Hi everyone, Sean with jaspyscasebreaks.com here doing 2020-2021 Panini Domres Optic Fast Break Basketball 4 box break Two random teams each number five. This is the last five boxes from a 20 box case Or sorry last four boxes. This is a fifth four box break from a 20 box case So this is our last one as of now I don't think we got any more optic fast break, but I'll double check for later on 15 spots and we get two random teams at NBA and all cards shit So there you go This is our list of customers. Thanks to everybody for getting in from Eddie G down to Anthony Liska and the teams from the Hawks down to the Wizards dice roll to randomize both lists and pair them up Four and one five times. Good luck everybody. Oh I got a double up this list. Sorry. Let me reset this because I need to give two spots So we'll still use the dice roll Which is five, but I need to double up the list. That was my bad So here is that list once and Twice so you can see Anthony Liska last spot mojo one time and two times now We're gonna do that five times on the randomizer fifth and final time from Matthew Shira down to Peter Fabiano and five times on the teams Fifth and final time from Utah Jazz down to the Atlanta Hawks So five times on the teams Five times on the customers and five times on the dice There you go So let's make this large enough for everybody to see trade window is open Matthew Shura with the jazz Nick Stober Clippers Matthew Shura with the Wizards Anthony Liska Thunder Nick Stober Rockets Eddie G Pacers Matthew Shura Blazers and Bucks Brian Heyman Lakers Darren Porter Cavaliers Carlos Aguirre with the Mavericks Darren Porter magic Peter Fabiano Spurs Sean Maddock Hornets Nick Stober Warriors Darren Porter Raptors Brian Heyman Pelicans Darren Porter Celtics and Sons Sean Maddock bulls Carlos Aguirre Grizzlies Darren Porter Nets Anthony Liska 76ers Eddie G Eddie G with the Nuggets Matthew Shura with the Knicks Darren Porter Kings heat Matthew Shura pistons Nick Stober Timberwolves and Peter Fabiano with the Hawks So trade window like I said is open This is your chance to trade for whatever team you potentially want Give it a minute for you guys for anybody in on this break Okay, it doesn't look like there's much talk about trades so give another 15 seconds if nothing then we'll go ahead and print it and rip Okay trade window going once trade want to go in twice trade one going three times trade window closed So here you go. Here are the four boxes for you You can see the X is on there just designated. These are all from the same case that the other Random team breaks were all done from Um, so that's the cool part will that's why that's actually a big one Um all non numbered cards which color blasts a non numbered card will are randomized as one lot at the end of the break So let's say that we hit somehow we hit two color blasts in that one case or the the half of that second half that case They would all be randomized and they both happen to be like a random number block teams in that one They would both be randomized together with all other non numbered cards for those 13 teams to one person in the in that random number block that's why like Stuff like that obsidian and everything else as well with like any non numbered cards Um, but like refractors and whatever a big time because All of non numbered cards go to one person Yeah Yeah, I think it says that it should say that in the random number block all non numbered cards are randomized to one person In the random number block as a group If it says otherwise then obviously we go by whatever the break says, but we've been doing it as all non numbered cards So unless that's changed Oh So black in this is the one of one Oh, they don't have the gold vinyl in this Uh optic fast break. I haven't done any of this yet. Let's see. Obviously just came out Wednesday, but I pulled a luka black velocity out of hobby for Um, got back rated and got it back today at psa 10. That's incredible I think black velocity might be like my favorite Parallel obviously, I mean there's lower numbered parallels, but that black velocity is so cool But I haven't seen any of the uh the discos from this this year yet in person my first look at it, so Excited to see what we can do with these last four boxes from this case So one autograph per box Uh, I'm gonna say how many parallels there are, right? They still have options for I think regular silvers in this too, right? Or they all just go parallels You can still get the rated rookie base in here So one box left. We'll start with this last box here. I'm still trying to process everything that changed in here Yeah, it's weird Well, I mean without the uh without the rug too I'm sure it'll be a ton different by the time I get back in here Next Wednesday at night Like I'm staring at our jazzy logo, which is pretty cool Good luck us You got joshikogi for the timber wolves and nick Stover Uh, you had devon vossel there for the spurs and peter fabiano and skyler mays there for the hawks and peter fabiano Tyrese maxi for the 76ers anthony lisca Remember all card ship terry rose ear to 50 for the charlotte hornets shawmatic tyrell terry for the mavericks uh Onyeka a kong woo for the hawks And kelvin johnson for the spurs peter fabiano sovereign lee for the pistons Lebron lakers that is brian hayman isaeus stewart for the pistons Uh, matthew shura And obi toppen that is red to 85 new york nicks very nice matthew shura 84 out of 85 patin pritchard for the celtix and darin porter and lebron james again for the lakers And brian hayman You got darin fox purple little team color match on that one to 95 for the kings and darin porter tyler bay for the mavericks And our first auto is vernon carry jr fast brake signatures for the hornets That is shawmatic nom numbered lucadon should stargazing for the mavericks carlos aguirre and anthony edwards ant-man for the timberwolves nick stover Onyeka a kong woo again for the hawks that is peter fabiano cashew stanley for the pacers Chris middleton for the bucks and matthew shura and rj hampton for the nuggets eddie ge josh richardson for the mavericks carlos aguirre and theo maladon for the thunder Lebron james again lakers brian hayman and denny abdija wizards Gordon hayward purple for the hornets to 95 shawmatic and jameis ramsey for the kings You got joe engels hollows, so there are regular hollows in this matthew shura and the jazz and city bay for the pistons um matthew shura cj mccollom for the trailblazers matthew shura malachi flin for the raptors And patrick liam's for the bowls and shawmatic My abilities right now You got malachi flin autograph this time for the raptors that is darren porter There you go porter and jamerick for the grizzlies carlos aguirre poku for the thunder lexipokusevsky and stef curry for the warriors nick stover coi lennard for the clippers nick stover and udoka azabuki for the jazz james wiseman for the warriors and nick stover And coi lennard again blew this time to 50 for the clippers nick stover grant riller for the hornets And yannis elite dominator for the bucks matthew shura an angle quickly for the nicks and matthew shura And rudigo bear for the jazz matthew shura azabio tilman for the grizzlies and pj tucker for the hornet. Oh, sorry the Rockets mixed over jaylon smith for the suns and josh richardson red to 85 for the mavericks And carlos aguirre cj levy for the blazers And chris paul for the suns Derren porter and precious ashua for the heat derren porter Spencer dinway for the nets Derren porter and jordan warra for the bucks luka donchich lights out for the mavericks carlos aguirre and erinne smith for the Celtics You got another obi top and red this time same thing 83 out of 85 last one was 84 out of 85 So consecutive numbers there That's for matthew shura and the nicks robert woodard and the kings And tigries haliburton for the kings derren porter Tyrell terry dallas mavericks carlos aguirre and kenyon martin jr for the Rockets Yannis lights out for the bucks and matthew shura and zik naji for the nuggets lorry marketing for the bulls Sean maddock and vernon carry jr for the rock or sorry the Hornets Steph curry warriors nicks dober and killian haze for the pistons Bradley beal purple to 95 for the wizards matthew shura and elijah hughes for the jazz So two boxes two obi top and red parallels consecutive numbers 83 out of 85 and 84 out of 85 Not too bad Okay, we got two boxes left guys Off to a very nice start Montrez-Harrell for the lakers brian haiman tyrell terry for the mavericks Onyeka akangu for the hogs And joella mead purple to 95 for the 76ers anthony lisca sabon lee for the pistons And steve curry for the warriors nicks dober isaia steward for the pistons and matthew shura And devon vossel for the spurs peter faviano patin pritchard for the cel ticks. They're important Damian lillard for the blazers matthew shura and anthony edwards again for the timber wolf nicks dober Yeah, alex caruso for the lakers brian haiman the cashless damling for the pacers rj hampton for the nuggets And eddie yeath Derek rose for the pistons matthew shura theomaladon for the thunder And it's another hornet's auto, but it's kealeb martin this time Two rookies no lamello, uh, shawmatic and the hornets again denny abdija for the wizards And cashless winston blue for the wizards to 50 matthew shura james ramsey for the kings And lebron james for the lakers brian haiman sedique bay for the pistons And matthew shura marcus smart celtics darin porter and malachi flinn for the raptors Patrick williams for the bulls shawmatic And montrez herrell to 85 for the lakers brian haiman jordan waro for the bucks And malachi flinn hollow for the raptors darin porter erin naysmith for the celtics and tyler bay for the mavericks carlos aguirre robert woodard for the kings And damien lillard for the blazers matthew shura and tyries halliburton for the kings Can't tell if that's a surface. Yeah, that's a surface Right on the front On tyries halliburton kings, uh, darin porter That's box number three one box left guys One box left best for last let's see spagoo is asking for lebron black. Let's check it out. You got nico man in blue for the warriors to start The 39 out of 50 nicks dover and the warriors and jameis ramsey and the kings city bay for the pistons matthew shura And christ middleton for the bucks matthew shura malachi flinn for the raptors And patrick williams for the bulls shawmatic Youssef nerkic to 85 for the blazers matthew shura and jordan waro for the bucks Aaron naysmith for the celtics And patin critchard celtics darin porter robert woodard kings Or zion i suppose that'd be pretty cool too Zion pelican brian hayman tyries halliburton kings. This one's better than that last one scratch That is darin porter And anthony edwards what i say best for last Minnesota timbrewolves nicks stover rookie auto ant-man congrats man zeke nod you for the nuggets Dante divan chenzo 295 for the bucks matthew shura and Vernon curie jr for the hornets Trey young hawks peter fabiana killian haze pistons Andrey drummond cavaliers darin porter and Elijah Hughes for the jazz Steph curie for the warriors nicks stover And Steph curie again warriors nicks stover alexi fokuseffi for the thunder and landry shumet 285 for the Nets darin porter udoka azabuki for the jazz And landry shumet hollow for the nets uh and darin porter james weisman for the warriors nicks stover And zion pelicans brian hayman grant riller for the hornets And a manual quickly for the nicks matthew shura Jackson haze pelicans brian hayman and kenyan martin jr for the rockets to finish it off But yes that was a very nice auto anthony edwards fast brake signatures timbrewolves nicks stover to wrap it up There you go guys congratulations to all that we're in on that Like I said, I'll check and see if we have any more four box or any new cases so we can do more four box brakes But I think that might be it for now that was 2020 2021 panini donruss optic fast brake basketball four box brake two random teams each number five from jazby's case brakes dot com i'm shan jazby's case brakes dot com thanks for hanging out. We'll see you next time


Yes, seems that way My name is Kim Diaz Holm, also called an ungeher Holm and each day of October I celebrate Inktober by doing Inktober is Pinktober live streams here on the YouTubes where I draw one piece of art from Stuart samples Pinktober 23 prompt list Let us turn the camera around and Watch yesterday's art while we're waiting for Waiting for audience to get in hopefully Hopefully Do so yesterday we drew silence. Good morning, Kermito. Hello Good morning Do so that was yesterday's drawing. I'm soon running out of papers. So tomorrow or Maybe even Tuesday as the latest I have to get into town to buy more sheets of paper Good morning, dear. How are you? So so the COVID was worse today to Worse yesterday, but better today Exhausted and a little bit panicked because Oh no, that was my last piece of oh No Everything's ruined Can't stay but wanted to say I love your videos Thank you now, I'm out of the size of paper That I've used for these drawings Which is I Mean, it's not a huge problem. I can just I can just This is how you know you're Making art in a cellar It's Halloween Yeah, I'm definitely starting to feel better, but it's still a Ways to go I do take breaks when I need them now. I have to look Brain said eat it. Don't eat a spider. Maybe it's a spider.  Oh, no, I It's a new strain of COVID that Transmits online COVID has Bread itself with computer viruses Okay, so What I can do now is I can work on a a This size of paper, that's the ink monster paper or I could go up to this size of paper then This size of paper No, no, I I am Still not quite well almost well not quite well so I should try to pace myself and not Jump into doing something Big go at me dog so So if you're liking Watching this live Do consider becoming a member to support so I can more do more cool stuff and also Consider sending super chats Supporting on patreon or going to Going to my website to Have you ever eaten paper? Yes Go to my website and use the promo code Inktober oh He used to use the code inktober 23 for 20% off on the website then only had home.com Now I'm going to write pink tober. I'm getting a little bit distracted now with the COVID and other stuff Three and I don't know what kind of paper you're eating Paper tastes kind of salty paper shouldn't taste salty And I think today's word from Stuart samples Inktober prompt list pink tober prompt list is humble Something I'm often accused of Being but nothing could be further from the truth and this is number 22, but I don't quite know What I'm going to draw for this Word because I'm I've said this before and I say it again.  I read a story about Painful how painful appendicitis was and a friend who said it was excruciating Kept from being curious about eating stuff like paper once and for all is there any connection between eating paper and Empedanticitis Hello, Harvey Clean writing I Noticing that that my even though I am Better from the COVID today my head is less in Less in place I'm just noticing that my brain isn't quite working so I should Make this Live rather quick less focus mode Yes, indeed Indeed indeed how to make this live quick is something Completely different Because that requires drawing something quick or you know you could require Giving up, but I'm not prone to do that unless I have to No shame in giving up Or just trying again later but Right now I still Have something that I feel I can push so and I this is now I'm leaning into doing something which I really should have printed some some references for because I'm thinking about the Tomb of Cyrus the Great Which if I remember her directly is on stairs many stairs Then a little box on top And that's the most lame So I'm going to make it very simple Kim, can I have a question? Yes But that was your one question you just wasted your one question with a question. Can I have a question? Do you know about gray goo? What do you think it looks like I? Don't know about gray goo. It sounds like it looks like gray goo, doesn't it? I'm gonna eat your question. What is gray goo? Why what I've heard I? Know that it's a thing. I don't know what thing it is. I Assuming it's a gray and gooey thing. I love your work for a while I'm really glad to finally see you live. Yes. Thank you. I think this will be a short live because I I'm noticing that my energy is draining my focus is draining and I will probably go lie down pretty soon It is a hypothetical global catastrophic scenario involving molecular Non-technology in which out of control self self self replicating machines consume all biomass That that's it's the plot for horizon zero dawn the background plot. Is it sort of like that Now let's see what's happening. I think we have a an alien A invader in the room So the question here is Harvey. Are you by any chance a nerd?  I hear something in the background. Do we have a guest on the on the live? Time to slap time to slap. Don't slap me. Oh I think that children can telepathically Here when their dad say they're really tired You want to come and draw some with us serious? Yeah? Yeah Here's some paper for you. You was watching. Did you like the? The live so far. Yeah, does this mean I have to draw an ink monster with you as well? Okay, a man's gotta do a man's what a man's gotta do and a man's gotta draw With his kid. I don't know why that voice came Comes in slaps refuses to elaborate starts drawing. Yep. Yep. Yep Do you find anything to draw with CDs? Hi again? Child go chaos and bunk very valid bunk But I don't think I have much big paper Okay, this is oh no, you can't use that paper That's a very expensive paper But on top of there there is right to your left and Up towards the the stair and up There are is a okay. I'll go get the paper there. Yes. Yes That pad of papers you can use you can take the whole pad Without Dropping all the artwork that's on top of it. Yes, perfect Big white papers But Don't use many of those seats because they are expensive as well They are made for paint not just Not just colored pencils Okay, you started Thoughts on biblically accurate angels. They're one of my hyper fixations at the moment. So biblically accurate angels are a problem because The conception of angels changes throughout the Bible and most people when they say Biblically are accurate angels. They think about those trippy very weird descriptions of cherubs and set of hymns that are like wheels within wheels and has foreheads of the lion and a man and a goat and Tree wings and all of that stuff and They're never in the Bible Described as angels or messengers They're just some sort of weird creatures things thingy my bobs and then in later Biblic later post biblical Christianity They get conflated into being angels, but most of the biblically accurate Angels in the Bible are actually just you know dudes there There they are messengers from God somehow infused with God's name so that they have some of God's powers and Then they may be some of the lesser deities in God's pantheon before a Judaism becomes monotheistic but They're basically just dudes Okay Yes young one your father's arts quite impressive astutes child There are so many Beautiful depictions of creatures. They're all glorious. There's many cool depictions of But you know, I am going to Make a short video about Biblically accurate angels someday and Everyone will be disappointed because I will just draw a dude a man. He won't even have wings That has to be Demon for a devil No wings. I mean if you're going with biblically accurate angels They are simply Humanoid or human messengers from God without Wings or anything else all of the other stuff is post biblical Halo he can have a He can shine because later in the Bible angels tend to shine Because in the beginning of the Bible God shines and is hard to look at but then Develops this idea that God is impossible to look at so then the angels take over The shininess let's do an ink monster Shall we do with color? Yeah, let's do with color I've just found some new colors that I haven't tried out in a while. We got this yicky green and we got this peachy and we got some very pink and What we this this yellow I had No, it's another yellow I found yeah, this yellow Go more gold So just like a plain human yes Okay So which color shall we try all these three new colors or four new colors that I? Picked that I have found All of them Okay, so then serious So serious you will have the task of dripping just one drop of each color and it has to be Somewhere near the middle, okay? First this one and someone we're here Well, that's that was a small drop I Can open it for you. Yeah. Yes. Okay. I can open it Oh, it's hard then we can we stisting and Oh That color was almost there's no color left there These have been I think what you what you need to do is make a bigger blob out of this one You want to make it a bigger blob out of this one? But oh Yes And then the yellow one you can also Peaches peaches peaches peaches peaches peaches I was afraid the Cedars would use way too much ink But he used way too little ink. So what can we do with that? Cedars assistant blubber, okay, let's I Yeah, okay So now I'm just trying to blend the colors a little bit and see what types of shapes come up here Okay, and I think Oh I think I like this. I like this. I like this a lot.  I like it a lot What am I drawing something that I like something that I think is cool That was my I like what I'm drawing song it's I think this is sort of a rainbow buffalo But it has a mountain on it, so it's a camel.  Have like a city on top of the rainbow buffalo Buffalo Buffalo Buffalo Camel Buffalo Camel Buffalo The camel and a buffalo were so good friends They had so much fun that this song ends Was that a good song let's see what the chat says That's cool Cool song best Norway record. I've heard would recommend. Yes The people have spoken they like my song your vision. Yes your vision next Your song no We don't always draw things we like excellent excellent Good to hear Where did I put I'm gonna sub yes, please Yeah, I'll wait for the black metal cover to give it opinion that goes back Oh That was a so bad thing don't you like my improvised black metal about camel buffaloes Where did I put my brush? Oh, I put no not there You put it in your in the back. I put it in your in my brain there. I put it Serious, what would you like to be when you grow up asks one of our viewers You don't know The thing is you have all the time in the world to figure that out Not all the time in the world that's correct I have to try to remember what buffaloes Camelos But I'm not drawing Camel this is my drawing series Good point good point I don't know what I have to say in defense of myself but You are getting overruled in permanent ink Are you Be kind to your father Buffalo nebula Okay, I don't know if buffalos really have a tail that go up. I don't think they do But this one is a strange camel buffalo And should we make it so big that it has a city on top I'll go with the city your idea. I'm shooting your ideas down to the day serious Universum on top. He could have a world on top. Yeah. Okay. Let's say Yeah Yep Yep, I'll try to do some of that That has a multi work. I'll try to do some of your requests serious Some of them know you'll slap me anyhow Okay, if you don't do it, then I'll slap you Okay, don't slap me don't slap me a Quadrultiverse Quadrultiverse are definitely things here is a world with City System I will try And on the first day came created the universe in fear of being slapped You show your second drawing okay show it Oh What's this? It's a monster controlling the elements a monster controlling the elements all the elements Plus lightning plus lightning. That's why there are stone spikes meteors With flip that which are both fire and rocks Controlling all of it Okay Okay, I'm waiting in surprise Like those Um We do not have any pets Unfortunately I'm the family pet You you're not allowed to slap pets No pets are humans too. No wait They're living creatures and you have to be you should be kind to living creatures I think Stop slapping me. No stop. No, I've said it.  No, that's why they're really boring But you can't look at my drawing Yep, I'm looking forward to seeing it Really complex and quick Drawing okay, shall we Show it. It is a lovely No, it's a sea blobby blob a sea blobby blob. That's why it has fins Yes, of course. Why didn't I think ah now you have color on yourself again on you? Yeah, I wonder Why Sky Anglerfish jigglypuff that was a description of your drawing I think it looked like an anglerfish jigglypuff Yes, it doesn't have a microphone, so it doesn't look like a jigglypuff. I mean really You should be ashamed of commenting such nonsense on the internet The sea Traditionally the opposite of the sea has been thought of as being the sky Or is land the opposite of opposites are difficult Literally burning Gong Lee Gong came Who is speaking my my son is speaking But you're using my papers up like they were cheap papers there are cheap papers under here You're using like I don't know where the other papers are Now you're I mean the papers are not that Well, are they that extensive they're about About two dollars each Yeah, but that means you've used how many drawings have you drawn Hey serious try making a bunch of small drawings on the same page and find a way to connect them together It's a suggestion Really fun. I mean for an eight-year-old you sure have mastered sarcasm well What's sarcasm What's a bar captain you don't want to You don't want to mess with the bar captain Give him the cheap ones, but call them special Right before you came down serious.  I have in Long time I Don't know when the last time I drew a this complicated I'm getting to the black hole have patience I left space for the black hole.  Yeah, do you prefer Batman or Superman? Yeah, okay, I prefer Batman Just a human with a bat on his shirts that is an accurate description of Batman unfortunately But I like him still Because of the comics I grew up reading but my favorite superheroes are not DC superheroes My favorites are Marvel That is a very difficult question and I'm torn between like Daredevil and Wolverine and And Yeah, I like Hulk But mostly I'm torn between Daredevil and Wolverine and Spider-Man but When everything Adds up it it has to be Spider-Man Spider-Man, they're just something magical about Spider-Man Should the camel buffalo stand on something? Your favorite Marvel character is Inevitable Inevitable It's hard to pick between Spider-Man and Wolverine But see there's likes Spider-Man, right? You like Spider-Man, but but you like Thanos even better Okay, so should we The bad one Spooderman is copyright free. Yes Spooderman, Spooderman, Spoodie Spoodie Spoodie Spoodie Spooderman It's nothing. It's just someone misspelling Spider-Man Spooderman Spoonman Come together with your hands. Save me You would think Batman's Copyright is due to expire anytime soon, but I do think it's naive To think that Batman will be come public domain still. I Don't think that will happen 13 year old edge lords in the chat. What I'm not sure I know know what comments you're Looking at Maybe I hello Mona. I didn't see you there Okay, so now that we're closing in on finishing this one. I ask you serious Thanos and that's Hulk Good morning from Mexico Where are everyone located So right in the chat where you are watching from and let's see if we can get all the Continents of the world watching While you do that Think All the cities of the world watching Yes, oh, I do I sound very tired that must be the COVID and The eight-year-old pestering me and not listening to me We have a viewer from Me on mar and it's a country in Asia the Czech Republic Australia Brazil United States Vancouver, Canada They're forgetting to to a right, which house they live in Everyone write your address and your phone number and your bank account number in that. No, that's not we're that Philippines Manchester you India Damn, I thought oh, I thought me on my was part of India Nope Milano Italy Yeah, do you think that it's skinny? Computer I'm from India Okay, now we have to Remember to say that if you become a YouTube member That is very much appreciated and you can also give super chats and Serious can draw more monsters But now since we don't want anything under the buffalo serious, right? Shadow or just nothingness Black hole, okay Take a bit of the buffalo so that it's like it's getting sucked in but not knowing it Okay, you're making this difficult for me I mean A bit odd, yes They can't see it because it's too close to the camera. It's a bit odd blah blah blah. Oh jeez. I'm getting tired now Please don't draw on my expensive paper with eyes closed.  Bye, we're going to know we're going to have to have a chat about this That's the trouble of being a art dad I Okay, so artist dad is hard, but dad is even more hard Let the frustrations out on the page now because This drawing Has become really cool. What's his name Jeff? Its name isn't Jeff since my children were born. I don't have time to draw yet But that is a very common when drawing isn't your job. I Actually Started making a lot more art becoming a lot more productive when my kids were born because it was my job and I had to I lost the luxury of Managing my own time. So I had to find ways to be more effective. So so I guess even the daily ink monster thing is sort of an extension of Being more effective once I got children Jeff the galaxy Buffalo I Don't think I'm going to call him Jeff But the galaxy buffalo might be a thing and if it's going to be a Jay name it would rather be Jerry or Something I don't know buffalo out of space Yeah, which number is this this is ink daily ink monster number I think this is number one thousand four hundred and twenty five Jacks the galaxy see World buffalo or galaxy buffalo Fist of it. Yeah, but it is too late now Because that does refer to world turtle world is more accurate here accuracy that's The all-way just a number Represent how many you've made yes, how many daily ones have made So the number is pro it's probably Pretty accurate, but the problem is that some days I've made more Than one and the last year I haven't been Very strict about Making one every day, so I took my first summer vacation without drawing daily ink monsters or Yes, these are my moons and suns evolved. I guess But this drawing became Magnificent, I'm so happy with it, but It was very it was very Exhausting because I still have co vid and Yeah, I was about to quit Can you make a? Card game out of this no, I can't Do you have all the 1425 artworks and most of them are uploaded for free use at my gallery So so you can go online and you can download almost all of them The the ones that aren't there are either not scanned or some I've lost because I'm a doofus and I lose art And all of those pieces are Available for free use under a Creative Commons license So if you want to make a card game out of them you can make that card game. I can't I'm not a card game designer I'm not a game designer. I can't make a card game out of them But you can because they are available under a Creative Commons attribution license so you can even sell your card game legally and All you have to do is credit me as artist What was the first the first was a chubby minotaur called Something something the hangry minotaur. I love the first one. Maybe it was called Jeff Some silly name. Yeah, so if you like the idea of art for free use and there are like Soon to be 1,200 just of the ink monsters and there's a ton of other art There are over 4,000 pieces on my gallery for free use If you like that idea then, you know, please consider supporting by becoming a member of the YouTube or sending a super chat or Supporting on patreon.com slash Kim Holm or going to my web store den ungehardholm.com and buying originals This will be up for sale some time soon buying originals buying prints buying merch and Yeah, how do you gain money from this by you supporting me? Through becoming a YouTube member by you supporting on patreon by you buying My art from my website then ungehardholm.com and using the promo code Inktober 23 for 20% off by you Spreading my art so that more people know my name and more people buy from me and more people also as the more people I That use my art and spread my art the more the individual pieces get worth so when you buy Original art from my website They're more expensive than a lot of people's a for size art They're not really that expensive in the art world, but they're sort of expensive in the type of internet art world the The the Influenced art world and that is because I can charge that price for originals and people buy them and And Once people spread my art even more I can charge More and if you don't like that then you can download my art for free use and make a print yourself And if you bring that print to me, I'll gladly sign it. Ah So So like this is like an NFT. No, it's not like an NFT because an NFT is a way of digital ownership I would There are Interesting things about the NFT technology, but there's nothing interesting about NFTs for the end user The only thing interesting about NFTs is for Speculators trying to earn money that's all NFTs exist for but what I'm talking about is Just letting art be itself despite of the stupid copyright laws and Making art so that people can take it and make it their Their own so sharing the ownership. I'm still the creator of the art You need to acknowledge that with name And that's why I used to creative comments attribution license, but other than that thank I Use it freely because that's what art is for. Thank you so much day-age for Was that? Super chat. Thank you so much I'll And this live very soon, let's have is there a final question we have for me while before I and yeah, so no I Can't draw copyrighted stuff Because I release things for free use so technically most fan art done by professional artists or artists on the internet isn't strictly legal So it's legal as long as the companies tolerate it but once they ask you to take it down you have to take it down and In worst case scenarios you can get sued But most of the time due to public backlash Companies no longer go after fan art except things like fan games But What I do, you know, even if I do our fan art for myself, which is Legal I can't legally take Do fan art and release it for free use? because then ice when I release one of my things like Take care. Jack's the Buffalo When I release this little fellow For free use that means not only That you can copy that Picture not only that you can remix that picture, but you can actually make stories about Jack's the world buffalo or about the world of Jack's the world buffalo and then if you write a You know like 20 volume fantasy epic about Buffalo world All you have to do is somewhere in that book Credit that the idea came from a drawing by this guy Nintendo on the way to see a new YouTube channel of seven-year-old drawing Mario. Yes those things do happen, but they cause a lot of public backlash So even Nintendo is more careful With doing stuff like that because of fans saying that's not cool If a company offers you money to hire you do you accept? Yes, I do Sometimes do copyrighted work for companies or for individuals or for bands I've done Heavy metal covers for bands like soul stuffy then for a but and for the ride that I don't own the rights to because That was part of the deal. I try not to make those kinds of deals anymore, but you know if If Nintendo wanted to hire me to draw Ganondorf and for some promotion I would gladly do that because it's a dream to their Incredibly talented Artists working at that company at Disney at Marvel at DC at Vertigo Bethesda and Valve and that you do there's so many Extremely talented artists working on Properties that have influenced me so much and I would gladly do a Get paid to do a job for any of those big Things that I like But I am not in a position Where I would need to try to get hired by them or be on their good side or Anything like that because I'm doing okay with my own art and it's no longer a dream of mine To create art for other people. It would be wish fulfillment to be able to do Such thing do you still have attribution rights in those cases album covers? Yeah, yeah, of course because in international copyright law or international intellectual property law Attribution is an eternal right that you can't sign away That is under the moral rights so attribution and the right to protect your name and reputation are Rights you can't actually sign away. They are not the same as copyright So even if you don't have the copyright or something you still have the attribution right There are edge cases when there's work for hire, but but none of the work I've done have been in that work for a higher Model Do you like Junji it? Oh, yes, but I haven't read that much of him. Yeah, what I've read I've absolutely loved. Thank you so much for giving a big Big big super chat super chess arm super appreciated Memberships are super appreciated and going to my web store den ungehardholm.com and Buying my art and using the promo code inktober 23 to get 20% off is also super appreciated Thank you for sharing so much of yourself and your art. I feel you make wonderful contribution Thank you so much. Now. I feel that I'm getting really tired. I've been really tired all this live Covid is letting up, but it's going a little bit up and down up and down and up and down so so now it's time to say adieu and And Yeah, say adieu and thank you so much. It was really cool and I Mean, I'm so thrilled About Jack's the world buffalo he came out so good. I Hope Someone makes an epic fantasy story universe or game set on Jack's world Bye-bye


Well, hello everybody, it's getting towards the end of the week, hopefully everybody's starting to think about how they're going to enjoy a wonderful Valencia. So I'm here to talk about distributing supply chain artifacts. Anybody thinking about security these days? Kind of a little bit of a focus. There's lots of new supply chain artifacts. Where are we going to store them? How are you going to handle them? What do we do with these things? So I'm Steve Lasker. I'm a PM architect in Azure. And this is an area that I've been spending a lot of time thinking about for how we store and distribute them and something we've been working on for a while actually. So I'll kind of talk about what we've been thinking about and how it's been evolving. So lots of supply chain artifacts. Where are you going to store them? How are you going to distribute them? It turns out the what matters because of some of the best practices for how we think about to distribute and deploy these. Then we'll talk a little bit about should we be building new services or should we invest and extend some of the existing services that you're all using already. So I'll spend a little time talking about this elegance and evolution of registries which will put context to the whole thing of OCI and Aura's artifacts. So there's lots of them. Oh my. It's just every day there's a new artifact type that's coming out whether it's a new S-bomb format or claims or out of stations. There's just lots of different types that are applying to the software already thinking about. So we think about containers, but there's packages. There's loose binaries. Turns out there's IoT deployments that we should be thinking about from the killer cars that could be taken over to the medical devices that are in the people that got hit by the killer cars. These are all components that we should be thinking about of how do we have supply chain artifacts around these new types or new types around the existing things we're already deploying. But it also applies to our VMs that are under the covers for all of our containers that we're running. This is not a new problem. It's just a matter of how do we think about it across the spectrum of software and hardware quite frankly. So as we started this effort several years ago, a lot of these formats didn't exist. They continue to pop up. So how can we think about associating all of those with the type of software we're building? So where we store them? Does it matter? Do you need to distribute them or if I just make them available on a website, everything's good. And by the way, what's the life cycle of these? So we'll spend a little time talking about that. Now, we spend a time thinking about the best practices for how we're going to consume public content or consume software in general. On your way here, you've made some software available. You might have built a new image or whatever you were working on. As you're leaving, the cluster needs to scale. Should that cluster be pulling across the internet and a thousand different types of connections from Docker Hub or some other public registries like Elastic? How many of you have a refrigerator in your house? Why? You can go to the store and get fresher milk every day, right? Is it going to be in stock? We go to the refrigerator in our house, in our hotel room, because it's right there. It's faster. It's reliable because it's there right there. Now, I keep on updating it. I keep on replenishing it. It's the same model with our production nodes. We don't want to be reaching out across the public internet or outside of our control for content that the connection might be bad or it might have gotten updated. Let's not forget SolarWinds, the exploit there, was a software update. Lots of updates are well intended and break us because everything that changes is a change of some sort. We want to make sure that we've got a tested copy of the software we depend on in a location we can depend upon and then have a constant stream of updates that could come in after we've tested them to apply. The concept here is basically we want to keep a copy of the stuff we depend on as close as possible, even in the same region of your deployments. If you're deploying in US and UK and Australia and Asia, you want to keep copies everywhere that you're deploying from. Shouldn't we have that other supply chain artifacts with it as well? We want to ship all of that software together. As I'm trying to do verification, whether I should be deploying this thing because I'm making a decision based on the S-bomb or the Git-bomb or any of the other claims and details, we want to make sure that's with the software itself. We have automated builds. We probably build more than once a week these days or once a month. It's probably multiple times a day, maybe even every get commit. For every one of those builds, how many do you test? How many tests succeed? And how much do you actually deploy? For each one of those, are you generating all the new supply chain artifacts? So you start to think about, wow, this is starting to get to be a lot. What about all that non-deployed content? There's some liabilities. There's assets and liabilities here. But I'm not just talking about the storage costs of this. That's the least of the problems. All that software, there's vulnerabilities everywhere. But do you care? If you have a vulnerability in software you built you never deployed, does it matter? The scanner doesn't know any different. The alerts don't know any different. So we want to get rid of the stuff we don't care about. But there's still a lot of stuff that we do care about. You've all the software that we've deployed that's a subset but we still need to keep track of that as well. How many of you have compliance requirements that for any software you deployed you need to keep for some amount of time? 18 months tends to be the magic number. For all of that software you've deployed but it's not deployed now, are you scanning it? Well, you probably should because you want to know if there was any exploits. Do you patch the archive software? Because you've got an alert. You're supposed to go patch it. If I patching the archive software which I'm keeping for compliance then it's not the software I deployed. So there's just lots of complexity here. As you want to move your deployed software that was now archived you want to keep that in a separate place. You're going to need all of those supply chain artifacts to travel with it as well. What was the S-bomb at the time? Hey, I've got a vulnerability now. Why did you deploy that thing? Well in January when I deployed it look the scan result didn't know about it. That's why we deployed it. The scans didn't show that there was an exploit in it until a month after it was taken out of production. So it actually wasn't a problem. But you need to be able to keep track of all these things. Now is everything publicly accessible by everybody? It's one thing to have OSS software that's available but we consume OSS in software that we either ship with intellectual property that we don't make publicly available the ingredients or it's internal within our firewalls within our companies that we need to keep. What's the scoping of access to all of that? Does everybody have equal access to all things? Does everybody get create update and delete rights? Or we just trust everybody? Kind of defeats the purpose of... Well actually if we trusted everybody that we wouldn't have to worry about security but of course that's not the case. And then what about just listing the information out? What about the metadata on it? All of these are the things that we think about the more... the days next around what these storage services have to provide. And what about all the itties for production capabilities? These needs to be geo-replicated into multiple regions. Within a region there are multiple availability zones. That's the expectations that are put on cloud providers for these services. How do you promote that content? How many of your customers are multi-cloud? Are you a multi-cloud? Will this work across multiple clouds? Or on-prem? And when stuff goes wrong how do I think about the diagnostics and all the troubleshooting? So you kind of get the pattern here in firewalls. We talked about how this software needs to be able to be available within a VNet. Because all of our customers want their security that they had on-prem in the cloud. No public access, lock it down. So these are all the requirements that keep on coming up on these various storage services. Oh, and by the way, who's going to support these things? So running a storage service is complex, right? We start with some blob storage. We add some REST APIs for discoverability. We put authentication on it. There's some caching for the multiple requests for the same thing. There's some kind of support. There's integrity and signing that's available on all of these things.  So it turns out that it is complex for all of these. And all of the supply chain artifacts are going to have the same check boxes for requirements. So as we're looking all of this, should we be building new services for these things? Do I need a new SPDX service? Do I need a new Cyclone DX service or an SBOM service? Or a scan result service? The idea is that we'd want to be able to leverage what we already have. So that's kind of the setup here is, well, which one should we invest in? So Git turns out pretty popular. Very tailored towards your build environments, right? It's optimized for developers making changes and tracking those changes. It is not optimized for production deployments. We have lots of things trying to pull from it at the same time. And we've seen that with some of the various technologies that are trying to do more Git-based deployments. There's lots of existing package managers, and most of them are underfunded. They just don't have the capabilities. We're always trying to get them to improve, but it's not the critical business. Sure, we could use raw storage accounts, which is underneath all of that, but it's not robust enough. And then we can get to various ISV products, but then we're starting to compete for things. And this is not the place that we're trying to compete. The package managers and the storage services and registries, they're lost leaders. They're there to enable the rest of the workloads, which brings us to what we've been doing under the OCI distribution spec as leveraging that capabilities to which every one of your cloud providers have it. You have them on-prem. If you're at KubeCon, I'm sure you have a registry somewhere, at least one. How about we extend into that infrastructure? So let's take a little bit of the elegance of registries, because it turns out it's actually pretty well designed. So let's walk through a couple of pieces to it.  It could be a login endpoint, the rest endpoint, the registry name, all kind of it's synonymous. The idea is there is some address for where you find this thing. It's kind of a little weird that registries are the only package managers that you have the addressability in it. Like every other package manager, it's a config option. So that's a different effort we're trying to make that a little easier so you can promote these things and it's a configuration for the registry. There's some namespace where your stuff is stuffed into. And depending on the particular registry, it could be one, two, or n levels deep. It's really just a path with magic slashes in it. Then we finally get to the actual image, and there's a version. Turns out it doesn't actually need to be an image. It could just be what we call an artifact. So what's under the covers for all of this? That net monitor V1 image is backed by a manifest. A manifest is just a JSON document that has some descriptive information about it. It's intentionally lightweight, and we'll talk about that a little bit more. Then there's one or more collections of content, the actual content that makes it up. Those are blobs. It's all stored in some kind of blob storage, usually. Some of the lightweight registries that are on-prem or on IoT snares, they might be using regular files for storage, but typically there's some kind of blob storage, and there's this REST API we talked about. If we map that into a registry, the manifest, there's a lot of them. They're stored, and the blobs are in blob storage. And now we're starting to see how this is framed together.  So I have the client here on the left, and it says, hey, Docker pull this net monitor image from this registry. The client calls that registry and says, hey, I need this thing. Can you tell me about this thing? Sure. Let me give you back a manifest. The manifest is meant to be extremely lightweight because I want to be able to pull it often. It's absolutely minimal information as possible into the manifest because it's going to give me some metadata, including the list of blobs. I might even have one of those blobs on disk already because I already pulled the base layer for some other image. So I've already got some of that information. I don't really want more information to come into the manifest than possible. It now says, hey, from that list of layers or blobs that's in that manifest, I already have this one, but I don't have the other one. Hey, registry, can you give me a URL for this blob? And this is another interesting part about the way the registries work. Even though the registry endpoint, in this case, is registrywebitnetworks.io, the response to the request for the ID for layer two can be a completely different URL. That's a protocol that's set up. That's how we enable CDNs that can be serving the blob content from different endpoints. It's how we do regional endpoints. It allows us to kind of, there's a negotiation that it says, I know you asked for registrywebitnetworks.io, when I'm going to give you the content, it actually can be a different endpoint. So those are things just to be aware of when you're configuring firewall rules too, is to look at what your cloud provider is doing or your registry is doing. So then it finally says, hey, here's the URL. And the client goes, okay, great, let me go pull them. And I might pull them concurrently. And of course, this is the model we see. We see that in the Docker model, we see the layers being expanded. And once all those layers are there, it goes, hey, I'm done. Here's the container image and off it goes. So if we look at what's in that manifest, there's this collection of blobs. They're called layers in the container image format. There's a collection of layers and there's this config object. The config object is just another layer. It's just another blob, just a specialized one. Everything in a registry is stored as a descriptor, which is nothing more than the type, the hash, and a checksum. And the hash is the unique identifier. And then there's some additional metadata, which we'd love to do more with. This is like, we think what people are using labels for. This is what annotations were intended for. We're hopeful that as we can start indexing these more, that there'll actually be a nice circle that'll come around and go like, well, I can actually do something with them. So maybe I'll produce more annotations. Now, the files, the blobs are really just a pre-structured way to kind of segment stuff. It's really optimized around that shared content. But it's really no different than what your disk subsystems do when they were slower. We had these defragmenter things and they were fun to watch the little bits going around. It's just a way to chunk up the files. They're just pre-allocated. So a manifest is an artifact. That's the way to kind of think about it. When a manifest is submitted, it is that net monitor v1 image. The blobs are the content that make it up. And it turns out there's actually several manifest types that are in registries. There's the one that's probably the most popular because if you're doing Docker build, that's what the Docker manifest is. It's the original one. When it was submitted to OCI, there was a little bit of reformatting of it to make it a little more vendor-neutral and standard. So that's the OCI manifest. Same functionality. If you have multi-arc images, whether it be Windows and Linux or ARM or whatever, there's another manifest list that basically says, here's the separate individual manifest for ARM, Linux, Windows, and so forth. But you can associate it with a single tag. It's a nice little way to kind of get an abstraction there. And then the OCI index is the multi-arc version of that. But there could be more. So we'll talk about that. Let's first talk about tags because this is another aspect of it. When you push something to a registry, you're pushing it as a tag usually. The NetMonitor v1 image, that's fine. If I want to reuse that tag, there's another manifest and potentially more blobs that get uploaded. And this synthetic thing over here that you've called a tag is pointed at the new manifest. That old manifest is still there. It's just called an untag manifest, as usually the terminology. And you might even set up that automatically delete untag manifest as a thing. But there's a virtual concept of a tag and it has a pointer that can float. So recapping manifest or artifacts, blogs of the content. We can secure them in namespaces. All the content has unique identifiers, which is really cool. If you're pushing from two regions to the same registry, we can easily handle. There's no conflicts. We talked about the tags or pointers. And the artifacts in a registry can be from a K to multiple gigabyte. Machine learning folks, man, you guys got some really big images. It is pretty amazing how you stretch the extent of what a registry is capable of. So as I've gone through this, is there anything really unique around a container image in this flow that we just walked through? It's pretty generically useful. So I'll take you through a little journey on how we wound up doing this generic model. So when we, this was back in 2018, we were trying to figure out how to make Helm available within registries because it's great way to deploy. Why not use the registry for it? So we started going down this AZACR Helm repo ad. And before we could even, and it worked and mapped out pretty well. But it was unique to Azure. But as we started, we didn't even get finished and CNAB was becoming a thing. And Singularity was saying, like, we really don't want to host our own registry. Can we just get this working in the existing registries? We don't want to run yet another storage service. So we just kept on going down this list. And we're like, AZACR, AZACR this, AZACR this. Like, this is not sustainable. So we basically said, all right, let's invert this model. How do we get the Helm team, who actually worked for Azure at the time, to want to build this into the Helm client? It only makes sense if it's going to work across all cloud providers. So what we did is we went back and said, what if we leverage that same infrastructure and generalize it so you can store Helm charts in OCI registries and it'll work in Azure, AWS, Google, on-prem, wherever. Any place has a registry. It should just work. Now, all of a sudden, it makes sense for the Helm team and the Terraform team and all these other teams to say, well, why should I create my own registry? Why don't I leverage those ones there? It'll work across all cloud providers. So that was the evolution from container registries to becoming these artifact registries. And all we did was basically relax some strings that were in the registries for how these things were mapped. So we're able to say, not yet another storage service. So that was kind of the evolution there. Now all these things can be stored in them and it turns out that it's so generically useful that we've actually done a bunch of prototypes where a lot of the package managers can be stored in them as well. But that's a whole other thing. So OCI artifacts was about storing other individual things like Helm, like OPA, like Singularity, like all these different things we don't even know about. That's the beauty of this. There's so many different types now being stored within companies and shared across projects. What if I want to be able to associate other things with my existing one? Like how do I associate an S-bomb with my NetMonitor image? How do I create a relationship between those? Because when you look at your deployment chart, all you know is NetMonitor v1, right? Engine X 1.12.6. What we want to be able to do is say, hey, based on that thing, well, first of all, is it signed? Great. Can I attest to whether it's signed by entity I trust? And now I can go back and say, hey, by the way, can you give me the S-bomb for this thing? Can you give me the list of scan results? What is this current revocation status? So when we started down this work, we originally started this reference type stuff with Notary because we wanted to be able to associate detached signatures. Turns out that infrastructure is available for all kinds of different types. So how can we generalize from individuals to enabling how do I find other things based on that same name? I don't want to change the tag or digest because that's what's locked in my deployment file. Don't mess with that. That's what I know. But I want to discover related things. I want to filter on those related things. I might want to sort them because my scan results I do a lot of, so I don't have just one. I want the latest. Or maybe I want the first to know what it was originally scanned as. Oh, and then because we talked about the lifecycle, if I want to delete the stuff that was never deployed, I want to get rid of all of the S-bombs and scan results and all the other stuff because all of that's gone. I never deployed it. Get it out of my system. If I want to copy it to an archive location because I need to keep it for 18 months, I want all those things to go with it as well. I don't want to have to correlate 12 different storage systems to figure out where is all this content that I need to save or delete. So that leads us to the evolution. Does everything have to be a brand new service or can we invest in the existing service that have all those iddies that I don't want to have to think about and users don't want to have to configure? So we have a registry that can store all sorts of stuff. What if you could ask the registry what else it has related to that thing? So we have this project called ORA's OCR Registry of Storage. And I can say from a client perspective, hey, discover what's related to the net monitor image. And now the results can come back and say, hey, here's some signatures.  Here's two different S-bomb formats. And a gitbomb. I can hang all of those off my net monitor image. I could even filter. Maybe I only want the scan results. Well, there's three of them. Well, I can order them by date to sending or ascending. And I can also say, just give me the top one. That would be kind of cool. Let's show it. Let's dig into how we can do this today. So I've got just a copy of distribution, actually a version of distribution that's got this functionality in it. Usually I start with a container image. But what I want to show is it doesn't have to be a container image. So at Microsoft, we have to abide by the U.S. Executive Order for providing S-bombs and claims and details, not just on the software we ship, like Office and other things, but on the services that we run. If we run Office 365, we're not going to host the Office 365 service as a container, but we do want to provide S-bombs for it. So here I'm using the Web at Networks company and they have this network monitor service that they run. And they're going to have, let's just call it the 2022 Q1M1 version, that we're just going to create an arbitrarily named thing in the registry to make a reference to. So I just created some JSON document. No big deal. I'm going to push this to the registry using ORAS. Now, this is the original CI artifact stuff we did a couple of years ago. All I'm doing is saying, localhost 5000, that's the registry, and then the namespace is services, and then the artifact is net monitor, and I've got a version associated with it. The manifest config thing, that's again, that's how we did ORAS, the OCR artifact is the first version. There's a way to have a type in there, so I said it's an application JSON, just made up a type. And then the service.json is the stub. It's just that little file that just represents something. There is, if I want to find some information about the service, whatever you want to make. Really, the main thing that I'm trying to do is just create a reference, that tag. Now, let's say I have an S-bomb. I've got a very fancy S-bomb here. I think it says it's good. So it's just version whatever. It might be 200 megabytes long. Some of our S-bombs for some of our services are huge. So we need something that can scale from very small to very large. So I have an S-bomb. I want to push it to the registry and associate it with that NetMonitor 2022 Q1M1 service. Because that's the thing I know. I know of Office 365, some version. I know of the NetMonitor service, this version. And now what's interesting is now I can start saying, show me what's related to that service. So I now have an S-bomb. I've got the S-bomb example. I know of the NetMonitor service. I don't know what the identifier is for the S-bomb, but I know my service name. I know the software I'm looking for. Let's say I want to add some claims. We'll make this a little fancy here. Wait, is that the one I did? Yeah. So I've got some claims. We'll do it there. Let's say that it conforms to some SDF compliance. Again, I've got some document. I want to make it available for people that are looking for the information on the service. I'm going to push this one also as a reference. So push to the repo. Basically, it's push the claims example. That's the type. Think of it as like the file extension. The .json file, the .steve file, whatever. There's a type. I'm taking the claims.json file and I'm just pushing it up. And the subject, the thing it's associating with is that NetMonitor image. Wait, did I push it? Yes, I did. Sorry. I might have some additional annotations. So this is what I talk about. Annotations would be really cool. Do you know the end of life for software when you build it? You think you do. Usually don't. It changes. Turns out it might be more useful. You might have to extend it. You don't know what the next version. I originally had M1, I think it was the version I had up there. Turns out the replacement M2 turned out not to be so good. So we're going to say the new version of the software if somebody's looking for an update is actually M3.1. So if I can add new information to the existing information that's in the registry that I can improve it over time. I can start to add more information. So again, I'm just going to push this. Again, it's just this one says the artifact type is, I just call this artifact annotations. And same subject. I keep on going back and saying I'm adding more information to that specific version of the NetMonitor image. But notice there's no file here. That was the interesting part. And again, if I just look at the tree of information, let's just make this a little easier. I'm starting to grow a pretty rich graph of information that if I'm building all of this in my build system, I can associate them all together. If I want to get something out, this one we can do some better usability on. This is where we are right now. We're using the Aura's Discover command. I'm filtering by the artifact type of claims, because that's the one, and I'm just doing some parsing out of it. It says, hey, give me the first entry out and give me the digest of it because everything's got a unique digest. And then I can say Aura's pull. And now it will pull into a download directory because I want to get it out of the same directory I just created it. And I've given it the reference, right? Because everything in the registry has a unique reference. And if I were to now take a look at the output, surprise, surprise, I was able to round-trip that information back out of the registry. I was able to pull just the claims file. I didn't have to pull all the other stuff. I said, hey, the net monitor reference? By the way, I want the claims for it. Now, here's where it gets really cool. I've used several different tools. I had an SBOM tool. Maybe it's SPDX, maybe it's Cyclone DX. I had a claims tool. I had some annotations that I added to it. If you're trying to copy the files from one folder to another on your computer, do you open up PowerPoint and Visual Studio Code or some other tool like Adobe Illustrator or whatever, you use the file system API. You just say copy from here to here. It doesn't care what the type is. Because we've set up this relationship with the objects in the registry, I can literally go, hey, copy this from point A to point B and take the entire graph. Copy from services net monitor to Wabbit Networks net monitor. It could be a completely different registry. And now if I look at the destination, I got the same graph, but it's at the other end. That's kind of what's powerful by saying, hey, the registries now know about references. I can copy all of that with me, and this is the content I need to archive. This was the thing that was deployed. It's no longer deployed. Let me archive this and keep it for 18 months. And maybe one of the annotations is you can delete this 18 months from today. So that's the model that we've been kind of focused on. Let's check on time here. So it turns out registries already support manifests. We're just adding another manifest type. It's totally within the spec to add another manifest type. This is how index got added. The new manifest just says, look, it's a new type. That's the media type says this is a new schema. We've taken the hack we did in OCI artifacts via the original one, because that's the way we just took the config media type and we surfaced it as a first class object of property so that we can do the filtering by. We've taken the layers and we've named that to blobs because layers are unique to containers. Turns out blobs are pretty generic. If you really, really, really, really need a config object, there's a media type. Just stuff it in the blobs collection and call it the same config object so you can still get it out. Turns out most of them don't need configs. The subject is really the magic piece. The subject is the thing that says, hey, this S-bomb is related to the net monitor image or the goofy service reference that I created. That's the back pointer. It's very similar to how tags work. Tags, there's no document. It's something that we cache or index, but index is a loaded word. In the registry, we store it in a database that says these things are related, but there's no document that gets out of sync. So we can do things like annotations because there's no blobs required. I can just set up, hey, here's just a new annotation. Now, to get things back out, there's a gazintas and the gazoutas. If I'm putting new manifests in with the subject property, we index that information. So when I call this new refers API, it's the opposite. I call an API to get the content, and I have another API that says, I want the related objects to that net monitor image. So it just returns a list of descriptors with the artifact type so I can decide whether I actually want the signature or the S-bomb. That's how the filtering works. So it's kind of going back. This is actually originally what we did for the notary work, is that we can sign stuff without changing the original digest. Turns out we want to be able to add S-bombs without changing the original digest. We want to keep them alongside so that we can copy them and we can pull them independently. Just like when you go to the airport, you don't walk through with your passport.  Let's see what else. That's basically it. So there's a couple of links here for how we've been doing the work. We originally had OCI artifacts. That's there. That's the single individual objects. The ORAS artifacts, we think it was reference types. We've done the incubation under ORAS. We're working with OCI to get that submitted as a standard. ORAS and OCI obviously both are different projects, so they're available for everybody to use. Then the ORAS CLI is how I was using it there. Think of it as the file system API. But if I'm in an application, I can do file save and file open within an application. Those are libraries for how to interact with the file system. We have ORAS Go, which is how you can build your S-bomb tool to interact with the registry. We really want to make sure that these things are available for other people to use in their tools. Your users shouldn't have to think about ORAS. They want to think about your thing, your S-bomb tool, your scan results, whatever it is you guys are going to creatively come up with. As you can use the ORAS Go libraries to say, look, I don't want to be dealing with storage things. I want to leverage what's already there. So let me just use this library and I'll do the push-discover pull. And then we've got a fork of distribution that supports all of this. So that's it for the talk. We have this running in Azure. AWS is coming soon. Docker is working on their version of it. We're looking for anybody else that's looking for support and new innovations, new ideas. Our goal here was to not worry about a specific type. It was to enable the ecosystem to store all these things and not have to create yet another storage solution. So I hope that was helpful. I'll stick around for any questions and thank you for coming.


Ladies and gentlemen Mr. Greg Prescott smoking on the beat Greg says things gonna be great in two months right yeah by the end of February massive massive massive changes hope like the consciousness is rising right now creating our own reality even though none of this seems real everything is going to be changing in a big time and it's going to be creating these Mandela effects that change way out to change time line it's going to be amazing it's just a big thing all right I got goosebumps I got goosebumps man whoo 5D goosebumps


The Marshall Islands, first territory of Japan's pre-war empire to be invaded by United States forces. A 700-mile group of atolls bristling with Jap air and sea bases. Most important of these is Kwajalein, the Marshall strategic heart. Roy and Namur are taken by United States Marines, Kwajalein by the Army. These pictures show the Army invasion. The troops of Admiral Turner's giant task force stand offshore. The pre-invasion bombardment nears its devastating conclusion. Kwajalein's two-and-a-half miles is hit again and again. Just west of Kwajalein, United States artillery pounds the objective at almost point-blank range. The empty shell cases indicate the ferocity of the barrage. The troops of landing craft bring the troops ashore. They drive in for the decisive assault. The patches on their backs are to identify them to their own low-flying aircraft. Gunners get a Jap sniper in a tree. Fire is constant, devastating, drives the enemy further back. A Japanese pillbox is blasted by dynamite. Riflemen cover any possible escape, first finish off a Jap military building, and push ahead. All arms keep up relentless pressure on the enemy. The loudspeaker, an American officer speaking in Japanese, demands the surrender of the enemy still holding out in the ruined emplacement. One Jap comes out, another with a white flag. A Jap tells an officer there were 10 in his pillbox. All are now dead or prisoners. The Army alone killed 4,600 Japanese and captured 163. Japanese receive the same expert medical attention that is given to the Americans. These are native Kanakas, men and women forced to labor for the Japs. Every living Jap is registered as a prisoner of war. Individual tags are filled out. All are given clean new clothes. Enemy bodies litter the sands. The Army did a thorough job. American wounded are brought up for treatment. From fighting past, the men relax. With the island won, the mess sergeant celebrates with a Quajolain chicken. Nimitz Pacific Fleet Commander and Lieutenant General Richardson Army Commander visit the scene of battle. The highest point on Quajolain, the American flag is raised. Under Admiral Nimitz, the United States moves ahead in the Battle of the Pacific.