ready to open the door to go into where You know my room was and there was a white piece of paper it said telemarketers wanted fifteen dollars an hour and I ended up calling that number and I said listen. I live in a halfway house. I'm full of tattoos I got 90 days clean. I don't have a license. I'm trying to get my stuff together Like I was just honest with them I didn't want to go there and then be like dude We can't hire you because the way you look so I just got it all out of the way before I even showed up and they're like You're just the kind of people we're looking for Like I got into a call center and the rest is history dude Worked there for a year and a half Became their number one guide not because I was the most talented. I just out worked everybody Like when I say I was hungry. I was hungry.  I was hungry. Yeah, you hated your life Yeah, man, and I saw I saw an opportunity for me. I saw guys that look like me walk like me talk like me You know in this call center of two three hundred people And I became his number one guy in a year and a half and then I felt I cared about the company more than anybody that was there And I'm like I was the first one there the last one to leave They had to let me in and tell me you got to go And uh after a year and a half me and my wife were like Someone brought me an idea of you could get somebody out of a timeshare And they used to this business model already existed But they would get a bunch of people in a room Pitch them from a podium and then break them off into tables And I'm like if they can do that in rooms like that, I can do it over the telephone Someone gave me the idea me and my wife bought a stack of leads started in a bedroom And we ended up in in nine and a half years building the largest timeshare exit company in the united states Yep, that's what I heard grew it to I had we had over 150 people In in our office in Fort Lauderdale. We were building out a 30,000 square foot facility We were getting ready to exit to a private equity firm. We had uh, we had offers from 147 million for a hundred percent down to like 97 million The deal we ultimately ended up signing an lli with letter of intent Is uh, we were gonna sell 51 of the business for 54 million Me and my wife were gonna retain 49 of it for the second sale And so it would have been a nine figure exit for us and uh like 60 days before the deal was to be done We ended up getting sued by two of the largest timeshare developers in the world. Yeah and uh By at this time, you know me and my wife We got all the houses the cars were made. We're netting eight million dollars a year at this point Like life was really good. So I want everybody to remember this just real quick because this is important You know as we do our podcast. We always try to keep them like whether They have something really to chew on big time right now. You're coaching people on on on A level that can take anyone without going through any of this experience to another level quick Yes going back you literally go through this crack life Right, which everybody no matter what your problem is his problem is we all have the same nasty ass problem They're just they're just different. Of course. Okay. One person. Oh my god. I can't believe that. You mean like, oh my god I can't believe that it's not crack. It's pouring. It's alcohol. It's whatever form of poison.  Yeah, and then literally on the flip side of this, which you said just a minute ago You you find a wholesale real estate. Yep And you start over we still literally picked I I picked the phone back up sat down in the seat just like the damn telemarketing deal It started starting when you're in the halfway house. Yes And so I just want to tell everybody on this call right now Like I think this is super important because I think everybody can relate Without I don't care where you are what I care about is where you're going. Yes. Okay. I don't care what's going on today What can tomorrow look like? It doesn't take long. You made a million dollars in a year doing wholesale real estate a million and a half Which was net you're away. Yeah, so if anybody I think this is important Everybody knows if anybody is in any place right now Like today's the restart day. Yeah, of course. Okay I would want to know every way that you speak every way that you talk the scripts that you use And you have all that recorded you everybody can train on that Make sure everybody who's watching this you guys see this number below I want you guys to shoot him a text. Okay, if you guys want to Learn how he's built these so quickly. He teaches that now. Yeah, which is crazy And I know you do zoom call like masterminds and stuff like that But also there's training curriculums that people can actually without getting on a zoom call Yes, they can actually just train on and they can do it in their own time and write down everything Uh Lastly one piece of advice right because I want to do we're gonna do a lot of podcasts together We're gonna talk about a lot of stuff You're you're about to blow up in this industry and go to a whole another level and do it right this time What's one piece of advice that you would give anybody that doesn't have the life that they want right now I believe sales and leadership. Yeah, we'll get you rich And you've proved that your sales skill and your work ethic will make you rich What's something that you would what message that you would give Man to someone that's getting ready to get started or wants to change So where your feet are today, they absolutely do not have to be there tomorrow And I'm like I'm a living example of that multiple times over again What I had to do is is literally put the blinders on block out all the noise and just get to work Like for me, it's a lot of people will see it Yeah, you can you lead a horse to a water. You can't make him drink You gotta take action Like if you ain't willing to put in the work, you're gonna continue to sit on the sidelines and just watch all of us do our damn thing Like social media can sometimes be very uh tricky. Yeah, but you got to do I like what you did and I'm gonna remember this You go On the count of three you go. I'm alive. Yeah, and no one was there right I just would pay all I paid 10 million dollars to see that. Yeah, awesome So, but but that's what you got to do is you got to be like alive And then you got to just restart Guys, uh, how do they follow you on instagram? The Eric Klein E R I C C L I N E the Eric Klein guys Make sure you follow him on instagram.   He's helping them grow and go to new levels and make a lot of money So I want you guys to reach out to him. I love that. He's an overcomer.  I mean on the other side of that camera There's probably a million people's lives that will be changed. Thank you. Appreciate it So love you bro. Make sure you guys hit him up DM him on instagram Or you guys can just text the number below and uh, we'll see where it goes Okay. Love you guys. Have a blessed day. See you in the next video Hey guys, I just want to tell you the true one percenters you made it till the end of the video Do me a favor. Share it with the friend that wants to go to another level Make sure you like the video comment below so I know who you are Set your notifications and then subscribe to the channel. We got daily sales training videos dropping I'll see you soon


What's everybody Jason ever jazzy case breaks calm 2020 hip parade football platinum edition Series 14. This is a five box case break five box half case break random teams number one So number one sold out so quickly today guys Nick has already uploaded number two and it's already halfway there at 14 left guys So this is just I didn't pay to want to show you guys this is break number one Although they'll say number two this break number one remember it's a early bird break So by one of the first 20 spots in the break to get entered a winter free spot So 32 total spots only sold 31 though with that extra Early bird spot and you get one incredible autograph per box is a high risk But a high reward type of break guys 100 had numbered boxes produced from hip parade loaded with stars and Hall of Famers and then of course Take a look at the some of the superstars Hall of Famers in series 14 So from Dan Marino pay Manning etc etc all the way down to Ralph Grandkowski Russell Wilson and many more So no real checklist, but tells you what players they feature it in this print run Also to guys Just wanted to announce it into this break. So Aaron P. Although you're your invoice and stuff will say number one I believe Nick had uploaded number two, but forgot to change one the title number one and the skew number one to number two so you're technically number two because uh Ends up being that we oversold two spots in this break. So Aaron. I put you in number two. So Aaron P So it's all good your number two So that way you still have your spots in the next one and then Last one was John To make it 31 spots because if I would have had you two here Aaron would have been 33 spots old So I need to sell 31. So you're number two in and then of course early bird break here The first 20 customers that bought in Will randomize the customer names with this dice roller for the early bird for the list of customer names and the teams So good luck with to roll it And we got a four and a three for seven times number one gets a free spot in this break for being an early bird So one two three four five seven six seven Boom seven times Joseph congratulations man Joseph K. You just got a free spot on the break That makes it 32 and now let's go seven times now on the teams and names One two three four five six and seven So Jarrett none to Aaron seven times here now on the teams one two three four five six and seven Ravens down to the Giants There with the Ravens chat with the Colts Joseph with the Jets rally with the Vikings Adam with the Bears rich with the Cardinals Josh proofs of the Raiders Joseph your free spot was the Patriots Jeremy with the Redskins George with the Dolphins ACO the Bengals Steve with the Packers John with the Titans Richard with Richard Martinez with the Chargers Tice with the Broncos Justin with the Bills TJ Poyer with the Chiefs pass go out with the Lions George of the Falcons John with the Rams Let's go with the Bucks Riley with the Browns George with the Saints and with the Seahawks Jeremy with the 49ers SKS of the Cowboys Joseph with the Texans TJ with the Jaguars Richard Schmidt with the Panthers Aaron with the Eagles come with the Steals and Aaron Salinas with the Giants I'll give you guys a quick trade window and Then I will see there's any trades of not we'll start the break Jeremy's in Washington for the Vikings. So I don't know if Riley's here watching I'm assuming no trades Jeremy. So let's just think of what you got All right, you guys so again second half is on the website. It's moving pretty well. So Number two, I believe is already down to 11 left now. I got to put some slots back in until we figured out what was going on with The overselling of number one in case we had to do an early bird giveaway for number two in this break We took out a couple spots. So once it sells out I want to make sure that all the names match at number two Make sure we sold the correct amount of spots and then I'm going to put back three spots in there or two spots However many we have to just in case There you go John with the Rams Last ball multi down in the Redskins and here it is We got case 10 of 10 remember they make 10 cases of 10 boxes each all the boxes that had numbered and they're all mixed around throughout the 10 case print run 100 box print run, so we're just gonna go left or right as we always do in all these breaks Boxes are a little stuck here today. There you go left to right One two three for the left four five six for the right side six one two three four five six This will be for the next half. I'm sure we'll do that pretty quickly And again their hat number this one's 98 out of a hundred Good luck. What do we got? We got a thick model coming up. What's going on with this and it is a booklet and It's Nick Bosa rookie jumbos 12 out of 49 Let's take a look. So that'll be 49ers Jeremy. I don't think that was one of the teams you wanted to trade, but You hit with them nice little jumbo booklet Very nice Cool. There you go Of course one.  It's a pinning one two-color patch and autograph Magnetic is a little scratched up that the carts fine 50 out of 199 for the browns going to Riley. Did you really? Well, this is the new series I believe so they might have just made this recently and we got a Christian McCaffrey It's 23 out of 25 one off the jersey number and it is a rookie from 2017 playoff Right off. There you go Panthers it's going to rich. All right, two more guys. So flawless and It is a dual autograph. How about that? It looks like it was a redemption to Todd Gurley and Marshall Falk dual autograph and it's two out of ten for the Rams year 2016 There you go who has the Rams in this one John McCall. That was last thought mojo too crazy. All right, last one guys Box 15 out of 100 Second half already in the store guys. Oh, this is old school. This is playbook and It's a rookie Kind of don't want to show the back. I want to make it a surprise. This is 2011. I believe playbook So it could be a Julio Jones could be a Cam Newton and it's a 17 out of 25 Just by opening the book. Oh, it's a Julio Jones. Look at that very nice a nice little patch in there 2011 to rookie Julio Jones 17 out of 25 Old school right there very nice patch as well Very very nice Falcon's going to George. He had just signed these like a couple years ago, too The Jones never sold sign anything old school is a rookie here.  That was hip parade Julio Jones rookie booklet Otto the 25 Todd Gurley Marshall Falk dual autograph to 10 Christian McCaffrey to 25 Rookie playoff bigger Mayfield patch autograph rookie from Panini one and a Nick Bosa from NT rookie jumbo patch auto To 49 there you go guys number two is in the store. It's almost sold out guys Jatsby's case breaks. Oh


So guys I think I have found a sidearm equally as good as the last op that also epic yet slightly OP sidearm. This weapon though does have its flaws but if you can get over them and control them you will love it as much as I do. What is going on guys welcome back to the channel and I appreciate you being here. Today we're going to face off two amazing sidearms both hit real hard one is pretty popular in fact it's the go to sidearm and the other one many people disregard due to well basically not giving it enough of their time but before we go any further guys do you want to win some epic loot if so I have emblem codes, sparrow codes, gift cards and much much more to win some simply drop a like on a video leave a comment down below and join my discord server linked within the video description. Okay so the last hope sidearm is the best sidearm in the game I'm pretty sure most would agree but is there anything that can rival it today I think I found that very sidearm and that is the fool's remedy that I am banner sidearm yes you heard that right now using this at first I went with like what everybody else basically was saying and that the thing is complete trash it shoots so quick you can't control it the recoil is absolutely scandalous and it will take a genius to master but in actual fact it really doesn't it just takes a little time this full auto little monster is in fact a monster if you use correctly so firstly let's check out its perks before we check out its in-depth stats so we have moving target which is this weapon's trait perk we have ricochet rounds or accurized rounds control sass tactic sass or fair point sass so this weapon's definitely sassy so it's in-depth stats on screen now let's check them out and then compare them to the last hopes so we fire as 450 rounds per minute mean it shoots roughly 7.5 bullets per second equal now to 15 bullets dead on two seconds it will empty its entire clip in 2.01 seconds reload time is under a second with 0.24 and its abs time is 0.4 seconds damage it does is 27 to the head and 20 to the body meaning damage per second to the head based over two seconds is 202.5 so 405 every two seconds damage per second to the body is 150 fastest time to kill possible with this weapon is 1.04 seconds coming from eight headshots aim assist is 58 and its recoil direction is 94 which we will see on screen now as you can see this thing if left unhandled will instantly shoot high up into the sky but it is quite easy to control don't be put off by what you see so let's look at the last hope comparing it to the full remedy on screen so it shoots slower than the full remedy shooting 415 rounds per minute so basically seven bullets per second it will empty its entire larger clip in 2.28 seconds its reload time is 1.02 seconds and its abs time is 0.5 seconds damage it does 28 per headshot and 20 to the body damage per second to the head it will do 179.4 if you divide its fire rate are 415 rounds per minute by 60 but that is actually counting the time between burst two i've actually timed this to the exact frame and it will shoot three bursts in under a second it will do 138 damage per second to the body its fastest possible time to kill comes from eight shots to the head and will kill in 0.27 seconds which is definitely the fastest i've measured so far it's absolutely crazy its aim assist is 70 and its recoil direction is 93 on the screen now we can see this thing's recoil and to be honest it does drift up but it is easy to control so when you compare the two the last hope is clearly better but it's a burst weapon at a close range when someone is jumping it all over the place you definitely have the advantage when you're holding down that trigger and firing in full auto mode rather than tapping it but even so that outcome between the two here was going to be pretty obvious and the last hope is definitely the best sidearm of choice but the full remedies a great great sidearm for sure and in many many instances you will outgun people using their last hope the full remedies definitely one you should try out and not just disregard as it might actually surprise you and on that note guys we have come to the end of the video i hope you guys enjoyed it if you did leave a like really does help me out if you are new around here and enjoy daily destiny videos be sure to subscribe and hopefully people i will see you on that next one


And for this next story, viewer discretion is advised. No fewer than five persons have died in Yenegwa, the Biosur state capital, in an accident involving a car and a tricycle. Four of the victims died immediately and the fifth died on the way to the hospital. The accident happened along Tumbia Amatsuma Road, which leads to the Biosur International Airport. The other surviving victims of the accident are currently receiving treatment at the Langer Delta University teaching hospital in Okuluveri.


So students, in this module, we will look at the nuts and bolts, the nitty-gritty details about an airline reservation system. We will look at the logical model and we will look at the data model also. Of course, the logical model, as I said before, is at a higher level of abstraction. It is for the decision makers and the managers and the data model is the stuff which is used by the architects, by the system designers, okay, by the people like you, all right. So airline reservation systems are very complex systems and it is a complex piece of software which is running over the network and they are expensive to create, they are expensive to maintain and there are a lot of details which are taken into considerations in an airline reservation system, okay. I have given you some of the background about the airline reservation in the previous module. Now we will look at the functional details, the logical details with reference to the data. So we will be looking at the conceptual data model and we will be looking at the logical data model, conceptual and the logical data model. So now let's look at more details and I will also give a very brief explanation of a definition which is central to this kind of a system and that I also mentioned in the background, right, but I will also talk about you, talk with you about it. So this is the conceptual data model as you can see on the screen and something which is over here is legs, legs over here also. So what is a leg? It is the flight that maintains the same flight number and aircraft throughout its journey from one airport to another airport. So we have this airport A1, we have this airport A2, we have this airport A3 and it goes from here and goes from here and they have this same leg, okay. This is the flight number, right. Now let's look at in more detail. So there are many, many airports in the world. So an airport has these legs and the airports have this flight schedules also and associated with the flight schedules are the flight cost and if you recall in the previous module I discussed in a lot of details how this costing is done. It depends upon how in advance the reservation was made and what is the duration of the stay and what is the class of the passenger and so on, okay. So we have these all those details and then we have these passengers and itinerary reservations if you recall itinerary is a seat, okay. So these are the seats over here and then are the payments, payments reservation payments itinerary reservation seat payments and all of those things. So this is the conceptual data model and now we will look at the more interesting which is the logical model. Now let's look at it in more details. This dotted over here is the referential integrity constraint, okay. It is the referential integrity constraint which everybody knows I hope from this previous courses and if you read and you see over here where we have this over here PF. This PF is the composite key, okay. This is the composite key. This is the itinerary of the reservations and a passenger can have many reservations and if you recall from the previous module these booking agents they are also making the reservations and they are also making many reservations, okay. Everyone is making those reservations, right and those reservations of course involve payment dollars, okay money, right. So this is the composite key where we are tying these things together itinerary reservations and the payments go into the reservation payments table. So now we have these itinerary legs, okay. So this leg is flight number which is actually the leg number, okay. Flight number and of course this is the foreign key and we have the origin airport and the destination airport if you recall the leg is going from say airport A1 to airport A2 to airport A3. This is a leg if you recall, okay this is the leg and then we have this flight schedules. So these airports and airport can have many flight schedules and of course this is the departure date and the arrival date also and then are the flight costs, okay. Valid to the date flight cost. These things to be understood aircraft type and code this also includes and covers the cost also and there is the reference of the calendar, okay. Day number and the business day and the year so their number of ways of keeping track of the time. This is all how the things are falling together. So this is what goes behind this is the logical model of the airline reservation system, okay. This is we are talking about the online airline reservation system. This is the logical model behind that system and if you some part of your carrier you are there and you would like to or you are required to develop an online airline reservation system. This is the logical data model. I have given you the background and I have also discussed with you the conceptual data model also. So logical data model, conceptual data model together you will be able to design and then subsequently develop that system which will be an online system with the front end and the back end with all the details with all the tools that have been explained to you. You have been exposed to all of those things so everything should tie it together. That is all I have for you in this module thank you very much.


Hi, my name is Jayawitch, a chorister from Nairobi Central SDH Church. Well, you can guess what I'm here to tell you about music, but more importantly I'm here to tell you that despite everything going on around us, we'll still have our camp meeting for the year 2020 and it shall be from the 8th of August to the 15th of August. I invite you to come and as usual despite what's going on around, we'll still have choirs coming and the choir that the main choir will be having is Shofar. And this is what they'll be doing. We also have many choirs in our beloved choristers that are here to bless us and to uplift the worship in music. So please don't miss Karibu.


Enzo smiles. Wouldn't you say America is easily the biggest warmonger in the planet? Yeah, indeed, easily. In nothing, nobody even comes close, nobody even comes close. From the last stream, people mentioned the United States has 800 military bases in the world. How many crews have they done around the world? How many puppets have they installed? How many assassinations have they done? There's no doubt the United States, in collaboration with the UK, by the way, and European countries. But in all of them, United States is the active, the spearheading, whatever is going on, easily contributed to the largest amount of war. No one even comes close. No one even comes close. EU and US. Microtwist says that EU and US together. I agree. EU and US together. But the United States is the person in charge. Tinderos. Thank you very much for the follow. Salutations. But EU has a huge part to play in it, right? Like Libya got annihilated. The country with the highest standard of living in all of Africa for decades, right? The United States in collaboration with Canada, France, and Italy, and the UK bombed a shit out of Libya, took Libya, the country with the highest standard of living in all of Africa. And this is this is huge compared to the rest of this, right? You got to put this on. This is on a flat map. You look at this on a globe, these countries become much smaller, right? Northern country. This is way bigger. You can fit the United States, you can fit Canada, you can fit India, China, you can fit all of that inside of Africa, right? Highest standard of living in all of Africa to open slave markets. And from here, millions flooding into Europe, something that the Qaddafi said would happen, right? And European countries did this. So it's by design as far as I see it, right? The flooding of you want to call them refugees, economic migrants, invasions, some people like to call it. Coming into Europe was by design. There's no doubt about it now. There's no doubt about it.