So my name is David David the dust. I'm with IBM research for many years now I'm also work security work group lead in Knative and member of the TOC and I'm also the owner of the guard code that we will also talk about today Yeah, my name is Roland host. I'm a software engineer working for red hat Where I dive into the world of open shift serverless, which is our Knative distribution on top of open shift and we make sure that it really works top-notch on this and I have to confess those security is not my main gig actually but security is on my mind when I'm working on software and developing software or on products and But luckily we have David here. So David is really the the true security expert and I would like to ask David now so for the next 30 minutes I hope I'm really eager to see what David has In the box for us how we can improve our security and that and I hope you enjoy this talk as well Okay, I think it's it's a fair to say that Everybody of us is really when dealing with CVEs. It's like weathering a storm and all our daily work so CVEs pop up out of nowhere and It's usually some of them are small and so easy to fix some of them are not and it's really Mostly in all hands on deck situation where you have to drop your work and start patching stuff like this And and of course that while we are really Fighting with the CVs and fixing them the bad guys do this as well Of course, but not for patching those but actually just to exploring them and really to break through our defenses and To be honest, this is really as a developer. It's really exhausting. It's something I'm I'm a creator at heart So I'm not a fixer. So I really want to be innovative innovative and not really responsive and just defend stuff like this and I think but I wonder really and this is my question out to David is really do you think that we can kind of really Stop this cat and mouse battle that we have break through this really cycle. Is there anything better than just having this? Reactive play with the attacker or not. So this would be really really curious about that okay, so to Really understand why situation in the defense side is so dire What we need to do is to see and understand the offenders ecosystem but not only that offenders of course have Access to all the vulnerabilities that we are gladly publishing. They also have available Exploits for many of them and these are available to offenders in a source code They can modify them. They can improve them more of them such as they can evade our security defenses now Having an exploit and having the ability to Modify it and improve it is like having a key to the vulnerability which is a door But this key the key It's important to know that this key doesn't open a single door It opens a door another door and another door another door is the same key So all I need to do as an offender is try to use that key against enough doors to get in Every door I open is an opportunity for a profit, right? I can steal data. I can sell it I can recruit to the node to my botnet. I can rent or sell that botnet I can do some extortion by using rental ransomware. I can make money out of open doors So for me, it's really a very lucrative business. It's a great return on investment. I Start a script and then go to the beach Spend many hours on the beach then when I come back I can see how much I made today in my hard work day on Defense side situation is a bit harder because a defender needs to protect against all keys He needs to be 100% secure and there is no way you're gonna have a description of all keys in your system to stop them You create signatures or you add signatures Maybe thanks to your security vendors to your system to protect you for all kind of exploits But it's never a hundred percent. It's 99.9 But you have that list and your neighbor has a different list and His neighbor has a different list because each one is using a different set of signatures Now for an offender, that's great That just means that when I'm going to use that key I'm gonna find who is who doesn't have the right signature for that key and I will go in Right and this is why defenders Sweat while offenders Spend their time on the beach and this is exactly what we need to change in order to make our life easier Yeah, I told you understand that David So this is really something and I wonder how we can go ahead in this game So actually use you said, okay We have to usually you have to track all the all the signatures that are available the unique signatures Like there, but isn't there a way how you can maybe? Prevent or detect exploit and then block them in advance without knowing the actual exploit I think this would be really a good Advantage of course, maybe then we we can go to the beach as well We all hope so so Put yourself in in the seat of border control officer Are you using a list of signatures to decide who gets in or who doesn't Do you have a long list of everyone who is a suspect and then if he's a suspect go send him for interrogation And if he's not let him in I Don't think how that that works So how would you decide whether someone is a friend or a foe? You have three minutes you can ask some questions You can look at the history at what what it said about that that person but previous entries to the US or whatever You have three minutes to decide how would you do that? Maybe through extensive training you would be able to identify that he's edgy or Sweating or or in some way Confused it doesn't fit what he says just doesn't make sense So you say okay, let's flag that one Send him for some more time that he will spend us so that people will either would ask him question before we let him into the US So you're looking for some tells you're looking for some Indicators that would tell you that this person should not just let in before you look further into that to that person to that alien Um with cloud native What what we need to do is is quite the same if you have a request coming in into a service We should ask ourselves. What are the tells? How can we we identify that this request is not should not just let in? This indicator that we are looking for this is what will help us identify that this request is not the normal Situation that's not what we expect So it involves Anomaly detection, but a very specific one one that is tuned to what we should be looking and what we should be looking is what we We need to further investigate This can help us identify a suspicious request But it can also help us identify as a suspicious service because if one of our services gets hacked Then it starts misbehaving not behaving as the way it used to behave before So it can also help us detect vulnerable hacked services The beauty thing about cloud native is that cloud native already did half the work for us Because we are already taking this monolith this big workload and dividing it into small pieces a microservice a serverless service a function and each such service has a Very correct well characterized behavior. It does typically one thing and therefore it also expect to receive one type of request and If that's the case there is a good pattern Also in the request and in the behavior of this small set of code that process that request So if there is good pattern, then we are good to go with trying to identify What in that pattern should be monitored in order to identify that it is an exploit being sent or a service being hacked Okay One more thing is that that note that signatures are a denialist They say all of these should not let be let in Security behavior analytics is Looking for an allow list. It would say okay That's the okay behavior of a request. This is how we request this this request for this service should look like and Now when you do something Off which is in security way. It is off. It is not correctly Not doesn't seem right from a security perspective. Then we should block it Okay, sorry. Yeah, okay, so I actually understand that so it's a SPA is about recording the good behaviors, right? And and of course, but then you have really also you need somebody who collects all the good and also the bad behaviors and have this list but this list is kind of It's also loopholes. Yes, so attackers might also Exploit those lists or find some ways around it. And is there any way how SPA can adapt to this behavior so that you Get how we can we analyze this behavior better or how can it work on this? Okay, so this goes to really to the secret source of of Security behavior analytics This is both the area is really important in that technology, which is what exactly do I am monitoring or what are the tails? And and I would suggest that what we should be looking are the atoms from which the exploits are built from We should be under we should instead of taking the fight to our end We should be taking the fight to the offenders And we should be asking what? Constitute an exploit that is being sent over the API What is it that is there which would let me as a person when looking at different requests identified? This is an exploit Curly brackets a dollar sign Quotes comma all these appear normally in the field, right? but they're also Essential for many exploits. So these are tails Well, if they appear normally in the field and these are tails, how can I do anything about that? Well, I need to look at each and every value and examine it for itself If there is a certain value and it's it never includes a dollar sign and suddenly I see a dollar sign I should be asking questions Because I already know that this value when sent to that service does not is not expecting to see a dollar sign Same goes for curly brackets and other Indicators and these could be unreadable characters that are being sent or unicode A very long length and many other indicators and we can go on and on make from simple indicators to a more complex and more complex indicators When I'm talking about each value what I mean is that I'm we are going ahead. We're gonna have to analyze each header HTTP header with its value. We're gonna need to analyze the query string We're gonna need to analyze the JSON body for each key and value We need to use that structure that they being sent to us and look at each each and every value inside separately such that we can evaluate its Content if it's content include those indicators. Yes or no and which of the indicators exactly This will help us identify when this value is now being used to carry an exploit Okay, so I understand so this sounds really very good and actually I understand okay You you really check the the pattern and the format of the input and have some some rules for that And but my big question is so this sounds. Yeah, Sean sounds nice, but it's just really a game changer This is really something that is disruptive in the sense that it really breaks the The game that this battle that we have described at the beginning. It's a really is it longer What what does SPA to actually to break the circuit? Okay, so to understand that we need to to look at those indicators It's if they are different dimensions in a space and think about a Certain value and in that value you expect to see certain Indicators go activated and Then if that's the case when these indicators will get activated It's like a subspace from the all possible indicators of the universe that we are monitoring of course all all indicators that we are monitoring Let's say that we cannot detect between an exploit and a good value in that In that specific value in that for in the header of the user agent for example Then this means that both of them if that was to the mention I'll look like a Long line so we cannot identify between the normal and the exploit So we need in this case to add another indicator We would identify that we are missing an indicator that will help us see now a three-dimensional space Identifying between normal and an exploit and every time we added such an Indicator it's not like a signature that only stops a very certain exploit. We are now making all values Allow us it allows in all values to see another aspect of an attack that we haven't seen before So by growing our number of indicators We can quickly reach a point where the Offender is losing any ability to send an exploit because everything that he's sending is being detected by the different indicators So we are reducing the space of the offender and by doing that we actually actually starting to eliminate all the exploit that he has in his In his bucket of exploits From being effective against our system No, oh, this is really a lot of theory They take David's actually and do you have actually is there anything that really is for real so that we can look at it Do you so what is the journey of SPA? Is there a tech tool that you can use for actually implementing these algorithms that you have demonstrated and maybe you have even a demo for us This would be super awesome Not surprisingly we have a demo Okay, so that's just a quick look at the history Let's see where are we in the time? Okay So it used to be an IBM research project and then we moved it to open source as a K native extension And then we made some more work on it such as we can use it in Kubernetes and in In vanilla Kubernetes is a sidecar And we can move and change this to run in any cloud native environment Oh, sorry Yeah, so the demo we're gonna have we're gonna use is is log for shell I mean, I would expect most of you to to be familiar with log for shell. It was very very well known two years ago And what we did is we took log for shell attack. We was first first see that attack and that attack would Install Wanna cry run somewhere a mimic. We would mimic wanna cry run somewhere being installed On a system and then we would see how we can stop it with security behavior analytics with guard Yeah, I do remember this look for share thing. This was really Disaster Yes, so the question is do we need to wait for the signatures for log for sure? Exactly, so can we stop it would would have been good if it would be prevented in advance, right? Yeah so So just just so we all understand the demo we have naive clients going sending to a vulnerable Application that vulnerable application logs the user agent Now our attacker what he needs to do he needs to set up an RMI server Somewhere and then send an exploit through a malicious client that will have in the user agent a certain string This is exploit which would tell the vulnerable app to go to the malicious server fetch some malware and Executed okay, so Let's start So on the upper screen on the yellow screen we're going to see the logs for the vulnerable app On the middle screen we're going to see just a log for the RMI server the malicious RMI server So gonna install wanna cry and this is our client on green and we sent a request the user agent as you can see his curl so All all nice and cozy we'll try another client. So we just see that it's working And yes, we now see that the Mozilla is the user agent So this is as an offender immediately send you to that spot of asking, okay Can I control the user agent? Can I control what is being logged? I will try xyz and its logs is xyz excellent now. I can try and send my exploit So I'm sending an exploit. This is how the exploit look like it just tell the vulnerable app to go to them the malicious server Stop just for a second Notice that now what is being logged is the object handle the object that was fetched from the malicious server And this is because look for chairs evaluated this expression, right? Yes It evaluated that expression that exploit and then that evaluation resulted in going to the malicious server RMI server and fetching whatever the result is Which then was executed in in the client and therefore when we refresh We find out that wanna cry was installed Well, it's a mimic one. It's just the page. Don't worry So next let's see what happens when we have security behavior analytics We we run the security behavior analytics to begin with so that it knows the normal traffic and We place it as a sidecar in front of the vulnerable app So first of all we run on top of the log for the vulnerable app and in the middle the log for the guard Which would save it? This is a sidecar and we send the first request We see there is no alert and a curl is being written up We send the xyz xyz is being printed out Guard is not has no concern about it Mozilla same same thing But then we would try to send out the exploit Now the important thing is that this request should not reach the vulnerable app, right? so as you can see it didn't and What we see in the debug mode is that it was blocked by guard and then the info why it was blocked by guard and It has some dollar sign and column sign and curly black heads and all kind of things that we don't expect to see in a user agent From our experience with this request This is really the crucial Moment where we say okay guard never saw log for shell God is not aware of this specific attack This could be a zero day as far as a guard is concerned everything is a zero day as far as guard is concerned But to be to be honest most of us will not encounter a zero day in our systems Most of the other export we will see our export that we just didn't cover us of well enough from Which is meaning it is for us a zero day it is something we are not prepared to to protect from Okay, so it's it's it's for technologically wise it's the same And one more thing is that that guard is keeping all those rules What should what is a normal situation in a Guardian which is just a crd on our system? I saw the CD then contains these rules to say okay No dollar signs are allowed with the braces around so that blocks and so these micro rules are then stored in a CD That's correct and just see this CD so we have some sense of what it looks like So it has some control so block or don't block learn or don't learn and so on and then a bunch of Keys and some numbers around there which are not that hard to understand and we will Maybe talk about that a little later Okay, oh this This really sounds sounds like a lot so actually you guess this year it gets really long if you have a lot of lists of what this thing and I wonder now do I have to manage this list on my own actually or is it I? Mean there's no general one Size fits all the situation so actually we need to adapt this for all of your service individually But if you do this manually, I think this is you still have a lot of work So be more less like I don't not sure whether this really makes my life much easier Is there a way how this can be improved or make might be easier? Yes So just just before I go to the other slide I think I think you raise a very important point of which you maybe wasn't emphasized before It's crucial for this defense that we will protect every service. We would build this You know a suit for every service on its own We are it's not one fit one size fits all We need a guardian first service and and the reason is because then we can really make sure that its value Allow list is only limited to what is really necessary for that service And this is a lot of work if me as a person needed to build one then maybe I can do that, but then The the service changes there is a new vision. There are other services just to maintain it becomes a nightmare It's it's hard And this is why the technology guard comes with a machine learning entity that would Make sure that we have a guardian being created automatically The way that this is done is that whenever a request come in is come is coming in We are profiling that request That profile is then used for two different things First it's being sent. It is being piled with other requests of the same service also from other pods and Then that that pile of requests is being processed in a machine learning in the guard service in To do some machine learning that would create all the micro roots for us Second thing is that profile is being used against the existing profile that we existing guardian that we have To see whether this request should go in or not should Bring up an alert or not So these these two things are being done with the same profile and both of them are done as we go along We don't I mean we can decide not to learn or to stop learning these are things that we can do We can decide whether to block or not, but both of them are done in one system Immediately at that sider sidecar and the machine learning guy. Yeah, so machine learning I think this is very very very helpful But actually I'm a little bit suspicious to be honest so because machine learning, you know putting all this rule into some model and I'm not sure how this can be reasoned about certainly who explains me actually who tell me that I'm really sure So if a CV comes in how do I know that this machine learning model is covering me and then of course I have my auditor where you know he comes by and he wants an order He wants some some proof that it's safe I I don't see now at the moment as how I speak and do that But maybe you could you have my idea how you how this can be improved Yes, so I agree machine learning is spooky in some ways Because if you can't understand what the machine learning is doing As a human then you don't know whether it will stop or it will not stop in attack And you cannot explain to your auditor and you don't you cannot change what is being decided You cannot control what is being decided, but it's not true for all machine learning In God what we have done is that we have targeted As a design goal that the machine learning that will be used is a fairly simple one actually We are using a lot of small and simple and well explainable learners a Big ensemble of them and then we are taking the decision based on the ensemble so that that single Decision each each value that we need to be decided and each Indicator that needs to be decided these are fairly simple to understand and to reason about So it's all human comprehensible and human controlled So human oversight over the machine learning is doable if you decide that this is your design goal If we would build a large neural network to see the request holistically and decide based on that Then we will have a problem Also, the beautiful thing about small learners is that they learn really quick So we don't need them many samples to figure out What the request look like? Okay. Yeah, this all sounds great. So actually this is okay, but you have more I see I forgot that also Yeah, so just to to show you how how easy it is to understand it We these same CRD that you see here is actually Translatable into a very simple UI. We just define what what are the? Special characters that are allowed how many characters How many numbers are allowed how many special characters are allowed in that field all all kind of small Indicators, which are all effective in order to stop An attack an expert from from coming in on on different Situations, okay, that's really great. I think this is very helpful also for my work But I have now kind of a random question actually So I heard something about a concept called zero trust and know a little bit what this means But I'm not on a person clear how the relationship of SPA to see your trust is active I know I heard some Rumors that there are some paper in the works from the tech security around zero trust Maybe you can shed some light on this how SPA relates to see about this would be all I'm really curious Okay, so Just just to make sure that everyone is online In line with as far as zero trust is concerned. So if traditional security is perimeter based Making sure that the bad guy will not come in through the perimeter Zero trust assume that the bad guy is already in Yeah, so it's like a terminal like a Airport terminal where you just treat everyone as a suspect if you walked in the terminal Recently you you know the feeling you're being questioned and you're being monitored in many different ways not only cameras And that's the attitude that's the kind of thinking that goes behind zero trust So is your trust? Everyone is a suspect meaning any request could be sending could be a way to deliver an exploit It could come from a beautiful person that we know very well and has great credentials and he proved his credentials But he may be already hacked So someone else is using his machine to send an exploit So we saw a lot of good stuff from him, but this one is an exploit meaning we need to actually monitor Everything that we see And everything will go wrong. So every request at some point may include an exploit and every service that we have At some point will get hacked With SBA Sorry with zero trust We must With zero trust we must In order to treat this situation where everyone is a suspect we need to evaluate Every request and every service for its confidence level how confidence we are that this request is okay that this Service is okay in order to evaluate that SBA is a great tool to do that Because SBA would tell us if we see if we see indicators for that Request being an exploit for it for example, then we go to access control In zero trust and there's in zero trust. We will have an access control a decision Well, if the risk is very low then do allow him to do all of that But if the risk is higher then maybe don't allow him to do all the sensitive stuff But do allowing me still go in and so on Okay, great. I think You're close to the end of the session. So maybe we wrap up now So there's one little thing which I'm still next me a little bit. So It's really so you said Having SBA is not an all or nothing general solution for everyone So you need to individualize it for every man a service. Do you have any recipes how you can run this? SBA in production so that it's for real worlds use cases okay, so so If I would to use this technology in a real environment I would probably make sure that as part of my CI system I would deploy the service into a test bed run a good set of Requests against it and use that opportunity to build the Guardian So I only already go into the field with the Guardian based on what I've done in the test bed Now that I have that on the field I would probably get some false positives in the beginning because maybe not all of my tests were Completed all the possibilities that are out there. Well, that's an opportunity to improve my tests but also an opportunity to Make sure that to check that what I see is okay What I can do further is that I can move from a learned bucket into a configured bucket copy my my Learned bucket into a configured bucket and then tweak there all the microservices manually one last point Yeah, so this is the last point. So actually I'm I'm from Reddit I'm an open source believer, but I have heard also people who say no Security is better hidden in proprietary software because they have the secret sauce. What is your take on that? Yes, so For me, this is an opportunity I see that as opportunity for the community Because that's that's a place where we can if we join forces to and we build the right indicators and share them We get to that point where we actually eliminate the tool set that the Offenders has Well, they can still use those exploit against others But when they are going to use them against microservices or cloud services cloud native services They're going to find out that those exploit are no longer Viable and in in the way at some time they would realize that going after those Those cloud services is is useless. It's just a waste of energy So this is one option the other option is to continue doing what we are already doing and sweat Hopefully we will choose the option of sharing our forces and Working together against the offenders Okay, thank you very much. We have run out of time So I hope you enjoyed the session and if there are questions come here and maybe you try out Security guard it's part of the native as mentioned and thanks a lot. Enjoy the rest of the good fun. Thanks you you can You can contact us on on slack Yeah, go for some on slack or on LinkedIn Okay, you have to ask a question there and here after and so on. Thank you. Thank you


This study found that rebound tonometry, RT, has the potential to transmit bacteria when used without proper sterilization. Despite the small surface area of the RT-PRO, there is still a significant risk of bacterial contamination. To reduce this risk, thorough disinfection of the probe must be performed before each use. This article was authored by Christian Enders, Pia Klant, Martin Hessling and others.


to the moon. So many gigs. Mr. V here. Welcome to another video, guys. So in this video, we are going to talk about ticket symbol KULR cooler technology. This is a stock that I cover here on the channel in the past. And I give you guys detail as to why I really like this company. And in so far, the company has been performing just as expected and even more. So I'm getting bullish on the stock because I see that more and more companies are seeing the power of KULR technology, what they are doing and how that would impact the next generation of infrastructure of EV and everything that we see moving forward. So that's what I want to cover into this video. But before we get started, guys, if you're new to the channel, we talk about how to earn money, how to save money, how to invest and build wealth. So if that's something that interests you, go ahead and hit that subscribe button and the notification bell so you don't miss out on new content. So guys, I've actually covered this particular stock on the channel. I told you guys what KULR technology does. So just for people that are new, this is a company that develops and manufacture cooling solutions for electric vehicle batteries or even just to protect any sort of sensitive material from either high heat or very cold temperature. So they have this particular carbon fiber technology that they've actually built and NASA has been using it to protect a lot of their stuff that they've sent to Mars. If you see the rover here in this video walking on Mars, they have the technology protecting the batteries that power that particular rover. So again, they have other partnerships that I've talked about here working with the FAA to kind of work on designing and protecting batteries on airplanes. Again, if you can see here, they have other again, partnerships with Airbus, which is, you know, another opportunity to protect airplanes and batteries on those airlines. Again, most recently, they have another partnership that is just signed as of today with Adriene Hilly Technologies to bring a rover Temer Management Technology to EV Motorsports. Again, so you see more and more mainstream companies are starting to adopt this technology. So to me, it's going to give them a lot more exposure and that's going to push the price of the stock up as more and more people see that they need for this. If you go back and look, you would see that all these electric vehicles that we have out there, one key component that you cannot even mess with is the battery. And so if you have a battery that is not well protected, that cannot withstand high heat or low temperatures. Because if you look across the country, if you leave up, let's say in the Midwest, upper Midwest, like Minnesota, North Dakota, you would have really, really cold temperatures in the wintertime, which can definitely potentially impact your battery, the performance of your battery. If you leave in the South where it gets really, really hot, like in Florida, maybe Arizona, you would have issues with your battery too, because very hot temperatures can potentially impact your battery. So you need a technology like this. So I don't care which EV company it is, they have to worry about the temperature of the battery, either very hot or very cold, and they want that to be able to adapt to all the different environments. So I think that's where these guys come in and play a very vital role in protecting and making sure that those batteries function as expected. So just to give you guys some context, other areas or companies that these guys are really targeting right now, again, we've talked about aerospace and defense, we talked about battery safety and testing with electric vehicles, or even they're moving into utility level energy storage. So if you think about all the energy storage that we have right now, those particular storage facilities can get hot, so they're protecting that using their carbon fiber technology that they have. So even 5G cloud computing, also some consumer electronics, all those have lithium batteries that require protection from overheating and overcooling. So definitely you see them really getting into every single space. Again, if we're looking at the future, that the future is going to be green energy, a lot of that green energy is powered using batteries, lithium batteries, lithium iron batteries, just name it. So we see this company come in there and really play a vital role. So I'm getting even more so bullish on this. You guys remember when I did that video, I said it buying cooler technology at about a dollar and 30 cents. And so I'm going to keep adding to my position. My price target for this one, I want to see this thing go as high as $5. Then that's when I'm going to start looking at taking some profit out and then hopefully let the rest just ride and I'll go with the flow from that point. But $5 to me, it will be a good price target that we can jump in and get this one. So again, if you are not in the stock, you can average your way in, don't just jump in. I'll tell you guys that make sure that you average your way into a stock, look for those tips and buy and even this pullback that we had the last three or four weeks cooler technology has just been solid. They haven't seen any pullback. So that is something that I'm excited about. So let's jump on the chart here and kind of take a quick look here. So right now, if you can see cooler technology is going to be sitting at about $2 and 68 cents. Again, my price target for this guy is $5. So I'm going to hold is I'm just keep adding and building a really solid position. Again, this thing has just been consolidating around VWAP here, you know, the last couple of days. If you see today made a little bit move up to the upside today is a 17 kind of squeeze up a little bit and that was because of this news of them actually getting into this partnership with the auto sport EV or the sport company. So again, I want to see them continue to squeeze. So each time I see dips like this, I just keep going to keep adding and then until when I hit that price, I get up $5. That's where our priorities that looking at taking out some profit. So I'm so bullish on this. The company has a huge upside. They don't have a ton of competition and a lot of people don't even know about them because everybody is focused on just on the EV space on the cars. They don't they're not really looking at the companies that support some of the systems that those cars use to operate. So that's why I like this. And then the companies that they are working with again, NASA, it's a massive company to be able to build that partnership with NASA. I think that's huge. I mean, if you continue to do a good job, NASA is doing more and more exploration. They're going to go along with that because everything that NASA is sending up there needs to be powered in some shape or form, either by solar or by just a lithium battery. So you would if it's lithium batteries, anticipate them coming in and they're not just lithium batteries, but they also protect again, like I said, any sensitive device that requires some sort of temperature control to keep it either from not overheating or from over cooling. There you will see these guys, the technology is going to come in and really help there. So let me know again in the comment section what you guys think about this. Just to give you guys again some context here, my price target for this one is $5. And again, I'm just continuing to add to my position each time I see a dip again. I want to know what you guys are thinking. Do you currently own this? If not, do you plan on jumping in and riding that wave? Just so you guys understand this stock is OTC. So this is over the counter. So if you are trading using Webull, Robinhood, SoFi, and maybe M1 Finance, you're not going to be able to buy this stock. You should use companies like Vanguard, Fidelity, TD Ameritrade. Those are those established guys that you would probably be able to buy this stock. I think with Vanguard, it's free to trade over the counterstocks. But with TD Ameritrade, I think there is a commission about $6.30 to trade over the counterstocks just to give you guys that heads up before you go jumping around and looking at and start complaining. Again, that's all I wanted to cover in this video. Let me know in the comment section what you guys think. If you're new to the channel, we talk about how to earn money, how to save money, how to invest and build wealth. If that's something that interests you, go ahead and hit that subscribe button and your notification bell so you don't miss out on new content. Also, guys, if you're looking to get started with investing, Webull City has their promotion way. If you sign up, you get free stocks valued somewhere between $250 all the way to $1,600. Links in the description below. And as always, guys, do your due diligence.  Stay motivated.


So the Purnya Puja is to end live in the house. The space in the house should become alive. And it is now been found, it also kills certain types of bacteria in the air and also on the surfaces. This is a very important part of, you know, warding off infections and things like that. In Indian culture there is a whole attention to the shape and size of the room in which you live because the shape and size of the room in some way, if it is not heavily ventilated, when I say heavily ventilated from both sides, two walls are open and it's happening, then it feels almost like outdoor, that's different, most homes are not made this way. So different shapes and sizes kind of create different kinds of energy structures. These energy structures can, if they become very strong, can determine your psychological and emotional state, which either can be conducive or can become an impediment in who you want to be. So certain substances like sandal in India, there is something called as Samrani which is a very powerful thing, which is used even when people are ill. First thing they do is this and it is now been found, it also kills certain types of bacteria in the air and also on the surfaces.  It is not necessarily a fragrance, it is a different kind of thing that it clarifies the air, it just makes the atmosphere feel more lively. Fundamentally it, whatever structures that are there, it will make indoor like outdoor. Just mild Samrani in the house will make it feel like though you're indoors, the feeling is of outdoors because it's an unstructured space. Especially if death happens in the family, Samrani is burnt for up to eleven to twelve days because they want to clear that air completely. Incense has a certain impact but don't overdo it. One can use it in a sensible manner but these days, incense is being made with chemical stuff. Best you don't burn those things. It's very, very important before you have enough chemical thing happening on the street, in the industry, in the factory floor that you may be working, wherever there's enough chemicals floating around. At least within your house, do not burn chemically made incense because I think that is almost seventy percent or eighty percent of what's available in the market today is chemical. You must take it out before you burn it. It's very, very important because within the closed enclosures if you burn chemicals, well the negative impact of that is very, very big. So it must be natural resin or certain other oils, essential oils and things which can make a difference, a mild difference. If you need that kind of a difference, it helps definitely. So generally in the yogic culture, in the yogic sciences we look at life as a composition of five basic elements earth, fire, water, wind and space. In this fire is a very important aspect of making this life. So fire is seen as a significant element which makes life happen. It's not the only thing, all the five are important. But when it comes to warding of things, fire is always very important. So this is part of it every day in your life. You must light an oil lamp and stay in its presence for a period of time because it will ward off many things, it will cleanse many things for your system. This is a very important part of, you know, warding of infections and things like that.   This will do wonders to you. Please experiment and see. If you sleep, if you can find a safe place in your room where a small oil lamp is burning, you will see it will make a lot of difference for you. Just being in the presence of that fire makes a big difference. The science of yoga clearly establishes this and we know this by our experience. By having a small piece of fire in the form of a lamp burning around you, you will see especially when you're physically not well, it is very, very important to have that. You know what's punya? What is referred to as punya and papa? Unfortunately these things are badly misinterpreted over a period of time. Punya papa means those type of actions. Actions which take you down. Actions which, you know, increase the effervescence of life within you or actions which move you towards the inertia of life. So the punya puja is to end live in the house. The space in the house should become alive. If you have lived in such a way in your home that every moment you're on with love and light within you, then no punya puja would be needed. But today you have built homes which are so large. It's very difficult to make them alive just by living. If you just had a one-room house and you lived in great sense of love and joy, you can easily keep it very alive. But today your house has ten, fifteen enclosures. It's very difficult for any human being to keep it alive. Once in a way if you do not end live in it, slowly if you enter certain parts of your home you will see it feels like a coffin. So punya puja once in a way at least once a year would light it up. That is you have the space around you alive and it supports you. So punya puja is a way of consecrating your home, entire home, every part of it so that there is some sense of aliveness and energy.


Governor Andy Beshear announced that 27.2 million in grant funding has been awarded to assist victims of violent crime Thursday, August 31st. Judy's Place for Kids, which provides services for abused children in eastern Kentucky, was one of the 114 nonprofits across the state that received VOCA grant funding. VOCA stands for Victims of Crime App, and what that does, that funding supports organizations who provide services to victims of crime in our case. We provide medical services, we provide forensic interviews, situations that involve child abuse or child neglect. And I'm watching wireless. We have the best service and the best deals right now. Save up to $500 on iPhone 13th and 14th, all models, all gigabytes with trade in. Maybe go for an iPhone 12 for a penny, a penny with a two-year contract. We're not leaving out Samsung. Save up to $350 on select Samsung devices, including the S23. It's a win-win this month at Appalachian Wireless. The service. The savings. Y'all got to jump on this deal right now.  We are Appalachian Wireless. While Judy's Place was granted $179,000, the state has seen significant decreases in federal funding for VOCA grants. To reduce the strain, the Justice and Public Safety Cabinet allotted an additional 10 million of funding from the American Rescue Plan Act to help offset the reduction. It's such a huge portion of our funding and it allows us to have the Child Advocacy Center. So each cut impacts our ability to sustain as an organization to have the staff available to provide services for the children in Kentucky who need and deserve those services so we can prevent, you know, the generational abuse and neglect. For more information about Judy's Place for Kids and their services, go to judysplace.org. Reporting for Mountain Top News, I'm Breanna Robinson.


The second satellite in the Navy's new Mobile Communications Network is set to launch into orbit July 19th. The Mobile User Objective System, or MUOS satellite, is a system that uses commercial 3G cell phone technology to provide communication services to mobile military troops. The assistant program manager, Commander Matt Boland, explains the timeline of the program. So, MUOS 2 sort of represents the penultimate moment in the development of the MUOS program in the sense that not only are we launching the second satellite, but the ground system, the networking software and the waveform are all being delivered within the next couple months. So, with MUOS 2 on orbit this fall, we will be testing the full MUOS system with all of the new capabilities that it brings, and then that will be delivered to the warfighter next summer. MUOS works like a cell tower to serve ships, submarines, aircraft and land terminals that the military use to communicate. Once the system is complete in 2017, it will provide coverage to mobile military communications like never before, and users will benefit from the system in many ways. Over the current UHF legacy system, the user is going to notice more bandwidth that's accessible on demand as opposed to pre-planning the channels, better voice quality, simultaneous voice and data, better connectivity in remote regions while they're on the move, in urban environments, in the weather, so it should be a great revolutionary leap for UHF satellite communications for the DOD. To learn more about the MUOS satellite program, visit public.navy.mil-spaywar. From the Defense Media Activity, I'm Petty Officer Andrew Johnson.


Right nearly all of us want harmful content taken off social media We know it's there almost half of all teenagers have seen something harmful on social media in the last month So the problem is none of us are doing anything about it The Chartered Institute of Marketing says two-thirds about 62% of children say they rarely or never report Harmful posts only seven percent say they always do now This is important for business as well because it gives social media a bad reputation It lessens its appeal as a marketing tool You know who wants their brand to appear unwittingly next to disturbing images now We're joined by Lee Hopwood who's chair of Chartered Institute of Marketing who's been researching this matter Lee Let's just get the basic facts right. What are what do we mean when we talk about harmful images? Well really harmful images are anything from anything that might be sexually related or terrorist related But it's not just harmful images. It's harmful video content. It's bullying. It's abuse There's a lots of ways that harmful content is being Displayed on social media when it shouldn't be okay. So why don't people report this? Why why such a large number of teenagers see it? They know they don't like it But they don't know anything about it Well, I think there's a number of things to be honest I don't think the social media companies make it easy to report harmful content And I think they could make it a lot easier by making those report buttons one available and two much more accessible But I also think and one of the reasons why I'm here today is because we need to make it much more aware to the public That we should be reporting content I think there is a the government needs to do a public awareness campaign to make sure that We as as individuals as parents are Reporting that content and that we are making sure that our children are reporting that content Children are less likely to report content than adults So the government has now said that if people complain about something then That the social media companies have to take it down But you're saying that's simply not going to work if we don't go to that first process of reporting it Absolutely, so the government is putting forward a proposal to say what the social media companies need to do However, they need to get their people their processes their technologies in place to be able to respond to what could be a Huge wave once they start enabling people to report that content far easier now Surely there's a business that the business angle here is important because surely a social media company wants to attract advertising Wants to get its advertisers there, but if it has a reputation of doing nothing about Harmful images those advertisers going to be scared away So it's got a real incentive the social media companies have a real incentive of keeping the place clean as it were Absolutely when so why doesn't it work? Why doesn't it work? Well? I think the the social media companies are obviously focused on their their revenues They want to see their revenues I think there is such an increase and quite a rapid increase in the number of people that are Starting to disengage with social media and I think that the danger is that if social media companies don't embrace what's inevitable then Then they'll end up disengaging their people their users And if they're their users aren't there then the the companies that are spending money 52 billion pounds a year on social media those companies will simply start looking at how they can spend their money elsewhere To engage with their customers. Okay, Lee. Very good to talk to you. Thank you very much indeed. Thank you very much


Welcome to All Hands Update. Here's what's happening around your Navy. Chief of Naval Personnel Vice Admiral Robert Burke and Master Chief April Beldo spoke with Sailors in Newport, Rhode Island. CMP and Master Chief Beldo spoke with senior Navy leaders to discuss raiding modernization, implementation, and Sailor 2025. The latest Joint Warrior exercise took place with U.S. Navy representatives USS Porter, Fleet Replenishment Oiler U.S. and S. Lee Roy Grumman and aircraft from Patrol Squadron 45. Exercise Joint Warrior is a United Kingdom-led exercise comprised of numerous joint training scenarios such as small boat attacks, anti-submarine warfare, and air defense. If you speak multiple languages, the Navy Language Regional Expertise and Culture Office may have an opportunity for you to put your skills into action. For full details, visit navy.mil. You can read more about what's happening around your Navy at navy.mil.