Prime Minister Kriya Kos Miskotakis says the wildfires that ripped through the outskirts of Assins and other parts of Greece this month underlined the need for radical shifts in behavior to tackle global warming. But opposition parties accused him of a lack of preparedness and organization. Everything needed to change in order to minimize the effects of the climate crisis. He told Parliament during a debate on the wildfires and criticism of the government's response to them. Sweats of forests this month were scorched by wildfires in the outskirts of Athens, the island of Evia and areas of the Pelopons, including the ancient Olympia near the archaeological site of the ancient Olympics. Click the notification button so you get notified about fresh news updates.


Therefore, it is time for Member Statements, the Member from Kitchener, Conestoga. Thank you, Speaker. It's with much appreciation that I thank the Greater Essex and County District School Board for their lengthy, now victorious fight to be allowed to tender projects fair and openly. Since 2001, the Board has fought for their right to the highest quality work at the best possible price after being certified as a construction employer. A school board is clearly not a construction company, and yet certification has meant closed tendering, which restricts bidding while limiting competition. After three attempts by the school board to prove it met the definition of a non-construction employer, a recent Labor Board decision finally means the school board's construction projects are open to all qualified contractors. So, area contractors head over to the Board website and start bidding as Greater Essex is open for business. And while we thank the Board for their perseverance and persistence, their struggle for fairness only further highlights the flawed legislative loophole that allows school boards and municipalities to be certified in the first place. Since the Liberal government rejected my Fair and Open Tendering Act, the impacts of closed tendering continue to drive down competition in Hamilton, Toronto and Sault Ste. Marie, of course, in my region of Waterloo, while driving up costs for local infrastructure. That's why I'm here today to not only thank the Greater Essex and County School Board, but also to build on their efforts. I remain dedicated to restoring fair tendering for our public sector institutions, Speaker, and look forward to taking further legislative steps that will make it clear rules for construction companies should not apply to municipalities and school boards. Thank you. Thank you, Speaker. Speaker, over the past few weeks, two independent officers of the Legislature, the Auditor General and the Environmental Commissioner, have reported on the Liberals Climate Change Action Plan. Speaker, neither support the claim that the government's plan, as written, will allow Ontario to meet its 2020 target to protect us from dangerous climate change. And Speaker, that's a big deal. We're approaching substantial climate tipping points that could put us at much greater peril. This is not a time to be playing games. Both the Auditor General and the Environmental Commissioner have serious questions about the viability and credibility of a number of the major programs that the Liberal Climate Plan claims will allow them to meet their targets by 2020. It appears the Liberal government is planning to paper over the gap between the story they tell and the reality by allowing the purchase of hundreds of millions of dollars worth of cheap carbon allowances from California and then saying the job is done. Speaker, that strategy is irresponsible. It drains money from Ontario and frankly could discredit climate action in this province. I call on the Liberals to change their climate plans, to focus on real emission cuts at Ontario and focus on protecting this province from dangerous climate change. Thank you, Speaker. Thank you for your understanding, Mr. Member from Scarborough Aging Court. Thank you, Mr. Speaker. I rise today to speak about the recent basic income pilot consultation in my writing of Scarborough Aging Court. In 2016 budget, the government made a commitment to further address poverty in Ontario by committing to pilot a basic income for Ontarians. We're looking to test the view that a basic income could be better way to deliver income supports while improving the health housing and employment outcomes for Ontarians. The idea of basic income is generating immense interest both here in Canada and around the world. The Ministry of Community Social Services in partnership with the Ministry of Responsibility for Poverty Reduction Strategy has begun consultation across Ontario to get feedback from people with live experiences, municipalities, experts and academics. The consultation held my writing of Scarborough Aging Court last Tuesday was the second consultation of 14 to be held. 78 people participating in this consultation and to date, Mr. Speaker, basic income has received the most feedback ever seen during the consultation on ontario.ca. Over 20,000 responses have been received on the survey online alone. I want to thank the Minister of Justice and Minister Ballet for their leadership in implementing a new approach to improving income security. I also want to acknowledge the contribution Lee Soda, her staff at Aging Court Community Services Association and the clients who participated in last week's consultation. Mr. Speaker, I believe that working through with organisations like Aging Court Community Services Association and also looking into innovative approaches for delivering support we can improve the lives of Ontarians. Thank you Mr. Speaker. Thank you and good afternoon Speaker. Communities in my writing are seeking confirmation from the government on the continued stability of the provincial tax credit for the film and television industry in Ontario. You may remember that in the 2014 budget the government planned to change the tax credit but on this side of the chamber we fought hard to keep it in place. We worked with industry, won that battle and as a result the film industry has re-benefits across the province particularly home in the north. Mr. Speaker, for example just last week a new production announced it would be coming to North Bay. This continued success is what prompted the municipalities of East Farris and North Bay to each pass resolutions highlighting their concerns. Given their uncertainty and the government's commitment to the film and television industry these municipalities resolve that the government of Ontario and the Minister of Tourism, Culture and Sport make a public commitment to the stability of the provincial tax credit system and the Northern Ontario Heritage Fund to ensure continued foreign and domestic investment in northern production along with increased work opportunities for northern Ontario residents of all ages and backgrounds. It is important that the government reaffirm confidence in the film and television industry and support continued growth in the sector. Thank you. Thank you for your member statements. Mr. Speaker, since this is my last member statement before the House rises I'd like to take this opportunity to wish everyone both here and at home on Merry Christmas but even more importantly I'd like to in advance thank all those people who while we are enjoying ourselves over the holidays the people who work hard to keep us happy, healthy and safe all the people in the healthcare industry and even in corrections and all the people you don't think about the people who work not only during the holidays but who work every day but specifically during the holidays and coming from an agricultural background I would like to take this time to thank the farmers of Ontario specifically the livestock farmers who on Christmas Day will be feeding, will be milking will be doing all the things it takes to keep animals happy and healthy and lastly but certainly at least I'd like to thank everyone who was on call on Christmas Day be it a plumber be it an electrician be it a veterinary anyone who was on call I know in my business I have had a few times the vet on Christmas Day pulling a calf and it's jolly I can tell you but there's both places there were places that they would rather be and it's a great time of year and they're protected by so many people in this province and I'm happy to be able to recognize that. Thank you. Thank you very much Mr. Speaker I'm privileged to welcome Global Medic to Queens Park today Global Medic is a non-partisan registered Canadian charity that runs capacity building programs in post-conflict nations and provides disaster relief services to large-skilled catastrophes both internationally and domestically their priority is to save lives by providing short-term rapid response in wake of disasters and crisis both at home and abroad Global Medic is at Queens Park today to package welcome to Canada kits these kits contain essential household and hygiene items that will be hand-delivered to families that have fled the violence in Syria and have newly arrived in Canada the kits are to be packed by all of us here I invite everyone to participate I invite everyone to participate in room 230 anytime during the day and spend some time to support this cause this is a hands-on opportunity for all of us to support the newly arrived Syrian families and welcome them to our great province Thank you Mr. Speaker Thank you Thank you Mr. Speaker I want to share with you a good news story from West Side Secondary School in Orangeville Last month I visited West Side as they held their 12th annual ThinkPink fundraiser for the Breast Cancer Society Canada's Dress for the Cure West Side began holding Pink Day fundraisers in 2004 after several staff members were diagnosed with cancer For the last number of years West Side has been recognized as the top school fundraiser in all of Canada This year was a special celebration of raising over $100,000 since 2004 The students of West Side were packed into the gym and everyone wore a lot of pink to show their support Brave students and staff raised hundreds of dollars by offering to shave their head or cut their hair Some young men were even brave enough to have their legs waxed in public It was a great afternoon as we cheered on students and staff The biggest cheer of all was when we heard that West Side had raised an incredible $20,000 this year Sometimes young people get accused of only caring about their Instagram accounts or their weekends West Side Secondary School proved them wrong Congratulations to Principal Wilson the staff and students of West Side for their fantastic work Well done Thank you Mr. Member Thank you Mr. Speaker What a thrill it was to once again join the St Andrews Society of Kingston as they celebrated 176 years during their annual dinner on November the 20th Guests were served with a traditional Scottish feast which was not complete without a wee I guess and many were dressed in kilts and other customary Scottish attire As always it was a festive gathering with engaging conversation and excellent company Kingston welcomed an influx of Scottish immigrants including my mother seeking better opportunities to Canada following the Industrial Revolution Founded in 1840 the St Andrews Society began as a charitable organization to welcome Scottish newcomers and their descendants as they transitioned to life in Kingston The society continues to play an important role in supporting newcomers to Kingston fostering a strong sense of community St Andrews Society has been enriched by some famous and influential characters including Sir John A. MacDonald our first Prime Minister and I have no doubt that our current members like John and of course legendary Isabelle Turner who instills the fear of God into you if you can't attend a dinner the Rutherfords and so many other families who will likewise be remembered for their outstanding contribution to the society and congratulations once again to the St Andrews Society of Kingston for 176 years of Scottish cultural tradition in our city. Thank you Thank you very much further member statements from Wellington Mr. Speaker During my canvas of Wellington Halton Hills in the 2014 general election I met thousands of people I sought to answer their questions listen to their concerns and encourage their aspirations but I have to say that our constituents do not have access to affordable, reliable, high-speed internet and we know that in today's economy connectivity is an absolute necessity for households, farms and businesses when the House resumed immediately following the election to consider again the government's budget I tabled a resolution urging the government to develop a strategy to ensure that all Ontarians would have access to affordable, reliable high-speed internet to achieve this goal with public-private partnerships exactly 24 months past then this past July the government announced a commitment to doing precisely what we had urged them to do setting aside 90 million dollars with an equal federal government contribution to support the south-western integrated fibre technology project known as SWIFT while it sounded good, they didn't announce a time frame for the launch or completion of the new and improved internet service that they claimed would benefit from the program we all need to recognize the public interest in getting this done working together to accomplish interim objectives and prerequisites and this includes the private sector partners I want to express my thanks to everyone involved with implementing this proposal but let's keep it moving the county of Wellington and the town of Halton Hills are very enthusiastic about expanding access to affordable, reliable high-speed internet let's get behind our local communities and the local fibre network throughout rural Ontario that gives every Ontario an access to high-speed, affordable, reliable internet service and all the benefits that technology entails thank you I'm a part of a member from Brampton West welcome the hard-working Raul Seng who's the Executive Director of Global Medic thank you I was just about to do that so I appreciate it I've known Raul for quite some time after his order of Ontario that he received so congratulations on that


example, to view our dashboard, to view and edit our products, delete them to edit our settings and so forth. And this way, you can hire a virtual assistant to automate your business even more. But even without that, with AutoDS, you're going to get price and stock monitoring. So if the price changes on your supplier's websites, or if the stock status changes, the same changes will be applied to your store so that you will not lose profit and you will not sell products that are out of stock. You've also got quick product importing as I've showed you automatic orders and tracking, product sourcing, marketplace, private suppliers, winning products up, all of the things we already talked about AI title description generator, free eBay templates, plus there's also the AutoDS Academy, which I did not show you. So here it is. And here you're going to get tons of free, free information, free courses, free video tutorials. As you can see right here, I'm scrolling through it, and there's only so much that we can learn here. Right now I'm under eBay, you've got all of these eBay videos. And of course, this video is also going to be added to our Academy. And again, this simply has tons and tons of videos and also courses. So for example, I can click on learn more here. And I'm going to be taken to AutoDS's website to take a full eBay drop screen course from A to Z. As you can see right here, split down into lessons so you can just choose whatever lesson you want to learn, click on it and strengthen your knowledge there. All of this information is absolutely free, as long as you start your business right after watching this video, take action, register your eBay store, start your product research, connect automation, import your products and start making sales. And I've added of course, additional resources inside the eBay cheat sheet. Guys, from here, it's all about scaling and automation. Now I did not go over the rest of the eBay winning products, I'm going to attach this to the dropshipping cheat sheet, I'm going to put it all the way down here on the bottom. So again, if you want access to this cheat sheet, all you have to do is comment hashtag eBay 2024. Let me know what you learned in this video, what is your top takeaway, and I will send you this 2024 cheat sheet with everything that you need for 2024. Now, as I promised, this is going to be the only eBay dropshipping video that you'll need for 2024. And now I hope that you can see why. Go learn from the rest of the resources inside the eBay cheat sheet. Let me know what you thought about this video. Do not forget to like, share and subscribe. Good job on making it this far. It shows that you are serious in starting your eBay dropshipping business and success will follow. Start implementing from the rules that you learned in this video that I've gotten from over seven years of dropshipping on eBay. Good luck. And I cannot wait to hear about your success story in the comments below. Good luck dropshipping on eBay and I'll see you in the next video.


This systematic review found that the prevalence of conflict of interest, COI, policies at medical schools and teaching hospitals varies greatly across high-income countries. In Europe, only a few medical schools have strong COI policies, whereas in North America, more medical schools have strong policies. There are no studies available on the impact of COI policies on research outputs and educational quality or content. This article was authored by Alice Fabry, Christine Rasmussen-Hohn, as Jordan Robjartsson, and others.


So the topic I'm going to give is OpenStack Network Performance Tuning and the design at PayPal. So basically, my name is Aihua Li. I'm leading the Cloud Networking inside PayPal. I have a co-worker, Zenghua Fen. He's also contributing to this work. Unfortunately, he cannot come to this OpenStack Summit because of the visa issue. So I'm going to present the slide here. So the slide I'm going to give is, well, briefly, just to give you an introduction about PayPal and the PayPal Cloud. And we'll pick one specific issue from each of the following categories. One is from data plan, and one from the control plan, and one just from the problem just because of the hyperscale. And then I'm going to give a very quick summary on what we present. So just a briefly introduction to the PayPal. As you may or may not know, PayPal is a 4GEM 500 company with a revenue of about 2.6 billion per year. And so here, these slides give some of the financial data. If you have interest, you can read through. I'm not going to give a line-by-line description about the data. What I can say is PayPal is a big company with many subsidiaries. Here, I just want to give you some idea about the PayPal Cloud. PayPal has a very large-scale private cloud deployment. So specifically, we have many regions, many availability zones. We have more than 500,000 cores and many, many VMs in all the data centers. So again, this just give you some idea about the size or the scale of our private cloud. So after this, I'm going to just jump into the specific issues that we are dealing with. And the first issue or challenge that we faced is in the data plan. When we deployed the standard ML2, here I take the standard ML2 diagram directly from the OpenStack installation guide. And the diagram is a little cloudy. And so what I just used to highlight with the red block, this is the area that I want to concentrate on. So what this shows is, OK, I put this red block over here. So basically, what this shows is we have extra components along the data paths. The VMs are not directly connected to OpenSwitch. And as we know, any time you introduce an extra component along the data paths, you'll introduce the latency and the great throughput performance. In addition, as we know, the in general Linux bridge is much slower than OVS because the implementation is more laxative-based. So however, I think that the main drive from why the Neutron choose this model is based on the security implementation more from the security implementation limitation point of view. Because if you want to implement the security using IP tables and the IP tables are not compatible with the OVS on the earlier versions, so I think that's the reason we choose this model for the standard ML2 deployment. However, this is a very high cost for the performance. Later, I'll show you the specific data to see how the impact on the performance. So I'll present our solutions first. So basically, our solution is we don't want any of the extra components. We just want to connect VM directly to the OVS. And here is the more simplified model that we use inside the PayPal. And so we remove the components. I think the immediate question is, how do you handle with the security? So basically, at the PayPal, most of the security is done at the physical layer using the physical hardware. The user-defined security rules are very rarely used. So on the other hand, if we're looking forward to implement the security, we actually have multiple alternatives. First, if you want to implement the security using IP tables, you don't necessarily implement the IP tables along your data path. You can implement the inside VM. The second alternative is you can make OVS to be compatible with the IP tables. And I think along this line, we know OVS is actively working on this area. And the third alternative is a lot of these security rules, you can directly implement it using open flow. So since OVS is an open flow switch, you can implement that in the open flow. So we have implemented this and put this into pilot production. And we would love to contribute to the upstream if this has interest to everybody. So here's the performance comparison. So we picked two performance indicators, one is the throughput, one is the latency. So from the graph, you can see the traffic, the test we have done is we use the 10G physical link. And we pump traffic into the VMs created by OpenStack. So we can see on the latency side, with the Linux bridge, it's around 1GPPS. After you remove the Linux bridge, we can immediately jump to over 6GPPS. So you can clearly see a big performance difference. On the latency side, with the Linux bridge, you can get 55 microseconds latency. After you remove the Linux bridge, it drops down to 15 microseconds. So this clearly shows the Linux bridge has a tremendous performance impact. The next issue that I'm going to talk about is on the control plane. So again, I take a very typical standard ML2 deployment diagram. So we have a Neutron control cluster. And we have a lot of hypervisors that talk to Neutron controller through the message queue. And I highlight this message queue here using this yellow box. And that's the focus we want to focus on. So when we first tried to deploy this using the kilo version, in the very early kilo version, we did some simulation with the Neutron running in this ML2 mode. We pumped the message hard to the Neutron controller. We can see at around 45 messages per second, the Neutron cannot keep up. It starts to, from the graph, you can see the message starts queuing up. And that immediately becomes a problem. Because as one example, in one data center, we have 2,500 nodes. If you have 2,500 nodes, and the default report interval for the message is 30 seconds for each state's update. And if we do some calculation, this immediately goes to 80 messages per second. It's already bigger than the threshold. So the immediate band data solution we can get is, OK, we can tune the state report interval. If we put it into 90, then the problem is fixed. Because the message rate will be reduced by increasing the interval. However, we are thinking from a different angle. Each time you have some component in your deployment, you have to put a lot of maintenance on top of this. You have to make sure the server is running smoothly, and they have to monitor a lot of this work. So instead of directly fixing the message rate issue, we are saying, why can't we just replace the message queue with a standard REST API call? And we do it on demand instead of doing the periodic state update. So we did some coding, and we did find out that all the message information that we need from the message queue, when you do a VM create, VM deletion, you can get from the REST API. So again, we made this code change in our own repository, and it works perfectly for us. And so the benefit we get is not only we remove the one component out of the maintenance, we also realize that we get another benefit, which is we remove the version dependence between the control plane and the data plane. This is actually a big deal for us because of the size of our deployment. Because each time, if you are talking about upgrading all the hypervisors, it's a big, big task because you have 2,500 nodes. When you are upgrading a control plane, it's relatively simpler operation. Because for example, Neutron, you really have a class of three nodes. I mean, it's much, much smaller problem to fix. So this gives us the flexibility that we can keep the hypervisor if there's no issue. We keep the hypervisor running at the certain version X, and we can upgrade the control plane at will without losing a lot of, depending directly on the data plane or the hypervisor version. The last issues are formed just because for the big scale. As we mentioned in one example, in one of the data center, we have around 2,500 nodes, which I have not heard about similar size in all these OpenStack deployment. So some of the issues that we face, again, I'm just picking some examples. Some bugs, they don't show up until you get to that big size. One typical example is in Linux system. You typically, the limit size is around 1024. So if you have a connection that's around a few hundred, you really don't realize there's a five-descript limit issue. But when you go beyond that, you'll find some bugs. And the second issue that we face are some of the trivial performance issues. It may look trivial when you have a small scale. But anytime when you have a small issue, when you times 1,000, it becomes a non-trivial issue. For example, the message queue processing rate, as we saw before, is one of the examples. Because in that case, when you times 2,400, the message process rate immediately becomes an issue for us. And another example is sometimes you may tune the DB, you configure the DB to get more reliable. Anytime you tune the DB, you actually change how the DB writes the rate, how fast the DB can write. And again, a trivial issue becomes non-trivial when you times 1,000. And lastly, I just want to ask the OpenStack community to consider how do we really test the OpenStack for big scale. So the solution from us is before we deploy any of the new release, we do simulation because the size of our deployment. And for example, for the ML2 agent, we have written a message generator to simulate how Newton will perform for the message queue. And again, internally, we did a lot of bug fix in our deployment. We did find some common bugs that's also, in this case, for example, we found a novel computer retry issue that's common for the community also. So we submitted this bug, and we also submitted some fix for that. And also, in addition to bug fix, we do customization. Some of the examples is we use an IP margin when we add the IP margin as an extension to the Neutron API. And then we also add a customization on the Nova side to use the IP margin as one of the filtering criteria so that you don't get into the situation when you select a hypervisor. And then you find out, OK, you run out of IP. Lastly, I want to also request the OpenStack community to test each release at scale using some simulation. And also, if we can specify what is the scale that this release has been certified, that'd be very helpful for us. So here's the summary of what we talked about. We picked one issue from each of the areas inside the data plane, in the control plane, and in the big scale. And in the data plane, we removed the Linux bridge to gain performance. And we proposed some alternative security implementation methods. Inside the control plane, we mentioned about the issue with the message queue. And we proposed we can use the REST API as an alternative transport driver for the RPC. And for the scaling issue, we really like to see if we can work with the OpenStack community to work out some load tester or load simulator for testing the big scale. And we do some bug fix and customization in our own deployment. And lastly, we would like to work with the community. And we are happy to share our work. With that, that's the presentation. And I welcome any questions? Regarding removing the Linux bridge, did you evaluate the other alternative solutions to add security in the fall-based security or something with OVS before you gave up of doing distributed firewalls on the hypervisor? Well, we actually did not use the distributed firewall. But in my presentation, basically I mentioned about a few alternatives that we can consider by looking forward.  At this time, we are not using the security. So we are looking forward. We have the alternatives. This was my question. Thanks. Thank you. Hello. I'm coming back to the RabbitMQ performance issue. Yes. Just to understand, did you assess how the resiliency was impacted replacing messages by Resta PI calls? How resilient? Because if you replace a message by a call, you could impact your resiliency and how the solution is reacting, losing the message because it's a Resta PI call, it's a direct API call. OK. Let me try to, if I understand it correctly. So I don't see much losing the resilience. Actually, I think it's more the opposite. I think in my view, using the API is more resilient because when you issue the API call, you either fail immediately or you go through. There's no other scenario. When you use message queue, one of the issues that we deal, I mean, to get with the NOVA team is sometimes we find the message just suddenly, you know, you don't know where the message goes. And in NOVA's case, we found the more interesting issues. Some messages go out of order. And sometimes when you put the load balance in front of the message queue, there's a lot of issues like one message service can go down and it can come up. And it's very tricky to debug those issues. You see the message certainly fell over to another service, another node. But somehow this creates a lot of messaging ordering issues. Some messages get corrupted. So the REST API don't have those issues. OK, thank you. OK, thank you. Can you tell more detail about how to you implement the REST API? Use your implement HTTP REST API? Yes, by REST API, I mean it's HTTP. So basically, I take a neutral agent code as it is. So you can actually, we did this on the neutral code base. You can see the actual REST API class is abstracted pretty well. So all I did is replacing the REST API class with my own class. I call it the REST API class. And there's not much code change on the agent side at all. All you do is you use the second mechanical driver. So basically, one driver is the message queue API. And on the other, the imperil, that's my REST API. So it actually decouples very well. OK, but how is that if you use some kind of the messages broadcast? It's also a situation, how do you deal with it? When we replace the REST API, we don't have this REST API, I mean the broadcast issue, because we reduce all the REST API code as an on demand. So it's all coming from the agent side. You post the REST API to the neutral controller. OK, thank you. OK, thank you. More often when we use messaging, it's for notifications. So it's on demand. But with your REST API calls, is there an issue about how frequently you should poll for things and update? Yeah, I think that's a very good question. So what I can say is, using the delay a little bit by maybe 30 seconds or to one minute, I don't see a very big issue to us. Because for example, if you want to change your security, I mean doing all the paperwork to go through the approval takes probably a day to push that. I mean by delaying one minute, I don't see a big issue. OK, got it. So essentially, you're still going to use messaging for when you want to create a port or something. But otherwise, you'll use this for updates and security rules that don't change often, you're saying? Yeah, basically, we use the REST API when you have the VM created or the new event happened. Thank you. Thank you. Thanks. OK, thanks.


Okay. Okay. Okay, everyone up. Okay. True or false? The UK military actually has a program called Skynet. Is that true or false? Green for true, red for false. One, two, three, go. I see a lot of you are familiar with the military thinking. What could go wrong? The answer is true. Actually, in fairness, okay, so I did this same question in San Diego, except with the US military. So the US military actually named their stuff after the movie. The movie named it stuff after the UK program. So interesting. So the Terminator movie, right? Okay. The French microcomputer was developed in 1972 as an alternative to the more expensive digital equipment PDP-8. The first micro cost more or less than $2,000. It doesn't matter. Adjust it either way. It works. Green is more and red is less than $2,000 for this... My mini... Well, it's a mini computer room. Yeah, it's in dollars. Sorry. The answer actually is in francs. Okay. One, two, three, go. Okay. Turns out it was less. Oh. So red for less if you held up red. It was about 8,500 francs. And it depends on how you calculate it. That's somewhere between $13,000 and $1,700 US. So don't ask me why I switched to dollars. Okay. Now, this... You have to have been around Linux for a while to get this one. So there was a really, really famous IBM commercial called His Name is Linux, came out in 2003. And there was a young blonde boy in it, and he was absorbing all of the world's knowledge. It was a very well-made commercial. And he only spoke two sentences. Is that true or false? Okay. So green for true, red for false. One, two, three, go. The answer is false. Because the blonde boy did not say a single word. It's a very good commercial. So, anyway, IBM, kudos to IBM for that one. Okay. This one's interesting also. So question number 16. Bigelow Aerospace recently announced plans for a rotating space station in low earth orbit for use in part as a space hotel. Okay. So people have been talking about space hotels forever. Well, since 2001 at least. The first elements are to be in place by 2025. So is that kind of whole thing? Is that true or false? Green for true, red for false. One, two, three, go. Oh, interesting. That's false. Okay. What are we down to? Think we're, one, two, three, four, five. C5. Okay. Okay. Go ahead. Should I do it one more time? I know that people are standing going, no, no, no. Yeah. Let's save some. Okay. One more. So, sorry. So Bigelow does make space habitats. In fact, we've got one in orbit right now. Attached to the International Space Station. But they have not announced anything for a rotating station. Actually, it's interesting because Bigelow has these modules ready to go. But they're waiting for something that has launch capacity. So they're waiting. So, anyway. Okay. Question 17. Okay. This is a little bit of skier. What computer language is set to be retired early next year? Is it green for Urdu script? That's a real language. Or red for Python? Okay. One, two, three, go. Wait, what do you guys, you guys aren't playing. You're confusing me. Okay. The answer is Python. Python 2.7. Support for the Python 2 programming languages going away on January 1st. Which means, oddly enough, that Urdu script will be better supported than Python 2 in January. So, okay. I think we're down to three.  People are still standing. All right. What happened? All right. Okay. That is a shame to stop there because I had some great additional questions. But, we gotta move on. We're running out of prizes. Okay. So, time for game two. So, this is a game of chance. Or at least that's what we assert. And it is pretty simple. It's the same type of deal. Everyone will stand up. Oh. This is not. It's Rock, Paper, Scissors. Ignore that first screen. Okay. So, it's Rock, Paper, Scissors. Okay. Everybody stand up. So, here's how it's gonna work. So, encoded in the presentation is the presenter's answer. You have to beat the presenter. Okay. If you tie the presenter, you lose.  This game is brutal and quick. Okay. Just in case you're unfamiliar with Rock, Paper, Scissors. Where is it going? We, yeah, we're not doing Lizard Spock anymore. It's hard enough with just three. Anyway, so we have Paper is just a flat hand in the air. Scissors is two fingers and Rock is a fist. Okay. Eid, what? Could you change the words in front of us? Yes. So, yeah. So, in San Diego, I reused an old presentation and someone in the audience looked it up and cheating is a harsh word. They are creatively competitive. So, let's see. Do I have the rules here? Okay, yeah. Against the presenter. So, you kind of understand the rules. Rock beats Scissors. Scissors beats Paper. Paper beats Rock. I've never understood why, but, okay, so what it's gonna do is I'm gonna say ready, set, go. And when I say go, everyone needs to throw their selection and hold that and then we'll see what the presenter is and two thirds of you will sit down. And so we've still got some nice prizes. So, okay. One, two, three, go. Okay, presenter is Scissors. If you are Rock, you get to stay in the game. So, if you're Rock, oh. That is brutal. Okay. Okay. Okay, one, two, three, go. Okay, some of you know my tricks, but not this time. Ha, ha, ha, ha, ha, ha, ha, ha, ha, ha, ha, ha, ha, ha, ha. Seriously, like for seven years, I've done two Rocks in a row. Yeah, one time I did seven times. Okay, what, okay, one, two, three, go. Okay, and this time it's stay in the game if you are Rock. There's a whole psychology to this. Okay, one, two, three, go. Okay, how are we doing? Oh, whoa, whoa, whoa, whoa, whoa. We might be in the range here. Oh, we'll do it one more time. Sorry. Ha, ha, ha. There's a very, okay. So first, remember who you are. Because if all of you are eliminated, you same four get to stand back up again. Okay, so if we go to zero, which is a real possibility. Okay, one, two, three, go. Scissors stay in. Okay, we're down to two if I'm not mistaken.  Okay, everybody up. Well, this will probably be the last round. So if you've got a lucky charm, you might want to start using it. Okay, one, two, three, go. Okay, this game requires an extreme amount of luck, which I've heard is hereditary. One, two, three, go. Rock. Oh, wow, okay. That eliminated less than half. That was well done, people. Okay, one, two, three, go. Okay. Okay. One, two, three, go.  You're right. Okay. Okay. One, two, three, go. Scissors. Where are we at? Oh, I think we're down to, are we down to three? Okay. Yep, come on up. Okay, I'm gonna fast forward now, because I got a couple of closing remarks. Thank you all for playing. Oops, I have a lot of these. I don't know why you can't see them because you theoretically wouldn't remember them. Okay. Okay, so first, if you did not get a prize and you're feeling really, really super bad, I do have the official candy of Fuego. Which is these hot tamales. And you can come up to the stage and I'll give you one. I know it's not much, but you know, a little bit of candy. So, but I just wanted to make a couple of observations here. I really enjoy embedded Linux conference. It's a chance when I get to see a lot of the people that are working on the same types of things that I am and facing the same types of problems. And I just have a couple of observations. So a couple of recent events. So I actually got some emails from GitLab just in the last two weeks, announcing a new telemetry policy and telemetry policy is talking about them gathering data about their customer's usage and sending it back automatically. And then just yesterday, I think it was, I got an apology from GitLab saying that they were reverting that new telemetry policy because something of a customer and a community uproar about it. And there were two problems. And I want to give credit to GitLab for reversing that policy and not, anyway. Problem number one was that they were sending usage data potentially to a third party and the default was opt out instead of opt in. And there's some obvious issues with that. The bigger problem, according to the GitLab CEO was that GitLab didn't discuss this enough ahead of time with their customers and with the community. And the Linux Foundation, I don't know if this is coincidental or not. I suspect not because these things take a long time to brew behind the scenes. The Linux Foundation just announced this week a new policy on telemetry policies saying that they really ought to be opt in instead of opt out. So just a couple of observations on this. So people are very passionate about what they do. They're passionate about security and privacy and a lot of this stuff is very political. A lot of companies have lost the trust of their people. The GitLab CEO, I want to give him credit for apologizing. Now it's easy to say, well, of course he'd apologize if he had to backtrack on that. But there were on social media and some of their forums or recalls for one of the GitLab officers to resign. And I think my personal opinion, that's a little bit of an overreaction. I think you need to give credit to people. I think it's gonna happen that people make mistakes. They have different understanding of what the expectations are. And so I actually think that what GitLab did, while it's, I think it'll be a blip in the history of GitLab, but I just don't hope they're super negatively affected by it. I think they're trying to do the right thing. And I think it shows a certain amount of strength to go out and apologize. And we've all seen people who we believe are apologizing just to placate the crowd. But in this case, I don't think that's what happened. When someone issues an apology, they do put themselves at a little bit of a weakness. They admit that they've done something wrong and it's easy for people to kind of heap on at that moment and start to abuse. And I just don't think that's a good thing. I believe that we're told by all kinds of entities in our lives to be kind to other people, our parents, our government, religions. And I think I really believe that the admonition to be kind to other people, it's not solely about the other person. It's not just to make life better for the other person. I think treating people with respect and being kind to them is something that helps you if that's your attitude in life. So that's really all I wanna say. Open source attracts a lot of people because they think it's a way to make the world a better place. We're giving something that can really benefit all of humanity and that's a noble cause. And we should try to be kind while doing it. You'll make your life better as well as other people's life better. So with that, I say thank you for coming to embedded Linux conference. I hope that you had a good time at the sessions, that you learned some things, that you made some new friends, and I hope to see you again in the future. So.


Hello, everyone. Fantastic to be here. Even better, to see such an awesome audience. I'm really impressed and scared. My name's Patricia. And today, we are going to explore live Kubernetes hacking together. So get ready for ride. First, a briefing production. I've been doing professional software development for over 20 years. Yep, sometimes I do feel like a vintage dinosaur. But hey, who doesn't love a classic? I've always been close to code. And that bond still thrives today. However, almost two years ago, I've joined the dark side of platform engineering at Form 3. And guess what? I absolutely loved it. Today, I'm a lead SRE engineer there. So what do we do at Form 3? In short, Form 3 is a financial cloud. We provide a payment-as-platform model for quick and easy integration with various payment schemes via REST API. We are technology-oriented, fully remote, cloud-based, with microservices architectures. We treat our infrastructure as code almost religiously, terraforming everything possible. Lately, we are building a new multi-cloud payment platform based on Kubernetes and free clouds. So obviously, Kubernetes security is super important to us. What am I going to talk about today? Just a splash of theory in the ocean of practice, the key part of today's talk features two demos to hijack your accounts, exploiting various security issues in a Kubernetes application, as well as in cluster. But before the fun begins, let's do a quick review of the Kubernetes architecture. There's two main concepts in Kubernetes, the control plane and worker nodes. The control plane basically manages the entire cluster. The heart here is an API server. And when we want to create or update any Kubernetes resource, we need to communicate with that server. It exposes a Kubernetes HTTP API. That way, we can interact with a cluster using tools like Qubectl. And who doesn't know Qubectl? Worker nodes are the place where the real work happens. The actual pods run over there. Qubelet is a main component responsible for instantiation and execution of pods. And like the API server, Qubelet also exposes a REST API. But it's only like internal API. However, sneak peek will exploit an unsecured Qubelet API to gain unauthorized access to the cluster. What are the kind of security issues can we see in our case clusters? Oops, sorry. Yeah, hopefully it won't happen again. But you never know. Fingers crossed. Adjust it always slight. Nope, it's not going to work that way. OK, so it's time to dive into OWASP top 10 security list. So here, OWASP basically stands for Open Web Application Security Project. I'm pretty sure that all of you know what OWASP is. Basically, they aim to raise and increase security awareness among developers. So they publish those top 10 security lists every couple of years for various technologies. And last year, for the very first time, they published Qubelet's top 10 security list. So it's like a hit parade, where we can see what vulnerabilities are the most important or the most popular. So let's see the chart toppers. Number one, insecure workload configuration. So basically here, watch out for root users, for privileged mode, or writable file systems. Number two, supply chain vulnerabilities. Here, you need to keep an eye on how you build, package, and distribute your Qubelet's applications. Number three, don't be too generous with your RBAC permissions, because otherwise, you will end up in a cluster where everyone can be let in. So number four, basically a good piece of advice is to centralize your policies in a way that you reject any misconfigured Kubernetes resources. Number five, if you don't watch your logs, basically you are like a security guard who fell asleep on the job. Then, number six, broken authentication mechanism. Basically, you need to configure your authentication in a way that doesn't allow anyone into the cluster only the users who have permissions. Number seven, with Kubernetes Cloud network security model, we have a problem. Because basically, each workload can communicate with each other. So it's like a house with all the doors wide open. What can we do? Basically, we need to lock them up. Number eight, secrets management failures. As simple as that, protect your secrets. By the way, a colleague of mine, Maurice, is having a talk on external secrets operator later today. So don't miss that one. It's going to be a blast. Number nine, configure and secure your Kubernetes components properly, or otherwise, you will end up with a messy Kubernetes jumble.   So that's it when it comes to theory. Let's move to practice. And it's going to be like one-on-one course in Kubernetes hacking. But hopefully, you will get the feel of danger. And you will see how a series of simple misconfigurations can lead to a total compromise of the entire system. Here, I will need your help. I have this vulnerable Kubernetes application prepared. It's available on the kubecon.yonlabs.com link. The link is available in the slide as well as in my Twitter account. So please, produce the new accounts, log in, and wait to be hacked. My objective here is to hack your accounts and learn your secrets. So let the fun begin. You can see my Twitter account. You can see the link available here. If you were not able to scan it from the QR code, let's see how my application looks like. So once you log in, you can see your secret. You can update your secret. And you can see active users. So, oh, so many of you, thank you for your cooperation. So once we see that we have so many users waiting to be hacked, let's move on to my evil server. So basically, I will log in to my evil server. That's the server from which I will do all hacking. This server is in the same subnet as my Kubernetes cluster. That's important because I'm going to target OpenCubelet API. So the first thing usually hackers do is some sort of retonnaissance. Usually in the form of port scanning, using tools like Nmap, Netcat, or something like that. Here we are targeting Cubelet API. So we will use a dedicated tool for this one. Basically, we will use Cubelet CTL. Cubelet CTL is a tool implemented by CyberArch. That's a cybersecurity company. And it's similar to Cube CTL. So basically here we have a wrapper around Cubelet API. We also have the scan command. I will use the scan command to scan my subnet for OpenCubelet API. I will use quite a small size of range, only slash 24Y, because I don't want to take it too long. Let's see what we have here. OK, yes, as expected, because I did it. So yeah, we have OpenCubelet API. What a surprise. What can we do with this one? Basically, with REST API, we can just use care and see what's going on here. Let's see that one. We have for a form, not found. What happened? We don't have any endpoint on this path. Let's use paths endpoint. OK, we have something here. Let's use jq. It looks much better, but it's not very readable. So let's search for items with metadata and name. That's going to give us the names of all the containers running on a given node. OK, we got it. Nice. So we see what containers run on this node. What can we do else? We can still use Cubelet CTL and scan command. Let's see help for this one. We have two subcommands available. We have RSC and token. Those are used. The first one is used to scan nodes for pods with remote code execution. So basically, all the pods that allow to execute any commands inside. And another one is token command. And it scans for all the tokens in a given node. So we are going for RCE one. Let's do Cubelet CTL scan RCE. And we are targeting our server. Yeah, thank you. You are very vigilant. But then I am on the stage. OK, so what we have here. We have a couple of pods that have RCE available. Calico node. That's a default installation of Calico. We have demo web server. And we have demo server, like backend here. OK, so that's most likely the pods we are interested in where our demo application is running. OK, so let's try to run some command inside this pod. So the pod is here. The namespace is backend and contain another typo. Sorry for this one. I'm too stressed, it seems. OK, and server is node. So let's run. Yeah, we are root over there. That's very nice. So what can we do now? Usually when you are a hacker and you see that you have a remote command execution, then the next step is pretty simple. Establish a reverse shell. What is a reverse shell? Basically, if you want to access remote server from a client machine, usually you SSH from a client machine to a remote server. You provide your credentials.  Reverse shell goes the other way around. So basically, a server connects to a client machine this way by passing authentication step. So let's do reverse shell then. To do reverse shell, I need a second session. I need to log into my evil server. And I need netcard. Usually, you establish your reverse shells with netcard. And you need one point that listens. So I will open listener on my evil server.  That's an IP 4444 port. And then I want to execute shell. OK. Let's give it a try. Yes, we have a connection. We are in. That was nice and quick. So we are inside a port. We have a shell. So what can we do now? Basically, a game sniff around, do some reconnaissance, and see what else can we do to do more harm. So usually, we check for who am I. We know that we are raw. That's perfect. Let's see mounts. Unfortunately, we are not running in privileged mode. We don't have access to the host file system. However, let's see if we have, like, writable file system here. Yes, we have. So basically, when we have a writable file system, we can install whatever we want if we have access to the internet. But what else we can take a look at? Let's do net start and see what's going on on the spot. We see that the spot is listening on 1990 port. That's nice. It would be good to sniff the traffic. To sniff the traffic, we need to have, like, TCP dump. Do we have it? Let's see. I'm sorry. I'm trying to do a redirect here. Why redirect? Because this reverse shell is not fully interactive shell. So it doesn't show me the error stream. So I did a redirect to see an error. We don't have TCP dump, but we are wrought. Possibly we have APK here. So let's add TCP dump. OK, so now we have TCP dump ready. So let's sniff our traffic, sorry, here on port 99. And now I will need your help. Could you please refresh your pages after logging in? Yeah, thank you. It happened even before I managed to say anything. OK, too many data. Let's stop it and let's search for something interesting, like a better token. OK, we have a better token now. So what can we do with a better token? Now it's simple. We just go to our demo application, and we replace my valid token with one of yours. Let's refresh the page. And I'm Ferriero. Congratulations, Ferriero. You've been hacked. OK, so that's it for the first demo. What problems do we see here? Obviously, OpenCubelet API. Let's take a look at the official Kubernetes documentation. What do we see here? We see that anonymous auth has the default true. Also, authorization mode has that default always allow. We could do better here. However, it's not that bad, because those are the defaults for raw, plain Kubernetes installation. Usually, we use managed Kubernetes, like in Cloud, EKS, GKE, AKS, whatever you imagine. And those have sensible defaults. Also, if you use such installation tools, like Kube, ADM, you are good. They have, again, sensible security defaults. However, if you install your Kubernetes clusters by hand, you can end up with a Cubelet API fully open. So basically, OpenCubelet API is like K9 from our OWASP top 10 list, misconfigured cluster components. Another issue we see is like writable file system in your container. In that case, you can see that basically hackers can install or modify, can install anything or modify the code of your application. So definitely use only a writ-only file systems. Another thing is running as root. As root, we have super privilege. We are super user. We can do almost anything. Another thing is that in containers, in that container, we observed quite a few tools available. So that's definitely not recommended. It's better to use distro less images. However, remember that it doesn't guarantee 100% security. There is that block post from that team lead of offensive security at form free who explains all the corner cases of distro less images. Another thing is networking. I've been doing the sub-professional software development for over 25 years, actually. And I'm not able to count how many times I had this discussion with less experienced developers about unencrypted traffic inside internal network. So it's countless. And always the arguments are the same, like, oh, come on. It's on the internal network. No one can sniff it. Oh, come on. It's all about performance. At the moment, it's all about security. If you want to be secure, basically encrypt your traffic even inside your private networks. Another thing is open egress to internet. Once you have this outbound traffic to the internet open, you are also open to many external threats. Or once the hackers get in, they can download anything what they can imagine. So basically, by keeping those very simple security measures in your deployment configuration, you can improve the overall security of your Kubernetes workloads. And that's not a rocket science. OK, now it's time for our second demo. With our second demo, I will still use this application, however, I will also use another one. Another one, which is like a simple hello application. It says hello, Patricia, in that case. However, it also has like RCE remote code execution available. So to hijack your account in our demo application, I will use this vulnerable RCE hello application, basically to access the port and the workload in the same Kubernetes cluster. So let's see how it works. OK, you see that who am I is www.data. Usually it means that's Apache HTTPD server underneath because that's the default user for Apache. And what can we do here? Basically, I'm like a one trick pony. Again, I'm going to use a reverse shell. But before I go to my reverse shell, I have one ask to you. If you could log out and log in again. Why? I will explain that later. So please log out, log in again, and I will start my hacking then. OK. I'm in my evil server. Again, opening a listener, listening with NetCAD on this 4444 port. And here I have this NC with bash available. Let me know that's not the right IP. Sorry for this one. Too many attempts in the past. I think that's the one IP. I need to provide the correct IP of my evil server. OK, we are in. We are in. Let's take a look what's going on here. Again, who am I? www.data. What about months? Oh, what a pity we are not ruled because we have this pod running in a privileged mode. However, as we are not ruled, I'm not going to go this path. I'm going to go another path. Let's just scan our Kubernetes subnet and see what's listening over there. Here, to avoid and save your time, I have some cheat sheet available. So basically, I'm going to scan only one IP and given port range. Let's do this one. And let's do our scanning. We see that we have this 6379 port open. What does it mean? Basically, this port is a default port for Redis. So let's try that one and send some Redis commands here. Again, I have the cheat sheet available. Basically, Redis server doesn't support REST API. They support REST protocol. That's Redis' realization protocol. Why? Usually because they sent a lot of data, so to save time on the realization and the realization with JSON. And they came up with this specific protocol here. So I'm sending a ping command. Yeah, we have Pong. So basically, we have access to Redis. Let's see what is stored in this Redis cluster. Oh, my god. It looks like JWT tokens. Again, what a surprise. OK. Let's grab one of the tokens. OK. Let's grab this one. But first, before we grab it, let's delete it. So let's delete it. OK. It's deleted. I need this token because I'm going to use it again in our demo application. Maybe that's going to be successful. And again, I will hijack some of your accounts. So let's replace it. Let's refresh. Kamis, you've been hacked. Kamis, I think you are Polish as me. Nice to see you here. And happy that you've been hacked. So what happened here? We had remote code execution in one Kubernetes deployment. And this deployment is running in the same cluster as our target application. So you can see how one vulnerable workload can impact another workload in the same cluster. So basically, that came 10 from the OWASP top 10 list, outdated and vulnerable components. Also, another thing we exploited is missing network segmentation. Basically from this RCE Hello application pod, we could connect to Redis cluster in another namespace dedicated for another application. So that's like missing network segmentation controls K7 from the OWASP top 10 list. Again, quite a few tools available. Reversal possible and one big no-no anonymous access to Redis. Obviously, you shouldn't have any anonymous accesses to any data store or workload in your clusters. So let's sum up what we've learned today. I can only tell you that's like the tip of the iceberg when it comes to Kubernetes security. So I could go on and on about the topic, but unfortunately, or perhaps fortunately for you, we are running out of time, so only some final remarks here. You should remember about the Swiss cheese security model. Basically, this model illustrates the importance of layered security. Like stacking Swiss cheese slices, you have those multiple layers, multiple overlapping layers of your security mechanism and controls. And basically this way you can cover the holes or weaknesses of other layers. So you are only vulnerable if all those holes are aligned in the same line. So basically, instead of relying on a single security mechanism, you need to implement defense in depth, layer security. And your ultimate goal is not to have like a perfect solution because that's impossible when it comes to security. The goal is to make the life of bad guys more difficult and to help us good guys to detect and respond to any potential security threats.  So don't be fools. Use your tools wisely. Use your Kubernetes wisely. And here in software development we have different paradigms like continuous integration, continuous deployment, some talk about continuous refactoring, but the fundamental paradigm is continuous learning. So we as DevOps should keep educating ourselves. Thank you and thank you for your cooperation.


Hi everybody. Greetings of the season. I'm Peter Clausi with Investor and Tell. Very happy today to be checking in with my old friend Deverendawa, whose name is synonymous with the Athabasca Basin. We're talking uranium, you go to the source, which is death. How you doing? I'm doing great. How are you, Peter? Doing pretty well. So far, I'm having a good week. I'm a uranium bolt. I'm long in some, bless you, I'm long some uranium things. What's going on in the uranium market today? Well, we certainly had a bit of a, you know, a sell-off. Everything went crazy about a month ago and a lot of stocks are off, you know, 25-30% because of the small price. But I would say that, you know, it's the signs of a good base being built. You look at it technically. So those who are technical bulls can look at that. I guess the biggest thing that happened recently was Sprott, Mr. Groskov, decided to triple the size of the money allowed to take in through Sprott. So that is monstrous because really, you know, we don't have this market just to put it bluntly. If Peter Groskov isn't forward thinking enough to tap into this massive change in this whole shift amongst the Greenies and governments who have come to accept that there's no way we can reach their lofty E.S. goals without without agreeing. They call them now transitional metals. If we're going to transition from where we are today, carbon base to zero emissions, these transitioning metals like lithium and uranium, we've got the rare earths, more carbon, more nickel. Absolutely. You can't, you can't. So the focus of London, what I've heard was that's what it is. Now, you're sorry, just for the listeners, you just got back from London, investors. Yeah, I went out there. Those mines and money, which has always been a good place. London was the first place we got our first. People actually wanted to talk about uranium back in 2004 and 2005. And so as a result, we, I mean, it's fascinating to listen to people. Plus, I got to meet with the CEO of Yellow Cake and people like that. Groskov has definitely tapped into this massive shift. So every day you see little news out there, Warren Buffett and Gates are building a... Just want to talk about, to me, this is more important than the trust. Talk about what's happening in Wyoming. Well, Wyoming's always been friendly, obviously, to uranium mining and, but Gates and Buffett backing a $4.4 billion uranium build and SMR, because the big ones are $22 billion. This is a smaller one. You're seeing small ones being, the first one being built, they chose Wyoming, which is an excellent choice. By the way, the Russians have got two small nuclear plants on the planet. Up north, they're right up in the frigid north, powering some cities. It's like what, 10,000, 20,000 people. A lot. And so they're realizing there's just no other way. You can move it, right? And it's easy to move the Yellow Cake, it's easy to move these reactors. And this is the same technology that's in the nuclear subs. Exactly. I mean, if you can figure out how to have a nuclear slub, I think you can figure take that nuclear and light up a few cities. In fact, there was an announcement yesterday in China, there's a city now that's got no coal, strictly nuclear. They're heating up the water, and it's wonderful. It was in a LinkedIn article by Felix Wang from CGN. So you're seeing these things. So when you start to see this happening, Peter, the fund manager is saying, okay, how do we get, be a part of this, right? So that's where gross cost is benefiting from. So one thing also I learned from the CEO of Yellow Cake is that there could be a massive move in uranium next year, because there was a lot of people actually buying uranium as an investment, when it's in the 20s, as a carry trade, because my money is so cheap, right? Well, they've been, they're the ones actually been selling a lot of it. A lot of the buying that Peter Grosskopf has done has been from them. So that uranium bunch of utilities thought were coming. It's not. So you felt that every year moving forward, that was before the three billion, the three times all the billion was announced, he believed that between Yellow Cake and then they could suck up between 30 to 40 million pounds a year. What's annual production globally? It's only 140, 150. We're going to take basically a quarter of that. So what, the thing is we've always had people dumping back in. So another positive one is obviously Japan, they've been selling uranium, they won't admit it publicly, but they have been because they had so much of it, so many nuclear plants that they're doing nothing. But they realize if you're using LNG, your missions are going up. Even in Canada, despite all efforts and all the taxes to death, our missions are going up. It's simple. Hydro, wind, and the sun are not enough for base load power because we keep using population growth as one. The growth of cryptocurrencies is second. EV vehicles, you can't tell everybody we're going to electrify everything and then say, oh, where does the energy come from? Right? Are you going to use coal? So how do you, why would you use coal to get your electric car going? That's what I think the politicians have finally woke up and said, okay, it's time to wake up. So for a long time, you have to understand the coal lobby has done a wonderful job of pooping on the uranium industry. It's too dangerous. It's too that and this and that. And they're the ones backing a lot of this, just like you see in Canada, foreign entities coming into Canada to shut down Alberta's oil, you see that happen also in uranium.  It's the coal lobby for a long time that has been pooping on the uranium industry, so people stick with coal. And now let's get to your upsized financing because a company that is well poised to benefit from this is FUU, which my standard joke, it's not an insult, it's your trading symbol. Fish in 3.0, you are synonymous with the Athabasca base and haven't been up there for so long and successfully and you're back again. Your financing was announced, there was so much demand, you had to upsize it. Tell us about that. You never know when you start out, but we went to London and it was a super smart group of guys led by a guy named Nick Lawson. They're always smart when they want to invest in you, right? No, this guy, we look at their history, he actually was a Deutsche Bank and he took Yellow Cake public. So he's been a uranium bull for years, right?  And we went and met some of his friends basically. And most of them are close friends, which shocked me, they clicked and all the stuff. But they said, hey, they want to put some money in. We had a common director who had done well with them, Steve Cochran and Latim Chilli. And so he raised, done well with them. So he says, you should meet them, David. I was going over there anyways, to go to the mines and money.  So we started, we thought, you know, raise three to five, who knows, right? But when I got a hold of some folks in Toronto at Red Cloud, they said, okay, I think we can help here. So next thing, you know, upsides pretty quickly, you know, because the stock's trading well, even today, it's up a cent versus everybody else is down. Monday in questions, what's the stock, what's the financing at? It's a combination of flow through and soft. So the 21 cents, 23 cents and the warrants are 26 and 28. It's on the news release. You know, again, they committed to that when the stock was 20 cents, 19 and a half cents Monday morning was everything got hit hard. So we stuck with 21. So went up, I didn't, you know, move price up. But the key is that we've always been asset rich. We are, I think the best people in the industry because I can argue that simply by the truth that nobody else has found two deposits before, two different type deposits, unconfirmed deposit, basement hosted. They've done it the same team. There's a group of 12 people and they're very bright and their loyal Ross and Ray have done a super job over the years. And so we've got a very good team who knew how to buy assets in the right places. And, but we never had much money to work with. Now suddenly, you know, we will have 9 million in flow through next year, plus another 3 million or so from our joint venture partners. So you're going to be 10 to 12 million dollars are drilling them next and drilling, drilling. And that's exciting because, you know, we're very close. We believe in a major discovery on Patterson Lake North PLN. And we have excellent reasons to chase boulders up in Hardy Bay. We got some great stuff. And so we're going to be able to drill three different properties each season. We will drill three coming up in starting January and then come the summer. Fantastic. FUU Fish in 3.0. Devrenda was synonymous with the Athabasca base. And if you're an uranium investor, follow Dev. I'm Peter Quasi with Investor Intel. I thank you all for your time. I wish you a safe, prosperous and it's the other word I'm looking for. Accepting holidays. Let's be good. Be kind.


This is Think Tech Hawaii, Community Matters here. Okay, welcome to another edition of Hawaii in Uniform. I'm the host Calvin Griffin. And we've been off for a while, but we're back on now. But I want to put a call out there to the members of the veterans community. We're going to take a slightly different turn with the program here in the future. There's some things that I thought that the public wanted to talk about. I think that we hit on some high notes or some of the things that are of concern. But I'm putting that call for most of a lot of the people in the veterans community and independents that if you have an issue that you are concerned to you that you want more information on that you think hasn't adequately been addressed by any organization or group that you're maybe associated with or in general with some of the things that's happening with the VA or other entities and such. I'd like you to give us a call or let us know what's going on. So I want to go ahead and start programming more things so we can get a response from you of things that you want to talk about. And that's basically that's about it right now. There's a lot of things going on in the community. And right now we have a gentleman, Mr. Matt Mccarville, who's been very vocal or very instrumental in a lot of different programs that's been happening with the vets.  Right. Okay, Matt, tell us a little bit about yourself. Is your military background and how you came here to Hawaii? Sure. Okay. Well, Cal, first thanks for having me on. My pleasure.  Thanks. Yeah, I'm a West Point grad, class 81. Oh. Spent 23 years in the Army as an infantryman. Combat time was in Special Operations Command, Sockcent during the Gulf War. The first Gulf War. And yeah, retired after 23 years. And came out here to Hawaii about six years ago. Yeah. Were you ever stationed over here active duty? We were. Right. 92 to 96, I was in the 25th Infantry Division. Okay, good. I know that when a sense of community, with a lot of vets and military personnel have, you know, getting involved with the community. We're going to talk about some of the things that you've been involved in, you've got to, and a few other programs also. But what made you decide to get involved once you go, a lot of people retire. It's just like, okay, I'm going to do my thing. I've served my time. And that's it, you know. But what made you decide to jump into the fray or try to do more to support your fellow veterans and military personnel? Well, my last job in the Army, I ran the Army ROTC program for Princeton University and the College of New Jersey. And a lot of the young men and women that were commissioned went right to war from there, whereas I was just about to retire. And well, in 2009, I was invited to a soldier ride with a wounded warrior project down in Florida for three days. And I really got to meet up close some of our wounded and got to know them pretty well. And it was a very inspirational three days in Florida. It changed my life. I've sort of dedicated the rest of my life to working on behalf of wounded and their families, and the families of our fallen. Okay. A lot of people are familiar with wounded warriors, but maybe there may be a few that may not be familiar with it anyhow. Could you give us a brief description of what wounded warriors is about and what other organizations are tied in in a peripheral way? Well, first know that I'm not affiliated with the wounded warrior project. I'm not an employee. The wounded warrior project is a national nonprofit out of Jacksonville, Florida. They have employees here in Hawaii. Their mission is to support and empower this generation of warriors. And they are really the gorilla in the room that has the financial wherewithal to change the way we deliver mental health care for our wounded. Now, yeah, so in coming out here to Hawaii, I got involved with the Association of the United States Army in order to make use of that nonprofit to serve as a checking account to support wounded warrior programs. And then very shortly thereafter, one of those programs became the NACOA Wounded Warrior Canoe Regatta. But in that regard, so AUSA is doing quite a bit of work on behalf of our wounded. But here in Hawaii, we have several other organizations that do phenomenal work. National Nonprofit, Warriors at Ease, teaches yoga for free to our veterans and veteran community. We have Access Surf Hawaii. It has a wounded warrior day at the beach program. The mission continues. It's doing all sorts of work all over the island volunteering, veterans volunteering their time. And I'm probably a team red, white, and blue. It just goes on and on. There are a lot of veteran service organizations helping out. Okay. We'll talk a little bit more about some of the other things that's going on. But right now, I know you wanted to bring up about the regatta. What's the formal name of it? And how long has it been in existence? And again, your participation in that. Yeah. So the NACOA Wounded Warrior Canoe Regatta, we're about to have our 10th anniversary this coming August. In 2009, some visionary folks, including Judge Kubo, who's still a co-chair, and Gervin Miyamoto out of the US Marshal's Office and others got together with the Honolulu Pearl Canoe Club, the Outer Air Canoe Club, and they started this regatta mainly to bring awareness to the fact that we have wounded warriors here. And if you think about 2009, one of the greatest concerns was employment back then following the financial crisis. So that has evolved over the years. It's now bigger than it has ever been before. We've added a warrior in wellness, health and wellness, I'm sorry, warrior and family health and wellness symposium up at Schofield. And that day at Schofield is the 14th of August. And then on the 15th, we're going to have a reception at the Royal Hawaiian Resort. And then the 17th will be the regatta. This year, we're going to have 100 teams in the regatta. They'll be mixed between a wounded warrior and family division, which will be about a half. The combat veteran division and the veteran division. I know with the participation in the regatta and some of the other activities after anyhow. There's a lot of wounded warriors who, again, unfortunately have suffered a loss of a limb or two or even more. And are participating to help support, I guess, their fellow, the wounded warriors also. What are some of the people that in the past, how involved or how much participation do you get from those actual wounded warriors in this regatta? Yeah, as I said, we have the wounded warrior and family division, which was first focused on the warrior transition units up at Schofield and Kaneohe. But that's evolved to include a lot more veterans now that the war has gone on and on for years. And so we've also involved their families. So we have several severely wounded warriors in different categories of wounds. Most of our Hawaii wounded warriors suffer from post-traumatic stress or suffer from traumatic brain injury. And with that, their families suffer from that as well. And so we try to bring their families into this healing journey as well. We do have several amputees here in Hawaii. And we also bring in, sponsored by other nonprofits, there are wounded warriors that come from the mainland as well as Australia and the UK for the regatta. You mentioned dependence. A lot of people aren't aware, to the extent that us in the military or veterans community, that the effect it has on dependence also, the stress that they go under. And it's always support systems that possibly may be out there for them also. What are some of the things that you envision that you see happening with the regatta and the future? And how can the public really help as far as supporting? I mean, besides financially, is there any way that someone who's not been affiliated with the military can support the effort? Sure. A couple of different directions to go there. First, our health and wellness symposium this year up at Schofield is going to be focused on the caregiver. So those who have a wounded warrior at home may want to attend that if they're carrying the burden for the family. We also include the spouses in the reception that we have. We invite 100 wounded warriors and spouses to come to the reception that we host. And of course, families are involved in the regatta as well. A wounded warrior, his or her spouse and three children could be a team. So we have a lot of children. We have a youth honor heat during the regatta for the children of our fallen, the children of our wounded. I should say too that we not only have families of our wounded, we also have families of our fallen. And our mission for the regatta is to honor and support our wounded and their families and the families of our fallen. So we do include about 50 Gold Star family members at the reception. And we're working on trying to provide a substantial amount in scholarships for Gold Star family children going to school next year. Well, a little bit more about that program. How does that work for the children of the Gold Star families? Yeah, so just today is the window has opened for applications for the Gold Star scholarship. It's named after one of our soldiers from Hawaii here who was killed in war. It's the title of the scholarship is the private first class JR Salvesion Memorial Scholarship. We are hopeful this year in the 10th anniversary to step up the amount that we will be able to dedicate to that. We have Ed and Julia Jessen out of Alexandria, Virginia have offered to match whatever monies we raise towards that cause. And so we're hopeful to put $30,000 out this year in scholarships. We think we'll have between eight to 10 applicants. Well, with regard to certain other activities going on, this is something that across the country is like a reciprocal thing where you may have another event going on in other parts of the country. Where you may have people from Hawaii that go there to help support that and vice versa. Is that accurate or? Well, they're not exactly affiliated, but of course there are. I mean the spirit, they're good.  He and of course Tragedy Assistance Program for Survivors run by Bonnie Carroll. They invite our wounded, I'm sorry, our Gold Star families to participate in all kinds of events on the mainland and they pay for everything. Yeah, so there are other things going on. And candidly, I hope that what we're doing here in Hawaii is to honor and support our wounded and their families, families of our fallen. But I hope too that it sends the message to our active duty and National Guard that should something happen to them that a community somewhere will be there, will not forget them. Yeah, I think that's very important because when you're serving your country, you'd like to know that if God forbid anything does happen that there is going to be support for your survivors or for yourself if you need rehabilitation. I know that a lot of activities are going on here on Oahu. Throughout the state, are there any similar things that's going on? I feel like sometimes because of financial restrictions or whatever, you know, the participants or the organization is not able to have them come here to Oahu. Is there anything else that's going on in any part of the state or that is similar, but maybe of a smaller venue? I'm not particularly aware. I do try to follow, but I do know we've had the warrior games here and the trials for the warrior games up at Schofield and elsewhere. Those are more government sponsored events, but our warriors can get involved in them. The wounded warrior project has activities going on all the time. Team Red, White and Blue has hikes and all kinds of other adventures. So if a warrior wants to get involved, there are plenty of opportunities here in Hawaii to get involved. Okay, we'll follow up on that, but what we're going to do is take a short break. And Hawaii Uniform, please stay tuned. Hey Aloha and welcome to the Think Tech Hawaii studios. I'm Andrew Lang, the host of Security Matters Hawaii. I'm airing here every Tuesday at 10 a.m. Hawaii time, and I'm trying to bring this community information, security information specifically, that will help you live a safer life, help keep our communities safer and help keep our businesses safer. So join me because Security Matters. Aloha. Aloha. I'm Wendy Lo and I'm coming to you every other Tuesday at 2 o'clock live from Think Tech Hawaii. And on our show, we talk about taking your health back. And what does that mean? It means mind, body and soul. Anything you can do that makes your body healthier and happier is what we're going to be talking about, whether it's spiritual health, mental health, fascia health, beautiful smile health, whatever it means. Let's take healthy back. Aloha. Okay, we're back with Hawaii Uniform and again my host. My name is Calvin Griffin and I got Mr. Matthew McCarville, and we'll continue our conversation about what's happening here in Hawaii with the Regatta. And what other things did you want to touch on that the public should be aware of? Yeah, I guess first I should start from the beginning that our Hawaii chapter of the Association of the United States Army is the host for the NACOA events. The Regatta itself is a kickoff event to Duke's Ocean Fest. And, you know, the surfing competitions and other water sport competitions. And we are the kickoff event for that. If you are covered by Ocean Paddler, so there's an episode every year that Ocean Paddler does regarding the Regatta. Although AUSA is the host, it is part of the greatest pride we have in putting this on as AUSA is that it's just a huge collaboration of the veteran service organizations. And this is unique to the country. We have only veteran service organizations that come together to make this happen. Particularly Wounded Warrior Project, they are not only our presenting sponsor, they also arrange for travel and lodging for our wounded warriors to come from the outer islands to participate with their spouses. We have Access Surf Hawaii, provides all the equipment and expertise to set up the special seating and to get our wounded warriors into the canoes as needed and out and do that respectfully. We have the Honolulu Pearl Canoe Club and the Outreer Canoe Club, who are just amazing in making it all happen. Warrior's at Ease is there. The West Oahu Veterans Center, Schofield Barracks Army Health Clinic, TMC, Team Red, White and Blue, and I'm probably missing, oh, an Operation Award 57 from the mainland. So it's a collaborative effort. We have 200 volunteers involved in pulling this thing off. I like to think it's probably the premier sporting event for wounded warriors and families in Hawaii. We mentioned 200 volunteers on most of these individuals affiliated with the military because I think it's important that a lot of people who may not be, I mean, hearing Hawaii gives military all around and with the history here, but I think it's important that the public really get to know these people up close and personal to really get an idea of the sacrifices that were made. So as far as if there's somebody out there that for whatever reason is not familiar with the military community but they're spirited to what they want to get involved, is there a way for who can they contact somebody to get involved, either financially or again being boots on ground, as we say, at the event to help support it? So our website is nakoaragata.org. Right now the team registrations are not live, so people can't register yet to paddle. That'll happen on one May. But if anyone would want to reserve tickets for the reception, they can do that. And the reception provides, and part of its purpose, is to put our civilian community face to face with our wounded and our Gold Star families. So they can not only have a sticker on their car, but they can actually get to know the people that came from their community and are now back in their community. So the reception would be the number one way to do that. And secondly, I have to laugh a little bit. My wife, Karen, is the volunteer coordinator and I try not to step on her plan for volunteers. 80 of our 200 come from the canoe clubs that support what's going on in the water. We have some specialty requirements for medical professionals. And then we really have on an invitation-only basis the other volunteers to fill the other spaces for the volunteers. But I think it's important that we have civilian folks to get to know our military through this process. One little question that's out there on left field a little bit. I know that with the operation and during freedom and a few other military operations, we've had allies from other countries that have participated. Is there anything similar, the question that they have going in their countries, but is there anything like an international or a coalition type of recognition that brings wounded warriors from different parts of the world together at any point? I know that the Wounded Warrior Project has some cooperative events with the UK. Our involvement of the UK warriors and New Zealand, thinking maybe New Zealand, but UK and Australian warriors wasn't really so much to make this an international regatta. Its purpose though and the reason we welcomed it is that these are allies that fought shoulder to shoulder with us on the battlefield. And to invite them to share side by side in this healing process just seemed like a very appropriate thing to do. So we're trying to expand and have a team from New Zealand this year as well, we'll see. But no, we're very proud to have our allies. And along that I have to tell you none of this happens without the folks that donate to make this happen. I mentioned Wounded Warrior Project as our presenting sponsor. OBX Tech out of Alexandria, Virginia is a major sponsor as is American General out of Michigan. And here in Hawaii and Honolulu we have dynamic planning and response. Those are our major sponsors, but then we have several other at lower level sponsorships and any individual can make any donation they'd like to help us do this.  The co-chair. Co-chair. Okay, yeah. A lot of people may not be aware fully like with Judge Kubo being involved in this is also he's spearheaded and really expanded the Veteran's Treatment Court here in Hawaii which a lot of people may not be aware of. It's about veterans who've had run-ins with the authorities or whatever and they're given a second chance or not given a pass or nothing like that. It's a very stringent program they have to go through. But Judge Kubo has been very, he's community spirited. He's one of the top people. I mean, it's all the dedication to the veterans and the community. He seems to be one of the individuals that really go above and beyond the call of duty to make sure the programs that he's supporting or involved in are something that's really outstanding. And I think that when you talk with what you're doing also, it shows the caliber of people we have in the community who really care. Well, it's very humbling to be a co-chair alongside Judge Kubo. His work with the Veteran's Treatment Court and with veterans in general, very humbling. And were it not for him and a handful of others, there wouldn't be a not-co-own-did warrior. Can you regatta? I tell you, I try to remind the public every once in a while that we do have a lot of unsung heroes. People were not looking for accolades or anything like that. We quietly do what they need to do to make sure that the obligation that we have to our military and our veterans is fulfilled. Sometimes there's some shortcomings systemically, but I think that those who really care, they pick up the slack when there are those issues that come up that need to be addressed anyhow to support our people anyhow. Any other issues, major issues that you want to discuss or get out there to the public? Well, again, if anybody would like to make a donation towards the regatta, towards the scholarships for Gold Star families, they can do so at nakoragatta.org. And we'll be posting more information. There are plenty of photos from previous years on our Facebook page, nakoragatta. Good. So what is your future involvement? Are you going to stay on for another 50 years like co-chair or what? I think we'll take it one year at a time. I don't have plans on going anywhere, but you never know what tomorrow will bring. Okay. Again, there's so many different things going on in spite of webs throughout the community with the different organizations, but is there any other organizations you want to mention that are doing anything that are just really outstanding that don't want to toot their own horn that, you know? Well, I think the one that comes to mind, I'm on the board of AccessSurf Hawaii. Okay. And they are wounded for your day at the beach program as well as their regular program for people with disabilities. It's just absolutely phenomenal. Just to go to a day at the beach with AccessSurf could be life changing. It's absolutely amazing. So a day at the surf, what is that location? Is it just any particular beach or location? Most of the time the day at the beach is out at White Plains. Okay. You might have known it as Barber's Point from the old days. Yeah. That's right. Yeah, they've got a nice beach out there also. Yeah. Okay. All right. So some of the things you want to, high points you want to touch on, some of the things we may have missed or anything that, again, that we didn't uncover?  Oh, yeah. Okay. And what we do for the Nakoa Regatta is at 11 o'clock the race is stopped and we do a presentation of Gold Star medallions to our Gold Star families paddling in the race. And each of the medallions are engraved with the names of the fallen, of their fallen, on the back of it. Okay. One thing, again, that a lot of people may not be aware of what Gold Star families are or what that symbolizes anyhow or represents. If you can give us a brief explanation of that. As you might imagine, I get asked that question a lot and it's my great privilege to explain to folks who don't know that our Gold Star families, a tradition started in World War I for those who were killed in combat and now we've expanded that to include those who died on active service. Okay. Their family is considered a Gold Star family. Yeah. It started with Gold Star Mothers and now each of the services have recognized that spouses and children and brothers and sisters are also part of that loss and share that enduring burden. Okay. I don't want to get towards the end on the down note, but one thing I do have to ask anyhow. I know what we're talking about there is unfortunately an issue with suicides in the military, things of that nature anyhow. Those individuals, even though they serve down and really and everything else, they also recognize as part of the program or if you don't want to comment on it, I understand. No, it is an issue we need to address. I think our military services need to confront it more openly. Right. If we have veterans, combat veterans who commit suicide with clear records of post-traumatic stress, sometimes those are recorded as service-related deaths. Okay. We even awarded one of the scholarships to our Gold Star children last year was the son of a soldier who had taken his own life. Okay. Yes. Interest, yes. We're down to the wire anyhow. I didn't want to end on the down note, but I think it's still positive that we're out there anyhow. But I want to thank you for your service, what you do. We'll do a follow-up. Welcome back anytime. And like I say, thank you for tuning into the program. God bless and until that time.