Time here from Lawrence Systems and we're going to talk about HAProxy, PF Sense, the ACME protocol lets encrypt So there's a lot to talk about here It's gonna be a little bit longer of a video. If you want to learn more about me and my company head over to LawrenceSystems.com There's a higher spot up at the top. If you want to support the channel on other ways There's affiliate links down below for deals and products and services that we talked about on this channel and This has been a popular requested subject and it's actually a pretty awesome feature built into PF Sense. Now HAProxy if you haven't heard of it is very very diverse. We're going to talk about a specific use case of HAProxy and which is SSL, TLS, offloading mode and working as a reverse proxy because a lot of people get sick of those You know self-signed certificates and the click-throughs and things like that but not all devices have easy ways to get certificates installed and Some devices may not have ways behind your server to get the certificate installed at all Therefore one things you can do is put HAProxy in front of it combined with let's encrypt search and have automatic free renewing certificates While also having security for the outside of the network now Let's talk about the layout real quick here and a couple things to get out of the way One this is running on a net gate PF Sense SG 1100. Yes, this tiny little box So we're going from the internet to the SG 1100 We are going to be setting up my NAS right here Which has a self-signed cert which is running free NAS and it's called Purple NAS sync thing also running a self-signed cert Now both of these are HTTPS and to make the demo diverse I set up a couple other web servers that are not running any type of certification or encryption So we have a couple jails set up inside of free NAS here One's called as command and one's called Nova prospect and both of these are just running port 80 No, HTTPS. No SSL TLS. No type of cert of it certificate But what that means so I can get this out of the way is that you'll be able to see The traffic if you were inside the network. So all these are on the same flat network. This is really boring setup I had configured at my house just for this demo and You're able to see traffic on the inside here But all the traffic that gets out here will be encrypted And this is a popular use case for this not only because of the certificate problem But let's talk about real quick. There are some jails in free NAS that have this problem. They don't come currently With their plugins next cloud being one of them set up for SSL or TLS So if you were to build a SSS or TLS jail and this is part of one of the examples I just didn't feel like setting it up at home Um You could load next cloud here now granted internal of your network would not be encrypted But once it gets outside, you'd have a self signed or not self signed but a proper certificate from let's encrypt Issued here. So the TLS encryption is happening here and there's no encryption on the local network So yes, someone can sniff the local traffic here It's a self sign search. So at least it's encrypted but it is self signed And we'll be addressing that when we set up the HA proxy So you'll notice there's an option for HA proxy because it can actually act as a proxy for fully signed Certificates and do offloading. There's a lot more features than I won't go into complete depth on here But it can handle it But one of the things we're going to be doing is because these certs are self signed We're going to be telling you to ignore those self signed certs and I will comment real quickly This is impressive that the SG 1100 handled this as well as it does But if you want to scale up and you want to do this in production With high volume, you're going to need a faster box HA proxy Will do wonderful for the all the testing we're doing right here on an SG 1100 in its small footprint, but I see if you're putting this in production You're going to need a Faster heart piece of hardware in order to do the offloading because well It does take a little bit of processing power and memory to start running a more elaborate setup Now it does do I will note as well load balancing, but we're not doing any of the load balancing today That's going to be a little bit more of an advanced video Maybe I'll do that later depending on how much demand there is for it, but that's more into the corporate side The other thing I'll note is yes, you will be able to see my public ip address at home for this setup Someone always likes to know when I've Accidentally so to speak leaked that out, but not a big deal This is designed to show you all of this matter of fact one of the things we're going to start with is Right here in digital ocean We have this domain we use called the detroit yodelingcompany.com Well, just detroit yodelingcompany.com and I have some records set up and these records right here Are the a records we need to get lets and crypt working And we're going to start there and show how acme works inside a pf sense the automatic certificate management engine How it gets certificates, but it does start with before you can even think about certificates having your proper a records for validation now I like digital ocean. They have a really solid platform By the way, there's an affiliate link down below It is much appreciated if you want to sign up that you use my affiliate link It does give me a few extra they don't give me money. They just give me Credits to use for hosting projects and things like that. So I don't have to pay money So it's kind of like money. Anyway, it's just making sure i'm clear on the disclosure here So this is my public ip address and I need these a records pointing. So all of these domains work But if you're doing this and you don't really want things publicly exposed You don't necessarily have to We're going to be using dns domain validation and the dns validation with the api key and digital ocean makes this really really simple So let's look at that real quick. So here's all the different ones. I have in here purple nas home To Detroit Yodeling company calm sink thing to Detroit Yodeling company calm Ask and these are all dot Detroit Yodeling company calm right here all these certs And they have all been recently issued because it's been setting it up for this video And we're going to go ahead and add one more in the list here So test two is not in use right now So test two we can add and we'll just walk you through these are all set up But I'll walk you through how you add one. So start here go add and we'll just call it test two for youtube youtube demo count name homestead now Quickly here not a big deal to set this up. You can Decide to set these up when you add Name let's encrypt testing you can do the test and then you can move it over to The actual setup put your email address in your account key create new account key. This part's pretty straightforward. So if we Do this right here. It's going to pull a key and then we register with it This just registers an email address and there. Yes, this is a You know partially exposed private key and I'm not worried about it We're going to not save this particular one, but you do have to have an account with let's encrypt It's free to set up. You just do it right here. You don't got to do anything else and I can register it So here's the one I already have it registered right here. I just called it my house home cert key Really straightforward to do that that not a big deal Once you have that then you can start adding certificates And the final thing is making sure you turn on the cron entry so it automatically renews these when they Expire will get close to before expiration. It'll automatically kick off a job inside of pfSense that will renew them So now let's go ahead and add that youtube demo one youtube test to demo oops youtube demo status active private key no No worries here Mode enabled domain name. Let's go back over to digital ocean domain name is going to be Test to I like that they put a little copy button just makes nice and easy doing this So domain name we put that here How do you want to validate it? Well, this is awesome because they have so many different things in here Web root web fdp standalone hdp standalone tls dns manual This is cool too if you do a dns manual because what dns manual allows you to is actually just put in and I I didn't go through the whole demo on this but that's what this record is here This is what a dns manual looks like it puts a txt a text record in To your dns for the challenge response So there's a lot of different ways to verify it and there's a huge number of providers in here So we go through all the providers And you can see there's just a ton of different companies if you're a cloud flare user cloud dns If you're an azure user an amazon user really easy to put any of these in there And by the way, yes, you can run pfSense in azure or in amazon behind or in front of your infrastructure So everything behind it can get certificates and that is sometimes how this is used So if you were to spin this up and then you were hosting all your stuff in amazon or azure And you wanted this to handle the ha proxy ssa offloading This is still the same process you'd follow I happen to be doing it on an sg1100 at home But the concept is exactly the same So let's get over here to digital ocean now if Well one last note here if you just do like the local folder standalone It does require that you open some ports because it will do the standard type of verifications But I prefer the dns verification right here. So we're going to choose Digital ocean We have to put in my digital ocean api key this i'm going to blur out Uh, I will not have throw this out there in the public even though when i'm all done This is all getting destroyed But the digital ocean api key is pretty easy to create They've got plenty of work instructions on digital ocean But what these do is when you're using any of these other providers They're are going to give you a specific api key So it's like even though there's a lot of different options. They all kind of work the same sometimes It's api keys a secret But what this does is api key keeps this private Um In terms of don't put it out on the internet don't paste it somewhere public But you put this api key in there and it will reach out and Confirm that you are the owner so pf sense using the api key reaches out to the ocean reach out to So it's your krypton is going to sign the certificate here Based on that information based on the digital ocean api key. So i'm going to copy the key real quick and Save it in here, but i'll blur that out. All right It's saved but not issued Quick note. I did have to do this. Uh, you can't have spaces in there when it I hit save I had to take the space out for test 2 demo in case you're wondering what the difference is between the way It's saved and what you've seen it now all's we have to do is issue renew So currently you can see the last renew date for these and we're going to go ahead and issue renew this one And it takes a minute It'll spin and it'll do the certificate renewal for the test 2 demo Now once it's all done It does take a minute you get this right here and it just lets you know that the whole key is installed And it's all set up configured inside of here in the acme service So we can go back over here services acme certificates And now we have this one and it's issued today wednesday march 11th 2020 at 904, which is the right time So that is now done now The plugins and everything that are loaded loaded here. I'm going to show you real quick on the package manager I didn't mention this at the beginning, but make sure real quick. I did load This as a plugin in case you didn't see under services the Acme plugin. I did load that and the other one we did load is ha proxy So though that's the two we're using here now. Let's go over here to system Certificates or certificate manager under system And we can see all these certificates and where they're set up and where they're installed now by default web configuration default does have the service certificate of Self signed so that is from when you set up pf sense It'll have it and I do have another shirt. I have in here for my open vpn server But you may have noticed at the top it says home.detroityodelingcompany.com colon 10443 How does that work really simple you go over here and we go to advanced And instead of using the self signed cert, I'm using the home.detroityodelingcompany.com I can use any of the certs that are in here. There's even the test to demo if we wanted to change it what this allows us to do is Not deal with self signed certs on my System here. So I'm accessing it via the public internet home.detroityodelingcompany.com colon 10443 As you can see here one more thing that's important or pfSense will not let you log in Is the alternate name so home.detroityodelingcompany.com is the alternate name when you're setting this up for a self signed cert for The system itself it goes right here. I don't recommend opening your system To the general public like this. It's generally not a good idea I did this in the way my rules are and let's go over to my rules real quick So firewall rules you can see I have a rule right here at the bottom for lts remote web access And the source list is lts office This is filtered and actually this entire demo because this isn't you know, obviously live on the internet so to speak I have it all filtered. So it specifically only is allowing My office to communicate with it. So it's not open to the greater public so to speak Any of these connections matter of x we're going to be using 443 for ha proxy These are all not available to the greater public. They're all filtered So the only source is the public ip address of my offices is allowed to access this for this demo So if you were to go from let's say somewhere else to this ip address, it won't work So we have The firewall rules all set and ready. So i'm able to access things From my office here to my house for this particular demo But one other thing of note if you're doing this and you don't want public access You only want to have your own local servers for your own purposes and this is something we use as well You can set this up. So you have it as a reverse proxy for local things without any public access We're doing it with public access because I wanted to show the entire process for it But if you want you can delete these and if you're local it will automatically wrap them around provided you have net reflection Turned on inside of pf sense, which is pretty easy to do under system advanced Firewall and nat And that reflection mode is on pure net what this will do is allow the system to have no problems with um Working so when you put the public ip address in even as far as like, you know home That's just right. You're linked up in com But you're inside your own network with nothing open to the external world It goes. Oh, you must want that internally and you'll see that when we get to ha proxy What it's doing is reflecting back in because it goes. Oh, we can return this internally So just a note on if you didn't want to public expose thing It's not necessary As a matter of fact, you can build like your own if you had free nas dot your domain dot com And you just didn't want to expose it to the world Which is a really good idea don't publicly expose free nas Unless you really really want to but then you could just reflect it internally without any actual public exposure using ha proxy But then you could still have the not dealing with the self signed cert You'd have a properly signed lesson crypt cert. All right Moving on to the ha proxy part now now we get to the fun stuff But that's pretty much all the acme cert works. Like I said, it's easy enough to set your certificate here But how do we set it for all the servers? So let's go back over here to ha proxy and start working on that part of it So we have two pieces that need to be set up with ha proxy You have the front end and the back end and can only give me imply you actually got to set the back end first So here are those servers purple nas syncing ask man and nova prospect Back over here. Here they are again purple nas syncing nova prospect etc These have no encryption no encryption self sign search self sign cert. So how does that work? go back over here And the reason this one's grayed out and these ones are here is because when they're in use They are showing like this. So let's go back over to the back end and take a look at it So active nova prospects nova prospect address plus port so address 192 168 1.40 port 80 not encrypted. Don't check ssl And what certificate should we use? Well, we're going to tell it to use the certificate that matches this So when you're adding the certificates, we're going to add another one just to show you but it's pretty simple You would go here to the back end when you add a server You just choose whichever certificate you wanted to use who's the ca? Well, let's encrypt is going to be the ca we're using and here's all the options So when you add new servers really simple to do you choose the one that matches which one you want to use And to keep the naming simple we named each one the same Now there are more advanced ways you can actually reuse the same cert and create really specific rules So based on certain things it gives people different search based on Rules in h.a proxy we'll get into that But we're keeping this on the simple side just to get you started with it So when you create a back end and we'll look at this one here too So here's purple nas so active purple nas address plus port is the forward two options Which pretty straightforward, but you can do you know different ways to do it like I said Here's the server address port 443 And this is left unchecked because it has a self-signed cert We don't want to checking the ssl cert because we was going to find it's invalid. We it's a self-signed cert So but we are saying talk to this in an encrypted fashion So when it talks up the purple nas I already have this set up and I have encryption So if we go and look at my free nas, which I'm logged into right here See it how invalid Organization LTS cert it's just a self-signed cert. I created when I turned on the encryption for this So that's why I get that error when you go to it and you get the self-signed for your connection The site is not secure because well I self-signed the cert So you don't that's why you'd want to checking go back over here to the back end the same thing with sync thing I have sync things set up Same exact thing sync thing happens to run on port a 384 and I turned on certificates With turned on tls ssl with sync thing, but it generates its own certificate It just does that automatically when you turn it on. I've got other reviews of it So the same answer we want yes to talk to this encrypted, but don't Check the cert because well it's invalid Then we go here and just to confirm once again. No ssl checks No encrypted ssl and we're talking on port 80 on these. So if I go to these there's Go all the way over here HTTP colon slash slash not secure no certificate as you can see Site settings nothing in there. So it works it works perfectly fine, but no certificate completely unencrypted normal traffic. So Back over to how this actually works. So once you have the back end all set up There's really not anything you have to do down here Pretty much you can get into like I said a million options for load balancing and everything else You want to put this in there? They've done an amazing job over at pfSense of building in every feature access control list and everything else So you can get really fine grained and create expressions and rules of what works. What can connect It has health checking in there. So you can actually constantly check the servers and use that health checking information to Define the system in different ways for how it does it for example, if you're load balancing different servers Just you can get notifications for mail level mail to who it sends information to Statistics for each one of the front ends etc. Etc. And if for some reason you found a parameter that wasn't In here, yes, you can actually pass through per server parameters for each one of these But for the most part we're going to leave all this at none. So when you Go in here, it's basic. It's just this server Don't leave all these at the fault. Don't need a health check method. It's not necessary for what we're doing here Um, not worrying about any of this Nope, unless you want to get email notifications per server pass you all these are just left empty. So it's really really basic setup to get Get you started on this Now the front end I made it a little bit more complicated because I have these all set up So what we did here and we're going to add one more to show you what it looks like I built the first piece of the front end is going to be the Azkaban Now what that means is we're going to tie it to the way on addresses a little support port 443 Check the SSL offloading because we're offloading SSL because this is handling it and what type of Offloading HTTP, HTTPS offloading just like it shows right here. So the client talks to HA proxy and then this Talks the server and this is an example of SSLTLS offloading It's like they have in green here where it says clear traffic That is clear traffic here, but ciphered encrypted traffic here And that's actually what's going on with this particular server So by default it grabs this Then we go down here And this is where we're going to skip over and ignore this part first because I want to show you how this works So the first one we added was the Azkaban. So I go over here And if we pull it You see what this is is open SSL client server name azkaban.detroit you're only coming down. That's the sni name We sent what's the host 69 14 6153 port 443 And then I just wanted to show the subject line. It pulls the subject and shows assert. What does that look like in action? We have a fully find valid certificate at azkaban to try to destroy your link coming to comp So completely working certificate right here and valet The next one is this one now We are both pulling exactly the same ip address But when we send the sni here of this in the browser nova prospect dot detroit your link coming dot com We yield a different search. So let's go ahead and change that. So if we go here nova pros nova prospect dot detroit your link coming dot com We see we get a different cert sent to us and What this does and now we'll go back over to ha proxy Is it goes through here and it says hey, how do we how do we get these going? so we get the Nova prospect when the host matches Nova prospect at detroit link dot com it says send this so it's going to go here host matches This is the sni sent so the the server name information That's sent by the browser and it says when this is sent and it matches this rule send this certificate Now there's two pieces to this first rule access control list nova prospect host matches nova prospect Link on com use back end. This is an important part condition name nova prospect use back end nova prospect So what these rules are doing is all saying when it matches this use this back end the defined back end over prospect Send it over there and the same thing with the next rule down It says sync thing that the host name matches sync thing that detroit your link company dot com So look at that one real quick do the same thing We'll put sync thing right here We pull sync thing dot detroit your link company dot com and we have the valid certificate there Now sync thing if you remember is on port 8384, but we're redirecting it to port 443 That's defined right here. It says no matter which one of these rules we have always Send everything over port 443. So there's sync thing. There's the nova prospect. So the back end use sync thing Now the last little piece that's really important Is down here. We had to add nova prospect and sync thing as additional certificates That's important because you want to make sure these certificates are available So the front end needs to know what certificates need to be pulled based on the sni information And it's pretty simple because the default box is checked and we're going to add one more to walk you through the process one more time Also, we have to have a default certificate the as command one So if we don't send an sni information that matches any of these acl rules, what certificate are you going to send? Well, that's what that that's an important part too. So we go over here And we up here again So sync thing and nova prospect are both valid. So if we pull them But we put in gibberish Which doesn't match anything It pulls the as command dot detroit your link company dot com because that's the default service So if I can't match any of these other acl rules or conditions, just go ahead and send the default cert and if someone were to Go to this website and we'll just do it real quick And you head over here and we put https colon slash slash Not secure Proceed service unavailable because nothing matched. So it says I can't send you anything Because you don't match any of my acl rules. So even though the common name was this it still doesn't send me the actual This right here because it didn't match dsail rule So people who don't know are just probing at port 443 on this particular server If it was publicly accessible They would just get service unavailable because they didn't send an sni name So you could build some other catchall rule if you wanted to but for most part if they're hitting 443 You don't need to tell them a certificate or anything I mean tell them certificates so they can figure it out But it doesn't have to actually feel out fill at the back end because well nothing matches So One of the other things that doesn't match right now either and the next one we're going to add is Go back over here purple nas Does not pull it. So purple nas doesn't exist yet. It does exist Because we have it here. It's pointed there, but if we went there, it's not giving us the right certificate so what we want to do is publicly expose and back over here and we're going to go ahead and add one more to this So let's Walk back over real quick. Look at the back end And we see the purple nas back end already set up, but it has no front end tie in so let's tie it to a front end We're going to an edit Leave this the same up here at the top and let's add one more What's called purple? Make sure we got the right name hit the copy Typos are the killer copy and paste whenever you can Now when you're saying host starts with ends with matches regs host contains There's a ton of little things you could do for custom acl rules Matter of fact, you can Fine-grain this where if they hit certain sections of the website it can direct a different service Like I said, this has an amazing amount of options on it But we just want host matches because we want to say when the host SNI matches purple nas. Detroit loading company.com We're going to create this rule access control is purple Now it doesn't really matter. I can call this really anything But whatever I call it and it won't auto fill this. So if I go down here Use back end back ends going to be purple nas I have to make that whatever I put here match right here. That's the important part So it doesn't auto fill like I've already done sync thing before and it doesn't auto fill it So you just gotta once you get a copy and paste So purple so now we're saying first part of the acl rule And then the action from that rule. So when this rule is matched purple host matches purple nas. Detroit loading company.com use back end sync thing See below use back end back end purple nas awesome, but we're not done yet We don't have that certificate added. So we got to go down here and say Purple nas we set to make the certificate available. That's all we had to do and this box is checked It says add acl certificate for subject alternative names. So now this is just about The bottom part here and it's not always that you're doing this unless you are trying to do something with a different certificate name So, uh, but for what we're doing right here. Yes, this is exactly what we want. Let me hit save and apply changes All right, so we have the same public ip 443 And it's ss off loading and purple nas right now as we know has this little self sign certificate But now what we should be able to do Is go HTTPS to the purple nas And there we go. We have a proper self sign certificate Mail insert for purple nas going right here. So I can log into my free nas Now, what if you wanted to put it on another port? I'll show that real quick and We go here I'm going to add And if you've seen when my firewall rules, I have another port open 12443 purple nas HTTPS offloading no need an access control list just run through Basic options choose the certificate purple nas There's no additional certificates, but if there were you check this save apply And what we did was we just reuse the same back end and now we're pointing it at 12443 with the same one. So what happens if we do that? Oh, I did it wrong See what let's see what mistake I made on here. Okay. I see what I missed This is an important one. I missed this a couple times. You have to define a default back end right here Or it doesn't work. So define the default back end as purple nas. I did miss that going through it I think it's the most common one that I keep missing is that particular one And it works really simple But I I think that's the most mistake I made when I'm setting these up And sometimes I forget that it doesn't default to a back end You do have to choose a back end to make this work So kind of gives you an idea You can run these on multiple servers multiple addresses all at once We've bound these two here and they're going to work internally or externally and you don't have to have the way and rules Unless you're doing like I'm doing I'm at my office connecting these to my house to get these working So kind of gives you an idea of how the system works But pretty straightforward to do lots of rules lots of options There is so much more you can do with this like I said I'm touching the tip of the iceberg on terms of this a lot of people just want to do A basic self-sign certificate and this will definitely get you started for that or get rid of the self-sign certificate I should say and do a let's encrypt sign certificate for local servers But by doing it with dns It's one of my favorite ways do it because you don't need to expose any of your infrastructure You can keep all the ports closed You can have it validate just like I showed you with digital ocean or a long list of other places do this And of course if you are building infrastructure in the cloud There's the options like I mentioned beginning of doing this with both azure Or amazon and building some cloud infrastructure with pfSense in front of it I'm doing the same thing handling all the let's encrypts Uh certificates there and it's just a really nice service because as long as you have this set to auto renew It will work perfectly fine It also has and I will mention this write acme certificates to conf acme in various formats Used by other scripts or daemons integrate with severe manager if you wanted to go beyond this or not even run The ha proxy directly in here, but somehow pull those there is the ability with pfSense to I'll have it write out those certificates to grab them and pull them and put them elsewhere also when renewing the certificates Something you may have to run into here Is when they renew On they use to restart web server processes after certificates been renewed add enable command shell command You can tell it to restart services as well if you need to on that way if there's any Problem you would for example restart ha proxy. So we'll do this one real quick here Because until it rereads the certificate you don't have it So I want to mention that for some uh housekeeping that we're going to head and enable And add that we restart ha proxy after we do the renew This is an important thing because you'll go all of a sudden my certificates seem to be renewed But the services are still showing the old ones just restart the service Well, obviously the goal is to keep this as automated as possible But use the restart web server process I will mention this that if you are going to do this in production and you don't want to have a Phone call from everyone going hey all my certificates are showing expired You will have to set these up. So restart a local captive portal instance restart the GUI ha peer I'll restart the firewall shell command There's different ones you can do because you do want to renew the cert for example where it says home Detroit only coming at common like we showed in the beginning you may want to restart that as well If you're using this certificate because it's just not starting starting the whole pfSense system It's just restarting the specific web Web GUI here or the ha proxy one and I will might do a further video on this later because The next question comes up about one of the things it has in here Is the captive portals you can use these when you're building captive portals To use a certificate for those because sometimes you want a captive portal and if you're capturing username password on there You probably want that encrypted even if it is on the local side because you're using it for some validation Yes, you can use these same search for the captive portal may be a future video I do but the same answer about once you do that so it doesn't expire You do want to have that service to start so restart it so i'll leave um A link to if you obviously the pfSense documentation is excellent on this topic where it shows you even more options There's also a couple hangouts videos That from neck eight themselves that i'll link to as well that go through in some of the different topics in depth on on this So it's a it's a pretty fun thing to play with it's definitely an amazing feature built in the pfSense and it Really does get rid of all those problems You can run to with having all the self science certificates for things whether it's a local service You're running that you don't want exposed or one that you do want exposed But it's definitely a great way to handle all of this and keep it all nice in one place and makes life a little bit easier All right, thanks


Well, football was back at the Chet Saturday afternoon and the beefers were anxious to bounce back after their season opening loss in town Concordia Saint Paul sitting 1-0 after a shutout victory at week 1 and what a beautiful day it was for some football. Also the annual shrine game for BSU and they set the tone opening drive about 7 play 75 yards. Jordan Hine to Blair Van As for the 21 yard score two point conversion good 8 nothing bees. But this is an offensive big place and did they show it first? Andrew Likowski on the screen makes a couple guys missed and off to the races 76 yards for the score BSU up 17 zip early than just moments into the second quarter. Mikey Washington's turning. He breaks out the Jets on the outside all the way down the sidelines 68 yards of the house. Beavers by 24 but as good as the offense was the defense was swarming. And what about John Vogler? A pick six week one interception earlier in the game than this is third pick of the season takes it all the way back to the house. A second touchdown the year defense forces five INTs total all Bemidji State in this 154 17. Mikey Washington 118 yards two touchdowns are just five carries. Here they were after the game on the wind. The coaches put us in the right position to be successful. We just go out there and do it. But yeah, we scheme up really hard try to bounce back from Winona and evidently we did and got the win. It was very big that we got going this week because we have a stable of running backs who can't run the ball last week. I was sidelined a little bit because of a groin injury, so I didn't get too many reps last week.  So this week you know we we made it a mission to run the ball and assert our dominance. Our guys were a little frustrated after last week. And like I kept saying all week, we did a good job of playing and certainly played better. Couldn't ask much, you know, better start in the first half went down and scored. We had all three phases going and a good win overall. If you've enjoyed this segment of Lakeland news, please consider making a tax deductible contribution to Lakeland Public Television.


Here is a large piece of Bruce Timm art from 1999. It is blue pencil and ink on plain 11 by 17 paper. In this piece Bruce Timm is inking a Jack Kirby pencil drawing from 1977. You'll see on his signature. He's dated it. Jack Kirby slash Bruce Timm 1977 slash 1999. This is unusual for a Jack Kirby drawing in that it is not a comics page. It's just a standalone illustration featuring four Marvel Comics characters, including Spider-Man, which Jack Kirby very rarely drew. And his interpretation of Spider-Man was very unusual. The character in the lower left, if you don't recognize him, is Icarus from the Eternals. That was a series that Jack Kirby created in the mid-1970s at Marvel. I bought this, I think, in the year 2000 at the San Diego Comics Convention, which is the only time I ever visited the San Diego Comic-Con. I did not buy it directly from Bruce Timm, although I did meet Bruce Timm that year at the convention. Here are some close-up photographs where you can see the blue pencil underneath the ink work and even some hints of whiteout. At the time I'm uploading this video, this piece has been sold. I don't own it anymore. It's a great piece that I've very much enjoyed over the years.


This 2020 Ford F450 Crew Cab Long Box Dually XL with the FX4 package is 12057Z for stock number. This 2020 Ford F450 has the 6.7 liter Power Stroke diesel. This stroke has been fully safe and inspected by our service shop as a fresh oil and filter change. All the fluids have been checked and topped off. The truck has been gone through mechanically 100% and is 100% ready to go. A gate black is the color. We shoot all of our videos in 1080p, 60 frames per second. So if you have HD capabilities on your computer, tablet, smartphone, or television, turn them on right now because it is definitely your best way to check out the quality and condition of the truck before seeing it in person. If you like the video and want to subscribe to our YouTube channel because we do videos each and every day here at Summit in the lower right hand part of the screen is a subscribe button. Click that and then click the bell notifications and you'll get updates every day we do those videos of our amazing inventory here at Summit Auto. This one comes with the 19.5 inch polished aluminum rims and it has Continental Conta Hybrid. The tires, these are 225.70 are 19.5 and they have probably about 80 to 90% of the tread left on them. The frame and underbody is like new. Front fender is in excellent shape, I didn't see any dents or dings on there. Headlight lenses are nice and clear, it does have the chrome trimmed grille. This one has the STX appearance group. That's probably why you get the chrome trimmed grille there. Passenger side front fender looks good, the hood looks very good as well, I didn't see any dents or dings on there. Passenger side front fender, excellent condition, there's that STX logo. Passenger side rim, no scuffs or scrapes on there. As you go down this side of the truck, take note of how clean the body is, how reflective and mirror like that paint is. We take these HD videos so if you are far away or even if you're close by and just cannot make the trip down but you're still interested in purchasing the truck, you can see the truck here, the truck and have confidence in the vehicle that you're looking at before you even get here. So when you do get here, there's no surprises and you can make a smart buying decision from the comfort and comfort of your own home. Very clean down that side, I didn't see any dents or dings on the doors. This back rim is in excellent shape as well. Back tires have just as much tread as the front tires and the frame and underbody is very clean. It does have the camper package, even though I think all the 450s have that camper package with the anti-sway bar there. Frame and underbody is very, very clean. It has all the remaining factory exhaust so it hasn't been altered in any way and it comes with the nice chrome step bars. Do you get the FX4 off-road suspension package? Rear bumper is in nice shape as well, no dents or dings on that. Full tailing package which includes a receiver hitch four pin and seven pin wiring. Tailgate is in very nice condition too. Has a Ford factory spray and bed liner or tough bed. You get the fifth wheel and gooseneck prep package, the seven pin and four pin wiring in the bed as well. That tailgate shuts nice and solidly and as you go down the driver's side, just as clean as that passenger's side. No scuffs or scrapes on the dually tub. It does have the 3M tape on the bottom there to keep your dually tub from getting all rock chipped and this back rim is in excellent condition as well. Black agate's got just a little bit of metal sparkle to it when you get the light up to it close. Pretty cool color. Down the rest of the side of the truck looks really good. No dents or dings on the doors and it does come with the telescopic till mirrors. They're heated, built-in directional signals, they do telescope out like so. They do fold in manually. Inside the XL package gives you the gray cloth interior. There are no rips or tears on the seats. Very nice condition. Factory floor mats, power windows, power locks, power mirrors and auto headlamps. It does have tilt and telescopic steering wheel. We'll hop inside to take a look at the ignition and the radio and everything that this one has to offer. You can see that this one has 15,000, 978 miles, it does have a compass display. Instrument cluster is very nice and clean. Has cruise and information center controls on the left. Steering wheels in great condition and it has Bluetooth and audio controls on the right. This one does have the 10-speed automatic transmission, you can see the 1 of 10 there. So that's pretty cool. This vehicle has got to be running to check out the backup camera, but you do get AM FM radio as well as Sirius XM radio capabilities. This one might have it since it's so new of a vehicle, can't get signal inside the picture studio here. Anyways, sync 8-inch radio, AM FM Sirius, Bluetooth capabilities of course, get your mobile apps, you have your Ford Pass Connect and you have Apple CarPlay and Android auto capabilities where you can project your cell phone to the screen. So if you have a navigation system on your cell phone, project it to the screen and it's like you have Nav right on there such as Waze or Google Maps. So really cool radio, turned out 4-wheel drive, factory exhaust brake, climate controls are right there. Actually, internal lights on so we can see a little bit better, 110 volt 400 watt plug-in. Window tinting is pretty deep in here, passenger side, floor mat and seat are in excellent condition, no rips or tears. The headliner is in very nice condition as well, you do get six upfitter switches right there, map lights and we'll take a quick look at the back seats and then we'll check out under the hood, start it up, you do get the 40-20-40 split bench seating in the front.  They do fold up for extra storage and you get factory formats back here in the carpeting is very nice. Side curtain airbags, to get these seats down you just pull that strap and they go down like so. Child safety locks on the back doors and like I said we'll start it up, take a look under the hood, I'll show you that backup camera, starts right up, no check engine lights or anything like that, there's your backup camera you can zoom in over the hitch as well. I would personally like to thank you for checking out the video today and hopefully from this HD video you will have been able to tell just how clean this truck is all the way around, inside and out. Under the hood we have the 6.7 liter V8 power stroke diesel, engine bay is very clean, runs very smooth. Once again this truck has been fully safe and inspected by our service shop has a fresh oil and filter change, all the fluids have been checked and topped off and this truck is 100% ready to go. I would highly recommend this truck from a quality and condition standpoint, I didn't see a single ding on it, dent or scratch, very very nice and to see more pictures of this truck are one of rather 450 new and used cars, trucks, STVs, minivans, Wranglers, half tons, three quarter tons, one tons, F450s, you name it, we got it, go to our website right there at www.summitauto.com, full pictures and descriptions of every single vehicle from two locations all at www.summitauto.com, if you'd like to check out more HD videos you can go to www.youtube.com slash www.summitauto.com, remember to like, subscribe and share on this video and all the videos that you see there, click those bell notifications and get updated every time we do a video here at Summit Auto, in fact in a second you will see a link to subscribe to our YouTube channel in the upper left, a link to more F450 videos like this one in the upper right, a link to this vehicle on our website in the lower left and a link to one of our latest YouTube videos in the lower right, click those, check us out and we're super excited to be offering this Ultra Clean 2020 Ford F450 Crew Cab Long Box Dual Rear Wheel XL with the STX appearance package in a gate black, thanks again for checking out the video.


Welcome back to The Breakfast on Plus TV Africa. First major conversation for today. The Economist put out a report over the weekend, which, well, I think sometime last week actually, which was very, very shocking with some of the quotes and statements that were made in that report. And I'll share with you some of them. It says, when violence erupts, the government does nothing or cracks heads amongst indiscriminately. Nigeria's army is mighty on paper, but many of its soldiers are ghosts who exist only on the payroll and much of its equipment is stolen and sold to insurgents. That's one of the things that was a part of the quotes from the writer by the Economist that got a lot of Nigerians talking. It also says, the army is also stretched thin, having been deployed to all of Nigeria's states. The police are understaffed, demoralized and poorly trained. Many supplement rather, they are low pay by robbing the public and they have swan to protect. Another very, very shocking statement on that report. It says, money could have come from cutting wasteful spending by the armed forces on fighter jets, which are not of much use for guarding schools. Just examples of some of the things that were made, statements that were made in that report. And I hope that we will also get to share a little bit more of them with you as we go on with this conversation. This morning we're speaking with a security expert, Kabeer Adamu. Good morning. Thanks for joining us, Mr. Adamu. Good morning, sir. Okay. Of course, the army has responded to the Economist report and of course I would always love to share. It says, it's one of those deliberate falsehoods and noxious narratives orchestrated by a network of detractors and a coven of dark forces working hard to adorn rather the Nigerian army in an unfitting garb of infaming. It basically also said that the Economist is seemingly sponsored to defame President Mohamed Abu-Hari. We'll get to the response by the Nigerian army in a bit. But I want you to start with talking about your analysis of the Economist report. Okay. Thank you. It's a report that it's coming at a time when, unfortunately, the Nigerian military is challenged. Just like the report indicated, it is deployed increasingly actually in internal security matters when, frankly, that is not its primary responsibility. But remarkably, the military has, for some reason, best known to it, taken up that responsibility. And in fact, a lot of people in Nigeria see the military as perhaps the only institution, that fabric that has held the country together. As a result of this overwhelming challenges. In other words, there is a perception that if the military had not come in an attempt to address the internal security challenges, perhaps this fabric of the country would have collapsed by now because those institutions that have the responsibility for addressing those internal security challenges have not been able to so far. Now, the report did mention the police, too, as one of the institutions. And of course, it also talked about the inadequacies within the policing system. So yes, a lot of what the report said is reflective of the current situation in Nigeria. However, there were, I would say, missing gaps, efforts that have been made by this administration and previous administration to improve the circumstances within the military. And the police were not mentioned by that report. And I think the ideals of journalism places that responsibility that when you are doing such a report, when you are especially highlighting such inadequacies, deficiencies, you should also highlight some of the positive. I will quickly mention some of the efforts by the both this government and previous government to improve the military institutions. One of them is reforms aimed at improving human rights and the rules of engagement between these institutions and the public. So we know, for instance, the military has received extensive training both internally and with foreign partners in an attempt to improve this human rights record as well as the rules of engagement. We also know that some structural changes have occurred within these institutions where they've created departments for interaction between the military and those civil security departments. So you have a civil military coordination unit at the moment within the military. You also have instances where infractions by these military officers have been addressed by the military institution. Corruption in an example. We know of a case where a soldier was arrested in Bournemouth State for raping a minor and that soldier has been sentenced. We also know several other cases where several military officers have been caught mash up. So those efforts have been made and I think it would have been very fair for that report to acknowledge and take note of those efforts despite the deficiencies it highlighted. Okay, so let's also still stay with the deficiencies that's been put out in the particular report. Now, the question would be with all of the efforts like you have rightly mentioned that the reforms and the training put out and also with the fact that yes, we have seen the purchase of Tocano jets. We've also seen that again in the proposed 2022 budget, the defense is also going to take a lion's share of 1.4 trillion era. We're looking at about 7% or dare about. How come we still have bandits, Boko Haram and all of this, you know, on the increase? It feels like there's no match. There seem to be a mismatch with, you know, the funds, all of the efforts put together with, you know, tackling of the insorgences. The reality is that I think as a country, we need to differentiate between defense and security. I think as a result of our military legacy, a lot of Nigerians see defense as security when in reality defense is the component of security. And I'll quickly explain what I mean. If we have a challenge like we do have in terrorism in Banditry and name them several other challenges, what we do is we deploy personnel with guns and we think by deploying them, they will be able to address those challenges. No, security compass is more than that. Security is the whole gamut of protection that requires both this physical, you know, forceful deployment as well as the soft component that would address especially the root causes of those challenges. So yes, we're spending money on, you know, purchase of hardware, but are we addressing those root causes of security? In security rather. Unemployment as an example, and I'm happy yesterday the NLC and I think another Labor Union highlighted this topic. No matter how we attempt to address insecurity, if we do not tackle unemployment and poverty, then unfortunately it will be very difficult. Even if we buy, you know, 100 Super Ticandos, 100 helicopter gunboats and we employ even 2 million security personnel. If we do not address those root causes, then unfortunately the situation will continue. The other point is corruption. How much of this 2.4 billion, a trillion rather, would be dedicated to the actual, you know, issues that were highlighted in the budget? What percentage of that would actually go to corrupt hands? You are living witness to the fact that there was a time when a technocrat in this country suggested that for every 10 Kobo budgeted, 8 Kobo of that 10 goes to corrupt pockets. So it appears maybe only 20% of that money is actually going to what it was meant for. Now if that's the case, it means unfortunately we are pouring water into a basket and for us to see the effect of this 2.4 billion, we will have to block the leakages through which this money is going and to do that we need to introduce and strengthen the monitoring and evaluation mechanisms within the entire security architecture that this 2.4 billion would be going to. If we don't do that, then unfortunately it would be a waste of money. These monies would unfortunately not be deployed for the right direction. The other element is also the Sicilian oversight over these departments in government. The National Assembly as an example in under our current democratic disposition has that responsibility for oversight over the military. So as an example, I'm hoping that this report by the economist would serve as a basis for these relevant committees within the National Assembly to oversight and ask critical questions regarding some of the allegations within that report. Now those are the barriers between those institutions can live up. I can tell you unfortunately that the capacity and capability for that oversight at the moment it's not adequate. It can be improved upon. Not too long ago you saw what happened in the U.S. when there was a bombing in Afghanistan during the evacuation of some citizens and then they killed citizens. You saw how the Congress immediately set up a committee and of course the matter has been decided that the bombing was strong and I think compensation has been discussed. So that kind of oversight also reduces these types of deficiencies and it in other places within those military and it reduces the possibility of those leakages. I talked about 2.4 trillion would be a waste if we do not strengthen these two things that I mentioned unfortunately. Mr. Adamo, I'm sure you also know that we don't have that level of oversight with our national assembly that immediately puts to effect certain decisions. We would have committees set up that a lot of times don't really lead to anywhere but I want to take you back. From what you've said, the Economist report isn't wrong. It's mostly correct. The only challenge is that they didn't include some of the gains that the Canadian government has also achieved with its military. One of the things that you mentioned is corruption which later on you've also mentioned corruption as a major challenge. Even if you initially said that corruption is one of the things that they had also tried to fight with an armed soldier who was got marshalled for defiling a minor but the Economist is pointing out corruption and I believe at the topmost level and the fraud that exists with the amount of money and the millions of Naira that are budgeted and that are spent, that don't seem to be achieving much. I want you to speak once again on corruption and how much of a damage it is causing to the fight against insurgency and insecurity. A lot. There is a direct correlation between corruption and the deficiency of equipment and the morale of soldiers both at the battle front and in other spheres, the Charter of Operation by the military. I'll quickly explain what I mean. Equipment is usually bought as a function of the requirement so when you buy fighter jets you are hoping that those fighter jets will be used for specific purposes but then what are the challenges that you have for which you went out to buy those fighter jets? There has been this argument as an example that perhaps instead of fighter jets because of the nature of the both terrorism and insurgency and banditry that we have in the country what would have been relevant for us was helicopter gunships or other types of assets that have the possibility for deployment in this type of internal issues of insurrection. Jets unfortunately don't have the capability for close range of operations but yet that's what we went to buy. Now did we buy because we anticipated another type of security challenge or what stock does for instance for buying both the jets and then these types of helicopter gunships. Currently we have the Super Tucanos which are also very good for this type of close range and ideal operations internally like what we have. Now the other element that is also important like I said had a direct correlation Nigeria is one of the few countries that I know in the world where you have an ongoing war and I know this is debatable but I have an opinion that we do have a war ongoing in several fronts in Nigeria in all the definitions of a war good to the UN and others in what we have in Nigeria to qualify as that but yet our soldiers still move in soft skin vehicles yet our soldiers most times don't have the protective gear that they should have when they are in the battle front most of them frankly even where they have the balaclava, the balaclava cannot even stop the types of ammunition that is being shot you know at them and then one of the most ridiculous in that I'm quoting the chair of the senate committee of the army Ali Ndumi when he said he's been to the war front he's seen our soldiers without ammunition now I haven't seen that what I've seen is them having the AK-47 with one magazine now that one magazine has 30 bullets around in it meanwhile the enemy that is coming to attack them most times would have two magazines typed together with 60 rounds of ammunition and would also have several other cartridges for immediate deployment even when those 60 finish he would also have beyond this AK-47 and so all of these ramifications of the corruption unfortunately because corruption is not just financial it's also systemic and you know we can also talk about the conflict of interest where for instance when you are issued procurement something as basic as feeding instead of running a system that is transparent you issue it to your wife or to your girlfriend or to your husband or someone associated with your husband and at the end of the day that person does not supply the food that he or she is supposed to supply to the soldier in the war front what kind of systems are in place to check that and prevent it all of these unfortunately are happening within this institution that I mentioned but let's not forget these institutions are not alien to the Nigerian society whatever is happening in Nigerian society is most likely to be happening within them so let's not isolate them there are kind of reforms that this administration in particular has done I think has been far-reaching currently there are trials that are ongoing some of them have been concluded regarding a high ranking officer that has been found guilty of being suspected of engaging in corruption you recall the general that was moving money from Sukutu and those that were moving the money for him were arrested that trial if I'm right it's either concluded or it's ongoing a former national security advisor it's still been tried for several infractions to our procurement rules so there have been attempts like that but then my point and I think we would agree to that is that more needs to be done it's not by being reactive we need to be proactive by putting in place M&E monitoring and evaluation as well as audit functions the argument would be no you cannot because they are security agencies but other countries have done it you can institute an internal system for monitoring and evaluation that would be over-cited by the National Assembly so that there is transparency in all of these processes that is from recruitment down to even your operations in the field procurement is one great area I have talked about it in the past and I know that is one area that increasingly there is a lot of confusion from within those institutions so monitoring and evaluation audit functions would hopefully reduce this corruption let's also look at another issue that has been mentioned over time that some quarters have described the Nigerian military as constantly losing a professionalism the constant interference of military in civil affairs we already know that the police is actually created for the purpose of maintaining peace law in a civil society so how would you describe the particular act and what can be done so it's a two-way thing the military doesn't just wake up they are usually directed to interfere usually by presidential pronouncements something coming from the president it could be from the president himself or from any of his aides that have the responsibility now in other countries what happens is that the national assembly would have some say in that type of deployment you know there should be most times there is a criteria and I know the constitution provides for that sort of condition before the military is deployed but because of our military era it's become a norm and I can tell you I've been in circumstances where even governors have kind of supported the deployment of military in their state there are certain instances where the federal government would want to redeploy the military from certain states perhaps for expediency or because of certain requirements that have a reason but governors would not only object to it but they would come to Abuja insist if you know through discussions with several high ranking individuals including the president sometimes and say do not deploy those people out of our state if you do these are the consequences so again that political sort of climate as a result of the legacy of our military past has created this environment where the military is deployed the second point that I would like to emphasize which the report by economists has also spoken about is the inner decreases within the police itself now the police unfortunately has found itself in a situation some of it at the result of its own failures others at the result of failure by past governments and to an extent even the current government funding is an example inability to correct some of the structural decisions within the police has made the police ineffective and incapable of addressing those challenges and so the military has stepped in to cover that gap what is the catch-20 situation and the continued deployment of the military means the police will never be in that position where it would take up its responsibility so that I am an advocate and I know there is a lot of people who are also advocating that we need to draw a line at some point and redeploy the military to ask the police to take over its responsibility but to do that it means the police would have to be strengthened and I am happy to say this administration, the Bahrain administration has done a lot in an attempt to strengthen the police the police acts that have been passed not too long ago I think it was in 2019 then of course we have also seen the police trust fund which would have responsibility for improving training welfare and equipment within the police and then we have also seen recently especially after the end starts the reform process that has been instituted by the police so we are hoping that all of these things increase the capacity of the police to take over from the military but there has to be a conscious effort and like I said I think we need to draw a line and say okay from 2022 or 2023 this is the procedure for deploying the military and until then the police must take over the leadership for internal security deployment but let's not forget it's not just the responsibility of the police they are about at least 18 to 19 departments that have responsibility for civil security matters and each of these departments will have to be strengthened our quick list like as an example mention the customs and immigration border security is their responsibility and most of the weapons that we have in the country are coming in from across the border so if those departments are not strengthened then it means no matter how we attempt to strengthen the police there will still be those guards so it's not just looking at one institution we have to look at the entire security architecture as a whole and strengthen the capacity and capabilities of all the organizations that have responsibility for different well sounds really interesting your perspective but I want us to now talk about the response from the army you agree somehow some way to a large extent with the economists and what they've stated it even got to as saying that the ammunition and some of the arms are stolen and sold to the insurgents but I want you to look at the response from the army that basically use many words from the dictionary to say that the economists is sponsored to defame the president of the army do you see that as an army that understands the gravity of these accusations and knows what needs to be done in order for it to actually win the war against insurgency and also when an army sees these things and interprets it as efforts to defame the president what does that say to you again this is the legacy of a military sort of era these kind of responses are responses that a PR department in an institution will throw out but then the military institution is a well respected institution despite the I would say a great deal of nature of the allegation and I think the response should have been a bit more diplomatic with regards to for instance yes you can discredit the conclusion and like I said point out the fact that the economists did not take into consideration the huge reforms and the steps that have been taken but also shouldn't that be an opportunity for the army to point out these things instead of simply saying that this is meant to defame the president and why is that always the response to criticism like I said this is the legacy of our military era institutions of government quickly come up as it were see accusations or reports like this as an attempt to directly smear the person of the president as it were but let's remember that the institution of the president is there because of Nigeria so that institution is not over the roof Nigeria what has happened is now a well respected publication actually dragging the name of our country Nigeria to the moths now whether it is correct or not the responsibility is on the whole institution of government not just the military to point out whether that is correct I would have an example given the fact that the economy is an international organization and the ministry of foreign affairs would have had an impute in the response by the military the ministry of foreign affairs is better suited to speak that language of diplomacy and speak to the committee of nations in a manner that they will understand that response unfortunately I think is short on diplomacy it is very short in terms of responding to the core issues that were raised by the economy and I am hoping that there will be a follow of response that would be more diplomatic that would address those core issues and also more importantly put the responsibility on the economist to make sure that it correct some of the misconception that it has created by that report what we have ended up doing is confirming rather what the military has responded is confirming their accusation allegation that as an institution it is not accountable to the civilian population by simply condemning that publication without necessarily providing an alternative narrative I am not an expert in communication but I know that one of the things you are hoping to do when you are responding is to provide an alternative narrative you don't just discredit but provide an alternative narrative so that that drives the conversation and I think most Nigerian departments of government unfortunately do not realize this all we hear like you rightly said is the defensive position but provide the alternative narrative so that you discredit what was said and you still as it were the platform from wherever it is trying to smear you alright just seeing that they also have a podcast on the economist titled State of Emergency Nigeria I am going to definitely take a listen to that thank you very much for your time this morning have a very beautiful Monday ahead thank you and have a good week ahead too you too stay with us Dele Farotimi joins us next of course to discuss the state of the nation and I am sure that some of these things that we have just spoken about will come up in this conversation coming up next


All right, so Tara, thanks for asking this question that I think a lot of us have, which is, even after we do all this market research, can we still launch programs, products, services that we just feel like is the right thing to do? Or we could say that, you know, we might do it because we're really, really interested in it, number one, it could be from that angle or two is like, people didn't talk about it, but I believe it's gonna have a good uptake from the market if I launched this. So it could be one of two reasons that we're launching something not based on market research. And what I have to say is basically, just go with caution on that one, right? I mean, there's a reason we're doing market research because, well, there's many reasons we're doing that. One is that based on the data, we are probably gonna launch something that has better market uptake, meaning it's more likely given that at least several people have said this thing is important, it's probably gonna have more people buying it than something else. But number two, the reason we're doing market research is of course we make connections with people and those people that we've connected with are much more likely going to be, to have interest, you know, in whatever we end up selling or to expect a word about it, you know, many reasons. So, or at least those couple of reasons, but in terms of like selling something that's not based on market research, you know, again, these two angles, one is I wanna do it because I just, I like it. It's enjoyable for me to do it no matter what the market research says. And that angle, I do it through beta classes. So I have, once in a while, I'll carve out an hour on a Saturday, whatever day doesn't matter, but for me, it's like on a Saturday where it's like, I'm not, you know, it's not like an important workday for me. I'll just say, I'm gonna do it an hour free on XYZ topic. I'm just gonna see anyone shows up or of course I take registrations up to five people and I have an acuity appointment type. Anyway, so I just wanna practice talking about it. Like I'm passionate about this topic. I don't know if anyone's gonna get it. I don't know if anyone will be passionate about buying it afterwards, but I'm just gonna carve out some time. I'm gonna talk about it and get some people signed up, hopefully. And if not, at least I'll beg a few people to say, will you, and I'm not gonna beg hard, that's the thing. Like if I announce it, if I even email a few people and nobody even wants to join me for free conversation around this, I might create content around it. Like that's like the consolation prize is I love talking about this stuff. Nobody wants to join me for an hour to talk about. So I'll create some content around it and maybe I'll try it again in a few months. Maybe a few people wanna join me by that point and I'll see what their reaction is as I talk about the things. Are they lighting up? Oh my God, this is awesome. Or are they like, so I'll gauge it based on my beta class. Now the other thing that you mentioned, which is it's not that I wanna launch it because I love this. I just think that the market doesn't get it yet. And I think they'll really be into it if I launch it. That's called the Steve Jobs, the famous Steve Jobs, Henry Ford line. Henry Ford said, if I had asked, if I'd done market research, everyone would have said they want a faster horses. Right, like a horse testosterone. Is that what the product is gonna be in the market? Yes, or Steve Jobs, right? Steve Jobs is nobody knew they wanted an iPod, right? Nobody knew they wanted an iPod. Nobody knew they wanted a phone that had so many different features on it. Nobody knew that. I just had this gut sense that that's what the market wanted. And everyone uses that when they say, I'm gonna ignore market research. I'm just gonna do the Henry Ford Steve Jobs, that's it. Well, guess what? Henry Ford and Steve Jobs were extremely successful and wealthy to get to the point where they could like, I'm just gonna launch the car. Nobody's heard of a car. I'm gonna launch it because I think it's gonna do well. Well, Henry Ford could afford, excuse the brilliant pun there, to make those mistakes. And I'm sure Henry Ford probably did some beta testing. Didn't just like, I'm gonna create a factory to create the first ever car factory. I don't think that happened, I didn't study the history. Maybe some of you know the history about that. Steve Jobs, I'm sure Apple computer didn't just go, let's create a whole factory around creating iPods. I'm sure they did some market research, but it's just much more cool to hear the story of the cowboy or the kangaroo boy or whatever, right? It's much cooler to hear the story of the genius who downloaded some brilliant insight and created a whole factory and launched a product, a billion dollar product without asking anybody. It's a cool story. I don't think that's how it happens. So basically, I think no matter if it's your own passion or whether you just have this hunch about the market, it's better to go lightly and just try a beta class, see if anyone takes you up on it or beta group or whatever. So kind of go lightly and kind of go from there. So let me know if that's helpful and if you have any comments on any questions about it. Yeah, and Jason says they probably did a mini prototype let people play to get feedback before over investing. Yeah, absolutely. So, yeah.


Thanks for all sort of counts cover like button I don't know why we when you said that I got an animated thing in my mind that it's a doctor's office And there's the cough and the scream and then the door opened up and the doctor says to patients waiting. Sorry Today we got a video yes, yeah from nimeral nimble Polly, okay Him yes. Oh, I remember him. I love him. We just did the yeah the whole Chai why people of Chai. Yeah, this is actually South Indians according to Bollywood Like after this should be great a lot of people recommended this one. Yeah obvious Stuff I've heard obviously that that are infamous like stuff that Bollywood gets wrong right South industry Oh, yeah, this would be good stereotype I'm sure Padosons and there are a lot of people didn't like the South Indian character stereotype and Padoson, right Chennai express Which we haven't seen I just know a lot of people like there's a lot in there that are they're like Oh, this is what South Indians do and then they don't and so And I'm sure this won't cause any controversy. None whatsoever But it should be fun because his video formatting is very fun. So let's just get into this Say you're a well-meaning South Indian Did the thing again? Hold on. It's a weird weird setup Okay, here we go Say you're a well-meaning South Indian fellow walking into a movie I'm about to watch a movie like top gun maverick because you'll have taste and in the hallways You see this poster for a new Shahrukh Khan film called Chennai Express. Do you like Shahrukh Khan because you're Shahrukh Khan And you think, huh, let me watch this There's Chennai in it, right? You'll need to settle in and watch as your favorite Bollywood stars get every single thing wrong about where you're from And watch your language, your people And God forbid your food is going to connect cinematic cruelty on the people And once that decimation is over you lay on your back and you wonder was it just this or has it always been this way? Animation yeah whoever did your intro?  It's a south Indian snapchat filter You see what I mean? A film about south indians where the lead actors are from delhi I just thought you know south india and a bit A lot of things is tonally and factually For instance, this guy goes to a traditional madurai house out and the first two things he served are And palam kori, two hallmarks of Tamil cuisine. Sir. What all is there to eat? Carburetor, spaghetti, sushi, pasta, croissant, cow slurry Isn't this madurai idli shop? Sir, I'm a Tamil Zappad, sir Kids in this movie say things like With an accent straight out of google textless Because crime are not the inaccuracies I was married like Sunder is beautiful Meena, she's asking Sundereshwar why she should marry her Why should we compete? I'm because I'm an engineer for a great problem Anybody has tiger balm mantam? There are no characters in this movie. There are south indian starter packers Because she is with a wall full of rajinikanth Where she is writing rajinikanth somewhere He even credits her entire marriage to her Meenakshi and Meghi Choni, Prabhune Panei And Rajinikanth Tende Bhai That's true If she was Kate Winslet, the post of titanic would be very different If she breaks into rajinikanth dialogues in the middle of a restaurant Unironically Well, isn't that what all south indians do? What Meenakshi Sundereshwar thinks my life is like From my youtube lovelies, it's Sundereshwar here with another daily vlog about south indian life Let's go First thing we're gonna do is get dressed in a very south indian thing You got one dose, sir Then you have to tuck in at all times Hey guys, this is my house Have you lived in a mansion because that's just how it is One of the great news to share with you all Tonight is actually my first night And that is my very sexy wife waiting for me But do you know what I'm gonna do instead? Stunning Hey, you would think that last scene is us making fun of the movie But it happens I should prepare for this You better be joking It's fundamentally impossible at its core level Which south indian marries her kid off to an unemployed b-tech single degree graduate Come on Requiring the two degrees of potential green card of the US And a short list for the Bharat Pratna This movie is not a one-off thing It's a testament to a large history of Bollywood film makers being completely oblivious to south indian culture There are certain movies from different eras and have really crystallized this dumbassery Let's go back to 1968 Your grandfather was busy railing your grandson There it is Yeah South indians first look at a south indian character What better way to introduce audiences to south indian culture Than a perverted karnatic music teacher Who says things like First impression is the best impression And these guys took it very seriously What do you think? For some reason, all of these guys are just played by north indians It's like making a biopic about a dosa Dosa is being played by a man Look at the creative liberty here It's been 24 years since Parozen released So you would expect that Bollywood would have learnt from their mistakes Right? It's a deeply thought-provoking song where he talks about This song that makes lungi dance look like a masterpiece At least they use the real lungi It's not even a lungi, it's a white skirt And this is not a song, it's repression No Speaking of Agni But they remade this movie in 2012 and did not have this character Is this improvement? Are they turning over in few days? Maybe so blatantly ignorant Psych The producer said that the character was not included Because no one else could do justice to the character It's like remaking the godfather And replacing Marlon Let it be known good world They compared the godfather Arguably the greatest film of all time But probably Bollywood needs to change his name to Possibly be forgiven for being before the internet And before we are all as connected and as aware as we all are right now Right? Oh f**k off Welcome to the 2000s Here that we realise that Shahrukh Khan really loves cosplaying south indian Exhibit A What are you doing?  I let you study post Listening to Deepikaan's movie Feels like in a pokemon battle With her accent Look I am a simple guy We are stereotyping For example this song is called Kashmir to Kanyakumari Why it doesn't look like a showcase on Kerala Everything is the dance that's Kathakalee Those are elephants that you will lift off from any pooram Is this Republic Day? Somebody stole the Kerala segment from the Republic Day parade So you see this line It's called a border Oh he made a side view You know what let's start from the top This is a map Anyway so we were watching The lungi dance video and the lyrics Seemed a little familiar I know All south indians do this Go to disco and raise our lungi All we do 24-7 This is our main hatch Bro we are going to go to the club Let me just go get my lungi The only similarity Deepikaan's accent is very similar to another one that you have heard So are you telling me in 44 years Since Padosan released there has been literally no change How is this graph going up And not down And considering this is a time when pan-Indian films Like Aaravar and Vikram are becoming a thing And more and more people are referring to it As the Indian film industry Not just Bollywood and other regional movies Bollywood definitely needs to put some work Into how they represent south indians It's not that difficult all you need to do is More food than idli vada And more languages than madrasi And you're starting somewhere But a basic level of research is warranted Not piss off half a country They're rooting for you Bollywood What should I say Thank you so much for watching If you like this I will be making more of these Because it's fun If you want you can click the like button Again no pressure You can also subscribe Do that I do too Makes it very funny and engaging We've heard these Stuff all the time When we watched padocin Even though we love that movie But we were not aware of how bad The stereotype is We heard the south indians that were just not happy Understandably Because India Even though it's a smaller country than the United States It's basically 29 different countries As opposed to Much much much much much much longer history Yeah As opposed to like the United States Which obviously we have 50 states and we're very very large But we all for the most part Speak English Spanish is obviously the other one So there might be some And it kind of feels the same Pretty much everywhere you go And we also don't have different film industries Right we don't have different film industries So we don't have completely different I mean we do have different cultures It's very different in the south That it is in the northeast and it is in the west But it's not as Completely different And he was right when he mentioned The fact that we live in a society now That's been brought together and so many films Like RRR and Vikram there's just been It's now by so many accounts Considered the Indian film industry There's kind of no excuse to not properly Represent unless you are intentionally spoofing Yeah obviously Om Shantyom is intentionally A spoof They were making it a ridiculous Overhyped This is exaggerated Rajnikant Every self-actor is exaggerated Rajnikant And there's obviously going to be stuff That we can never pick up on In terms of the way they're speaking The dialogue they're using We read subtitles And that kind of stuff But it's probably similar to like How a lot of For a long time people In India felt Indian representation in movies here Was obviously there The Apu character from The Simpsons Is probably the most notorious Of the racist kind of stereotype They're all Indian's own convenience stores They speak like this But part of that is Example we watched I showed in Drani the Bangles music video For the song Walk Like an Egyptian Which nowadays But back then In the 1980s The frame of reference It wasn't intended to mock It was actually complimentary And it was born out of ignorance Of what our context For Egyptian was hieroglyphics Drawn and particular Stance you see in those pictures And what's been represented in movies So a huge amount of that Is just born out of the ignorance And he's absolutely right There's kind of no excuse for that Anymore in terms of How available and accessible All parts of the world are now And there's such a high level Of exposure to Being sensitive to one another And being diverse that You really owe it Unless you're farcical and over the top You gotta get it right We've consistently over the four years Heard and seen how often How often the South Is treated like the ugly stepsister When it comes to the Entertainment world looking at India And assuming it's just Bollywood And it's just Hindi But I'm also I'm almost positive there's You could probably make a video Even About the reverse of North Indian representation Bengali representation From the South I'm representing I'm sure it's just heightened because For a long time people just thought Indian cinema was Bollywood And since everybody only sees Bollywood This is how they're seeing South Indians In their movies It's true and stereotypes are almost always born from ignorance And then they're perpetuated through hatred The ignorance part You can't help until you learn Example Andrani did think that most girls In California Spoke like She talked like this She was genuinely surprised when she got here And saw that that is just A figment of people's imagination Doesn't exist It's just a valley girl stereotype People actually don't speak like that There are some The majority of people who speak Will not speak like that Thankfully That was very funny, I love his form He's a very funny guy, go subscribe to his channel And let us know what other videos his We can react to down below