to exotic wine travel. I'm your host Matthew Horkey and we have a very special guest on the show today. So somebody that Sherry and I have been wanting to meet for a long time. So for you wine nerds you probably should know who is sitting right next to me for those of you don't know. I have a columnist for Decanter, contributing editor to the world of fine wines, financial times, your co-chair of Decanter World Wine Awards, correct? Vice President of Decanter World Wine Awards Asia, author of more than 13 wine books. We have Andrew Jefford. Thank you so much for being on the show. I really appreciate it. Great to be here with you Matthew. Thank you so much. You're welcome.  Yeah well you know I've been on the wine trail like you are very much nowadays for about 30 years. So you pick up a little bit as you go and you know I've been lucky enough to have the chance to turn that into a lot of writing down the years which I've really enjoyed doing. I love writing. Some of it is in books, most of it has been in journalism and here we are. Here we are today in Croatia. For people that know you live in Europe, right? Yeah I live near Montpellier in France. So really the world of fine wine. So you know it's awesome. We're here actually in Kutievo in Slovenia. We're actually Kutievo sellers tasting, we just tasted some archive wines back to the 60s even. You want to talk about this is your first time in Croatia. What was your familiarity with Croatian wine before you even got here? Well you know in recent years particularly in the Cantor world wine awards we've been coming across some very interesting wines out of Croatia, the Malvasias out of Istria and so on. And I just got my curiosity going and I'm always looking for you know I write columns so I have to keep the variety up. I have to keep going to new places and discovering new things and passing that on. So it seemed like a great opportunity to come over here. I'd like that you're enthused about coming over here. Yeah absolutely. You know some really very interesting wines coming out of Croatia in recent years and we I mean we you know people outside Croatia don't know those so well yet. A lot to discover and so now to be here in the country and you know get some feel for the actual physical texture of the place. It's wonderful too. Yeah. As well as the wines. I mean we haven't actually Andrew hasn't been to Istria. He'll be he'll be going over there tomorrow afternoon but we did sit down over a couple of days tasted through a lot of wines from the uplands from Slovenia from Dalmatia. You also you obviously here in Slovenia get to visit. Yeah. What's your overall impression from what you've tasted? Yeah. Yeah. Well you know Croatia is the physical texture of Croatia is quite is interesting. It's it's it's a long stretched out bent curved round sort of country and it goes through many different climate zones too. So you would expect there to be considerable variety within the wines and in fact that is what that's what we found in the tasting over the last couple of days. So you have everything from sort of super light and graceful white wines through more much more structured white wines from the Mediterranean zone let's say and then you have these really very interesting red wines very typically classical European red wines in some ways you know people who are new to them might find them a little bit difficult because they're quite rich in tannin and quite structured and quite firm and often very characterful in their profiles but that's the sort of wine I like you know I like tannin I like wine with tannin I like wine that goes with food for me the tannins are very important because somehow inside the tannin of all great red wine is the profundity the the real depth the the really interesting things are sort of hidden inside the tannins they can seem a bit difficult when you first come across them as a new drinker but when you know the more time you pass with them the more you understand them and more profoundly interesting that side of the flavor actually is I think so I was really thrilled to discover quite a lot of wines like that yesterday.  Well we were just talking about you know the reds obviously Plavacimali is you know distinctive signature red from Dalmatia and that that was interesting but for example you know here today in Slavonia which is the other end of Croatia you know we've been tasting some Cabernets and Merlos you know international varieties and actually you can see that they also have structure then they're not simple light and fruity wines at all there they have a different profile because this is a different place it's a not necessarily a distinctly cooler place but certainly a much greener sort of place slightly higher altitude and set well away from the Adriatic Sea so a very different style to them a different weight but at the same time there is that kind of structured firmness there as well. I know that you were yesterday you were really fond of Plavacimali and it's a love it kind of Haiti grape for those of you watch you know that Sharina loves it I'm a little bit more lukewarm on it what was it that intrigued you so much about that variety? Well you know it is it's really the the the tannic structure and the nature of the fruit and when we talk about the nature of the fruit you know you're really getting towards the thing that makes the variety unique actually because it's we were searching around afterwards for for other varieties to try and describe it in terms of in order to to kind of pass on some information about it of course every great variety really is itself so you have to come you have to taste it otherwise you'll never really understand what it is but for me it wasn't sometimes analogies have been made with Nebbiolo but it wasn't particularly like Nebbiolo because what you have with great Nebbiolo is yes it is tannic depends slightly how it's aged but it can be aged to silky smoothness but in principle it's a tannic grape variety but there are sort of tannins that you don't necessarily feel on the side of your tongue it's further back in the throat actually very often and the tannic structure in a Nebbiolo is often quite almost separate from quite vivid acid structure as well so there's a sort of a kind of bipolar tension in the wine that you don't get at all in Plovac Mali. Plovac Mali for me was much more like really great Merlot can be tannic from Pomeroy-Santa-Medium right back Bordeaux not so much elsewhere but certainly in those places a little bit in Tuscany as well but to me that the tannins of the Plovac Mali are a little bit more like that and then some another great variety we were thinking about you know to compare it with Vesaparavi from Georgia so sort of somewhere between those two poles there is this interesting unique grape variety here on the Adriatic Coast which is doing something really quite distinguished and noble serious wine for sure. That's quite true here I'm the one that made the Nebbiolo comparison and unfortunately nothing in the tasting tasted like that shows how green I am but anyways it's all about the discussion you know you know I'm not saying I'm right but that's just the way I perceived it yesterday and then the other thing we noticed yesterday we had a chance to look at some older wines yes and you know you can see how well it ages you know I had a chance to do some historic tasting of Saperavi at the end of last year out in Georgia and I was very surprised by how quickly the Georgian Saperavi can modulate it changes and transforms and the tannins actually soften out quite remarkably swiftly whereas Plovac Mali they hang around they don't disappear and then of course another variety that made us think of was Zinou Mavrou from Greece so you know lots of these interesting comparisons to make. So what do you see you actually surprised me with your enthusiasm with some of the wines overall and quality kind of what do you see a lot of people don't know that Croatia even makes wines are considered to be Eastern Europe Eastern black. How do you compare the quality in terms of you know some of the more renowned wine regions around the world? Well you know we've talked mainly about red wine so far but actually Croatia is mainly I believe white wine and that you know there are these very distinctive unique varieties for white wine too you know here we are in Slovenia so we've been tasting Gresovina which is sometimes it goes by other names elsewhere Belcheri sling and Riesling Italico and so on and you know I remember when I was a little boy just discovering wine 35 40 years ago back in those days my dad used to buy bottles of I think it came out of Serbia sort of Lasky Riesling which was a very kind of simple fresh quaffing white and to discover just how actually serious and good that can be in the right place and this is obviously the right place for it was a real eye-opener so that's that's been one thing obviously that these extraordinary Malvasias from Istria are very very interesting that's a you know a structured white variety it doesn't it's not fresh it's not green it's not planty it's not sappy in the same way that the Gresovina is it's you know it's a broader structure almost more lemony more floral but you know always broad and structured we actually haven't got to Istria yet we're going there you know the next couple of days so I'll be able to describe it a little bit better than probably but then the other interesting one that we came across yesterday was POSSIP POSSIP POSSIP POSSIP yep POSSIP like full ship okay which is from down in Dalmatia again and you know made in a variety of styles but some of the contemporary styles are actually you know shockingly good in terms of fragrance and freshness and intrigue and sappiness as a density there and you know when I think how much sort of second-rate Sauvignon Blanc there is floating around the world you know you have a wine like that which is really noble and profound and interesting and shockingly good in some ways way better than a lot of you know the trivial Sauvignon that people are coughing yeah or the sort of throw away Pino Grigio's and so on you know it just seems such a shame that the wines like this has yet underappreciated it will come but for the time being the world doesn't know about these wines and there are these pressures just waiting there to be discovered that's right that's what we're all about so what do you think that of what only Croatia you know we cover a lot of a lot of Eastern Europe and a lot of odd countries even yeah these countries need to do to kind of position themselves get their wines more known to the outside world well you know the best thing they can do is the thing that all the best people in those countries are doing at the moment which is simply make the best wine you can because the world you know the world is very mobile now they're people like you traveling around people like me traveling around you know I'm involved in wine education more and more so nowadays people are hugely hungry to learn about wine wine tourism is booming you know people want to go out and discover things so that the best thing that that all the winemakers can do in those locations is just refine their art really think seriously about what they're doing do it well create something beautiful and then people will find their way to you I'm sure you know I don't I don't think you have to necessarily stress yourself out to have a kind of enormous marketing campaign and this unless you really have trouble selling enough to make a living which I don't think anybody in Croatia does if you make good wine in Croatia you will make a living maybe in Moldova it's a bit different I don't know but anyway in a country like Croatia probably Georgia nowadays as well certainly in Slovenia countries like that you know people now appreciate the quality of the wine that's to be found in these places and people are ready to beat a path to their door and you know sommelier help a lot you know sommelier you know want to discover new things all the time they taste well they're thinking about wine and food the whole time so they're not they're not hidebound in the way they used to be in fact almost the opposite they've almost become fashion crayons but but at least that you know that the whole quest for for something that's fashionable and interesting is bringing these kind of wines to the fore as well as the son of the more exaggeratedly fashionable things you know I find it funny even though we can't straight obviously we we covered right about all these new fashionable things I love everybody goes away from some of the classics and now you can go like in Bordeaux can coin and grab great wine for peanuts not at the top yeah what do you what do you see for the last question kind of what you've seen it from afar judging it you know being the chair the decanter world wine awards you know seeing countries like Croatia others Eastern European countries get more and more metals and now you've been here you've tasted you've smelled you've seen firsthand what do you what do you kind of foresee for Croatia maybe Eastern Europe at large going forward yeah well you know as long as the world keeps on a steady prosperous course which is never certain but let's hope it is that's the way things are going to pan out I foresee a you know very bright future for these countries because you know they're not they're not really up against the wall as far as climate change is concerned there's a fair amount of latitude here still you know we're here in in Slovenia it's been pouring with rain for three days in mid to late June and you know there's no problem of drought here for example at the moment quite the opposite yeah so so you know they can sort of I don't want to say relax nobody can relax like climate change but maybe they're a little bit less threatened by than than the climate that by climate change and some of the more extreme Southern Hemisphere locations for example and you know they have people want authentic products people want products with a history with a story with a sense of place to them with this famous sense of terroir that people talk about and these wines and these places have all that in spades so you know they've got an awful lot of they've got an awful lot of credit they've got an awful lot to offer that the world wants so they just have to keep refining their art as I say keep presenting it in an intelligible way keep you know not just working at the winemaking but working at the packaging and the design and the conceptualization and the storytelling because the storytelling is immensely important too you know no wine should ever go to market without a back label the back label is a chance to tell your story you know and tell it directly to the community to the consumer as they're drinking the wine so as long as they do all of those things I had I think they have a very bright future well thank thank you so I know we'd love to sit there and talk for hours but we're I have to cut you have you're busy man so thank you so much really people can find your work on decanter I'll put your website at Andrew Jefford comm any world of fine wine correct world of fine wine absolutely every three months and well there's a book called Andrew Jeffords wine course if you want to have an introductory book on wine I'll put that as I'll put that in the description box too so thank you so much you're welcome thank you guys you know if you want to learn more about Croatian wine I'll put the link to our book actually in the video too and if you like this video please subscribe to our YouTube channel exotic wine travel and we will see you at the next episode


All right welcome everyone to not related episode number zero in fact I don't really think this is actually going to constitute a real episode But I wanted to put out a little Informational not just for the people who already know who I am and might be subscribed to my YouTube channel But just for anyone who wants to know what this podcast is about long story short It's going to be about a lot of different things a lot of different topics a lot of big-brained Topics as the logo of the podcast suggests That's a little bit satirical in case you guys have no sense of irony, but in this podcast Well, actually I should give the background why I'm actually doing this people have been nagging me for a couple of months now to do A podcast for a lot of different reasons And I finally decided that might actually be a good idea Now for the past two years, I've been putting out YouTube videos Most of the the content of those are on things relevant to technology system administration system configuration on You know Unix based systems, which is frankly not the kind of topic.  I do enjoy putting content like that out But I always wanted to branch out on YouTube But the thing about it the thing about the me the not just YouTube but the general medium of video is that It's very hard to do video editing Lots of you probably know this and there were a lot of topics I wanted to do videos on that or at least put out content on that I realized that making a video on it would require a lot of effort like if I have something that is 30 minutes long if I record this informational thing that's 30 minutes long and now it's not a screencast Mind you, I would have to do 30 minutes of video editing which actually takes you know for me takes about three days of working on stop Yeah, I would probably say I'd say I'd say for about 10 minutes of video. It takes me like a whole day to do it So I'm not the best video editor. It's not something I enjoy. It's not just something I do slow So I really wanted to just be able to put out content easier And I realized there's this crazy idea called podcasting which everyone was telling me to do that I should probably actually Look into so I actually have show notes for the first couple of episodes already planned out But I wanted to just wanted to tell you guys what exactly I have in store What the idea is behind the whole thing now as I said, it's gonna be you know big brain topics I think it's not really well I should say my view on a lot of podcasts and this isn't meaning anyone who does podcasts, but a lot of podcasts out there.  What about sometimes they just want to hear someone talking in their ear and that's what they need to survive and I'm sort of giving into that, but I want it to be a little more contentful than I think a lot of this stuff out there And I don't again. I don't mean this in a condescending way at all But I guess my perspective is I I'm sure a lot of you guys who are listening to this especially on YouTube know me already You're already my YouTube subscriber But there's a very small portion of my life that I actually put on YouTube not very much about it people I guess would have a skewed view of who I actually am and what I actually do Some people might know that for example, I am in a linguistics PhD program If you were still people would know about that that doesn't even matter to me that much I should give everyone a I guess a little background before I explain What precise topics we're going to be talking about in the first couple of episodes? My name is Luke Smith. If you can't already tell that wherever you're seeing this video or audio I should say, you know, I guess when I first started getting into Academic II things or things that I guess were a little irregular was in high school in high school Somehow I got it in my head that I wanted to learn Classical languages. I wanted to learn Latin and Greek and Sanskrit which I know Sort of in that order. I know Latin best and Sanskrit least So I started studying ancient languages. I wanted to learn about the reconstruction of early human history I wanted to learn about languages in themselves. I wanted to learn about I guess sort of human society at the boundaries of our awareness and Early human cultures and things like that. So that's an interest I had in high school and I'd skip sociology class to you know, where would I go? I wouldn't go behind the high school and smoke weed I'd go into the library and I'd read this exhaustive biblical commentary with you know the original language and stuff like that because that's the kind of stuff I was interested at the time. Now don't get it in your head that I'm a linguistics person Given that I've said that and given that I am actually in a linguistics PhD program right now When I went off to college my degree was actually in international economics and modern languages and I focused on various topics. I got concentrations in International trade, economic history, those are the things like I was more interested in economic history And I also got minors in Chinese and Spanish. I was in Yeah, trying to think if there was anything else. I had an interesting undergraduate life I'll just say that And I went off at once I got my degree. I had this I there was a fork between me Oh the fork in my life It was a three-way fork and I had the decision do I want to go into economics for graduate school? Do I want to go into linguistics for graduate school? Or do I want to have a real job and actually contribute to society and of course? I didn't choose that which I actually regret you know Don't go to graduate school. Don't even go to college everyone all my subscribers should know that I am very much against going to college It's a seriously a waste of your time even if you're like me and you you know got to go to college for free with the Hope Scholarship Anyway, so I went actually to a Linguistics program and I went to the University of Georgia there. They have a very powerful historical linguistics program It's actually just one man one man Jared Klein very interesting fellow But that's enough to have a good historical linguistics program study gothic a little bit of Sanskrit I didn't actually take the Sanskrit classes, but Indo-European kind of stuff That's what I did, but I actually while the time in the time. I was there. I actually got interested more in I Don't want to use the term modern but more contemporary approaches to linguistics, which when I say contemporary I mean it in the bad sense. I took classes in syntax and I sort of had this terrible idea that everything in the field was horribly wrong and I naively Got into my head that I wanted to go into syntax or formal Linguistics generally just to right wrongs and get things right. I thought of it sort of is buying low and selling high I thought the field had a lot of obvious errors, and I think I had the naive idea that those could be Fixed as if there's no academic ego behind them but that's what I ended up going into I wrote a Dissert or a thesis I should say a master's thesis on external possession It's just the kind of linguistic construction But they arguments with my thesis aren't particularly important. Maybe I'll go and do it later, but then I went to a PhD program at the University of Arizona, which I'm not going to talk too much about that to be honest but I will say my interests changed in that period and I became more interested in the evolution of language in the human species as a as a Biological entity as in how you know the actual biological architecture between behind how we can process and understand and produce language But also more generally how languages have or how language affected human evolution and that's something that I've also been interested in and I think I have my own theories That you know totally rewrite the field as every academic has of course or at least all the Remotely interesting ones not to demean anyone out there But I have my own ideas and that's not necessarily going to be the content of the podcast But I just want to give that background just for those guys who don't know I guess about my academic background. Now, what am I going to cover in the podcast? Generally now in my time, I've read a bunch of books. I've mold over a bunch of concepts Either in economics or cognitive science or psychology or linguistics or whatever or just general history general whatever and A lot of them have been sitting in my brain for a couple years now and I'm not the kind of person who reviews a book or reviews an idea and then Makes pronouncements immediately and make you know goes with whatever my first Reflexes are but I think it's about time where there are some books or ideas that I think have been an influential But also unsung in a lot of fields and I want to give them voices So for the first couple episodes of this podcast I actually want to talk about some of those ideas and some of those books that I think are extremely important now This podcast is not going to be a book review podcast Although a lot of the episodes are going to be sort of like that not not really in book You know about non-fiction books specifically as books I don't really care about the the book itself But the idea behind it and in the greater context of it So for the first couple of episodes, that's what I'm going to focus on Now for episode one if you've kept up on my blog I think I've mentioned this a couple times but for episode one. I want to talk about a very Book that I think is very fascinating and it's something I'd like to hear a lot more you know from different cognitive scientists because it's an idea that I think is very fascinating well, let's just say viscerally pleasurable in how bizarre it is but also very Defensible on scientific grounds and that is the idea of the bicameral mind. It's an idea Popularized by Julian James. Well, he invented it. He didn't just popularize it But he wrote a book called the origin of consciousness in the breakdown of the bicameral mind And that's going to be the topic of the first podcast episode I'll go ahead and say that what this is on what the the general idea of the book is that Consciousness as it appears to us the internal world that we have or we perceive things is not something inherent to our brains But it's something that we learn. It's something that's almost cultural And it's something that actually didn't exist in not just early humans, but early literate humans one of the claims of the book and the idea is that Early Greeks early Hebrews early Sumerians were not in fact conscious and a lot of their social structure actually reflects this so Stay tuned for that in the first episode and that I think is going to set the stage set the tone for some of the episodes later On now as I said, there are going to be other topics for example I want to talk about some books and economics for example one of my favorite books and economics is Joseph Shumpeter's Capitalism socialism and democracy. That's a topic. I want to have pretty early on I'm gonna have books on history and other things just to get that out there now again I'm not going to keep myself just the books I might actually have guests on who might be academics in a particular area or I might just even Potentially in the future have a co-host if some such worthy person presents himself But that's all in the future. I'll just say for now I'm gonna be putting out these podcasts and I don't know how regularly I think I'll either do weekly or bi-weekly or bi-weekly, you know every other week But really whatever time schedule I can work out. So Anyway, I hopefully that'll give you an idea what the podcast is actually going to be on and I think the format I'm actually going to approach it is probably I'm going to have show notes I'm already starting to make show notes for the first couple episodes I'm gonna go through them sort of monologuing them when I get tired. I'm gonna take a break. I'm gonna come back I'm going to read Emails from other people relevant to previous episodes. Maybe read donations I will put my email address and you know donation PayPal whatever In the video description or whatever other medium you're viewing this on But I'll put that there and after I read Donations or emails all go on your fur part to and finish up whatever talk pick I'm talking on And I'm hoping that each of the episode is going each of the episodes are going to be contained within themselves and Be enjoyable as entities in themselves for people who are watching either on YouTube or elsewhere Now I might have said this earlier, but I'm not leaving YouTube. Don't worry. I'm not gonna quit doing that No, I haven't put up a video in the past two weeks or so I've been very busy not just on preparing the stuff for the podcast but other things there's again I have a secret project that I'm working on. I don't want to tell people about it But don't worry about that. I'm still gonna be putting up YouTube videos and I'm going to be putting up all these podcast episodes as YouTube videos now I highly recommend you subscribe to the RSS feed that is in the video description or wherever else Be sure to subscribe to that But if you are a YouTube subscriber, you will see these pop up whenever I have a new episode and Yeah, that'll be about it. So anyway, if you have any suggestions good suggestions They have to be good ones. You can feel free to email me at Luke at Luke Smith that XYZ If you don't get a response, don't feel bad just because I get so many emails even now even before starting a podcast I get a lot of emails But that that's gonna be about it. So I'll see you guys next time I'm gonna start preparing the first episode when I get the chance and I will see you guys then


Okay, cool. I would say ladies and gentlemen, but I don't know anybody's pronouns Hey, everybody. Thank you for coming at oh my god. It's early here at lovely Boston University the Topic for today's conversation and hopefully we'll be a little bit of a conversation is delegation I'm Adam young close Lucian's architect, which means I help people build their castles in the air. I Have many years as a software developer before deciding I should actually go over and Talk to end users of our software So if the past couple years, that's what I've been doing when we talk about to delegate means to Give to somebody the power to do something a task and trust a task Maybe multiple tasks for somebody and usually you're passing this on down the line when my little visual here is our Delegates as they drafted our Constitution and the idea is that this is how? Organizations scale. This is how you can do something as big as run a country You can't do it all yourself. You can do anything. You can't do everything So if you need everything done, you have to give some of that to somebody else If you have a so here's a org chart doesn't really matter with a little box to say We all know what an org chart looks like and up at the top of the board directors who delegates the CEO and eventually things get down here to Information Technology Department to actually execute things. So what have they delegated down? They've delegated power they've delegated the ability to execute tasks and and this Concept this idea of delegation is kind of Ignored you know when we when we talk about the the personal Devices that we have here Delegation is still important, but it doesn't become the first-class citizen that it really needs to be when we start talking about the cloud So what I'm going to do in this talk is I'm going to take it from The the small scale to the large scale and talk about how you can build better delegation into what you're doing and so when I delegate to To you the ability to do something important like drive my car That's not my car, but it looks a lot like that one I don't give you my whole key chain Right, there's a lot of stuff on here including my other car The key to my house which you don't need if you're driving my car and You certainly don't need the key to unlock my son's bicycle what you need is the targeted delegation for the resource that you're going to be commanding and thus We give just enough to get the job done the further you delegate and I say this as a joke I love Howard's artwork and his stories, but the point is is true that If you want to feel comfortable that your organization is scaling and getting things done You want to feel comfortable delegating on down you want to do this in such a manner that you know that only What is necessary goes on down? Now we don't typically do this in systems we typically Make the admin do everything Until we get to the point we can get to self-service provisioning. So it's kind of all or nothing. So what are we talking about in? the realm of Linux as far as delegation files Really everything comes down to files within Linux is you could say it's system calls and Yeah, there's there are a few other system calls that don't quite fall into the file category this stuff like iOp of that for the vast vast vast majority of things including sockets and File descriptors of all different sites you can read you can write and you can execute And that's the level of granularity that we have and We can delegate this we can assign on a specific resource on a specific file to a user a group or the world The ability to perform one of these things. Okay, this should be a shock to no one This is all old had you guys you like why the hell am I in here? I should have gone to the containers talk Okay, yes, right. I want to give you and only you the ability to Read a file. I wrote How do you do that? How do you make it so that only one specific targeted user? Hello, everybody. I guess I'm gonna have to start all over now. Thank you all for coming on in I realized a really early thing. You've missed the drama. You missed the saxophone although I might be a little bit at the end But there's enough new people in here just to go a quick catch up. We're talking about delegation There was a lot of big drama about the ideas of how you delegate down a hierarchy and give power to people down the bottom Now that we're caught up. We're at the point where we're talking about file systems. Okay, because delegation in Linux is targeted at the file First of all, most that's the primary resource that we have and I'll go back one slide And then I'll you should be close enough to cut up. You can read you can write you can execute That's the level of granularity you have on a given file And you can say a user me the person who owns it the group that owns the file that the file is labeled with or the world and That's the that's the these are the rules of the game. Now. Yes. I understand that in Linux there are capabilities, there are other ways of doing things and You should use those two what I'm going to do is focus on this right over the plate way that most people think about managing access because capabilities are a whole Bigger thing and yes, they exist there. Yes, you can use them. That's not what I'm going to be talking about here I'm going to say how do you make a better system for handling what people expect? Because the bottom line is if people don't know that a A feature exists. It doesn't exist Right. So how many people here are familiar with capabilities in Linux systems? Okay, so you I drew a security focused and security concerned group. So Bit of a selection bias there. Good. Good. Yeah, and I'll treat you to trust you to go out and read about them and be able to use it I'm talking about for now just the basics and As I was saying here is Pointing a random audience member out completely randomly. I want to let him Read a file. I wrote in only him. How do you do that? Short of capabilities With that granularity that we had before The only thing that allows multi-user access and limited multi-user access is the group abstraction Okay, not a super Powerful tool, but that's the limitations that we have to work with it Now I can show it. I can say oh he can he can He can read it now, but at that point he owns it to which point he can say oh you can no longer write to it or He can share it with somebody else. I don't want to give away that much power I can change the group of it, but I have to be a member of that remote group Okay, and in order for him to be able to use it He's got to be a member of that remote group and the permissions have to be such that Owner has right permissions and group has repermissions And we need a two-person group so guess what I have to go to the admin say hey go create a two-person group okay, so Etsy groups is owned by root I have to go to the the system administrator and if it's you know my laptop I am that system administrator, but then again, I'm not gonna let you on my laptop We're talking about multi-user systems here. We're talking about systems where people are going to be sharing resources and So in the Etsy group's file we have a group we call it say that this one is an example of a group called testers No password. That's what the X means there The group ID and then a list of the users that are in there You can see a young's in there. I put route route in there cloud user. So come from the blah blah blah Okay, so this is what I need to be able to control Now if I want a group like For this do thing I have to use the admin to create a group add me to it Add you to it. All right. Now. I want to add her Or her whichever her I want to add somebody else to this. Okay. Now. I have to go back to the admin Okay, you can see for a single file for a small resource. This is way too much overhead If you are dealing with something though that you have a group forming and Dynamically changing you want to be able to add and remove members from this group yourself The admin is going to be the bottleneck and that's the part that we want to get away from here So while this limited two-person group is maybe too small a scale to really give you a sense of the problem That's that's really the abstraction that we're talking about So I want to be able to add a user in a group without having to ask that administrator So here's Here's a hack. I've been thinking about three years to be able to solve this at this all and I promise you This is not the end of this. This is I realize I'm going a very slow pace Let's create one file per group now. Why don't we have this now speed right now? When the operating system has to check as a user member of a group it can look in a single file look it on up But we're not talking about that and group yet. We're talking about how we would administer it Okay, so if we create one file per group where the name of the file is the group You can add a user to the group if you have right permissions on it If you can write the file you now have control of the group But you need a utility to then take what's in this structure in update at C groups. Okay? Again, this is using Simple abstractions, but this abstraction doesn't exist in the old Unix and now Linux a few of the world And we can do the actually we could do the same thing with with Etsy hosts, right? Okay, so before we go on there I'm going to give you a little sense of what this looks like and I have to say I'm feeling particularly pleased with myself Because I'm doing split screen here because I have presenter view here and that there and I couldn't figure out how I could Not have to switch between that a mirror view to do it So I'm using T mocks and it turns out with T mocks if I do Type here. You can see it up there. So this this this is pretty now. Can you see the screen up there? Is it is it too small? Very small. Let me get that one larger I'm gonna go full screen here. So what happens when I echo is not exist.  Okay, so What we have here is I don't have to look up there. I can look down here. Let's see That's that's the whole point of doing it this way, isn't it? Okay, so We have this thing called group man and We have an Etsy groups file, you know, that has Let's let's let's do it with less. Okay. Now.  So and a couple other things. So what do we do? We want to be able to then take a look at a Groups file and I have a group dot defile a directory and underneath there. You can see I have a bunch of directories Let's take the web dev group And that's a bad one. There's nobody in web dev admins Right. So I want to add Adam and remove pre-fee. Okay And if we look at one of the other ones like DBA sim similar kind of thing Nobody there Network. Okay. So I want to add myself to the the network group. Now you can see Actually, okay This is why I never do live demos. It's only a member of it. So you can see I'm I own this right? so I can go into This and so before before I make a change there when I want to show you just what happens when I make the change that I have having these files pre Preset you to do this as route So this utility has to be run as route because it is the thing that has the power to update the file and The utility could either be done as a set UID Permission in which case anybody could run it whenever they make changes, which is what you would want But that does have the potential for abuse The alternative of course is that you put it on a cron job and then there's going to be a lag So you have to figure out what is the right method for your organization to be able to do it, but Hopefully now this works. Let's see CD. I'm gonna have to use a brain so Python 3 Group man I'm one level too low makes you Now you guys are probably going. Why did we not go to the Kafka talk? Okay, so that's gonna blow up because I need to give it some parameters. What am I going to give it? I'm gonna tell it where my Etsy host file is and the reason why that parameters in there Of course like all good things. I want to be able to test it so I want to be able to use it on the non-production workloads and And then I need to say where my data directory is that's the host. Yeah, you can tell what I'm used to I'm glad I didn't go. Wow, that would have been bad. Okay, so what did I just do? You can't really see much of anything, right? Well, I actually kept a previous copy of it So what I'm gonna show you is first of all what it looks like now And you can remember it was nice and pretty before and in all that Oh guess what doesn't alphabetical order so you can see in the middle aside from pre these groups and J Williams and all that kind of stuff There's that web dev group. I created the DBA group Andre Pat Randy are in there now They stayed in there because remember those files were empty. So I only want to be able to make changes I don't want to go in. I don't want that to necessarily have to be the canonical thing I can't I can leave them all in their plus format, but really What I want to say is this is my way of making changes so you can see that for each line there There's a plus and there was a minus, right? So now these groups exist and Arthur William Preathy They're all members of web dev web dev. So if we go into our data directory here That's the web dev And we're gonna say I'm gonna add myself I'm gonna remove pre-thee because pre-thee is no longer doing web dev Okay, and we run That again and it blew up Let's screw something up I have a feeling it has to do with it the data that I just put in a very very new code here This was really done as a approval concept. Let's See you everything and get very good.  Okay, I ran once we're in first time, right? So you get the general idea. Sorry for wasting your time with a poor demo, but the whole I Was that up there like this the whole time that just happened when I switched on over. Okay, good So you get the idea and Better coders than me and people with more time to put in this could bake into a utility that would actually be useful But you can understand the concept, right? Yes. No Okay, I wanted to do a proof concept actually I originally started writing it as a way to learn rust I have one for doing Etsy hosts in in rust I Decide I was trying to learn the library to do A group management it was too much to do and I actually have a day job It doesn't allow me to spend as much time coding on this as I want to but the whole idea is that the two most important Resources that you have in distributed computing users or the groupings of users and the hosts that they can have access to Are things that you should be able to control now When I look at the Etsy hosts type delegation One of the things I realized is you only want to limit to a sub domain So I want to create a sub domain like you know young logic comm create pre-t dot young logic comm and pre-t can manage that any any Host that she adds underneath that sub domain. This is our on her Okay, so And that gets into the whole question about what do we do for more than one computer? Okay now How many people here have created a user stable for an application that they've written? Okay, so we have one honest person and a bunch of people who either are liars or have not had to write that much code yet It's annoying that we have this concept that the users are owned by the application where when you get out into the Real world that's not the case. You don't own the user database the user database for Whatever reason is owned by active directory It's owned by some directory structure L DAP out there that you are then going to consume and you're gonna get this information through a very variety of sources But the thing to remember is that you don't own the set of users and that's okay Because what you really want to focus on is what groups are those users in? Okay, so L DAP I spent a lot of time though. How many people here know what L DAP is okay, how many people here don't know what L DAP is Okay, L DAP stands for lightweight directory access protocol and the word that you should take out of that is directory Okay, because a lot of times we'll talk about an LDAP server and that's just a server that serves a certain protocol. Well That's kind of necessary. Why is it lightweight because there was a heavier weight one before? Okay, so really and protocols for accessing things so really is directories and what is it directing? Remember that the big graph I showed you at the beginning with the CEO in the middle and they all that that's a directory It is a database a hierarchical database that holds information about an organization And the most important thing it holds is the set of users that are in that up organization. I Worked on a project called free IPA, which was an attempt to take a Directory and make it more usable and easily more easily installed So the example that I'm showing a little bit makes use of that, but what we're talking about here is really Generic anything where you talk about users the users are going to come in from a web app And I'll say you're in an organization that's using Kerberos. How many people here know what Kerberos is Okay, for the two or three people who did not raise their hands Kerberos is a way of authenticating yourself that is actually secure as opposed to handing your password across the Open internet, which is what a lot of us still do because that's what a lot of systems allow So any organization that has tried to lock down security has looked at different mechanisms and Kerberos is one of the ones that a Lot of them use came from right across the river to MIT project project Athena And it uses symmetric cryptography. So I take a secret and I encrypt it and if you have that same That same key that I used to encrypt it you can decrypt it and that's how you prove that you are who you are Key sharing that goes on there.  Are they in and from that set of groups? I'm gonna use this to apply permissions in this application There's gonna be two to three groups that really apply Maximum for a given application. I really want to know are you an administrator of this? Are you a user of this system or are you just a read-only browser? There may be more there are often more it may be more granular per resources, but Understanding when you have a centralized repository like LDAP, you can't get super granular in what permissions A user can or cannot have for each application Because again, you're pushing off to the centralized admin to be able to control it But what you can do and what we see it a lot of organizations now is this idea of two levels of LDAP server Okay This gives you how many people here are running labs or running groups of computers separate from like the main organization that they're in How many people have like their home lab or? Okay, this or how many people here work in perhaps like a graduate lab or something like that in in grad school or something like that Okay, that's another example You often have this idea of a limited domain where you need To be able to manage permissions for people in there, but you still need to consume from one level up So what you have is what's called an AD trust or a Kerberos trust between the two same idea where you're gonna manage the list of users centrally people who are students of the university people who are faculty at the university people who are Somewhere in between But what you want to do is be able to manage this set of servers these hundred machines And once we start talking virtual machines, perhaps thousands of machines with a centralized to your lab LDAP server, but still consume it from higher up once you do this then you can say okay There are more interesting groups that I can put people into But you understand they put people into I'm back to talking centralized I'm back to talking about what I can do as an administrator, and that's not what we want to do What do we want to do? We want to be able to delegate So we want this idea of group managers And so the major shift that you have to make is thinking the group itself is a resource and just like we were doing files At the Linux level. I want to make the groups within the directory Manageable by people other than the administrator, okay, and What's neat about LDAP as a as a directory protocol unlike a sequel database I don't just limit on the Table level what permissions I have I label on the specific object who can do what in fact I can go down to even just a field. I can say on this field here Preathy can modify it, but anybody else can just read and Then the whole overall object well that has to be an administrator to create so to create the group You have to be an admin, but to add or remove users from the group. I want to modify in this case The member field of a group object is a very standard structure in LDAP that you have These things and so I'm using the IPA command because actually modifying permissions within LDAP is one of things that Various from LDAP server to LDAP server and this is the one that I know Once you do something like this now I created a group called the Beowulf Manage Group and I created a target group called Beowulf and a permission Beowulf Manage Group a permission which allows people to in that group to write The member field so people who are members of the Beowulf group can manage the Beowulf And you can tell what I was doing what I was thinking about when I did this stuff not Old English fantasy But Beowulf clusters Now what I have is the ability to say okay for any resource I have out there. I'm going to create a Group in LDAP. I'm going to create a Permission for that group and I'm going to sign the people who I want to manage that group that mission And then they can figure out who's coming in there because it might be hundreds of thousands of users From that centralized LDAP perhaps we're talking about a graduate lab where you have you know 500 people Working in there with a hundred of them changing each year This is the kind of thing that you want to be able to have the lab manager handle not the centralized admin So that's the way we're thinking about things, okay? I Want to talk a little bit about the domain model of role-based access control before we go on and I Can't remember where I first saw this it's called the party pattern. I want to say it was out of a Martin Fowler book I know Martin talks about it. I don't know if that's the first place. I saw it But it's a great way to think about the relationship between people groups of people and permissions, so You notice at the top. I have a the role assignment In bold this is the and it has a start date and end date This is the idealized case your systems may not have all this way of doing things but it may and Once you have a role assignment that means you have a role and for a given role In a given organization that allows you perform an action on resources owned by that organization Okay Let me put this, you know a little bit more Concretely if I'm a member of the lab Organization and I have the manager role So I have the role assignment of manager on the lab Then I can put the computers in the lab. The action is boot the resources computers now The majority of what we deal with now is the web we're dealing with resources that are exposed by a web API's and How many people here know what rest stands for? Okay, how many people here don't know what rest stands for but know what rest is Okay Yeah, it's something state representation representinal something Representational something state transform. It's basically using the web protocol the way the web protocol was designed to be used And in this you have resources and actions just like we had in our domain model and the resources a URL a resource is the name The URL is the name of the resource because guess what this stands for a universal resource locator it's not it's not random and Here's a handful of the actions that you can do Against one of these resources you can post you can get you can put you can delete now I put down here about XML or JSON RPC is not rest But you can use the map to it there are a bunch of other ways of using hypertext Protocol to access and to control and to manage resources and a lot of them Don't use this gentleman, but you can think about them that way if you look at free IPA again It was JSON RPC and there is an action For verb in in the payload So you can't do it at the URL level, but you can do it at the payload level There's a way of being able to map it But hopefully when you're designing API's now when you're designing systems now you're thinking rest and you're thinking in these terms because this Is the least surprise Okay, so when you start thinking of permissions you want to think who can perform the post action on the specific URL that I have there And we go back to LDAP What we're going to do is we get enough information to figure out that decision I want to talk a bit about open-stack keystone Which is the system that I worked on for a long long time where we made use of this How many people here have heard of keystone? One okay, how many people here have heard of open-stack a little bit more, okay How many people have not heard of open-stack? Okay, open-stack was a Effort to Provide a standardized method of doing what EC2 was doing at Amazon creating virtual machines in somebody else's cloud Amazon Went from being a bookseller to the world's largest data center management company And EC2 this this this Elastic cloud protocol or set of protocols was one of the ways that they were able to do it It is a way of telling Amazon's data center to turn on turn off create destroy virtual machines for you It does a lot of other stuff too, but that's the heart of it Keystone was a piece of Of open-stack that kind of fragmented off to do Access control management separate from all the other things that you can do in the data center It was when you create a virtual machine you have three big things to work with you have Compute the memory you have storage the disk that it stores things to or reads things from and you have networking And those all became separate I'm not I don't want to call micro services They're not really macro services or models. They're just kind of services. They're just Blobs there that do things and some of them do more some of them do less and they're complicated And what we want is we wanted the networking folks to focus on networking and we wanted the storage folks to focus on storage And we wanted the access control people to focus on access control between all those and keystone was that piece And so with keystone we had to deal with it rest API or a set of rest API's that are Provided for managing the data center in the large and again They wrote a user table That's that's what I joined the project. I'm like You don't own the user table users are in LDAP and the project leader looked at me and said LDAP who uses LDAP anymore? He came from Google they don't you know They don't do things the way that the rest of the world does and maybe they're right, but we're not there yet But when I said look the users should exist somewhere else. He's like, yeah, I Didn't actually want this thing here. I was forced to build it So we were kind of in agreement and that's how I got involved in keystone by doing LDAP integration into Keystone way back when and As I said, it's web-based. It's it's a rest API. It became more of a rest API as we went over time That's why it's version 3 2 was a little bit less So and it can consume LDAP or federated identities and what do I mean by federated identities? Well Remember that whole Kerberos thing I talked about that nobody here had actually heard of or a lot of people had heard of There are other things like that. How many people here have heard of open ID connect? Okay, how many people here have used Twitter? Okay, so we have at least a couple liars out there. Everybody's used Twitter Some of us are willing to admit it more than others. No, I'm kidding. Oh, I Need to look up absolute disgust there We've at least been put on web pages where somebody has embedded a tweet from somewhere else on there And what's interesting about Twitter is it had this need to be able to Just like we were talking about it opens up different services talk to each other have a bunch of Microservices or maybe just services and centralized authentication They need a way to be able to share it the same kind of delegation that we're talking about here So there's a standardized protocol for sharing delegation only we usually think of it as an authentication protocol It's called oh off and oh off one and then one a and then two is This thing that grew out of Twitter's need to be able to Mind his micro services together. So you've probably used open ID connect You may not have been aware that you're using it if you go into launch pad, which is the Like the bug tracker and stuff like that through Ubuntu in canonical and all that kind of stuff When you go to comment on a bug, it's going to kick you off to a page where you log in and then kick you back to the bug page That's open ID connect going on there. There's another protocol like this called SAML Security assertion markup language. It's very similar to open ID connect except it's an XML But they all do the same thing you go over here and authenticate improve your identity and it's going to give something Cryptographically signed that you can hand over here and say hey look I just prove my identity over there Okay, these are called federated protocols and groups can be managed Excuse me and I so the the the systems that we're talking about are going to consume these Identities from these federated protocols when you log in But the neat thing again to remember is that the groups can be managed separately from the groups that are in these Assertions we use the term assertion. Why don't you go and authenticate against open ID connect? It doesn't just give you The identity the name of who you are it says a set of groups that you're in or attributes about you But groups can also be managed at many many levels anywhere in between here and that's where your power comes from Now when we get into Keystone We're we're back in an RBAC format our backs is for role-based access control group apologize for using the acronym before defining it a Role gets assigned to a user based on the groups so you can have groups that you consume from LDAP And use that to do access girl eventually this gets down to the point where he's saying okay Can't he do a put on the URL that allows you to create a virtual machine? Now I put this number in here because this is a case of where people mess things up And there's a bug in Keystone that makes this kind of safe delegation that I'm talking about really hard to do It's 968696 I actually figured out what the tones were wrote a song about this is a long-standing bug This is how to not do things right This is how to very much not do things right and this is also goes to show The proof of the old adage that programming is like sex Which is if you make one mistake you might be supporting it for the rest of your life And this is a case of a bug that was built in very early on and we've been battling ever since the idea If you're if you don't have at proper access control and force all the way down at the right level You can't do proper delegation and it messes up the system But assuming you can get around that kind of bug then you could do and we will have here Highlighting in black is some of the code that you would actually implement That is actually implementing keystone that does allow you to say if you're a manager of a given project if you have the manager or the admin role in this case on The project or you're some sort of global admin because you need that for break the glass capabilities Then you have what's called a creative grant and this this again will map to the the URL So you have the ability to add users to your projects. This is the way you should be thinking about things when you're building your systems Okay, I want to be able to do role-based access control I want to be able to create some grouping mechanism and I want to be able to give somebody ownership of that grouping mechanism so they can control it and then I can go off and Whatever it is you do to waste time. I don't know You can go off and not spend your days adding and removing users of the groups and in doing so They can then get their job done without bothering you and you won't screw up They're getting their job done and everybody's happy and this is our organization scale Kubernetes everybody heard of Kubernetes. Okay in Kubernetes in Red Hat Kubernetes is spelled like this It's a system built around Kubernetes with Kubernetes the core and one of the interesting things about the Red Hat interaction with Kubernetes is that we needed role-based access control and it didn't exist So we worked on it at midstream still open source, but not enough Because we wanted to make sure we got it right and we had iterations with people on this and once we had an open source our back system for Kubernetes we contributed it back to the the core and It is now part of core Kubernetes So the same way of managing things. They just talked about for Keystone for open sack that exists in Kubernetes And guess what? There's no bugs 9686 96 So it actually is and it has the advantage of always going through a single API server whenever you make a change in Kubernetes You go into a single point and thus you don't have this whole problem. I have to make a change in Nova and Neutron In Clantz and all the different top projects to make up open stack So by having a single point of authentication, and this is the this is the value of how many people here have been in any like the service mesh Talks and stuff like that and talk about Kubernetes when you have a single place where you administer your policy a centralized policy management scheme, then you have the ability to fix things much much more quickly Okay, including big bugs like this. Okay, so with Oh admin is the OpenShift admin API and there's a couple different ways to do this There's a more per pure cube control way to do But this is the one that I had from my example that I know works you add a role to a group for a group name So you can just a lot of people will use the add role to user and manage users directly But if you're consuming groups from LDAP, then you can do it the same way there And then if you're using LDAP as your mechanism to manage your Membership you can centralize it and that way you could actually share that group It might not just be for Kubernetes. It might also be used on the storage side It might also be used for your software to find networking So you can consume it here, but you don't necessarily have to manage it here Very very powerful concept give power To the people who have to get things done As I said before users and groups almost always come from federated identity from external open ID connect in when you set up Kubernetes, there is a concept of identity providers OIDC open ID connect is that is Kind of the expected way that you can do it. It's a first-class citizen. It's actually written in go But you can actually wrap the Kubernetes web server with like a patchy and use what's called request header and then you can do Kerberos or Sammel or whatever other protocols you come in there that are handled at that level, but the bottom line is Some or and you can even do direct LDAP integration But the identity the users come from from outside, you know, you have to deal with is consuming them How much how much are we over time? three minutes, okay So this is my takeaway slide my last slide so I'm gonna leave this up here You don't own the list of users, but you really want to make it possible for people to manage their own groups Okay, I talked through a couple mechanisms here On the last page I'll leave a slide to my proof of concept code so we can figure out what I did wrong though during the demo But to be able to manage the set of users in which group be able to push that on down. This is how organization scale There are absolutely no time for questions


Today I'm sharing with you two skincare ingredients that I feel like any woman over 40 should have in her skincare routine. I feel like they are essential and that they are ones that can help you so much. Let's get into talking all about these powerhouse ingredients that I think you're going to absolutely love.  We are talking about two specific ingredients and we're only going to be talking about those ingredients because I feel like these have made a huge change in my skin and I am 53. I hope that they help make a change in your skin, especially if you're over 40 and beyond. It just seems that that is about the time when we really need to start using powerhouse ingredients and these two ingredients are powerhouses. Trust me, you're going to love them. So the first thing I want to do is I want to tell you that I can link my shirt. I always tell you about my shirt and my jewelry. My shirt I've shown on this channel before in another color, it was kind of a periwinkle and this is kind of a bright berry. This has a bell sleeve and it has just buttoned down kind of a deeper V with a tie. I love this shirt. It's so much fun. Does go over the hips and the belly and hides that a little bit, which is great. And I also can share with you my earrings. I absolutely love these circle, drop, dangle, hammered earrings. They are so much fun. They catch the light and they're so pretty. And then also the necklace that has two different details in it as well. It has a double link but one link is hammered and then the other link is silver. So gorgeous and you know my jewelry doesn't hardly ever cost very much on here. I will share with you the rest of my makeup, my fingernail polish. Everything will be listed and linked down below. Speaking of those links, now if you're interested in any of the products that I'm talking about those products are going to come right here in the screen in the corner. And then once that number goes up you can jot down that number and it will correspond to the product that I'm talking about or that I'm holding up. So you don't have to remember the name of the product. You can just remember that number and then you can go down into the description box and you can find that number and next to it will be the product that you're interested in and the link that I have created for this video. Please keep in mind that those are affiliate links but I really appreciate you using them because it does help support my channel and helps really to support my family. And I just wanna always make sure that I tell you how much I appreciate that because I don't take that for granted. So right now let's get into these very important products that I think that you will notice a difference in your skin almost right off the bat. Let's go. All right, first of all, I don't think this is gonna be very much of a surprise to any of you that have been with me for a while but those of you that haven't this might be something that you haven't heard me talk about before. And that is the Crownes Cell Bifida Serum. Now, why do I feel like this serum is so important? The first ingredient I wanna talk about is Bifida. Bifida is a fermentation process and the way that they found this fermentation process is through making alcohol products. They were making beer and wine and all of this other stuff. So they were as they were working with them and this goes for the next ingredient that I'm gonna talk about to you also. As they're working with these ingredients and a lot of them didn't wear gloves or they wore gloves that kind of seeped through that kind of thing. As they're working with Bifida, they find that their hands are getting smoother. Their hands are getting brighter. Their dark spots, their age spots are going away. Their fine lines and wrinkles are going away. Their hands are super hydrated throughout the day and they're thinking, well, maybe we should look into this further. Well, that's what they did. And they found out through testing that Bifida is a powerhouse. Now, I'll tell you why I say powerhouse. Number one, do any of you use Estee Lauder Night Repair or Lancome Genifique? If you use those two, either one of them, they're super expensive, right? I mean, we're talking over $100 for, I think it's a 1.7 ounce or it might be a little under that. I'm not exactly sure. I'll make sure I put that up on the screen for you. But I do know that this complex is under $20. Now, the number one ingredient in here is Bifida. The Bifida on Estee Lauder Night Repair and Lancome Genifique don't come until way, way, way down. It's something like under 10% that those two wildly popular skincare products have in them. Under 10%, this one has a powerhouse of 60% of Bifida in it. It's phenomenal. Okay, not only does it have Bifida, but it has the second ingredient that I wanna talk to you about. And that is galactomyces. And I know that so many of you have heard me talk about galactomyces before as well. And that is because it has the same property as Bifida. It does the same thing. The only difference is Bifida can target a little bit more of that acne scarring and help keep acne at bay. Whereas galactomyces, it actually can target the hydration that we have. So what happens, and I'm getting my phone here because I don't wanna miss quote and I think I already did. I said that this had 60%, it has 70% Bifida. But it also has 20% of galactomyces. It has niacinamide. You all know that niacinamide is a brightening. It is a fantastic ingredient that can mix so well with so many other ingredients to help our skin's barrier, brighten all of those good things. And 2% of hyaluronic acid. So this is so good. It's so good. And I will also tell you that this does have some ceramides in it and it says to protect the skin's barrier by moisturizing. So that's why they put the ceramides in there. But let me just read to you directly out of here. Bifida promotes regeneration and recovery process improving your skin's immunity. Galactomyces moisturize skin, increase immunity and protect skin cells from harmful UV ray exposure. And then niacinamide reduces visible signs of aging, removes spots after acne, pimples and blackheads. And it goes on to talk about ceramides and how those ceramides will fortify your skin's barrier. We hear about that so much now. So that is really important. Okay, this is number one. This is a serum. It is very thin and watery. I will show you what it's like. This is, I've probably purchased a hundred of these. That's an exaggeration, yes. But this is my Rhyderdyes serum that I use at night. Estee Lauder Night Repair, Lancome Genophique. Yes, that's exactly what these are. But at such a different, at such a discounted cost. And I don't know whether this is Japanese or Korean. I'll flash that up on the screen for you. But it is skincare that they care about. And I don't know about you guys, but I'm so impressed with Japanese and Korean skincare because they really focus, just laser focus in on ingredients and they feel like they're so important. Okay, the number two product that I wanna talk about is one that I tried years ago and I don't remember being as impressed as I am now with it. And it is the Benton Fermentation Eye Cream. So this is another fermentation process that we've been talking about. This one starts out with Galactomyces. What I love about this one is the very first thing that it talks about is wrinkle care, elasticity, skin radiance, and skin protective ingredients that moisturize and keep your skin healthy. I need all the help I can get right around those eyes. And I don't just use this around my eyes. I use this around my lips because of those nasty vertical lip lines that we all get. So what I also like about this, and Cranacell did not claim this, but I think that Benton, I've got it backwards, but I think that Benton does claim this is that it does not have any silicones. It says silicones out, volatile alcohols out, 20 cautious ingredients out. And then it goes on to say what it does have. It does have the Galactomyces, the Bifida, the ceramides, and it makes skin glow. It hydrates, it nourishes. It helps the elasticity care. It's just one of those ones that is so good. Now, what I want to tell you is not only do they have this, but if you cannot get Cranacell, if after this, maybe this might happen, maybe not. But lots of times when I talk about Cranacell, it sells out. So Benton also has one where it's just flipped in the ingredient order of, they have a serum. So they flip the ingredient order, which I don't think is a bad thing. I actually use the Benton when I can't get Cranacell. So they flip the Galactomyces and the Bifida. And really, I don't notice much difference. It doesn't like take away or add or it's not much different. So either one of those you can get your hands on. Now I'm gonna show you what this one looks like. By the way, this is a fairly good size tube. I think it's like 1.7. I'm not sure. Let me look. This is, nope, it's a 1.05 tube, which is actually pretty good because most of the eye creams that we buy out of the Nordstrom or whatever, they're like 0.5. So they are half the size of this tube. So this is pretty good size. And here's your cream. This is such a rich, nice cream. But at the same time, it sinks in so quickly, which I love. I know from my own experience and how this has changed my skin using these fermentation products, how they have changed my skin dramatically, especially in the luminosity and how I feel like it just has helped me not develop that sagging skin so quickly. What I do is I actually use the Benton Eye Cream Morning and Night. And I use it underneath the eye cream that I use from Tsukoyaka Tsuhara. That is my Japanese very, very favorite for the tons of moisture that I get around my eyes. But this, since I started using this again, it's really softening these fine lines and it's really helping. And I'm also noticing that I have some dark spots that have kind of creeped up into the areas that are right here on top of my cheeks. They're starting to go away as well. And then the same with the Bifida. Morning and night, I use the Bifida in the morning after I use my Good Molecules Niacinamide Toner. And then at night, if I'm not using a glycolic acid, I use it right after I cleanse. If I'm using a glycolic acid, which I do about three times each week at night, then I'll wait for 10 to 15 minutes before I go in with any other skincare. Otherwise, you're kind of counteracting that glycolic acid. This also can go on with your retinol. That is a huge thing because these are very soothing ingredients as well. Those fermentation processes are extremely soothing to skin that might be having a little bit of trouble right at that point. Now, if everything is sold out that I've talked about, which I really don't think it will be, but if everything is sold out that I've talked about, there is an essence.  That would be a great idea too. There is an essence from SkinDiva and it is all galactomyces. I mean, it's something like 90% of that bottle is just galactomyces. So far, those two ingredients are powerhouses for me. Retinol, vitamin C, niacinamide, and the fermentation processes. Love them to death. So, so good. Right now, I'm gonna point you in the direction of one of my skincare routines. I don't know whether this will be morning or night, but whichever one it is, I hope that you do enjoy seeing the products that I use in there. So, go ahead and go over and look at that video and get some great ideas from that one as well. Hope you're all happy and healthy and doing really well. Thanks so much for stopping by my channel. And I will catch you again very soon in my next video. Love you much. Bye, my friends.