My talk is about flashing ECU firmware updates from a web browser. More specifically, I did some reverse engineering of the HONDA firmware update file format that they put out. So that's what I'm really talking about. So who am I? My name is Greg Hogan. You can follow me on Twitter. All the source code for the software that I'm going to show you is open source. You can find it in one or more of my GitHub repositories. And I work at comma AI on infrastructure, which, yes, if you're wondering, that has nothing to do with car hacking. So a couple of days ago, I got an email and it said defcon 27 talk. And I thought, oh, this is information on like my speaking gig here. I open up the email and no, it is from HONDA. So apparently they were interested in my talk and I'll summarize this for you. It basically says, don't do something that might kill somebody. That was never my intention. I won't be, for some reason, they thought that I was probably going to be releasing specific modifications about making firmware modifications to power steering controllers of HONDA vehicles. That's not the case. I never planned on talking about anything like that. So that doesn't change anything that I'm going to be talking about. Also, this is a completely legitimate thing to ask of someone to make sure you don't do something that could injure somebody. And I agree completely that trying to make changes to your electronic power steering firmware of your car could be very dangerous. If you screw something up, the best case might be that the steering wheel tries to break your arms.   And I have no intention of enabling you to be able to do such things. What got me interested in flashing ECU firmware updates? So in 2017, George Hotz, he's actually the guy that started the company that I work for, he gave a talk at Code Blue at a conference where he kind of showed some information about how you can get these firmware updates from different vehicle manufacturers. And I looked at these tools that he was showing and I thought, wow, that software is garbage. It looks like it runs on Windows XP, and why hasn't anyone created anything better? So that's kind of what I set out to do. And I guess to do that, to enable that in a modern web development stack, that's why I decided to see if I could make this work where I could flash ECUs from web browsers. That's basically, what I'm going to show you how to do is basically similar to what, there's a whole community of people who go out there and they make changes to do engine tuning for their ECUs, change like gas fuel mixtures and stuff like that. They've basically done what I'm going to show you. They've figured out how the firmware updates work in what I'm going to show you here, Honda vehicles, and then they figure out how to flash their own firmware updates, essentially, without using the Honda software to do so that they distribute. So how do you get the software and firmware updates for these vehicles? So thanks to write to repair, vehicle manufacturers are basically required to provide at a reasonable cost the firmware updates for the tools basically that enable any maintenance shop to be able to do repair work so that you're not like locked into going to a Honda dealership and then like charging you an arm and a leg to do this kind of stuff. So anyone can sign up for these websites. Honda is really cheap, $10 for one day to download the software that they provide to their repair shops and anyone who's like a repair shop that repairs Honda vehicles. They'll subscribe to this also. If you subscribe for one day, interestingly, you actually get three days. So Toyota is a little more expensive and you know, there's other vehicle manufacturers, well, I guess just one that does like over-the-air updates and you don't have, you know, if you have the right access to your car, the firmware updates are actually pushed to your vehicle so you don't have to like pay to get them. So I signed up and I downloaded the software and I wish I could get that four hours of my life back that it took to install it. It's horrible just like from a UI perspective, usability perspective. It's not great software. The authentication is over HTTP. Like nobody's proud of themselves for like working on the software. I don't think this is the new version. This is new for like, I think like 2017 model year vehicles or something like that. The old version looked even sadder. It's called HDS for Honda. It's Honda Diagnostic System. In 2017 when this new version came out, they threw an I in the front of it. My guess is they're like trying to ride the Apple train, you know, a bandwagon or something like iOS and so forth. But using the software is nothing like using an Apple product. You also need a piece of hardware to interface with the car through the ODB2 port. So that hardware, there's, if you go to the Honda website, there's one like certified hardware package that you can buy. And it is almost $1,500. That's sad because like it just does like stuff that follows specifications that are open, you know, that anyone can implement because of right to repair basically. So one of those boxes on like that first window was something called the J2534 rewrite tool. So what is that thing? That's the software that actually does the firmware updates that actually flashes your ECUs. So the company I work for, they actually make an ODB2 dongle that has a USB port called a Panda. And it's a lot cheaper than the $1,500 product that Honda sells. It has an open source J2534 driver, which is basically the API that like the whatever for like emissions testing and so forth, they defined it so that, you know, to enable right to repair essentially. And the driver, like it's not perfect, but it at least works for CAN. And so I decided to go down this path since it's so much more cost effective and the Panda has a great Python library for interacting with your vehicle over the ODB2 port. And someone wrote a web USB driver for it. So I'll get into that a little bit more, but that's a big part of what enables me being able to flash an ECU from a web browser. So that four hours that I spent installing this software on a really fast machine, another thing that it drops alongside this executable is the actual firmware updates. So that's how you get the actual firmware update files. And they're in this folder here that I listed the button. So, okay, now we've got a flashing tool and we've got firmware updates. So now what we want to do is we want to reverse engineer, you know, whatever the process is so that I can replicate it and build my own software that actually does this. So the first thing that I found was this software called J2534 Logger. Basically what that does is it acts as a proxy to a real J2534 driver. The J2534 spec, so part of the reason that this software, I did guess I didn't mention this, this Honda software, it only runs on Windows. And the reason that it only runs on Windows is because the J2534 API specifies things like, use these registry keys to find a DLL and load it. So that's another reason that I was interested in creating my own software that flashes this because if you break out of that, you can make something that's like cross-platform that runs on a web browser, which would be cool.  And if you have a vehicle that has an ECU that has an update, you can apply it yourself with this software and you can record it. And it'll dump out this big log file that has all the J2534 API calls, as well as the raw data that was sent and received back and forth. So then to dig deeper into what the actual steps are that happen when you flash a Honda ECU firmware update, we need to start understanding some of these other specs, UDS, Unified Dynamics, that's like a big one. It has all the commands that J2534 uses to actually communicate with the ECU, make it through security access, key exchange and all these things, and send the firmware. The next layer down is ISOTP. I'm basically just mentioning these things because this is what I have to implement if I'm going to implement my own in a web browser because as far as I know, no one has written one in JavaScript. Alright, so after recording flashing an ECU from that J2534 rewrite tool that Honda distributes, here's what you come up with. It's basically more or less an eight-step process here. The first thing that you have to do is you have to... These are all the names on the right are the UDS message types essentially that you have to send to communicate with your car. So basically you need to send a session control message because you can't request a security access seed until you've gotten into that specific diagnostic session mode. Once you get there, you can request a seed. You'll then see the seed go back to the software. Software then does manipulation to that seed, sends back a key, and that key is what allows you to do the next step, which is enter a programming session. So this is what we want to get to, right? We want to get the ECU to the state where we can actually send and change the firmware on it. Then things get dangerous.   So it turns out that these Honda firmware update files, the firmware portion of the file, they actually encrypt it. And the J2534 rewrite tool, it doesn't decrypt it. It sends it to the ECU, and then the ECU decrypts it. So they haven't distributed, per se, any software that you can obtain that actually has the decryption algorithm in it. It's all in the ECU. Then you proceed to send the firmware. And then at the very end, you send a message that performs this validation, which I believe what it does is validates that the checksums in the firmware are correct. The checksums in the Honda firmware are extremely poor. They're actually just the sum of all the bytes across a few sections. So I don't know, that's kind of crappy, a couple bit flips. You might not have what you thought you had there. All right. So this firmware update file, I mentioned earlier on that there's a folder that gets dropped that has all these firmware update files in it. And those firmware update files have a certain format that I'm now going to go through and explain what the different pieces are. Because my ultimate goal here is to create a website that I choose one of these firmware update files and I then flash it to an ECU as if I was that J2534 rewrite tool without any software written by Honda. So the very first byte of the file is what I call the signature. It basically tells you the format of the rest of the file. There's a few different formats. I'm just going to focus on one, because I only care about one, which is CAN. There's also other formats, I think, like you flash over Lynn or other protocols. But I'm just going to focus on CAN because that's probably like the future, at least for any vehicle that I'm going to own. So CAN is this hex 5A value. All right. So now the next section, after that first byte, now we're in the CAN specific format of the firmware update. And there's six header fields. They basically have everything that you need to be able to look at one of these firmware update files, determine if the car that you're plugged into has an ECU that a specific firmware update file applies to, and if it's running a version of firmware that is supported as an update, or if the file is an update for the version of the firmware that's on the ECU. So you only need a few things. You need the CAN address of the ECU that you want to know if you can update with the specific firmware file. So there's one byte that specifies it. The reason it's a single byte is because, like if you look at the spec, 29-bit addresses, there's only one significant byte. So they just have that one byte in there. And then there's a few different values. They can change these security access keys per firmware update file. So they put the actual keys in the firmware update file because you have to send them to the ECU. So when the ECU receives the firmware, it knows how to decrypt it. And then there's also a key that I'll get into in a minute here that is an input to the security access key exchange. So what you need to do to get that ECU into programming mode essentially. After the headers is the actual firmware. This is the encrypted firmware that I talked about before. There's a start address and a length. That sequence that I laid out, a couple of the steps were saying, okay, what section of firmware do I want to flash on the ECU and how much data am I now going to send? That's part of that UDS sequence of messages that you have to send to the ECU. The Honda ECUs I've looked at, they actually only allow you to flash one section of the firmware. They did a pretty good job in terms of making it kind of hard to brick the device because the boot loader is outside of the area that they allow you to flash, so that's good. But yeah, the state is encrypted, so we can't really look at the firmware at this point. And then at the end of the file is a checksum, and it's just the sum of all the bytes except the checksum itself. And so that's the entirety of one of these canned format Honda firmware update files. All right, the encryption. So I mentioned that this firmware is like the data section of the update file for the firmware is encrypted. So I thought, okay, well it'd be interesting to see if we can decrypt that. And the talk that I mentioned at the beginning that got me kind of interested in this, George's Code Blue talk, he shows one algorithm that they used for encryption. And I thought to myself, oh, okay, well, maybe I'm lucky. Maybe they used the same encryption for every one of these updates. Turns out that's not the case. But there's these keys that we already found in the headers of each firmware update file. So I've got the keys. I've got an example, so what should I try? Okay, well maybe they just changed the operators. It turns out at least somewhat common, that's the case, and it's not too hard to write a piece of software in Python that just brute force tries every combination of operators that results in a full 256-value lookup table, where every value is, you know, the input is unique to the output. So utilizing that, I wrote this piece of software that I linked to at the top there called RWDXray. And that, it does that, exactly. You give it a firmware update file and it will try to find, it'll try to find a set of operators based on the keys in the RWD file to be able to decrypt the firmware. Yeah, so that's really fast. Most of these firmware updates are small and yeah, it takes like seconds to run this through and find the appropriate operators for a lot of them. It doesn't seem to work on all of them, they actually use like a different algorithm for some firmware updates, but it seems like there's a number of them that they actually use the same basic algorithm with just different operators. So this is just an example of running that tool. It just kind of, it ties everything together that I just talked through. Basically, you know, parses the file, spits out the headers. The way that it figures out if it has successfully decrypted the firmware is that there's a UDS message that you can send to request the software version of an ECU, to get the firmware version of an ECU. That returns something that looks like a part number for Honda with an extra few numbers at the end. All of these RWD files have a name that looks like a part number. So, what I do is I take the beginning portion of the RWD file and I say every time I try a set of operators, do I find in the decrypted firmware a string that matches that? And normally there's just one. Down at the bottom there are all those dots, is it trying every possible set of operators that existed and the X means it hit and it actually found the string that it was looking for in this brute force way of going through the different possibilities of all the algorithms. And then it spits out the decrypted firmware into a file at the end. Okay, so, my goal here is to flash an ECU from a web browser and I now completely understand this firmware update file that Honda has, that Honda publishes that anyone can get a hold of. It has everything in it, I guess, except the actual Security Access Key Exchange algorithm. So, now I figured out everything I need to figure out to flash an ECU myself, write my own software that does it, but I don't know how to make it through the Security Access Key Exchange. Their Security Access Key Exchange is okay. It generates a random two byte number and then you have to manipulate it and send back the corresponding response that is the correct response after you manipulate it with the Security Access Key Exchange algorithm. But we don't know what that is. So, brute force would take a long time. It's probably actually maybe doable, but if you do it, you now figure it out for one ECU for potentially one single firmware revision of that ECU. So, what else would have this Security Access Key Exchange that I already have access to? Well, how about that J2534 reflash tool? Turns out it's pretty easy to find the Security Access Key Exchange algorithm in that tool. And it looks like, as far as I can tell, they basically use the same algorithm to a similarly simple algorithm, just addition, multiplication, and modulo. So, basically the same algorithm, there's just like one variation, whether the key that's in the file is four bytes or six bytes. And so, yeah, great. Now we found how to get through the Security Access Key Exchange for probably any Honda ECU, at least that is flashed over can, most likely. And I guess like, all the people that do the engine tuning, ECU tuning, I guess they all know this, I don't know. I guess it's easy to find though, so I guess it makes sense that they would. All right, so, I've got everything I want, or I need to know now to build this website. So, I created this website, it's open source. autoecu.io is the URL. It's the autoecu GitHub repository that I have. It's open source. It only supports this Panda ODB2 dongle that I'm using here, because I don't know any other ODB2 dongle that supports the web USB driver that Chrome has so that you can interact with a USB device directly from a web browser. This website is just static content. You don't need an internet connection to use it. There's no API. You can totally just pull down the GitHub repo and run it locally. But for convenience, I just threw it up on autoecu.io. There are some problems, it's not perfect. This isn't like productionized code, so don't use it on something that you're not willing to replace if you end up bricking your ECU. I actually opened a Chrome issue because in their effort to curb people doing crypto mining in your web browsers like through ads and so forth, they don't let tabs that are in the background or don't have focus keep executing code indefinitely or maybe they only give it small time slices or something. For example, when you use this, you really want to keep the browser focused because you switch tabs and then basically the flashing process pauses. You really don't want that to happen in the middle. Generally, it's okay. If you cancel flashing one of these ECUs in the middle, you've potentially erased the ECU, but since the bootloader is at the beginning, if you haven't done anything really dumb and if you're not really unlucky, you can just cycle the power and start over and flash again. It's definitely possible that you'll brick an ECU if you use this. I have a little video here. I have a 2017 Honda CR-V. It has ECU updates for several ECUs. I'll just play this here. See if I can make it full screen here. If you watch the dash really close, things look pretty good right now. It looks normal. I'm picking the firmware file right now. It does a little validation. I'm going to start the flashing process here.  I don't know if I missed something. Maybe there's some way to prevent that from happening. It's kind of scary. I tested this on a bench before. I actually had bugs in my code. For example, when you plug into one ECU sitting on a bench, there's no other ECUs on the CAN bus. You can make a mistake where your software assumes, accidentally, that every message that's coming is intended for your software. The ECUs are throwing out messages all over the place all the time. It's easy to fix. Now, it works better. This successfully flashes the ECU. It looks like it's flashing right now. I'm actually applying the firmware. I think this is applying the radar, firmware update for my car, or something like that. I just took the RWD file. Honda names these firmware update files, but .RWD is the extension. I just took that, selected it in the software that I'll show you a live demo here in a minute, of an ECU on a bench, and picked it and flashed it. Then I just power-cycled the car, and all the errors went away. It's great. It worked. Thanks. That was fun. These ECU engine tuner guys, they don't just flash the updates that they get from Honda. They reverse engineered this, and they generate their own updates. Wouldn't that be more fun if we could figure out how to generate an update maybe for an ECU that doesn't even have an update, and then flash that. You don't need a whole lot of information. You just need whatever is in that RWD file. You can just make up some keys. You do have to be able to figure out how to get a firmware off of an ECU maybe, or you could start with one of those RWD files if you wanted to, just to play around with generating your own. But you've got to be able to get the firmware. You have to be able to encrypt it, since it's encrypted in these RWD update files. This is actually a pretty good format for updating an ECU, because it's a self-contained file, and it has everything in it you need to be able to flash an ECU, validate that the ECU that you're going to flash is running an expected version of firmware before you flash it, and so forth. In my RWD X-ray repo, there is a script that does just that. If you supply an encrypted firmware file like what you would find in one of the RWD files in the firmware section, and the appropriate headers, then it'll kick out for you an RWD file that you can flash using my website. All right, so let's do that. I have, just because out of convenience, I have an ECU here that I tore apart to play around with, and you can get, for example, a lot of ECUs on, you know, like LKQ online for really cheap. This is specifically an ECU for the electronic power steering for my 2017 Honda CR-V. I'm just using it because, like, that's what I have out of convenience. So let's do it. So yeah, so basically I just, I figured out how to extract the firmware from this ECU. I used that RWD builder to, what I did was just build, you know, for proof of concept. It does nothing. It literally just is the original firmware on the ECU. So that's what we're going to do. So this is, this is my web, oh, sorry. This is my website, autoecu.io, and right now it has a dropdown for manufacturer. Honda is the only manufacturer that is supported, but, you know, it's open source. If someone's interested, they could, you know, definitely add formats of other firmware update files distributed by other car manufacturers. I've looked a little bit at, like, Tesla's firmware update file format, and it's, like, so much simpler than the Honda, for example. It just has, like, I think it has, like, a header that says the start address and the length, and then it's just the firmware, just, you know, non-encrypted or anything. So you could definitely expand this, you know, if you wanted to. The other thing, too, is, like, you know, like I mentioned at the beginning, that Honda Diagnostics software that you can use and slow and a pain to install, you can do all kinds of cool stuff with this, too, right? Like, one of the great things about the Honda software is, like, you can get deep introspection into, if you get, like, check engine lights and so forth, what those things, you know, what are those check engine lights and being able to clear them and so forth. So, like, you could easily, you know, take this and, for example, build your own HDS that enabled you to, you know, more easily maybe check engine codes from a web browser. So there's all kinds of cool stuff you can do with this. So let me power this, it's powered on here. I don't know if anyone can really see this here, sorry, we didn't get a table. So this chair here is my, what's that? Oh, hey, I got a table. Let me go grab the table quick, thanks. All right, so this, maybe this setup deserves a little more explanation here. So this doesn't really look like electronic power steering because it's, like, all tore apart and, like, the controller in this situation is not separate from the motor, like they actually put the controller in the motor. So that's why it's, like, all tore apart and weird. I'm using one of those Panda OBD2 dongles that, comma, AI sells. And the red thing plugged in is just so that I have a long USB, a long enough USB cord that's called a panda paw.  So that's plugged into another thing that we sell, which you don't need by any means at all. It's just like a development board that breaks out the OBD2 pins really conveniently. So I just use that to build an adapter to go from the ECU, from, like, the real ECU connector to the Panda and an OBD2 connector, so, or device. So, yeah. So, all right. Let's pull up. This is my fake firmware update that is just, like, the stock firmware that I generated a file for because there is no firmware update for this ECU. I pick that firmware update file and I say next. Now, this is where those headers that are in the RWD file come into play. It just went out and so I implemented that UDS protocol and the ISOTP I implemented in JavaScript. You can see it in one of my, in the GitHub repo for this for this website. So, like, it just went off and it just queried that can address 18DA30F1 and I think it might have sent, like, Tester present or something like that. Oh, no, I'm sorry. It didn't send that off yet. We still have to connect to the ECU. So, the way Web USB works for, like, security reasons is if you have a device that implements the Web USB protocol, when you plug it into your computer it doesn't just, like, get access to things. So, Chrome has this specification where there's a JavaScript call you can make to say, go, you know, go talk to this USB device and then it prompts the user to actually say, yes, you're allowed to talk to this USB device from a Web browser. So, I pick it. I say connect. Okay, now, now it actually went out and it actually, like, sent, like, Tester present to the ECU and said, like, are you there? Are you awake? And then there's another UDS message called, like, read memory by address. I think it's read memory by address and there's a specific code that's defined that there's, like, four of them that are, like, bootloader version, software version, application version. So, I think it's software version. It goes off and it queries the software version and it checks, does the software version that the ECU returned match what my RWD headers excuse me, what my RWD headers say are the supported software versions for this firmware update file. All right, so now we're connected. Next. Okay, this is the danger screen. Like I said, you can brick an ECU so don't do this with an ECU that you're not willing to pay to replace. Something could go wrong. I say, I agree and flash. It's erasing the memory and now it's flashing the firmware so it's basically just going through that sequence that I laid out at the very beginning to actually send the firmware update so you can, you can't really see the progress bar there really well but it's like 25% and moving along LEDs are, like, flashing different colors on the table over here. Um, yeah so, I don't know once you have this, I guess flashing a firmware update is pretty boring and it'll be done here in a second a few seconds about 80% and then I'll just pull something up like this ECU just constantly dumps out some messages, uh, on the CAN bus. Okay, it's complete so all right, let's talk to this ECU I've got to free up the USB device so the web browser doesn't have a hold of it and all right, so let's see if this, all right so it should be, now if I didn't hopefully this is where, like, the live demo doesn't go all wrong uh, if I try to connect to this ECU and read all the messages that it's dumping out on the CAN bus there you go so it's like five messages that it just dumps out, I think it's like a torque sensor that's on it and a bunch of other stuff so so yeah and, uh, I guess that's it that's my talk what's up yeah, sure so is there any signature on the firmware um, no, yeah, there's no signature um, it just like, there's that last step where they say um, they say basically uh, validate the firmware there's like a routine control message that gets called and that validation is just are the checks, do the checks do the sum of the bytes add up, so yeah, there's nothing like that um, did it, and then the other comment was I made some assumptions about like, I had something, I wanted to decrypt it and I didn't know you know, what the how do I know, like how would I make those assumptions so that I know when it was decrypted completely, or properly um, yeah, so I mean I just guessed, right, and then uh, in addition to guessing though this ECU here is tore apart, because then I have the decrypted firmware like I figured out how to dump the full firmware, so like these firmware update files they're you know, potentially not super useful to modify, because they're partial right, like important things that you want to modify or you need to like reverse engineer out of them they might not even be in the update section right, um so, like what I did was I got an ECU that I was able to dump the firmware off of and then I just had these ideas like okay well, I should be able to find this software version that you can request through read memory by address, um and maybe I was like, I just tried, like okay well maybe, how many times, I had no idea how many times, how many sets of um you know, combinations of operators and my brute force decryption would match, and it turned out like 99% of the time there was only one, and I had the real firmware from an ECU to compare it to, to then make 100% certain that at least sometimes I was decrypting it successfully. This one actually, this specific ECU is simpler than that, it's UART, it's serial, but a lot of them are JTAG that you have to dump them through, yep, yeah. No, I don't think so, I mean they don't publish any firmware updates, I think George has like said on our Discord multiple times that all firmware modifications are canceled, so um, yeah I mean this is just uh, you know, this is just me working on this stuff in my free time basically, so, uh, yeah, this is just stuff for fun, so yeah, go ahead. Yeah, so, uh, I haven't had that much time to like really work on it and make it awesome, um, so like I just tried it on a few ECUs that are actually in my car, but I haven't, like I haven't specifically tested it out on like what like the engine tuning ECU guys do, you know the where there's a lot more potential, I mean they all charge money for that stuff, right? Oh, not all of them, I think there's some free ones like ROM Raider or something like that, um, uh, but like I don't know, I think this is the future, I think, you know, it seems like web browsers are gonna be the, um, you know, the platform for building modern applications in the future and and so like, I don't know, I feel like I'm showing you the future of what these tools are gonna look like someday. Alright. Cool. Thanks guys. And, uh, I think, uh, someone gave me this, uh, adapter. Thanks a lot for the adapter so I could actually give my presentation. Thank you.


Hi friends, welcome back to my channel and a very special welcome if you're new here. My name is Jen. I'm a certified weight loss and nutrition coach who has lost and maintained a 140 pound weight loss and it is Saturday, so it's grocery haul day and it is massive grocery haul day. I was finally able to get back to Sam's Club. It's been months and then I shopped at my local grocery store as well so I have a huge haul for you. If you're excited, give this video a big thumbs up. Subscribe if you're not, turn your bell on because we do a grocery haul every Saturday. Don't forget to check out the description box down below for nutrition coaching. This is where I offer personalized macros and calories that is exactly what I follow to lose and maintain my 140 pound weight loss as well as one-on-one coaching for questions and accountability or to talk with me directly. Links and discounts to my favorite things and come join our free Facebook group. We'd love to have you. So let me flip you around and let's jump into this massive grocery haul. So the first part of my massive haul comes from Sam's Club. I did my Sam's Club run. It has been probably three months, maybe even longer since I've been. So let me show you what I picked up. So the first thing is a two-pack of Listerine. This was actually on sale. This is the gum therapy. I've never used this one before in Glacier Mint. I actually put mouthwash in my water flosser. It was something I saw on TikTok and it feels like you just left the dentist. So I really have been liking that so I add a little mouthwash in warm water to my water flosser. So I picked up the two-pack and then I got these little non-bites. I have some dip, hummus, things like that. I thought that would be a nice snack. I could even pair these with the cheese that I grabbed. These are the Cracker cut cheese. There's actually Myle Cheddar Swiss, Colby Jack and Pepper Jack. Pepper Jack's my favorite. I thought these two together would be a really good snack. I also grabbed a three-pack of Ketchup for Troy. That boy goes through a lot of ketchup. So I went ahead and picked up the three-pack. This was on coupon for about $8 and I was so excited that they still have the Caramel Popcorn Premier Protein. So I picked up two cases, $25 at Sam's Club, $30 at Walmart. So you actually could save $5 per case. It's one of my very, very favorite flavors of Premier. I also grabbed Paper Towels while I was there. That's Costco Sam's Club Staples. Cream, I like to put this on my yogurt bowls. I'm going to be making Ninja Creamy Ice Cream again now that the weather is getting warmer. Protein pudding, the dogs always get whipped cream when I make a protein shake. $8 for three of them. These were almost $6 a piece at Fry's. I couldn't even believe it. So I grabbed them from Sam's Club. I also needed a restock of our taco seasoning. We are just about out. And I did grab a two-pack of the Chosen Foods Avocado Oil Spray. So the two-pack at Costco's double the size but is a lot more expensive. This was $9 and they're smaller but they fit better in my cupboard. And as long as I have that particular avocado oil spray, I'm happy. And then I also did a restock of Vanilla. This was on sale for $10, which is a really, really good deal. And then I found these little baby dill pickles. They were $3.98. That's a killer, killer deal. And when I got up to the checkout, the lady said that these are the best little dill pickles.  I also got the Premier Protein Pancakes. I think these are going away again because there was only maybe 10 boxes left. They used to be $10. Now they're a little over $12 but that's still a really good deal because that's 36 pancakes. And I think I paid $7 for the small box at Walmart. So I picked up one of those. And then I was so excited to see these. I actually tried them. I'm glad I got two bags because they're amazing. These are from Truefru. These are the freeze dried peaches in cream.  These are so, so good. So like I said, I picked up two bags, $10 a bag and it's 150 calories per serving. Perfectly clean, amazing ingredients. I love Truefru. And Sam's Club always has it, Costco never does. So I grabbed two. I also picked up some Uncured Black Forest Ham for Troy and I for sandwiches, breakfast sandwiches, meat, cheese, and crackers. And then I always get the Uncured Canadian Bacon at Sam's Club. I'm thinking now I should have probably got two packs. But that's okay. I picked up a pack. It's actually a double pack. I throw one in the freezer, one in the refrigerator. And then I also restock cheese. I grabbed Sharp Cheddar this time. This is $7, which is an incredible deal. And then Troy needed toothbrush, restock of his toothbrushes. I use AsanaCare but he uses just the regular toothbrush. And these were on sale for $10. I also picked up some more Ritz crackers for Troy. That's his go-to for his meat, cheese, and crackers. And then similar to paper towels, did a restock on toilet tissue. And then I always grab Troy canned while I'm at Sam's. They have a much better selection than Costco. So this time I got the 12 cans of the Beef Ravioli. This was less than $12. So less than a dollar a can. And then the chili is a steel. Six cans, $10. I paid $2.50 a can at the grocery store. So that was definitely a great deal. His favorite bread is the Sara Lee Artisno bread. They only have the wheat. So I picked up the two pack. Again, I throw one in the freezer, one in the bread box. Adlola's hip and joint chews back. They actually haven't had these in a long time. And they were on sale for $12. So I picked those up for her. A Caesar salad kit because you already know I love these with my real good chicken nuggets. And then I grabbed some mini cucumbers, some bananas and then some fresh raspberries. And what's not shown is a case of Gatorade Zero. So let's go ahead and jump into the rest of this week's grocery haul. So here is the rest of my grocery haul for the week from my local fries store, which is a Kroger store. So as always, I did grab two gallons of 1% milk for Troy for the week. And then Sam's Club only had Oicos Triple Zero and I just finished off a whole case from Costco. So I wanted some different yogurts this week. So I did two of the Chobani Zero sugar. The milk and cookies is one of my very favorite flavors. And then I got the strawberry cheesecake. I love the two good lemon. This is the seasonal flavor. Usually comes spring summertime. It is so good, especially for a yogurt bowl with some berries on it. And then I got two more of the little light and fit flips like the remixes. This is the brownies Sunday. And then I also got the strawberry cheesecake. This one's really good. That way I have just some different yogurt options for the week. I picked myself up some more fair life milk because I am just about out. And then I grabbed this little assortment of mini cookies for Troy and I for the week. Those little M&M cookies, chocolate chip cookies and sugar cookies. I love how small these are. They're just the perfect sweet treat. And then I also got two packs of the little mini blueberry scones. I love these. These are so soft, so, so good.  So each pack was only $1.25. I also needed some petite sirloin cut of steak. I'm going to be making a sheet pan dinner. Stay tuned after the grocery haul for what's on my menu for dinners and what you'll see in Monday's meal prep. I also picked up some white chocolate chips. I actually need these for a recipe as well as some low carb tortillas. They were really expensive at Sam's Club. I want to say $6.99 or $7.99. I got these for $2.99. So I went ahead and held out till I went shopping at Kroger at Fry's and I'm really glad that I did because that was a much better deal. I also needed some 1 third less fat cream cheese for a recipe. And then I picked this up for Troy. He's actually going out with his dad tomorrow and I thought that he could take this with him. It's just strawberries, blueberries, almonds and white cheddar cheese. Just a little snack pack. And then I grabbed a couple of bags of shredded cheese. First off is this Alpine blend. It's a blend of Swiss and Gruair. I actually need a Gruair cheese for a recipe. I had a coupon for this brand. So I'm glad that I found something that actually had that cheese in there. And then I also got some light, reduced fat, sharp cheddar cheese for a recipe. And then for produce, I grabbed a big bag of organic yellow onions. These were actually less expensive than the non-organic. So I grabbed those. Huge bag of carrots. This was $1.90. I have that really good la terafina dip. Oh my gosh, by the way, that caramelized onion dip is incredible. And I thought carrots would be really good with that and I have some hummus in the fridge as well. I needed lemons for a recipe. So I went ahead and just grabbed a bag. I do like to put fresh lemons in my water. And these are seedless. Who didn't know? I didn't even know that they made seedless lemon. Now I do have a lemon tree right there in my backyard, but we cut it back pretty far last year and it's not producing fruit yet. When it does, I have an overabundance of lemons, but until then I do have to buy them. And then their big, huge jumbo blueberries were $3.99. And I need blueberries for my meal prep. And then for that sheet pan dinner, I need a green bell pepper. I also grabbed two 12 packs of Diet Coke. Right now at Kroger stores, they're $9.99. So it's a really good deal. So I grabbed two 24 packs for Troy. Let's go ahead and jump into what's for dinner and what you'll see in Monday's meal prep. So here's what is on my menu for the week. So I didn't end up making that tortellini soup last week. So I'm going to make that this week as well as sheet pan steak fajitas.  And then we'll have a leftover night as well.  And then here's what's on my meal. Here's what you'll see in Monday's meal prep. So for breakfast, I'm making peanut butter, banana baked oatmeal cups. I'm so excited for these. This is my first take on an oatmeal cup. So I'm super, super excited. And then for lunch, I'm doing a French onion meatloaf. I love French onion soup. I love onions in general, especially sauteed onions. So I'm excited for that. And then lastly, I'm making blueberry lemon cookies perfect for spring. So stay tuned for all three recipes in Monday's meal prep. Thank you for joining me for this week's haul. I hope you enjoyed seeing everything I picked up. We had a big haul, lots of new food finds, great deals. And if you enjoyed it, don't forget to give it a thumbs up. Subscribe, turn your bell on so you never miss a future video. Again, stop by that description box for nutrition coaching, links and discounts to my favorite things. And come join our Facebook group. We'd love to have you. Happy Saturday friends and I'll see you in the next one. Bye.


Lynn had all developed a data glove system to measure motor impairment in patients with stroke. They used functional data analysis to identify key features from the data collected by the data glove, which was then used to classify different levels of motor impairment. Support vector machines were found to be most effective at classifying the data, providing accurate results for both overall and sensor specific performance. This system has potential applications in rehabilitative care for stroke patients, allowing for quicker and more consistent evaluation of motor impairment. This article was authored by Yiting Huang, Weian Lu and Borshing Lin.


I'm Stacey Murk. I'm part of San Antonio Mennonite Church. Since late October, I have visited weekly at the Carnes residential facility. I go as a friend to the women being held there. I empty my pockets, leaving behind paper or a pen that could help me or the mother remember something key or important. I take nothing in, nothing except maybe some quarters for a bag of Cheetos from the machine by the visitation room as a sort of treat for my friend. I go through the metal detector into an anti-room. The metal door slams shut behind me and I wait until the next guard lets me into the visiting area, rather locks me into the visiting area. A few weeks ago, I met Maria. She came in, we embraced, then sat down next to each other, asked her how she was and the tears began. They didn't stop. Her voice was so low, I could hardly hear. She spoke about her children first, her children. She spoke about being detained, about her fears, about her questions. She sat, eyes downcast. As a well-dressed group, a group of folks on a tour came through. The tears didn't stop. What could I do? Finally, I stood up, went to the bathroom there in the visiting area, got some toilet paper, brought it out and gave it to Maria. She wiped her tears. She sat there with the wad of toilet paper in her hands. In a minute, the guard came over. What did you pass to her? She demanded sternly. Toilet paper, I answered. She looked to Maria. Maria, with her downcast eyes, opened her shaking hands and showed the lump of toilet paper she held. My name is Yvonne Dilling. I'm a member of the Mission San Jose Catholic Parish. I have been visiting people in detention for three years. On one visit, about six months ago, I approached a young boy in the visitation room. His mom was talking to another friend there. We were not strangers because I had seen him on previous visits and we always said hi to one another. So I could tell that the mom was really emotional and was looking at her son like she didn't want him to see her in that emotional state. I asked the boy if he'd like to go sit at another table and visit with me and we could get to know each other. He looked at his mom and then he nodded shyly. I introduced myself to him and I made small talk telling him about all the places that I had lived in El Salvador, his home country, and that got smiles out of him. And then I tried to draw him out. I tried sports. I knew they were playing soccer inside there. I tried to school classes. Other kids had been wanting to try to speak English words with me. I couldn't get him to relax. All I learned was his name and then he was nine years old. So I tried a different approach. I said, he's been here nine months now. What do you do to kind of keep your spirits up? Como hace para mantenerse el ánimo? He burst into tears. I'm Sister Sharon Alton-Dark, a presentation sister, and I've been visiting at Carnes since October. Driving home from Carnes last Friday, someone in our van asked, why is three-year-old one's head so large? Is that some sickness or abnormality? I said, I don't know. I don't know why, but what I do know is that Juan has not gained any weight in the nine months he's been in. Hi, I'm Suzanne Montiel. I started visiting Mariarosa when you saw up here a short time ago, in the end of last year. A few weeks ago, after being detained for six months in Carnes, Mariarosa and her nine-year-old son won their asylum case and were released. My family was gratified to be able to host them in our home for a few days upon the release. So, that first evening, we all sat down for dinner and we watched, or maybe I should say marveled, at Mariarosa's son and our two boys gobbling up with great gusto. Caldo, arroz, pollo, tortillas. So many tortillas, you would not believe.  They started chasing each other around the house and laughing and exchanging these cryptic little messages in Spanglish over walkie-talkies. Still at the table, Mariarosa Todas, excuse me, Mariarosa Todas, at Carnes, the children weren't eating. My son was not eating. He was depressed and not interested in food. And so, how could I eat? How can a mother rise from a table, satisfied, while her child was hungry? We asked for different food. We asked for better food, she said. And at this point, whoosh, the boys come racing through the room again, and then crash day. And she went on and said, what our children at Carnes need most is their freedom, to live in thought.


Hi everyone, it's MJ and in this video we're looking at a sample question from exam P And this is a client spends X minutes in insurance agents waiting room So waiting room is X and Y minutes in the meeting with the agent So the meeting is Y the joint density function of X and Y can be modeled by and what we basically have here is a Joint exponential distribution So we almost I mean you don't have to separate it But you could think of separating it as follows where we have for X. We've got this one over here and Then for Y we have this over here now The interesting thing is is that what we're asked in this question is which are the following expressions? Represent the probability that a client spends less than 60 minutes at the agent's office And if we look at the multiple choice potential answers, we'll see that the only difference is The you know these limits over here for our integrals everything else is is the same Now the tricky part is or I think a lot of people might make a little bit of mistake is they're thinking oh look 40 and 40 for X and 20 and 20 for Y and they're thinking it's like this, but it's not necessarily the situation that might be You know the parameter that is used. That's the the waiting time rate But the question is saying what is the probability that the client spends less than 60 minutes at the agent's office? And is not giving us any indication of or saying, you know that's been so much and so much there Which means straight away we can actually cancel out all of the ones that are using the 40 and the 20 instead we can focus on These two that are looking at 60 minutes Now D is incorrect because it's not factoring in the sense that these These times are joint In the sense that the more time you spend in the one it's going to affect the time you spend in the other one so D can also be taken out which means by You know, this is the fact that he is the only one left it it must be the answer But it's always good to check and yes, you see that's what we are looking for in our joint distribution Is the fact that we want to get everything with regards to X? So we're gonna be putting the 60 minus X over here and then once we integrate that out with our X's We can then integrate out with just the X's and get and get our result so that is the one we are looking for and The way to work it out was that you know the total time is to be less than 60 minutes So if X minutes are being spent in the waiting room, you know in the range of 0 to 60 and from 0 to 60 Minus X minutes are spent in the meeting itself But yeah, it's a bit of a tricky one that for for joint distribution Functions, but if you've got any questions, let me know in the comment section below. Thanks for watching guys. Cheers


So, the other day in Trisha Paytas' video telling Desocia did to stop bullying her, something that I didn't notice was in the description there was a link to a video asking if Desocia did is faking it. And I've received a lot of DMs about this video as well as this channel that seems to be from Trisha Paytas' quote unquote alter Tatiana. So let's talk about it in this video. What is up everybody? This is Chris from the Rewired Soul where we talk about the problem, but focus on the solution. And if you're new to my channel, my channel is all about mental health.  So yeah, I've received so many DMs about this. I just wanted to put a video out there, share my thoughts, opinions on it and everything like that, but I don't like making videos unless I can provide all of you with something of value to take a look at your own mental health and possibly, you know, start working on some things that you may not have known were there. So I'm actually going to split this into two parts. I'm going to talk about something else before I dive into this new channel from Trisha Paytas' alter Tatiana, alright? So the other day I got this DM from a young lady by the name of Katie. Katie, thank you for this DM. She says, hi Chris, I wanted to know what you think about Trisha Paytas sharing emails on her story, sharing people's emails who have sent her hate, but hiding emails of people who have sent her emails about how they support her with DID. I don't necessarily like Trisha. I've been trying to keep myself updated on the situation and although I don't agree with sending her hate, I also don't agree with her sharing their email addresses to her audience. What do you think? You also probably won't see this, but I thought it is an interesting topic to mention. Thank you, Katie. And yes, I do see my DM. So if any of you ever want to reach out, reach out. I get a lot of DMs about people just ask me, you know, my thoughts or like resources to point them in the right direction for therapy or rehabs or books or whatever it is. So DM me anytime at the Rewired Soul on Instagram or Twitter, alright? So yeah, what does this have to do with all of you, okay? So we are going to be talking about the work of one of my favorite psychologists, Dr. Roy Baumeister. Okay? This dude is amazing. So some of you know, like not only do I love psychology, but I also love philosophy. And Roy Baumeister, his story is he actually started out with philosophy, but his parents are like, nah, man, you ain't going to college for philosophy. So he's like, okay, well, psychology is pretty close. And now he's one of the most famous psychologists for all of his research. A lot of his research had to do with willpower, also the science of evil. And now he has a brand new book called The Power of Bad, which is all about the negativity bias. Okay? So first, I don't have any screenshots of this. I saw this like the day after Trisha paid a share of this, so I don't really know what those emails were. But anyways, I was going to say, I was going to say, like, who sends nasty emails to like a celebrity or a pseudo celebrity, right? Who takes the time out of their day to do that? And I was like, wait a second, Chris, you do that. And real quick pause, real quick pause. I tell you guys this constantly throughout my videos, all right? Like we're constantly looking at others and judging others and we don't look at ourselves. And that is something I'm actively trying to do. So when I questioned why are people sending these emails, I remembered, oh yeah, Chris, you used to do that way back in the day. So real quick story, back in my drug and alcohol addiction when I was off my rocker and I was angry at the entire world, I sent the local Las Vegas weatherman a very nasty email. It was about one page, maybe two pages long. I did a video about this a couple of years ago. But anyways, I was so upset at this weatherman for having inaccurate weather predictions. And I was like, how do you do this and not even apologize for your terrible weather predictions? Like, who does that, all right? So I empathize with those who are sending YouTubers or celebrities nasty emails. But I will tell you from my experience is because it wasn't because of them. I was just angry at the world, right? And I was like, I can, I can, you know, put my anger out there on someone who may never see this and it's not really gonna affect anything. It was easy for me to yell at him then deal with the only stuff, the only issues in my life. Funny story is years later, I actually found the guy on Twitter and I apologized to him and he was like, oh, you know, no big deal. And he said he actually gets a lot of nasty emails. He's actually a weatherman in Sacramento now. His name is Darren Peck. But anyways, let's talk about the negativity bias.   Anyways, so the negativity bias, our brains are automatically prone to spot negativity. In that book, The Power of Bad by Dr. Roy Balmeiser. It's amazing. It goes through the whole science of it and it explains why there are more, there are more psychological studies on negativity than positive, right? And one of them is there's more statistics. He even discusses how there aren't opposites of certain negative words. What is the opposite of like, you know, evil, right? And he goes through these different languages and stuff and a lot of people don't even have words for it, right? And you know, the positives don't have nearly as much effect as negatives. So what he discusses is for every one negative, on average, it takes four positives, all right? So one negative comment, it takes on average four positive ones to balance it out. Here's the kicker. For people who struggle with depression, it's about 10 or 12, okay? So if you're struggling with depression, one negative event hits you way harder than the positive event. So you need 12. So when I actually responded to this DM about why Trisha Paytas might be, you know, posting the negative emails rather than the positive ones is regardless of what your thoughts or opinions are on Trisha Paytas, I would almost guarantee that she is, you know, going through it mentally right now, right? And those negative emails are hitting her harder than any amount of support. Like what I said in the DM is let's, you know, let's give a conservative number of saying, let's say Trisha Paytas received 50 negative emails, just 50, all right? And that is a low number. If you combine all the comments she's getting and everything like that, let's say 50 negative emails. Just emails specifically. Let's say that she is depressed. It would take 10 positive emails for every one negative email. So she would need 500 positive emails to counteract those 50 negative ones, okay? So what does that mean for me and you? Okay, so if you're struggling with depression, recognize it and recognize the positive experiences you need. Something that I personally do is a gratitude list because I can't just go around asking my friends, like, hey, hey, I just had a negative experience, say 10 nice things to me, right? Like that is weird and unrealistic. A gratitude list really helps me balance that out. It helps us hyper-focus on the good things in our life.  They did a study, where was it? I think it was University of Southern California where they had two groups on the group that did a gratitude journal for two weeks, had decreases in depression and anxiety of upwards of 80%. So get you a gratitude journal, all right? So yeah, let's jump into this Tatiana YouTube channel that just popped up. So like I said, I didn't know she linked this in her video telling the associate did to stop bullying her. And yeah, I've checked it over the last couple of days and everything and people are like, is this Trisha Paytas? Is this Trisha Paytas? I don't think so. I don't think it's Trisha Paytas. I don't think it's her alter. I've seen some people saying, oh, it's one of, Trisha Paytas got one of her friends to do this. I don't think so. You've got to understand, like even Onision has stands, okay?  Like just about no matter who you find, no matter what you think of them, you've got to realize there are people who absolutely love and adore him. And that's what I think or I assume this account is. But it was such a jerk move for Trisha Paytas to put that in the description. But Trisha Paytas does tend to share videos that back her up or agree with her opinions or whatever it is. For example, I remember a while back, the channel Primink, he made a video like in defense of Trisha Paytas and Trisha Paytas, she retweeted it, all right? But anyways, this Tatiana account, I'm glad it doesn't have that many subscribers. I think it's less than 500, even though that video that Trisha Paytas link has like over 100,000 views. You know what I mean?  They made a Twitter account that I checked out for a minute. And I don't know. It, you know, part of it seems like they're trying to frame Trisha Paytas and make it look like it is her. Like for example, it says, so far all who attack Tatiana have failed because she is not a weak blank blank like my host. So they are pretending to be Trisha Paytas's altar, probably based off of the video Trisha Paytas made about Anthony Padilla going off and saying, oh, that was Tatiana. You know what I mean? So somebody has taken on that persona and made a YouTube channel. It's a troll. But the thing is, here's the difficulty with mental illness of any kind. Like technically, you could tell anybody that they're faking it. And that's one of the reasons why there's such a stigma around it, right? You could tell somebody that they're faking depression. You could tell somebody that they're faking anxiety. You can say all these different things, right? And I know I got some comments saying that there are brain scans that you could do for DID. There's brain scans that you could do for depression, anxiety, trauma, ADHD, bipolar disorder, schizophrenia.  Chances are there wasn't. Like you can't just go into your primary care doctor. You can't go to your therapist.  Can you refer me out to get a brain scan? They typically won't do that. Like your insurance isn't going to cover it. I remember Logan Paul. What was it? It was around the time, maybe a little bit after Shane Dawson series with Jake Paul. Like Logan Paul went and did a brain scan, but Logan Paul is a millionaire. Logan Paul could do that, all right?  And it's what's tricky about the whole mental health field. I think Trisha Paytas is a prime example of that. In recent videos, she has discussed the multitude of diagnoses, did I say diagnoses? The diagnoses that she has received. And I don't have time to go into it in this video, but there are some people who search out a diagnosis, right? Like some people, they don't want to accept the initial diagnosis and they will continue to see therapists, psychologists, doctors, whoever it is, who give them the diagnosis that they want, all right? In the DSM, with all the different disorders, so many of them overlap. But anyways, yeah, this Tatiana channel just making hate videos on dissociate did, like it's not cool. My suggestion, don't click on them, don't show them attention, but I get it. Like I get it, everybody's curious, everybody wants to see and everything like that. These are low quality drama videos. They are making it with, I don't know, with just free editing software. It's not great, don't watch their videos. All right, but anyways, please don't forget about the negativity bias. Please work on gratitude journals, work on spotting the positives. As a YouTuber, I can tell you, I get how difficult it can be. I can get 100 positive comments sometimes and just a few on there just tilt me out. That's when I gotta back away, take a break. Sometimes I don't even check the comments. I'll try to limit to checking them once a day. It's just being self-aware of my current state of mental health. You know what I mean? But anyways, I'll link down below Roy Bowmeister's book, The Power of Bad. I think everybody should read it. He also talks about the negativity that we get from the news and why we focus on it and statistics.  All right, I need to stop talking. So if you liked this video, please give it a thumbs up. If you're new, make sure you subscribe and ring that notification bell. And a huge, huge thank you to everybody who supports the channel over on Patreon. As well as everybody who supports the channel by buying my mental health books at therewiredsoul.com slash shop. As well as everybody who supports the channel by getting merch from the merch store. All right, thanks again for watching. I'll see you next time.


Live from Austin, Texas, it's theCUBE. Covering OpenStack Summit 2016, brought to you by the OpenStack Foundation and headline sponsors Red Hat and Cisco. Now here are your hosts, Stu Miniman and Brian Gracely. 2016 in Austin, Texas, I'm Stu Miniman here with Brian Gracely. It's our fourth year doing theCUBE at the show, the sixth year of the event and 7,500 people have gathered here. Happy to welcome back to the program. Randy Bias is currently the VP of Technology at EMC's Emerging Technology Division. Randy, welcome back to the program. Thanks, always great to be here. All right, so we've got EMC world coming up next week and I'm sure there's stuff leading up to that. But first of all, we're doing a lot of reflection about OpenStack. You've been involved since the early days. Day one. Day one, were you at the first event? One of the 75? I was not one of the 75, but I was part of the original launch. Yeah, you were definitely there. One of the OGs as it were of the event. So give us your thought as to where OpenStack sits. I mean, I think back in the early days, there was only one true cloud and it was the public cloud. And where does OpenStack fit in the environment? What do you think about where it's come? Does it exceed expectations? Is it where you thought it would be? It's not where I had hoped it would be, but it's where I predicted it would be, which was basically dominant in private cloud. I mean, I've been saying this for, I mean, pretty much the beginning. I basically said, OpenStack's never going to be relevant in public cloud and I distinguished between public cloud and hosted private cloud. OpenStack's got a great future in hosted private clouds, I think. But in terms of public cloud, big multi-tenant systems like Amazon and Google, I just don't think anybody's going to take OpenStack and make it relevant there. And they haven't so far. And you look at the speed and velocity of Amazon and Google and Azure and add that all up and OpenStack's not even in the same zip code. But on private cloud, it's a completely different story. I mean, you see this thing happen with Volkswagen and you just see this almost huge shift over to people really getting cloud native applications, getting that they've got to modernize their data centers and then believing that OpenStack is sort of one of the foundational components to making that happen. And so that's great. The only thing that I wish is that OpenStack had more velocity and more deployments and more customers. And I think they're the community and the vendors to a certain degree have shot themselves in the foot by being too inclusive and having too much diversity and every OpenStack deployment still is largely a snowflake, which I said what, four years ago? One of the things we've been talking about is where OpenStack fits in that kind of multi-cloud world. As I just said, OpenStack's really private cloud solution hosted whatever flavor you want in there. But we're starting to see discussions of how it interconnects with the public clouds. We had Microsoft on this week, we had Google on this week, talking about how if I use containers, Kubernetes, things like that, and have OpenStack as an application, that it can have interactions and live in that both public cloud and on-prem solution. What's your thoughts on those pieces? Well, I mean, if you look at the conversation around OpenStack being connected to the major public clouds, the conversations being driven from the major public clouds are iconic class and renegades like me. The majority of the OpenStack community still holds, as far as I can tell, it's sort of this sort of weird idea that OpenStack will become this sort of like, you know, ubiquitous like platform that's totally interoperable, somewhat like Linux across all data centers everywhere, including the public cloud, and that, you know, that'll magically come together. Except it hasn't magically come together yet. It's still not magically coming together. And even though we make incremental steps like deaf poor towards it, we just really don't get there. And so I'm a little frustrated, as you can tell, that we're not making those steps. But I'm really gratified to see that many of the public cloud providers see OpenStack's importance in the private cloud, arena, and they're reaching out the other direction. And actually, you know, some of the things that we're looking at doing is interconnecting Google compute platform to Keystone and potentially doing some interesting things there. And my team is going to continue to run down this road with whatever resources I have to basically make OpenStack interoperable public cloud. Regardless of what the rest of the community does. So, obviously, what's the, the big theme this week is around telco and NFV. We're seeing some large carriers, you know, talk about deploying very, very large OpenStack thing. Help us rationalize that. If OpenStack doesn't make sense in the public cloud, which is a scale game, it's an operations game, how does it then make sense for these humongous carriers supporting, you know, potentially billions of mobile phones or IoT devices? Help us rationalize that a little bit. Yeah, so there's actually several different things you're asking there, and I have to break them apart. So the first thing is, does OpenStack scale? And I think OpenStack can scale just fine, depending on which components you're using. I mean, our POC deployment for Walmart was 25 racks. You know, we didn't have any problems. We ran Black Friday on it twice.  Is it gonna be Amazon scale? I don't think so. Do carriers need to be Amazon scale? I don't think so. Kind of the next question you're asking is, you know, what's going on with OpenStack and NFV? I think that's a little bit overblown. I apologize to the foundation in advance, but I'm not on the board, so I don't have to pull my punches anymore. But the reality is, is that when I go out and talk to carriers, the whole challenge with NFV is that you have to try to take these network functions and turn them into cloud-native applications. And the people who provide them these, the vendors, they're nowhere near doing that across the entire stack. So NFV is a great use case, is clearly important. The carriers care about it a lot. They're going to drive it to conclusion in a way that we didn't get to conclusion with SDN. But there's going to be a lot of drag because they ought to go out and convince every vendor to refactor their apps. And then third is, you know, how does OpenStack do with the carriers? And the reality is that they've tried public cloud with OpenStack and largely failed. And that's part of why they've gone over to OpenStack as private underpinning NFV because they can see they can get a tremendous amount of value of refactoring and modernizing their data centers and using OpenStack as an underpinning for that. Yeah.  Here's the new way. Yep. You're now at EMC, you know, as part of the cloud scaling got acquired probably about a year and a half ago, two years ago. That's right. What's going on at EMC around OpenSource, around OpenStack? Like how are you infusing that DNA into that culture which, you know, three years ago you would have said, you know, it doesn't make sense here at all. Yeah, it's a big question to answer. So I'll try to be succinct, it's going to be hard. So first, when we were doing the transaction with cloud scaling, EMC came in with like two weeks to spare out of nowhere. And I was like, we're going to use these guys as a dark horse, you know, against the other bidder. And what actually went to happening is I came around very quickly to realizing that at the executive level of the EMC, there was a shared vision around what cloud scaling was trying to do too, which was to drive an appliance-like experience into the customers so that they could deploy scale technologies like in Amazon does without having to have all the Amazon skills and labors and capabilities. And that was really at the heart of what we were trying to do. We're really trying to have almost like a software-like abstraction of the Vblock. And so I saw that as a shared vision. So I was actually happy to go over to EMC. And then what's happened is the cloud scaling team amongst others has been on this journey to deliver sort of a new capability which we reveal next week at EMC World, which is, you know, sort of something I can't talk about in detail right now, but you can think about it as sort of being what would a Vblock look like if maybe Amazon created it and delivered it to a typical enterprise that can't consume Amazon's normal internal software. They need to be kind of like, you know, really kind of regimented and enterprise-grade kind of product. And so that comes to fruition finally. And so even within EMC, you see sort of a clear bifurcation between the technologies and products that service sort of the second platform or legacy applications and those that service kind of this next generation. So Randy, you wrote a post leading up to the event and there's a lot of pieces more than we'll be able to get into, but you talked about Amazon, the difference between where you build function into the hardware versus the software. I know when I left EMC, I got kind of a retraining because I lived in the enterprise world, everything was HA, you harden it, you make sure that the hardware, hardware, hardware works as much as possible and as the line we always use is hardware will eventually fail and software will eventually work. So maybe you can share with us a little bit about your thoughts and how's EMC's views changing on kind of the role of the hardware versus software? Yeah, so EMC at the executive level understands that it's a business that's really transforming from being hardware-centric to software-centric and that's like a big, many year change, requires a lot of change to the culture and DNA. But if you look at some of the teams that are now the team that builds our object storage product which is software-only, stripped object store, those guys all came out of Microsoft Azure. So there's a lot more of that DNA in EMC these days, scale out folks, people who worked at Apple and built the infrastructure under Siri, people like myself who worked in OpenSource, there's a lot more of that kind of DNA being injected into EMC and you're seeing it in the software-only products. And if you actually look at where all the heat is, where our revenue growth is, it's all in the software-only products, ECS, Scale IO and so on, 200%, 300% growth year over year. And so that transformation's happening, the battleship is turning, I'm always wondering are we going to make the turn, are we going to make the turn, the battleship's going to break in half, like I don't know. And then just for giggle-sake and throwing a wrench in the works, we have the deal acquisition happening and then there's another thing, like I don't know, how's that going to affect the battleship turning? But it is turning. Yeah, you talked about in that blog post running Oracle Rack on top of OpenStack which years ago would have seemed like you'd have gotten shouted out of the room by the- Crazy talk. Yeah, the cloud-native sort of folks. Are you hearing that from customers? Is that what they want to do? I mean, do they want to move the old to the new or where's that going? On the average enterprise's journey, where they wind up is really understanding that right now it's best to keep the, not cross the streams, right? Keep the second platform or third platform stuff separate. But in the course of that journey, typically in the middle of it, you see some wishful thinking, you see some desires for unicorns and ferries and things like that. I'm aware of one deal in Russia that is going down that we're not really a part of, where the customer wants OpenStack to be overloaded to support containers on risk-based platforms and literally they're going to add so much junk to OpenStack to support everything that exists in their current data centers that I just look at that and I'm like, that's going to be a fun project. I'm really glad I'm not part of it because I don't think it's going to end well. Yeah, I mean, it's always interesting. Customers, they get that blue sky vision of where things are going. Yeah, you have to be a little bit more pragmatic as to where things are. So, where are we from the maturity? I think most people agree, kind of base functionalities in pretty good shape. Do you agree? What do you think OpenStack needs to, what needs to happen moving forward and what are the boundaries? How far will OpenStack grow? The base functionality is strong. It depends on which components you're using as it always has. I think that it's, I still think it's best to consume for a vendor. The folks I see do DIY, just really invest incredible amount of engineering resources into effectively building their own distribution, which doesn't make a lot of sense. The folks I've seen be very successful do less experimentation. I hate to say it, but doing SDN and SDS and putting, doing experiments in your entire stack, you're just stacking up risk after risk after risk. So I encourage people, if they're going to go do an initial POC with OpenStack, use networking you already know, or use storage you already know and have on hand. Don't do one experiment in the stack. Get comfortable, learn more before you go crazy. So I think when you keep that all in mind, that it's relatively mature for just the core set of services. One of the things that I think is interesting is that some of the technologies like ScaleIA are getting to the point where they can create the ability to take on some of these P2 production workloads. I don't think everything's there, but I think some pieces are there. And that thing that the unicorn that people are asking for, I think we'll never get to the unicorn, but I think there's a possibility to get some elements to the unicorn. One of the examples, or things that I look at as a guidepost is Amazon Web Services. You know, when they started off, there was no VPC, there was no load balancing. There was a bunch of enterprise-y services, particularly VPC that just didn't exist, right? It was all layer three networking. You couldn't have a VLAN or network segmentation.  You can't put all P2 workloads there, but you can put some. And so I think that's really important. So Randy, we haven't had much discussion of VMware this week. How do they fit into this whole discussion? I feel corned, Stu. I'm not sure what to say. VMware's part of the federation. They love me. Every time I come visit them, they roll out the red carpet. Randy, come on in. Or maybe the opposite of that. But I don't know what to say there. Without getting myself in trouble, I will say that VMware is charting its own course for better or worse. So one of the big themes, last year the big theme was open stacks and integration engine. This year, Jonathan, the keynotes, were a lot of talking about, hey, here's how we're going to collaborate and partner with PaaS layers, container layers. Where do you see open stack in a couple of years? I mean, they've kind of gone down the path of they wanted to be more than I as. A lot of those projects have kind of been soft. You've had other foundation startup. Where does all this stuff kind of mash together? If you're a customer, do I have to learn Kubernetes by itself and open stack by itself? I mean, is that a good thing? Is that, do you see these things sort of mashing together? Where's all this going? I mean, I think it's an excellent question, Brian, and I'm not sure I have a great answer. What I'd like to see is I'd like to see, gonna get on my hobby horse here, I'd like to see what I've been promoting at the board for the last couple of years, which is that open stack stops of viewing itself as a single monolithic thing and it gets broken down into groups or subgroups of projects. And that is structured a bit more like the Apache Software Foundation. Each of the projects can actually operate somewhat independently. And there are sort of half steps to doing that, like Big 10, but there's still all these attempts to put together sort of a full release that's been tested together. And I think that we should just admit that that should be what the vendors should do. Like I would rather see the Kubernetes guys go and say, hey, let's take these two or three components of open stack and roll them up underneath our default Kubernetes deployment and package that up. And then there'd be an open stack certification and interoperability test for open stack past platform. And I would like to see a bunch of different flavors of open stack that were designed for NFV, that were designed for enterprise private cloud, for public cloud compatibility, and for us to have different certifications around that because right now you still cannot draw a tight circle around open stack and say, this is it. And that's why Def Core is stalled and has been unable to sort of get, people agree about what's required for interoperability. So rather than trying to say there's one thing because we can't agree on one thing, let's admit that there are several different flavors that are sort of designed for different workloads or verticals. And then basically assume that each of those will be a subset of components of open stack. And then the vendors will take those to market and have a way to test for interoperability. I think that would be a much better model. But so far that's fallen on deaf ears. Yeah. And we've heard different opinions on that. I know Red Hat told us, hey, look, we don't want to have variation between the NFV version, the enterprise version, the cloud version, obviously for their testing reasons. But yeah, it makes sense. Otherwise you're talking about saying, get away from monolithic applications and we're going to deliver you sort of a monolithic delivered package type of thing. So I can see both sides of it. Absolutely. If one size fits all, public cloud wins. Period. If one size does not fit all, then private cloud has a place to play and private clouds need to be flavored for their particular workloads. I just don't see how you can see it any other way. Interesting. So Randy, outside of OpenStack, what's got you excited these days? Love containers. I think security around containers is deeply misunderstood and that people don't understand that containers have an opportunity to basically destroy the type one hypervisor. I'm really, really excited about some of the new security startups that I see doing stuff around containers. The other thing that I'm excited about is I feel that we're about to hit a pressure point that will be a real sort of change in the security community generally, even beyond containers, which is that security is still like the big moat and castles, like build it and try to surround everything, but the environments are getting more dynamic, more agile, more nimble, and the demand for the business is for that. And so I think that the pressure is going to increase in such a way that the security industry is going to get real disruption because it's been the stalwart resistant, resistor to disruption around the cloud. And I'd like to see that happen because I think that whole industry needs to be really shook up. And so I think that's a real opportunity. And then the last thing is that the culture change within the enterprise is starting to happen. I mean, I don't know about you guys, but what I've seen is that as people struggle to adopt open stack or containers or these things, they've started to realize they need to get back to first principles, which is how do we deal with the problem between the line of business and centralized IT? And then they start to latch on to DevOps, which starts to get them into the process of culture change and thinking about how to make those teams work together and align the time to market with the reducing risk at the same time. And so I'm really excited that, you know, that seems like a huge wake-up call that I just didn't see coming. Like I didn't believe the enterprise would see that that need to happen and they are seeing it. And so I think that that's winds up being the thing, the seed that we can all grow within the enterprise to basically get them all transformed. Definitely, I totally agree. There's so much change going on there.  Yeah, you know, what does that mean for some of the individual silos? Will we finally get beyond some of the silos? And, you know, what's that going to mean to kind of the application roles? The infrastructure silos, the team silos of the application silos. Sure. All of the above. Take your pick. Yeah, I mean, the silos have to go away in order to get operational scale and efficiency in order to have speed and time to market. One of the things that I've seen that's really funny is though, as I see everybody trying to get to the unicorn, they're like, we want one silo for everything. And so what I've been trying to tell customers is like, look, you know, like they'll latch on to stuff and they'll like file, block an object all in one system. It's going to be perfect and great. And then they get to the reality, which is that, you know, you just can't build one system that does all things. And, but the thing is that there's a fatigue over having hundreds or thousands of silos. And that's real. And that has to change because, you know, that's what the web scale guys have taught us. However, the web scale guys don't have one silo. They just have a very small number of silos. So if you're going from hundreds or thousands to three silos, you got one block, one file, one object system, you'll have more in that. But as a, for example, that's a huge amount of operational efficiency that you're going to get just massive, 70, 80, 90%. And so that we need to get the focus away from having the magic pixie dust we put in the data center that solves all problems and just realize that there's some very pragmatic things that we can do to reduce the operational problems by having a very smaller number of silos, right? It's not bad to have silos. It's bad to have thousands of silos. So, you know, sort of last word on this. When you first got started, it was pets and cattle. That sort of, you know, got your name out there, became the thing. One of the things. One of the things, obviously. What's the next, what's your next sort of phrase that you're using to get people to go here, think about this new thing. Do you have a thing that's going to catch on yet? I can't predict that stuff. I had no idea that pets versus cattle was going to take off. That was that, you know, it floored me. Like I just wasn't expecting it, right? I was looking for a way to synthesize things down. And so that's what I'm always trying to do is like, how do I get this to be bite-sized so that like somebody can consume it? So, I can't really predict what it'll be. Rancher's dilemma sound pretty good though. Kind of rings, doesn't it? It's got a little flow, but I don't, you know, we'll see what happens. Great, all right. Well, Randy Bias, always great to catch up with you. Your unfiltered view of everything going on here in the industry. We'll be right back. Getting close to the end of day two of three of theCUBE's coverage, OpenStack 2016. Thanks for watching.


As many anti-government protesters across the country take to the streets to call for an end to what they described as bad governance and harsh economic policies, some Nigerians in the FCT have rallied support for the Buharis-led government. The protesters who were seen carrying pluckets with different inscriptions at the Unity fountain in Aboja said the Buharis administration deserves commendation, especially in the area of security. The pro-government group despite admitting that the various challenges faced by the country says Nigeria is better secured by the present administration and that Nigerians do support the government as she marks over 20 years of democracy. I have buried sentiments through since my university days and I continue to mobilize you towards uniting for peace, towards uniting for tolerance, towards uniting for development because all these laws we are doing it is in this world it will end. Just some two three years back there were so many bomb blasts everywhere, even me and you cannot stand like this. Today how can you compare just two years and now? So many local government were captured by Boko Haram, now there was no local government captured by Boko Haram and even the issue of banding tree and kidnappers, the thing has gone down because government is doing everything effort now and then to ensure the peace and unity of this country so we really appreciate and recommend it President Muhammad Buhari for doing well. Hello hope you enjoyed the news please do subscribe to our YouTube channel and don't forget to hit the notification button so you get notified about fresh news updates.