So, hello and welcome everyone to the DevSecOps on steroids by Mathias Lacks. We are glad Mathias can join us today. Yeah, thank you very much. Thank you much for the introduction. And of course, thank you very much for having me here at the Selenium conference. Yeah, hello. Yeah, today I'm going to talk about security testing, DevSecOps on steroids. Yeah, so continue security testing, you know. I'm an engineer and I'm focusing on usually new stuff, yeah, trends and security itself is not pretty new, but there is a high trend on it, a high demand on it.  The loss to your company is not even countable. Yeah, so Nova wants to have it and exactly this I want to take today, how you can implement security testing, how you can implement continuous security testing to your team. Yeah, so kind of having these DevSecOps and also how your Selenium test can empower it. Yeah, so how you can use them. Before I start, please also let introduce myself a little bit that you know who is talking. This sucks, as you already heard, I'm from Vienna, so Austria in Europe, and work there for the company Rappers & Bank International as an agile engineering coach. If people ask me what the company is who I'm working for, I always tell them it's an IT company with a banking license. And if they ask me what I'm doing, I'm helping and coaching teams and people to getting better in their majority level of development, especially test operation. I also am there to organize of the community of practice for test automation, and I'm talking on conferences and contributing to IT magazines, always in the sense of test automation. So you see my profession and meanwhile also my passion in this area. If you want to get in contact, please use the following links or LinkedIn or Twitter. And then of course we can also keep you in contact. For those who don't know RBI that you also get a little bit context where this comes from by also security is for us so important RBI. So Rappers & Bank International is a traditional bank with more than 100 years of history, meanwhile fully agile transformed or also in between. We are located in Austria where the headquarters is and Central Eastern Europe. We have currently there are 13 network banks. So this is all our family so to say. And we are the leading corporate and investment bank in these countries for the top 1000s conversion customers. We have a lot of employees so more than 70,000 and more than 16 million customers. So in the context where this comes from by I also went into this topic. What are some objectives so how have I structured the talk today and what is the stuff what you can take away of it. First, I will talk about security. Yeah, and I will generate some awareness so you will understand the sense of security why it's needed. And what do we mean here. Yeah, and you also see why it is getting more and more important as you will hopefully remember this. And then also start off something in your teams. I will explain you then for security testing approaches which I recommend, and you will be able to differentiate yeah. And then I will show you how you can integrate these four security testing approaches into your pipeline so into a CI CD pipeline. Yeah, and this you will then memorize. And at the end, I will show how to implement your Selenium tests with a dust tool also dynamic security testing tool called over step. So then you will see also some source code, and maybe you can take the implementation of that or so. Okay, so this is kind of the agenda. Yeah, just differently presented. What was the motivation. Yeah, as I mentioned before, engineer testing was also something which I'm in those in three years before I was developer security was something new. What was my motivation why I went into this topic security was always something which was there. Yeah, I mean I was aware of it. I know it has to be done. To be honest, concrete steps for me was not clear. And it was also really tangible. It was always kind of a big, big thing, which was kind of, yeah, we need to externalize it or their own department which cares about it. The team itself have does not have to care about it. By the way, that's wrong security is everyone's responsibility. And if you talk about security, always aware that this is expensive. Yeah, yeah, now we have to shift our ship or software to the external company that do this external penetration test we get the reports me to fix it. And with that, it also slows down our release cycle time. That was my biggest travel and release cycle time the time where I commit code up to the time that the customer can use it. This I want to have very low as an engineer with also want to automate kind of everything. I want to do this several times a day. And the big and fancy companies do this. Yeah. So now I understand kind of my motivation, maybe the one or the other or so. Research and definitely want to share here these numbers which I found those numbers got published from companies called purpose ag sonic war and cyber security ventures. They did investigation and the research. And as I mentioned they published numbers. The first number is incredible high in my opinion, and this is about 90% and TV talk 90% or security incidents are due to the fact that attackers use known software type of box. So they exploit known software parks. And you know if the attackers know them, your team also knows it. So you could fix it, but you just don't do it. And that's the reason why hackers can use it. So we definitely have to decrease this number. So that's kind of the status quo. The next is a trend. Here we talk about year on year value. So for 2020 2021, the increase of mail where attacks was about 40%. The number is growing on the year on the year comparison value. So you see a positive trend in pre attacks get more and more. Just, you know, computing power is pretty cheap. And also, there are a lot of tools at the moment at the market which you can use local also have to know you can. Yeah, it's pretty easy to do hacking. The first number is about an estimation about the damage. Yeah, and this is according to ransomware and this was about 20 billion. That's a pretty small circle or I can make it bigger. Yeah, in 2024 we talked about already more than 40 billion, but the six more than 70 billion. In 2021, more than 260 billion. Of course, rough estimations, but still you'll see the trend. Yeah, and they had some data. And to be honest, I don't want to contribute to this number. And I also don't want that my company contributes to this number. So we need to do something. So what is this security testing now what we're talking about what is this continuous security testing you know very often if you ask your 10 people, most probably you get 11 different answers or something like this. Yes, you get the point. So please let me give you my explanation during security testing vulnerabilities are discovered and attempts are made to exploit them. Pretty easy pretty straightforward, of course, in a nutshell and very simplified. But now you know about what we're talking. There are three between three types. First is the vulnerability assessment. Yeah, so here the system, you can use them and check if you have there are some issues with abilities. For example, as you have outdated software libraries like an old Java version or whatever, or PHP or departure. Then penetration testing. So your system gets analyzed and attacked by simulated malicious users and so called pen testers and they try to get access. So you can use your process side scripting is possible on the login or SQL injections and so on. Not good. And the server is compliance testing. Now it's a known as conform the test or regulatory tests. So if you need to comply to certain standards. Yeah, you need to has two specific requirements. For example, if you need to be PCI compliant, you need to test the things which they gave you first is the function security testing. Yeah, this is a group which is pretty often not know. Yeah, so you need to define function security tests. For example, for your login, that if you're in the email address and a parcel, it's wrong. Maybe you should not give back password wrong, or mail address already in use, because hackers can fetch an email address is just my brute force attacks. Yeah, log out that the credentials are or cleared. If the puzzle policy works, potential management works and so on. These are function security tests and very important. The second is non function security tests. Here, I want to mention the nonprofit foundation of us as an open web application security project, they have a pretty nice website, they define their they're always top 10 and so on. So when abilities which you should test against it. And then I want to measure SCA as a software composition analysis. You know, you have dependencies and these dependencies have dependencies. And this is kind of the analyzation. If there are some vulnerabilities or software bugs or main security issues in the dependencies. There are some compliance checks, I already mentioned, yes, or here or software versions, as many injections possible, and so on. Good, so you understood now what the motivation was, you know, that there is a high demand on it, a trend ongoing, and increasing risk. You understood what security testing is, but how can we tackle it? How can we now make our software more secure. The security testing approaches which I mentioned in advance, yeah, my four locks, which I want to use here, this is SAS, DUST, ASD, and RASP. What are those? The first lock is SAS, so static application security testing. What is this testing approach? It's called a wide ox testing approach. Yeah, so this means SAS, the SAS tour is checking your software binaries, your source code, your artifacts, if you have some security issues. So it's a very shift left approach. It's quite early in the STLC, so in the software development life cycle. And you can fix it very early. That's of course, very, very important and highly recommended to use. You can't discover any runtime and environmental issues just by definition, but it's also not the intention to use SAS for. From tooling perspective, just that you heard it. I don't know here into details. It's about also from OSP to have your tool called the benefit check for solar cube. I guess it's pretty known it's also used for SAS. And of course there are several other tools in the market, just that you heard one of those. The first lock is dust. So dynamic application security testing. We had wide box before, now we have black box. So this means this test approach needs a running system. It needs a running application, it needs an environment, and it tries kind of to hack it. So it's a little bit later in STLC, of course you need to build package or software, you need to deploy it, but it's the first approach which you can do after the deployment. And it uses for the injection techniques. It's a kind of also penetration testing, because it screens your software, it tries to hack it, it tries to find vulnerabilities. It tries SQL injections, JavaScript injections, and you name it, there are a lot of different things and finds their vulnerabilities. The tool is also from OSP, it's OSCEP, or Propsuit, or a lot of other tools here. And OSCEP, you heard that already as a spoiler at the beginning, this you will see at the end, how to use it with your selamium test. And I promise you the integration is pretty easy. The next lock, so the third out of four is IST, interactive applications to the testing. What is that? The cool stuff is this is kind of a combination of Sust and Dust. It combines the shortcomings, the advantages of both approaches, and gets the best out of it. A little bit of drawback is here, you need a dedicated software installed in your app, in your environment, which is then doing the analysation. So doing the kind of the dust checks, if it gets deeper into your software, it will also do execute Sust checks. And what you get is a less force positive rate, which is of course pretty important. And this agent is doing a lot of analysis. It analyzes the runtime, the data flow, the configuration for this sort, where is it, or of course, HTTP requests and responses, which libraries are used with frameworks and so on. And it will give you a pretty detailed result. And it's a learning tool. It means most of these tools, which are capable of IST, provide also learning, means more of the executed, the more precise it gets, means the less force positives you have. For example, here the contrast community edition is a tool for that. A lot of theory about Sust and IST, let me kind of visualise it, let me give you an example. If you have a login, a login GSP and you execute over Zapp and you go to a dust check, or depending on the tool, of course, how the message looks like, you get, you have an SQL injection vulnerability, at least in the parameter and login GSP, you could be exploited with this and that. Cool. If it was Sust, it will give you, you have their SQL injection vulnerability at this file at that line, not more. But if you use IST, you get that you have the SQL injection vulnerability at this file at that line with that parameter in this file. And you could exploit that with this SQL statement. So pretty detailed error message also, which is then of course will be used. I guess now you know what I'm talking about here. And the last log, which is rather security testing, it's more, it's more protection, it's more a monitoring tool is about REST, so runtime application self-protection. And as I mentioned, like a monitor, it works inside the application, it works inside your environment, your production environment, and you can also feed it with data from your application. And as you can write scripts that you feed the rest with additional information, you know, more than RAM usage, CPU usage, whatever, to get more insight, because it provides your visibility, which is very important. You want to know what's ongoing in your production at the end to protect it. So it provides your visibility, and you also have the possibility to make instant activations so you can define events that you can either alert it, which is of course recommended because it's pretty straightforward and easy to set up.  Just to protect. Of course, additionally, I would also make an email event or whatever just that you can investigate afterwards. To protect your production. Now, tools here are like began from all of us. App sensors, and also the contrast community edition is capable of this security testing approach, or here in that sense, monitoring.  I asked, it combines Susten test, you know, you saw the example. Rust, it runs a production and protects it, it verifies if you get attacked. Good. So now it's time to see how this looks in the pipeline. So that's the time to do the four locks at the pipeline. So how does a competent security CICD pipeline play. Let me draw the picture again. So in phases, you saw it before as a spoiler. You have to secure design phase, you have to secure coding phase. Then you do continuous integration, you deploy it. You do testing. Here I mean the test execution. And then kind of the production runtime defense. This is how I call it all the secure CICD pipeline. And here you have triggers. So which trigger you should do then activities security testing activities. So here's the design phase. So here talk about if you design a new feature, if you define a new application, or whatever. Yeah. If you're going to design, you can hear already do some security testing approaches. For example, threat modeling, very briefly explained. Yeah. So you draw kind of the picture of your feature where the threats are going, which is in terms of external where are the risks where you should focus on testing, where I simply explained, don't want to go into details. And by this defining functional security tests. As I mentioned before, for the login, how the error message is right. Does the credential management work and so on. Define here security tests, which are not for your users, scenarios for your end user or so. Yeah. But for in the sense of security. So this design phase, then we come to coding. Here we have the coding itself, the code review, yeah, pull request. And of course, continuous executions. And activities and here comes the first lock into the game. It starts. Yeah. So says static analyzers. And I highly recommend you with the idea plugin. If you only have it in the code review or a continuously nightly build exercise. People will not look at it. If you have it. Of course, this is depending on the tour your use. If you have it with your idea plugin. You know it by coding, yeah. And then you will definitely use it. Because no one wants to implement security. Bucks or. And also SCA. Yeah. So the, the checks your dependencies. What's ongoing here. So this is in that phase. The next we have the events or the triggers with built with the packaging and the deployment. Again, we need to execute your SAS and SCA because at the time where you build it where you package the stuff. It's quite common that additional stuff gets, gets attached to it. It's more components, more configuration files, whatever. So you make this check again. And of course, after deployment, we learned that black box testing approach dust comes into the game. So you try, you see, you know, what the findings are here from the result of your tool. And this you will see also in some minutes with over step. We have no two locks. The next is done testing. So here we talk all kinds of testing, test automation, is it manual testing, exploiter testing, whatever. First, recommend this again dust. Because this testing is very often happening on the user acceptance environment or integration environment. So you have your more connections. And this can lead to the fact that you have more findings. And then it's time for us to set up your as to what you want to use. Make experience out of that. If it's beneficial, if you want to use it, get out of the advantages of it. Of course, functional security tests, which you have defined at the beginning that you know execute them and also penetration testing is your pretty common to do before you release the production. Production time. This is continuous exercises. And here we come with the force log and this is rest. So you want to get insights, you want to see what's ongoing, you want to define your events, your triggers to protect your production. Cool. So this is how the secure pipeline looks like. And I promised you, I want to show you some code. So now it's time for source code. How to empower overstep the other dust with your same team tests or vice versa, how you can empower your salating tests with overstep. From the demonstration on the tech stack. What I will show you is first overstep. Installation is easy. Even talk arrest you will see it in a second. The system on the test which I will use this year, quote, note code, it's from almost that which can use that you also find some vulnerabilities from technology perspective. It's written in Selenium, of course, and Java Gradle and test engine. Yeah, now it's time for rock and roll. So let me start the video. Okay, so you can see here that's the website from overstep. You can see here a lot of different installers, yes or windows, Linux, macOS, whatever, and also Docker REST. If you want to use Docker REST. I used Windows just because I had it installed. All that stuff looks like, yeah, so it also offers you a GUI. Of course, if you use another installations, maybe you only have it from command line. But here for demo purposes, it's also good to have it with the GUI. From functionality, you can also use it kind of manually.  So you attack it and it will show you or security findings out of that. But this I don't want to focus on today. I want to focus on Selenium tests and overstep also comes with a proxy. Yeah, so it acts as a proxy and this is now how we will use it. This is the system of the test. So the note code application deployed on Heroku. And you have your pretty easy login. You know, if you do not the manual stuff that you hack it, attack it, sorry, then it cannot get inside the login. So this is the only surface where it can hack it or attack it. And with our tests, we make it not able to get inside the application. So this is the system of the test, which we will use just to let you have seen it. Let's come to our tests. I fear, yeah, IntelliJ, Java, pretty straightforward, no fancy stuff here. It's just demo purpose. We have here an easy login test case with valid credentials and afterwards it's just whether they need the dashboard feedless displayed. So we go to the URL for a demo purpose of a rate. We perform the login. There are the locators, dashboard and a pretty easy assertion. If you execute this test now, I guess everyone knows this here in the audience, you get then a red or a green. Yeah, if this login feature is working or not, but we can get something more. So let's see what I do here before method. So what I do first, I need to set a proxy. So let's where can we get these values from all of us. We have here the tools. And then we have the options. And now I let it already proxy. We have written the local proxy, and you see it runs a local host and on the port 7777. Just because 8080 was already blocked on my side, different story. I just changed it to 7777. And so this is the proxy configuration, and we did an API key later on for the report I will show it to you, but they just show it here where you can get it. You have API and you have the key. So these three values we need first for the proxy. As you can see your local host 7777 and the key. Good. So we set it first to the stream. This proxy class is coming from Selenium. So this is already a class from Selenium. If you have to use a proxy, you can use that. It has HTTP and SSL proxy. So for both. And on the Chrome, we have to edit with the set proxy. So the Chrome options. You can use that one, the web driver. It does. And then we start the Chrome driver. Here, this line of code is about the API and the client API. This class is coming from overstep. Very simply explained, we just need it to the report. Because we do a lot of, we execute it. It was a lot of detection of security findings. And of course, I want to have a report afterwards. And therefore I just need a pretty simple API core, which I do then in the after suite. So after all methods were executed, of course, now we have just one with some configuration. I just call the reports generate and it will generate me a report to the target for them. Cool.  Let's run it. So it's been of the test. It opens the Chrome. It goes to the system of the test in the data. Let me also open overstep that you can see what it's already doing. So you see here, sites that already collected. And what you can see here now is welcome to the SAP Hub. This is coming from overstep. Also, if you do manual testing, you can see here the findings which it already found and then you can continue to target and continue or some manual testing. If you don't close the driver and so on, or you configure the proxy on your Firefox or Chrome, then you can also do that. Also here, but it will close also with the execution afterwards. Just so you know what this was. Okay. The test case is screened. So usually what you have now is a test summary report where there is the test case screen. Super. Everything is cooler. But now you see here in overstep a lot of findings. You can, of course, you use the overstep tool and do them some passing of data and whatever. This is not content of this workshop of this presentation. We just have it simple. We just use it what it found. What is the report about? So you can see here the summary of alerts in the dedicated risk level and the summary of alerts in the group on the finding. And if you go now in, you can go dig into each finding and it will give you where it was found. What is the problem? What is the solution? Some references and so on, of course, depending on the finding and up to you. If you say, this is fine for me, okay, then release. But if you say, hmm, the fix is taking, I don't know, one minute and we can do it. Maybe we should fix it before someone else can maybe exploit it because we have here already some issues with a vulnerable JavaScript library. And you saw what the integration was about. Pretty straightforward. And beside the test summary board with test case log in successfully. You have now an addition to that from a security report, which tells you you have some vulnerabilities. Do you plan to deal with the risk? Do you want to deploy or should we fix it? So let me come back to the slides. As a promise to the integration was pretty straightforward. It was just a proxy. Yeah, extension of your Chrome options or whatever gravity you use to set the proxy and to get API just to get the reports up. And of course you need to install overstep. Yeah, but as I mentioned, you can, I don't know, don't pull and don't run. Let the sum up. I want to give you a recommendation kind of the next steps or seven steps how to come to the secure pipeline. Yeah, pipeline by pipeline, you know, that helps you want to have fast feedback. That's second step you also get feedback in the sense of security to empower your team. First is you need to upskill in security, join department or join join forces, good department, get a coach to a learning journey, go to a conference like this and get first insights into the area of security. Then go for Sust. Yeah, it's a pretty easy approach. And with that he begins, as I mentioned, you need the feedback very fast, otherwise you will ignore it.  Then dust. Yeah, go for dust, add it to your pipeline very important don't go now with overstep to automatically execution you do it for three springs and then stop. No, you add it to a pipeline it gets automatically executed, and you have the reports and you care about that. And if you don't do that, very often you just do it for some sprints and you stop that.  Define metrics and a positive brand very often this approach is new for the teams and they start now with the first findings. And agree on as a team agreement from now on, we will decrease this number, or at least we will not increase. Don't aim for zero medium fannings or whatever. This is very often not, not feasible. Makes no sense. You don't have the resources for that. Fifth, automate security tests, non factual and factual ones. This is how you can ensure that they will get excellent. And for us to get insights of your production environment protected. Also sometimes you get pretty good insights also just for the normal usage that you have to have to do some optimizations, but also here is the focus is here from protected from hackers. Last is set up I asked with the agent here. Explore it. If it's beneficial for you, if you can get something out of that on the test environment, and go for it. This is how I recommend it. Yeah, with my current knowledge. And, yeah, I think with that, you are in the good track to build a pretty secure application. At least you are aware of it. Thank you very much for your attention. The focus to be finished earlier that we have now time for questions, but of course I will be also present in the hangout afterwards. And, yeah, I want to hand over back to Ankit. Are there questions I can see there are questions. Yep. There are two questions. Let me stop sharing. And let me read out the questions. Thank you for the questions. Can we do this for legacy application application platforms mainframe windows based applications to if so what the tools used in this case. Good question. I got this already once. And to be honest, I don't know. It's a little bit depending on the risk. I think this mainframe applications have pretty strictly API is to the inside the own company, very rare outside to the company. So the risk is not so high as having a mobile app or internet banking application on the browser. It's always depending on the risk. What kind of security test lever you want to go for. There are tools for that to be honest, this is not where I'm specialized in, I don't know, also not for witness applications. I also need to check that out. So sorry, I cannot recommend here any tools, but just from the security testing approach, it's always a matter of risk. Yeah, so you you need to align on your team. What is the risk. Who is my users what is my audience from who is my application or from whom is my application reachable. Hopefully the answer is okay for you. The next one is how to reduce a war avoid force positives showing up in dust. The other is here more or less go for I asked, because if that you can reduce it otherwise it's pretty tricky. Yeah, of course there are force positives just by definition because it gives you a lot of findings. You can investigate in all of them. Yeah, you can then also classify them and check the report and then say okay decent that our kind of force positives, and you can ignore it. And also that you check them, what are the news will new findings would come if you're aligned on the current report, and you executed that with the next release, you get then maybe one, two more findings should not be that you get 50 more. And that you always focus on those and see, should we fix it, or can we live a bit. And otherwise, otherwise to reduce it. I don't know at the moment. Just I can recommend going then for us. Good. What plugins do you recommend. I cannot recommend any plugins at the moment I just recommend a plugin now from the idea perspective that whatever sauce to use that you also use the tool that you get directly input there we use your also team scale and we have here a team scale plugin in an idea and and this is not so much for security but also for us that the code analyzers. This I can recommend. If you mean from over step. I'm not an expert here. I'm also want to be here, quite honest. So I cannot recommend your plugins. I'm not at that level. Is there any way to include almost security report in our frame test framework. Yes, this I would definitely recommend. Yeah, I mean it's what it generates is an HTML file. And you can of course include any HTML files, whatever you want. And if there is maybe also an integration on the XML file base for testing yeast and using need to search it out. It's a good question I will also investigate on that one. Thank you for the hint. So maybe it can also be integrated and source level that it generates out of it. Otherwise you can always extend the reports that it gets integrated, especially, you know, we often have done kind of alone test some reports we ever integrate all the reports. Yeah, it's of course it's HTML that you have you have seen it. But I will check it out if there is any more narrow integration also. Thank you for the hint. So it was good. Yeah, if you share things and get good questions, then you get also. Yeah, the hint for new approaches. Can you recommend learning path to be good in security testing. Yeah, seems to be that they also participated the last talk about for movie. Kind of recommend the learning path which we had was mainly internally, because you know we have a big security department and they created a content internally. That's a very good question. We don't have it at the moment in our test automation journey, which we have seen also maybe before. It's a very good input. I will check it out if you have maybe also here from the app retours or from other providers which already used if they provide some good security testing which starts also from basic because very often see that this is also something which is missing and very important there. So yeah, that's my answer. I guess not very satisfying. Yeah, I'm sorry. But I can recommend maybe this is what I was did there. Start very small as I showed you. My security testing approaches are not the most sophisticated one and this is does not mean that you have a super secure application because there are very involved. So I'm going to show you some of my security testing approaches, which are not with this sauce sauce as the rest of the I have explained you. But what this is, it is a critical start. Yeah, it will reduce your findings if you need to do pen testing you will definitely need this external company because they are certified, but you will reduce already the report with this current approaches, and then extend it. Yeah, so I extended it now with the with the selenium tests yet to get more inside of the application. You know, it's always a risk if someone gets inside the application. What can he do then. Yeah, or what he or she can do then do you want to know that so you want to see this. Yeah. And then you know step by step, but always get this dopamine so finish stuff, and then extend it. Good. Currently we are using solar cube check marks. Last component application. Okay, for performance testing is good. Okay, all of them are licensed do you suggest any of open source which we can replace these. I mean, solar cube is kind of free of use but if you're enterprise of course you need to pay for it from overstep. Yeah, I mentioned here a lot of tools which you can use they are free. They are open source tools. We use I guess code QL from GitHub, but of course you are also cost rated it very often there are then cost rated it there and then it comes commercial tools. What I just can recommend you because those tools have really good standing on the market is the one which are published from overstep and get the most out of it. So very often this conversion tools, they have the one or the other feature, which the overs of which the open source to does not have, which is then very often quite important. But let's see. As I mentioned before, it's always a matter of risk. So recommendation I can give you from the overstep nonprofit company. I can give you from the overstep the better Jack absence or and so on. Last question for now, do we have time. Yeah, okay, super. The, the way of connecting Selenium with dock arrest run of almost in a CI system is the same as you have shown. More or less. There are some standard stones which you need to care about it, especially if everything is running on local host then you need to create a token network that they can communicate with each other so if your application stock arrest at the stock arrest, but all the instructions you can find on the overstep homepage. So, yes, you can definitely do that. There is no difference just I didn't use it because I don't know. I had already over seven stored and it was an easier for me, and I was about to show you the GUI and how you can use the the attack functionality, which was also very often. So, but our bottom line is, yes, just there are some special special settings which you need to cool. Yeah, thank you very much for all the questions. Yeah, a lot of them were also for me beneficial thank you very much for the hints I have to know some homework. Thank you very much for participating in this talk. Hopefully, you will be able to take something with you. And if it is only the awareness, but this is something where it starts.


Save 10% with my code Bobby10 on raw, organic, grass-fed and grass-finished, freeze-dried organ meats from grassland nutrition. Link in the description box. All right guys, welcome back to the channel. If you're new, my name is Bobby. Guys, upon popular request, I'm going to react again to Ahmed Didad, this time with his video, who is the founder of Christianity. We're a bit of an unfortunate start here on the channel with Ahmed Didad. May he rest in peace when we reviewed his video pornography in the Bible. However, today I've been told Ahmed Didad will explain the difference between following Jesus or following Paul. Guys, unfortunately, it's a very old video and it has a little bit of an audio distortion. So no, it's not my mic over here. It is the original video. Please bear with me. Anyways, with no further ado, let's have a look. If what you said is correct, that the Christian belief is in believing Jesus as the Christ, we have the salvation because we believe that Jesus is the Christ. We believe that. But no, I think you fail to say that you believe that he died for your sins, that he paid the price.  I think that is what you had in mind. Now, that's the topic, the subject while I was reading the index. If you remember, I said, Jesus not crucified is another topic. I've had debates with Christian, you know, evangelists, Americans, evangelists on this topic, like a professor, Floyd Clark from Johnson Bible College. I had a debate with him in Royal Albert Hall, London last year. I had another professor, Simkins, you know, also an American. He came to South Africa. We debated with him, was Christ crucified, as well as his Jesus God, however, the crucifixion. So we say, Jesus Christ was not killed, nor was he crucified. This was the subject of debate last night with Dr. Robert Douglas. That is the main theological difference between Christianity and Islam. And this is why Christians believe that Islam comes from the devil because it denies the crucifixion of the Suama Institute. He's the director of the Suama Institute, a missionary organization in this country. I had a debate with him last night. And I think that tape as well as the video tapes are available. You can you can avail yourself of those. How does the Muslim get salvation? You see, to Muslim, there's only one way. And the way is for all eternity the same. There is no change. God is not the author of confusion. He wouldn't tell Moses something, and he gives something contradictory to Jesus and again something to contradict him to Muhammad. If it is all coming from the same source, the message must be the same. I absolutely agree with this. I quoted it in previous videos of mine, the passage in the Koran where it states that the pattern of Allah is never changing. And this holds true for me. The truth is eternal because it comes from an eternal God who is never changing. Therefore the truth cannot be changing. And it is not changeable. He doesn't change his laws by the minutes. He fails one system, then he introduces another system. That is not my God. He doesn't fail with this system. He gave to Moses and to the children of Israel a law. The law was that as you saw, so you will reap in the book of Ezekiel chapter 20. Especially we're talking about changing laws. This is what you see in our democracy. Laws are changing consistently. Now you see drag queens story hour in kindergarten. They are teaching our children that they are 178 different genders. This is what happens when you consistently change man-made laws. But God's law cannot be changing. We are given that in a nutshell. By definition. This is truly slimy. It says the soul that's in it, it shall die. And the Christian puts a full stop. All his literature, who's evangelical literature, he stops, they puts a full stop where there's no full stop. He says the soul that's in it, it shall die. The son shall not be the iniquity of the father. Father Adam, his sin. We, his children, are not responsible for what he did. The son shall not be the iniquity of the father. Neither shall the father be the iniquity of the son. His sons today, in Los Angeles last June, this previous June, 300,000 sodomites whom you call gays, they gathered in San Francisco in a pilgrimage led by 50 lesbians on motorcycles. Here in San Francisco in your country, God Almighty will not ask Adam, say, look at your children, this rubbish. What have you produced? No, God will not ask him. He's not responsible. It says the righteousness of the righteous shall be upon him. Whatever good thing the good man does, he gets his reward. Yeah, that's exactly what I meant when I mentioned Drake, we in story hour. You see all kinds of degenerate movements that are not only accepted, but they become lawful in our ever changing progressive democracy. If we don't have an eternal standard of right and wrong, anything can become permissible. And the wickedness of the wicked shall be upon him.  Salvation. How do you get salvation? It continues. Jesus said to his disciples, follow me and sin no more. This is what I got out of the Bible. I should stop sinning and not rely on Jesus's death for my sins to be taken off me. That would be very irresponsible. Continuous. But if the wicked will turn, means repent from all the sins that he has committed and do that which is lawful and right, he shall surely live. He shall not die spiritually. Physically we all die. The good and the bad, the sinner and the saint, we all die. But this die means spiritually you will not be destroyed. You will live forever. Eternal life. That is salvation. Yes. You repent of your evil, do that which is lawful and right.  Heaven is for you. Solomon the wife. Yeah, absolutely makes sense. And this is what I've been questioning within Christianity, yet again through the crucifixions Jesus died for our sins. But if I look around, I see a more sinful society than ever before. So what happens to those sins? Are we allowed to sin now? Again, talking about those pride parades in San Francisco or all over the world. What is happening to those people? Are they allowed now? Is it legitimate? Is it lawful for them? So then we don't have to change anymore. We can stay sinful and everything will be forgiven. He tells us in the book of Ecclesiastes. It doesn't make sense. Advising his son and through him advising us. He says, And further, by this my son be admonished. Learner, listen from this. Of making many books, there is no end. All your excuses for not doing the job, not doing the work, not obeying God. There's no end to your excuses. Of making many books, there is no end. And much study is the weariness of the flesh. It's true.  I'm going to say Taoism. I'm going to study Judaism. I'm going to study Islamism. And I will come to a conclusion. Yeah, that's what I've been doing as well. And it has its place. But ultimately, I would fully agree there with the Bible. It is wary for the flesh. Absolutely. Because you're consistently in your rational mind. You're trying to wrap your mind around God. God ultimately is incomprehensible. And this is why we need a spiritual practice in our life to balance the two. I says, you'll get tired. Yeah. And much study is the weariness of the flesh. So let us hear the conclusion of the whole matter in a nutshell. Let's get the message. It says, fear God and keep His commandments. For this is the whole duty of man. That's all. Fear God and keep His commandments. That is salvation. Jesus Christ told you the same. Yeah.  Accept your righteousness. Exceed the righteousness of the scribes and the Pharisees. You shall by no means enter the kingdom of heaven. There is no heaven for you unless you are better than the Jew. Exactly. And the scribes and the Pharisees were the intellectuals, the ones that knew the scriptures very well. But in practice, they didn't follow God's law. They didn't know God. They only knew the laws of man. Accept it. Exceed the righteousness of the scribes and the Pharisees. He shall by no means enter the kingdom of heaven. He said again, think not that I'm coming to destroy the law of the prophets. I am coming not to destroy but to fulfill. Yes. For verily, I say unto you, most certainly I'm telling you, heaven and earth shall pass away. But one jot or one tittle shall in no wise pass from the law. Tittle. Jot. Jot is the smallest letter of the Hebrew alphabet. Not even that amount is to go out of the law of God. Yeah. True. It's a one jot or one tittle. This is why I still don't understand why Christians do eat pork, for example. Tittle shall in no wise pass from the law. Which I don't do even as a Christian. Whosoever therefore shall break one of these least commandments. Least commandments or shall teach men so, shall be called the least in the kingdom of heaven. But whoso shall teach and do shall be called great in the kingdom of heaven. I say we teach and we do. Yeah, many Christians nowadays, they have the assumption that all of those laws were simply for the Jews and we as Christians do not need them. I ask you, do you keep the laws and the commandments? You say no. I say why not? You say the law is nil to the cross. Why not? You say we are living in the grace. That's what the Christian says. Many do. You're living in the grace. I say, where did you get this? This idea. That the law is nil to the cross is done away with. Where did you get it? So he calls me. The Philippians, Galatians, Corinthians, Thessalonians, Colossians and So who's this? Who's this? Timothy, Romans. Who's all this? Who's this? Who's that? It's a Paul, Paul, Paul, Paul. Yeah, man. So who's your master? You say Jesus. What does he say? Saint Paul, formerly known as Sauros, working for the Roman Empire, persecuting Christians, real Christians, killing those Christians, but then by a miraculous vision out of a sudden becoming a Christian, after he changed what Christianity means. In Jesus, and Jesus said, the disciple is not greater than the master. Master is Jesus. What he tells us, I listen to my master, Jesus. He never had the pig. He never had the pig. None of his disciples ever touched that pork. You call it pork, ham, bacon, whatever you call it. He never touched that stuff. None of his disciples ever touched it.  Christians. Most of them. Where did you get this? Not all, but most. The Peter had a dream.  When my master never ate it, he wouldn't eat it. He was abhorrent to him. He killed 2,000 pigs, one hit. He destroyed them all. You know that? But now you don't listen to him. You are now living in the graves. I say, are you circumcised? He says, no. I say, why aren't you? This is a major commandment God gave. Your Lord was Christ. Jesus Christ was circumcised. I said, what is good for you? God should be good for you. No, you won't circumcise. Why won't you? This is the law of God. He entered into between Abraham and his descendants forever. And you claim to be spiritual descendants. How does that absolve you? I have to say that circumcision is still a huge issue for me. Please let me know in the comment section what you think about this subject. For me personally, even reading the Quran, Allah creates perfectly. So if God creates perfectly, why would we need to modify our bodies? This is something I cannot comprehend. Jesus was circumcised? And you are not? He said, no. He says, Paul said circumcision is nothing. And non-circumcision is nothing. I say, Jesus says, not even one jota, one title is to pass from the law. Can't you see? You are not following Jesus. You are following Paul. Paul, Paul. He is the real founder of Christianity. Paul, not Jesus. Of Christianity, the state religion of Rome. Yes, absolutely. Paul is the inventor of that. Therefore, your great countryman, Michael H. Hart, he wrote a book on the top 100, the greatest 100 in history. The most influential 100 people from Adam to current time. And he gives us a list. The 100, the top 100 of the greatest 100 in history, Michael H. Hart, New York of the Hart Publishing Company. And in that... Yeah, the Hart Publishing Company because his father owns that company. List of the most influential men... I don't find the source legitimate. After giving the list of 100 names, he puts them in the order of seniority. Number one. Number five. Number 50. Number 99. Who? Who? Who? And he puts Muhammad number one. Three. The most influential man in history, according to Michael H. Hart, an American in America. I would see why you would use it as an argument, but at the same time it's just one man that wrote a book in the publishing company of his father. I personally don't see this as legitimate. Pages retailing about 10 years ago for $15, which I paid for it. Maybe cost 50 today. I don't know. He says Muhammad is the most influential man in history. And his Lord and Savior, Jesus Christ, number three. His God and Savior, number three. And he gives reason. Yeah, I don't even like this. He is comparing the prophets and Islam itself, teachers that the prophets are all equal and they shouldn't be compared and God is above all his creations. So now saying Prophet Muhammad was number one and Jesus was just number three is not very chronically accurate either. Not because some Arab drive me. I don't like it. So here's $10,000 for you. Say a good word about Muhammad. Put him number one. We give you $100,000. Put him number one in your book. No. No Arabs could ever think of that. It's possible but not probable for an Arab to do that. Why does he put Jesus Christ as God and Savior number three? He said, you see, the honor for Christianity is to be shared between Paul and Jesus. Actually Paul is a real founder of Christianity. I don't know how valid this statement is. I would have to do further research. However, last time I checked, Jesus didn't end up on number one on Michael Hart's list here because Jesus wasn't a family man. He wasn't a father and he wasn't a statesman. So Muhammad was all of those things. And this is why in terms of influence, he had to place Muhammad on number one. Jesus. But yet again, I don't really know why this would be an argument to begin with. Listen to him. You can't help being a Muslim. You'll be a Muslim through and through. But you don't want to listen to Jesus. Read the books. Listen to the sermons. It's Paul, Paul, Paul, Paul, not Jesus. What did Jesus say? He says, he is not of me who does not take his cross and follow me. Take up your cross and follow me. But the howls that we are, we are not prepared to pick up the cross. I don't exactly know why he would choose the example of the cross. All right. The video continues this time in text format. There's controversy regarding the messages of Jesus and Paul. Paul's teachings are usually opposing Jesus' teaching, who happens to be the master. The messages of Jesus and Paul were fundamentally different. Reconciliation of the messages cannot be done by harmonization. Jesus preached the kingdom of heaven. Paul did not. Paul preached justification by faith alone. Jesus did not. Yes, I absolutely agree. And as I said previously, what does that imply? Should we now just continue sinning and we will be forgiven? That of course wouldn't make any sense. It continues. Jesus' message was primarily for the Jews alone and not for humanity. The original Jesus movement was a monotheistic movement that sought to bring about the kingdom of God on earth. Paul is actually the true founder of Christianity. He took what was basically just another sect in Judaism and turned it into a whole new religion. The original Christians believed in keeping the law and the commandments. Paul essentially watered down Christianity and turned it into the Jesus cult we know today and moreover to the Roman state religion as well as I said previously. Because Paul actually went after the original Christians. He persecuted them. He saw them as rebels within the Roman Empire. He killed them. He crucified them even. And then in the end he had this epiphany, this vision, the dream where he converts to Christianity. But he doesn't even convert to the proper Christianity of that time. But he makes up his own version. How convenient. It proceeds. Jesus' cult meaning. Paul placed most of the emphasis on Jesus rather than God. Yes. Early Jewish Christianity was the religion of Jesus. Pauline Christianity is the religion about Jesus. Paul basically taught that all you need to do to be saved is have faith in the death of Christ. Many of the early disciples didn't like him, but they tolerated him. You can really see the difference in the two teachings. When you read Jesus' teachings in the gospels, then contrast them with Paul who never even quotes Jesus once. Moreover, he doesn't only not quote him, but he never met Jesus once. Paul never met Jesus but changed basically everything that Jesus preached. Now we have some differences. Number one, Jesus taught that his followers should follow the Torah, the law. Yes. He preached the gospel of the kingdom. Yes. He presented himself as the Messiah and King of the Jews. Correct. Kingdom of heaven as Israel's prophetic earthly kingdom. Number five, preach repentance, keeping the law and commandments, forgiving others as necessary for salvation. Absolutely correct. So now Paul taught the Torah, the law, should be abandoned. He preached the gospel of the grace of God. He presented Jesus as the risen Lord, head of the church and the body of Christ. Number four, kingdom of heaven, heavenly position of the body of Christ. Number five, preached faith alone in the death, the burial and the resurrection of Christ as necessary for salvation. Yes, absolutely. And I believe that this leads to the confusion. Nowadays that we see with the famous example of the two men, one man is pious, he believes in God, he keeps all the commandments and the other man is a sinner. The other man is a murderer, is a rapist, he steals and whatnot, but he accepts Jesus Christ as his Lord and Savior. So who goes to heaven now? According to the Paulian doctrine, the sinner goes to heaven. How would that be even fair? It continues. My choice of Mohammed to lead the list. Now we have Michael Hart again. Of the world's most influential persons, may surprise some readers and may be questioned by others, but he was the only man in history who was supremely successful on both the religious and secular level. That's exactly what I just said before. I believe that if a man like him, Mohammed, were to assume the dictatorship of the modern world, he would succeed in solving its problems in a way that would bring it to the much needed peace and happiness. Yeah, I heard those quotes before, but yet again, I don't even understand why you would place them into this video. This video was about Jesus' teaching and then Paul's corruption of those teachings. I don't really understand why you would bring Mohammed into it. I actually really enjoyed the video and I agreed with 99 percent. However, when Ahmed did start comparing Jesus to Mohammed, I believe this is not the right way to go about things. Anyway, this is it for today's video long enough as it is. If you liked it, leave the thumbs up. If you haven't subscribed already, guys, please do so. And let me know in the comment section, which video I should react to next. Please let me know, especially if you're Christian, what you think about this video. Do you follow Jesus or do you follow Paul? What does it mean for you to follow Jesus? Is it religion or is it just some metaphysical concept? What does it truly mean for you guys? If you want to further support this channel, all the links are in the description box below. Thank you so much for your ongoing support. As always, may God bless you all much love and peace.


If I throw this in the fire, just like it is, it might heat up really fast, so it'll be hot on one side and cold on the other side and crack. So I'm thinking if I wrap it with some paper, then I'll just give it a bit of insulation for long enough, hopefully for it to gradually heat up evenly. I don't know what I'm doing, but I'm just doing it. Alright, it's pretty much dyed down in there, so let's go for it. Alright, I'm going to put one brick down at the bottom there, and one on the top here, maybe held up by a steel rod or something. Maybe I can just fit it across there. Anyway, try this. I guess I'll put a holy one and a solid one down here. I left the two bricks down there on the coals for about an hour, and then the other two bricks up here. And then I stacked all four bricks down here, two like this and then two on top of them.  And I didn't light it, and I'm just letting it slowly heat up on its own. It looks like it did just light in there. It's been about 15 minutes since I put all that wood in there. And there's the brick. So we'll see how that does. I have not heard any pops yet, so that's a good sign. Man, the wind is coming in this way. Low on the fire, nice and hot. I heard another pop, and it's this tile out here cracking. So I've heard two pops and there's two cracks, so hopefully the bricks are still okay in there. The fire is cranking up pretty good in there. I think that has enough wood to go for a while, so I'm just going to forget about it. And then hopefully later I'll come back and there will be some bricks, hopefully. Well, either way, I'm going to get more information from my ceramic learnings. Whoa! I can see a brick in there. It looks totally intact. Oh, and the one at the back does too. I guess I just need to wait for this to finish and come back and check it in the morning. Yeah, sun's almost down. That's not promising. That one's a little tougher. The sound on my video got messed up in the middle when I was taking the bowl pieces out. What I was saying there was I think I heated it up too fast, and I needed to heat it up slower to get the moisture out of it before getting it really hot. Because when it popped, I heard it and it sounded like popcorn. You know, like moisture in there, turned to steam and exploded. And that did seem to make a difference with the bricks, which is why I put them in a really low fire for an hour before actually fire them. So none of those exploded in the fire. They turned out not very strong, and there's a couple things going on here that I noticed right away. One is they have lots of bits, like little rocks and stuff. So when it dried originally, it just left cracks everywhere. There were little rocks. Another thing is there's a pretty big color variation. I'm guessing because heat variations. Okay, next thing I'm going to try is take this, which has no little rocks in it. It's pretty pure clay. I'm going to preheat it to get all the moisture out and, you know, cook it like I did those bricks. And see if I can get it to not explode and come out all right. So why didn't I just start by getting a bunch of instructions and following them to make sure I get this right? Well, if I write a bunch of instructions when I started, it would just be this big blob of information that didn't mean anything. And I could follow it to the letter and make something that works, but I wouldn't understand what's going on. So a lot of times when I'm trying to learn something new, first I just try some experimentation.  And then when I look up, do some research and find the information, it just fills in the blanks of the questions I already have. And it makes so much more sense and I understand what's going on. There, now this one's all shiny on the inside too. Why did these ones explode? Maybe because they had too much moisture in them? Maybe if I put this out in the sun, it'll do better and heat it up with the fire? I don't know. The others didn't get in the sun now. Yeah, these ones, the first ones we made. My cookie didn't. I know, these came out great. And we just threw them right in the fire. What do you think? The beads, I don't think they got in the sun neither. So what was different about, what did you do to this clay? I put some leaves in it because it was cake dough. Wait, you were making cake dough? What else did you put in it besides leaves? I don't know, maybe sand. Can you make some more clay cake dough? Cause like I just strained it and made it all pure and perfect and it exploded. I think your cake dough, I want to know what you're putting in your cake dough. Do whatever you do for cake dough. Oh, I think we're on to something here. I knew I might have to add stuff to the clay to get it to work better. I didn't know I had an expert cake dough maker. Like this was one of the first things we tried and it is totally strong. And these two that I made with Aurora's cake dough clay batter, what do you call it? Cake dough clay batter? It was cake batter. Just cake batter? Anyway, these came out great too. So hopefully she can recreate that. Where'd you get the clay? From the pile that you took out to make the brick molding clay. That pile right there? Yeah. Are you putting all three of those things in? Just one. Oh, just one of those? These disappear now because they're all covered in mud but they're still there. So you think this is dry enough? Yeah. You think I can make stuff with it right now? Yeah. Alright, I'm going to try my one bowl today. I'm preheating it on a stove on medium. It's about on medium. Ooh, that's hot. Yeah. I just have a little grate here so it's not directly touching. Alright, I got a little bed of coals down there. I think I want a bed of coals under it. I don't really know. But I'm just thinking when I fire the thing, I want some heat coming from under too, not just on the top. Just took this off the stove. It's pretty hot. That should be hotter than the stove was. So I'll let it soak in there for a while before lighting a fire. There's a bit of breeze coming in so I put some broken brick pieces here. I knew they'd come in useful for something. Anyway, that'll keep wind from directly hitting the thing. Hopefully it'll go around. I still want that to heat evenly. While all that's going on, I'm making new little test bits. I didn't relight it.  And then waited. And maybe 20 minutes later, it just spontaneously combusted itself. Alright, I'm being a little bit impatient here but I'll leave it there for a little bit. Slowly cool it off. Okay, from what I understand, if I tap this, it should make a ringing sound and that means it's all strong and solid and intact. And if it makes a dull thud sound, that means it's no good. Aw, there's a crack over there. That side's all good though. Oh, yep, there's a crack on this side. Still, man, that's close. Yeah, I can see some cracks there. They don't go right through though. I can't see them on the inside. But I can see some hairline cracks that don't match up with those. Most of it's okay. This is the thickest part. Maybe that has something to do with it. Anyway, I'm getting close. I'm still using this. I'm calling this total usable. I wonder if some of that happened because I pulled it out of the coals too fast. Alright, on the next one, I'm going to try to keep my wall thickness even all the way around. I'm going to preheat it like I did this one. And I'm just going to leave it in there to cool off for hours as the coals cool off. And so I remember this one was pure clay. Nothing mixed with it. This is clay from that pile over there, which a bunch of this ash mixed into it. And this here is Aurora's cake mix. Or cake batter, whatever. This one does appear to hold water. The water does not appear to be soaking in either. Looks like my glazing technique worked. Which was just rubbing with a rock and my finger. And then I wiped a little bit of ash on there.


we've seen you back out on the field. When did that rib injury start to feel better well enough that you were able to swing?  Good to see you guys. It's been quite a, it's been a couple weeks, a month or so you know I've been able to swing and we were getting our work done in in Tampa. You know I was still able to go into the facility and you know getting the cages, get on a field every once in a while, so it feels good to be back on the field. You know I was you know kept inching, trying to you know kind of push them on the regiment a little bit on what we could do because you know my body was feeling great and you know I know we had a limited time to you know get ready for the season because we never knew when it was gonna when it was gonna start. So yeah it's been about a couple weeks, a month. I'm not too sure to be honest. The days you know kind of blend together during quarantine. In your mind is that a thing of the past? Are you are you still monitoring that? I'm getting ready. I got told you guys in spring training I was gonna be ready for opening day so now I'm feeling good. I'm not really you know the biggest thing now is just getting the reps in you know because I missed so many at bats in the spring training we had. I didn't get all the reps and I'll feel the reps on the basis so for me right now it's just about getting my timing back in in the game and just getting my game ref so we can you know go out there for these 60 games. So early on in the process it's only been a couple days but how do you feel at the plate right now just seeing live pitching again? Really good really good. I feel like my eyes you know seeing the ball well, seeing it out of the hand well. I'm trying to make good contact but that's what you know we got a pretty tough pitching staff out there so these next couple weeks are gonna be tough but we're looking forward to you want to face the best so we got the best and it's gonna be fun a couple of weeks. Thank you. We'll take the next question from James Wagner. James go ahead and unmute. Hey Aaron how's it going? Hope you and the family are doing well. Just quick two questions one if it was any consideration for you or was it at all to play this season given you know the health risks. Secondly of all the things you have to go through this year they're you know changing your behavior whether it's like you know not going to a restaurant on the road not spitting no access to the video room what has been what do you see the hardest what has been the hardest so far to get used to? What's going on James good to see you. There's never a doubt in my mind of opting out you know we went over the risk went over everything you know with my family staying in California you know they're going to try to watch every game they can and I'm ready to go you know I really don't want to opt out and then the challenges like you said there's a lot of you know rules a lot of regulations can't do this can't do that but you know kind of what we talked with the team about is hey fellas we got we got four months four months to lock it in four months to you know go through everything do the procedures keep everybody safe you know hold hold off on you know you know going out or you know go into places just be smart and that's the biggest thing we kind of talk to everybody about which is being smart and holding each other accountable you know during these times we got four months to go out there and you know win a championship and you know we want everybody on the field you know so it's just you know we can you know you can spit and chew some flour seeds and go out to a restaurant and you know once this is all over with thank you thanks James we could take the next question from Eric Boland Eric go ahead and unmute Aaron thanks for thanks for coming in tonight you said there is really no hesitation in terms of committing to play do you feel 100 safe do you feel that you're taking any kind of a risk pipeline hey Eric um yeah yeah there's obviously a risk you know with anything you know just you know walking outside there's a risk you know leaving your apartment there's a risk you know it's there's risk everywhere but I just you know I love this game and I love the team that we got here and the opportunity we have here even though it's 60 games and I just can't wait to get it started you know but that's where we kind of talked to the team and we talked with each other really about just hammering and being accountable for each other you know watching out for each other you know making sure you wash your hands make sure you're wearing your mask making sure you're you know doing the things so that everybody stays healthy and stays on the field thanks Aaron take the next question from Marley Marley if you can unmute please Aaron thank you very much for joining us tonight it's good to see you Aaron obviously last year even with all the record setting injuries you guys were two games away to make to the world series this year even though we're in a pandemic and with a shorty season you've had a lot of time to get healthy you know not only you Aaron Hicks you know James Faxman what can the Yankees do a fully healthy roster in a 60 game season hey Marley that's a that's a good question you know um you know I'm to be honest I'm not quite sure and there's a lot of unknowns like you said we had a lot of guys missing time and haven't really had our whole squad together you know for you know full season but I think that's what kind of motivates this team is the unknown of not you know we don't how good how good could we be you know what how special could this team be so I think it's that unknown that really motivates us to go out there and say hey guys let's the next four months go out there and you know put a good season together and you know show them what we got in the middle of this terrible thing do you kind of see it as a silver lining that you guys had over this time to get healthy yeah selfishly you know selfishly like I said I was kept telling you guys in spring training in February that I'd be ready for opening day and I haven't lied to you guys yet so but it was you know it was sad to you know kind of see the world without sports for a while and it was tough on a lot of people and but it's I'm just glad that we're starting to get things back and hopefully we can continue to continue to play and finish the season thank you we'll take a few more Sweeney Sweeney Murdy go ahead and unmute you can ask a question hey Aaron by the time I'm sure you've seen schedule at least part of it it just came out by the time you guys take the field on July 23rd it's going to be what 10 months since you last played a game what are the challenges of then playing 60 games in 66 days you know the idea of conditioning for that sprint yeah Sweeney it's um well that's where these you know a couple of months off are so important you know that's why you know a lot of us on the team we're checking in with each other hey what are you guys doing you know making sure you're still throwing making sure the pitchers are still staying on the routine you know making sure the hitters are getting their swings and it's not you know go out there do your you know full routine like you would during the season but just but just stay moving I think that's what we did collectively as a team really well is everybody was staying in shade everybody's ready to go just kind of chomping at the bits you know so that's you know the biggest thing is you know what you did what we did these past four months it's not really about what we did right now it's actually what we did you know from you know March all the way till now is what's really gonna you know separate us I think from teams we'll take a final question from Brendan Cutty Brendan go ahead Aaron thank you for taking the time tonight I hope you well um on Thursday you faced Gary Cole he's pitching again tomorrow night you've seen a bunch in the past but just what was it like on Thursday facing him here at Yankee Stadium and just how good how special could he be for you guys like I said I think I talked to you guys name in the offseason when spring training started about you know when we acquired Gary Cole I think I think me and a lot of guys on the team probably the whole team were just looking at our phones checking our phones every single day trying to see the updates who is signing with who he's going with and he's something special you know it was fun facing him on Thursday and that's the first you know live VP I had and quite a few months so to see the best in the game was was was pretty fun you know just right out of the gates but man he's just he's such a competitor you know even checking in with them and he's throwing 99 you know a couple weeks ago during his you know bullpence he's throwing at home he's you know hitting 99 hitting the spots you know he's throwing four or five innings man he's just he's a bulldog you know and that's the type of guy you want leading your staff the guy's gonna go out there every five days and demand the ball and go out there and you know get wins for you and it's just a fierce competitor I think I when I stepped in the box you know the facing the first time I try to give him a little hey gee how's it going he just looked right through me man so that's that shows you what type of competitor he is and doesn't matter if it's practice or live dp or the game and he's he's the real deal so I'm excited to see him out there in a pinstripes in Yankee stadium soon


Welcome back to Kids Fun Science. My name is Ken. Today's experiment is the Cheerios Effect. So why does cereal bunch up? And so we're going to go through the experiment and science behind it. Please remember to subscribe and like this video if you enjoyed the experiment. It really does help our channel. So what you need for this experiment is a bowl full of water or milk, a knife, some pushpins. It's optional and some Cheerios. Some breakfast cereal. Have you ever wondered why cereal bunches together? Well when you look closely at the cereal it meets in the milk, it curves up. The same thing happens to the edge of the bowl. This is called the meniscus effect. It gives you that U shape from the Cheerio in the middle to the edge of the bowl. When I drop a couple Cheerios into the bowl they are pushed together because the highest point is going to connect with the other one. Or it might go to the side of the bowl. Whatever the highest point is closer in this case the closer point of the highest point was on that Cheerio to the left was the side of the bowl. This time the two Cheerios are right next to each other and the highest point is the Cheerios as it curves up and it draws the water milk. You just draw them all the way there. There it goes and they connect together. Here's a closer look at the Cheerio with the meniscus effect where you can see on the left a light curving up as the water of the milk is curving up onto the Cheerio. Therefore the highest point which will draw another Cheerio towards it. So the second experiment here is with a thumbtack and so the thumbtack is where it's actually got enough weight it actually curves the water down. When we put these together and we have two thumbtacks and we put one by each side of each other they end up still connecting but instead of rising up like a Cheerio they sink down because the water is going down and they connect. So now we're going to use a Cheerio and attack and when we put them next to each other and we try to bring them in the curved object curving down is attack into the Cheerio that's curved up right. And when we do that light floaty objects like the Cheerio run away the repelled away from the sinking objects the curved down objects. So when we try to do push them together the lighter object the Cheerio will push away and repel away just like that which is pretty cool. So on the third experiment here is what I did is I took a regular tack and put it in so it's curving down then I took the tack out of the other one and just placed a piece of plastic together. So but as you can see they're not connecting together they don't want to pull in and it's because without the tack inside the plastic it's a lot lighter and therefore the water curves up onto the piece of plastic but the tack sinks down and curves down. Therefore having the same kind of effect just like there where the plastic was lighter and it went to the side of the bowl. Now we got we add into the Cheerio and you can see it repels since it's lighter it wants to repel off the sunken tack because the Cheerio is a lot lighter but where if you put them closer together on the plastic and the Cheerio they eventually will come together because both the waters are curving up. If you enjoyed this experiment please remember to click thumbs up and to subscribe and thanks for watching.


Hell yeah, what's up guys, this is Chris Pipe. My friends call me Big C. Back in action today. I wanna talk to you about this amazing video I saw. I was going through my heartbeats and I was going to YouTube and I saw this. I wanted to share it with you. I made, I think 19 moments with heartbeat and it's awesome. This guy here, DIY Perks, you may or may not have heard of him, but he's amazing. He's basically this crazy smart engineer who took a PlayStation 5, literally pulled it apart and turned it into a mobile PlayStation 5 with a tablet screen on it. It's literally a PlayStation 5 that you could take with you to parties and be that awesome guy. So anyways, let's get into some of the moments. It's absolutely nuts. You're gonna love it. Let's go. All right everybody, so here we are inside heartbeath.ki, if you haven't logged in or if you wanna log in and see my moments. And here we go, on the right side here, you'll see here I've got all these different moments starting at 17 seconds. Now, if you look here, it says the video is 18 minutes and 11 seconds long and it is very technical. So he shows you how to do a whole bunch of things. So I just try to get the best parts of it. But again, if you wanna watch the whole thing, you could just click on this little YouTube button here and it will take you directly to YouTube to watch the whole thing. All right, so here we go. I'm just gonna see how loud this is. I'm gonna hit play. Let's go ahead and hit the first heartbeat and see what we got. We have everything they need to make a proper portable console. All right, so there you go. So the first thing is very quickly, he is going to take a PlayStation 5 and turn it into a portable console with a tablet basically as the monitor and it isn't attached to monitor. This is not a separate monitor. You can literally put this in your backpack, go to your friends house and play games. So here we go. I'm gonna take a look here. We'll skip forward. We're gonna look at the redesign here. This is the much smaller motherboard. Take a look at this. Efficent internal redesign with the components like the motherboard being completely refreshed. Look at that. So the PlayStation 5, the original is on the left side and now this is the slim on the right side. So if you have the newer version, you can actually go ahead and follow along and do this if you're highly technical or if you know somebody that's technical. Let's move forward a little bit here. Take a quick look at the next one. There is a format for gaming that's not been explored much yet, which I think will have huge potential. A PlayStation 5 tablet edition. There you go. Tablet edition. He is literally creating this in his own home using parts that he bought and a 3D printer, absolutely amazing. So here we go. Let's move forward a little bit here and take a look at the first obstacle that he faces, which is the heatsink. Think for example. It's a fairly weird shape and occupies a lot of space, but one action we can take is to swap it out for one that's much shorter and wider. So there we go. He's got a heatsink that it comes with, of course, but he's gone ahead and purchased one that is a different shape. It's shorter and wider, like he said there. That's not going to solve all the problems though. So let's go forward a little bit more and I want to show you what he does next. I don't know if we're going to get any heat generated by the processor over to it in this configuration. Heat pipes, of course. There we go. So he solved the second part of the problem, which is the location of the heatsink is not near the processor and that processor cooks up pretty hot. I think it goes up to 80 degrees. I remember it correctly. So he's gone ahead and added in heat pipes so that he can go ahead and pipe the heat out to the end here. So the next moment, we'll skip that one. This talks about how it has a 200 watts of heat coming out of the processor. But look at this. Now he's going to go ahead and nickel strip this. This is MacGyver stuff. He does this at home. Needed for this is some white vinegar and nickel strips plus a dash of salt. So he's going ahead and plating the heat sink with nickel strips. This is created at home kind of like a year, a home scientist type thing where you drop a few things into a beaker and presto. Amazing stuff here. If I go forward a little more here, you're going to see how he moves the air over the heatsink to keep it cool. Check this out. But how are we going to move air over the heatsink to keep it cool? The original rather gargantuan blower fan is simply added to the question due to its size. But what about using several mini versions instead? Look at that. So he's taken out the regular heater or the regular fan part of me and he's adding in custom fans that you can buy online from like New Egg or a part store or whatever and changing that out. So this is absolutely crazy what this guy's got going on here. You'll see here a little bit further on. You can mount a second heatsink. And I mean, it goes on and on. But the reason why I'm showing you this is because heartbeat, you can go ahead and mark the moments that are important to you. So if you're trying to figure out, like let's say you're doing a garage, you're trying to fix something on your car and you know the video, but you don't want to watch somebody talk for 45 minutes. Get to the point, buddy. Just go ahead, go through the video, mark the components or mark the parts that are important to you and the parts that you think are interesting. And then when you go to do the installation or whatever, it's all there. Let's take a look at a little bit more here. Mount a second heatsink. Check this one out. Add an additional smaller heatsink instead to provide the extra heat dissipation, surface area. So look at that. He's gone ahead and added in a second custom heatsink that he's added in. I mean, this is just crazy stuff. Of course, I suggest you watch the whole video, but this is absolutely amazing. Here he goes and changes, swaps out the generic fans. He replaces them with some high quality fans if you want to take a look here. As I used during testing, just aren't anywhere close to being good enough. So after some intense research online, I'm going to replace them with some highly engineered models designed for high power laptops. Amazing. And so this is just absolutely amazing. And then the last thing I'll show you here is he designs a shelf. We don't need to see that, but he 3D prints out a shelf. He adds a miniature subwoofer that does not come in any of this. Watch this. A miniature subwoofer consisting of two five watt drivers to fill in the low frequency sounds. If anybody's ever played on a portable console or anything, you'll know the sound is generally not very good because of the poor speakers and it doesn't do very well in the low ranges. Well, he solved that. Look at that. This is absolutely amazing. And then for the coup d'etat, look at this that he adds in an OLED screen, not an LCD screen, an OLED screen because they've got better darks and they're just even higher quality. Check this out. Problem with LCDs and why I don't really want to use one is that they suffer from motion smearing and poor black level performance. Yep. So instead, let's go with OLED. These provide pixel level dimming for incredibly vibrant images. Amazing. So there we go guys. Now the final piece of course is we got to test it out. See if it works. Click in. Let's test it out. Does it turn on? There it goes. World's first PlayStation 5 tablet edition. Look at that guys. This is absolutely amazing. This is an incredible video. Keep in mind that heartbeat has a ton more stuff coming out. We've got analytics studio coming next. We're going to have monetization so you can create your own heartbeats or you can embed other people's videos or make heartbeats of other YouTubers that you enjoy their content. This is all coming. Check this out. Leave a comment below. If you have a video that you think we might want to feature on heartbeat, let me know in the comments below. Add me on Discord. Thanks for watching.


Ond mae'n gynhyrchu'r record yn hwn, ac mae'r clwbau mae hyn yn ymweld? Mae'r rhan o'r gael tyni yn maen nhw, ac yn gynhyrchu'r golf Llywodraethol, rydyn ni'n ymweld yn y 17th T-Box. Mae'r bach yn gwneud, ac mae'n rhan o'n gweithio, ac mae'n rhan o'r gael yn rhan o'n gwneud. Ac rwy'n gweithio'n gwybod yw'n cymdeithasio'n gwneud yma, Almost not major changes but there are some. We'll kick it all off I think. We'll start with the bits that I haven't changed. So the first item in the bag that hasn't changed and hasn't changed for I reckon almost three years for those who have been watching the channel for quite a while you'll know that I had this ball in the bag, the seed, our SD02. Exactly the same model, I've used it for the minute I tried them. We did some testing three years ago. It was really, really impressive. that is incredibly well prised and for my own performance in and around greens off the T Ions Control all the things that I look for and feel I suppose it's that other major important thing for me. It nyg Partner's It's great to be still using that golf ball but from there so sort of it's might be boring start supposedly golf ball will go into the Ions. Felly mae'r bobl wedi'i dweud y gallu'n gwybod y dyfodol yn ymgrifio'i'r gwybod o'r ffordd. October 2019, mae'n gwybod y PXG 0311 yw'r model P. A wedi'u gwneud ymateb yn ffodol 5 iron.  Nid ydych chi'n gwneud arall yma yn y llwydoedd nesaf 6 mwyn, Ond I'm going to end at a five iron longest I'm going to play. And to put that in to cut some kind of perspective, my five iron is probably in and around the sort of one ninety mark, that's where I would hit this thing. Reason I picked these irons, is I love the sound and feel is a major, major thing for me. They're so, so soft. They've performed incredibly well. I have got a particular shaft, a steel fiber 110 stiff shaft. I believe it's a bit of a Marmite shaft you very much either love it or hate it. a mae answers. It suits me a lot, and I've really enjoyed every minute of playing these irons. I can't moan at all. Simply difficult to fault and they've stayed in a bag for 18 months and I can't see any reason why these are going to change. But then out of there from the five iron, where did I go next? Right? Next up, it's wedges and more new clubs in a bag. You will have seen these for those of you that watch the channel quite frequently then thes were, the were a part of the ultimate whats in the bag as well and it's these es 21 wedges from Mizuno um pretty much hard to fault i thi'n ddu look fantastic uh i'n saying that the finish looks fantastic i thin cyf u'r look at them on the shelf they look very bulky and a fair bit of mass and it's not until you sit these behind the ball that you see how they've chamfered off that top line I've mentioned it in the full review that make them look really neat and compact and nothing like the kind of game improvement mae'n ei deilig, dyna. Aberch chi'n gallu du o'r posiadau, fe yw dda'r dddechrau gweithio gwiaeth, fel ddarparu i'r wneud cyfrannu i ddweud hwn. Gwyl efo'i phanion efo'r Pwnghwr, wedi bod wedi chi'n dos ar 34 a 58 gweltyn g Bastag. Rhaid, yr eich Pwnghwr, rwy'n gweithio'r gweithio y can o'r Laff, i'n gweithio'r rhaid, mae'r ddweud o'r clyg, nad yw chynno hefyd i dddechrau'r Pwnghwr. suspect the solygen ar yr aded dissolved that with a soul again. I really love and is so versatile. And it doesn't impact on the ability to open up and try and flop shots or whatever it is you like to do with a wedge. These kind of do everything and then they've got great feel as well. For me this ES 21 has been a standout product. And like I said 54 and 58 in the bag. Right next up is the putter, and this is a new club in the bag. balad. Ac yn ymdod, fel y gallai gydag, ac ond y corffaethau yn gil, yn gil i ddim yn gondol'r bol yn ôl yn siarad. Felly, rwy'n meddwl bod amgylch yn o Неch, ymarferol errwynt! Ac mae yw'r ganddo yn g雁! Mae'n ganddo yn ddiweddol ddechrau. Mae'n ganddo, dyma. Mae'r ganddo yn ei gydag, mae'n gôl 10, a mae'r ganddo ddiwethaf yma arall, mae'r ganddo i ni wedi unig gydag arlau'r adeilad. Mae wedi ar strangers fwy rôl yn gorau. Yesen is the model of perimeter with a popular своire in the back end, mounted style putter … it its very very stable. I will love again the face insert, it comes off very nice. I love that kind of feel and the feedback and tubes back into the hands. But this is then an addition of this triple track and this triple track comes in both ball format and also in alignment aid for the putter itself. For me it is just as easy to use Are very easy to use due to using the seed ball and single black line... ac mae'n meddwl i'n dweud bod yn ynglynedd bwyd i'r ardychu. Felly, mae'n meddwl o'r rhagl. mae'n meddwl voedol ychwanes i'r bwysig, o'r greu peth i'r ffordd. Dyna y llun yna, mae'n gwybodaeth yn agos ei wneud o'r bwysig i'r tatgau rhywcannu i gyrwch mae'n meddwl mewn i'n meddwl y masch. Mae'n meddwl yn ystod y budd ar y hyn. Mae'n ystod y 7, ac nid i'n meddwl am y pethau. Rhaid i'w ddau'n meddwl y gallwch chi'n gafod i gyflawni G4-25 i'r model rhaid yn ymddangos. Mae'n meddwl i'n meddwl ar y cyflawni, ac yn y cyflawni'n meddwl ar y bag. Ychydigau ar y cyflawni eich bod, byddwn i'r ailfau, felly mae'n digwydd am fath. I can play it from anything you see the par 3 I'm playing right now which is a 202 carry. Probably about on my limit that 202 205 carry at launch is high at land soft ideal for a par 3 or a long par 3 in this case. But also you see play it from the fairway, a tight lie where sometimes you may go for the three wood but again it's a little bit harder to launch where this thing oozes confidence. I love the sort of low profile of the G4 25. It picks it up so easy. And like I said it's just I can't fault this club to be honest with you and I talk about average golfers about what they should have in the bag and I think all of us should be looking at a 7 wood without doubt. So that's 7 wood what is next in the bag. Right so next up is another change in the bag for this year and we're going to a hole. It's the 11th at Wallacey Golf Club. First of all it is a stunning golf hole. You'll see from the drone footage we put up for you now that it's a fairly tight one off the tee. And it's a type of hole that I might choose to use this which is a 5 wood. First time I have had a 5 wood in the bag for well forever. I can't remember the last time I played one. First of all the club itself is the Mizuno STZ which we featured fairly recently and you know from my opinion on the club itself. Fantastic performer but it's what it does in terms of distance wise. It's kind of like a 220 club. I was finding kind of similarities between my 3 wood and 5 wood not overly different and just that little bit of a shorter shaft. And the control I got on consistency with the STZ was fantastic. So this is the type of hole that I would tear up on. I've got a yardage I know what I'm looking for. I'm anything over that 200 yard plus. And I mean good niche and good position and what is like I said a fairly tight fairway to play into this green. That's the planet least anyway. Right last club in the bag. The big reveal. It's not really a change this one because again those of you who watch the channel know that I've had this pretty much straight in the bag from back end of I think it was July last year. It is the Callaway B21 driver. Get one thing out the way from the top side. I hate it. I don't like the look of it. I don't like this sort of almost triangular elongated shape. Not my cup of tea whatsoever.  Well because I have driven as good as I have done with any other driver for ever with it. In terms of consistency with the bad shots they're not as bad as perhaps they should be. It launches the ball well. The ball speeds are incredible. I've just played really decent golf with it. And it's again all these things are about you know golf is a major thing is about confidence. And it's confidence inspiring. The more fair ways you find the more that confidence grows. So it's been really really good. I love the sound of it and know a joke about the way it looks at the top. But the sound and feel is really good resonates back in the hand. But the other big difference has been this hazardous smoke shaft. A stiff shaft but one inch shorter than reg. So I think it's a 43.5 inch shaft. Now you know again if you watch the channel recently I did a lot of testing. And whilst I didn't really seem to lose anything in terms of overall distance. Just the consistency in terms of how often I found the middle of the face with that shorter shaft seems to increase quite considerably. So my sort of averages become far far better. And like I said back here out in the golf course at Wallasey again we found a good few fair ways to stay with it. And my confidence is high. So that is pretty much the bag from ball through to port-a-rab just making sure we've covered everything into driver. And I'm loving everything I've got right now. It's a really decent set up. It gaps quite well. For those who count up you'll know we've probably got 13 clubs in the bag which leaves one option for perhaps sticking a hybrid in. But in all honesty what I'll probably carry is a reduced set in terms of the number of ions, drop a wedge out. And I'll probably end up going round with a sort of 10 club carry bag. That's my preferred option to play. So I'm not really a 14 club man anyway. Right, that's me you've done what a fantastic morning up here at Wallasey Golf Club. Thank you for letting me use the course to film this one as you can see it's pretty special up here. Give me some comments down below. Give me some feedback. Hope you enjoyed what you've seen. And I'll see you all very very soon.