There we go. Just applying a little sunscreen, sunblock, whatever you like to call it. It is nice and Denver today. And okay, we are going to hop into the gym here in a minute. First I'm going to go get my run in and then head on in. Now my marathon is a little under seven weeks away. It's crazy. It's like, it's not that far away. But if you've been watching the vlog now for two to three months, you know that I've been doing a lot of lifting, but it's more bought. It's been body weight lifting. So just lifting my own body weight in order to get ready to get ready. So I don't just jump into lifting like doing squats, which I will do today for you. It's been a process of building the strength quote unquote naturally with my body weight so that I can arrive at this point right now where I can begin to add extra weight just to build the strength of everything, my hips, my knees, like the muscles around my knees, my calves, the suppleness of my ankles and all that good stuff in and upper body. We're going to do upper body as well today. So this is all about running faster. All right, let's go run. Come on. Oh, good times. Not in the studio, in the parking lot. There you have it. Nice long run, aerobic efforts in the bank. And for this how to run faster business, last year, I ran two or three 5ks just really on a whim, no speed training. And I ran, I think my fastest was 15, like 46, 47 or right around there. So stay tuned. I'm doing the cookie chase 5k this Sunday.  If you have a coach, you got to listen to your body, you know, that sensory data, I will do my best to communicate with you tips and tricks and ideas that I use. But the proof is in the pudding, right? So let's see what happens this Sunday at the 5k. And again, I've done one track session, but I'm going to be curious to see based on the aerobic base that I've built a little bit of strength training, what happens at the 5k. Okay, one last thing. I think I've published four or five videos now vlogs about how to run faster. I've decided to create a brand new playlist upper right hand corner. If you're really curious about aerobic development, uphill running, red blood cells, all of that base training that goes into running faster, in my opinion, go check it out upper right hand corner. This video about strength training will end up in that playlist. And at some point, at some point, I will make better videos about how to run faster. I just didn't realize that the enthusiasm would be there at such a high level for these types of vlogs from all of you. But you guys rock and you want to chase down PRs. And so I'm going to continue to make videos that you want to watch and where you get value. Alright, enough talking. Let's go get down to business. And we're back from the gym back in the studio. A box arrived today. Come back tomorrow. I will open this box tomorrow. It's a company, a running shoe brand. I've never, ever, I've never even held one in my hands before. You know who you are who sent this to me. Thank you so much. Okay, today, we are talking about how to run faster. My strength training philosophy and therefore over the next five to six minutes, you're going to see on your screen lifts that I do. But this is not an extensive list. I promise I'll get back in the gym next week and I'll film a more detailed update to this video today. I want to focus more so on the philosophy. Okay, let's jump into it. Point number one. Runners are strange. We are strange people. Nobody else. Okay, I'm over exaggerating, but many people around you in the gym, if you're lifting on a consistent basis, most of those folks are not going out and running 30, 40, 80, 100 miles a week. So you got to think about that as a runner. Think about the pounding that you are putting into your legs and take that into account when you are developing a lifting program for your body and especially for your lower body. Okay, so that's point number one. Don't forget, we runners, we are strange. We put a lot of pounding into our legs and therefore it leads right into point number two. Lifting for me, strength training for me is supplemental. What do I mean by that? I want to make sure when I leave the gym, my legs have gotten a good workout, but if I'm leaving the gym dead tired to the point where I know the next morning I'm going to be so sore, so tired, I'm not going to be able to pick up my aerobic development the next day and the next day and the next day, then I frankly, I'm not going to do it. I'm not going to do it. And so this is just my strategy. I emphasize way, way more so aerobic development, cadence over strength training. It's good. Okay. Strength training is critical. It's so important for runners, but it is not the end all be all. It is supplemental in my overall training philosophy and point number three. I'm a huge fan, huge fan of isolation, lifting, meaning I'm working on one leg and then I'm working on the other leg. I'm working on one foot. I'm working on the other foot. I'm working on one arm and then I'm working on the other arm. That's why I was doing the dumbbells with dumbbells instead of a bar. So doing the bench press. I like to isolate different parts of the body. So one leg, one leg, one arm, one arm. Why? My left leg is weak. My left foot is weak. It's a major issue, everybody. It is a major issue. I need to focus more, be honest to my training and focus more so on isolating my left leg especially. It's just not pulling the weight literally. Like you've got your torso and then you've got your legs. Every single stride you take, your leg is propelling you for your legs. Sorry. No, your leg is propelling you forward and I know they're working together. Like your right and the left, they're working together. But at the same time, imagine if you could get just 3%, maybe 5% more propulsion forward, more strength, more... Yeah, I'll just say propulsion forward from your weak leg, which for me is definitely my left leg. So anyway, that's point number three. I focus on isolation lifting. And point number four in my strength training philosophy, straightforward. What do I mean by that? Everything I do in the gym, I'm trying to envision. How is this lift helping me go straightforward? How is it helping my gait cycle, my foot strike, push me down the road, down the track, down the trail as straight as possible without losing any energy, okay? Without twisting my body. Like I just want to go straight down the track. Now, as you see on the treadmill right now, I do fire different parts, different muscles and tendons and ligaments as well. That's why I do some ankle rotations. I get on the treadmill and go side to side because that's important as well, those stabilizing muscles. But overall, I'm concerned most of all about how do I create resistance in my lifting to push me straightforward as fast as possible because that's what we want to do as runners. We want to run as fast as possible as straight. We're not soccer players. I would have no clue how to coach or train a soccer player or a basketball player or a hockey player in lifting because they are cutting, they're moving, they're jump, like they're doing everything totally different from us distance runners. We are going boom, boom, boom down the track. And fifth and final point for my training philosophy when it comes to the gym, comes to strength. Here we go. You're ready for this? Channel your inner ballerina. That's right. Channel your inner ballerina. If there's anyone out there who's a former ballerina and is now a runner, let us know down in the comments. Listen to this. Hear me out. Basically, I love strengthening my quads. That's why I run up in the hills. I love strengthening my hamstrings, my calves. That's why I do the calf raises. But I think as runners, we underestimate the power that is awaiting us in our ankles. That's right. Our ankles, our Achilles tendon, and yes, our foot muscles. I really think that combination of where your foot is striking the ground and the ability to propel yourself forward. Just another half an inch and a half an inch further and a half an inch further. Like that is where we're going to get faster. Like a ballerina, like go watch some ballerinas on YouTube. Like it's crazy. The amount of strength and suppleness that they have in their ankles and how do runners run faster? Increasing our stride length and our cadence. Our cadence. So how fast can we move through the gate cycle? And can we strengthen, can we lengthen our stride just a half an inch or three quarters of an inch? Just a little teeny tiny bit. That is how we're going to run faster. Obviously, we have to take into consideration the aerobic development as well. And again, I love working the big muscles in our legs, but we cannot forget about the joints, the tendons, the suppleness that is awaiting us in our ankles specifically. Like I just, the more that I run, the more I'm realizing if I focus on my foot strike, there's a lot of power there that is lying dormant because I'm not firing the correct muscles in my ankles and my feet to make sure I'm getting the most out of each foot strike down the road, down the track, et cetera, et cetera. So in conclusion, is strength training important for running faster? I absolutely, absolutely it is. It's oh, it's running is all about walking the line. I say that a lot and I'm realizing like you want to you want to get strong, but you don't want to bulk up, right? It's walking that line. You want to work your muscle groups, but you also in my opinion, you want to focus on those tendons and those ankles and those those just those joints that are maybe overlooked in some strength training circles. Okay. And then also, I know you're busy, you've got work, you've got family life, you've got school. I personally, in this training block, I'm going to the gym once a week. It's all I can do. It's all I've got time for. I think once a week is beautiful. If you can do twice a week, maybe one day is a little harder than the other. The second day, maybe is just a little more massage and like stretching and making sure your body's feeling good, especially if you're at high volume and high intensity. So anyway, I think once a week is perfect for runners and especially long distance runners, 800 meter runners, 1500 meter runners, you probably need a little bit more power in from the gym. But for the longer stuff, I think once a week is a great place to start. Alright, keyword is strength. And again, we will continue this discussion. Again, upper right hand corner for that how to run faster playlist. And I'm just going to continue to add to it because it seems like a lot of people are interested in these topics. And we're just scratching the surface of strength training. We'll continue to dig into this moving forward. Alright, question of the day. Do you go to the gym? Or do you lift at your house? If so, how often? And what is your strength training philosophy? And if you don't go to the gym, it's all good. It's all good. Like I know you're busy. And I know I know you're putting in work out on the roads like you're working hard in your running. And that's a great place to start. But I think to run faster, it really can help to get to the gym once a week. Alright, we're gonna call it there. What a great day. Thanks for coming along my little workout routine. See beauty, work hard and love each other. Thank you for spreading the word by the way about the channel. I don't know what's going on. We are going forward like in amazing ways that I never thought frankly, whatever happened. So it's happening. Thanks to all of you just wanted to mention that. See you tomorrow.


Hello and welcome to this session. In this session, we will discuss the graphs of the inverse trigonometric functions, trigonometric functions and cot-inverse x. First of all, let us discuss the graph of the inverse x. Now, the trigonometric functions are in general not 1, 1, and 2. Therefore, their inverses do not exist, but if we restrict their domains, then they become 1, 1, and 2, and hence we can have their inverses. Now, let us define a function f from set of real numbers r to the open interval minus pi by 2 to pi by 2 by f of x is equal to restricted for domain to open interval minus pi by 2 to pi by 2. Therefore, the domain is a set of real numbers, that is, the possible values of x for the graph of the inverse x and the inverse x is defined in the open interval minus infinity to infinity, so we can write that the domain of the inverse x is the open interval minus infinity to infinity and the range of term inverse x is the written interval minus pi by 2 to pi by 2. Now, let y is equal to f of x is equal to term inverse x, that is, let y is equal to term inverse x. Now, let us draw the graph of y is equal to term inverse x. Now, y is equal to term inverse x implies x is equal to term y. Now, for the different values of x and y, first of all, let us draw a table. Now, we have x is equal to term y, so for y is equal to minus pi by 3, x is equal to term minus pi by 3, which is equal to minus rule 3, which is equal to minus 1.73. Therefore, for y is equal to minus pi by 3, minus 1.73. And now, for y is equal to minus pi by 4, which is equal to minus 1. So, for y is equal to minus pi by 4, x is equal to minus 1 to minus pi by 6, x is equal to term of minus pi by 6, which is equal to minus 0.58. So, for y is equal to minus pi by 4 to minus 0.5 is equal to 0. We are getting x is equal to term 0, which is 0. So, for y is equal to 0, x is equal to 0. Then, for y is equal to pi by 6, x is equal to 1 by rule 3, which is equal to 0.58. So, for y is equal to pi by 6, x is equal to 0.58. And then, for y is equal to pi by 4, which is 1. So, for y is equal to pi by 4, x is equal to 1. And now, for y is equal to pi by 3, which is equal to rule 3, which is equal to 1.73. So, for y is equal to pi by 3, x is equal to 1.73. Now, for drawing the graph of y is equal to 10 in the various values of x. And here, y is equal to 10 inverse m. Now, in the graph, we have taken 10 small divisions is equal to 1 along the x-axis. Large divisions is equal to pi by 6 across point on the graph, that is minus 1.70 minus pi by 3 on the graph. So, this is the required point on the graph. Now, we will plot the next point, that is minus 1. Now, this is the required point on the graph. We will plot this on the graph. So, we have plotted all the points on the graph. Now, on joining all these points, we are getting the graph of y is equal to 10 inverse m. Now, here you can see that as y increases monotrally from minus pi by 2 to pi by 2, it increases from minus x is 0, is 0 defined in the open interval minus infinity to plus infinity. So, 10 inverse x tends to pi by 2, which is the curve of y is equal to 10 inverse x plus infinity, that is y, turns to minus pi by 2 is infinity. Now, let us discuss the graph of cot inverse x 0 to pi is equal to cot inverse x. We have restricted the domain of cot x to the open interval 0 to pi. Therefore, the domain is a factor of real numbers, that is, the category x values for the graph of cot inverse x have an interval minus infinity to infinity. So, we can write the domain of cot inverse x has an interval minus infinity to infinity 0 to pi where the graph of cot inverse x tends to infinity to minus infinity. Then cot inverse 0 is equal to y is equal to f of x is equal to cot inverse x, that is, let y is equal to cot inverse x. Let us draw the graph of y is equal to cot inverse m. Now, we have y is equal to cot inverse x cot y. Now, for this equation, we will find the ways values of x and y. For this, let us draw a table. Now, we have drawn a table. Now, we know that trigonometric function cot inverse x is an open interval 0 to pi. So, we will choose the ways values of y in between 0 and a pi. So, for y is equal to minus root 3 which is equal to minus 1.73. Now, for y is equal to pi over 4 which is equal to minus 1. Now, for y is equal to minus 1 by root 3 which is equal to minus 0.5 i is equal to pi by 2 equal to cot pi by 2 which is 0. It is 1 by root 3 which is equal to 0.5 which is 1 to 1.73. Now, i is equal to cot inverse x. We will plot these points. Now, in the graph we have taken 10 small divisions is equal to 1 along the x-axis and 5 small divisions is equal to pi by 6 along the y-axis. We have got these points on the graph. First of all, we will plot the point minus 1.75 point on the graph point minus 1, 3 pi by 4 on the graph. Now, this is the required point on the graph. We will plot all the points on the graph. So, we have plotted all the points on the graph. Now, on drawing all these points we are getting the graph of y is equal to cot inverse n currently from 0 to 0 is equal to pi by 3 that is the x-axis whose equation is y is equal to 0 and this is the line whose equation is y is equal to minus y. f of y is equal to cot inverse n and in this session we have learnt about the graphs of y is equal to 10 inverse x and y is equal to cot inverse x. So, this is the principle.


Inexplicable, enigmatic, still surviving ancient uparts, named after their academically claimed creators, the Kachari ruins, a set of large and incredibly heavy relics whose purpose, or indeed true age, remains a largely ignored area of study by any individual who depends on institutional funding for their career survival. There are many other ancient sites which litter modern-day India, whom have an equally enigmatic history. Some of these sites we have covered in the past, like that of Kailash Temple, a remarkable ancient achievement carved directly from a bedrock of earth with such artistic vision and accuracy that any logical explanation for its creation remains a challenging and still elusive reality surrounding not only the many sites we have already covered, but countless others which still lay either undiscovered or deliberately ignored by mainstream media. Yet our next area of interest has encountered a polar experience, having been officially acknowledged as one of India's most important of ancient sites. Known as the Udiagri Caves, they are a set of 20 rock-cut caves near Vidisha, Madhya Pradesh, and according to mainstream historians, dates from the early years of the 5th century. We have often postulated that some ancient religions, having survived the test of time, and we have often encountered Buddhist or Hindu belief systems engraved upon currently inexplicable stone carvings and ancient structures, which we feel are indicative of a lost civilization's advanced capabilities. Cave 5 in particular possesses depictions of ancient reptilian creatures, later attributed to ancient religious systems. Yet the original inspiration for these carvings is an ongoing mystery, and whether inspired by religious beliefs or possible real events is an ongoing mystery that mainstream academics continue to stifle the legitimacy and mainstream adoption of. Claimed as that of Vishnu, this depiction of a giant reptile consuming comparatively tiny human figures is a depiction which is undoubtedly of great historical importance, yet we hypothesize that only a small portion of existing human history has ever been explored in detail or indeed permitted to be a mainstream possibility. Udiagri literally means the Sunrise Mountain and is, interestingly, not the only ancient site with this name located within modern-day India. Udiagri Wazi was a Buddhist and Bajagavagita site by the 2nd century, as evidenced by the Heliodorus pillar, yet this inhabitation is possibly merely the adoption of a surviving structure. Additionally, while the Heliodorus pillar has supposedly been preserved without damage, many other similar sites are all but dilapidated ruins, possibly suggesting that this claim of creation is in reality a hoax. And while Buddhism was prominent in Sanchi near Udiagri in the last centuries of the first millennium BCE, it is highly possible that the religious teachings date from a lost period of ancient history. According to Das and Willis, recent archaeological evidence, such as the Udiagri lion capital, suggests that there was a Sun Temple at Udiagri. The Surya tradition in Udiagri dates from at least the 2nd century, and possibly one that predated the arrival of Buddhism. It is this tradition that gives it the Sunrise Mountain name, and we feel is yet more supportive evidence in defense of the channel's postulations. It is a place which we find highly compelling. Who built the Great Pyramids? Who carved Kailash Temple? Who quarried, carved, and transported the Moai statues around the coastline of Easter Island? The reason for our persistence in reiterating these questions is that it unlocks one's perception to the reality of unknowns. They suddenly notice that there are some things about the past in which they had been taught were a lie. The ancient marvels of India as but one example, how can those who are placed in a position of trust, responsibility, and above all critical thought, explain these stoneworks away as one's coming from the hands of untrained slaves. Yet even when these ruins are presented as that of the work of ancient masters, the tools and metal technologies available to any of them were simply incapable of accomplishing these refined, masterfully finished feats. Sometimes, leaving walls of granite so precisely executed, they became reflective. The more one studies these stoneworked anomalies, still abundant amongst the many as yet unexplained sites all over the world, you soon begin to see scars and marks left upon these stones reminiscent of modern-day electric power tools, and some indicative of stone cutting technology which evades even our own modern capabilities. Like that of the star holes we have covered in the past, these mysterious artifacts suggest the civilization responsible was not only advanced, but possibly once more advanced than modern man. Penoeus Sanctuary According to academia, once ordered to be built by the Roman senator Caeus Calpurnius Rufanus, they claimed the sanctuary was dedicated to infernal deities headed by Serapis and the deities of Lapiteus. However, due to the astonishing precision of some of the stonecuts made into these large granite boulders, we posit that the Romans were merely re-inhabitors of this along with many other ancient structures to which mystery history attests the creation of were far out of the capabilities of the Roman Empire itself. Furthermore, that the Romans rapidly recorded technological and agricultural developments just like that of the Inca, Mayan, Egyptian, etc. was largely the result of deciphering reverse engineering and the eventual adoption of technological relics left by a far more capable once world-going yet now lost civilization. At the side, there are many impressive ancient stone-carving achievements, perfectly square boreholes, largely perfect cylindrical drill holes left in the hard granite many thousands of years ago, the volume and abundance of lichen species, and the sizes these colonies have become, also confirming the great age and authenticity of the boreholes and the site itself. Ultimately, if one wishes to conclude that this ancient sanctuary was indeed the work of the claim builder, proof must be provided that said individuals were capable of such incredible work, not only capable of the task, but the cut upon stones engulfed with millennia-old colonies of lichen without seemingly damaging them. For many colonies now draped across the stoneworks, we attest are far older than the Roman Empire itself, with many flowers already a considerable size before they watch the Romans arrive, thrive, and eventually disappear. Yet, alas, without biological proof of the age of some of these species, and the fact that any funded institution would dismiss any of the dates we would pursue as anomalies, it appears the jury remains out on the site, and the debate rages on. It is a place which we find highly compelling.


Hello, everyone. Welcome and thank you for tuning into this virtual session, Cleanup on Idle Cloud. My name is Sarah Johnson, and I'm a lead cloud security architect at Boeing. This session is for security engineers, platform engineers, developers, and everyone in between. So whether you're new to the industry or you're quite experienced, there should be something in this talk for everyone. We'll jump into both high-level strategy and technical details as we explore challenges and solutions I've encountered on my cloud-native journey at Boeing. I started my career at Boeing on the commercial airplane side of the house, performing vulnerability assessments on commercial aircraft for compliance. Since then, I've had the opportunity to support some really unique and interesting projects, including machine learning, wireless pen testing, security automation, platform engineering, and most recently, which we'll be focusing on today, cloud engineering, and GitOps. I worked in commercial airplanes. I picked up a term that I've been thinking about a lot lately. The term is FOD, which stands for foreign object debris. This is an oversimplification of the definition, but it essentially refers to something on an aircraft that isn't meant to be part of the configuration and could interfere with its operation. Sometimes, the object can seem insignificant, like a pencil or a paperclip or a wrench, but left in the wrong place during the assembly of the aircraft, it presents a vulnerability and an increased risk to flight. I've been thinking about this recently because, well, we sort of have FOD and software too. Whether we're downloading packages from the internet or copying code from Stack Overflow, do we always check to see if everything it contains is safe? Or how many of us have ever left debugging or testing code in our software? Or maybe you left a testing resource running that's no longer in use.  That is software FOD. And like in aviation, it comes with risk. Whose job is it to manage software FOD? If you know me, you'll know that I've joked occasionally about my title and that instead of cloud security architect, I should really be called cloud janitor because a good percentage of my job has been cleaning up other people's cloud trash. Working in security sometimes feels that way. Sometimes we're builders, sometimes we're defenders, sometimes we're quality control, and sometimes we're garbage collectors. But is it always security's job? What can security do better? And how do these issues affect the jobs of other engineers? I've been part of Boeing's transformation to the cloud and helped a number of development programs transition from legacy environments. During that time, I've experienced all the pain points that come with adapting to new technologies through both failure and success. From this experience, I'd like to present three relatable examples of FOD in the cloud and talk about how to navigate these challenges with your teams when configuring cloud development environments. We're using AWS GovCloud for software engineering at Boeing. So the examples that I'm presenting here will be specific to AWS, but the principles apply to other cloud offerings as well. Let's take a look at scenario one. In our first scenario, Alice is a cloud engineer for a platform engineering team. The team is new to the cloud and is pretty small, less than 10 people. However, the team is building a platform that needs to support over 300 developers. Alice comes to work one day and notices an odd resource in the team's environment. It's an unnamed, untagged Windows 2012 EC2 instance. So why is this a problem to Alice? Well, Alice knows the team is a Linux shop and shouldn't be running Windows systems. Windows 2012 is also an old version of the team really shouldn't be leveraging. Alice also found that the image came from an unknown vendor in the AWS marketplace, and whoever created it didn't follow the team's standards on naming and tagging conventions, so she can't tell who or why the resource was created just by looking at it. So to Alice, this seems to be a classic case of software fought. Now, in our second scenario, Bob is an SRE on a development team. Bob is having trouble accessing data he put in an S3 bucket. So Bob makes the bucket public so he can pull the data down to the resource that needs it. Why is this a problem for Bob? Oh, we know public S3 buckets are just that. They're public. Data in the bucket could also be sensitive. And there were other ways Bob could have configured the bucket to access it properly. This is an example of software fought because we know it's a misconfiguration and it only exists because of a temporary problem, but the misconfiguration will probably persist unless other measures are put in place. So this brings us to our third scenario. Eve is a security engineer on an IT team. Eve was assisting some development teams and noticed an issue with SSH key management. Eve knows there's a policy to enforce SSH practices, but it turns out some of the teams were not made aware of the policy. After more investigating, Eve found several teams that had completely open security groups or sensitive ports exposed. Is this a problem to Eve? Well, Eve knows that there's big vulnerabilities associated with some of the open ports. Open security groups also are just bad practice. And Eve knows the team needs to be NIS compliant so they need to disable unused ports and protocols. Now consider the impact of scaling these issues in the large organization. What happens when these teams become 10, 20, or more teams with different regulatory and customer requirements? Even in small organizations and projects, we need solutions that can grow with us. With these scenarios and scalability in mind, let's walk through how an organization can tackle addressing misconfiguration and software FOD in our cloud environments. We're going to leverage classic security frameworks to apply administrative and technical solutions to our problems. So, is administrative controls or policy? Policy is the first step to creating change. Trying to force changes without a written policy will likely cause tension in the organization. In the second scenario, if we just tell Bob he can't have a public S3 bucket, but we don't have any policies to support our statement, we may damage our relationship with Bob's team. Bob believes he needs the bucket to be public and his team may feel that security has unpredictable and arbitrary requirements. Similarly, in order to create an effective policy, we need to have buy-in from all the parties affected by the policy. Proceeding without buy-in can also damage our reputation and have unintended consequences on our organization. For example, in the first scenario, Alice could create a policy to only permit use of CIS official benchmark images. From a security perspective, that's a great decision because they're from a known vendor and have some hardening applied. However, what if the development teams have a requirement to use images that match their customer configuration and they can't use a hardened operating system? If Alice goes forward with the policy without working with the teams, that might mean developers can't meet their product requirements without violating the policy. And lastly, as we saw in the third scenario, policy also needs to be communicated to be effective. If teams don't know about the policy, it can't be followed. Back to some example policies that may apply to our scenarios. In scenario one, Alice works with stakeholders to create and communicate a policy to use only approved vendor images. In scenario two, Bob's team is consulted and a policy is created to disallow use of public resources. In scenario three, Eve already has a policy to remove sensitive ports and works to communicate the policy. With all this in mind, administrative controls have limited effectiveness on their own. We also need technical controls to support our policies. Technical controls are divided into preventative, detective and corrective categories. Of the preventative controls, we should start with IAM. IAM is the backbone of AWS security. Working in AWS, it should be the first place you go to allow or deny user actions. There's a few ways we can leverage IAM and in AWS organizations, service control policies to address our earlier scenarios. We can use a boundary policy or service control policy to do things like prevent an instance without required tags or prevent creation of service accounts without a permissions boundary or block changing S3 bucket policies and access control lists. However, security groups might be a little trickier. It's not a good idea to block changes to security groups in a development environment from my experience. Things may evolve quickly and developers or SREs may become blocked for long periods of time and it may not be reasonable to have a security team babysit security group configuration for everyone. That brings us to some of the limitations of this approach. It may be difficult to enforce policy at this layer if a lot of exceptions occur or frequent changes are expected. We're going to use Bob's example to explore other options of preventative controls and look at other tools for leveraging. Looking at the S3 service and this demo account, we can see there's a setting for blocking public access at the account level. One way we can prevent public S3 buckets is to enable the setting for each of our member accounts. Obviously I'm demoing this in the GUI which doesn't scale well and isn't enforceable. So let's look at two tools to do this programmatically. First up is AWS Config. Config is a great cloud native configuration tool that provides policies, code automation, data aggregation and resource management capabilities. Real leveraging AWS is conformance packs and bowing to make measuring configuration compliance easier. Conformance packs use config managed rules to monitor compliance with best practices and frameworks like CMMC, NIST, CIS and more. FIG also provides two managed rules for the S3 public block setting that come with the conformance packs. The one we want to examine is the periodic check. The other rule is only triggered on changes which means we won't catch accounts where the account level public block was never enabled. I'm going to go manually add this managed rule to my account assuming it wasn't already enabled. Gonna change the frequency to 12 hours. That's the settings the same. And then for some reason we have to go find this in the GUI. Not sure why it's so hard to find these rules. I could have used a CLI but I thought that would be less interesting for a demo. Found it and we should see my account get flagged. So now that we have this finding we want a way to remediate it. If we're applying a remediation action through config we can use SSM automation documents to apply automatic remediation. AWS provides a bunch of managed automation documents for doing different actions. They also provide one for configuring the public access block. But availability of these services can range by region and it doesn't look like this is available for us in GovCloud. So we have some other options for this. Instead of using a managed rule we can create our own in lambda or guard. But there's also a config rule development kit from AWS labs that's available for us to leverage. The benefits of this is there's a huge repository of open source rules for us to use. And there's a ton of stuff in here. And if we look we should be able to find one to solve Bob's problem. Here it is, if it loads. Awesome. But config does have some downsides. There's some differences in GovCloud which means some features aren't available or weren't until recently. You also can't update service linked rules like the ones that come in the conformance packs. Vig is also a little complicated. I found that it does have a learning curve. And if you're like me and you're trying to do super customized rules you may have to muddle through some convoluted errors when you're trying to get things to work. I mentioned the flexibility of the RDK is awesome but what we wanted to use to leverage with S3 actually requires some special modifications to work in Lambda. And some of these rules are really long like almost 500 lines of code long. And all I wanted to do is something simple like turn on the public access block setting. So in general config is great and we want to leverage was possible in that tool. But we also explored another tool to supplement our AWS native services like Cloud Custodian. Cloud Custodian is an awesome open source CNCF incubating project that complements other cloud native tools really well. It also supports AWS Azure and Google Cloud platforms. So to look at how to solve Bob's problem in Cloud Custodian we're actually gonna look at our demo account again first. We're just verifying that the account level public S3 block is still not enabled. And then we can just create a little YAML policy to using Cloud Custodian for this. The resource we're using is AWS account. We're just applying a filter for the S3 public block.  So it returns count of one which means it found one resource that isn't in compliance with our policy. And we can go into the step directory that it created to get more information about our resource. So I'm gonna hide the account ID and account name here but you can see that it did find my account and these fields are all set to false which we know is true because we just looked at that. But in order to actually make this a preventative action we want to enable this setting in our account. So we're just gonna take a set S3 public block action and set each of these fields to true.  Okay, so we see our count of one but we also see that action here and it says it took an action on one resource and it looks like our setting is enabled which is pretty cool. And we did that with 16 lines of code rather than 500 lines of code that we looked at it with the other rule. So to sum this up we just looked at how to leverage a preventative control for blocking public S3 buckets using IAM, SCPs, config and Cloud Custodian. It brings us back to detective actions. So what if we're not able to prevent an action but we just want to flag and monitor findings? Alice's use case of a rogue resource is a perfect candidate for detective Cloud Custodian rule. We've written some YAML here and we have some variables set for what we believe are authorized AMI names and owner IDs. And we're just looking for EC2 resources that have been created that don't fall into these permitted categories. So we're gonna go over to the console and we're actually gonna spin up our example, Windows 2012 instance which was not permitted in our rule set. Care about accessing it. Right, and should be spinning up. See it pending? It's okay if it's not running. We should still catch it. All right, and we ran our rule and now we have a count of two which is interesting. So we know about one because we just provisioned a Windows EC2 instance which is in our list. So let's go take a look at our resource output. So we see an instance. Ends in BAE3. Looks like our instance ID. It also says a Windows platform. So that makes sense. And then we're just gonna scroll down until we find our other resource which I should have just grabbed for this, but. Okay, so we have another image ID here and instance ID. So we're gonna grab the instance ID and figure out which one this is. And interesting, cool. So we have another instance that it flagged. It is terminated, but it's still caught it. And AMI is Amazon Linux 2 which we have Amazon Linux in our list but we're restricting it to benchmark and Stig images. So we were able to flag that as well. But we can also, because we're looking at a detective control, send these findings to other monitoring services like Security Hub. And so we're gonna take that action now and we're doing a post finding action. So this should post this to Security Hub in our account when we run it. Looks like it found our resources and it committed the action. We're filtering for product cloud custodian in Security Hub. And it should show up here. Sometimes this takes a little bit for it to post. Awesome, we have our two findings. So the other thing that we're doing of Boeing is ingesting these findings from Security Hub and other AWS services into a SIEM solution. We're running Splunk to report findings, trigger alerts and present dashboards to different teams. So to summarize, we looked at Alice's use case of a rogue resource to apply detective controls using cloud custodian and send them to solutions like Security Hub or SIEM. Finally, we have corrective controls. We can use both config and cloud custodian to take corrective actions on misconfigured resources in our environment. Eve's use case of sensitive ports is a great candidate for corrective actions using cloud custodian. So we're using this test security group in this demo account and we're just gonna add a rule to permit RDP from an arbitrary source, right? It's added and now we just have this little policy in YAML that we're gonna run in cloud custodian. So it's filtering for that rule and it has an action that will remove the permissions. It says it took an action on one resource and we should see it remove our rule. Awesome. So we just discussed how to take a simple corrective action using cloud custodian to solve Eve's problem. We don't have time to demo config but we can do similar things in that tool as well. Guard rules in config also support YAML. We just happened to leverage custodian at Boeing because of what was available in GovCloud at the time and cloud custodian's flexibility has worked out well for us. For recap, we looked at three different scenarios involving cloud misconfiguration, rogue resources, public resources and exposed sensitive ports. We also discussed how to leverage administrative and technical controls to solve our issues including policies, IAM, SCP, config, cloud custodian and security hub. At the time, I wanna bring us back to a question I asked in the first few minutes of this talk. Whose job is it to manage software fraud? The obvious answer may be the security engineer as we focus a lot on the role of security and the custodian nature of our jobs at times. But security is just a lens to see problems through. It's a perspective but the problems themselves aren't unique to security. A messy cloud and messy software is challenging for everyone. Does anyone know of the concept of the big ball of mud? It's expensive to maintain, difficult to scale, inefficient and unsustainable. In general, the same problems that present security risks also present other risks to the business. So do my security engineers out there. If you're not already, start leveraging compliance as code and automation tools to do your work for you and approach these problems not as isolated security concerns but also as roadblocks to efficient development. I think you'll find if you apply that mindset you'll build better cross-functional partners outside of your security teams. My developers, SREs, platform engineers and others tuning into this call I encourage you to think about how you could leverage your existing solutions to jointly solve security problems. If you find it difficult to manage your resources what's the security risk associated with that? How does infrastructure or configuration as code help secure your environment? Thank you again everyone for joining. That's my time and remember to clean up your cloud.


Alright guys, what's up? Welcome back to the channel. Welcome back to a brand new video. We're out here in Costa Mesa, California. I hope I pronounced that properly. We're about to go...oh there's some sirens. What's going on? There's a big fire engine. Look, look at the fire engines here. We're about to hit nice guys. There's 100% vegan burger shop here. Restaurant, sorry. We're gonna go eat and then we're gonna hit a couple thrift stores and then check out Newport Beach. So hopefully this video is fun and entertaining because you're in America. This is America.  I'm out here with Karina. Say hello. Hi. We're gonna get some feed. Gonna get some feeds to eat. If you're ever in Costa Mesa and you're a vegan, even if you're not a vegan, this is a spot to check out. Nice guys. We're pulling up to savers right now, guys. Hopefully there's some stuff in there. Some good stuff to cop. There it is. Thrift Superstore. Look, I think we ate over the last time. We did. We need XL, extra large, extra grande. Let's see, let's see. Whatever we got here today. I know, gee, your day to remember a t-shirt here. Remember that, Dan? Yeah. That $3.50 for a blank gilding t-shirt. So if you are on the hunt for some cheap blanks at the thrift, you can print, you can print whatever you want in the front. You're trying to do some DIY branding. A lot of cheap blanks. Like you were saying, you could buy a cheap blank and print on it. Yeah. Arkansas. That's pretty cool. Is it Arkansas? What is that? Bogs? Maybe like a school or something. One one that says Memphis. Two XL. That's too big, huh? Yes. We do want to find like a nice some short sleeve button up. Yeah, that would be cool. That's quite awesome. It just came up on this OG Super Radical Thrasher Rip. It's, I think it's $4. It's $3. It's a double XL. I might clop it. I don't know. Super Radical is still cool. What do you guys think? Found a couple of button-up shirts. This one's an extra large. That's cool. I like that. It might be too big, but it might be all right. And I found this polo on. It's $11 bucks. So if I don't like it, I can depulp it or something. And look at this. Oh, cool. Remember the Super Radical? Yeah. Yeah, it's $7. I have the jacket that you want to be. Oh really? Yeah. It's cute. I found a few things. I want to go look at the pants. I could see those dickies. Okay. I hope so. Just came up on some cocky dickies. I think they're like factory seconds or something. They've got a stamp on them. It says a regular. Yeah. $3.50. $5.50. Sorry. It's not bad. I might cop them. I have the cargo pockets on the sides. Could be a good, could be a good fit. I don't know. Come up on another pair of dickies. They're the 874 Flex. The brown ones. $7.50. I'm going to try these on as well. I'm not sure if this is vintage or not, but I found this like OG Bruins CCM Hockey Drizzy. It has my name on the back here. Too bad it's too small. I think it's tiny.  We are in the shoe department. We're going to see if we can come up on any any skate shoes or converse or vans. Let's check it out. Didn't really come up on anything, but there's some cool old man loafer slipper things. I don't know what you call these. Proper Jim Greco sees. Like it looks like Jim Greco would like skate a pair of these. I have a lot of stuff I want to try on. I found a couple pairs of dickies. We won't be able to try on anything. You can't? Maybe I'll just have to cop them and hope for the best. What do you find the cowboy hat? No. I'm just thinking. Because of COVID we can't try anything on in Sabers so we've got to wait till we get home. So it's a bit of a gamble here today guys. Just got done in Sabers guys.  So I only copped one set of dickies. I copped a few t-shirts though. There was a vintage film camera I wanted to get but I don't think it worked because we watched a little video on how to like see if they work and I don't think it was working. So I would have got it as a decoration if it was like 10 bucks but it was $18. Trying to head out to Newport Beach right now to hopefully catch the rest of this sunset here. Show you guys how beautiful it is out here and then we'll probably head home after that so we can have a look at our thrift hall. Thrifting with Sean Enox and Karina in Southern California. Australian style. Hey! I don't know if you guys can see but check out the moon. The moon has come out early here in Southern California. Look at it. Insane. How wide are their freeways here? Check it out. A Seino M5 in Sydney. We've got one, two, three, four, five, six, seven lanes here guys. Seven lanes. Got here a bit late guys. Sun has set but it's still really pretty out. You can check it out. Look at these houses here. Crazy. Oh look at that tree down there. No that was Venice. Look at that tree. So Australia's all the way over there on the other side of this water. Out here Newport Beach. It's good. Life is good. Look at these houses guys. Imagine if you had like an Airbnb on the coast here you'd get all your mates together. Stay for the weekend and that's the view you have here. It'll be wild. We were going ahead to Laguna Beach today but we ended up heading up. Is this Orange County? Yeah. Yeah. To Newport Beach. So Beach Beach same same. We started the day pretty late today. I keep forgetting when I come up here at the end of the year. It's winter up here so the days are shorter. So I'm used to the sun going down at like 8 p.m. in Australia but out here because it's winter the sun goes down around 4 30 p.m. There we go. You guys can see. I'm going to head home now because I've got to do some editing and then show you guys all the thrift finds that we found today. I'm that excited because there's no thrifting like this in Australia. Like honestly you'd be lucky to find like a you know Apollo button up in Australia at a thrift. So we're going to drive back.   Karina's been out thrifting in Australia and it's slim pickens you know. So yeah. Oh boy we copped all this stuff here. I copped today a double XL super radical t-shirt. Not in bad condition. Usually when you find black t-shirts at a second hand they're all faded and nasty around the neckline but this one isn't too bad. If it doesn't fit me I might give it to young Jamie. I don't know. What else did I get today? I got this cool blue polo Ralph Lauren button up. It's a size medium but yeah it fits me okay. Just got to iron it out. It's got a pink logo. I don't know why. I haven't seen many with pink logos but it's still cool. What else did I get? And then I got this Eddie Bauer short sleeve button up shirt. It's like a khaki color. Look good with some like darker colored dickies. I tried on these dickies just now.   So I'm going to have to bring them back but they're only $7.50 so you know maybe I can find another pair that'll fit. And then I just copped this blank gilden um I think it's a navy blue t-shirt also. Check it out. I like blank shirts. I've been on a big blank shirt wave lately.  I wear a lot of blank shirts. I don't know why. It's just simple. I don't have to think too much.  And as long as the color coordinates with what I'm wearing like my pants and shoes then I'm sweet. If you guys have made it this far in the video thank you so much for watching. This is probably my rawest vlog yet like there was no skating no music no anything. Hopefully you guys watch it up until this point but yeah still finding my creative flow over here. It's a bit different being in a different place different country different side of the world. So hopefully soon enough I'll get my creative flow back and I'll have these videos hot and ready for you guys. But yeah thank you so much for 18k subs. It means the world to me. Road to 20k. Thank you for watching the video and I'll catch all of you guys in the next one.


This study demonstrated that the encapsulation of phyzitin into a hydrogel scaffold improved its bioavailability and delivery in humans. The results suggest that this novel approach can be used to increase the efficacy of phyzitin in clinical applications. This article was authored by Elatu Matavaman and Krishnakumar, Asha Jadichamedza, Ashel Joseph, and others.


A very good evening aspirants, welcome to the Hindu newspaper analysis brought to you by Shankar A. S. K. Dabhi. So displayed here are the list of news articles that we are going to discuss today. So without much delay let us get into the first news article discussion. Now have a look at this news article. See this news article talks about a pilot study conducted by Appalo Proton Cancer Center. Now this study was conducted on a small group of high risk prostate cancer patients and the results indicate that the proton therapy could significantly reduce side effects compared to conventional radiation therapy. So this is the cracks of the news article given here. In this context we are going to understand what is proton therapy. See proton therapy which is also called as proton beam therapy is a type of radiation therapy. It uses protons to treat cancer and that is why the name proton therapy is given. See so far radiation therapy that uses x-rays are used to treat cancer. But proton therapy is a newer type of radiation therapy in this field. That is why it has made news today, okay. Now before understanding how this proton therapy works you must know about protons. We all know about protons right, it is a positively charged particle. See it is believed that at high energy protons can destroy cancer cells. So this proton therapy is a treatment that uses high powered energy to treat cancer and some non-cancerous tumors. So how does this proton therapy works? See there is a machine called synchrotron or cyclotron that speeds up protons. This high speed of the protons create high energy. This energy makes the proton travel to the desired depth in the body and the protons then give the targeted radiation dose in the tumor. Here you must remember this one fact. See with proton therapy there is less radiation dose outside of the tumor. That is there will be no radiation beyond the tumor. But in regular radiation therapy x-rays continue to give radiation doses as they leave the person's body. This means that the radiation damages the nearby healthy tissues. So this is something very positive about proton therapy as it does not release radiation outside of the tumor and it does not damages the nearby healthy tissues. But still they have some side effects we will see about them. See in general common side effects of proton therapy includes fatigue, then hair loss around the parts of your body which is being treated, then skin redness around the part of your body that is being treated, then so on is around the part of your body which is being treated. Now coming to the final part that is the application of proton therapy. See proton therapy is useful for treating tumors that are near the important parts of the body. For example cancers near the brain and spinal cord. So as I already said as proton therapy can treat the cancer by targeted delivery of radiation the probability of the healthy part getting affected is very low. Know that it is also used for treating children because it lessens the chance of harming healthy growing tissues.  So these are all some of the important facts that you have to know about this proton therapy very important. So in this news article discussion we saw in detail about proton therapy we saw about its working and finally we ended our discussion by seeing about some of its applications. So with these learnt points now let us move on to the next news article discussion. Now take a look at this news article. See this news article says that ISRO is going to achieve a remarkable feat of 200th successful launch of the Rohini RH200. See this RH200 is nothing but a member of the Rohini sounding rocket family and it is used by the ISRO for atmospheric studies. The news article also says that the rocket is going to be launched from Tumba during the World Space Week celebrations. So this is the crux of the news article given here. In this context we are going to understand about sounding rockets. So what is a sounding rocket? Does its name came from the unique sound that it makes? Really not. See sounding rockets are one or two stage solid propellant rockets. They are used for probing the upper atmospheric regions and for space research. And know that sounding rockets take their name from the nautical term to sound which means to make measurements. So it does not get this name because of the sound it makes. So now we know that it is used for space research and upper atmospheric exploration purposes. Now let us see what is the need of such rockets. And here you might have a doubt also. We have normal satellites for exploration purposes, right? Then why do we need sounding rockets? So to answer both the questions you should first know how a sounding rocket operates. See sounding rockets carry scientific instruments into space along a parabolic trajectory. Now see this image here. Can you see the parabolic trajectory? This is how a sounding rocket works. Firstly the rocket is launched into space from a launching station. And after this multi-deployments happens and the experimental equipment is deployed into space. So during this time the equipment collects data and send it to ground station. And after it finishes its work parachute is deployed and it returns back to ground. So this is how it works and know that their overall time in space is very brief. Brief in the sense it takes typically 5 to 20 minutes. Lower vehicle speeds for a well-placed scientific experiment. The short time and low vehicle speeds are more than adequate to carry out a successful scientific experiments. Apart from this there are some important regions of space that are too low for satellites. And so sounding rockets they provide the platforms that can carry out measurements in these regions. So now you know the application of sounding rockets. Now coming to the benefits of using sounding rockets. See the first thing is the cost factor. See this cost factor makes sounding rockets an attractive alternative as they do not need expensive boosters or extended telemetry. And they also do not need tracking coverage since they never go into orbit. As a result mission cost or substantially less than those required for orbiter missions. Secondly the sounding rocket program they take advantage of a high degree of commonality. This means that the rocket do not require complex specifications that are specific to each mission. So it can be used commonly for all experiments. With every launch only the information to be collected will change. And the next benefit is that the payload can be developed in a very short time frame. Sometimes as quick as 3 months. This rapid response enables scientists to react quickly to new phenomena and to incorporate the latest most up to date technology in their experiments. Okay so in this news article discussion we saw what is a sounding rocket. A sounding rocket or one or two stage solid propellant rockets. Which are used for probing the upper atmospheric regions and for space research. So we saw why these sounding rockets are very important. First is user friendly that is to carry out a successful scientific experiment. Short time and low vehicle speeds are more than adequate. Secondly some important regions of space are too low for satellites. And because of these two reasons sounding rockets provide the only platforms that can carry out measurement in those areas. Then we saw about the benefits of sounding rockets. First is cost effective. Second is they have an advantage of a high degree of commonality. And finally we saw that the payload can be developed in a very short time frame. So these are all some of the important points that you have to note about the sounding rockets. So these learnt points let us move on to the next news article discussion. Take a look at these news articles. They describe about the recent operation carried out by both Central Bureau of Investigation that is CBI and National Investigation Agency that is NIA. See while CBI has targeted groups in India which circulate child porn videos. NIA has launched investigation against terror modules across various states in India. So this is the crux of the news article given here. So in this context let us understand some of the differences between both NIA and CBI. Before that the syllabus relevant to this news article is highlighted here for your reference. Just go through it. So let's start our discussion with the origin of these institutions. See Central Bureau of Investigation that is CBI was established in the year 1963. It was established according to the recommendation of Santanam committee on prevention of corruption. Here note that the CBI is not a statutory body but it derives some of its power from the Delhi Police Special Establishment Act 1946. Now coming to National Investigation Agency that is NIA. It was established in the year 2008 after the Mumbai Taj Terror attacks. See NIA is a statutory body which derives its power from the National Investigation Agency Act 2008. So now coming to the ministries under which these institutions function. See CBI functions under the Ministry of Personal Public Grievance and Pensions. While the NIA they function under the Ministry of Home Affairs. Now coming to the specific roles assigned to these two institutions. See CBI functions with a special mandate of preventing corruption by union government employees who are holding high offices. It also takes up certain types of cases which remain unsolved by the state police on demand by the concerned state police or under the order of the concerned high court. So now coming to NIA its primary objective is to stop terrorist attacks being carried out within the territory of India. It specializes in counter-terrorism relating investigation. Here note that NIA Act was amended in the year 2019. This allowed the NIA to investigate few other offenses which includes human trafficking, offenses related to counterfeit currency or banknotes, then manufacture or sale of prohibited arms, fourth is cyber-terrorism and finally offenses under the Explosives Substances Act 1908. So these are the new areas in which NIA can start investigation according to the amended version of NIA Act. Now coming to the organization of CBI. See presently the CBI has seven divisions which are working under the union government. They are firstly anti-corruption division, second is economics, offenses division, third is administration division, then special crimes division, direct trade of prosecution, central forensic science laboratory division and finally policy and international police corporation division. So these are all the seven working divisions of CBI. Here note that the role of special crimes division is supplementary to that of state police and also remember generally both the chiefs of CBI and NIA are from the Indian police services. So how are they appointed? See the appointment of CBI chief was done by a three-member committee which includes prime minister as chairman, the leader of opposition and chief justice of India or any other judge dominated by him. Then the appointment of NIA chief. It is done by the appointments committee of cabinet. Initially the name for the chief post is proposed by the home ministry under which NIA works. So this is all with respect to CBI and NIA. It is a very important topic. There might be preliminary questions and you can even use these as a value addition in a main's answers as well. So in this news article discussion we saw in detail about NIA and CBI. We saw about its origin. We saw about which ministry they come under and we saw about their functions. And then we saw how the chiefs of both NIA and CBI are appointed. So with these learnt points now let us move on to the next news article discussion. See this article here. It says that the ash collected from the burning of a stockpile of 2479 rhino horns was used in the concrete mix to create the live size rhinos. See these horns were seized from poachers and smugglers and collected from animals that died naturally. And the article says that the burning of horns was done to send a message to those involved in the illegal wildlife trade. And also it was done to demonstrate that rhino horns have no medical value. So this is the crex of the news article given here. Now using this as an opportunity we are going to revise about one horned rhinos. See have this basic understanding there are three species of rhinos in Asia. They are great one horned, Javan and Sumatran rhinoceros. Among these three the great one horned rhino is the largest one. Now talking about the habitat. See the preferred habitat of an Indian rhinoceros is alluvial floodplains. They also love areas containing tall grasses along the food hills of the Himalayas. Formally they were extensively distributed in the Gyanetic plains. But today the species is restricted to small habitat in Indo-Napal Terai and North and West Bengal and Assam. Now why is this? See the animal which was once wide spread across the entire North and part of Indian subcontinent now has gone down as they were hunted for sport or they were killed as agricultural pests. This pushed the species very close to extinction and by the start of the 20th century were only 200 wild greater one horned rhinoceros remained. So after strict protection and management measures from Indian and Nepalese wildlife authorities the great one horned rhino was brought back from the extinction brink. However no more than 2000 remain in the wild and there are only two places which contain more than 100 rhinos. They are Kaziranga National Park in Assam which is in India and Chitwan National Park which is in Nepal. Also know that in India rhinos are mainly found in Kaziranga National Park, Pobitara Wildlife Sanctuary, Orang National Park, Manas National Park in Assam. They are also found in Jaldapara National Park and Garumara National Park in West Bengal and Dudua Tiger Reserve in Uttar Pradesh. So now let us see some of the facts about its physical characteristics. See Indian rhinos are brownish gray in color and they are hairless. They have skin that appears to be armor plated, a single horn sits on top of their snout and their upper lip is semi-prehensile. Here prehensile means capable of grasping. Okay now talking about their diet they primarily graze with a diet consisting almost entirely of grasses as well as leaves. They also eat branches of shrubs and trees and they are also like fruits and aquatic plants. So these are all some of the important points that you have to note about Indian rhinos. So in this news article discussion we saw in detail about rhinos, their types and we saw why they were in the brink of extinction and then we saw some of the physical characteristics of Indian rhinos. So with these learnt points now let us move on to the next part of the news article discussion which is the preliminary practice questions. Now look at this first question with reference to Central Bureau of Investigation CBI and the National Investigation Agency NIA consider the following statements. Statement 1 both the CBI and NIA are statutory bodies. Statement 2 both the CBI and NIA works under the guidance of Ministry of Home Affairs which of the statements given above is a raw correct. Option A 1 only, Option B 2 only, Option C both 1 and 2 and Option D neither 1 nor 2. See the correct answer for the question is Option D neither 1 nor 2. Statement 1 is incorrect because only NIA is a statutory body, CBI is created by an executive order. We saw that in the discussion it's of right. Now the second statement is also incorrect because CBI comes under Ministry of Personal, Pensions and Grievance Redressal while only NIA comes under Home Ministry. So the second statement is also incorrect. So the correct answer for the question is Option D neither 1 nor 2. Now look at the second question. Consider the following statements regarding sounding rockets. Statement 1 ISR was started launching indigenously made sounding rockets from 1950. In 1975 all sounding rocket activities were consolidated under the Rohini sounding rockets RSR program and statement 3 currently six sounding rockets are offered as operational sounding rockets namely RH 75, RH 100, RH 125, RH 200, RH 300, MK 2 and RH 560, MK 2. So here you have to find the incorrect statements. See the correct answer for this question is Option C 1 and 3 only. Now sometimes UPSC do ask questions like these. So now let's see why statement 1 is incorrect. See with the establishment of the Tumba Equatorial Rocket Launch Station that is TRLS in 1963 at Tumba there was a quantum jump in the scope for aeronomy and atmospheric science in India. This is because of its location. It is located close to the magnetic equator. Okay. The launch of the first sounding rocket from Tumba near Tiruvannanda Buram took place on 21st November 1963 and this marked the beginning of Indian space program. The first sounding rocket to be launched from Tumba was the American Nike Apache and after that two stage rockets imported from Russia and France were also flown. But ISRO started launching indigenously made sounding rockets from 1965 and once experience is gained the ISRO launched its own version Rohini RH 75 in 1965. So the year is wrong here. It is not 1950 itself. Now statement 2 is correct because in 1975 all sounding rocket activities were consolidated under the Rohini sounding rockets that is RSR program. So this statement is actually correct. Now the third statement is incorrect because RH 75 with a diameter of 75 mm was the first truly Indian sounding rocket which was followed by RH 100 and RH 125 rockets. But currently three versions are offered as operational sounding rockets. The information is given here in the table. Just go through it. So the correct answer for the question is option C 1 and 3 only. Now moving on consider the following statements regarding cancers. Statement 1 national program for prevention and control of cancer, diabetes, cardiovascular disease and stroke that is NPCDCS was launched in 2010 with a focus on strengthening infrastructure, human resource development, health promotion, early diagnosis, management and referral. Statement 2 carcinoma is the cancer that affects the bone marrow which of the statements given above is or are correct. Option A 1 only, option B 2 only, option C both 1 and 2 and option D neither 1 nor 2. See the correct answer for the question is option A 1 only, statement 1 is correct because India is experiencing a rapid health transition with the risk burden of non-communicable diseases that is NCDs surpassing the burden of communicable diseases. So here the non-communicable diseases are estimated to account for about 60% of all deaths and these NCDs they are causing considerable loss in potential productive year of life and losses due to premature deaths related to heart diseases, stroke and diabetes are also projected to increase over the years. So in order to prevent and control major NCDs the national program for prevention and control of cancer, diabetes, cardiovascular disease and stroke that is NPCDCS was launched in 2010. It was launched with focus on strengthening infrastructure, human resource development, health promotion, early diagnosis, management and referral. So this statement is correct. Now statement 2 is incorrect because carcinoma is cancer that forms in epithelial tissue. Epithelial tissue lines most of the organs the internal passageways in the body like your esophagus and the skin. Okay most cancers affecting your skin, breast, kidney, liver, lungs, pancreas, prostate gland, head and neck or carcinomas. Now here leukemia is cancer of the body's blood-forming tissues. This includes the bone marrow and the lymphatic system. So this statement is incorrect. So the correct answer for the question is option A1 only. So displayed here is the quiz question for you today. Just go through the question and comment the correct answer in the comment section. So with this we came to the end of the news article discussion. If you like the video hit like, do comment and don't forget to subscribe to Shankaray's Academy YouTube channel. Thank you for listening.