Looking for a weekend getaway from Bangalore in the post-COVID times. One of the easiest places and one of the easiest trips that you can plan is a road trip to Chitmangalore. So Chitmangalore is a coffee town. This is known for its coffee and the hills. And Chitmangalore is about five and a half to six hour drive from Bangalore. And when you're in Chitmangalore, one of the places that you can consider staying is Trivik. So this is the Trivik property where I am right now. We are doing a three night four day stay here. And in this video I'm going to be showing you around the property, showing you the things that you can do here, the food that you can eat and basically helping you plan your trip. So keep on watching. This is my baby boy. So throughout the video you'll also see how we manage with a small baby.  And we've been here for almost two days now and I think our stay has been pretty comfortable. So yeah. So today is our second day in Trivik, Chitmangalore. And it's about six p.m. in the evening. And we are out for coffee. So that's the coffee shop. The coffee shop is open from four p.m. in the evening to about six p.m. And right down the coffee shop is a small, I think a natural, very small natural waterfall and a water body. But the beauty of this place is the greenery around that you can see. The entertainment options in Trivik are, I think, kind of limited. There is a game room. Apart from that there's a bar and there's this coffee shop. So make use of the property when there's light and when the weather is not very cold to just walk around, you know, taking the nature, taking the greenery. And every here and there you'll see coffee plants. And if you come between Jan to March is when the berry season is there. So you can actually see the coffee berries and those berries being plucked. So let's go to the coffee shop.  The filter coffee is grown locally. It's local to this area, local to Chitmangalore. And I think that's a must try when you're here. That you get from the coffee shop. Hills are actually called Mulangiri Hills. And it's one of the most see places actually in Chitmangalore. So if you have more time here, you can even get out for a few hours from Trivik and visit the Mulangiri Hills. The hills are at a much higher altitude. So the view from Mulangiri is amazing. Yeah.


And here we have Christian Heimes, who is the most senior core developer we have in the building, actually. Hello. Hello. Okay, perfect. Welcome to the afternoon of day one of Parlandinium. Thanks all for attending, and thanks for extra paying your tickets, because you're going to pay, actually, the travel of the core developers. In September, we're doing a sprint here, a meeting with the core developers at Lumberg, and you're funding us. Thank you. So, hi. I'm Christian. I'm from Hamburg, being Python for all... Oh, yeah. I usually use the white screen because no contrast, but these displays are amazing. So, core developer, actually, okay, the date's around since 2007, actually, October, and maintaining mostly security stuff at Python. I'm also employed by Red Hat. I'm working on a software site called FreeIPA, which is identity management, a bit like Active Directory. So, and this talk is going to be about TLS-SSL, and the agenda and takeaway for this talk is I want to give you, like, a high-level view of what's going on if you do, like, HTTPS or open your browser code website. Quick introduction to the SSL model, a bit like Three Minutes Crypto 101, TLS handshake, how certificates and public key infrastructure work, a peak preview at TLS 1.3, and finally some books and resources at the end. So, this is actually three hours of material condensed into a 45-minute talk and then shrink down to 20, hopefully 25 minutes, so I need to rush that a bit, sorry for that. I will upload the slides after my talk at that address. So, this talk is under a CCD license, and I have some assumptions. So, only assuming Python 3.6 or newer, and some things only work in 3.8. New version of SSL, new version of TLS, because the old versions are really bad, and also modern cryptos, so I don't get on the pitfalls of bad old cryptos which you can use in old versions of SSL. At first, should we use TLS-SSL? So, the short answer is actually yes. The slightly longer answer is yes, really should, and there are a couple of reasons for that, and most people think, oh, it's very complicated, it's also slow, but there's actually only one performance issue. It's not yet widely used enough, and the rest can be optimized, and these stays, in most cases, are equally faster to use TLS-SSL, which try a hunch out with a nice animation, so that's loading a web page with lots of resources over HTTP. It takes like eight and a half seconds, oh, almost six seconds, but if you go to HTTPS, you do like bam. So, it's much faster because that can use HTTP2 with some tricks and tunneling, which you can't do over plain HTTP, and that's usually much faster, and setting up TLS-SSL these stays is also easy because thanks to free search with Let's Encrypt, so there's actually no good excuses to do that. On the other hand, lots of benefits, so both privacy and security, so nobody can inject like malware if you're using like public Wi-Fi. It's faster, Google and other search machines bump sites with HTTPS higher. You get browser-warning these days if you use like password fields, and browser-inconsidering to remove support for plain HTTP soonish probably next year or the after. So, but what is HTTPS or TLS-SSL actually? So, it's this green, small, funny, wow, my laser doesn't work very well on display. So, this green icon is what most people consider as secure connection. I'll have Wikipedia definitions because they're much better than me to condense something in short sentence. So, transport layer security, and SSL, the old name, are cryptographic protocol that provide communication security over a computer network. The TLS protocol aims primarily to provide privacy or privacy and data integrity between two communicating computer applications. So, lots of things. Let's pull that apart. The core features are encrypted transport. So, nobody can read what you're doing if you do it right. You can run multiple applications over that, not only like HTTP, but also email, VPNs, and whatever. Here's what integrity checks. So, nobody can mess with your data. You can see if somebody messes with your data. It's spreading in replay attacks. So, if you send money to your bank, do a transaction on your online banking applications, take account replay that over and over again to get, like, all your money up account. It also authenticates the server in very strong ways.  And it can also do what most of you don't do that for browsers, authenticate the client, the client certificates. And it's very extensible. So, HTTP2 and HTTP3 build on several properties they can extend the protocol. It's actually not one. It's a whole suite of different things. Well, ITF has some standard for that. There are a couple of numbers assigned. And the IANA, there's different standards. I only talked about actual TLS. There's also TLS over UDP, and there's something new coming up called QUICK, which is HTTP3. There's ASIN1. That's the standard for, like, encoding data, like JSON 30 years ago. And there's this notorious public key infrastructure with X5 and 9 certificates, which is a bit complicated, but again. So, the SSL model, that's the thing most people use, if you use, like, PIP, install your packages, is a very thin wrapper around OpenSSL, which shows through multiple parts. The most important bits and pieces are this SSL context thing, which maps to SSL CTX pointer and OpenSSL, which is your configuration space. You can figure how you do the actual connections. Then you have the SSL socket, which looks like a normal socket, wrapped in something that does all the encryption and protection for you. There's also another bit and pieces. You don't use the socket directly. You use the memory IO, bio, SSL objects. And there's something you should never use anymore, the very, very old legacy API SSL wrap socket. Hope you can see that in the background. It's a bit low here. The connection with the Python SSL model looks a bit like that.  You need a hostname in two places, explain why a bit later. So, this thing here under the hood does a bit more. If you pull that apart, then it creates a context. And since I'm ignoring the old versions, I also set the minimal version to at least TLS12. I don't want to show the first part of the talk what CL-103 is doing of the maximum version. We require certificate verification. We require hostname verification, and since we want to verify the certificates, we also need to load, like, the trust store, the root of the trust for all the certificates. And then we need to do a connection. So, this socket create connection is just a wrapper that takes here IP for four, IP for six, and just creates a socket connection with DNS lookups. And that's actually the endpoint then for communication. Then wrapped into a SSL socket. So, that takes ownership of the socket and returns a instead of SSL socket. And, yeah, now you can just do most of the things you can do for a socket over the SSL socket. And if you look what we're going to do next, if you look what the socket can do, there's some properties like you can get the ciphers, which is this mumbo-jumbo of letters and numbers that I would explain in a minute. The three different versions you can have, you have version one, two, or the last one is for one, three. So, crypto thingies, how does crypto work? So, the very, very quick intro into crypto, very fast, what you need for SSL TLS. It's a bit like LEGO blocks. You build stuff of smaller blocks and create a protocol of that. The first thing we need in a couple of places is we need to have, like, a fingerprint of data. So, most operations can't be done on large amount of data, but you need to shrink the data down, make, like, a checksum. That's hash algorithms. You also need something to encrypt your data. It's called bulk encryption. A bulk means you can encrypt lots of data very, very efficiently, very, very fast, which these days always symmetric key algorithms. So, you have the same key for encrypting and decrypting. But you have to do the right way. You do the wrong way. You need to see through what the encryption does. So, that's an encrypted image of a logo you may recognize. So, you need also a mode or you operate your encryption. And, yeah, all modes are beautiful except ECB. Not you. You're bad. That's the one where you can see the pinging of a logo. So, there are different ways to chain them together. And also, encryption does not secure your communication. So, you can still modify the data. So, you need something that's called authenticated encryption. In the United States, we use AAAD algorithm that called authenticated encryption with associated or additional data where you do something like a checksum and the encrypted output. Or if you decrypt, you verify that the output is the correct output. We also need a couple of asymmetric crypto algorithm. It means you have like a public and a private key part, three major subparts of that asymmetric encryption, signatures where you sign something and something where you agree on a mutual secret. As a symmetric encryption, we don't do anymore because it's bad. Signatures, we do a lot. We need to sign data both for certificates and for the actual connection to verify that you talk to the right server. So, the server has the private key or the CA who has the private key and signs something else. And with a public key, you can then verify that the peer or the private peer owns the private key. And key agreement protocols are... Wikipedia claims a bit of color mixing. So, you have private parts and public keys and you send your public key to the other part. And magically through math and funny stuff, you both agree on the same result without actually exchanging the results. And an attacker can't do the same. So, we have these building blocks. We have key agreement or key exchange. We have authentication. With the cipher modes. And we used a one-way hashing function. One-way function for some parts like Macs. And these build up this lovely acronym. So, that's TLS with elliptic key, Divi-Hallman key exchange with RSA certs. A is 128 for block encryption in Galos counter mode with SHA-256 as Mac algorithm. Yeah, and the other one, that's very old one. We don't do anymore like no encryption at all and MD5 is also bad. But these don't look like the things I printed out like five minutes ago because, well, OpenSSL has a different naming standard. So, the first one is the same as that one and that also maps to that one and this is a new one for TLS 1.3. So, oh, I'm in time almost. A handshake. If you do a connection to a server, you have forced to shake hands and agree on multiple things. So, if you do a connection like that, wrap the socket and during that operation, you do a handshake. So, you agree on multiple parameters. Parameters are amongst others, which version you talk, which ciphers you can talk and then a way to identify the server with the signature and certificates. And then, if you verify the server, you agree on a pre-master secret, that's the secret we use to derive more secrets for bulk encryption verification. And finally, once you have done all the handshakes, you need to verify that both sides have agreed on the same thing and no attacker has modified your ciphers to something badly. That's what you do in the handshake and again, we don't do like the old RSA-KE handshake with the bad one that's insecure. There are multiple blog posts where that's bad. We do the actual modern one using Diffie-Hellman. It looks like that. So, the client says, hey, hello server. Send me, okay, I can talk to the ciphers. I support this version. Here's a random number you need later and I want to talk actually to Palandinium, server name indicator. The server replies to, sure, hello. I selected that cipher. That's the version to talk to you. Here's another random number. Here's a chain of certificates you have to verify and here is a part of the secret. It's the Diffie-Hellman server parameters and also I used my private key to sign these parameters. The public key for that is in the chain and please do something with that. The client says, okay, sure. I generate my own Diffie-Hellman parameters. Verify that and then I tell the, okay, I change in my specs and now that box here, the first part that's encrypted, the rest is all in public. And the client sends the information back and now they have both agreed on the same Diffie-Hellman parameters, have a pre-master secret, encryption secret, verify the MAC, so the method authentication code of this whole handshake and we are done. And now you have done the handshake and the client can start to send actual parameters like HTTP request. If you use Python 3.8, I added something for debugging so it's actually a private method because we have no good IPA for that. You get the same information, so you see, okay, the client writes, client hello, server replies. So you can, a bit of debugging with that. So certificates, what we exchange, sorry, exchange here. So the server sends this four-and-a-half-kilobyte block of certificates. So what's the certificate and how do public key infrastructure actually work? So for that, I'm going to again do verification, verify the server, allow some stuff, verify the host name. And the host name is needed in two parts. The first is you need to send it in the beginning so the server knows with virtual hosting you do and also to verify the identity of the server. And a certificate is a, one certificate is a block of different information. So you have encoding, usually as in one, the different ones, most people know this big block of base 64 with begin and certificates. That's this PEM, there's also Pete's valve which is rather nasty, or you can have just a binary format that's either called server or dur. They come in pairs, so the server has a public and a private key and the client only gets to see the public part and the signature made by the private one and it contains in the payload the public key of the server, some metadata, some extensions and these certs are always signed by somebody who issues the certificates. You have like a notary chain, you have somebody you trust that signs something else and again and again. There are lots of different fields just to, there's also serial number, there's the subject, oops, the subject of the server, there's the issue of the issue of the server, there's how long the certificate valid, usually for, let's encrypt it three months and subject public key information is the public key of the certificate and a bunch of extensions which can be constraints, key usage, a subject alternative name, something with OCSP, and yeah, it's a lot. But the certificates also have different types depending on which parameters you set like the key usage and the extended key usage. We start always for trusting and verifying servers at the root CA or the so-called trust anchor and the root CA signs itself, so it trusts itself and that one you have installed in your browser or operating system or if you use, it requires ship with certify. And that one also signs intermediate cert because the private key of the root CA is very, very sensitive. You store in a way that nobody can get to the private key anymore and for data operations you sign other certs, you sign an intermediate cert, usually there are two of them in most cases and they actually sign at the end your entity or your server cert. So you have your entity cert that's mostly for this case for servers, you can also have certs for clients, you can have certs for email or to sign code and special cases, it's this chain. So the root CA signs the first intermediate, the other one signs the second one and then you have the server cert and in this handshake, you send the whole chain except the root and the client can then look up this chain, verify the chain and verify the trust anchor of that. So trust anchors, where are they stored? So on Linux and BSD, it's usually in the PKC11 model that is then dumped to a file and there are distributions and don't agree on the actual location, there's some of the locations where different distributions have them stored. On Windows and on MacOS it's a bit more complicated because you should not actually directly use the certificate itself but you should just ask the operating system to verify something for you which is something we can't use in Python yet. And how does the certificate look like? So I just dumped the one for palandinium.org three days ago. It's interesting because it's a certificate from a company called Wizard. So it's a domain subject issuer. So that's the issuer. So that's the issuer of, let's say, the great Manchester sales for some company and it's an iVolton Cloudflare. Ah, here we go. So it's from Cloudflare. We have the subject and it's had lots of subterranean alternative names. So we share for palandinium our certificates with some Casino websites from, yeah, Cloud Volcan Casino, Residents, lots. So, Cloudflare hosts websites a lot so they share the same IP address and the same server with a whole bunch of other ones. And, remember at BarupSocket, I always do supply the host name because it's not only important to validate that the chain is correct, you also have to validate that the end certificate actually supplies to your host name. If you don't verify the host name, then I can send you just any certificates and, yeah, you may not be sure that it's also made with the host and that's very complicated and Python we had like, now seven bugs, while updating the talk we had a new bug coming in which is not very critical but still so verifying that yourself is hard and since three, seven, I switched to OpenSSL, OpenSSL does this the right way and if there's a bug, it's not my fault. So, TEALS 103 were very, very quick. So, TEALS 103 is a new standard that came out last year. It killed lots of bad crypto. Horror story, this list is a whole list of horrible old crypto things. Used lots of shiny new crypto things. For example, it only uses this authenticated encryption algorithms anymore. Only them. It improved the protocol in lots of different ways. They learned a lot from past mistakes and past attacks on TEALS SSL. It's also much faster because what the client does, it does a one round trip handshake. So, the client makes an educated guess and says, well, you probably use that kind of Diffie-Hellman parameter, so I send you a key share. The server says, okay, I like that key share. And we're done. It's a whole handshake and important to know is the certificates you get from the server are encrypted. The certificate chain here is already encrypted. So, another one listening to your traffic can't see which sorts you're getting. There's still the server name indicator. The host name is still not encrypted. That's work in progress. And that's, if you use Python 3 with modern OpenSL 111, looks like that. So, if the guess is wrong, then the server can solve a client, okay, you guess wrong, please try again. And it's still two round trip handshake, but in most cases it's much faster than even TS1.2. And in special cases, you can also do something like a zero round trip. So, if you have already a ticket from the server, you can send a HTTP get request and the same time you do a handshake and it's like done. So, it's the whole request takes like one ping back and forth and that's it. So, quick summary. Most importantly, please, please, please use HTTPS everywhere. We have. Our thing is there are some plans to improve how we're working with OpenSL and TSL and Python. We're soon going to move everybody to OpenSL 111 even for 3.7 raises and you get TS1.3 for free because the other versions are reaching that time soon. I'm working again on the already started by Corey Benfield and we're working with Paul Kara from Python Cryptography and also have plans to replace Certified Package with something more sensible to close this talk with a quote from a famous Roman . So, it means should be destroyed. By the way, I'm concerning where I actually don't know how to translate that in English. Any Latin speakers here? Okay, I had Latin in school. Also, this work on HTTP3, UDP, quick is not actually TLS, it's something more interesting which builds on top of paths of TLS. I think Tom is in the audience. Tom is working on fun stuff, so soon to be announced. You want to learn more, I highly recommend especially the book on the right side of the screen. It's now in like three years old but still the best book doesn't cover TLS 103 but explains the whole public infrastructure very, very well. For general crypto things, that book is easy to understand and pretty modern. And several resources. SSL Labs is really good. If you want to optimize your TLS stack, it's TLSfastyet.com. It's from the same guy who makes heifer bean pond. Dig deeper into the handshake. There's Wolfheim made a interactive website where you can explore each bit and byte in the handshake and explain what it does. This talk is a bit older, like three years now from Filipino, Filippo, explains TLS 103 and lots of obstacles that took because they wanted to actually release 103 like four, five, six years ago. I think 2014 was the first try and they're running lots of issues and that's great. If you don't want to have public CA, it also has a public infrastructure server. And that's it right on time. Wow. Sorry for rushing that a bit but again, it's lots of materials and I already removed the horrible parts. If you have any questions, feel free to talk to me. I will be at the conference until Sunday. Thank you.


My folks, I'm Mike, and I hope you're well. As you can see, I'm surrounded by cardboard boxes, and that's because I'm still in the process of moving from one studio to another. I hope to reveal that new studio to you very, very soon. I tell you what, it doesn't get expensive setting up a studio, does it? So some freebies and some bargains are always welcome. I've got five amazing free plugins for you in today's video and also a bargain. If you follow the link in the description down below, you'll get 7% off of our sponsor for this video, DistroKid. Now let's dive in and take a look at the first of those plugins. The word legends is probably thrown around a little too freely sometimes, isn't it? Well, how about this? This is a new free piano library from Spitfire Audio. It works in their free labs player, and it's called Autograph Grand. Now the library is sampled from a Yamaha C6 piano based in Woodshed Recording Studios in Malibu, and it's been played by such legends as Paul Simon, Barbara Streisand, Lady Gaga, Metallica. The list goes on, but I do think that they qualify as legends. Now there's not a lot to say about this library, so let's just have a quick listen. Now as I say, not a lot of controls. We have a volume control here, and we have this, which is a dynamics control. This is actually quite interesting. I feel this is quite useful. If we put this all the way down, not only is it a little quieter, but it sounds really like a sort of a dampened piano as if you've used the damp pedal. Let's have a listen to this again. And if you want to get really sort of bright sounding, you can go to the other extreme. I mean if you automate that during the course of a song, it's going to feel really sort of dynamic as the control suggests, but it's really going to add a lot of sort of expression to the song. We have another couple of controls. This one's set to tightness at the moment, this big sort of dial here. We can click on that and switch it to reverb. Definitely I'm going to recommend this because I've got a feeling if later in the year I should do the best free plugins or libraries from 2023, I've got a feeling this may well be on there. Eon Arp, as its name suggests, is an arpeggiator plugin from Modalix. I hope I'm saying that correctly. Now this is really useful if for example you've got a favorite synthesizer plugin, but it doesn't have an arpeggiator built into it. You can use this to trigger another plugin. Okay, now it does have its own built-in synth. You can see that switched on here. Now I'm going to say up front, I don't think that that is its strength whatsoever. So it is useful that you can use this to trigger other plugins. Having said that, I'm actually going to be using its own built-in synth during this demo. I've got this preset loaded up here called Organish, but I'm also at the same time triggering another plugin and that is this one. This is Pigments from Arturia. Okay, so you'll be hearing both at the same time. Now you can see one of the preset patterns already loaded up here. They've cleverly made the word Eon out of a pattern. Let's just have a quick listen to what's happening as I play a few variations on a G major chord here. Right, really simple and straightforward to use. You've got your various steps you can see here of your patterns. As you would expect, you could sort of double click and add a new step in like so. You can move them around, you can change the length, etc, etc. I'm not going to do a tutorial on how you do that, but it's pretty intuitive all in all. One of the nice things you can do is store several patterns though and then trigger them with key switches. So you can see there's several patterns being created at the top here as I click at the top, but I can flick between them using key switches. So the first one is on C and then as I press D on the keyboard, we go to the second one, the third one, etc is on E. So you could change between them like so. It starts to get really creative like that. Follow the link in the description down below to get hold of this free arpeggiator. Now, analog obsession are a company who've decided to release all of their plugins for free. You are encouraged, however, to sign up for their Patreon, which I would encourage you to do. There is three plugins, which I think really stand out from the crowd, but there is actually a great variation of plugins available from them. Before we dive into that, talking about a great variation, there's a great variation of places you can release your music if you sign up with the sponsor of this video, DistroKid. One of the great things about DistroKid is its simplicity. For the simple price of $19.99 per year, you can upload an unlimited number of original tracks with no extra fees. Those tracks will be distributed on streaming platforms such as Spotify, TikTok, iTunes, Amazon Music and many more without you needing to open accounts at any of those places. And if $19.99 isn't cheap enough for you, follow the link in the description down below to get a further 7% off right away. I will also get a small commission at no extra cost to you. Thank you. Have a listen to analog obsession Room 041 Reverb plugin applied to this acoustic guitar. Now it sounds like it's in a fairly big space. We can adjust that mostly with the decay here. Now we're feeling like we're in a much bigger, smaller space. I'll turn that back up again and you'll also notice there's a stereo separation control here. I'm just going to play with that so you can hear the difference with all the way down. It's much more sort of in the center. You can hear it's much wider as we get that. So it's nice to have these features on a plugin like this, still sounding very wet at the moment. So I'll just turn that down a tad. I'll get to the preamp section in a moment, but first we'll just want to demonstrate to you that we do have a post EQ. Now what I did here was around about 780 Hz we can see there, I just did a bit of gain reduction to get rid of some of the mud there. I'll just turn it back up again so you can hear how it's sounding originally. That's where the mud is. That just helps to control the lower end of a reverb. And then I just added a little bit of sparkle on the high end here. So I just picked around about 14 kHz there and I just gave it a little bit of boost there. I'll exaggerate that for you now so you can hear what's going on. You can hear that there, it's too much now. So I had it down here. Now I've also got a high pass filter happening there, but you'll notice unusually compared to other reverb plugins, there's this drive control. This just adds some distortion. I've got it completely clean at the moment, but I'll sort of turn it up and I'm going to put the wet signal up pretty high so you can clearly hear what's happening here. Have a listen. So you can hear that the actual wet signal is really overdriven and distorted. They're probably not very suitable for an acoustic guitar, but it could be useful on all kinds of other instruments. So I definitely recommend you grab hold of this to have in your reverb arsenal. SSQ is an SSL style EQ plugin from Analog Obsession. It's a great start if you want to try and add a little bit of analog character whilst you're EQing in your productions. If you've never used anything like this before, let me give you a super quick overview sort of tutorial. If we look at these coloured buttons in the middle here, we've got some brown ones, some blue ones, some green ones and some red ones. They represent you adjusting different frequency ranges. The brown ones being the lowest, the red ones being the highest. How would you do that? Well let's say for example we'll work with the green ones here. Let's say for example we want to boost some frequencies. We will select the frequency here with this knob here. Let's go for about say five kilohertz here, fairly high and we're going to boost it by adjusting this gain knob here. We can either boost it or we can attenuate it, reduce it by turning it down from the center position. So let's see what happens. We'll listen to this female vocal and I'll increase it. You can hear those sort of high mids coming out there. Yeah. And you can increase the sort of range of effect of that by using the cue here. So a wider range of effect with the cue up high and much more narrow and precise with it down low. That's basically how you use these bands. But not all of them have three knobs like that. So for example in the low frequencies you don't have the cue there. What you're doing is just selecting a frequency and boosting like so. Same with the high frequencies. Now the other features that we have on here which I just want to mention quickly is the low and high pass filters which we control down here. And then finally I just want to point out that we also have, well not really finally a couple more things, we also have the ability to turn on oversampling by clicking on the word analog obsession here. So oversampling simplified is going to give you a better quality of processing although it can be sort of CPU heavy. So if you don't like that then you can have it switched off by clicking there. Now I just want to note that although we have input and output controls here you're not actually going to hear things get louder if you push this up this input control. It's gain compensated so we're going to get more of that sort of analog character by pushing it up but it's not actually going to get loud. Really really useful actually. That's a very quick overview of this SSL style EQ completely free. Follow the link in the description. Another idea borrowed from the analog world is the idea of a channel strip where you've got almost everything you need all in one spot okay to craft your sound. This one's particularly useful because it's got a DSR on it which is kind of handy for vocals but you could use it for just about anything. It's nice because it's got these components. We've got a preamp here where we can do some sort of EQing as well. We've got a DSR as I say useful for vocals. We also have an EQ which we can see in here. We have a compressor, a limiter and tape saturation as well. I mean these could be sort of five plugins couldn't they all by themselves. We can see the routing of them down here just so we know what's going to where. Well a couple of things I really like about this. First of all I love that it's got tape saturation in here. I do like that it has a wet and dry mix on the compressor and the limiter meaning we can basically do parallel compression limiting there which is always very handy without having to use sort of buses and things as well. Definitely worth checking this out if you want that kind of all in one solution that you get with the channel strip to craft your sound. Now I've got to get back to unpacking boxes and plugging in cables. If you'd like to find out a little bit more about why my new studio is so much better than my older one take a look at this video right here.


Hey Marine Sergeant Alex Smith here. The Marine Corps just announced the implementation plan for the newly established OCC field for cyberspace operations. Per the new Mar Admin, some Marines eligible for re-enlistment may also be eligible to lat-move into the new occupational field. The Marine Corps must be a coherent and fully integrated naval force. The cyberspace occupational field advances the Marine Corps' development of the MEPH Information Group, or MIG, and enables cyberspace operations across U.S. Cyber Command's Cyber Mission Force, the MAGTAF, and Supporting Elements, furthering naval integration and interoperability with the Joint Force. So if cyberspace computer skills or any of this sounds interesting to you, check out Mar Admin 164-18 for more information on the new MOS. And that's your Marine Minute.


card number 31, card number 31, among the missing. What is this about? Among the missing, giant stadia number 82. Not sure what that signifies. And then there's 70 in the background. Among the missing. James Hoffa. James Hoffa. Let's check this out. Let's check this out. Let's see what the text is like. So Robert Kennedy, that's legit, starts off the same. We got after the assassination. We got after the assassination. Has got to go. Yeah, same. Under Hoffa. Yeah, partner, same. What do we got? Locke became Lyndon. Locke became Lyndon Johnson. Yeah, ends with the same. Yeah, the text looks to be the same. Okay, so we're gonna read the original version. James Hoffa. Wow, wow, wow. Card number 31, Robert Kennedy had pursued teamster president Jimmy Hoffa since the 1950s when he served as chief counsel for the Senate McClennan Committee, which exposed the role of organized crime and labor unions. On becoming Attorney General in 1961, Robert turned up the heat, and over the next few years, his quote, Get Hoffa Squad, end quote, brought multiple indictments, indictments, indictments against teamster officials, indictments, indictments against teamster officials.  Bobby Kennedy has got to go, end quote. After the assassination, Hoffa told the reporter, quote, Bobby Kennedy is just another lawyer now, end quote. But despite his bravado, he was convicted of jury tampering in 1964 and sent to prison, where he remained until 1971, when President Nixon pardoned him. Wow. Under Hoffa, the Teamster Central States Pension Fund, SCSPF was managed by Chicago gangster Alan Dorman, who made low interest loans involving kickbacks to Las Vegas casino developers. Some CSPF loans were political. In 1963, 25 million was lent to the firm of Web and Nap financiers behind the Great Southwest Corporation, a shady Texas land deal backed by the Merchantson family and controlled by their lawyer, Bedford Wayne. With this loan, Web and Nap bought 625,000 shares of overvalued real estate stock from a company run by Texas Democratic Party Chairman Eugene Locke, in whose official offices the fateful Dallas motorcade route was planned. Oh my God. Locke became Lyndon Johnson's ambassador to Vietnam in 1967 to 68. Web and Nap went bankrupt in 1965. Hoffa vanished in 1975 and rumors persist that the mob killed him and buried his bodies in New Jersey's Meadowsland stadium. That's why. That's why. That's why we got the giant stadium. That's why we got the giant stadium. Among the missing touchdown is Hoffa buried right there? Is that what it is? Do I have my stadium at the right place in New Jersey? Is that what we got? Is that where they play? New Jersey's Meadowsland stadium? Is that it? Wow.


What's going on everyone? It's Sam here with late in sports cards. We've been cosmically pristine. Six box tops baseball mix number one random team style. Here's a look again at your random results. As always, you can find those on the website under the results tab as well as the link that's in chat. So good luck everybody. Yes, yes, other Shane W, other Shane, other Shane. What's overrated player in baseball right there?   Nobody would know who he is. All right, we'll start with pristine. We will go into last year's cosmic and we'll finish with this year's cosmic. Ooh, hello. Hello, we're back department. I'd like to file a claim. Trevor Hoffman, gold Raleigh fingers to 50. Nolan Gorman, fresh faces. Brian Serban, Austin Riley.  That is, let's go! Francisco Alvarez, three of five on the red. There we go, Mets. Hell yeah, man. Robert J, congrats, Robert. Robert, that's a banger, dude. Hell yeah. Look at that mag. That's a super short print to begin with and then it's a red. Got Paul Goldschmidt going, going, going. That is awesome, dude. That is a big time hit right there. Judge and Kersh. Robert was in, he was in chat earlier too. That's that Robert J, I believe. Gunner Rookie, JJ Bledet, fresh faces. Seaver Purple, Corey Kluber. Red Sock Legend, Corey Kluber, it's 99. Are they live yet? No. Bots. Morrell, going, going, going. Sammy Sosa, Heman Senga, honestly. I mean, that's their future too. Max Freed for the Braves, Jersey Auto around the diamond. Gratid Lanza. Heavenly, Evan Lee. There's Osnap, Michael Harris. Thomas Purple, Corbin Carroll to 99. There you go, D-Bax. This is a good box of pristine, dude. A really good box of pristine right here. Trisha Casas, Sarrouki. Alcantra, Aaron Judge. In-case cards now. Face, Cal Mitchell, Sandy Alcantra. Pirates and Marlins. Got a blue, Kerry Carpenter. Kerry Bonds to 75. Jolly Votto on the Osnap auto. Nice one there, congrats. Reds, solid one for sure. You see the hit earlier, Robert? There's a gold, Alex Bregman, 15 of 50. How about a gold, Adley Rushman, 19 of 50. Going to the Orioles. Nice one there, Baltimore. So we had a numbered Carroll and a numbered Rushman in this, that one box. Very good, solid box. And the huge Alvarez. Robert, Robert, are you behind? I might be behind. Oscar Gonzalez, Willie McCovey. Here's some Rodriguez. Hunter Anderson, Rookie. And Adley Rushman. K-Line, Blue Jeff McNeil for the Mets, 270 pot. Going, going, going. Gladdy Jr. Yeah, no, that's a good point, Vaughn. Gold, Corbin Burns. Let's go into them. Brew, Crude, 50. Tosses, Rookie. Ian Hatt, Bobby Whit Jr. Fresh Faces. Andre Kirk and William Contreras. Aaron Judge, going, going, going. Rapini, Purple, Blyamadris to 99 for the Astros. Sammy Sosa, picked one here. That is a JD Martinez and Jose Berrios for the Blue Jays, Jersey on. This one there, Toronto. Bellinger, Couch. Salvi, Osnap. J-Rod. Buster Posey and Francisco Alvarez, Rookie in Cased Cards. Is Matthew Libertor to 75 for the Cardinals. Orange, Brian Veo, 5 of 25 for the Red Sox. Gabriel Moreno, so this card is going to go to the Diamondbacks. It's on the checklist as a Diamondback. It does say Blue Jays on the back. Soft, Sean Tag, that one, but that is a Arizona Diamondbacks card. Auto and a Fresh Faces Auto of George Kirby, going to the Mariners. That's on that, Mariners. Nick with two in number three. Vaughn with a spot in Cosmic. Glenn with six Cosmic Chromes to rip on YouTube. That'll be fun. We are down to five to go on number three, everybody. Five to go. Let's get that filled up. 20 to go on the next one. That would be number four. I got 20 to go. I'll drop you a link to that as well. You want to get into the last break instead. All right, 22 Cosmic. Two boxes over this. You got it, Robert. No problem, buddy. Yeah, it's a big card, man. It's a big Alvarez. Those let's goes are really hard to hit in general. And then to get one that's numbered is even crazier. Seager, Ben and Tendi. Matt Olson. Chris Sale. Chapman, Cedric Mullins. On the Nucleus. John Durand. Blue JP Crawford to 99. Brian Hayes. Yeah, the Supernovas and the Youth Invasion. Those are the two short prints in 2022 Cosmic. Let's see one of those for sure would be cool. We got a gold Matt Olson to 50. Nice one there, 41 to 50. For the Braves. They go bravos. Got one more of these mixers after. Robbie Ray Refractor. Then we've got a full case of this year's Cosmic, 23 Cosmic coming up in just a minute. And then we are into football for the rest of the night, everybody. First two football breaks are sold out. Need to sell it the last three. Yachty. Eric Cosmer. Ronald Acunha. Launching to orbit is Mike Trout. Josh Low rookie. Spider-Man water bottle, baby. Even signed. Oh my God, the first time you saw that was the funniest thing in the world you've got. And now we have a Spider-Man water bottle. Forklesand and Kwan. And what are you? Three? Francisco Lindor, Cal Raleigh. Now it all comes full circle now. Rizzo Newtbar and Justin Verlander. Thanks to Frankie G. Frankie and Kwan.  There's you, Darvish. Hey, Frankie, it's Riz from the West Ham fan. My hand was standing because of Frankie. Yeah, everybody jacked all the jerks. CJ Abrams, Nucleus, I know. Those were, those went quick, dude. Hell, man. Washed the orbit, Bryce Harper.  CJ Abrams. Had to go for a bit because it worked. Fair, fair, Robert, fair. Well, glad you came back and saw that, man. That was a great hit, dude. Great hit. My favorite all-time product. Favorite all-time product as dumb as this sounds, dude, is going to be 2014 Top's Prime Football. I freaking love that product, dude. It was super cheap back in the day. It was like $60 for a hobby box. Got two jerseys, two autos. And 2014 was like the year I really started, really, really started collecting and like started my card, social media and started making deals with people and stuff. And Alex Bregman. That product just a special place in my heart, dude. 2014 Top's Prime. Love that product. I always bug rich to get a case of it so I could rip it. With rocket arms of Justin Verlander. Orange, Paul Goldschmidt auto. Eight of 25. Going to the Cardinals. Nice one there. Yeah, I'm going to keep bugging rich to try to get a case of it so I could rip it. Like one like Tuesday night or something. Like a throwback Tuesday. Gold, Dallas Keichel. Nice one there for the White Sox 250. 87 tops. Yeah, Carl for sure. Want an orbit? Wander. Or about this guy? No, but I heard it's not nice. Really? I mean they took down everything that had to do with him at the drop. Really? Yeah. Foz refractor rookie. Wow. Like I think it's probably a done deal. Muller. Coach Nucleus Chris Sale. Get one of those a box. This is 2022 Tops Chrome Cosmic. And we have 2023 Tops Chrome Cosmic after as well. These are Cosmic Cromes right here. Scherzer, Lindor, Correa. Autolophas. The Matter Colonel Sanders. Chicken. Another one. Oh God. Oh jeez. Mon Marquez. I'll take care of him for the... Oh yeah, he's all done. Kenzie Gore rookie. Whoa. There's Micah Stremski to 99. Yeah, Pristine's awesome dude. Pristine's really good too. I agree on that Robert. Definitely agree. Launch and orbit Machado. Brights and Stott rookie and base. Blake with a galaxy to rip on YouTube. Very nice. Again guys just five to go and number three. Five to go in Prismat draft picks. Number three. Let's get that sold out. Five to go. And five to go. I'm also going to drop you a link really quick to our NTPYT. It's down to 17 to go. Let's get that sold out as well. All teams on sale for that. 23 to Cosmic. Yanni Diaz, Nolan Jones. Hoskins, Turner, Schwarber. Corbin Burns. Yoshida. Wansha Orbit, Jordan Walker. Mike Yes. Hey Ricky Henderson's. There's Frank Thomas. Correa Lee. They got, hey he's got a couple. I think they have a McGuire auto in this actually. I think they got a McGuire. Rushman Jeter Downs. A Brandon Marsh. Nucleus. Thai France. He's got a launch and orbit auto I believe. Harris Riley. Apuña. Boba Chet. Trey Turner. Volpe Rookie as well. Yoshida. Salvi. Bady Alvarez Alonzo. Base. Jay Rut. Stars of the night. James Outman Rookie. Yeah all their guys are rookies right? Right. Yeah so all you gotta do is hit like a parallel of some sort. You're pretty much decent. Thomas Freed. Yeah I was looking at a checklist making combos earlier today. Devers Kossas. Cunia Refractor. Yohanio Suarez. Had his A. Logan Webb Refractor. For the Giants. Rod. Extra Threshold Talent. Vargas. Jeremy Pena. Rushman Whit. Riley Greene. Do a dice roll for these. One, two, left, three, four, middle, five, six. Right. Go for the rest of the break. It's gonna be a five. Gonna go to Bobby Whit in the middle. So that'll go to the Royals. Oh no, five is right. Five is right. My bad.  That'll go to the right. As they five will go to the right. That is a Tim Anderson. Two, one, nine, and nine. Down goes Anderson. Oh yeah it does. 10 there. We got an orange. Dominic Fletcher. Orange. Riley Greene. Extra Threshold Talent to 25. 23 of 25. Going to Tigers. Detroit. Nam QL. Congrats Nam Q. There you go buddy. Nam Q's always in on Bates. I love it dude. Here we go. Stars of the night. Jacob DeGrom. George Kirby. Trery is Logan O'Hoppy Rookie. Jordan Walker Rookie. Spencer Strada. Springer Bogar. Sati Soto. You Darvish. Darvish. Nucleus. JT Realmuto. Vientos. Refractor Rookie for the Mets. Redetner's Refractor. Andres Jimenez. Bobby Witt. Paraza Cabrera. Volpi. All for the inks. Vaughn Grissom Rookie. Yoshida. Juan Soto. Manny Machado. Michael Harris. Ooh let's go. Corbin Carroll Uranus. Let's go baby. Hell yeah. That's massive. Andrew M. Wow. That's big dude. Holy cow. That's wild. Planetary Pursuit Corbin Carroll Uranus. That is a huge Uranus. Massive Uranus dude. I can see the stars. I can see Venus. All I see is Uranus. Planetary Pursuit Uranus. One in 20,000. And now we got an orange behind it. Of Lenin Sosa to 25. By the way, Diamondbacks, Andrew M. Congrats Andrew. And Sean Murphy. Is that uh yeah that's getting standard right there. Different Andrew M. Yeah that's uh that's uh pretty massive card right there dude. Pretty massive card. Guerrero Vachette. Yeah Matt hit the Wilbenson. Launch and Orbit. Rapidevers Cal Raleigh. That's a insane Uranus right there. Launch and Orbit. Shohei Otani. Francisco Alvarez. Jorge Polanco. Yellow Uranus is awesome. Josh Bell. Nucleus. Seager and Young. Christopher Morel. Harper, Judge, Betz. JT Real Muto. Wow good lord. There's Wander and Tyler Freeman.  We're all like five years old jokes aside. That's a massive card. That's a big Uranus. Taylor Ward. That's their Cortez to 75. Green Space Dust. Gotta be dude. Joey Meneses. I did. It's guy out of here man. All right we've got George Kirby. Gabriel Moreno. Joey Vado. Alex Bregman. At a Orange Goldschmidt. Jose Berrios. And Max Freed. Had a Orange Riley Green extra terrestrial talent. Let's go Francisco Alvarez. Red to five. Your Uranus of course. We gotta go for days here boys. Oh man get them all out now. Yeah that's fun. Nice one there. Out of two for the break guys. Thanks again for the fill. Up next is number two.