Oh, cut the crust off of the bread. I like, I don't. There's a lot of people out there that call themselves Asian foodies, but in 2023, you can't honestly call yourself that until you've had a bunch of these dishes that we're about to list. Yeah, I mean, there are levels to this in 2023, Andrew, low, middle, high, intermediate, entry level, expert, and we've probably eaten at thousands of Asian restaurants by now. So let's just break it down cuisine by cuisine. By the way, these are all dishes that you can find in America.  We gotta talk about things that you can do to improve your Asian foodie score today in America. And these are all dishes that we've actually had at American restaurants. So guys, we gotta go through all the different types of Asian cuisine. There's a lot of them, so bear with us. But let's start with the number one that is probably one of the most prevalent in America, which is Cantonese cuisine, AKA Southern Chinese. Right, this is the one that we grew up with. Most people, Andrew, when they engage with Cantonese cuisine, they're probably getting shioyuk, right, the roasted meats. They're getting dim sum, or Americanized Chinese, or even like Chinatown, which is really, if you know its own genre. However, Andrew, do you think people are missing out on all the steamed dai pai dong seafood dishes? So I'm talking about what? Steamed scallops, steamed clams, so like, hams with clam and soup. A lot of different steamed fishes. Yeah, I would say on the more intense, I guess, or expert level, there's a lot of abalone. There's a lot of seafood. There's, oh, and possibly on the cheaper side, I know that's a deep cut one for a lot of Cantonese people, it's like the yuk bang, which is like the steamed meat patty over rice, which is maybe not the most popular dish for like non Asians to eat. Yeah, it's an intense flavor, because I think there's a lot of like ham yu and like anchovies in the yuk bang, which is like this meat patty. Not even personally, my favorite dish, but I know for, you know, the older crowd, they love themselves a good yuk bang. So what's trending amongst Cantonese food? Because I think a lot of people are like, I've had Cantonese food for years, blah, blah, blah, it's been around for a while. Right, like how was Cantonese food coming into the 2023, right? What's hot right now? I would say Bolo bao crust. You know the pineapple buns that you can get at a classic Cantonese bakery? I would say that a lot of people are doing stuff with Bolo crust, like the pineapple bun burgers or like dessert burgers or ice cream sandwiches or something like that. So that is what is happening with Cantonese cuisine. And we're moving on to Korean. I would say a lot of people, they love Korean barbecue. They go to the tofu houses, which are Sundubu houses, right? They usually get Calbee or spicy chicken combos. And probably if they're following K-pop or more like the BTS stuff, more of the modern foods, maybe chicken and beer or a Jigae, which is like an army stew with possibly a slice of cheese on top. Yeah, obviously like the bar food, like tapoki and like even maybe the Korean hot dog are trending right now. However, you got to keep it moving. Gamja tong, this is the next level, right? The hundred year old dishes, they are, people are missing out on those. I think the tongs of Korean food, AKA the soups and the stews, highly underrated, under eaten. I think Koreans know that they're good, but they're not served enough. And I think people when it comes to stews, they got to know Koreans got some really good ones. No, especially things involving like a lot of perilla leaves and perilla seeds. That's like a hyper unique flavor, that. I love that. There's this spot under yuk de jang that's really good with like, you know, I'll pop up the menu here. David, what do you think on the intense pick? Like a type of Korean food that is popular, but that, you know, it's kind of got high barriers to entry for people. I would say, what, gopchang? Gopchang is like, I like Korean food.  I would say another thing that is maybe not considered intense, but a lot of people are more, you know, getting into at the expert level would be like Busan or Jeju Island cuisine, which is made up of different ingredients, more seafood heavy. Yeah, I would say what's trending is kalguksu, yuba tofu pockets. That's very trendy. And then also now you're starting to see some of that Korean bar food, like the gochu twijim. I believe that's how you say it. It's like a Busan, a fried pepper. Oh, with the meat inside, right? I would also say two things that I haven't really seen become popular that I'd like to see, Andrew. Dakjim, which is really popular. I heard in Seoul and hotteoks. I would like to see some more honey almond fried hotteoks. Moving on to Taiwanese cuisine, Andrew. Wow, wow, wow. Most people, realistic of what? Boba, popcorn chicken, beef noodle soup, all really solid picks, maybe a little bit of Lurofan, 50-50, right? But what do you think they should try? I think three cup chicken, all right? That served out a lot of Taiwanese spots. I also think the Taiwanese sausage wrapped in bigger sausage, David. Xiaoshangcheng, or DaShangCheng, BaoXiaoShangCheng, yeah. Kind of hard to say for me, yeah, it's hard to say. But anyways, definitely that. Oh, Taiwanese breakfast. What do you think? You mean like the Shao Bing? It's a little bit of Jamaican vibes in the sense of like the beef patty in the bun, yo-tiao in the Shao Bing. Yeah, I brought a lot of carbs, a lot of carbs. I would say the intense pick is probably oyster noodles, oamiswa. And you know what's I think trending right now is Taiwanese, there's a style of food called ur-chow, which is kind of like a Taiwanese daipai dong where it's a lot of hot stir-fries, a lot of wok-hei. Right, like daipai dong's in Hong Kong, but instead of being chewed out, influenced there more like Hakka, right? Yeah, maybe Hakka and other influences. Oh, dude, Fly's Head, a lot of black bean stir-fries. I see that mostly trending at Taiwanese restaurants in America in 2023. It's really good, man. Moving on to Mainland, China, Andrew. Most people probably what, get dumplings from the North. They get Shao Lung Bao's soup dumplings from the Watertown, sort of Middle China Shanghai region. They get cumin lamb from Xi'an. They might get spicy in the Southwest, which is more Sichuan Chongqing. And then just noodles all over. What are they missing out on though? There are some other dishes that I think maybe more and more people are gonna be serving, but there's like Ruer Gan Min, which comes from actually Wuhan, which is delicious. Right, which is a- The delicious thing that comes from Wuhan. But David, there's a, you have a favorite dish called huangmenji that you have been preaching about. Yeah, huangmenji and other like duan. Like duans are almost like a mixture between a soup and a stew and a casserole. It's like hard to describe because it doesn't really have like a full English translation. It's just a duan.  I would say the intense picks from mainland China for me mostly involve intestines. Like Sichuan mala intestines at a 10 out of 10 level. For me, that's an intense expert pick. I'm just not gonna go for it. You know what's trending is obviously soup dumpling Shaolongbao have been trending for several years. I feel like every spot in New York serve soup dumplings. You mean regardless whether they're Watertown, Shanghainese, Wuxi, Hangzhou or not. There are so many soup dumplings in New York. New York loves the soup dumplings. You think it's like the quality's gone down because a lot of people are like, oh yeah, the soup dumplings are trending. Even though that's not from my province, I'm just gonna make it because that's what people want. There's so many decent soup dumplings in the city. It's hard for me to even pinpoint what's the best ones aside from- I would say, would you say a lot are between seven and eight and very few are nine and 10. Oh, one thing that I'd like to see get trending, which I don't know if it is, Andrew, is Guizhou Mifun. Oh, okay. From Burt Bowl, like the spicy chicken cold noodles. And shout out to this one spot, man. They were, say, serving guo kuiz. But guo kuiz, they closed down. So it clearly, it was like this, essentially Chinese flat hot pocket with meat inside. It was delicious, but I don't know. I wanna see those come back, man. But I guess, I don't know. Maybe just tell- It's interesting enough, and guo kuiz come in two different styles. A Sichuan style and a Henan style. You know what? I like those meat patties, like the robings. Jingdong robings, or just robings. Yeah, there's just the rope. Like a big meat, just pocket. If from Beijing, the mundane robings came over from the Forbidden City. Anyway, moving on to Japanese, and a lot of people have Japanese listed as their most favorite cuisine in the whole world, right? However, interestingly enough, Andrew, most people just pretty much dip their toes into what, ramen, teriyaki, maybe Izakaya's, yakitori's, and of course, various levels of sushi. Anything from, you know, super authentic sushi to omakase, fusion omakase is all the way to just Americanized sushi. So, David, what's the next step in Japanese food? Since everybody's exposed to some level of Japanese food. And by the way, guys, I think that these are spots that are decently numerous in America. We had to list numerous spots that, you know, just, you can find them in America. Soba spots, nabe spots. Nabe, kata nabe spots that are almost like their version of hot pot. Like jungle nabe, or, yeah, I think that's the one that the Sumos ate. Yeah, that's really good. And to me, a lot of people would have expected me to say shabu, right? But for me, actually, I'm gonna say expensive shabu-shabu is good, but it's a little overrated compared to nabe pots. Wow, you're kind of like, instead of shabu-shabu, you're like nabe-nabe. I'm not going on the shabu-shabu. I think the intense pick, Andrew, of course, a lot of people would be like, the intense pick dude would be the blowfish sushi. Well, the Fugu, the Fugu's never coming to America, guys. They're never gonna allow that to be served in America. We had it actually in Japan that tastes pretty tame. I would say it'd be Japanese kaiseki, the small individual dishes meal. We had it at a pretty good spot in Toronto. Yeah, I see a lot of different levels of ramen and different types of ramen. I think chicken ramen, Tori ramen is going to get more and more popular as it already is, and there's some great Tori ramen out there. Tori Python. Yeah, and then also ceremonial matcha. That's what's trending. Legit ceremonial matcha spots. No, because matcha's been trending, and even Starbucks has a matcha, but it's not like Uji ceremonial matcha. We are talking about ceremonial matcha. Yeah, I think a lot of Japanese concepts are actually like, that's one of the more developed foods in America in the big cities. Vietnamese, Andrew. Most people get what? Fuh. Yeah. Bunmiz. Yeah. Vermicelli plates. Yeah, you know the basics. Would you say that those are the three that most people engage in? Yeah, yeah, there's also, at some spots, you can get a Vietnamese hot pot. I don't know what it's called in Vietnamese, but those always look really good. There's also this thing called mi quang that has this yellow turmeric noodle that not a lot of spots serve, but you should get it when you have the chance. No, no, you see mi quang spots more and more often, right? What I do like in New York is that a number of the Vietnamese spots out here, they have the clay pot with the salmon in it. Right, but it's supposed to be traditionally with catfish. Yes, I know, but you know, salmon's tasty. I really actually like bun kun. Bun kun is sort of the Vietnamese version of chung fun, like rap rice roll. In a lot of ways, man. It's better, dude. It's better. It's got its pros and cons, but David, so what's the intense pick of Vietnamese right now? That is kind of trending. Oh man, bun mam. And this is like a rap platter from Hanoi. And there's a spot in New York, you can get it called mam. I think that that is pretty, like definitely, it could be more acquired because of the fish or the shrimp paste dip that you dip the bun mam. I love any sort of rap food that Vietnamese have, but yeah, because the cuts are intestines and blood sausages. For some people, it's not gonna be your favorite. Yeah, I think a lot of our intense picks are gonna involve intestines or sausages made of blood. Andrew, I think the trending one in the Vietnamese world actually is Kam Ga roti. And when we say roti, we're not using it in the Indian word, but it's actually like a fried chicken leg dish that I have started to see be trending. And it's not something that fits within the bun mi pho dichotomy. Yo man, I know there's one spot. Seattle, I hope they start serving it more in New York. Yeah, delicious. Moving on, David, what's next? Filipino, Filipino, Filipino. Okay, so of course you guys know the basics, lumpia, adobo, halo, halo, you know, Jollabies if you count that as Filipino food, which it's a Filipino chain. Yeah, I think people need to get into arroz caldo, which is their version of chicken kanji. And I got to say arroz caldo, Andrew. And I heard there's even some tiny influence from the Spanish cuisine in that dish as well. It might be the best version of chicken kanji I've ever had. It's up there. That's a big statement. I think other people got some really cool dishes. And beef caldereta, it's like a beef stew that I heard is, you know, I've had it before. It's got carrots. Really? I actually, surprisingly enough, around the world beef stews are all kind of similar. Or at least every country serves a beef stew that is similar to each others. Yeah, and it looks similar. But in different cultures, it maintains like a different place in the food hierarchy. Definitely better than Campbell's Chunky Beef Stew. I would say the intense pick, the chocolate meat, Andrew, the dinigwan. Oh my, yeah. You know what?  I'll have some good versions. I've had some good versions, it's a tough sell. To me, when you cook stuff with any sort of pig's blood, it can go, it's so dicey. Like you're playing with fire, it's very volatile. You know what's really trending right now, David? Is anything ube? All, everything ube, ube, I think is the purple color of the Asian food world. It has a bright color. It has a sweeter taste than taro. Smooth.  I think that taro and ube are from the same like plant family. Yeah, they're both roots, but ube tends to be a little sweeter. Shout out to ube everything, man. Moving on to Thailand, Andrew. This is probably one of the trendiest foods in America right now, right? It grabs a lot of different demographics, appeals to a lot of different people. Andrew, probably everybody, what? Realistically eats pad thai. I think people have moved on to pad siu and pad kemao lately, right? And pineapple fried rice. I've been seeing people order pineapple fried rice nonstop. You know what it is, man? It's because even the dudes who kind of like more ate like hood Chinese food, they're starting to eat more pineapple fried rice from Thailand too. Thai fried rice is really good, man. It has a lot of flavor. I totally recommend it. Some dishes that you should try that you can find at a lot of spots now are duck boat noodles. Duck boat noodles. Or just duck noodles in general. Duck noodles is a 10 out of 10, man. And then you have khao soi, which is kind of like the curry egg noodle soup type dish with the chicken drumsticks. With the chicken drums in it. Soft shell crab curry at some of the nicer spots. Yeah, you have to go to a more high rent Thai spot to be able to secure that dish. And it's probably gonna be in the bigger cities. On the intense side, which we have seen is like raw crab larb or raw fish larb. Or just any type of larb, right? Lap from Isan. Obviously Thailand, they have like very different cuisines in very different provinces and regions. And I'd also say any of their pork dishes, like Thai's really grill pork really, really well. I would say their trending things right now is crab fried rice and papaya salads. I see those things trending into the future. And it's not just like the base level one. It's sort of like a papaya salad. You could do a salted egg yolk papaya salad. You could do this papaya salad, that papaya salad, this type of lap, this type of lap. Moving on to India, Andrew. Of course, everybody knows they love butter chicken. They love chicken tiki masala. They love samosas, roti, non-paratha, tandoori chicken as well. Tandoori is actually a popular dish, but it's actually underrated how good tandoori chicken is. But what do people need to try? At this point, if you've had a lot of Indian food, you probably have needed to try mushroom mutter, kati rolls, dosas, from the South, different types of panipuri. Panipuri is kind of trendy right now with the little crispy balls, you poke into it, and then you put the little sauce and the beans inside. That's pretty good. I know Galabjuman, some people would debate whether that's a popular dish, but I would say most people still have not had that, that are not Indian. Dude, if you like donut holes, try Galabjuman for sure. Oh, Galabjuman is the best donut hole on earth. It's good. It's very, very sweet though. With the ginger vibe in it too. I would also say the lunch tins. The lunch tins that they carry multiple levels. I forgot the name, I'm sorry. Intensity-wise, you would want to get in some of the, maybe deeper, some of the cheese curries, the palak paneers, the dal makhani, which is more of like the bean lentil stews. They're almost like to the outside eye, they might look like a curry, but it's not.  Those are the fusion spots that they may or may not have in India, Andrew. But in India, the slider style, the Vada Pav is really, really trending. So people can either put meat in a slider, Andrew, like meat and curry, or even the lentils and potatoes, aloo, other things in a slider. And, and, and the hawk of Chinese food, Gobi Manchurian is kind of trendy right now. Oh, that's trending. That's the way he's kind of been around in certain Indian neighborhoods. There's always been a couple of restaurants, but now it's reaching the city and trying to be cool and hipster and modern and stuff. I heard it's trending in India. Yeah, over there. Andrew, Indonesia, you know, probably- Indonesia. I don't know how much people know people. I do think a lot of people eat Mi Goreng, the instant noodle, right? The brand from Indomie. They probably get beef rendang. And I noticed a lot of people really stick with beef rendang and skewers. Satay, bhabhi, satay, ayam. And I think by now, you know, because there's so much crossover between Indonesia, Malaysian, Singaporean, obviously.  And actually, I'm not going to listen. I'm not, I don't eat everything with my hands, but I think something about eating Nasi Lemak with your hands, it's kind of nice. Yeah, I actually really like the anchovies. That's my favorite way to eat it in there. Andrew, the sap buntut, which is actually an oxtail soup that's clear. I actually really like a lot of food from Borneo. Borneo Kalamantan is like one of my favorite restaurants in America. Gado Gado. I think Gado Gado is one of the best salads in the world. Wow. And what are the intense picks? I would say there's this dish called Gudeg, which is like a stewed jackfruit. And it's not necessarily too crazy, but just eating jackfruit that's been prepared like a protein, I think would be like, people would be like, whoa, dude, that's crazy. Something that you're going to be seeing that's trending more and more from Indonesian food is martabak, which is like this big, thick, super sweet cake. I had it fresh on the streets of Jakarta before. It was very, very delicious. They come in chocolate versions, all different types of food. You know what the interesting thing about martabak, Andrew? Western appeal. Yes. Because it's like a cake. Universal appeal. I mean, I think it might come from some Western influence, right? Because there was some Dutch influence in the image. However, I'm not sure, but it is delicious. Right. This tastes like there could be Nutella. Possibly. Possibly. I gotta look it up. Andrew, Kopitiams. Yes. I think the Kopitiam culture from Indonesia, Malaysia, Singapore, just Kopi, right? What's what they're calling coffee? Because I think Indonesia's number one or number two, actually coffee producer in the world. They make a lot of coffee. But it doesn't really got that. They don't get the credits. You know, people know about the Java beans, but they don't know about the Java man. Yeah. And then what's also trending is there's this Indonesian halal boba shop that's going to be opening up in New York soon, their first location. Tagook. Tagook. Moving on to Singapore and Malaysia. Probably everybody's knowing what's trending right now is the chicken rice. Yeah. And especially, obviously, the whole idea of hawker stall food has gotten so popular in the past 10 years, even starting with kind of Anthony Bourdain always talking about it, trying to bring to America. He was like the biggest Western world proponent, right? And what do you think? People got to try what? Chili crab and roti teleur. Roti teleur is a roti stuffed with eggs and onions and potentially meat. Delicious. Very delicious. You can make it a dip as well. I would say the more intense things in my opinion that you can find in America, by the way, I know there's like so many things in each village and each province, deep cut stuff on old back roads. We're not talking about those. We're talking about stuff that made it to America. Skate wings. Skate wings and stingray, it's a rarer to find stingray, but skate wings is like, people are like, ooh, what is that? And if they knew what it looked like before it was cooked, I don't know if Americans would go for it. I would say taste-wise, it's not bad, though. It kind of tastes like just a regular fish.  Yeah, I think a lot of people would stay away from it if they knew what it was. I think trending-wise, salted egg yolk everything. Whether we're talking about salted egg yolk shrimps, salted egg yolk desserts, obviously, the urban salted egg yolk chips, that's really what's coming out, I believe, of Singapore, Malaysia, where I'm just like, whoa, this is taking over the world. One more thing you gotta try of Singaporean food that is not always served at every dinner-style Singaporean restaurant is kaya toast. That's more at, you know, copy-teams and stuff like that, but you can find that. It's really good, and it's really simple. Just butter, kaya jam, and then you dip it in an egg with a little bit of soy sauce and white pepper. Oh, cut the crust off of the bread. I don't know if copy-team kaya toast is gonna take over, but I hope it does. Moving on, Andrew, Myanmar. Of course, probably most people have not even had Burmese food from Myanmar. It's not a lot of restaurants. But if they have, they probably had what? Realistically, the tea leaf salad, which is incredible, you guys gotta try it, it's an absolute banger. And probably mohinga, which is a catfish, coconut curry noodle. Yeah, and I know at a lot of Asian night markets, like at the Queens night market, they'll have like Burmese bites, it's a popular stand. They'll have this thing called keema pilata, which is kind of like a roti teleur, which is like a stuffed pancake, right? And it takes more after the scallion pancake slash roti style, where you stuff it with meat. Yeah, because if you look at Myanmar's position, Andrew, it's like equally part of the Indio sphere. And obviously, as its own local Southeast Asian culture, I have a lot of Sinosphere influence as well. Shan noodle, their Shan noodle is really good, and Burmese chicken curry is probably in my opinion, Andrew, the most underrated chicken curry in the world. Like in terms of like, nobody ever puts it on a top chicken curry list, but I'm telling you Burmese chicken curry, there's a spot in Philly called banana leaf that is 10, 12 out of 10. Andrew, I would say the more intense dishes, and if they're not really intense, I don't think Burmese food is like weird or anything. Coconut rice, coconut noodles, people are not used to eating the coconut flavor in noodle soups. Yeah, I think Burmese Myanmar food is one of those types of foods that just needs more exposure in America. So it's hard to say, oh, this is a deep cut thing that is super trendy, because you just need to try the food. Nothing's trending, right? Yeah, it's not really trending, you just, it's just trying to make its way into America. I do believe though, that more people are gonna take a look at that tea leaf salad and just be like, wow. Yo, the tea leaf salad, that's literally the only tea leaf salad that I know of from any culture. Delicious. Interesting. It is with the peanuts too. Moving on, Andrew, Bangladesh. I would say that most people, and I don't think a lot of people know a lot about Bangladesh Bangladeshi food, however, I believe somebody told me that like 60% of the Indian restaurants in America are actually run by Bengali people. However, in terms of their own native cuisine, mutton curry is probably what is probably the most known, but I would say obviously the fish dishes, and they have so many different types of fish curries or fish sauces, green ones, yellow ones, orange ones, red ones, the fish with the fish egg in the middle of the fish filet. I would say that, and then like fushka, right? Andrew, the intense choice probably from Bengali. From what you've had, because you've had Bengali food. Yeah, because I've been to Jackson Heights, I've been to Jackson Heights. I would say would be the mashed up fish in the banana leaf. Like just more intense. That doesn't sound like the most appealing right now. What immediately go for it. You take mashed fish in a banana. I would say, but what is trending, Andrew, is their Jal Murray served in a paper cup. They actually take like a newspaper or like new, and then like wrap it into a cone and they put the Jal Murray, which is almost like a crispy rice snack into it.  Yeah, dessert wise, they have Kulfi, which is kind of like a creamy, kind of ice creamy, do you see? They actually have a Kulfi boba spot in New York that is opened up by Bengali Americans. Bova de Pila? Yeah, moving on to Cambodian. Andrew, most people, if they've ever had Cambodian food, they've probably had kutil. Yes. Which is their shared dish. Obviously hutil in Vietnam as well. And a very, very delicious version though. The Cambodian version is incredible. I would say try the CBS, the Cambodian B-Sticks, which is called Chacoang. Amok is good too. I've only had it one time, but I gotta try more versions of Amok. I would say the intense version, Andrew, the intense pick of Cambodian food would probably be Prahok. Yeah. It's intense. It is indeed intense. Also, yeah. But you can eat it with steaks too. I see Chaloai always eating a very rare Cambodian steak with Prahok. It looks delicious. Trending-wise, I would say that a lot of Cambodian spices and the way they kind of just use a lot of black pepper, that's kind of trending. You know what I mean? I think a lot of Asians, they're like, oh, they're always throwing herbs and dishes and this and that, which is dope. But then what about just using some pepper too? Yeah, I think the Chinese diasporic Cambodian food is amazing. And I also think that there's just gonna be more and more people who are infusing Cambodian flavors into other food. Like, there's- She has kitchen. She has kitchen. It's delicious. Out in 6-6, hopefully it's still going. They took North Shore Hawaiian shrimp and they mixed it with Cambodian, I wanna say perhaps some Prahok.  Yeah, it's delicious. Moving on to Lao food, David. Laos. Gordon Ramsay's favorite food destination in the world right now. Yeah, I would say not that many people know about Laos food because it's a little bit similar thing as Bengalis owning Thai restaurants.  A lot of people from Laos own Thai restaurants but they don't necessarily serve a bunch of hyper-local Lao dishes at them. However, people would know the Laos sausage. Oh yeah. The number one. That is the number one sausage in the world by the way. They invented, I heard Issan, you know, Lao people invented the tamakun, the papaya salad and they have so many different versions. I think some places even serve like 20 versions of it. But people should check out the fried sticky rice even on a stick, the kaoniao. And then, oh, this one, oh, I forgot, this one from Cambodians real quick, the num pangs are really good. And it's kind of like their bun mi. Yeah, but sorry, back to Lao. Oh, a lot, kaopun, pork noodle soup. Yeah. Really, really good. And what do you think the intense pick would be from Laos? I would say there's some noodle soups. I always order this one. It's called gang na mai. That chicken, the chicken noodle soup with herbs in it. Yeah, I think to be honest, Lao food is really delicious and it has a chance to go more popular. I think it just comes from a lack of knowledge and exposure to people where they're like, I don't know what Lao food, it's like a marketing thing to me. Like Lao food is delicious though, but they got all the, they take the top 10, oh my God, it's so good. Yeah, I would say what's trending is the Lao sausages though. That's the one thing, the sak oi, that I've seen people from other Asian cultures that are nearby be like, yo, Lao's got the best one. I'm rooting for the Lao sausage to come into the game and really take over guys. I'm rooting for you. You mean the same way that like the kielbasa from Poland took over? I think it is setting the new gold standard for sausages. That's what I think personally. We gotta get the sak oi to be popping. I was gonna use the word Poland. Anyway, Nepal, Nepalese and most people, if they know anything about Nepal, obviously it's this place that sort of is like, it's part of the Chinese world, it's part of the Indian world. Nobody knows, Buddha's from Nepal. People like Nepalese momos, which is their version of the Tibetan momos, right? That's probably the only thing that some people know from Nepal, it's delicious. Some people even like them even more than like the Chinese dumplings or like soup dumplings, which it is kind of like a soup. Basically they took the Tibetan momo and then put curry on the bottom, right? Andrew, what would you say is the, some other things that people don't know about? I would say tuk pa, they don't be in the sherpa tuk pa. Yeah, yeah, I think for a lot of these cuisines like Nepal and stuff, like they definitely have some great dishes. It's just like kind of gathering it all together and doing it out at one spot. And like, you know, it is marketing and decor, of course in the city, you wanna make things cool. Chow chow, I don't think the buff meat is coming over though. All right, so something that's intense, yeah, is the yak cheese candies. We had that, I don't even think that that's like, that is pretty deep cut, you can buy those, it's like dry cheese. No, you can get them in America. Yeah, you have to get it in Jackson Heights in Queens. But, I would say trending is momos though, for sure. And you know what I've noticed though? It's like some of the young Nepalese Americans or Tibetan Americans, like they're mixing the momos with more fusion flavors that they wouldn't necessarily even have back home in the motherland. And Uzbek food, Uzbek food is trending in America right now. I would say, I mean like more than it was for sure, I gotta look at the, you know, statistics. But I would say everybody gets plov, right? Which is almost their version of a pulao or like almost fried rice. It's a mixed rice. With raisins in it and almonds. And shashlik, which is their kabab. And you know what's also very trendy is lagman. Lagman, this is also eaten. That's your intermediate pick, lagman. What would you say, Andrew? What do you like better, the soupy lagman or the fried lagman? I like the fried lagman. I like the fried lagman. It's so interesting, Andrew. It's almost like it's like a fried pasta because they do use some stir-frying techniques because like we were saying Uzbekistan is this like very interesting mix of the East. And by the way, when we say Uzbekistan, there is a lot of crossover with like ulgar food, you know? So like the mantis, samsas, it's, I don't want to say it's the same, but there is a lot of crossover. I would say intense pick. I cannot think of anything from the Uzbek food that's intense in America. I'm sure over there, I looked it up. They got narnan, which is a horse noodle, horse meat noodle, so that would be intense. But in terms of these dishes in America, it's hard to think of like, oh yo, that one's like hard to do. I think lagman, I see a lot of like YouTube videos talking about lagman because it's kind of a hand-pulled noodle as well. You're saying that's just the trending. I think it's trending that and plov. Yeah, everybody tell me what's the intense pick from Uzbekistan or that region. Last but not least, Andrew, we got Mongolia. Most people's exposure to Mongolian food, Andrew, which is part of East Asia, even though some people categorize it as part of North Asia, which is more like Siberia and stuff like that, is Mongolian grill. So let me just tell people that Mongolian grill is not authentic, but let me tell you this. You wanna hear the story of Mongolian grill, Andrew? So Mongolians, at one point during the Yuan Dynasty, took over Beijing. In Beijing, they invented this fusion cuisine that was part Chinese, part Mongolian, where they took the beef and then mixed it with a bunch of different onions and green scallions. A chef from Taiwan knew that story and he knew that recipe from Beijing. When after the war, they went back to Taiwan and then from Taiwan, he came to America and then invented Mongolian grill. So there is still some like domino linkage to the Mongolian empire. That's where the dish Mongolian beef comes from, where it's beef and green onions. Yeah, because that dish in Japan, Andrew, they just do it with lamb and they still call it Jinggis Khan grill, even in Hokkaido. They still get in credit for it. So anyway, I'm saying there's some legitimacy too. And moving on to the picks that they should try at Mongolian restaurants. And I think they're mostly in LA and Chicago. There is no Mongolian restaurants in New York. Somebody needs to do it. We gotta call one of our Mongolian friends and open up something. Who sure? Yeah. Delicious. It's like a delicious meat pocket, Andrew. Does it kind of taste like Jingdong robin? I love meat pockets. I love meat pockets. Their version of a baozi, which is called baozi, really, really good. It's almost like a Monty, baozi hybrid, Cui Van, which is their version of a Chinese stir fry noodle, really good. David, what's the intense pick? I would say for sure. And we had this in America at Adirag, Mongolian restaurant in LA, would be a stewed Goten. And then trending, probably nothing's really trending right now. But if I was to make a prediction, Andrew, I'm gonna go with the who sure. Andrew, we just went through the list for 2023. We went through the list of the things that most people are trying, but the things they could try that are delicious and that we gave them the expert pick. Let us know in the comments down below if we missed any dishes that you think people got to try from these cultures, guys. Obviously, you can call yourself a foodie or whatever, but we're just saying that these are dishes that at least you should know about. You should be aware of if you are really going to be into Asian food. And I think the whole thing about being into Asian food, it's just like the sense of pride. It's a sense of comfort. It's a sense of connection with the Pan-Asian cultures. Yeah, and I'm not saying just stop at food. It's not like, oh, I just ate a culture's food. I know everything about them. But I think that like you said, it's a great way to get your foot in the door to just understanding, I guess like, you know, this part of the world that is up and coming that very few people in the West know much about it, to be honest. Like, wouldn't you say, Andrew, the majority of people are, you know, out of low, middle, high, probably still at the low level? Yeah, but I mean, I think- There's nothing wrong with that though. I think they watch a lot of food videos and I know that not all this food is available to you, depending on where you live. Obviously, heavily more available in cities like New York and L.A. Between New York and L.A., you're probably gonna have like a little bit of everything. Yeah, Coastal City, Seattle, SF, Bay Area. Yeah, these are big immigrant areas, but yeah. Anyways, guys, let us know in the comments down below. That is our list of dishes that you got to have had or at least know about in order to call yourself an Asian foodie. Let us know what you thought of our list in the comment section below. I'm sorry if we left anything out. We don't know everything out of 10 out of 10 level. That's just our thoughts. Let us know if you agree, disagree. What else you would add? Like, subscribe, turn on your notifications. Until next time, we're the Hot Pop Boys. We out. Peace.


Welcome to the Highline College CTC Link How-To Video Series. In this video, we'll show you how to drop a class. However, before dropping a class, be sure to check with a college to see how this may impact your program of study, your financial aid, and other services that depend on your enrollment. To drop a class, log in to CTC Link and click on the Student Homepage. Then click on the Manage Classes tile. If applicable, be sure to select the college and the term for the drop. In the left navigation panel, click on Drop Classes. The Drop Classes page will display. Select the class to be dropped by clicking on the Select checkbox for the class. Once the Select box is checked, the next button will appear at the top right. Select the Next button to display the Review Classes to Drop page. Select the Drop Classes button and a Drop Confirmation box will appear. Select the Yes option and a confirmation of the drop will display. To review your classes now, select the View My Classes link on the left menu. Then select the term and college if applicable. On this page, you can select Show dropped classes and verify that the class has been dropped. Your screen will display dropped if before the 10th day since this date or withdrawn if after the date. Congratulations! You have just dropped a class using the Manage Classes tile on the Student Homepage.


Right, good morning. It's a pleasure to be here. I hope that this doesn't end up being really awful So my name is Matthew Harris. I work for Nebula. We do private clouds, hardware and magic stuff We're very very buzzword compliant. I'm not going to be talking about that We're going to go back into the past Understanding the dual-boots involves understanding a lot of awful historical detail that is In a lot of ways would possibly be better left in the midst of time, but it said we're going to go back We're going to look at the historical context We're going to try to understand why things are the way we are and I'm going to mostly ignore the technical details If you want to know about technical details of UEFI, I recommend reappraising your life choices Thinking very hard about whether this is something you really want to do and if it is go and search for Probably best one presentation I gave at LCA last year, which would give a technical introduction to UEFI So instead like I said, we're going to be looking at the historical context of secure booth and some discussion of the social issues that were involved in us coming up with solutions for dealing with a Situation where at the worst point it looked like nobody would be able to install Linux on any computers you could buy anymore, which Given that at the time I was working for a company that made money by selling Linux to be installed on computers Would have caused us certain problems Back in 2006 UEFI 2.0 was released now The thing that UEFI 2.0 is that it was the first release of UEFI despite the version number UEFI 2.0 was a follow-up to EFI 1.10 EFI was an Intel specification that Intel controlled Intel developed it to run on IA64 hardware Since IA64 hardware basically never sold They decided that it would be helpful to maybe redevelop this in such a way that could be used on consumer PCs as well and to deal with the fact that We were already starting to see limitations inherent in BIOS. So UEFI EFI turned into UEFI. UEFI is a cross vendor specification If you want to be part of the UEFI development process as a company you can sign up for free to Get certain amounts of access to the specifications and implementation if you want to contribute to it you pay $3,000 a year So by corporate specification level it's really really cheap That should tell you something about how much it usually costs to take part in standards processes So one of the things about UEFI 2.0 was that it describes a method for signing drivers when we talk about signing drivers we mean signing things we mean that we use cryptography to attach a Signature to a file and the signature is made up of a cryptographic hash of the file so you You've seen MD5 sums when you download an ISO and you verify that the file matches the MD5 sum The idea of cryptographic hash is that it's very difficult to make changes and still have the same hash So you take your driver you take a hash of it and then you encrypt that hash with a private key Then something comes along Decrypt the hash using the public key that it has Verifies that it decrypts correctly and verifies that the hash matches the driver Binary and if it does you know it hasn't been modified and you know it was signed by someone who had the private key That corresponds to the public key so UEFI 2.0 does this for drivers and that seems fine Nobody really understands why because it doesn't define any policy for verifying this it doesn't define a way for Distribution of the public keys so that you can verify that the drivers are actually authentic But hey, it's there. It defines how you Embed the signature into the binary It looks awfully like Microsoft's authenticos, which is how Microsoft signed their drivers and that's because it is in fact Microsoft's authenticos It's convenient because we already have software that deals with that Anyway, UEFI 2.2 finally describes a method for image validation. So it's no longer just limited to drivers is also Corresponds to EFI executives one of the big differences between EFI and BIOS is that instead of just writing codes directly onto your disk on EFI systems You can actually run individual applications And so we can find those in the same way as EFI drivers and it also describes methods for Distributing keys which key should be verified and how you can blacklist keys So by 2008 we're at the point where you could invent the UEFI specification And you could actually do something useful with secure boot at this point in the learnings community Those of us who are aware of the UEFI specification, which I think is basically me And a couple of people who work for Dell and some IBM and a couple of people in felt but you know there's a small number of people who are even really aware of you if I as a thing and Our interpretation of this is that this is something that someone doing say an embedded product with UEFI could make use of I find that still seems kind of weird and alien, but sure or Alternatively, it's something that the end user could set up on their machine So they could choose well I want my machine to only boot stuff signed by this company or stuff that I've signed myself We look at the specification. We've seen that the specification allows the user to install keys As long as the system is in ships with keys pre-installed the user can install their keys everything seems fine Let me go through August 2011 now this was the linus con north america in vancouver and It's the 20th anniversary of linux. Well, it wasn't actually 20th anniversary of linux. That was a bit earlier in the year But we have this party People are encouraged to turn up in either black tie or dresses Matthew Wilcox turns up in the dress and there's a certain amount of drinking This is mostly to add a little local color as opposed to any to stick to the relevance but the next day I'm sitting around on a chair in Conference and someone from cononical walks over to me and Matthew and so right that you've just joined the UEFI specification body. Have you seen this email from Microsoft? No, okay If I go and I look at the main list archives and I pull out this Documents the Microsoft have sent to the main list and the document describes the UEFI functionality that Microsoft expect to be present on all Windows 8 client systems when they're sold and one of them is that clients hardware must be UEFI must Support secure boot and must have secure boot enabled by default so out of the box The system will only boot stuff that signed and Most of the point it also says it must carry these Microsoft signing keys It does not require there's any other signing keys be carried. It doesn't the business either, but Out of the box it seems like hardware will potentially only boot windows and Yeah, at the time Seriously discovering that your entire industry is about to vanish while your Bruce Lee hung over is just very unfair The details roughly as I described you generate script graphic cache to the binary you sign the hash for the private key on boot the system verifies that the hash matches the binary and it verifies that the key that was used to sign the hash is the private half of a public key that it trusts and If that isn't true it fails to boot and there's two things they can do there It's neither pop up an error box saying that it fails to Authenticate this binary or alternatively the specification Allowed and fact encourages you to just fall back to the next thing in the boot list So if you attempt to boot off a CD that contains a either unsigned binary or a binary signed with an incorrect key It will instead just boot off hard drive Potentially without even telling you that that's why And there isn't that's fairly straightforward The idea is if your boot loads of compromising you fall back to the next thing the boot list which is with a luck some sort of recovery image The idea is that okay if the system got corrupted you automatically fall back to the recovery image Which then makes everything good for the user again And in Windows 8 this actually happens if you manage to trash your bootloader or one of the other signed components on the next boot It instead boots off the recovery image and then reinstalls large chunks of windows Makes it surprisingly difficult to get rid of windows so what's the justification for this and the answer is that Attacks are getting more sophisticated and there's a little bit of irony here when I talk about attack is getting more sophisticated Because if we go back to the early 80s the original viruses were bootsector viruses They lived in the bootloader area of floppy disks and you put that floppy disk in and it boosted that code and The virus copies itself into memory and then sat there and then whenever you put in another disk It would copy itself onto the other disk as well and it was spread that way and Once we got into operating systems that actually well once we got to the point where people didn't use floppy disks anymore Because seriously how many of you here have never used a floppy disk there must be some of you Yeah, well and just to say I was born in the 80s So I'm not particularly old but really it's the world is terrifying okay, so Attackers instead moved to infecting files directly and then you'd execute a file and it was the virus would be embedded in the file and it would then copy itself into other files and Okay, fine, but then when you execute a file The thing that executes your file is your operating system That means that your operating system has the ability to check the file before Excusing it and scan it and see whether it's got a virus infected So attackers stopped necessarily just infecting files and starts infecting drivers because if you load the driver into the kernel Then it can modify the kernel. So when the kernel is asking is this file okay? The driver can patch that check out and then they move to okay well, we're going to start putting the virus scanning in the kernel so that When you attempt to load a driver we can verify that the driver hasn't been modified so Windows on 64 bit systems has Since this requires that drivers be signed and won't let you load unsigned drivers So that's all well and good But what happens if you modify the kernel directly and the easiest way to modify the kernel directly is to modify the bootloader So when the bootloader loads the kernel it Modifies the kernel and so the kernel again thinks everything's okay, and then if you get really clever If the kernel tries to read the bootloader to verify the bootloader you give it back the correct answer If you can modify the bootloader there is no way for an operating system to verify itself There's no way to avoid Malware that's got in underneath you the only thing you can do is boost off known good media and scan your hard drive some people have got around that by putting the virus in The system BIOS there is a particularly nasty Chinese one which is able to infect some systems Some AMI BIOS is so if you take the hard drive out the new hard drive in the BIOS reinfects your hard drive This is really nasty, and it's becoming increasingly interesting partially because people now do so much more of their financial work on computers And so it's vital that we keep computer cure so that you don't have all your credit card details used to purchase weapons of mass destruction and Also because international ask an argy is increasingly interested in actually controlling people's computers because people now use their computers to build weapons of mass destruction So there's plenty of incentives for attacking that and to the operating system vendors There's plenty of incentive in preventing that so secure boot does have some justification for security It's easy to see it as a control mechanism for disrupting the market in a way unfavorable to us And I'm not going to say that Microsoft wouldn't have been entirely happy if secure boot may have been possible to install Linux But there are justifiable reasons for secure boots as well So what are our options and our options were at this point? It seems fairly limited. We could try drinking. I Already tried that it didn't seem to be working too well for me So instead I thought really maybe I should try drinking again just in case it works better this time And well after that I woke up again, and this time I felt really bad so we consider some of our other options and one of those was we could break RSA encryption and Then we'd be able to just generate a copy of Microsoft's private finding key The problem is that if we were able to do that we'd also have broken HTTPS And so the entire banking industry would be someone's unhappy with us And also there's lots of much smarter people than us already trying to do this and as far as we know failing So that didn't seem like a great opportunity either If we could prove the people's MP then yes, but in that case I would I I'm not to approve the people MP results and me becoming incredibly rich and famous as opposed to Actually, no, I don't want to get me. It's not a priority. So after that I Went back to plan a which was really through this I'm in Canada. I'm just going to drink until Canada goes away so I got back from Canada and Yeah, it'll be a couple of days to really be able to face things like sunlight again and Decided that well, you know We don't appear to have many technical options here And if you can't do something technically then it's more to start thinking about what you can do socially Red Hat's a decently signed company Which means that if I want to get anything done I'm going to need to convince multiple layers of management And that's going to be really tedious and dull and it's going to take forever and nobody's going to care that much Anyway, because right now well two problems first It wasn't an immediate problem and to this was only required for Windows to client Windows 8 client systems Not server systems and we sold many into the server market So while the Linux community in general might be interested in learning from the desktop, which I hear is coming real soon now It wasn't necessarily a red hat priority My general answer to this is when in doubt calls trouble and I have a certain amount of good track record in causing trouble Then September 2011 a couple of things happens The first is that Microsoft had their build conference and one of the things they talked about at their build conference was Secure booth and their requirements for Windows 8. So, you know at the point where Microsoft is talking about it publicly We can talk about it publicly the problem up until this point was that it has only been discussed on the ufi working group mailing list and one of the Conditions of being part of the standards bodies is normally rule one you do not talk about the context of the standards body Rule two is you have internable phone calls Go on forever so I'm going to talk about the Windows 8 requirements and I talked about how right now We potentially have this situation in which computers will be sold that will not boot Linux and While it's possible that you'll be able to disable it There's no requirement that you'll be able to disable it and this could cause problems, but you know right now This isn't happening immediately. There's still some time to work on this We can probably come up with some solutions. We're just not sure what they'll be yet And I end with it's probably not worth panicking yet, but it is worth being concerned which I thought was a sober Description of the current state of things it seems likely that we've probably be able to come some sort of compromise somehow so basically yeah, it was a don't panic and Then this happened So yeah, it's really easy to cause trouble. It's not that you just tell the world that Microsoft's about to take limits away from you and That's kind of like telling the MRA that you're going to take their guns That's slightly less violence, but only slightly The great thing is that you know, I'm just this random Linux developer person who broke this blog post And then two days later Microsoft writer responds Wow Possibly because apparently the entire world's technical press had been calling Microsoft to ask why Microsoft were going to steal Linux and Also, apparently some security agencies were also calling Microsoft asking. What's not that were they doing? How are they going to spy on their people now? so Microsoft were obliged to respond and Pass the Microsoft response was fairly straightforward. The cure boot is a UEFI protocol not a Windows 8 feature I we are implementing a cross vendor standard now this ammunition Apparently, it's usually intended to killing people apparently some people claim that there are other uses for it, but this one in specific is this NATO specification it's a standard for defining ammunition that is supposed to be interoperable between NATO members the idea being that well this way you don't have to have Multiple ammunition supplies for every different NATO member who's engaged in operation and When you're sitting there being shot at I'm sure you're really pleased that you're being shot at with a standard Wouldn't it be awful if it was just some sort of ad hoc thing? Oh damn These three bullets are all from different manufacturers and they're all different sizes Yeah Standards are not necessarily It's not very reassuring that something's a standard if somebody's pointing it at you nothing They said was that Microsoft does not mandate or control the settings on PC firmware the controller enable secure boots from any operating system Other Windows I Microsoft's will say if the system is going to boot Windows It must have this feature boot stuff But you know if you want the system to help with anything else then vendors can do whatever they want or Alternatively, it's not our fault. You know if nobody wants to make stuff to run your toy operating system it's not our fault so Microsoft's response was one of those nice completely technically accurate and Some of this ingenious responses that all companies that are worth anything are really really good at so I don't blame Microsoft with this response It's what I'd have written if I were in their position On the other hand, I have no idea how I'd get into that position. No, please be willing to give me that much responsibility for some reason So after that Again, we go back to reflecting on our options It's around then that I discovered that I'm getting strange liver pains and maybe my original set of plans is not such a great way of solving this problem so we start thinking about Things we can do that don't involve drinking and this is something of new experience for me but we're looking at Trying to come up with multiple Simultaneous strategies to work on that and we're not supposed to just run around screaming We should run around and scream very loudly But we should run around in well-defined ways and we should scream well-defined things in an attempt to continue getting enough attention that people continue putting pressure on Microsoft and also trying to come up with things that we can do that Hardware vendors would be willing to accept We started thinking about the technical options that we had and first was could be convinced vendors to ship a limit key and the idea there would be All the time we're going to ship with a Microsoft key if we have a limit key then we could sign everything with the limit key Okay, and the hardware vendors might even be willing to do that and in a lot of cases the hardware vendors just ship The stuff that the firmware vendors give them and there's only three real firmware vendors that we need to care about So they didn't seem completely implausible But it did seem likely that some number of hardware vendors would not ship a limit key And then you'd have to spend time figuring out which machines could boot Linux and which ones couldn't The other one was who would control a limit key if you have this private key That can be used to sign software and that software can then be booted on the majority of computers You suddenly become a very attractive malware target People who wants to run stuff on other people's computers without them knowing would like your key and we saw this with Stuxnet When it was used to infect a bunch of computers in Iran It took the form part of it took the form of a driver that was loaded into the Windows kernel And that was legitimately signed with a legitimate Windows hardware vendor signing key that had apparently been physically stolen from this company's offices When this key was noticed and blacklisted suddenly such that started being signed with a key from the hardware company Located next door to the first hardware company Now we can make assumptions here like for instance apparently there are companies who have Intelligence agencies who are capable of breaking into buildings and stealing secret keys and Then if one of these keys is compromised you have to revoke the key and then anything signs with that key stops boosting So we needed to find someone who was willing and able to maintain a Linux key and Who could maintain this efficiently securely that if Mossad turned up? That's not really me We couldn't really think of anyone who did seem like a good fit for dealing with Israeli intelligence so Allegedly, I should say I don't think it's ever been proven that it was Israeli intelligence that were responsible for Stuxnet Is anyone here working for Israeli intelligence Okay, so even then if we could securely maintain a Linux key Perhaps we could give an incredible amount of money to an existing security company Maybe we could go to Verisign hand them a large check and say, okay You should sign things with this key and we trust you to keep it securely Who would get access to that so easy to say well red hat canonical Susan so I should have access Should Debian well, okay, maybe Debian should okay. How about Mins or any of these small Specific Linux distributions that are intended to Translate Linux into this one dialect that's only spoken by 15 people in a village that has no roads But these people exist they should be able to run Linux It would be nice if they could continue running Linux, but okay fine We say that the person writing their distribution for 15 people can have their stuff signed How do we determine whether someone is actually writing a list distribution for 15 people in the village or? Alternatively is actually just writing malware to Attack more career or whatever Getting this wrong is a problem and again results in your key being revoked Anthony. Don't stop spooking. There's Basically every single thing that can go wrong results in nobody can boot Linux anymore There's a lot of things that can go wrong. Then what's the licensing issues? if we find something and People can even get source code rebuild it. They can't sign it themselves if that's a licensing problem so ultimately If a limits key is not a great idea How about if we just have a red hat key and then who would get access to the red hat key Well the PR issues of having a red hat key be if red hats went to the hardware vendors and said hey hardware vendors Here's the key that you need for people to be able to install red hat fine red hat continues having a business model What's about Debian and then what's the PR issues of coming up with a solution that means that you can install red hats and not Debian How about if we could get access to Microsoft key? And if we get access to Microsoft key would other people also be able to get access to Microsoft key All the PR issues of working with Microsoft be again. This seems like a slippery slope if Red hats they could get stuff signed by Microsoft, but Mint couldn't That would again seem like red hat being the big lens company is just making life miserable for everybody else So set back how about if we could avoid having pre-installed keys entirely if instead of this idea that the machines Would have to ship with keys installed because we work out a way for when you go to install your offering system you also install a new signing key and if we can define the mechanism for that can we also come up with a A bunch of vendors who are willing to implement this and the answers to that were I'll get to that We could elderly have just given up on Linux and gone back to engage in the pastoral experience And that was pretty tempting at this point So late 2011 red hats canonical are now both fairly active in the UFI specification community With hindsight, we were possibly a few years late to this But you live and learn and we made some proposals require Regarding key management, so the idea is basically that if you put in your CD Don't have a defined mechanism for having a key in a specific location and then it can install a key There were reasonable objections to this based on security and the idea that you if I is not intended to define a policy for user interaction, it's you can't Specify that there must be a button that you can say okay to in UFI and even if you could then which language would it be written in At the time it was irritating to put forward what did we thought was the best compromise proposal and has pushed back with hindsight I This was as far as the hardware vendors and other obvious vendors concerned not really practical and I'm okay with that so Yeah, this is actually some of 2011, but I thought that interrupting my presentation to fix my slides before you saw this slide would be a little rude So pretend that says December 2011 Microsoft update their Windows 8 requirements And first thing they add is that on exit 6 hardware. That's strictly speaking Windows 8 is exit 6 only Arm hardware is Windows RT. So when I say Windows 8 hardware, I'm talking about exit 6 But it must provide the mechanism to disable secure boot and there must be a mechanism for users to install their own keys The precise implementation details of those vary. So when we talk about did we win? Firstly, we're now at a point where we can expect that exit 6 hardware can all have learned to install But there's no stands like way of handling key management on some systems there's a install new key UI option in the firmware and on some systems that requires you to have a binary encoded DER file containing the public key and on other systems it requires it to be a already formatted UEFI variable dump and In some cases these two things are shipped by the same vendor in different product ranges on other machines you have to clear the Key database entirely and then in software you can install new keys and then re-enable secure boot There's no way of handling this for remote deployments Even if you can on your desktop install a new key before you install Linux if you've just wrecked 2000 servers the last thing you want to do is plug a keyboard and mouse into every single one of them so that you can Install a key off a USB stick And it's going to be a documentation nightmare. There was no way that we could tell people Okay, so to install Linux you put the CD in and then you go into the firmware And then you find an option that sounds probably something like secure boot and Then you disable it and if it pops up a big box saying by doing this you're sending your credit card details to the entire universe You should say yeah, it's all good And this didn't seem like a particularly attractive option either but you know at least we weren't dead now We had some options so in February 2012 we head off to Sunnyvale and Sunnyvale is Where and you're based and it's also where we had the UEFI plug fest that spring Sunnyvale makes lax seem like a really happening awesome place and Yeah, spring for you tell you if I plug fest So this is our first opportunity for face-to-face interaction with a lot of these firmware vendors a lot of the hardware vendors and also with Microsoft and we came out this with some level of success. We had we had a Commitment from Microsoft that they would provide open access to the UEFI signing service and that you know as long as the things you sign aren't used to attack Windows and if they are used to attack Windows then The signature might be revoked and then you'll have to produce new media and everything so And this is what we would expect Microsoft to do with their own stuff if it were compromised in some way so This Microsoft can revoke your signature thing. It's fair enough Microsoft are effectively these difficult authorities for this industry because they kind of own this industry and If they're assigned lost control of a key if a very fine customer lost control of a key You would expect very sign to revoke that key even if it caused that customer problems So if a red SSL key was somehow used to attack other systems, we would expect very fine to revoke that key Fair enough So does this mean that everything solved and of course no it doesn't mean that anything solved because otherwise this would be the end of presentation and I would Have to sing and dance for 10 minutes or so to make up the time Licenses Standard at this point Linux bootloader is grub 2 Reason this is that grub 1 was really really awful and the EFI code for it was even worse And anyone that says well you should have just stuck with grub 1 and continue maintaining that is welcome to do so themselves Anyway, gplv3 everybody knows that gplv3 requires you to reach your finding keys One of the things that gplv3 was it had this anti keyboardization clause the idea that gplv3 material must be replaceable by the end user in order to Conforms the license to avoid situations where you sell something that contains free software and they've got the source code But they can't Build anything that will run on that system Turns out that everyone is completely wrong on this point So gplv3 says this You can fall asleep now But basically what this means is if it's possible to replace it you don't need to ship the keys and if the user can if there's mechanism for the user to install their own keys and Then install something signed with their keys. That's fine It doesn't need to be possible for them to build something with your keys as long as there's way of installing their own keys Ultimately, if it's not a user product, you don't need to ship the keys and a user product must be a physical object That's basically intended for home use Software is not to use a product if you sold a computer with learnings pre-installed. This might be a problem If you just sell Linux, it's not so we were fine red hat is not in the hardware industry Come on the court might be a little more upset about this potentially but even though the first option seemed to satisfy that and We went and asked copyright holders to make sure copyright holds are okay with this because when you're talking about whether you're conforming to the license or something there's two main Concerns the first is what was the intent of the copyright holder when they released on this license and also what was the intent of the license author and If you end up in the court case here the opinions of both may be relevant if there's a well-understood license then The opinions of the license holder are probably more important than the opinions of the copyright holders If it's in other circumstances though if the copyright holder made their interpretation of the license clear in advance Then the copyright holds interpretation may be more of them than the license authors Anyway, we went to copyright holders and we went to the license authors and we said okay So this conforms to your understanding the license and this was made easier in the case of grub 2 because they're actually the same people the Free software foundation is the copyright holder of grub 2 and the free software foundation wrote the gpl v3 So we asked and we had a nice conversation. We explained how users we explained what users would have to do in order to be able to run modified versions of software we explained that It would be possible for the user to Install their own keys even if they might have to jump through a few hoops to do so and they would then be able to Sign the object with their keys and they would be able to build modified versions and Sure everybody assumed that that met the license so Speak to your copyright holders speak to your license authors They will give you answers if you don't like the answers then get your lawyers to speak to them again and But we got the answer we wanted the first time so we didn't have to worry about that User control is important user freedoms important We want users to be able to perform key management and we wanted it to be possible for distributions to be able to do things Even without having to go to Microsoft themselves because the Microsoft thing still involves you having to pay $99 to Symantec Symantec then call you up to make sure that you're really you Which seems like a low bar. Yeah, my name is John Malkovich and here's my phone number They call this phone number. Is this John Malkovich? Yes. Good. Thanks identity verified But that's still a reasonable bar and also Symantec won't sell these signing keys if you happen to be living in a Nation that the US government submits them from doing business with So that might have been a problem We came the idea of a machine operating key ends up being mooses and this is Possible because the ui specification allows you to limit Variable access to the pre-boost environment you can create a variable that can only be accessed in the firmware the operating system once running cannot Create or modify these variables and so keys stored in these can't be modified by the running operating system And key installation can then be limited to physically present users because the firmware environments only available to physically present users and The idea here is that you can just pop up an interface that asks users to install keys and Then your bootloader can trust those keys So the bootloader has to be signed by Microsoft but the bootloader can then let you install additional keys and Those additional keys can be used to boot grub or the kernel or whatever So Susan came up with this idea wrote the codes contributed and we merged it into our bootloader This ends up with a reasonable measure of success a button to 1210 was released in October with secure boot support it does not have the Machine operator key support so oven to 1210 doesn't let you install your own keys 30 no for should do for Dora team believe in January lets the user modify their own keys oven to 1204 to now also has support for this Several smaller distributions have picked up on this and is drifting stuff the next version of open Susan should We assume that the next version of rail and so on will Debian. I honestly don't know about I think that's the longer discussion in Debian But we also made available a pre-fun shim and the idea here is that it's a binary bootloader that I wrote that contains the Suzer MLK codes and it's signed by Microsoft But it doesn't have any keys in it So you boot this and by default it will then refuse to boot anything else you boot this It pops up a menu saying that I didn't trust what you just asked me to run and you can then either enroll the hash of the Binary you wanted to run or you can install a key off CD and the advantage of this is that they're Distributions can just take this binary and put this on their install media And then they can generate their own key and they can put the key on there They don't have to deal with Microsoft There's no risk of revocation because this key is not horse massively trusted by hardware so they don't have to worry about it being used as a malware vector and it seems like Possibly a reasonable compromise some of you may disagree That's great. If we have that discussion when I've left Ideally, that'd be lovely As what we have left third-party modules the Lent Foundation Okay, so past your boot is really that you need to have a completely secure stack everything running in kernel space must effectively Detrusted because otherwise you can just turn the kernel into a bootloader The kernel has this feature called K exec that lets the kernel boot Linux It's not too difficult to let this to adapt this so that the kernel will instead boot windows It's completely different. Somebody's already written an implementation to allow the windows kernel to boot Linux This is not a complicated problem And so if your signed kernel will boot unsigned codes Then you've effectively just written a signed bootloader that will boot malware So ideally you have signed kernel modules, but then if you have signed kernel modules You presumably don't give your key to other companies And then how do you deal with the fact that there are a bunch of vendors who want to ship? Signed kernel modules. Sorry. They want to ship kernel modules themselves As far as I was concerned these companies work They should just get their codes into the upstream kernel But apparently many of them are unenthusiastic about that for various reasons so we went to the Lent Foundation, the Lent Foundation often sets up a working group to look at this problem and then not much happens That's an ideal So we came up with a couple of ideas piece of Jones a red hat came up the first basic idea, which is that You could take a vendor. So let's call a Nvidia a made up third-party hardware vendor Could generate a key and they could embed that key within a pecoff binary And then they could give that pecoff binary to Microsoft and Microsoft was through their signing service and they come up with a signed binary and Then the kernel would be able to verify This binary because it would be signed by a key that the kernel trust because the kernel trust saw the keys this renewal system firmware and your system firmware probably contains the Microsoft key and Then it would extract the key from inside this binary and then also trust that key So you'd be able to say well, I trust this key because it is in an object that was signed by a Company whose key I already trust Linus was not particularly enthusiastic about this as anyone who saw the discussion last week be aware Yeah Apparently since we have a kid's track. I'm not actually able to repeat anything that Linus said So Linus's proposal was very straightforward It's you do things before you get this binary sign by Microsoft and then you extract the key from that and you You know that you can trust that key because it's in an object that's fine I'm I'm I was key you take that key out And then you sign it and then you sign it with a key that's kernel trust And that requires a trusted body to perform this role right now We don't have one and it requires a trusted key in the kernel by default and that would be possibly a problem as well But you know, maybe we can get something there. It's not a solved problem. I'll be lent foundation while we were by we I mean Red Hat, Canonical, Suzer and a couple of other contributors were working on producing the shimloader That's now used by the majority of distributions The lent foundation were writing their own bootloader and it was initially intense just be a simple physical present test So you would boot it and it would boot anything as long as you pressed Y first And obviously this wasn't supposed to be an enterprise ready solution But it was intended to be straightforward. It would let people test What they were doing, but it kind of had some scope creeps since then it now supports enrolling hashes. There's a fair amount of Functional overlap with shim the two Can be used for many of the same things, but there's a small functionality the lent foundation loader has that shim doesn't There's some functionality that shim has that the lent foundation loader doesn't the aim is to merge the two The only real problem we had here was that the lent foundation solution was perceived by many people and basically the entire Technology press as being the official solution because the lent foundation has the word Linux in their company name Not coming my name Which has led to a certain mass confusion because there was a lot of oh well now Linux will be able to boot on Windows 8 systems Well, I've been doing that for some time. We shipped a bunch of operating systems that can already do that fine We'll most them this one will go away. There'll be no more confusion Except for all the distributions that then fork it with different functionality Anyway, where'd we end up? So we're now to point where you can install the distributions on systems without the same link to your booth or hands change any other firmware settings So from the original perspective of it should be possible to install Linux without any more difficulty than before we got there If you're a smaller distribution or if you're an end user who wants to build your own kernels You can install and manage your own keys So we've maintained the user freedom that we were concerned about losing and marks of the filter is a trust Which is not perhaps ideal You are guaranteed to be able to define your own user trust if you want on your systems But that involves a certain amount of manual work. You need to remove all the keys You need to enroll your own keys and then all your hardware drivers are still signed by Microsoft So you need to figure out somewhere around that otherwise you don't get any graphics or USB while you're losing So what do we learn? So even commercial distributions can work well together Red Hat, Canonical and through the all cooperated on coming up with a solution that satisfies all their needs Different companies contributed different parts to it, but we ended up with a single code base that everybody's playing on shipping. So awesome We can apparently even work with Microsoft. I Visited them. I'm here. I was not brutally murdered We gained Improve communication with vendors We now have channels of communication between loans vendors and firmware vendors that we didn't have before because we're operating within These standards bodies we now actually see system vendors. We see the firmware vendors We can talk to them when we find issues We know who to talk to they know that there are people in the list community that they can talk to if they find problems That's better Even when things look bad we can come up with solutions. They're not always ideal solutions. There are occasionally trade-offs, but overall Compared to the point less than 18 months ago where we thought that the age of Linux being installable on consumer hardware might be over This is massively better than that things have changed a little Most users are probably not going to notice experienced users are going to be able to maintain their freedoms and We did it without any lawsuits Thank you. I think we've signed for a couple of questions It is that why did we get to the point where once we came up with the solution know the thing to be concerned about the fact Microsoft has done this in the first place and the answer is Well, this is a capitalist society Microsoft have a great deal of money and therefore they get to do what they want The idea that we might want Microsoft to behave in a socially responsible manner sounds awfully like communism to me So right, it's just the narrative is well, okay, if Microsoft to try and use their power to actually put someone out of business That's considered as a bad thing if Microsoft compromise just enough that other people can remain in business Then who cares that's just how people do business I'm not a great fan of that but that's basically how things work this impact DKM Yes, the idea if you want to build if you have secure boot enables And if you want to build your own third-party modules say using DKMS those modules will not load unless they're signed by a trusted key and the only There are two ways around that the first is that the shimloader actually has an option where you can disable Enforcement so you type in the command you reboot the machine the next time shim comes up.  You lose the security benefits, but you can sign your own stuff The alternative is that you generate your own key you enroll your own key and some of the patches DKMS such that if there's a key There it'll sign stuff with that key and then everything works Good time for open source Hardware, yeah, seriously deep problem here is if Microsoft didn't dominate the Hardware scene then Microsoft wouldn't be able to do this Long term the only way of preventing this kind of thing happening again is to ensure that Microsoft don't have that level of power Back what can you use KXX right now? No KXX disabled if you're in a security environments if you're using the pack set that we suggest that people use There's ongoing work to come up with solutions for that once I get those Microsoft key well Yeah, I Just think we have to assume that they'll use it responsibly so the specifications act to begin with we had the problem that it was only possible to Find a binary with a single key So if you find your binary with a Microsoft key Then it wouldn't boot on a system that had some alternative roots of trust the specification That's being worked on Hey, I can't really talk about I'm no longer part of the company that is working on this stuff But I also can't really talk about stuff that's going on within the working groups, but There's interest in fixing that problem. So to their red hat still is involved in this We can think of red hat as a faceless corporate entity, but honestly red hat is committed to user freedom I don't think red hat would Stop fighting the user freedom just because I'm not working there anymore I think that would be kind of awful situation other length vendors should also get involved with this I believe the lengths foundation is looking at trying to be involved in the standards process potentially If the lowest foundations able to get involved then perhaps Long-term organizations like free software foundation may be able to I think there's some issues with the UFI bylaws to make it difficult to non-profits to Be in there, but sure So unfortunately, I think we're basically out of time What's our arm hardware the situation is that arm hardware? Sold with Windows RT is required to be locked down and must not have an option to use it to disable this This is a gross affront to user freedom It's also a gross affront to user freedom that the market appears completely happy with because the vast majority of arm hardware Sold comes with locked bootloaders. If you buy an arm phone Typically, you can't install your own operating system until somebody found a way of breaking the bootloader iPads will not run archery software You need to find the entire jail breaking reasoning thing for iPad. That's basically the idea that the iPad can run something that isn't Apple authorized operating system images and Apple's getting increasingly good at preventing that from happening I think the likelihood is that the first generation Windows RT hardware will probably all end up being broken one way or another and there will be Ways for people to install their own stuff on this long term they're going to be right house to prevent that and We shouldn't stand for that But we shouldn't just criticize Microsoft for that Everybody in the industry is doing it and we need to focus on the fact that there's an industry-wide issue that Devices as opposed to computers are Lockable and that's fine with people We need a cultural shift there. We need to target Microsoft that but we also need to target Apple We need to target HTC Sony all these companies that ship devices where you can't modify


Nice camera DJI too. So what I'm going to talk about here is my Mercedes Sprinter van conversion This is Paul Carlson small workshop guy So I picked up this Mercedes Sprinter on August 1st 2021 and Then I got busy doing some caretaking for my wife who did pass away from cancer in September of 2021 I'm back at working on the van now. So here's some things that I have done On the exterior, I used a company called levity vans to put in a big window in the passenger side of the Oh, what do you call it the sliding door and that is a vented window meaning that the bottom half of it Can crank out and allow some ventilation. I also Used that same van company levity vans in Santa Cruz, California To install some flair space the flares are from flair space and What they do is allow you to add an extra couple of inches in the width of the upper back part of the van and Then with that done you can sleep what we call east west instead of north south and So I've got that on both sides and then those have vented windows available in those as well and then on the back of the van I Had the same company I Levity vans put in two big windows in the back so I could see cars and traffic behind me and things and Then we also installed the owl OWL ladder and Move the spare tire from underneath the van to a spare tire holder on there And let's go around to the other side and I'll show you the flares on this side so in addition Up on the exterior up on the top. I've got a large 385 watt Solar panel one single panel and a max air fan A vent and so that's the exterior and that's all I'm going to do Perhaps I'm going to put in some rhino Black covering similar to the black that's there already But put that on there and then over the wheel wells The reason I had a company called levity vans do all of that exterior work. It's because I'm in a homeowner's Situation and we're not allowed under our CC and ours To do work on any kind of automobiles in our own driveways So I didn't want to violate those rules. So I had all of those things done In addition what I've had done so far is to put in an Upgraded stereo system. This was a basic basic brand new 2021 van and so I Hired our local audio company to install my Apple play navigation system and upgraded speakers on both sides Including a big old woofer Back behind the driver's seat In addition We have installed Swivels on the passenger side so that that can be used to work on computers and stuff in the cabin of The van when it's finished and you can see that there's a heater Underneath the passenger seat that's called an s-bar heater and that connects to The diesel fuel take and runs off of diesel and a very small electrical load In addition what we have done on the inside is put sound deadening Panels in all of the cavities so that the panels wouldn't rattle and then we also Oh Excuse my coughing we also have put almost all of the Insulation In all of the cavities as well So now once the windows have been added I'm gonna come back and finish up all the insulation and here you can see the fan So the next step is to Do the pre-wiring so I'm gonna run wires everywhere In order to get ready to build an electrical cabinet down over that wheel well and then we'll be working on the wall panels and paneling those flare space and Then putting in all the lithium batteries and all of the electrical and Then we'll build a platform bed the kitchen pod and Other items such as the nature's head toilet Anyway, I'm going to stop because I'm coughing So that is where we are on the van Right now and this is January 2022 Gonna finish the rest of my van myself building my cabinets out of 80 20 aluminum extrusion and then facing that with You know different laminate covered plywood so it looks really really nice and on the ceiling. I'm probably gonna do tongue tongue and groove ship lack a type of boards to go across there It's gonna be fun I'm looking forward to hitting the road and going out and seeing some of them my friends. I've made in doing virtual workshop tours That's it for now Small workshop guy signing off


Avoidance behavior can be acquired in the absence of a signal. Suppose the experimenter arranges a schedule in which a bright light turns on for 5 seconds every 30 seconds, and a response or some number of responses at any time during the interval resets the clock to zero. This type of arrangement is known as free-operate avoidance. Why? Because the avoidance behavior is free to occur at any time and will delay the presentation of the light. And ladies and gentlemen, we saved up for a year for that prop for a 45-second video. Free-operate avoidance!


I started a few years ago not even knowing what was DHS-2. I have been looking for projects with impact. I was really impressed with the work that DHS-2 and where it does it. DHS-2 is something which is revolutionizing their ministries. As an Android developer I think the DHS-2 is a very attractive project. It really has an impact in real world, in people. It's been something that fulfilled myself working with people from all around the world, creating a product that is beyond their own scope. I think many of us that work here, we have a sense that we belong to a very important project, something that is improving people's lives. That's pretty great to be able to come to the office every day and work on something like that. I joined DHS-2 team back in 2016 as a core Java developer. In 2018 I got a chance to visit Pakistan with our implementation team for a scoping mission. I had the luxury to actually get more into the field and try to understand what the requirement is. We are developing a solution that is going to be used in a very resource-constrained environment. Technology-wise it's similar to what I have done before, but I think what's interesting that I didn't experience before, that we have to really think about the end-user, you have to think about where they have very low internet connectivity or where we have to be offline first, we have to optimize with how we are using the bandwidth. So these are all things that really push the technology stack, which reacts and push TypeScript, JavaScript to its limit. During the Android team we are moving and as a developer you always have to be learning new skills. Its open sourcedness is one of the key for those countries to adopt it and not just adopt it, they are free to develop their own customized app on top of DHS-2 APIs. And when the whole community starts working on these customized apps, then you really see a very interesting project which is developed by the community, not by us. So I'm very happy that we have a very cool and big group of people. We are super close even if we don't live together and we don't see in person. We are a very horizontal team, we discuss almost everything, we do proposals and we try to challenge them and then we take actions of it. We give you a chance to discuss different approaches with different developers. When I was in university then our professor used to call that two persons can never use the same logic to write one program. So having different minds, discussing with them, different approaches comes up and that's actually where you can learn a lot. What I love about the DHS project is that it's beyond yourself. The goal is not for you, it's helping other people. For other developers I would say check it out. We're building a framework that people can use in all kinds of ways which is very interesting technically, very challenging to build as well. It's very fun to develop from just a pure developer point of view. If you're not involved yet then now's a great time to come and be part of something that's much bigger. It's like a life-changing experience.