Welcome to Hindu News Analysis by Shankar Iyer's Academy. Dear aspirants, we have an announcement regarding Prefit and also a few clarifications. See, our Academy is launching a special program called Prefit to help the aspirants to navigate the timeline for the run-up to upcoming prelims exam. The entrance exam for joining this initiative will be conducted online on 7th February 2021. Many students have asked us whether they can write the exam in their mobile phones. Yes, you can appear for this exam using your mobile phones. Regarding the payment for entrance exam, we have received many requests from various aspirants to waive the fee for the entrance exam. Therefore, our Academy has decided to make the entrance exam completely free, so you are not supposed to pay any money for appearing the entrance exam. On talking about the highlights of this program, the Academy will provide a micro schedule along with high intensity interval training for prelims exam. The program is modeled on the scientific principle of active recall and spaced repetition to ensure maximum output. The aspirants will solve around 4000 questions in the period from February 15th to May 16th. So during this period, the participants would be given 50 questions on a daily basis on 6 days a week. The 50 questions will be based on the micro schedule and each test will be followed by a daily detailed discussion. Under this program, students will develop a daily routine specific to prelims preparation. We have also used gamification principles to incentivize regular test-taking and improvement of performance. In order to ensure that participants should qualify the CSAT paper, which is becoming difficult every year, the Prefit includes a CSAT test of 50 questions every week. The program also covers current affairs. Prefit divides current affairs of past one year into monthly or weekly as well as daily targets. These targets will be covered across multiple tests. Before we head to Hindu News Analysis, one clarification. This program is completely different from Shankar A's Academy's pre-storming, that is, prelims test series. If you are already writing pre-storming, you can still join this program. So how does this Prefit work? Firstly, the entrance exam will be conducted on 7th February, that is coming Sunday. The syllabus for entrance exam is UPSC prelim syllabus for GS and CSAT paper. Participation in the entrance exam is completely free, but you have to register by visiting the link, which is in description and also in the comment section. Students who secure top 100 ranks will be eligible for Prefit Prime. Under this, the top 100 rankers will be given 50% subsidized monthly fee structure of Rs 750. Students other than Prefit Prime will have a monthly fee structure of Rs 1500. Subsequent months of access to Prefit Prime will be subject to securing a position in the top 100 in the previous month. Students who secure a position in Prefit Prime will also be eligible to avail 25% concession in main storming 2021, if they qualify in film 2021. So hurry up guys, just fill your details in the registration form and appear for the test on coming Sunday. With this, let us move on to today's news analysis. The list of news articles along with the page numbers is given here for your reference. See this article from a tutorial page titled It's Goodbye to Fiscal Orthodoxy. This article is regarding the new budget released the day before yesterday. Yesterday we had a very comprehensive discussion on budget, wherein we talked about what is budget, what are the highlights and even what are the shortcomings. If you recollect, yesterday we have talked about fiscal deficit and we also said that the fiscal deficit for the current year that is 2020-2021 and the next year that is 2021-2022 is way high. So the author is talking about this fiscal deficit and government's idea of spending more, that is borrowing more and spending more, which means high fiscal deficit. For this reason, the article is titled It's Goodbye to Fiscal Orthodoxy. Let us get into the article before that the relevant syllabus is given here for your reference. See firstly the finance ministry has pegged the fiscal deficit of the current year at 9.5% of GDP. Whenever we talk about fiscal deficit, we will be telling 3%, 4%, 5%. It means the fiscal deficit is being compared with GDP. So when we say 9.5%, it means 9.5% of India's GDP. And for the next year, the FD is predicted at 6.8% so almost 3% production. So most of us know this fiscal deficit means when government spends more than what it receives, it leads to some deficit that is more spending less earning. That deficit is called fiscal deficit. See there is some act called FRBM Act, Fiscal Responsibility and Budget Management Act. This act was enacted in 2003 to establish a financial and fiscal discipline to reduce the fiscal deficit. See previously whenever there is an election, government will spend more. It will give a lot of freebies, a lot of schemes, mainly to get votes. So generally in election years, the fiscal deficit will be increasing like anything. So to bring more discipline to union government in 2003, this act was enacted. So according to the current act after amendments, it says that government has to limit the fiscal deficit to 3% of GDP by 2021, that is the current year. But in February 2020, center has raised this target to 3.8%. But now the next budget proposes a FD target which is way higher than what was targeted, that is 6.8% is the prediction for next year. So this is why the author is saying that government is spending like there is no tomorrow. It means it is spending more. The author also says that the budget does not provide fiscal deficit indicators for the past years as well as projections for the next years. Generally what government does is, it will give the targets for every year. So how much the fiscal deficit will be limited in the next year and the next year. So next three to four years, it will give targets so that how it is going to comply to the FRBM Act. But the new budget has not given any such predictions. It means that there is no clear plan to achieve the targets set by FRBM Act in the coming days. So it is both good and bad. Why good? Because due to COVID-19 lockdown, the growth in India and across the world has diminished. To improve the growth, we need more spending. So if there are targets or limitations, it will be difficult for government to spend more. So it is good. Why bad? If there is no control, government will spend like anything and it may lead to debt unsustainability. That is we cannot service our debt. Next author is also of the view that government is selectively departing from market orthodoxy or market economics. So what is a market economy and why is government departing from market economy? See first market economy means an economic system where economic decisions and the pricing of good services are guided by interactions of citizens and businesses. Simply put demand and supply. Government will not have much say about it, which is also called less fair. So how is government departing from this? See for example, government has increased duties on some imports to protect the domestic industry. It has also introduced performance linked incentives that is PLI scheme for certain sectors. For example, electronics manufacturing, we are having a PLI scheme. So we are promoting Indian based products at the expense of foreign inputs. This is against the market economy. At the same time, government follows other elements of market orthodoxy, such as privatization and greater role of foreign direct investment. So one side it is departing from the market economy by impacting the demand and supply. On the other side, it is following market orthodoxy that is privatization and greater role for FDIs. So another important point mentioned by the author is government's departure from Washington consensus. So what is this Washington consensus? See it refers to a set of free market economic policies supported by prominent financial institutions like IMF, World Bank, US Treasury, etc. So this term was coined by British economist John Williamson. We don't need to learn about what is this consensus. But the most important tenet of this consensus is macroeconomic stability. So which means the macroeconomic indicators like growth rate, fiscal deficit, revenue deficit, they should be stable. So the government budgets need to be broadly in balance so that borrowings to finance the deficit are kept to minimum. And if you see the economic survey also mentions departure from fiscal consolidation. We have talked about economic survey in our 30th Jan video. If you have any doubts regarding economic survey, please watch that video. So in this context, the author is apprehensive that if deficit targets are not controlled, the public debt might become unsustainable in the future. If there is no target, government may borrow more and spend more. But it is imperative to note that the spend more mantra is not just followed by India. See in the wake of COVID-19, both the IMF and the World Bank have been asking the advanced economies to spend more to push the growth rate ahead. See IMF and World Bank are important supporters of Washington Consensus. But despite this, they are asking governments to spend more by allowing deficits, even if it is crossing 100% of GDP. See on Jan 30th, we have talked about economic survey and we have discussed something called counter-cyclical fiscal policy. And accordingly, government is spending more that is expansionary fiscal policy. So government is saying that when government increases the money supply in the economy, it will boost the growth. This will result in lower debt to GDP ratio. Simply, the debt to GDP ratio will be decreased. How? To spend more, government needs to borrow more. Then debt will be increased. But government is saying that even though it is spending more, the debt to GDP ratio will be decreased. Here note that debt to GDP ratio that is numerator is debt, denominator is GDP. We are increasing the numerator, but it will lead to increase in growth, which means the denominator will also be increased. So if you are increasing the denominator that is GDP, automatically the debt to GDP ratio will come down. But here author highlights one risk. See if government is borrowing more that is increasing the public debt, the credit rating agencies may downgrade India's ratings. And if you remember, in our economic survey video, we clearly talked about the ratings biasness towards India. So when ratings are poor, it will severely affect the foreign direct investment into the country. Another concern is that a large FD can fuel a rise in inflation. When government spends more, the money in the economy will increase. So people will be having more money, automatically demand will rise. When demand is more, inflation will be there, which is called demand pull inflation. So the increasing FD may also lead to increasing inflation. And in the last one year, because of COVID-19 caused inflation, inflation was almost above the target limits of RBE, which is 4 plus R minus 2 percent. So when government is going for expansionary fiscal policy, this target should also be rationalized, but the budget is silent on this aspect. And not just that, even our tax to GDP ratio is not rising as expected. See in the financial year 20, that is last financial year, India's tax GDP ratio decreased it to 9.8 percent. So this was the lowest in last 10 years. So in this scenario, the only possible way to reduce fiscal deficit is the sale of public assets, that is disinvestment. So generally government gets money to taxation. If it is not getting enough money through taxation, it has to get money through disinvestment. But in the last few years, even revenue from disinvestment is falling short of targets. So this strategy is risky as large scale privatization is not easy in India, because there are issues like corruption for favoring certain industrial houses, job losses, concerns raised by employees union in those industries. So these issues are even making difficult for government to disinvest. Further, privatization or disinvestment will involve more FDA, that is more foreign presence in domestic economy. But this goes against the vision of Atma Nair Barbarath, which means greater self-reliance and stronger Indian companies. So if you are increasing FDA and many foreign companies are coming into India, then our vision of self-reliant India will be difficult to achieve. So we can conclude by saying that though departure from FRBM targets in this difficult period is welcomed, government should have a sustainable debt management strategy or simply it should have a fiscal consolidation strategy. So have an idea on all these issues. We have talked about different issues caused due to expansionary fiscal policy. And we also talked about Washington Consensus, and what are the problems regarding disinvestment. Let us move on to next news article discussion. See this news article from page one, which talks about the decision of High Court of Delhi in future group reliance deal. As you all know, there is a tussle going on between Amazon and future groups over future reliance deal. So future group wants to sell its business to reliance retail. That is Mukesh Ambani's reliance. But the problem here is Amazon is having some stake in one of the future group companies. And they have some clause wherein if future group wants to sell shares, Amazon should be offered first or Amazon should give consent to the future group to sell its assets. As future group and reliance proceeded with the deal without the consent of Amazon, Amazon took this dispute to Singapore arbitration international center, which passed an interim order in favor of Amazon and also restrained future group from proceeding with the deal. So Amazon has filed a plea against future group to stop the transfer of retail assets. But future group has subjected the arbitrator's enforcement on various grounds. Now in this light, Amazon has approached Delhi High Court which said that the Singapore arbitration order can be enforced in India, which is a major relief to Amazon. All these business issues are not required in the exam perspective. But what we are going to see today is arbitration, which is an alternative dispute resolution mechanism. See when issue came between Amazon and future group, they didn't go to court. They went to something called arbitration center. Why? We'll try to understand. See generally any person wishes to resolve their disputes through a cheap, flexible and substantive judicial process. But unfortunately it is not happening, at least in India. We are seeing lot of pendency in cases, almost crores of cases are pending in India. If you see this data point, it talks about justice delayed. In many high courts, the judge positions are vacant. To one extent, 70% of high court judge positions are vacant in AP. In UP, 38% of subordinate court judge positions are also vacant, as of 2018-2019. Even coming to case pendency, as you can see the cases pending for more than 10 years are high in Maharashtra, Gujarat, Odisha, Bihar, West Bengal, which are all the big states in India. And if you see this figure, it says that in many states, pending on the judiciary has not kept pace with the increase in overall state expenditure. And as you can see, only states like Tamil Nadu, Gujarat, Kerala are doing little better. And much of the states are below this line, meaning it is in negative. So it can be understood that the judicial process in India is delayed for years and even decades in some cases. So this has led to the development of an alternative to court system, popularly known as Alternative Dispute Resolution Mechanism. As the name suggests, it is alternative to traditional process of dispute resolution through courts. So it consists of a set of practices and techniques to resolve disputes outside the courts. So this mechanism involves parties themselves to settle their disputes in a friendly manner, which is not possible generally through courts. So ADR mechanisms are mostly related to civil cases only, and not for criminal cases. Coming to types of ADR mechanisms, it includes arbitration, conciliation, mediation and negotiation. And there is one unique feature in India, which is Lok Adalat, which combines different techniques like conciliation, mediation and negotiation. So coming to arbitration, here the dispute is submitted to an arbitral tribunal, which will make a decision on the dispute. And as we said before, in the dispute between Future Group and Amazon, they both went to Singapore International Arbitration Centre. And the decision made is mostly binding on the parties. So though it resembles the courtroom-based settlement, it involves less procedure and generally there is no right to appeal on arbitrator's decision. Even judicial intervention in this process also very limited, except for some interim measures. Next is conciliation. In this process, the disputed parties with help of conciliator or neutral third person will study the issue and will arrive at a mutual settlement. In this method, the conciliator would investigate on the issue and will draft a report on the methods of settlement. Here the report is not binding. Generally we see this in our families. Whenever there is a problem, a common friend will come and try to resolve the issue. Then comes mediation. Here the dispute between the parties will be settled with the help of a mediator. Here the mediator will not decide, but instead will just help the party in reaching an agreement. Here the final decision will be made by both the parties. Generally we do mediation with our friends. Similarly, in negotiation, the disputing parties will settle the dispute among themselves without the aid of third person or negotiator. Even if a negotiator is involved, his role would be limited. Bargaining is a common feature of negotiation process. So both sides will discuss and compromise on a few aspects and settle the issue peacefully. So these are the four main types of alternative dispute resolution mechanisms. And as we said before, there is an invention called Lok Adalat in India which is a unique system as it involves different techniques like conciliation, mediation and also negotiation. So this Lok Adalat or People's Court is a forum where dispute spending in the court or even at pre-litigation stage can be settled or compromised. Lok Adalats are statutorily recognized under Legal Services Authorities Act of 1987. Also as per this act, the award made by Lok Adalat is deemed to be a decree of civil court. And the decision is final and binding on the parties. And importantly, no appeal can be made against the Lok Adalat order in any court of law. But Supreme Court has said that the award of Lok Adalat can be challenged only under Article 226. That is a rigid restriction of high court. But importantly know that if the parties are not satisfied with the award of Lok Adalat, though there is no provision for appeal, they can go back to court. It means they can start litigation back in court again. So they cannot appeal Lok Adalat award but they can start the litigation process in normal courts. So this is all about the discussion of this news article. We had a brief discussion on future reliance deal. We talked about different mechanisms of ADR and we have also seen the data of judicial vacancies and judicial pendency in our country. With this, let us move on to next news article. See these news articles. One editorial, another oped are with reference to recent military coup which happened in Myanmar. See last Monday, Myanmar's military seized power against the democratically elected government of Aung San Suu Kyi. So Aung San Suu Kyi is the current democratically elected leader of Myanmar and military after seizing the power detained the democratically elected leader along with other leaders of her party. The reason cited by army was that the general elections happened in November had several irregularities. See the Suu Kyi's NLD party swept the polls by winning almost 80% of the vote while the army backed union solidarity and development party suffered a humiliating defeat. And in this regard, the USDP did not accept the result and also military raised lot of concerns. So military supported the allegations of fraud without offering any evidence and now it turned a partial democracy which is in Myanmar into a full-fledged military rule again. So before understanding why military did this and what the foreign powers are saying let us have a brief understanding of Myanmar's recent political history. Though this is not much important in exam perspective, if you know the history it will be easy to correlate the events. See Myanmar became independent from British in 1948 into a sovereign independent republic and a new constitution was written. Since then it practiced the democracy ideology under General Aung Sanh. Aung Sanh is the father of current Suu Kyi. However, its democracy system faced problems when coup happened in 1962. And since then, Myanmar practiced a self-imposed isolation policy from rest of the world. But this resulted in vast political, social and economical unrest in late 1980s and because of this people started questioning the military regime. So a democracy system was proposed and election happened in 1990 and then the popular leader Aung Sanh Suu Kyi won the election in 1990. But military was not ready then to accept the defeat. It arrested Suu Kyi and imposed military rule again. Since then Myanmar has been facing sluggish economy and it got severeed from external relations and lost its identity in the rest of the world. And then India's response was more fierce and more critical and it directly questioned the military rule in Myanmar. As public unrest continued to grow, there came another bout of massive anti-government protests in 2007 by Buddhist monks which is popularly known as saffron revolution. So later in 2010 Junta that is military leadership proposed a new constitution with a quarter of seats being allocated to military. So one fourth of seats of parliament goes to military. Three fourth of seats to democratically elected leaders. But cleverly military banned Suu Kyi from participating in the elections because Suu Kyi was more popular and she will definitely win the election. So they cleverly banned her from participating in the elections. In that year the military backed party the USDP won the elections and after five years that is in 2015 elections happened again. But this time Suu Kyi rejoined the political process and she won the election and formed the government. But even then there are many challenges because in Myanmar military is so powerful and if you remember they even persecuted Rohingyas that is Muslims in Myanmar. And because of this reason lakhs of Rohingyas fled from Myanmar to Bangladesh and India. Even then Suu Kyi didn't took a critical stand of army. In 2020 elections Suu Kyi won again but military is not happy about this. And one more reason is the current military general Min Ong Leng is having president ambitions which is not liked by the democratic elector leader Ong San Suu Kyi. And the tenure of military general is about to expire this July. So to continue his tenure and the power it is said that army announced emergency and detained all the political leaders. And as I said before the reason stated by military is the voter fraud happened in 2020 elections that too without any evidence. So what is the response from foreign powers? The UN special report here on Myanmar stated that it is unacceptable and requires strong and unequivocal international response. So UN say global body has responsibly termed this coup as unacceptable. And even the new president Joe Biden had threatened to reimpose sanctions and called for an international response to press the military to relinquish the power. And coming to India when coup happened in 1990 India had a very critical response to Myanmar. But this time India is not directly criticizing the army. The reason is India is having a very good relation with Myanmar military and Myanmar military helped India in reducing the insurgency in northeastern states. And when the foreign secretary of India visited Myanmar in last year our foreign secretaries met both Aung San Suu Kyi the democratically elected leader and also the military general. So India understands the balance of power in Myanmar. India expressed deep concern regarding the coup. And as we said before but this time India is cautious while dealing with issue because our security relationship with Myanmar military has become extremely close. And if we threaten Myanmar Myanmar will definitely move towards China. It is said that the Myanmar military is supported by China and even this coup is also backed by China. Already India's neighbors for example Nepal is moving towards China. Bangladesh is having problems with the Citizenship Amendment Act. If you come to Sri Lanka the current president and Prime Minister Rajapaksas are already close to China. Pakistan and China are all weather friends. And Bhutan because of its proximity to India is facing heat from China in terms of territorial clashes. So most of our neighbors are already close to China are moving close to China. And now in this moment India cannot afford one more neighbor Myanmar to China. And not just that India is also having lot of interests in Myanmar. For example India considers Myanmar as a bridge between South and Southeast Asia. And it serves as a buffer between India and China. So Myanmar is strategically very important for India. And there are many projects we are doing. For example there is something called Kaladan multimodal project and even BIMSTIC Myanmar is also a member. And not just that if Myanmar moves close to China China can easily access Bay of Bengal and threaten the regional security in Bay of Bengal. So because of all these reasons India is not taking a tough stand on this coup. But latently it made sure that India is not happy with the coup happened in Myanmar. So let us see what India is going to do whether it strictly follows policy of non-interference or will it engage with military as well as democratically elected leaders to make peace and revival of democracy in Myanmar. Let us move on to next news article discussion. See this question which is framed based on this news article which talks about karnatic music and saint cum composer tyagaraja or tyagaraya. Statement one unlike Hindustani music which had Persian and Islamic influences karnatic music is more indigenous yes statement one is correct. See basically Indian music is divided into two systems Hindustani in the north and karnatic in the south because of Mughal rule and other aspects the Hindustani music got influenced by Persian and Islam but karnatic music has been almost indigenous or pure indigenous first centuries. So statement one is correct. Statement two tyagaraja is termed as karnatic sanghita pitamaha to find out whether this statement is correct or incorrect let us have a brief background of karnatic music. See South Indian music flourished in Devagiri the capital city of Yadavas in the middle ages but after the invasion of Mughals the entire cultural life of city took shelter in karnatic empire of Vijayanagara kingdom under the reign of the great ruler Sri krishna devaraya so thereafter the music of South India came to be known as karnatic music the great composer Purandardasa is termed as karnatic sanghita pitamaha or grand sire of karnatic music so the statement two is incorrect it is not tyagaraja it is purandardasa and also know that the birth of musical trinity led to an era of dynamic development in karnatic music so who are the 3% of this trinity tyagaraja or tyagaya muttuswami jakshitar and sehmasastri all of them were born at Thiruvarur in 18 and 19 centuries so these three were not only contemporaries among themselves but also contemporaries of great composers of western music like betawen mozart wagna so this period is generally considered as golden age of music throughout the world and coming to elements of karnatic music they are shruti swara raga and tala major instruments used in karnataka tamburi mridanga violin harmonium flute etc and talking about today's news that is tyagaraja aradhana which celebrates the compositions of saint tyagaraja his works mostly devotional and dedicated to lord rama so rama bhakti he composed his divine krithis mostly in thiruvu and among his many songs the famous are pancharathna krithis meaning the five gems in five ragas they are given here you might have heard most of these songs and four of these are in thiruvu and one is in Sanskrit so this is all about the discussion coming back to the question statement two is incorrect because it is not tyagaraja it is purandaradasa who is termed as karnatic sanghita pitamaha coming to statement three tyagaraja muthuswami and samasastri are known as trinity of karnatic music yes the statement three is correct as we are supposed to identify incorrect statements the correct answer is option b two only see this question which is framed based on this news article which talks about wetlands the news is that on the occasion of world wetlands day a wetland manual for children was launched see every year on second february that is yesterday he celebrated as world wetlands day to raise global awareness about the vital role of wetlands for both people and our planet so this day marks the date of adoption of convention on wetlands or ramsar convention as this convention was adopted on second february of 1971 in iranian city of ramsar so the name ramsar convention and coming to current year's world wetlands day the theme is wetlands and water it highlights the importance of wetlands as a source of fresh water and encourages action to restore them and stop their loss and we also said that a manual has been launched for children its name is home of the blue lily a manual on wetland ecology so this was launched as an interactive module for children by care earth trust along with sweet bio care earth is an Indian institution while sweet bio is a program of stock home resilient center it is a knowledge interface on resilience and development so coming back to the question statement one the definition of wetlands under wetland rules of 2017 does not include river channels paddy fields and human made water bodies specifically constructed for drinking water purposes see government of India has issued wetland rules in the year 2017 to manage the wetlands across the country see statement one is correct see according to ramsar convention wetlands include flood plains rivers lakes coastal areas like salt marshes mangroves peatlands intertidal mudflats coral reefs human made wetlands like dams reservoirs rice paddy fields almost all the water bodies are considered as wetlands according to ramsar convention but if you see the wetland rules issued by India in 2017 does not include river channels paddy fields human made water bodies especially for drinking water purposes and also structures like aquaculture salt production recreation irrigation purposes so all these areas do not come under India's definition of wetlands so statement one is correct statement two home of the blue lily is a manual on wetland ecology launched by UNEP this statement is incorrect because we have seen that this manual was launched by care earth trust and sweat bio or not by UNEP so the correct answer is option E one only see this question which is framed based on this news article which talks about gel g1 mission see the news is the new budget has announced the urban water supply mission that is gel g1 mission for urban areas see the existing gel g1 mission envisages supply of water to every rural household through functional household tap connections by 2024 so previously it was for rural areas but the new budget proposes similar mission for urban areas as well see as of now around 2.68 crore urban households are not having tap connections the gel g1 mission urban is aiming at providing functional household tap connections to all these people in urban areas this mission would include rejuvenation of water bodies to boost the sustainable freshwater supply and creation of green spaces so broadly this urban mission will promote circular economy of water through development of city water balance plan for each city focusing on recycle or reuse of treated sewage rejuvenation of water bodies and water conservation the ministry is aiming to meet 20% of demand through reused water so it's like an water conservation and water reuse technique coming back to the question statement one it is a campaign for water conservation and water security in the country this statement is incorrect because this statement is talking about gel shakti avyan which is aiming to create awareness and behavior change across the country as we have said gel g1 mission is all about providing tap connections in the rural households statement two community-led partnership with states or uts will be the strategy for achieving the objectives of gel g1 mission yes the statement two is correct statement three grey water is one of the components of gel g1 mission yes statement three is also correct in village piped water reliable drinking water sources removal of contaminants grey water management or some of the important components under this scheme so the correct answer is option a one only since we are supposed to identify incorrect statements let us move on to practice questions discussion session consider the following statements about lok adalat statement one they enjoy statutory status under legal services authorities act of 1987 yes statement one is correct statement two there is no court fee payable when a matter is filed in a lok adalat yes this statement is also correct because in lok adalat there is no concept of court fee interestingly even if a matter pending in the court is referred to lok adalat and is settled subsequently the court fee originally paid will also be refunded so both the given statements are correct so correct answer is option c both one and two see this question consider the following countries five countries are given here China, Bangladesh, Thailand, Laos, Vietnam which of the above countries share border with Myanmar as you can see in the map Vietnam does not share border with Myanmar in between Myanmar and Vietnam there is China as well as Laos so if you remove number five from the options we can arrive at correct answer that is option b one two three four only as you can see China on the top Bangladesh on the left Thailand on southeast Laos on the east share border with Myanmar and obviously India is on the left of Myanmar see this question consider the following countries Libya, Chile, Thailand, Myanmar which of the above mentioned countries faced a military coup you may find it difficult question but if you know there has been a coup in the Myanmar you can arrive at the answer that is option d one two three four the main question is given here the restrictions imposed on government spending by FRBM Act 2003 will limit the economic growth in India in the post pandemic period analyze with this we conclude today's news analysis if you find this session resourceful click on the like button show your appreciation in the comment section and don't forget to subscribe to our youtube channel


Let us consider a charge q smeared out over a thin line. We can describe this spread-out charge with a one-dimensional charge density row. Since it is one-dimensional, it depends only on one spatial coordinate x. The one-dimensional charge density is charge per length. That means we can calculate the charge q if we integrate charge density over this line on which the charge is smeared out. But what if we don't have a smeared-out charge q, but a charge concentrated in a single point, so if we have a point charge? Let's assume for the moment that q is located at the origin that is at x equals 0. What properties must the charge density have so that it describes a point charge? The charge density must fulfill two properties if it describes a single point charge. First property is, it must be 0 at every position x, except at the position where the point charge is located. That is at x equals 0. And second property is, the line integral over the charge density must of course yield the value q of the point charge if we integrate between two points a and b where the point charge is located. On the other hand, if we integrate over a region where the charge q is not present, then the integral should of course yield 0. Let's always include the charge q, for this we choose the integration limits from minus infinity to plus infinity. If we normalize the charge to the value q equals 1 and consider these two properties, then we write this density with a Greek delta and call it Dirac's delta function. Even if the name may suggest, the delta function is mathematically not a function, but another mathematical object which can be understood for example as a so-called distribution or as a Dirac measure. In this video, we are not interested in a mathematically clean definition. We just want to know how to work with the delta function. The delta function is illustrated with an arrow located at the position of the point charge. The height of the arrow is usually chosen to represent the value of the integral, in this case 1. Now let's consider an integral of the delta function together with another but well-behaved function f of x. Such an integral is very easy to calculate, because you know that the delta function is 0 everywhere except at the point x equals 0. Thus, the product is also 0 everywhere except at the point x equals 0. Only the function value f of 0 remains. Since f of 0 no longer depends on x, we can place it in front of the integral. The integral over the delta function is 1. So we know what the delta function does in the integral when it is multiplied by a function f of x. It picks the value of the function at the position x equals 0. We can, of course, move the charge to another location on the x-axis, for example to the positive location x equals 0. Then the delta function must be 0 everywhere except at this new position. We change the argument of delta to x minus x0, minus x0 because we have moved the delta function to the positive direction. The integral over the delta function is 1. We have only shifted the delta function to x0, therefore the result of the integral is the same as with the delta of x. What if the shifted delta function appears in the integral with another function f of x? Delta is 0 everywhere except at the point x0. To explain it graphically, the shifted delta in the integral picks the function value of f at the position where the delta function is currently located. You can prove this by substituting x minus x0 with y. The x minus x0 in the delta function becomes y. The x in the function becomes y plus x0. The derivative of y with respect to x is 1. Thus dx changes to dy. As we know, delta of y picks the value of the function at the point y equals 0. Therefore the integral yields the value f of x0. Next, let's look at what happens when we have minus x in the delta. Let's make a substitution, y is equal to minus x. Delta of minus x becomes delta of y.  The derivative of y with respect to x is minus 1. Thus we replace the dx with minus 1 times dy. The lower integration limit becomes plus infinity. The upper one becomes minus infinity. To make the integration again from negative to positive, we reverse the integration limits and thus get a minus sign in front of the integral. We already know what delta of y does in the integral. It picks the value of f at the point y equals 0. So this integral yields the value f of 0. But we also know that the integral of the delta function without the minus sign also yields f of 0. So it makes no difference whether we use delta of x or delta of minus x in the integral. The delta function is symmetric. What happens if we scale the x in the delta by a factor k? If k is negative, then we can write it as a negative magnitude and omit the minus sign in front of it because the delta function is symmetric. Let's make a substitution, y is equal to kx. This turns delta of kx to delta of y.  The derivative of y with respect to x is k.  As you know, this integral picks the value of f at the point y equals 0. Thus we get 1 over the magnitude of k times f of 0. Here you must note that k should not be 0, so that you do not divide by 0. Let's make a few examples. Let's look at this function in the integral with the delta function. The result of this integral is f of 0. Insert x equals 0, sign of 0 is 0, e to the power of 0 is 1, so the integral is equal to minus 2. This is how easy it is to calculate complicated integrals when a delta function occurs in the integrand. Here we integrate x squared with the delta of x minus 3. In this case, however, not from minus infinity to plus infinity, but from minus 1 to 1. We must therefore first ensure that the delta function is inside the integration limits. The delta function is here shifted to the position x equals 3 and is therefore outside the upper integration limit. The integral is thus 0. Here we integrate the cosine of x multiplied with delta of x plus pi from minus 6 to 0. The delta function is at x equals minus pi and is within the integration limits. So we have to evaluate cosine at the position minus pi. This yields the value of the integral minus 1. So far, we have considered only one-dimensional delta function. The charges over other point objects are usually located in a three-dimensional space. If the unit point charge is located at the origin, then we can describe its charge density with the product of three delta functions, delta of x times delta of y times delta of z. This product is non-zero only if the charge is at the position 0, 0, 0 at the origin. If we move the charge to the positive direction to the position x0, y0, z0, then we have to adjust the arguments of the delta functions as in the one-dimensional case. In order not to have to write three deltas, we combine them to one delta with a 3 on top and in the argument we write the position vector r and for the displacement we write, for example, the vector r0. The line integral with one delta function becomes a volume integral with three delta functions and yields one if we integrate over a volume v that includes the position of the three-dimensional delta function. So that's it. If you want to support me, then please become a member of the YouTube channel. With this in mind, bye and see you next time.


It's Batman Forever versus Batman and Robin on movie feuds. What? Oh, really? Oh, my bad. It's Thor Ragnarok versus Thor Love and Thunder on movie feuds. Before I hammer home the pros and cons of these flicks, Jack Natalie Portman is off camera and she demands you subscribe to the channel. Adam does movies so you don't miss a single episode of movie feuds going forward. Pretty sure those muscles are CG, but whatever, I'm still scared. Here's the deal. Thor Ragnarok not only introduced some colorful new characters to the MCU, but it also updated some of the originals, including the mighty Thor himself. Chris Hemsworth gets like 100% more comedic this outing. Taiko Waititi directed the third and fourth picture so the humor just makes sense. This director is very much known for his comedy. He also voices a new character in this named Korg. A fully CG never ending story reject that will go on to get a bigger role in Love and Thunder. Our boy Hulk gets a bit of a makeover too from both a personality standpoint and a visual one. It's fair to say that across the board the Thor cast has livened up a bit. This is obviously a turn off for fans wanting to see a more serious approach to the material. I found it to be a much needed change of pace from the somewhat dull earlier entries. Other notables include Jeff Goldblum pretending to play a different character. Mark, I keep getting worse as Bruce Banner Ruffalo. But sure, the human equivalent of a portal gun.  Kansas is dust in the wind and everyone's favorite brother that constantly dies, Loki. Surprise. Thor Love and Thunder sees the return of some of these characters plus a good chunk of newcomers. The Guardians of the Galaxy get a nice glorified cameo early on along with the return of everyone's favorite heroine, Jane Foster. Did I say everyone's? I meant no one's. It's not that Jane was previously unlikable. She was just super forgettable. She, Darcy and Lady Sif make their exciting return to the Thor franchise with notable upgrades for Portman. She's now sporting a patched up Mjolnir and her own cool superhero costume. She's gonna need it too as she's going up against a God killer by the name of Gore. This dark knight is a visually menacing foe and not nearly as easy on the eyes as Kate Blanchett's Hela. I didn't personally find him as threatening either since most of his kills are done off camera. Meanwhile, we see Hela take out most of Asgard in the time it would take to order a cup of coffee. To be fair, Zeus could probably take out the Asgardians just as fast if it was any other version besides the one played by Russell Crowe. Overall, we have a solid cast that's gonna live or die by the story. When we're first introduced to Thor and Ragnarok, he's having a pretty shit day. Suspending from a chain, chatting with the skeleton. It doesn't take long for him to turn things around though and before you know it, he has slayed a god of flame and secured his skull back at his kingdom. Where Ragnarok opens with an impressive feat of strength by sparkle fingers, love and thunder does the same thing. This time though, it's played for laughs as the god of thunder comically dispatches an alien threat and destroys a sacred temple in the process. Thor 3 does have a very comedic tone and definitely can undercut some of the more emotional weight of a scene but Thor 4 is a full blown comedy from beginning to end. It does have some serious moments such as Jane Foster's cancer backstory or Gore's puzzling final wish but these are very small moments in an otherwise very silly film.  It can happen in comedies. Ragnarok definitely set the new tone but the new entry ramped it up like 30 more percent. To many, this was the wrong direction. Back in Ragnarok, Thor's presumed dead brother Loki is very much not dead at all. In fact, he's the opposite of that. He's alive and he's pretending to be Odin. This leads to the realization that their father has been off planet living out his final days in peace. I mean, you can chalk it up to bad timing but as soon as he Voldemort's away, hella comes out to play. Sometimes I like to rhyme, subscribe for rhyming. She's pissed to say the least about being locked up and now wants to rule over Asgard or burn the place to the ground. Clearly someone's been working on their vision board. Her quest is very much one for power and glory whereas Gors is one for revenge. When he learns that the gods think less than nothing about their creation and won't help save his daughter, Gors goes on a killing spree. He then hatches a plan to kidnap a bunch of children in order to lure Thor in to show him where the magic fountain is hidden or something. Honestly, I found this whole thing to be very convoluted and bizarre. And the idea that there's just this magical fountain out there that can grant any wish was beyond convenient. Why didn't Thanos just save himself some time at heartache and just head over there? He could have avoided all the shenanigans he had to go through. In Ragnarok, Hella could only be stopped after Thor realized he didn't need a special hammer or other device to best her. He just needed to dig deep and unlock his true potential. In Thor 11 Thunder, he needed a literal Thunderbolt weapon from Zeus. Why does Zeus even have that? There are subplots aplenty in these flicks too. Planet Hulk, a Valkyrie story. Jane, Blondes are more fun, foster. A love triangle between Thor, Mjolnir, and Stormbreaker. The underutilized misadventures of the Asgardians of the Galaxy and much more. Thor 4 has so much packed in that it could have been a Disney Plus series and probably should have been. It's not just the tone that got goofier. The entire production did as well. Thor 1 and 2 have a look to them. And that looks screams, I'm not trying to be that memorable. Ragnarok gave the franchise an identity for better and worse. The hero was definitely more interesting as a more carefree jokester, but there was definitely a line that needed to be drawn. Love and Thunder blew past that line and never looked back. Ragnarok still retained some darker aspects and at least attempted to creatively handle the material whereas the new installment always looks and feels like the actors are in front of huge green screens. Nothing has way to it from both an emotional standpoint and an action one. The lighting is downright embarrassing at times with cartoonish looking environments and costumes where Ragnarok felt fresh and re-vigorating, Love and Thunder already feels played out and disingenuous. Immigrant Song matched the moment acting as the perfect theme song of the film. Guns N' Roses is a badass group. I don't think anyone will deny that but their songs didn't have the same impact Immigrant Song did, instead feeling like a large financial deal between Disney and Band execs. And the whole thing this time around felt very commercialized. This type of thing will not bother a large amount of moviegoers and frankly, I envy them.  Not ever thinking about the fact that there's an ice cream shop themed after the horrific events of Infinity War. Listen, I'm all about a dark sense of humor but these ass guardians take it to an entirely different level. Have some sympathy for crying out loud. I've read some comments on the internet that state MCU fans got exactly what they deserved with Thor Love and Thunder. Stating that it's their own fault for propping Ragnarok up so high. I disagree.  The tone wasn't always spot on but it was a hell of a ride. I polled my audience, these are polls, via the YouTube community tab and they agreed giving Ragnarok an overwhelming 94% of the vote leaving Thor Love and Thunder with a poultry 6%. Pathetic. Make sure to subscribe to my channel, Adam Does Movies, to take part in future voting and make sure you don't miss a future episode. And remember, this is more than just reviews. This is Movie Feuds. Thank you very much for watching. This was a long time coming. I haven't done a Movie Feuds in almost a year. It's a big deal for me as that used to be the flagship show on this channel. This is kind of a trial run to gauge interest, see if it's still there. And I couldn't do it without patrons and YouTube joined members. So please think about joining me on Patreon at patreon.com slash adamdosmovies or becoming a member right here.  If you are one already, thank you very much. I appreciate you.


In this study, researchers examined the presence of anti-PLA2 antibodies in a group of patients with idiopathic membranous nephropathy, IMN. They found that these antibodies were present in 74% of the patients, but not in those with secondary membranous nephropathy or other forms of primary glomerular diseases. Additionally, they discovered that some patients had high titers of anti-SPLA2 antibodies, which could indicate glomerular structural damage rather than immune system involvement. Overall, their findings suggest that anti-PLA2 are antibodies are specific for IMN, while protonuria may be indicative of both immune system involvement and structural damage. Further studies are needed to explore the potential role of anti-SPLA2 antibodies in IMN. This article was authored by Muhammad Reza Ardalan, Ali Ghaffari, Fateh Mahamzavi, and others.


Aaron Andrew Keeney got off to a rough start in those first two innings through about 40 pitches How was he able to settle in and give you guys six? Huge You know obviously a tough first start for him and wanting to get back out there and then to give up, you know Four in the first two innings, you know that first inning We don't make a play and then it then a O2 he hangs up hangs a breaking ball and gets a Yankee Stadium Homer against them You know, and they lose the strike zone a little bit in that second, but man, he made the adjustment Found it, you know, he's he's a hitter away from going out You know, normally I wouldn't even let him go that long in the second But obviously, you know our situation today we needed it and he stepped up and settled into a rhythm in a groove He wanted to go back out for the seventh even and just really proud of that effort That's a tough effort right there when you're coming to a new team You're trying to find your way you're up against it and you keep on going and I just thought it was a really good performance by him What does that say about him considering how rough the first two looked and even his first outing?  Did you think off the bat? There was any chance? Oh doors ball was going out I I did I thought it had a chance because he stayed through it really well So I thought I had a chance yes Wasn't sure But it did a little unorthodox Yeah, it's a little little Anthony Rizzo He went go down to the knee and keep keep that bat in the zone for a while And and he was able to clip it just enough and stay through it just enough on a pitch that he was a little bit fooled on He got Shioca coming off the bench just how impressive was was his at bat his ability to get it done in that situation Yeah, I thought Labor had a good at bat in front of them and then Higgy You know with two strikes got a pitch he could handle and and and put it really put a charge into it and and Yeah, I was that was huge today for those guys coming off the bench there and and contributing and You know we didn't know how we're gonna necessarily do it today, but a Really good job by everyone of just knowing the importance keep playing hang around and they got it done Justin Chack will go ahead There is a four straight come from behind wins How much has the element of resiliency contributed to the increased energy that everyone's been talking about yeah, I think so Look we we're playing for a lot and everyone is keenly aware of that. We show up. It's about us it's about trying to figure out a way to get a win and And and that's the kind of I feel like Selflessness we're seeing right now from guys of just you know, I guys Pictures walking in my office today saying I can pitch when you know probably staying away from a few guys obviously and you know They're hungry in there. They're playing well and and they know they got to keep playing well Greg Joyce go ahead Aaron what was going through your mind in the second inning when you had to get to open up Just given how many guys he used yesterday I was thinking at some point Anthony Rizzo is gonna be pitching in this game to be honest with you So yeah, it was for him to get out of that inning and kind of Come together and then not only get out of the inning and give us a little bit of length But then go on to give us six innings and keep us in the ball game was huge And then what happened with Chapman is that's how he's been dealing with her or how long like that? He had a little bit in Miami He got an MRI the MRI was was good news, you know, he's So I think it's just gonna be a few days of no throwing and then Should be able to ramp up from there You know, so I'm hopeful that on that 10th day. He's activated Just a little bit of inflammation Brennan cutty go ahead Who's your closer until then? Well, I mean Brit low greeny depends on a given night, you know all guys that I feel Feel great about hand on it, you know a Bray who closed it out last night. So, you know, it's All hands on deck but obviously Brit has a ton of experience in that and and and and low and greeny We've seen back there now and obviously low got it done today So we'll just kind of mix and match depending on on who's Who's up, you know, there'll be days obviously we're staying away from guys, but You know whatever the situation calls for And maybe this goes a little bit without saying but how big has the wise to get been for you guys and how important Is that he continues doing what he's doing in light of challenges? Yeah, he's he's He's a really good pitcher and you know You've heard us our excitement about him now for the last several years and he's Continued to get a little bit better a little bit better and obviously this year He's he's he's broken through and become you know one of the games really really good relievers and yeah He's huge for us


Welcome to today's CNCF webinar, Kubernetes Runtime Security with Valco and Cystic. We'd like to welcome our presenter today, Jorge Salamero, Director of Product and Technical Marketing at Cystic. Jorge, take it away. Thank you, Taylor. So, first of all, a little bit about myself. So, you know, who is presenting today. Taylor said, my name is Jorge Salamero. I run technical and product marketing here at Cystic. I used to speak at different DevOps and development conferences, and I was myself a TV developer in the past. Now I work mostly on containers and Kubernetes. I'm one of the persons behind some of the Falcon integrations, which is what we are going to be talking today a lot about Falcon Runtime Security. And you can follow more of my work on GitHub and Twitter as well. But before we get started, I want to give you a little bit of context about what Cystic was as a project or as an open source project as a company and then what's exactly the relationship with Falcon. So, Cystic started in 2013 as an open source project for Linux kernel tracing with container support, production ready. You can understand that as an evolution from TCP-DOM and Warshark from the network into the entire operating system, all the system calls happening in that kernel. And we can use that to gain visibility into what's happening inside containers. And Cystic had Kubernetes support. So that's how the project started. A year later, a company was started from the people who created the project. So Cystic Monitor was a commercial product to the Kubernetes monitoring, performance and availability monitoring. A few years later, Cystic Secure was largely using the same technology, helping implement security, looking at what's happening inside the containers. You can find plenty of open source projects that were born at Cystic or Cystic has contributed. Cystic, Cystic inspects Falcon and we hope also contributed to EVPF and Prometheus projects. But how Falcon faked into this picture? Well, Falcon was originally started by Cystic, the company. But it's currently run independently by our community. And it's under the CNCF umbrella since last year. Right now it's a sandbox project, but hopefully it will be in the incubation phase. And as I said, I'm going open proposal to make the change. Falcon leverage is some of the Cystic open source libraries as we will see later as we explore a little bit deeper on the Falcon architecture. Well, we need to answer why do we need runtime security to understand why we are talking today about desktop. Typically, when we are approaching implementing security in cloud native stocks, the first hard we get to, it comes to our minds is like, all right, let's do vulnerability scanning, typically, either from our container registries or CICD pipeline. Then let's set up some kind of like user identification and authorization system. So I can set up the permissions on my Kubernetes cluster. But is that enough? Can we make sure and then security properly when even if we implement all these things, we need to make sure that these layers is top from happening all the bad things we don't want to happen, basically. And this is what runtime security is about. Actually, when I explain runtime security, I like to split it in four blocks or phases. Number one step, it's the prevention or the enforcement. This is basically when we set up all the permissions and communities on what you can do and what you cannot do. The next step is the detection or the audit. This basically tells us if those barriers that were affected or something went through. The third step, it's having the opportunity to block those attacks, like basically if we were implementing a firewall, but again against the entire system, not just never. Step number four, sometimes ignore or miss, but it's still very important. It's being able to audit and record everything so we can do effective incident response and forensics. So prevention, detection, blocking and incident response and forensics. When we talk about prevention, as I was saying before, this is basically who can do what within Kubernetes. And the nice thing here is that Kubernetes provides a bunch of native controls to define that admission controllers, for example, allows us to hook into the deployment step into Kubernetes. When we schedule a poll, and we can define different policies to say this thing can be deploying Kubernetes or not. We can write our own admission controllers, we can use the web books, or we can use some other more advanced frameworks like Open Policy Agent that help us to do that. The other option or another layer that we can do on prevention, it's Airbot. Airbot, it's basically Kubernetes permissions. How we define some users, the roles that they have, so we define what they can do, what they can access, what they can modify, which different resources they can change in our Kubernetes class. Another option is using network policies. Network policies is against another Kubernetes resource that allow us to define firewall or network access rules for our Kubernetes services. Another very interesting resource, it's called pod security policies. Pod security policies allows us to define what's the security context, the security configuration of every path. It can be a privileged path, if it's a read-only root file system, and also allows us to define and to enforce some runtime security profiles using Secum or SELinux or Aparma. Secum allows us to define a sandbox state where we can allow the system calls that a container is allowed to execute. Other frameworks like SELinux or Aparma are slightly more advanced and allow you to define what paths can do the runtime with a more advanced language. So we can say this process can access these files or it can open these connections just to give you a few examples. But prevention is not enough. We need that second step or phase within runtime security, which is detection. Detection helps to answer what happens with a control fails. It's basically our last line of defense. We need to have it for catastrophes. We need to have it to tell a story basically when the unexpected happens. When either we fail to configure properly those inference mechanisms or the attacker could find caps or holds to basically bypass those mechanisms. We will be applying these detections very few times, but it's very critical when we need it. Also, this is very useful for our theme purposes. Detection can also be used to validate the enforcement mechanisms that you're actually working. And we can also use detection to validate to make sure that those policies, those enforcement mechanisms, they doesn't break my applications. So it's not exactly in a straight line. It's actually like it allows us to improve our enforcement. There are many use cases for detection. For example, even if we have images scanning our CSE pipeline and patch vulnerabilities or vulnerabilities that they don't have a public CVE won't be catch for those mechanisms. So detection is going to allow us to see to monitor your containers for anomalous behavior, which is going to be the way to catch anyone trying to exploit those third day vulnerabilities. It can also be used to detect insecure configurations, leaks or insecure credentials, internal effects, like someone doing QPCT Alexa in the pod and start to making changes. And also it's going to be very important for compliance and out of debt, as I was mentioning before, I want to audit any changes at runtime across my infrastructure.  One approach is using LDP reload. LDP reload allows us to hook into all the live sequels and see what each of our processes is doing. The consequences of using LDP reload is that these mechanisms actually allows to change your application behavior. So from a security perspective, that's something that you might not be ready to trade off. Ptrace is another option. The limitation of Ptrace is that you can only trace or monitor a single process ID and also will be capturing every system goal. So it can have a significant performance impact. Again, also changes or can change in behavior. So that's something to consider from a security perspective. Sidecars are using Kubernetes pods. It's another approach. You can have a pod that owns the monitor pod name spaces are being shared between those two pods. I can access into the process, network, storage. So from one pod, I can get visibility into the other. This is in principle a good approach, similar to what it could be, for example, the limitations are here are basically the instrumentation overhead, the complexity, and that the visibility that you get is basically limited to the scope of the pod of your monitoring. A fourth approach is using a kernel base approach and leveraging either a kernel module or the EVPF approved to get visibility. It's a better approach to get very close to the total system visibility as we will be capturing all the system calls that and we can use that to get visibility into all containers or every single process running on your hosts. One of the benefits of these is that we can capture these activities synchronously, so it has a very low performance impact. Both kernel and EVPF proof required your kernel headers to be built. The difference between the kernel and the EVPF proof is that the EVPF proof runs in a safe mode inside the EVPF machine so it can be considered more. We wrote the blog post where we discuss both options and the benefits of EVPF so you can check that out if you want to know more information. Now let's talk more about how FALCO leverages these. FALCO is considered the Kubernetes and it's basically a detection engine for any kind of anomalous activity that might be happening in your host on your containers. FALCO leverages a set of rules that follow a syntax very similar to this to define what it's considered anomalous and what it's considered safe. Leverages some open source libraries, leaves a scab and leaves a snip coming from the open source project to get visibility and it has Kubernetes native support. This means that every system goal it's tagged by the Kubernetes context, name, space, deployment, demon set, pod, etc. So we know from which application or microservices each activity come in and FALCO can also hook into the QAPI server audit. So we can get information about what's happening at the orchestration layer. Well, we'll see some examples in a second.  So for example, there is any unexpected design process like a Postgres SQL container is found in something different or a process doing something like installing a new package or changing configuration at running at runtime inside the container or looking at network activity. For example, like an NGINX container that's starting a new listening port or doing an unexpected network connection. We can also look at the orchestration activity. For example, we can answer if a Kubernetes user need a kubectl exit or kubectl attach into a shell into a privileged container and it started doing some changes. These are the kind of questions that you're going to be able to answer with FALCO. FALCO architecture, it can be understood following this diagram. We have like the kernel module or EVPF proof from where we get every system call so we can see what's happening in the system. We'll be leveraging LevisCAP and LevisNeap libraries to organize, to reconstruct that activity and send it to the filtering engine. All that information is combined with the Kubernetes metadata and labels and also with all the events coming from the QAPI server. We match all that activity against the FALCO rules and if anything matches, we can define that yes, there was some unexpected behavior and we can trigger a number of notifications across different mechanisms. Syslog, a file output, a standard output, we can execute commands, we can trigger webhooks or if we want to extend things a little bit further, we have a GRPC output that uses TLS so it's fully secure. Then, and then we have a bunch of different projects or site projects to FALCO that you can use to either send notification notifications to other places like pager duty, obscenity, data dog, Elasticsearch, AWS SNS or Google Pubsub using FALCO sidekick. We can also control FALCO using the client goals and you can write your own. And we also have a Promethex exporter that allows you to monitor and get metrics of all the events being triggered. If we look at a bit at how FALCO it's being deployed, FALCO typically package into a container and you will be deploying your cluster using a team on site. From that container and hooking into the host kernel using EVPF will gain visibility into any process, either running on the host or inside any container mechanisms or technology, Docker, cryo, he name it. If we look deeper in how FALCO works, basically we are going to have the kernel or the EVPF through. All the system calls into a range or buffer with user space. This is basically like a clock and we are filling new system calls and we basically drop everything at the end. With all this state of information, we have these libraries that basically control the reads and writes on this buffer and we reconstruct all the activity and we have this kind of like a state engine that we can use to match against our filtering rules. At the end, FALCO, this is just a common line to handle these libraries and allow to handle all that. And if you let me go even a little bit deeper and show you some of the peculiarities of FALCO EVPF implementation, there is something that makes FALCO and also the CISIC libraries different. So the EVPF programs, they use this map data structures to control all the communication between the EVPF program running in the kernel and the user space. On CISIC and FALCO, there is an additional ring buffer that we showed before that provides a high throughput channel between the kernel and the user space. So the EVPF map structures, they are just used for signalling and control and the ring buffer is used to move all these data into user space where we can mix it with a container and Kubernetes context so we can give it a little bit more of sense. You might be wondering how these rules actually work. I mentioned before that this is something very similar to TCP thumb filters where you have a name for the rule, description, and then the condition. This is basically the filter. So here we are looking, we want to detect if any of my Node.js containers run any process which is not the Node.js binary. So we are going to write a rule like this. We are looking for event type exact VE, so this is a system called we are looking. We want to look for someone or some container executing a process. We want to look at all the system codes within this scope. My Kubernetes deployment called my Node.app. And we want to detect if any process it's not called Node. If anything happens that it's different to this, we will trigger the rule, sending this output. And here we can add some placeholders so we can get additional information like the username that is found with processes, the process, the process, name and command line arcs, and from which container this is coming. We can use many filters to create these roles, filter for processes, for users, for file system activity, network, but also to define from which Kubernetes scope is coming, including pods, replication controllers, services, name spaces, replicasets, deployments, etc. You can find all these documented on file code documentation. But file code can also hook into the QAPI events. So for example, I'm able to detect if someone is creating or modifying a config map that has some private credentials inside rather than using a secret. So the way I would be doing that is writing a rule like this. And here this rule is slightly more advanced because we are using macros to simplify the condition of this rule. This rule, it's going to look for config maps, and then in our Kubernetes event audit, any modification on those config maps, and to see if those modifications contain any private credentials. So config map, we define it as a Kubernetes resource, which is a config map. A modified macro is defined as any create, update or patch, bearable functions. And then they contain private credentials. It's a macro that basically looks at the payload of the config map object and contains, for example, these different strings. This is basically how you would be writing these roles. But you might be wondering, all right, so these are just two examples, but tell me what are the typical scenarios? And this is something that we cover on the Cystic Continuous Usage Report, where we looked at real production data of FALCO and Cystic Secure and which were the alerts more typically triggered. And examples like containers right in below ATC, or right in below slash root, or launch in privileged container, or containers that they launch sensitive nouns, or they rewrite files under a binary directory, or just run in a shell directly on the container. These are examples of top runtime policy violations. We are going to find FALCO rules created out of the box available as part of the default configuration to detect all these things. But when people are deploying FALCO, these are the typical examples, the typical use cases they use it for. And actually we have detection rules created out of the box for this. So people check for best practices when running containers. So we detect that someone is not updating packages, not modifying binary directories or modifying the configuration, reading sensitive files, or containers, spanning unexpected processes, or changing the executing name and space, running privileged containers, sensitive mounts, or running shells. This is also useful for compliance. We can do file integrity monitoring. We can monitor the launch of privileged containers, or making changes on Kubernetes configuration like config maps, roll changes, and rules of the match, basically PCI or needs regulatory frameworks. FALCO can also be used to detect specific CVs. Some of them are seen in Kubernetes environments like the QCTL copy or the RunSeam breakout. And also the FALCO community provides default rule sets to monitor and inspect the behavior on very typical cloud media stacks, like Rook, MongoDB, Postgres, the Kubernetes control plane itself, and Enix, Elasticsearch, etc. You can find many of these rules on the security hub. This aggregates detection rules for FALCO and so on other projects. So we help you to implement Kubernetes security best practices. All these alerts that you get from FALCO, the way that you usually consume them are basically forwarding them into a CM system. You can connect FALCO to different CM systems. If you didn't have anything, you can use, for example, Kibana. You can forward your FALCO event to Elasticsearch and then use Kibana to create dashboards about what's happening in your containers. As I was explaining runtime security before, and they mentioned that a third step was actually blocking. We prevent users from doing things or services from doing things that they shouldn't. Then we detect activity. If we detect any unexpected activity, we can respond to that blocking that unexpected behavior. This is what it's a response engine about. We can trigger automatically reactions to 13 events to block these attacks or unexpected behavior. This is basically executing playbooks and we do that using functions as a service. We have implemented the response engine for different technologies using open source framework functions as a service frameworks or using Google Cloud or AWS and examples of different actions that you can execute. It's, for example, tinting a node with no schedule, so no other pods are scheduled on that node in case there was a container breakout. Isolate the pod using a network policy, delete the offending pod, scaling down the deployment to zero, triggers the capture of a forensics, or send a notification to different channels, like a slide. Different organizations that you're already using, Falcon production from PusaLand to frame.io, for example, Shopify, SumoLogic, or CISIC itself. So we can read a more comprehensive lease into the adopters file in the Falcon security repository. And I encourage you, if you're using Falcon yourself, to do a PR and tell us your story about how you're using Falcon production there. If you want to get more involved into the Falcon community, of course the first place to start is the Falcon.org website. You can find interest in blog posts and more content on Falcon on the Falcon.org blog, but also on the CISIC blog where we used to write a lot about Falcon. Of course, on the GitHub organization, and we also have in the Slack community docs, and then the security have I mentioned before where you'll be, where you'll be able to discover Falcon rules, but also contribute rules that you might be writing yourself. Now, I would like to talk a little bit more about how CISIC extends the Falcon functionality in some of the products. We saw how it's a runtime detection, but this is just a small part of your entire security approach. When we are talking about implementing security in your containers or your cloud native stock, I like to split this in again in three phases, the build, the run and respond phases. As you build and deploy your containers, you might be doing any scanning and configuration validation. As the containers that you start running in production, you do detection of unexpected behavior. But also you need to create that policy, maintain it, maybe find mechanisms to build those policies or roles automatically, or to respond to blog posts. Then, in case something unexpected happens, you need to be prepared to respond using incident response mechanisms, forensics analysis, and now with all the activity. Of course, compliance is not one-step process in this lifecycle, but needs to be implemented across the entire lifecycle. And CISIC security can help you with that. Something to highlight about the CISIC platform is that leverages open-source components to build all these functionalities. So you'll be finding the anchor engine for images scanning, Prometheus for monitoring, Falco for runtime detection, and CISIC for deep visibility for forensics and troubleshooting. And we use these resources to build a platform that adds a scale to workflow and Kubernetes and cloud context around all these data. When we are talking about these troubleshooting, all these different use cases, we see that it's actually the DevOps teams, the ones that they take care of security now in Kubernetes and containers. We see that security is now part of the DevOps process. We call this DevSecOps or secure DevOps, and this is where CISIC platform helps you. And now let me show you just three or four examples on how you can extend Falco to make it easier to use and to use it in production environments and more easily. One other functionality that we have here is the Falco editor that you will find in CISIC secure. The Falco editor allows you to edit Falco rules directly from this UI and to build your policies directly from this UI or from APIs, where you can define the name, the description of the rule, but also you can define the scope directly here and you can have multiple rules. And from here, you can also configure the different blocking or response actions like stopping the container, passing the container, or taking a capture file. You can also find insecure the Falco library that allows to pull in different rules or policies to create your runtime policy based, built on best practices and different framework, compliance frameworks, or attack frameworks like the Mitra attack framework. So you can build your runtime policy from a number of examples and defaults out of the world's rules that you find here. Another good example on extending Falco, it's the tuning functionality. We have seen that if you misconfigure your runtime policy, it might be triggering a lot of false positives. Or if you deploy a new application, a new version of your applications, things might have changed, so you need to fine-tune your rules. Falco tuning functionality looks at all the events being fired in your system and looks at what needs to be changed or fine-tuned so you reduce the number of rules that they are being triggered all the time. Another example, it's profiling. We see that some users, they don't want to spend time creating manually other runtime rules and policies. So profiling basically uses detections, uses that visibility to learn how containers they behave, looking at the network, connections, processes, file system activity or system calls, and then generating those runtime rules that the runtime policy automatically for you. Another example is the policy advisor. Policy advisor looks at the running containers and allows to generate the most restrictive policy security policy for that running container and then validate it against the running behavior. So we make sure that your policy security policy doesn't break your running applications. Policy security policies, as we mentioned before, can be used as an enforcement mechanisms in your Kubernetes cluster. So we define what the pods can and cannot do and we block anomalous behavior before actually it happens. Last but not least, we mentioned how this detection, this runtime data, it's very important to tell a story of what happened. This is audit, an incident response and forensics. Being able to correlate orchestration layer activity, like for example, a user or a service account doing a QCDL exec in Duopod and running a number of commands. It's something that you can do with SysTec. If you like all this, you can find SysTec and some members of the Falco community in some upcoming events. So we are running a number of Star Wars premieres. If you want to come with us to the cinema and enjoy Star Wars, you can do that and you can go and buy through that link. Next year, you'll find us in RSA, KubeCon and Red Hat Summit, just to mention a few events. And well, if you want to learn more about this, don't forget to check out the Falco.org website. I also wanted to include here a link to the container users to report and a webinar I quote before. Don't forget to subscribe to SysTec.com blog. And if, well, last week Kubernetes 117 was released, and we always like to write a blog post on what's new. That went, uh, become very popular. So again, I would like to use this opportunity to share that link again with you. Thanks very much for listening today and I hope you enjoyed. Thanks Jorge for a great presentation. We look forward to seeing you again at another CNCF webinar.