I will do a short talk, it's 15 minutes talk, and I will not go into depth about shaders how it works in Unity because it's too big and I don't really know that much about it. I'm just starting myself with this kind of stuff and the purpose of this talk is to kind of for you that know how to code but don't really know what to do with this shader stuff. So you can make use of your current intuition for programming to transfer it to the GPU. So this is the example, it's not very easy to see but there's a lot of costs here. And I'll start just with a standard Unity example and then we'll transform that into the GPU. So we have a Unity script and there's a quote here, there's a card and the script has four... No, it's done now. The speed is the speed variation because we don't want all the cars to have exactly the same speed because that's the point. And we have a width and depth of the field with all the cars. And this is what the script looks like. We have the star function. So here we create the mesh and the texture has a lot of cars to get different colors of the cars. So we randomize the stripes and we make the billboards around four meters and then we set the stacks. So we have three variables. One is just the position with depth, the positioning X where on the field and how fast they go. And there's nothing special about this except for this. This is just to make it centered on the local position in Unity. And then we go to update. And here, each frame we just add the current speed to the delta time. And then when it goes too far we just take it to the other side of the screen. And basically it looks like this. So now the width is set to very small. So it just goes maybe 10 meters and then it flips back. So it's a very simple example and I try to describe how you can transfer this animation to put on the GPU. And in Unity you have a few options that are quite intimidating. And it looks like this one is the simplest but it's not. Because this has all the Unity shader models with bump maps and lighting and all that. So these are actually simpler and the difference is not a lot. This one has fog and this one doesn't. And you will use this one without fog. So what is the shader? I just took away all the, there's a lot of details. I just go for the basics here. So we have variables and we have them both in the kind of shader. And we also have them in this kind of properties list. And they will show up in the Unity pane. So you can access these values and see how they change on screen. And then we just have these two functions. One for the vertex and one for each pixel. So if we want to animate all these cars in parallel on the GPU. We need them to be in the same draw call. And to be able to get any of these callbacks for the vertex and so you can do anything at all. We need to have a mesh. So then we can ask, what does 1000 unanimated objects look like? And you can do this in many ways. And I just choose to do this. It's just that I kind of tube and I just create quotes. And this is not done on the GPU. This is something you do in it, in your usual Unity code. And now we have to come to the actual problems. So we can't run the code we had before on the GPU. First we don't have the object callback. It would be nice to be able to do a calculation per quote that we want to animate each car. But we can't. We just get per vertex. And this sounds crazy, but we just do the work again. We just do it four times. Four times the work. And then how do we know if we are processing a vertex which quote we're processing? And for this we'll use the C value.  And there is no random function on the GPU. And then we'll use a hash function. And a unique value per object. And this hash function is actually this C value. It's not supported on that. And this is the hardest part. Now we have to rewrite the code without state. So in the beginning we had variables like current position, current speed, and current. We can't have anything with current. Because we can't write to anything in this state. We can just output the new vertex. So if we look at the code, let's strip it down to the simplest form. We randomize, and then we add the speed to the delta. And we just move the initiation into the actual object. So here instead of the random we have the hash we're pushing the unique value. And then instead of having the delta we used time in seconds from the beginning of the game and the initial position. So now we can calculate the position without any state. And I actually removed one thing here to make it simpler. So now it will just continue, pass the screen, it never wraps back. And to do this we'll use the modular function. Because if we use the if function we'll just snap back once and then we have the problem again. The modular function is like a remainder of the addition if you don't know what it is. And this we add and subtract just to have it around the center of the transformer unit. So here it's kind of more of a complete. So here we get the vertex in and we set the decision. And then here we get the unique value, which is just the same value. And this is actually a constant in unity, just time one to get the time in seconds. And this is actually the same code we saw before. So the simplified code you can run it on the GPU and the CPU. But you have to do a lot of this things around to make it work. And this one is also a bit different. Because here we have the random value. We used to hash instead with it. And then we want another random value for the variations of the speed. And then we can't use the same because only we'll get the same random value. We want the unique random value. So just any constant to hash function and we'll get the unique value. And this is actually generated by unity. So it's just an extra transform so it will be at the right place related to the camera. A real example I made that you can download on GitHub. It actually has a lot of other stuff going on. And it's still 10 times faster than the CPU version. But we do 10 times the work and it's still 10 times faster. But that doesn't mean the GPU is that fast. Because a lot of these things have to do with architecture. So when you move an object in Unity, Unity has to sort all these objects. And with the GPU, I actually just sort like this. I just make sure I prepare the codes in order. So then you don't have to do any sorting. So this kind of runs with 15,000 cars on the area. And if you do it with the CPU, it will start giving you problems like 3-4,000 etc. Questions? You tried before the shaders for OpenGL shaders or Directive shaders. What was the difference between Unity shaders in the language? I don't really have a lot of experience with shaders. I did some WebGL shaders. And it's basically the same. So I think if you're doing the service shaders, like the short ones with all the Unity special stuff, then it's very different. Because then you kind of have to learn this kind of fields, the lightning models in Unity. I don't know much about that. But when you go down to this low level, they're basically the same. Because it's basically just doing the hardware stuff. So one of the things I'm noticing is that you are dealing with static game objects. Does that automatically mean when you were benchmarking, could you tell that these things were actually being included in the static batch? It did dynamic batching when I did the CPU version. Because otherwise it would have died much faster. Because you can't have 3,000 batches. That's impossible. From here it's recommended like 100, 200 batches. And I also could see in the profiler that it does batches very good in Unity. So it does segment the batches, but it batches them all. It's just very large batches. I think the problem is, even if you do very little, you can't do it 15,000 times on the CPU. It doesn't matter how little you do, you just can't do that much on the CPU if you use power on the low spec system. But it's final desktop. It's more unpredictable. I don't know. I think it has a lot to do with architecture. Because even if it has to do calling, it has to do sorting, and all of this is in the same time. So that's the way. Any more questions? Why are you particularly interested in GPU? What is your plan? Where point do you use it? I just do it for fun. For mobile VR, I know. Yeah, it's very good to get these performance boots, especially for VR VR. It's some effects possible that you would not be able to do unless you code on the GPU. And for me personally, I feel it makes the code more interesting because you have to do more like mathematics and you have to generate a function. It's more pure. It's also very annoying sometimes. But I think it's a nice change. And then questions. So what tools do you... I mean, what method do you do when you're debugging the CPU, especially in mobile VR? Because you need to... Actually, you don't see this mobile one, I guess, is it? I don't do debugging. What? You don't do debugging? How come? Also, your GPU... JS has got no bug at all. You need to be careful. But the thing with GPU... It's very easy to switch. When you do the C-shark stuff, you need to start the application. When you do the GPU stuff, you just alt-tab, and it's flush automatically all the time. It's so fast that you feel that. So it's actually quite nice to work with the shapes. And the way I do it, I just change... But then sometimes you get the black screen and stuff like that, right? Yeah, they turn purple. They turn purple. But then it's syntax error. Your hard part is when you have a behavior that you don't expect.  So instead of writing the whole shader, you begin with something that's kind of an embryo, and then you change one line at a time, and you make sure you change it often. You make it sound so easy, but actually it's not easy. At least for me. Another thing you could do, like I did now, is actually start with a unity version, like a C job version, that you can debug. And then you can convert it into a form that's deterministic. And then you can convert that one into a student. You have verified it in machine works before you actually move it to GPU. Yeah, makes sense. Thank you.


Instead of just looking at individual studies or individual reviews of studies, what if you looked at a review of reviews? In my last video, I covered the beverages. With the majority of reviews that found some effects either way, finally some benefits to tea, coffee, wine, and milk, but not to sweetened beverages such as soda. As I explored in depth, this approach isn't perfect, or it doesn't take into account things like conflicts of interest, such as industry funding of studies, but can offer an interesting kind of bird's-eye view on what's out there in the medical literature. What did the data show for food groups? You'll note the first thing the authors did was split it up into plant-based foods and animal foods. For the broadest takeaway, we can look at the totals. The vast majority of studies on whole-plant foods show either protective, or the very least, neutral effects. Whereas most reviews of animal-based foods identified deleterious health effects, or at best, neutral effects. Let's break these down, though. The plant foods consistently rate uniformly well, reflecting the total, but the animal foods vary considerably. As you can see, if it wasn't for dairy and fish, the animal foods total would swing almost entirely neutral and negative. I talked about the effects of the dairy industry funding in my last video, as well as substitution effects. Those who drink milk may be less likely to drink soda, a beverage even more universally condemned. So the protective effects may be relative, arising not necessarily from what they're consuming, but rather from what they're avoiding. This may best explain the fish findings, after all the prototypical choices between chicken and fish, not chicken and chickpeas. Not a single review found a single protective effect of poultry consumption. Even the soda industry could come up with a 14% protective effect, but despite all the funding from the National Chicken Council and the American Egg Board, chicken and eggs got big fat goose eggs. Also, like the calcium and dairy, there are healthful components of fish. The long chain of egg-3 fatty acids is not for heart health. Between the most extensive systematic assessment of effects of omega-3 fats on cardiovascular health to date, increasing the fish oil fats had little or no effect on cardiovascular health. In fact, if anything, it was the plant-based omega-3s found in flaxseeds and walnuts that was protected. But the long chain of omega-3s are important for brain health, thankfully. Just like there are best of both worlds non-dairy sources of calcium, there are pollutant-free sources of the long chain of omega-3s, EPA, and DHA as well. The bottom line is that when it comes to diet-related diseases such as obesity, type 2 diabetes, mental health, bone health, cardiovascular disease, and cancers, even if you lump all the animal foods together and ignore any industry funding effects and just take the existing body of, you know, evidence of face value, 9 out of 10 study compilations show that whole plant foods are, in the very least, not bad, whereas about 8 out of 10 of the reviews on animal products show them to be not good.


This is the OTP presented by Farm Bureau Health Plans, celebrating 76 years of providing Tennesseans with high quality health coverage at an affordable rate. Visit FBHP.com to learn about their history in Tennessee. With Amy Wells, I'm Mike Keith, and we welcome to the Snickers Hot Seat. Can we call it that? I think we just did. That is so solid. In the Snickers Hot Seat, Coach Dave McGinnis, surrounded by Snickers in the jar. I could not be more proud to be in the Snickers Hot Seat. I mean, I've accomplished a lot of things in my career. Well, if you finish the show and you act good, you get a Snickers. It's like somebody who does well in class. You get one? If you behave, you'll get a Snickers. I will try my best. That's right. We're glad to have you. Love to be here. And why are we having Coach Mack on? Because it's time to get his expertise on what has happened so far in training camp. I have some burning questions for Coach Mack. Oh, great. Do you have burning questions for Coach Mack? I do, but I would like to hear yours first. Mine first. Maybe we can go back and forth.  I have a burning question that I have. The right tackle situation. Nicholas Petitfrier is suspended for the first six games. From everything I've seen, he's run third team the whole time because they know he's going to leave here the first week of September and not be back until mid-October until after the London trip, which is understandable. So they've had different people rotating at the spot. Quickly, do they need to make a decision from a continuity standpoint? Who's the right tackle? It's not time yet. It's not time yet at all. The thing that he's done, and you remember when this first came about, about NPF, the debate was, and we talked about it, all the three of us talked about it, do you make one move or do you make two? They decided to make one move. They're going to hit center guard triangle as solid and as together as they can. Find someone to step ahead of the others at the right tackle. But it's not time yet. I think Mike, I think they will go all the way through in Amy. They will go all through training camp doing this because you've got some real test. You've got practice against the Vikings. You've got practice against New England. You've got a lot more call it practices that they're going to do out here. And then you've got the preseason games. And so I think they will go right up to the edge because here's the other thing, that's different than National Football League than it used to be. You've got a week between games now. Another whole week between, you know, you're not going far. You've got to buy. Everybody has a buy. So I think they'll go completely through training camp and all of those spots that I've talked about to evaluate those players because there's no reason to be in a rush as long as you can keep the center guard triangle solid and the left tackle slot solid. Now, can we learn a little bit of ball real quick before we continue on because you talk about the center guard triangle and you talk about it a lot on Titans Radio. Like that's something that we hear discussed throughout games. Can you explain what that is and why it's so important? Those three work in tandem a lot together. Both edge players may work with their guards every now and then but most of the times those guys on the edge are either by themselves or they're incorporated into a slide protection. The center guard triangle, those three guys, they are constantly working with each other. And the other thing that's happened even more recently in the National Football League, you are starting to see interior defensive linemen be the premier players on most teams' defenses. We have one here right now. So it's extremely, extremely important. The way the rules are now, the best way you can get pressure, it used to be, Amy, when you would take a seven-step drop and basically it would be nine and a half to ten yards deep when you dropped in a cylinder. The edge was the easiest way to get there. If you had someone that could motorcycle lean and skim an edge, now, as quick as that ball is coming out, interior pressure in your face and not allowing the quarterbacks to escape up into the B-gap on either side is a huge part of taking timing away from your quarterbacks. So your center guard triangle has to work together. All right, so I want to follow up for the purpose of context here. Peter Skoranski was going to be my next question about why they have left him at left guard only. You've answered that. You said they're trying to firm up the center guard triangle. If, however, they become unclear or uncertain about where they are at right tackle and they were to decide they might need to try him out there, how much time would they need to give that? He'd need some time because he's been a left tackle all of his career and people will say, you know, Coach Mack, it's just moving about four guys over. Well, it's a big difference in footwork. It's a big difference in lead hand.  There's a lot of difference between the left and the right tackle just as far as, I mean, it's basically riding with your right hand or riding with your left hand. You can do it, but it would take a little bit of time. If they have to do it, we're fortunate in the fact that this is a very technique sound football player for a young player. So it might take him less time than it would somebody that is struggling. But to me, I think they would rather keep that solid and have somebody be able to man that thing adequately until NPF can come back. Your feeling is they're going to fight that with everything they have because they have put him at left guard, they've left him at left guard and they feel like he has a chance to be a top level left guard. Yeah, and when you watch him at left guard, I mean, you can tell that that was a move for him from left tackle to left guard. But he has taken to it very, very well. And the other thing too about, you know, anytime you're around good guards in the league, we've had some great guards here with this franchise. I've been around good guards. You guys have seen them. They also right next to that center, they communicate a whole lot on protections. There's a lot that goes on. This guy, I think, can be able to do that for quite a while there. As we're going through training camp, it's not just about solidifying that five up front though. You also need to find a couple really good swing guys. How important is that going to be finding guys who can fill in at a multiple at multiple different spots throughout the course of the season in case somebody goes down? Legitimate. I mean, it's very legitimate. And the league has alleviated some of that because you can dress the eighth one now and not be penalized for it used to be, you know, you'd have to make a big decision between seven and eight as a head coach on your roster every week. Now they've allowed the eighth guy, which really, really helps. But swing guys, I mean, we've experienced too much of that in the last two seasons. But that's critical because what happens is it's not so much in preparation, but it's when it happens during a game, you have to go in there immediately and be able to go to work and not miss a beat. So the swing guy is huge. And I think that, you know, just the rules committee listen to a lot of offensive coaches and a lot of offensive line coaches and probably head coaches too. Adding that eighth guy makes a big difference. All right, your question now, your hot topic, what's on your mind, Amy? Well, there's a lot of things on my mind, but I want to start with Tim Kelly because as we have been going through training camp, we've been talking about some things on offense that were going to be a little bit different because Tim Kelly is taking on a bigger role as the offensive coordinator this year. What has stuck out to you, Coach Mack, about the Tim Kelly offense? Pace. I mean, the pace of it. And I think it's come from abbreviating things. I mean, there are things now. They're in and out of the huddle, you know, very, very quickly. And again, we get to watch practice every day. So there are things that we can't say that we see, but things that you can see and that they have in the open practices, you are going to see a multiplicity of personnel groups.  You can hear the corrections, but you can also get an idea of what they're trying to add on. Let me just say this about that. They feel, I think they felt very good about the way this team was able to grasp the offensive, the newness of the offense in the OTAs because they've started to layer their installation. In other words, they're not just the two call it periods that we had, the 30 minute two call it periods, the team period. They weren't just playing vanilla anything. There weren't vanilla on offense and that sure weren't vanilla on defense because they were overload blitzing, they were bogeying. I mean, so their installation coaches feel like these guys are up to speed on it. But the thing that you notice just with a naked eye is the pace of it and then the as many personnel groups, you know, just not by down and distance, but by scheme and there's a lot of really good things that I'm watching that I like what they're doing. Coach Dave McGinnis is with us on the OTP sitting in the Snickers hot seat. We invite you to open a Snickers but also open a Titans checking account from Pinnacle with at least $100 in a reoccurring direct deposit by August the 18th and you could get two tickets to five Titans home games. Details at titansbanking.com, Titans checking from Pinnacle, Playhard Bank Easy, member FDIC. Along the lines of the offense, what have you seen DeAndre Hopkins add from a football standpoint in terms of how he is affecting the offense? Is there another adjective other than everything? Okay. Now, it all seems serious.  But what he has allowed them to be able to do now, you are able to now have complimentary pieces do complimentary things.  And you can tell just with the with the setup that they are doing. And I'm not just talking about which side you line up on. I'm talking about who lines up in the point on the three man, the nine ball stack, who lines up at front on the stacks, who lines up into the boundary, who lines up to the field, who lines up with plus splits, who lines up with minus splits. And the other thing that he can do all of that, right? Well, yes. But see, here's the thing about him. He can do all of that. But other people now can concentrate on the complimentary piece to what he's doing. The other thing that I've noticed. And again, I got to be careful with what I say, but you know why is that with with any of these hot read adjustments, you had a veteran quarterback and you got a veteran receiver. You already see that showing up out there, which is really, really big. Because sometimes when you're able to get on that same page, a bad play can be a good play. If you could make an adjustment. I mean, it's the difference between driving in the parking lot and driving on the freeway. I mean, things are just moving fast. And if you've got somebody that understands how to operate in space when it's moving fast, it makes a big difference. So it's a circumstance where, what is it they say? I'm trying to make sure I don't botch the phrase, but rising tides, raise all ships. Lift all boats. Lift all boats or whatever they say. Basically the caliber that he's playing at makes everybody able to raise their caliber of play. That's exactly right. Because you have to account for him. That's exactly right. And also I think what you're saying too, and correct me if I'm wrong, is he and his skill set allows other people to focus on what they do better. A hundred percent, Mike. A hundred percent right there because that is that's big. Instead of now making people have to do a whole lot of different things, you know that he can do different things. And so people can concentrate on just some things. And Traylon Burke is just concentrating on doing what he does, which looks pretty special. He's a completely different person. I mean, you know, last year was a rough time for him. Let's just be honest. He came in here first of all, he was not in condition. And very few of these guys come in from collegiate football in NFL condition. They, you know, they don't, you know, their second year they've got NFL bodies if they work on it, you know, collegiate body might be good, but it's not NFL. It's not professional. And then I mean, he was not in condition. And then he had the asthmatic problem. And you know, that was, I mean, people really jumped on that. Like they had him in an iron lung just about. But it wasn't that drastic. But what he did, he went to the people that could help him. The head coach, Frank Perino, what Rob Moore, what do I need to do? He stayed here and work consistent. He's a different player. He's a different dude. And then you bring, you bring de-hop in here. I mean, they're at the hip now. You can see him at the hip and that's, that's invaluable. All the years that I've coached Mike, I've seen really, really good players take a young player under their wing and elevate their game quicker than they would elevate just being by themselves. We're talking about all of these different pieces and all of these different things that are going so well for this Titan's offense. If you're Ryan Tannehill, you've got to be licking your lips a little bit, getting ready for this season and what's coming along, because all of the sudden he's got a world of options open to him, whether it's schematically or because of personnel that he hasn't had in the last couple of years. Well, when you really look at it, and I mean, we're looking at it objectively.  We tell the truth here. He's got playmakers in every position now. Now he's got legitimate playmakers at every position. And I'm sure because you guys are deep into it, we'll touch on, you know, what we've added there in the backfield too, but that makes a difference. But all of a sudden now he's not just limited to basically, you know, you know, looking through a straw at what's going on. Now he's got a big picture of, he's got a lot of people in a lot of places that can make plays. Well, and you talked about Berks and you talked about Tana Hill. I mean, both of those players were directly impacted by the loss of A.J. Brown. I mean, there's no doubt about it. And the thing that Ryan had with A.J. is he'd throw it up and give him a chance. And you've got to have confidence in the guy to do that. And it didn't look like they had as much of that last year. Well, and here's the other thing too. And we talked about this before, you know, even when the thought of D. Hop being here was, his game, his entire career has been, even if he's covered, throw it to him. Right. Because you guys have both watched him now. We've watched him up close and we've watched him on tape.   But the other thing is he can be covered and you could have your hand as a defender in the basket, which in the basket is when the receiver's here. This is the basket and he can still catch your hand and catch the ball with it. So he doesn't have to be wide open all the time to throw it to him. You could throw it to him when he's closely covered because he's going to win most of those matchups. And he's always been deceptively like just wire cable strong. He's not real thick, but he's kind of like CJ2K was like that. Right. You remember how I mean, CJ2K was wire rope. I mean, he really was and had a lot of tensile strength to him. So does this guy. And plus this guy's got an attitude. He always has had one and he stills got it. Well, you talk about the loss of Brown, but there had been other losses over the previous couple of years. Well, now suddenly you have a tight end in a conco that you trust because he's in his second year. You have another receiver in Berks that you trust because he's in his second year and you have DHOP. And you potentially have Kyle Phillips in that in that place as well. So maybe you're sort of back to that 1920 sort of field that Tana Hill had where there was more confidence, more on the same page. Not being worried about making a mistake. Well, and a guy like Nick Westbrook, he now doesn't have to be your top receiver. I mean, he can fulfill the role that he needs to fulfill. And you've got a couple of young guys that can, you know, that might be able to step in and help. And to me, that makes a huge difference. It makes a huge difference two ways in game planning. And then in critical must have situations, you've got other options rather than one. Right. All right. So you're up next, Amy. Can you guys believe we've made it this far and haven't said the name Derek Henry yet? I think he said Derek Henry. Did you say Derek Henry? I said running back. Oh, see, that's not the same. Sorry. Edit that out. No, I think just it's exciting to be talking about the offense and be talking about so many other pieces that aren't Derek Henry. But I still feel like we should because he looks like it's more of the same here in year eight. And then there is the addition of guys like Tajie Spears, who we're all so excited to be watching. Right. You know, who's happy that we haven't talked about Derek Henry as being just all we have on offense. Derek Henry. Yes. Because this this is going to end. And you're right. I mean, he looks he's in. He's in fabulous condition. And then he's got a mindset that now, but you the things that he can do, he's he's different. I mean, we're really fortunate to be here during his career because he's different. And he's he's a big difference in a space that when he has help around him. And then you bring Tajie Spears into it. I mean, this kid's got a little juju to him. He's got something to him and something that not I'm not talking about just going in for Derek Henry.  So that's that's got to be exciting too, because for Derek Henry, because when he's the focal point and we've seen it. I mean, he has he has played against more eight and eight and a half men boxes in the last three years that any running back in the league hands down. Now he may not have to tell you what's going on at Duncan. It's always game on with Duncan. So grab a coffee and kick off the action, whether that's drinking a cup of coffee on your way to the game or grabbing one to go before watching the game at home or listening to the game at home. Duncan, they need to change that line. Don't they Duncan is always there to help you get your game on just like the pros. We need to be at our best come game time, which is why Duncan is the most important part of our game day ritual and your game day ritual, because it's always the best call for football. America runs on Duncan. Can we shout out the Dunkin Donuts over by us here. They were just magnificent this morning got me in and out of their 12 donuts and a coffee in a like 45 seconds. The one at Rosa Park. The one at Rosa Park. They do a great job there. I'll tell you what? It was the most efficient thing I did all day. They were great Saturday. We got some donuts in a box of Joe, which is their coffee because we had some guests in. Yes. We had five students in and, you know, they they ate everything. So that Charles Davis and Charles Davis and Paul Burmeister were here and everyone free everyone. And so everything our Duncan over here is it's top. It was the greatest part of my morning. So shout out to you guys. It was very impresses me about the Duncan thing, especially with Mike Keith and Amy Wells with the Titans is y'all know how to use that app. So good. Love the app. That's a Mike Keith thing. I struggle. Mike's an expert. He crushes the app. Oh my gosh. Master of the app.  You're sitting in the Snickers hot seat right now. The Snickers hot seat. Would you mind for the video viewers of this, would you mind taking the top off and just showing those are real Snickers? How about that? This is a real Snickers. This is the kind of Snickers that you would want to get when you were trick-or-treating. That's exactly right. A full. They're full-sizers. If you don't want to get those little bitty ones that when you look at it. Well, they're good, too. Well, they're good, but you got to eat about 12 of them. This right here when you're trick-or-treating and makes you so happy. I'm so happy sitting here by them. And if you're listening to this, if you're not watching it, if you're listening, you'll just have to trust us that he has real Snickers. You know what a Snickers looks like. You know what it sounds like. Yeah. He's got the wrapper. And plus the... That's it. Yeah, thanks Coach. Beautiful. Yes. Well, see the key to a full-size Snickers is that's how not to get your house rolled. If you're giving out a full-size candy bar. You're good. They're rolling the neighbor. Protection, yeah. They're rolling the neighbor. If you're giving out minis and you're giving out toothbrushes, you're going to get rolled. Well, the toothbrushes or people giving out something healthy. I gave out dum-dums one year and I was told that I was the worst house on the block. Can we get back to the show now? Yes. Sure. Okay. Yeah. Now you're getting better. Sorry. After all this time, now you're getting better. No, no. This is what does it? Now the line has been crossed. And you're seven. Here we are. I mean, you made reference to dum-dums. Are those bad? I think at this point, it's time to move on. I think they're good. Amy's like she's in a confessional at the Catholic Church. Well, I just wanted to contribute my Halloween tale. But no, let us move on. She confessed dum-dums. I was giving advice. No, no. I was giving the OT people advice on how not to get your house rolled. Well, then she said her neighbor thought she was the worst house on the block. Did you get rolled? No. I lived in a townhouse, though. They're harder to do. Can I ask a question now? Please. Okay. Save us all. Linebacker Aziz Alshire coming over from San Francisco. Yeah. He has impressed Coach Dave McGinnis. Why? You know what? He's built like Keith Bullock. Number one. Okay. He's long. As a lifetime linebacker coach and Rand told me this about him. And so I went and watched the times he got to play in San Francisco. He is a really instinctive K and D guy. K and D? Which is key in diagnose. Okay. He gets ahead of blocks so quick. He had a couple of plays in that 30 minute segment a couple of days ago when we were watching that he gets ahead. The best second level linebackers I've ever been around. And I've been around some really good ones. But the best ones are guys that can get ahead of blocks. And what I mean by that for our listeners is by getting and diagnosing and processing by film study, your bird rabbit keys, which are run past keys. Sure. Really quick as to where you're not playing everything 50-50. And once he sees it, he's an immediate trigger. I love this player. So you're not running around a block, which is often dangerous because you oftentimes leave a hole by doing so. You're beating the lineman or the blocker to the spot to where you can take advantage. That's it. I mean, and in this league for guys behind the ball because of how athletic and how much more physically larger offensive lineman are, you can't afford to do two things. You can't afford to middle them up, which I mean, go right down the middle of them because they're going to engulf you and they hold, which is fine. And you also have to be able to get ahead of them because if you keep trying to play a jazz linebacker all the time, which is a slip and slide dude, they will just push you by so fast. So you've got to be able to get ahead of the block and then you've got to be able to work vertically back up the field as to where the hole is trying to open. But to get ahead of a block, you've got to understand what you're keen and looking.  It's wrong. You're done. You're done. I like this player a lot. I really like. And here's the other thing I like about him. And Rand signed several of these kind of guys this year as free agents. He never was the dude and he wants to be the dude.   And you give them that chance. I think we're going to see the best of him. I really, really like this player. I think Arden Key is the same way. All right. He was on my list. Yeah, he was. That was great. Well, you know what? That's because you and I really are smart. Well, no. Well, you are. No, I'm not. Arden Key has grabbed everybody's attention. Everybody's attention. Are we getting too excited about Arden Key? No, because here's about our Arden Key is always really intrigued me since coming out LSU because he had he had a world of ability. But Arden Key and he admitted it. A couple of days ago when he was available to the press, he's matured. He's matured and figured it out. I mean, at one point he weighed 280. Now, that's a big man, but that's too big for what his skill set is now. He and the other thing is all of this, all of this energy that you hear that he has and if people never watched him practice, it's legit. It is legit. And the players say he starts at six. I've been around these energizer bunnies before. They start at 6 30 in the morning and they don't stop. I mean, they feed off of their teammates and what we're not getting because he's another guy. He's never quite been the dude. But now with his maturity and he understands what being the dude can do for you. I mean, let's just be honest. What it can do for you career wise, what it can do for you monetarily. And he is benefiting by the fact that now Harold Landry is coming back. He's benefited by that. And so to me, are we getting too excited about it? No, because you it's not it's okay to get excited about good players because you know that they're going to perform. So was it a Z's Al Shire who had the quote this week? Arden Key is from Atlanta. He never stops talking, which is 100% true. And I think Arden might have said I've never met anyone from Atlanta that know that would stop talking. That's a good quote. Well, and if you're out there and listening and I'm sure in the building, I mean, I'm sure in the building in the meeting rooms and he's but he does it in a constructive way. It's probably annoying to the offense. Oh, I would think. Yeah, but it's perfect that the best defenses I've ever been around in my career have been loud, loud communication, loud.  Right.  And so this guy here, I like him attitude. He's a fun guy. He is fun. And plus he's got he's got a little bit of lean to him. And the other thing about him is he's not just an edge guy because he's got enough stuff in his neck that they can move him around. So Harold Landry being back, you touched on it just a little bit. How much is that elevating the entire defense? I think mentally, first of all, it's big. And then you really looked at where Harold Landry was going into next last season before he got hurt. He was just getting ready to peak.  Got the contract. Yeah, got the contract. And he was the thing that makes me very happy just watching him out there with no brace on is he smooth again. And he's still got the lean. He's got the lean. And so he adds a lot, a lot to this defense. Mentally, because when he's on the field, he's a dude. And they respect him.  He'll say that, you know, because he had 11 months to do nothing but get ready for this time. Breaking news. Titan fans going to want to hear this. It's official seat geek is now the official ticketing partner of the Tennessee Titans. That's right. The deal is finalized and seat geek is the newest member of the Titans family. If you haven't heard the name yet, get used to it because you'll be hearing it a lot more this season. Whether you're buying or selling tickets to Titans games or any other live event in Nashville, seat geek is the place to do it. Seat geek. The new official ticketing partner of the Tennessee Titans. So Titans fans, Ken fan. Her line, ladies and gentlemen. Mike Keith, Amy Wells, Coach Dave McGinnis in the Snickers hot seat here. Are we concerned that Snickers melt when it's hot? In the Bet MGM studio at Ascension St. Thomas Sports Park. No, they don't melt. You know, they're great. They're great frozen too. Yeah. So maybe it should be the Snickers cold seat. All right. It doesn't work quite as well. I'm just saying maybe. Will Levis, it feels like has had a really nice start to training camp. Good start last week through the course of this week with pads coming on and team things happening and obviously the quarterbacks aren't getting hit but more things being added in on installation feels as if he's in a pretty good place. Do you agree? Both of y'all have watched practice with me since OTAs, right? Yes. Much different than OTAs. Really? Correct. You feel like? I know. Okay. Much different. He came in here. You never know how guys are going to react to being high draft choices. And he was a high draft choice. And you never know how they're going to especially at that position. He came in here trying to do everything at once. That's not the way it works in the National Football League, especially at that position. He's really gifted physically. Tremendously gifted physically. He has slowed everything down now and is starting to throw just I can't say it on the air and the OTP but his arm strength is different. But now what he's done, he's starting to understand cylinder pressure. He's starting to understand that windows close quicker here. He's starting to understand the concepts of what's going on. He's much different than he was in OTA. He's adjusting. And he has worked at it. But it's a mental adjustment for quarterbacks so much because it's so much different. The field dimensions within themselves make it so different as to where is there a plane of view that they see so much different. The hash marks you mean? The hash marks because I mean the field is different. It really is. And then plus you're only going to see so many coverages in the collegiate game. Let's be honest because they've only got 20 hours a week to put it in. Now he's seeing everything and that's what I liked about those two 30 minute call periods. Defense was bringing stuff. Bringing stuff. But he's a completely different guy than he was in the OTAs because he has applied himself. I like both of those guys. I like he and Malik both. You can see the growth. So they're getting good coaching. They're taking to the coaching and they're working at it because it's hard. Playing quarterback in this league is hard even if you've been at it for a while. But they've adjusted and I kind of like it. It's going to be a big preseason for both of them. I want to talk about the secondary and this includes corners, safety, everybody back there. I want to talk about that whole group because it feels like to me throughout what we've seen at training camps so far there is not a group on the field that is bringing more heat and more excitement out to the field than that group of people. Am I correct in saying that? I agree with you 100%. They are lit the whole practice. Starts with the new secondary coach, right? Chris Harris? I think it does. I mean coaches have an effect on their players. I say that having been a coach for a long time. You have an effect. But they're playing with a lot of confidence and that's what brings it out. There's a lot of juice at practice when they're going offense against defense. But I agree with you, Amy. I think this group has... Look, you've got two really solid people back there at the safety. We talk about talking and being loud. The people that are up in front of them and the people that are to the side of them I'm talking about are two safeties now. They're so confident that what they are saying means something, that they are starting when they're making plays. I mean it's everybody that's rallying into the... You're right. I think that's a big thing. I think Christian Fulton knows this is a critical time in his career. Critical time. So he's come back ready to go. Sean Murphy Bunning has added a lot to this thing. And Roger McCrary has settled in at that slot. So I agree with you. I think your observation there is 100% correct. And that's contagious. Now we talked about how the people up front have always started to... But now what you've got with this defense you've got dogs. You've got guys at every level. Start picking at every level. We talked about the linebackers. And I think Money Rice is a really nice linebacker. He's a nice compliment to Aziz next to him. But we move from the front to the back. Now all of a sudden you've got playmakers and all that does is engender confidence. And confidence, as I said, best defenses I've ever been around have been loud. This group's loud right now. We'll see. All right, Amy. Coach has to get to a meeting. So we have limited time remaining. Do you have any more questions? Do you have one more great question? What do you want to do here? What do I want to do? I think I want to pitch it to you. Do you have one more great question? I don't know if it's a great question, but it's pretty obvious. This week is essentially over in terms of how we're going to go some walk-through time off coming this weekend. And next, getting ready for the first preseason game. The Saturday noon preseason game on August 12th at Chicago. How different is next week for these Titans in terms of what you've seen from what Mike Vrabel has done so far in this training camp? Well, it's going to be a little bit different. And once the coach has decided who they're going to play and this first one, the people they decide to play, big week for them. Big week for them. Because all of a sudden, all of this thing that we've talked about, they've been doing it on familiar territory. I mean, it's kind of like when you were a kid, when you played in your backyard, you really felt good about what you could do. But once you went out and got out to the public playground and everybody else was showing up, then can you take that game to the big stage? This is the first big stage a lot of these guys will be on. So this week will be a little different once they decide who they're going to play. But you guys know this. I've said it so many times before, but it's an axiom in this league that is so true for players and coaches every day is an interview. You've got a big interview week coming up next week for these guys. And anything that goes wrong can put that check mark, which can take you off the list in a hurry, even if it looks like you're going to be on the list. Every day.   And the film is there. And so if you have a problem, you can't say, yeah, but there's no yell butts when you look at tape. It's right there. And so that's the middle pressure of playing in the National Football League that a lot of times eliminates players. Even everybody that's here has got some sort of athletic ability or they wouldn't be here. You don't just bring guys in the building because you like them. They've got some, but those that can handle that kind of stress mentally. I've seen more of those guys that could do it physically but just could not handle the mental stress day in and day out, day in and day out and then work it towards the competition point. So it's going to be big to find out. You're listening to the OTP and we thank you for that. Please subscribe, rate and review and remember our fine sponsor, Farm Bureau Health Plans, who's been serving members in protecting their health for 76 years. Learn about their Tennessee roots at FBHP.com. Coach Dave McGinnis, thank you so much for getting us ready and you are worthy of not one but two Snickers. Two Snickers? Yes. For your performance in the Snickers high end. Look, these are two. Well, they're two exactly the same. Well, no, they're really not. Two. One of them's upside down. Two legitimate Snickers. That's right. Great being with you guys. Thanks.  No, they sure aren't. They sure aren't. That tipped your gyro so quick. Amy Wells. It's fine. It's going to be worse after the OTP. Everything is okay. It's not going to go well. We'll both get the wrath from her. Everything is fine. It feels really fine. Everything is fine. It's like that dog cartoon where the fire, everything's the fire's behind him. Everything's fine. For Coach Dave McGinnis and Amy Wells, I'm Mike Keith. Thank you for joining us on the OTP.


Hey everyone, so today we, I'll be presenting about set modeling and yeah, like I'll start with my dad, like my dad is a great third modeler. So we will learn set modeling with the reference of my dad. So first thing first, something about me, I work as a security engineer at Pinot. I suffer from voluntary stress because like I, like you can find me volunteering with almost every conference working behind the scenes. I'm more of a security rankler than engineer. I live on the principle of working around and finding out the landmines in the organization infrastructure and architecture. You can always find me on Twitter and discord. So let's start. Okay, so as once Dan Kaminsky said during deaf on 23. Who are we who are the hackers like we are the people who manipulate how systems really work, not just merely how they are supposed to work. And that does not always mean we know how they work. It helps, but we don't always know, and not knowing how things work, tends to cause them to fail. And we hackers just define the failure condition as a success, success condition, when every engineering team fails security team wins. And like we in security thing that's people other people can make mistakes and fall into pits but we security folks are immune to everything. But we believe every screw things all the time, but we just have an attitude about it. So that modeling, what is set modeling, like by definition, that modeling is a structured approach of identifying and measuring risk or prioritizing them, determining the value that potential mitigations can reduce or neutralize those threats. In general, when we when we proceed to that modeling, there are four questions which comes in our mind. First is what are we building or what we are looking at, but could go wrong, either it's an infrastructure application, or maybe a physical building, you're like you can fit model anything, any infrastructure, anything. So it reminds me of last week I was attending the initiative virtual conference and there was a talk about that modeling your mental health, unlike it was a superb talk. Then we can identify threats by thinking what could go wrong. And then when we recognize states, then we need to understand what we are going to defend to defend us against those threats. The final step will be like, if we know that we are threats, we know from whom we have to defend ourselves. Now are we acting on those trips or not. If we have acted then what's the result of this now. I'll start with some boring frameworks to get the basic understanding. I won't go deep on to them, I promise. And like, as, as usual, no one likes doing things in theory. So let's start with Octave. Octave is more like practice focus set modeling framework and full form of Octave is operationally critical set asset and vulnerability evaluation framework, which basically defines the risk. Like which basically defines strategy based on risk assessments and planning techniques, like Octave is a self directed approach when you are starting with Octave. It just gives you variation of tailored limited means that you have unique constraints, limited to your organization size. And one more variation of Octave, which is like Octave is, which is used for the teams less than 100 people and having a threat modeling function of only just three to five people. This strike strike is mostly works with in reference with ERM and what ERM is enter ERM is enterprise risk management. So it mainly works as a risk management tool within this framework that models are used to satisfy the security auditing process. The threat models are based on requirement model and the requirement model established the stakeholder defined acceptable level of risk. Now what this acceptable level is, we'll talk about it later when we will be talking about risk acceptance and installments. The analysis of these requirement model is a threat model from which sets are enumerated and assigned a particular risk values, which ties to the businesses. Then third stride stride is quite popular, and it's mostly a developer focused at modeling technique stride stands for spoofing, tampering, repudiation, information disclosure or denial of service and escalation of privileges. So it is just a model of threats used to help reason and find threats to a system. It is used in conjunction with a model of target system that can be constructed in parallel. Like, like other threat modeling models stride do not works as a works only in ideation phase or just at the end cycle, but stride is like stride is applicable during the whole product life cycle. Like at every step you can think what we are building, what processes we have but data stores we have what data flows we have and how we are creating the cross boundaries between these, all these data sources. Today it is often used by security experts to help answer a simple question, what can go wrong in the system we are working on. Then we have pasta, pasta is basically a process for attack simulation threat analysis. It's a seven step risk centric methodology just like strike. It also works on to risk management thingy, but like it measures business impacts more from the attacker's point of view. The intent of this method is to provide a dynamic threat identification, enumeration and scoring process. Once the threat model is completed, security engineers can develop a detailed analysis of the identified threats. Finally, the security controls can be enumerated again, the methodologies intended to provide an attacker centric view of the application. So that's all about frameworks. Now why we are thinking so much about threats? No one likes threats, no one does. But we cannot protect against anything we do not know about. So we need to know threats if we want to defend ourselves from those threats. So basically threat modeling helps us to have a mitigation strategy and techniques based on the identified and documented threats. You basically identify and address the greatest risk, you prioritize threats, which threats you can assert, which threats you can circumvent with another technology. You increase the risk awareness in your organization. Then you basically, once you have threats and once you know how, how your risk exposure looks like, you benefit from cost justification and support for needed controls. You can use artifacts to document due diligence for each software project, each infrastructure project, any kind of project you have in your organization. Then some examples like how threats look like basically and like we will be talking about examples only in the text of stride, because otherwise it will be a lot of examples if we start picking every framework. So stride, as I said, stride stands for spoofing, tampering, repudiation, information disclosure, DOS and elevation of privileges. Like every, every keyword in stride impacts a particular parameter of paradigm of information security. So spoofing impacts authenticity, tampering impacts integrity, repudiation causes non-repudability, information disclosure is breach of confidentiality, DOS is breach of, like there is no availability and elevation of privileges, breach of authorization. So what is spoofing? Spoofing is basically illegal access and using that access to have, have information which one or not supposed to have. The basic example can be cookie hijacking, like for example, if you have an application in your organization where you can, if you reuse cookie of another user, then you can basically log in into the account if there is no 2FNM. So, so that's a spoofing fit from that particular application. Then we come to tampering, tampering is more about integrity and like example can include unauthorized changes made to a persistent data, such as that held in some database and alteration of data, or maybe alteration of data when data isn't flow from an open network to a computer like man in a middle attack, you intercept thing and you manipulate it to a proxy. Then we have repudiation. Repudiation gets a bit complicated, like repudiation is associated when you cannot, repudiation can be, can cause non-repudiation, which is like when you cannot backtrack the actions of a user, backtrack malicious actions to a user. For example, if you have an application in your organization, which can only have single admin, and you have three system administrator, and what they're basically doing are they are using single set of credentials between three of them. If one of them poses, like is the insider set to the organization and they do some malicious action, you cannot use the audit logs of that application to backtrack the activity of the malicious user because all three users are using the same set of credentials. So when there's a non-repudiation, logs becomes useless. So it is considered as a risk. And then there's information disclosure. Information disclosure is just breach of information which should not be exposed. And it can be accidental share of files externally, like if some files are confidential to your organization and they get shared by human error or by insider set outside the organization, then basically it's an information disclosure. In some cases you can reduce human error factor, for example, if you have shared drives in your company and human error can happen that one user accidentally shares your confidential data with someone external to just a single click. You can enforce controls that like you can have DLP policies on your shared drives that you can restrict external use, external share at all. So even if they make that error, it won't happen. Then there's denial of service. Denial of service is basically denying the service to valid users. For example, making a web server temporary, unavailable or unusable. So we have elevation of privilege and unprivileged user gains that privilege access and then compromise the security or destroy the entire infrastructure. So yesterday I was having an interesting discussion with a friend about elevation of privilege that if if we have a project in an etiquette management tool. And if we want to restrict that project from admin of that particular tool, then it's it's nearly possible because admin can always give themselves privilege to have access to that project. It's an issue. Then when to now we know what is that modeling, how to do that modeling now when to do that modeling. Mainly that modeling is done as a top to bottom exercise, then certain benchmark service. For example, if you have plan, if you have plans of launching new set of features. If you have been developing new features, or you have like your acquiring some companies. So maybe you want to hit model the coming entity, or you might be having a compliance requirement. Or you might be needing a regulatory approval so that modeling matters because it gives you the risk score of a company which ties back to which ties back to finances of the company. And like when the one use case which I always think is like if a engineering team is if an engineering team face some incident and they're doing root cause analysis. Then they, they can do that modeling during during our CS as well, because even when the root causes of more pedestrian nature performing a root cause analysis can get the right people thinking about potential fits. They may have ignored previously or they never considered them, or maybe by patching that particular vulnerability, they might propose new dependency which may introduce unexpected security issues. And otherwise in my opinion that modeling perspective should be the way of life for every security engineer or like engineering team, as it promote security by design from every aspect. A day comes when you don't have to do that modeling exercise anymore because you are designing everything from the third modeling perspective you are thinking security before doing things. And it is applicable from application to infrastructure infrastructure to your physical even physical security. So now when not to do that modeling we just said that we should do that modeling by default but then not to do it. Basically, I can think of only one thing when not to do it when you have plenty of things in your environment.  Don't overwhelm your engineering team so they stop caring about the threats. And once you find the opposite, it is a mirror of security gaps but cyber threat is mainly a reflection of our weaknesses. Then my dad, my dad is a great third modeler. And that's a good thing. But what he's doing wrong. He's doing this. He's making the same mistake but almost every security engineering team makes, which is third modeling. Being good at modeling is one thing and dealing with the outcomes of it is another. So if you're doing that modeling, you're getting reports. How are you dealing with the results? Are you becoming overwhelmed? Are they becoming overwhelming to you or like what's happening? So basically two wrong things happen. Usually when you deal with the third modeling reports, first is either security teams becomes too paranoid or engineering teams stop caring at all about them. And those are like usual cases and they happen in lots of organizations, why they happen. Mainly security engineers when get too paranoid, they become a bottleneck for every processor, everything coming. So we can start with risk acceptance. What is risk acceptance? So risk acceptance is like amount of risk your organization is willing to accept and just after it is like capacity of risk, they can like diverse kind of risk your organization can accept to achieve its business objectives. Organizations basically recognize that they cannot remove all risk from the business. And like we exist in world full of risk and for achieving our business goals, we need to require accept some risk and mitigate them or either transfer them. We can have, we can have compensating controls around the threats to reduce the threat and have then residual threats, which is like off lesser risk factor. And then what is this tolerance? This tolerance is the amount of acceptable deviation from an organization's risk appetite. By risk appetite is a broad and like strategic term. This tolerance is much more of a tactical concept that identifies the risk associated with a specific initiative or a specific project. By risk appetite is organization's appetite and this tolerance various project to project. One way to understand the solution is I was reading an article by Tech Target and they presented it like where for example, when driving, driving at very high speed on government roads is like, is a high risk for the driver and to all the other drivers on the road as well and government creates speed limits designed to control the system. The faster a car drives, the more risk is created. So the lower the speed limit, the lower the degree of overall risk to the every driver on the road. However, lower speed limits, lower limits also inhibits the flow of traffic preventing vehicles from quickly reaching their destinations. Governments balance these concerns and determine the appropriate rate of speed, which is like government's risk appetite. Like how much risk they are willing to take to strike the balance between risk and fit. Then fun part, how I built a fit modeling function with just three people, including me and our team. And like it's totally doable just just give them a perspective just make them think and just make them think how things can go wrong and tell them to spread that mindset. Like when I started in the organization we were just three people, loads of features in product were coming, we were reinventing infrastructure we were migrating to different technologies. Hence that modeling was needed everywhere we were waiting on regulatory approval we were waiting on compliance requirements. We be hard to do that modeling at every every step and there were so many line land mines in between. So in my experience frameworks are good for for to give you a mountain site of perspective when you are new to that modeling. But with time you develop it like frameworks becomes a bit hard to scale up or become a bit complicated for a big organization. And it's it's sometimes hard to go by the book all the time. So you can have your own framework and you can decide how you want to measure the thread and link it to the response. Then once you are proficient at it modeling that you pass on that mindset to every team then every team, every engineering team learns to set model of what's coming and even gets better as they understand the product more than you. They understand the infrastructure better than you as they're working on infrastructure all the time, and they see the gaps just better than you. Like I've been on calls where I used to do that modeling and now those developers or those infrastructure engineers are doing that modeling way better than me because they understand how it is working. I have to first understand the technology to find to highlight the test, but they already know how it's how it's working in detail. They just need that mindset to look into things what what can go wrong and imagine every worst case scenario. And as I always say that that modeling is more than just an exercise. It's a mind mindset or a philosophy. I'll conclude my slides with like thanking to Max and who helped me bring storming ideas and curating a raw idea about the third modeling and like supporting me into building the whole function in just with just three people. So any questions, you can always find me at Twitter and discord and I'm quite active there and always open for chat. Thank you.