Hi, everyone. Welcome to another CNCF webinar. Today, we're going to be talking about how we can secure web services using lesson script, serve manager, and all that in Kubernetes. Before we get started, where am I? My name is Enya Ramirez. I'm the CEO of Quenby. But I'm also founder of the Hispanic Foundation for Cloud Native, which is a place where we share all the knowledge about Cloud Native and Kubernetes in the Spanish community. I'm also part of the advisory board member of the deaf network. I am also a technical advisor to some startups. And of course, I'm a certified administrator and I'm part of the team that also curated some exams for the Lino Foundation and the CNCF. Something that I do enjoy a lot is traveling the world with my favorite person in the world, which is my wife. But that's not enough about me. So let's get started with today's agenda. So what are we going to be doing today? Before we get into the demo, which I'm pretty sure that everyone is looking forward to, we might need to work through a couple of the concepts that we need to understand first. One of the first things that we're going to be looking into is what's HTTPS and HTTP, what is SSL, TLS? Especially, let's try to cover that topic for the rest of us, people that might not be super experts on the encryption and that kind of stuff. We're also going to talk about Less Encrypt, which is one of the main topics on this webinar. And then we're going to see what's said monitor and we're just going to put all that together into a nice demo, hoping that the demo gods will allow us to have this smooth and nicely. So let's get started. First, HTTP and HTTPS. The best way that I found, to be honest, to explain what is the difference between HTTP and HTTPS is to basically using this nice image, which is when we're doing all our browsing, when you open the browser, wherever browser you use and you navigate to a site, you have to wait to do it. Our first one is HTTP and then you will see that all your information, all your traffic is going to be completely in plain text. So what that means is if you put in your username, your password, and sort of a website, that's just going to go from your computer to the server in plain text. Everyone will be able to see it. And the difference is when you're using HTTPS, which is definitely the way to do it, but it's the secure version of HTTP, then all that information that you send from your browser to your server back and forth is encrypted, meaning that instead of seeing your username and password, they all just see a random set of characters that they cannot decrypt or understand. So that's the best way that I found how to explain HTTP and HTTPS. But then you might say, well, Angel, you say HTTP, HTTPS, and then you're bringing up SSL and TLS, what that even means. So the SSL, as you can see in the bottom right of the image, is now in both the certificate. But to get more in deep on what that means is, so the SSL is a still widely used word for describing the security around the HTTP and HTTPS traffic. However, currently, it's TLS, the one that has been used. Just to try to summarize it in a way that it doesn't get too complicated, TLS is just the newest version of SSL that is a lot more secure and, of course, have more features. But the word that I see is just an evolution of SSL. But everywhere, you can still say SSL in TLS intentionally is not wrong, it's just fine. Here's some history of how they were created. One of them was created by, SSL was created by Nescape initially. That was the one that was used by the time. And then TLS came after that by the internet engineering task force. And that's the one that we currently use, which does have a lot more features. The curiosity is that the SSL 3.1 basically is what became then TLS 1.0 at that time. So that's where the transition started. But the interesting part about how these SSL and TLS works is that now both devices, in this case, the client and the browser, have that certificate that they use to interchange information. And that's what they use to then, using a set of key pairs like private and public keys, they encrypt all the information and messages that come during that connection. So a little more about it is what's involved in this SSL and TLS process is basically there is three main things that needs to happen. One is that you have to be an encryption, of course. That's what we're all looking for, making sure that everything is secure. You have to also have another indication, and that has to be all with integrity. So what that matters, well, in the process, which we're going to be seeing in a little bit, we have to make sure that there's a version that we agree upon between the client and the server. And the reason why is because right now TLS has three versions. We are hopefully in 1.3, but still those are three versions. So the first thing that happened is they just established that connection saying, OK, well, let's talk in TLS 1.0, 1.1, 1.3, whichever is the one chosen for that communication. And then the encryption happens, which is established the whole surface suite. Which one we're going to be using? Let's use x, y, and c. OK, cool. And that way, we're going to establish that connection. Now we know that the encryption is set. What's happening next is now they need to authenticate. They need to make sure that the identity server is the one that it's supposed to be. Because one thing is establishing an encrypted connection, but the server is not the one that it means to be for the browser, for the client to talk to. Then the encryption release, you have an encryption encrypted messaging with the wrong server. At the end, they will still be able to decrypt that information. So that's where the authentication happens using that certificate. And last but not least is the generation of the session's keys. That's what I relate to the integrity. That's the way that now you can make sure that everything subsequently to that will happen in a secure way. And you're actually talking to the right server. So that's why integrity is important there. So now, what is the TLS handshake? So basically, the TLS handshake is what I just described a few seconds ago. But here you can see a nice graphic how that happened. So the part here interesting to clarify is the different versions, which is why it's important to make sure that the version of the TLS established is the one that you want. For example, in the TLS 1.0, you can see there's more steps versus the 1.3. In the 1.3, basically what they did, they just encapsulated more information and exchange in just one roundtip. So you don't have to basically go and do seven steps. So you might say, well, that's how that important. Well, you basically reduce the amount of roundtip. So you have less millisecond that you need to use in that process. I mean, maybe some systems, the millisecond might not be relevant, but in all the platforms and the steward system, the millisecond actually counts. So that actually is one of the reasons. So that being said, the TLS is always going to add latency to your system. Now it's more about deciding how you can afford and which one way you can afford. So it makes sense to always be on the latest TLS, not only because you have more security and more features, also because they're working very hard to reduce that amount of latency that the TLS in this case add. But now that doesn't mean that it stops there because there's all the technologies that are being implemented to reduce that latency. One of them is being full star, which allows the servers and the client to talk to each other before the whole process starts. I mean, of course, the one I can argue, like do I want to do that? Do I want to have my server talking to my client and vice versa without having the whole process of mind shake established? Well, it's a case by case. There's no way we can all say that it's one side piece all. But it's good to mention the data knowledge that does that. Same happened with the session resumption, which if a server and a client already had a previous communication and established that encryption, well, you can speed that up because you already have that trust established. That also helps reducing the milliseconds that a handshake had to happen. So once again, this is kind of like a one on one for SSL and TLS. I'm pretty sure that there's experts out there that say, well, did you missing a lot of coins? Well, yes, definitely. But that's probably going to be a topic for a different conversation. But for right now, just to summarize the HTTP and HTTPS, basically the difference is one is secure, the other one is not secure. Strongly advised to use this secure all the time. And then that secure is basically being provided by the protocol SSL or TLS. They are completely intentional in terms of concept. But we shouldn't assume that they are entirely the same. It's just an evolution. TLS is the evolution of SSL, meaning that we should be speaking TLS, hopefully everyone should be using TLS for now. And the other thing is that the TLS involves a handshake. The handshake is the process, how they make sure that there is encryption, there's authentication, and everything in the process. So those are the three main areas that TLS covers. So like I said, that's kind of the summarize version for the rest of us. And actually, that's more than enough to then go to the next topic, which is less encrypted. So what is less encrypted? Well, if you recall what I was saying that the TLS involves a certificate and a certificate have to make sure that the server that you're talking to is the one that you supposed to be talking to, well, that's coming from something called the Certificate Authority, which is an entity trusted by the browsers and the clients that we know, yes, whoever has a certificate coming from this authority is someone that we can trust, someone that definitely knows what they're doing and everything is good. Before we get into the features, what usually happens is they're using any other provider, DG cert or whichever you're using, it doesn't really matter. The process is a little more manual. In a sense, you need to create the key pairs, you submit them, and then they give you back an authority, and then you get all that information.  And that's how the process used to be. And every time you need to do a renewal, you just do the process again. So what's less encrypted than doing here? Well, definitely, this is doing a lot. And that's what I'm going to do now, kind of walk you through the main features of less encrypted, which is one is, it's free to everyone who owns the domain. I have to make sure that we understand that, because not because you're using less encrypted, you can just use someone else's domain. So you need to own the domain, because in the process which we're going to describe later, you need to prove that. The second is, it's automatic. Definitely, I agree, it's super painless. The process is very smooth. All you have to make sure is that you configure your agents, because there's an agent involved there. And that said, you can do that process very automatically. And there's a lot of even CLRs that you can use, these projects that are the third bot, for example, is one of the most known projects that you can use. And it makes your life a lot easier creating, issuing, configuring, and renewing the certificates. It's very secure, as we were talking about, about TLS, which is why it was important for me to explain a little bit more what TLS means, because they use the best and latest practice of TLS. They use very advanced techniques there. And they make sure that what they're doing is actually always compliant with the most advanced techniques. It's transparent. When I was learning about less encrypted, this is something that actually it was a price for me, because everything is an issue and a remote process. Both they are keeping in a public record. So everyone can see that what's happening. So not to get into the blockchain world, but basically the transparency that everyone having accounted for, accountability of everyone, it does make it a lot more transparent. So it's something that is surprising and I liked it. The other one is that it's open. Basically, the protocol is considered an open standard, and we're going to talk about the ACME protocol later. But it's very open, the system, and they cooperate, meaning that it's a joint effort of the community, which is definitely something that I'm pretty sure that everyone watching here love. So a little more about less encrypted, so how it works. There is two process that is involved in the initial validation. As I was mentioning, the ACME protocol is the one that it helps to obtain, trust the certificate for the browsers. And that's done through a management agent. I mentioned one a couple of seconds ago. Serbot is one of them. But there's a lot of them out there. If you go to the website, you will see that there's basically a lot of agents built in different languages, libraries, if you want to build your own. So definitely something that is not tied to one thing, but the process is the same to all the solutions out there. The first thing that you need to do, you need to prove the ownership, which is what I was referring to in the previous slide. So if you look at the top image, so basically the web server, in this case, yours, had to make sure to let it, you could not ask, listen, hey, I want to claim the ownership, or I want to basically say, confirm that I'm the owner for this domain. Listen, maybe we'll get back to the agent and say, OK, well, let's do it, prove it. You have two ways to do it. And here are the ways that you can prove to me that you own the domain. So there are two ways. One could be DNS record. HTTP, a result of all underwear known URI. So I mean, this is very similar to a process that if you go with any other way, any other certificate authority, you just need to provide those two, right? So let's say that once the lesson group goes back to the, in this case, the agent says, OK, you prove to me in this, I did this two way, and then, no, let's do it. So we ask the agent, OK, I'm going to prove it to you. Let me, for example, use a well-known URI, which is very simple to do, by the way. So once we do that and we sign it, we send it back to lesson group. Lesson group, we'll receive it that and we'll validate. But if I, of course, using that knowns that he gave me before, because if you look in the top image, there's a knowns that this sends us back, and that's the one that we use to do the second part of the process. We do that, we sign it, we send it to him, he gets it verified, and then we just put it out there for the lesson group to then be able to download it. So once the lesson group is able to download it, then everything looks good. And say, OK, well, you prove to me that you're the owner of the domain. So go ahead and you can start issuing certificates, which is the next part of the process. So to issue certificates is even more simple. So once you do that, you do the PKCS certificate signing request, same process. We all have to understand that in every process, we have to tell the lesson group what we want to do, but everything has to be signed and everything has to be validated by the lesson group using those key pairs. So in this process, we sign that petition of the certificate, we want the certificate for example.com, send it back to the lesson group, and the lesson group will say, OK, I believe you, I compare it and everything looks good, so let me give you back the certificate after the verification happened. And for revoking the certificate, it's actually the same process just in the other way. In this case, all we're saying is, I want to revoke the certificate that you gave me. I have to sign it, send it to the lesson group, the lesson group validates that and say, OK, this looks good, you revoke the certificate and let me then notify the CRL and all the all CSP, whichever in that case. In that way, all the browsers can rely on that. And the process is very simple. Now, do we have to do this manually? Well, no, I mean, lesson group says it's automatically. So the tools always remember that there's an agent for that, so that agent will take care of that, we just need to get the configurations that we need and it will do it. But this is actually the process that's going behind the scenes on that. So with this being said, let's take a mental pause and say, OK, well, am I ready to now use these anywhere? Yes, I mean, like I said, you can just go to the lesson group website, do download that, one of the agents, whichever you like the most. And if you're using, let's say, whatever you're using is a web server somewhere, a virtual server and you have Apache and UNIX, so whatever you feel more comfortable, you install the server bot, you configure that with your web server and he will take care of the rest. Now, what happens if we want to do any Kubernetes? Well, same thing. So we just download whatever UNIX or web server version we want, we configure that and we deploy our application. Now, do we want to do it that way? Not really. There's already something that can do it for us. We just another project that I'm going to introduce now in this webinar, which is server manager. Semai was developed by Jetstack basically they've been doing a great job on this project because what this project does is just, it just makes it a lot easier for us to configure and use all these certificates because we're only interacting with what we know the best, which is Kubernetes objects. So that makes the process a lot more easier, but of course it goes more than that because it's not only for less encrypt, they actually do support a lot more sources. Less encrypt just happened to be one more. So just to give an idea what they support, they support HashiCorp as well, Benafi and they also have the private PKI so you can create your own PKI if you want to. But even more than that, in the recent versions and I say recent, not like a few months ago, but I mean recent because I've been using server manager for quite some time and they come up with these community sources now where I can deploy, I can develop my own sources if I want to or I can use one of the lists that the community already created, which is very, very nice and engaging because they say less encrypt is doing the job for us and we want to use our private because we are an enterprise and we want to have our own private certificates. Well, we can do that or if there's one that we want to use, for example, you want to use Cloud Player. Okay, well they do have a, and the community want for Cloud First. So definitely if this price has been growing so much, I do enjoy it, I use it a lot. So definitely it's worth to stop by and read more, not just what I'm showing here. So, well, this is kind of like how it works. I wanted to show you a couple more things about that before we get into the demo. One of them is the issuer. We're going to be using these objects for sure and the issuer is just basically a representation of a certificate authority in cornered, obvious terms. They do support multiple. Here they, just to give you a couple of them, they do support CA, which is kind of the example that you see in the image, ACME, which is the one that we're going to be using for less encrypt and then they have sales sign, bold, menafi, and stalls. So this is kind of how it looks like. You just declare what you want in your specs, then you define how you want it to behave, which we're going to be seeing in a second. The second object that I'm going to show you is the certificate. The certificate, interesting enough, we are not going to create it, but we're going to look into it and see how it looks like and what it does.  That certificate would work with that specific CA and that's how you're going to communicate with back and forth and then keep your certificate in sync. So this is how it looks like. I do have here a couple of links that definitely I will recommend that you guys look into a little more in depth. The certificate lifecycle, for example, which is the image that you see on the right, is impossible to see everything, but the reason why I'm putting it in there is because they do have a really detailed diagram of how the whole lifecycle of the certificate works. It's a lot, but definitely I recommend you guys taking another separate reading to this lifecycle because it goes very in depth of how that process works and then you will understand even more how they encapsulate all these complex processes that we usually go through using issuing certificates and getting certificates and reworking certificates into a very simple object and definitely have to give clues to them on that. All right, so this is all I have before the demo. So what we're going to be doing then we're going to basically now put all this stuff together. So what we learned so far about is CTP, is CTPS, SSL, TLS in less encrypted and same manner. Couple of things here, if you're following along, I'm going to be using a Kubernetes cluster in the heat elotion. You can use whichever you want. It does not really matter what type of cloud player you use. It just happened to be using that one because it's just simple to avoid real quick. One, we're going to need a domain name. I think that's the part of the whole point of this webinar is it's tied to a domain. So definitely we need one. I have one name chip, which I'm going to show you guys later, the one that I'm going to be using. And we're going to start the English controller. In this case, it's NGNX. We're going to install CERN Manager and then we're going to use a web service to test all this. And the web service that I'm going to be using is the Google microservice demo. It's like a boutique store and we're just going to use that one as a reference. All right, so let's not delay this more and let's jump right into it. Let me just one second so I can share my other screen and we should be good to go. All right, so you just want to confirm that everything is, we can see it. All right, so just checking the font. It looks good, I guess, okay. All right, so let's get this started. So what are we going to be doing? First, let me show you that we have a cluster. So that's it, we have a digital ocean cluster. And if we look at the, we have some parts running on default. Yes, we have one, which is the NGNX controller. And I had to cheat a little bit because the NGNX controller usually takes some time to get the load balancer IP. So to avoid that, I just got at least the service, the load balancer and the NGNX controller in place. So I don't have to waste time on that one. But so that's what we have. So you can see here that we have the service. We got this NGNX IP and let's see what it is and also we have there, that's it. Okay, so that's all we got. All right, so now the first step that we're going to be doing and I'm going to use here my guide is we're going to install the actual web service. That's the first thing that we're going to be doing. I have it right here in the, is a day I downloaded the repo, the microservice. So we just all have to do is just apply and then we're going to go to the release and we're going to deploy the manifest. They do have this to install in multiple places using Istio in different ways, but we're just going to use the plain one. We just wanted the services being deployed. So let's deploy that. What does the being deploy? I'm going to switch to my browser and I'm going to show you this is the store demo. So we don't have anything right now. So it's basically responding the NGNX. That's all we have. And because we don't have any ingress or anything set up we have the 404 in the front. So everything is expected. That's exactly what we want. So everything was created. Let's just check the parts and see if we got everything that we need in place. So yeah, some of them are still not running, but we don't mind because the one that we care about is front end. That's the one that we need to, the one that we're going to use. And in order to use it, we're going to create an ingress. So if you look at the ingress that we have right here, let me just make this bigger. Like is it placed straight forward ingress? Nothing really different here to what we already know, except for we just declaring here, well, not much different here. So let's just deploy this and we're going to do the apply and then we'll zero one ingress demo. So what's the expectation is that once this is done, we should be able to go here and see this store. Perfect, so that's what we have. That's the store right there. Of course, it's not secure. We don't have any type of security in place. Even if I want to force that to happen, it's going to tell me like now you cannot, but of course, coordinated by default, it's trying to put a certificate self-signed there, which is fake. I mean, of course, we are not going to do that. Just going to say no, thank you. We'll go back to the store in HTTP. So this is like us now doing the HTTP version that I will say on the first slide. We are navigating, not secure place. So if we add to car and we start doing or checking, check out whatever we want to do, I won't basically recommend that because then you're going to be basically navigating securely. Okay, so what's next step? Well, next step is this service is broken because one of the paths is not running, but that doesn't matter right now for us. Right, so the next step, well, let's create the first issuer. So what is an issuer right here? An issuer, as we were looking into the slide, we just describe what type of issuer we want. So it's good to mention that a lesson script has two type of issuers. One is the staging version, sorry, two versions of issuer, staging and production.  So everything else will give you and the reason why they do that is for you to test. If you're working on your own environment and developing something like that and you want to ensure that the whole process works, well, use this one staging because the production, it has some rate limitings and stuff like that that you want to make sure that you don't cross and that's the reason why staging is for. So what we declare here is just the server which is the API endpoint, the email, the name of the secret that we want to use for storing that specific information and then the resolver. Here, I'm just saying, hey, anything that is HTTP or one use the English class in your next and they just use that to relate the issuer with the Ingress and that's why I was saying that we might not create a certificate. I'm gonna show you a certificate but we're not gonna use the object certificate because they make it even easier for us to just relate them using the solvers. So let's do that, let's apply that one file, one, zero, two and then we do it that. So we're creating the staging. So let me show you how that works, how that looks like. You go to QCTL and then we say describe and we say issuer and then of course we give a, if I put the name, second my, here you go. Oh, all right, so first blopper, I knew it. We missed something guys. We didn't install SirManager. So how about we do that first? Okay, so let's go to the readme and we're just gonna copy this. I do have already helped install so I don't need to do the add in the repo and update in the repo. You might have to do it but in my case I don't have to. I'm just gonna install it using Helm. While it's doing that, a couple of things here which I have to make sure that I have them. Make sure that you have the install CRDs when using Helm, by default it's not enabled. So when you install with Helm everything installs and then I mean it starts breaking and something is because it doesn't have the CRDs available. So and I didn't notice that when I was doing it so just keep in mind that when you're installing using the manifest usually they do have two manifests. One for the CRD, one for the installation. So I just keep that in mind. I disabled Prometheus because I don't have Prometheus to install so I didn't want that to cause any potential issues. It doesn't but just in case and I just got the workbook time out for seconds which right now is not relevant. So that everything is installed right now. So if we go to good CTL get an S we get, we have the set manager if we want to make sure that everything in the set manager is working so we just see what is there, all the parts running so we should be good to go. So just out of curiosity, if you go to bot, two logs and you expect the set manager you will see that basically just getting all the, it's gonna start looking for certificates and see if he can do something about it. So let's just now apply the certificate that we have before. Okay, now it is created and we're about to see if we can get the issue. Okay, there's an issue right there. So let's describe it, issue and let's just copy your name and let's see what we see. Okay, cool. So it's a huge all bit right now because I'm going to screen but it's not that much to be honest. It basically just creating everything looks good. That's the spec. What's important here is the status, right? So if you can see it just created this claim, unique URI, sorry, this challenge, that's the challenge using the protocol at me and then everything basically went well because it just created my account and created my input and status type ready. So that tells me that this specific issuer is all good. We're good to go. Just keep in mind which I forgot to mention that you have to use your email so I'm sure that it's okay because that's what they use to create their accounts so that could create some unexpected torch shooting. But now, since we already have the less encrypted working and staging, can we start using it? Yes, let's use it now. So to use it, we're going to be looking into, let me just close these ones and we're going to see the version three. So in the version three of the ingress, all we're going to do now is adding one notation here, just this one right here, 97. And we need to declare that we want this to also respond by TLS. And the TLS, when it responds to TLS, then I'm going to allow them to respond using the same host that I declared right here. And also I wanted to use the secret that is going to be created here. So before we do that, let's check out if we have any secret. Let's get secret, all right? So we have some secret, but not the ones that we didn't need. There's other secrets here that we really don't need, but the one that we want is a store demo. Store demo is not there. So okay, let's move on then. And just to show you guys the certificate, there's no certificates, right? So we don't have any certificate. So how are we going to create now the certificate? It's going to be automatic. Let's do it now. Give CTL, apply minus F, and then we're going to do version three. Let's see what's going on now. Perfect. So now we have an ingress. So if we're going to create and get ingress, I miss it, I miss it, I miss it right here. We got an ingress right there. Call demo, right? So with this, with this now ingress call demo, we can go ahead and check the website now response using TLS. Let's just, boom. So now the certificate that we're getting is a second. Using the film, let me just refresh and see what certificate I'm getting. All right, there you go. All right, so it was just some type of cache in there. So okay, so yes, I'm still getting the connection being not recognized by the browser, like the browser does not recognize who is this a certificate authority, neither my authority. But if you can see here, the staging now is being the one responding. So it's telling me that, yes, let's increase giving me the certificate that I need. It just happened to be that that's not the one that you can see here, that they can see I trust it. And that's okay. I mean, we don't need to trust that one because it's just for testing, but it's working. So basically I'm getting a certificate. I'm getting my keys, my private key and my public key to do them, all these issuance and renewals and revoked. So let's see how that looks then. If we know that we got the issuance, let's see if we can get a certificate. So, voila, we get a certificate right there. So let's now describe what that certificate looks like. And it's called store demo. All right, awesome. So this is our certificate right now. And then what happened is that it created the whole certificate for me. I didn't have to do it, which is good. I basically saved one step. Now, what it's doing is, if you recall the slide where we were saying we need to assign what is going to be the DNS name and that kind of stuff. So it's right here. So it just already created the whole object for me, creating reference to the issuer and doing the whole process. And if you notice, it did the process of creating a certificate. So notice that that's why it's not instant. It's not like, oh, I created a certificate and right away I got my security website. No, it does the process. You say, okay, let me issue the certificate because it doesn't exist. Second, let me create a store that new private key, get the temporary secret in place, then create the new certificate request, which is another object that definitely I recommend for the rate reading on the website. But I'm getting that done. All that for me. And at the end, I get the certificate being successful issue. I got my new certificate, which that translate into a secret into this store demo allowed according to this. So if I get that and say, well, let's inspect what we are getting here. Let's try the secret store, look at this. So now this secret that right here is basically storing some metadata that that's the one I definitely use to keep in sync with the certificate request. But I get my two certificates. This is it. So now I basically in this, that's the way that the ingress is relating now to the certificate and the key. Because if we recall on the ingress, he says that he's expecting this secret name, but I never created that secret. But it's in there because the whole chain process done by Sir Manair is doing most of the work for me. I mean, that doesn't mean that I cannot do it manually. I can't just wait for you to do it manually. You can do your own specifications or that they're not stopping you doing that. But this is more than enough. That's not what I need. Okay, so now we got the same working. We're good. It's time to go to production. Let's move on and get into production. All right. So for that, all we have to do is just create a different issue. We need to now create the issuer for production. If you notice the difference, it's just that the other one says staging, this one does not have a staging. So that's the only thing. So let's apply that real quick because I mean, we already talked about that. So, and let's do this here for, right. Perfect. So we got the lesson clip plot created, this inspector real quick. So we know what we're talking and we're dealing here. And in the issuer, and let's just get the same as before. He's just doing the whole process and making sure that, you know, this is an act right here that if we just click here, you just open a different browser. Give me one second. It's supposed to be here. That's my act right there. So of course the method is not allowed because it's not doing, it's not supposed to be doing it like that. But that's the API responding. Okay. All right, so then we got here, the, it says it's being created account. It's been registered. This is good. It's ready. Let's do it. All right. So with that, the next step was to update the ingress, the ingress for my website. So let me show you how that looks like. Same thing. So the ingress, it doesn't change much except for this. The only thing that we're changing is, okay, I want you to now use the less encrypted production version, not the staging, but everything else is still the same. I'm not changing anything. I want the ingress to be the same. I want the same secret name. No problem. All right. I mean, you could change the secret name if you want to, but I mean, in this case it doesn't really matter. So let's now apply the file. And let's just give it a second. Now, while we're doing that, I want to show you something real quick. Set manager and see if we can see it loss. And let me show you how the set manager actually works. So there's a lot there. I'm sorry. It's hard to see and I know, but if you notice, he is doing the challenges. It's 301. So it's saying, hey, file one existing the SDP resolver for the store demo is related to the kind of service. And it's just getting all this information and relationship and then it's gonna be doing the self-check and that kind of stuff. So if we put it with the minus F, you might be able to see it in live. So, and that's what it's doing. So I want to show you the actual challenge. Please apply your change in the long and say, the challenge in work, not only insist. So it's doing all that process of doing the challenge, which is great. So that's perfect. So in the meantime, let's check the website real quick and see if we got already the good version. There you go. So, I mean, it was pretty fast that we couldn't catch the whole process, but if you can see here, everything starts here on the certificate request when he's starting getting and say, hey, I want a new certificate. And it's for this specific version of the API. It's creating all these challenges and doing the process right here. And then, you know, it was fulfilled. So it was done. But what's the result of this? Well, we now have a secure connection. If we're gonna look at the value certificate, it says that I'm using the ISRG as root X1. And then I can see here that my store demo is trusted by my browser. And voila, happy everyone. Now, our traffic between my browser and the server is entirely encrypted using the latest and greatest and the most advanced techniques that Less Encrypt offers. And I basically had to do barely anything. Everything was mostly done by the SEM manager and in this case, that talks to the Less Encrypt. And I think that this is it. This is where I wanted to show you how to secure your website using the Less Encrypt and SEM manager. So, happy to answer any questions. You can reach out to me on any social media as I was saying on the slide. Let me just go back to those slides. Share that. So, that's it. That's all I wanted to show you guys. And I guess I'm more than happy to answer any questions that you may have as any given point. Just reach out to me on any social media.  You can find me as adarformirrors. And well, thank you so much for the time. And enjoy.


Good afternoon, everyone. Thank you for being here early from lunch. And my name is Aprajita Garwal. I'm hoping the room would fill up, and we would have to do another round of introductions midway through this panel. So my name is Aprajita. I live in Mumbai in India. And I work with IntelliCap and run a forum called Sankalp Forum, which is a little like Socap, works in India, East Africa, and Southeast Asia. And our primary job is to help build social entrepreneurial ecosystems. So we work with a few hundred social enterprises over the years, over the last 12 years. We've worked with them in various capacities, supported them through hand-holding, capacity building, helping them become more investable, and showcasing them to investors. I have three of our social enterprises here, people who we've had the fortune to work with quite closely. So I'll go with a quick round of introductions and then ask them to talk about their companies. So I'll go with Rustam first, who's on the left-most side. Rustam is the founder and CEO of Boond. Boond is a company that is into distributing solar products, and they create rural entrepreneurs and work in a few difficult geographies within India. His company has impacted over 50,000 lives in India, and it's about a little over two years old. Then we have Manik, Manik Mehta. He is, OK, the names here might not necessarily all correspond to who we have on stage. But Manik is the co-founder of a company called Leaf Innovations, or Leaf Variables. And his company works on producing women's safety and family safety devices that can be worn as jewelry. He's just out of his graduate school two months ago. Yeah, approximately. And he also works in India. But his product is slated to go global. Then we have Lohan, and I'm, did I get that right? Yeah, yeah. OK. And he works in Rwanda. He runs Kigali Farms. He's the founder and CEO of Kigali Farms, which produces mushrooms. So I'm going to leave it at that and then ask them to talk a little bit more about the business. So, Rustam, shall we start with you? And if you can talk about your business. Mic is not working. Yeah, is my mic on? I hope so. Yeah, now it's better. So like I said, it's hard competing with the fly-by going by. So thanks for coming. And thanks to Prajita for the invitation. So this is actually a good picture, where we are. We do solar energy access in Indian villages, which basically means we set up solar power plants, which drive microgrids, and give electricity to people who live in the off-grid areas.  And they have no electricity, so they have a lot of problems in their productivity. So we've been doing this for four years now. And it's nice to be in San Francisco. And we are trying to raise another round of funds soon. So our website is boon.net, if anybody is more interested. So finally, thanks. Manik, what's the big idea that you're working on? So at LEAF Innovation, we thought we believe that everyone deserves to be safer. That's why we made the product safer. So right now, imagine a girl walking down the street and she feels danger. What she does, she just takes out the jewelry and double taps it. And it sends an alert to our server. From there, we forward to our friends, family, police, who can then life track you via the mobile application. So we are working on a women's safety solution as of right now. We want to move towards kids' safety and the family safety in its overall entirety. And specifically in the developing, in the developed worlds too. Because it's a case where everything is on the global scale. We have 6 billion people and we need at least protection for all of them. What's happening in Syria or Turkey, everyone needs protection and everyone needs safety. Our thought process is if we can enable communication, if everyone knows there's something wrong, that problem is going to be solved. If no one knows, there's no chance of that problem being solved. So what we are doing is enabling communication so that the safety and the security increases. Currently, we're in a fundraising round. We are looking to raise somewhere around 500,000. Why mushrooms? Mushrooms are both something very new and innovative, believe it or not, in Africa. But they're also something very old. Mushrooms have been cultivated in Asia for over 1,000 years. In Europe, in the US, it's a much younger crop, only about 150 years ago, did they start working on mushrooms in Europe about 100 years in the US. And in Africa, it's sort of brand new. It's just a cottage industry right now to the point that all of Africa, with the 1 billion people in there, produce less mushrooms. In fact, three times less mushrooms than all of Australia. And that strikes me as not right. They eat mushrooms. Mushrooms are eaten in the countryside. Mushrooms are imported in cans from China, oftentimes in the cities. And so there's something to be done there. Maybe should I say why mushrooms? Yeah, why mushrooms? You might say, well, fine, they don't do mushrooms. What's the big deal? They just don't need to do mushrooms. But in fact, because you probably think mushrooms is that little white thing I find in my salad, sometimes that's not really interesting. And you couldn't be more wrong, because mushrooms are actually extremely, extremely nutritious. I'm not talking for all mushrooms necessarily, but oyster mushrooms, which we're working with now, and button mushrooms, they're really rich in protein, all the essential amino acids, zinc, iron, and there. So from a nutrition point of view, which is what drove me to do this in Rwanda, they're a true powerhouse. But then there's a really good business fit, in fact, with the region. And when you think about Rwanda in particular, as you know, it's a small country, very densely populated, which really means that people have very little land to work with. Most farmers are stuck needing to make a living. They're farmers because nobody will give them a job. So then you have to make your own food and that makes you a farmer all of a sudden. But you're really stuck having to make a living for your whole life from very little land, which on top of that over there happens to be pretty poor soil. And mushrooms sort of sold for that because one of their key characteristics is very, very high yields. For on a stage like this, on a stage like this, a little less than a stage like this, a farmer could make a dollar a day. So a stage like this is about 1% of the landholding of the famous one acre farmer, right? So 1% of the land could be a mini cash crop. So that was a big idea for me. They don't need good soil. You can grow mushrooms right in this room. In fact, be a very nice room for growing a lot of mushrooms. They don't need good soil. And the reason is that in fact you feed mushrooms. Mushrooms, they're not plants. That's the big thing, the one-on-one thing to remember mushrooms, they're not plants. So they don't photosynthetize. They do not get their energy from the sun. In fact, like you just an hour ago and all of us, they get their energy from digesting organic matter. So when you're farming mushrooms, what you're doing, you're basically making their food. And their food happens to be organic waste. And even in poor countries, there is a lot of waste to go around. And if you look at the wheat field, half the biomass of the wheat field is a straw. We don't have straw into a nutritious food. And another really interesting factor is that it turns out mushroom growing is really well suited for women. Because mushrooms need, and it's not a heavily physically demanding job, but they need attention to detail and tender loving care, I like to call it. Women tend to be better at that than us men, which is another really interesting dimension. So Loha, you were running a successful micro brewery before this, and you've had a fairly successful career behind you, and you had a choice to literally put a pin on any place in the globe and do your next big thing. Why Kigali in Rwanda? And what took you there? And what are you trying to achieve in terms of your vision there? You're right, I was in the beer business before, which I can tell you, if you want to make friends, it's a great industry to go into. I never had as many friends. It was a lot of fun, but at some point I figured the world probably has enough beer. Would it be something more useful to do? And it was a long thought process, but I read that book by Jacqueline Novograz, some of you maybe read the Blue Sweater, and it was a big eye-opener for me, because if you read the book, she got her big moment, her aha moment in Rwanda. And I had, as a young man, gone through the region, maybe 10, 20 years before that. And I saw the same poverty she did, but it did nothing for me. At the time, I don't think I had a lot of empathy. I'm like, OK, well, they're poor. That's just the way it is. And reading the book, it just was an eye-opener for me. I'm like, oh, there's something wrong. And now I've become a good businessman, and maybe I can put these business skills to good use. And I was eager to do more business, but have a positive impact, and that's why I became Rwanda. And I'm glad you brought the beer, because very briefly, here's one mushroom. Here's one fungus that's widely successful around the world. It's yeast. Yeast that's used to make beer is actually a fungus. I don't know if you knew that, but it's important. I went from liquid fermentation to solid fermentation. It was not that much of a life-changing. Great. Manik, your company is yet to go to market, right? And you have a few other co-founders who work with you. What's the big idea you're trying to drive? And as you try to take it to market, where are some of the challenges that you're seeing right now? I mean, obviously they may change when we meet next year at Socap, but right now? So there are quite a few things. I'm like five co-founders. We started together. So we were reading out this book. It's called Abundance by Peter S. Demandus. A lot of you guys might have heard about it and read about it. And it said, if you have to take a society from tier zero to tier one, what all things you have to do? And I was reading it back in India, and I was realizing this fact, me and my co-founders, that safety is such a big fact. And without safety or freedom of speech and movement, nothing else can change. And we were all from engineering graduates. I'm from Delhi College of Engineering. My co-founders from IIT, Delhi. Like we're the top most college from India. And we thought if we guys can't solve this problem, no one else across the globe can. So we thought of working towards it. That's how it formed a year back. And then within six months, now we are all engineering graduates. That's the best thing. So we had everything done in-house, hardware done in-house, software done in-house. Everything can be managed by us, and the quality can be controlled by us. So the quality control is what we are actually good at. Being back in India and everyone thinking that hardware is only made in US or in European nations. But being able to control what we are working on and how we are working is the major thing. And coming to your second question, that's about going towards market. So we realize this fact that this is not a really Indian issue. So we have a lot of pre-orders coming in from Europe itself. And there's this whole need in Africa, Southeast Asia. And in Socap, I realize in US, all the campuses and everywhere, it is a big need. So how do we cater to it? And that's the reason why I'm raising funds so that I can build the infrastructure around it so that when I am ready, I can start a huge launch so that I can cover global base at one point of time. So you travel from US to India or US to South Africa, you don't have to keep on changing your cell phone or keep on changing your things. It's the same hardware working everywhere. Great. But it's a difficult market to start up. And India is not really highest in terms of doing business. I'd love to know what were the real challenges in setting up? Setting up a company, starting to get it off-ground, were there any specific unique challenges that you saw? One of the challenges which I personally faced was the fact that to getting things done in India is still a huge problem. The bureaucracy is still very slow. It takes time to get things done. And also the funding part. When I came towards Silicon Valley and I visited all the campuses and everyone who's working out here, it's easier to get the money in flow to work on things which you want to. Back at home, it's still a problem. You might have a brilliant idea. So what we did was we became innovative. We started going towards all business plan competitions around. We won 10 or 12 of them across the globe. And that's how we started out because we didn't have money to do things. And even right now, money is a huge problem. Rustam, would you want to talk a bit about the big idea that you're driving and the kind of impact you hope to drive with it? Sure. So we are sitting in a room with probably 16 lights staring at us. And we have barely 50 people. So that's really funny and ironic because about a week ago, I was in a village which has about 16,000 people, about 800 households. And they probably used less lights than we have today. So that's the irony, which is kind of strange and which hits us on the face. And once you've seen the dark side, it's fairly easy to comprehend the problem. I'm a graduate of the University of California in Irvine, which is in Orange County. So it's down south. And after working in Deloitte for a fair bit of time, and I lived up on Clay and Franklin just 10 blocks down the street, you kind of desensitize yourself to actually global problems. So like Laurent or Manik here, I went back to India, which is my home country. Spent some time in the village. And it was appalled. I mean, in the morning you wake up, you have sanitation issues. You don't know where to go or how to do what. In the afternoon, you need water. And there's somebody who will have to go all across to collect water to get it for you. In the evening, by 5, you basically wind up whatever you're doing because you're in the dark. And the big problem is it's not a few handful of people. It's about 200 million people in India alone, maybe about 350 in South Asia. So that's incredible, huge. But what's more interesting is it's not just a problem. It's an opportunity. Because energy is the foundation for any kind of economic growth. It's the platform. So I look at it as opportunity. I look at it as the fact that we have some skills that we can push there. And it's a market waiting to open up. It's a market which is easier to capture the value in. So that was the logic behind starting. We spent a lot of time fighting the government. Now we actually joined the government and worked together with them. We spent a lot of time trying to raise funds. We raised around. And a fair bit of time actually understanding the need. We just spent our life there because that's, I think, the biggest challenge with most entrepreneurs, especially the ones who are frequenting SOCAP, need to understand is this is all great.  And that was the biggest aha moment for us is the whole demand process driving the design. And then the demand process also structuring the business model around what we do. So I guess that would be my answer. And what kind of capital are you looking to raise?  What kind of capital? Like one which is green in color. No, but yeah, we're trying to raise up. So this would be sort of our series A, which is we raised a seed and a little bigger, about half a million dollars last year. But we're trying to raise about three to $4 million, which sets us, which gives us the power to set up microgrids in at least 350 villages across a couple of states. It also lets us enter into new territories and build on the technical expertise. Because the other big problem with energy access for people who know energy access is there's not a substantial amount of technical competence on the ground to actually deliver these solutions. So while you might make a weird shaped light sitting in a lab over here, it's hard when it breaks down to get it fixed. And that inherently kills the value of the whole product. So a lot of money will actually go into creating that ecosystem, because our approach is basically to build the whole ecosystem around servicing, around affordability, around even getting design feedback. So that's what we'll do. Right, Manik, for you, what kind of capital you talked about it briefly, but since you had to go to market. And I think one specific part that I wanted to understand from you when you look at startups and startups like yours, you know, what are the pitfalls that entrepreneurs should be aware of when they are starting to raise capital? So there are two kind of things, you know, you can raise too early, you can raise too late. So that's what happened before we even actually formed the company we raised around. It was a competition, but we raised around. So that was a little too early for us in our stage. And right now, when we are looking to raise, we are looking in the middle of a, like what he said, right? The middle of a series A and a seed, because we have pre-orders to cater to, and we have a global market and a global distributors coming towards us. So how do we cater to that? So it has to be a middle of things, and if it's not done right, then you face problems like what I'm doing right now. Right. Running around here and there. Lahore, for you, you're in the middle of a capital raise yourself. Right. Where do you see the challenges? How difficult or easy has it been? It's been difficult. I have to say it's been a very difficult process. That's cost me about 15 months right now. And I was probably naive in the process at the beginning. I used to be an investment banker. We hit back when at the beginning of my career. And so, you know, I'm good at making forecasts and stuff, and it looked plain vanilla. What we're, just a little word though before I explain. What I talked about earlier was oyster mushrooms. And oyster mushrooms are really amazing. They're great social vehicles, again, because growers can grow them on very little space and so on. The market for it is not ginormous. So we need to give ourselves a little bit of time and we're racking our brain and finding solutions for that. We need some time for that. On the other hand, we noticed that what the customers, but a lot of the more upper end customers wanted was the button mushroom, you know, the traditional wide mushroom that we've all been eating. Now, and that one there's demand for, you know, that's what we would substitute for imports and so on. But that one requires a little bit more capital. So once we decided to go into button mushrooms, so I'm seeing oyster mushrooms and button mushrooms as the two wheels of a bicycle right now. We've got the oyster mushrooms are incredibly social and that's really the mission of the company.  That would defeat the purpose a little bit. But the oyster mushrooms are there because, you know, that's a lifeblood of company. That's what I really want to be doing. At the same time, you have to recognize you need cash flow and there's demand for button mushrooms and the two mushrooms do share things, you know, they're not the same things that they're like, I don't know, wheat and maize, you know, they have a lot in common, but they're different. So, but for the button mushroom, however, we do need capital and that I thought was going to be really easy because you can show very nice cash flow, very easy to reimburse the loan. So, I just went to commercial banks. I don't know if it was a mistake or what, but it's been a year and a half. And, you know, I told you at the very beginning that what we're doing is both very old but very new. And I'm telling you to commercial bankers sitting in Africa is very new. It's much too new. And innovation is nice until you're asking someone to fund it because then it becomes all of a sudden not nice at all. And it's understandable. They don't have a precedent and so on. So, maybe I became too engrossed in my idea of believing in it and I couldn't quite convince the bankers. It didn't help that a lot of those, you know, the credit analysts in the inside somewhere in the bank building have probably never eaten a button mushroom in their life. For them, they were asking to analyze the most exotic product that they've ever seen. So, it took a long time. Then I went to talk to some social investors and they're funny because they have tunnel vision. They all have different agendas and you don't always know what it is and it's not like their website is going to explain it honestly. But they're looking at my bicycle thing and some people focused on the oysters and said, that's really beautifully social but you're never gonna make money with that. And then other guys look at the button mushrooms and say, that's really great business but that's not so social. And then they're not really putting two and two together the way I'd like to do. So, it's been a hard process. Right now we've found someone who actually gets it. I think the expression is grog-sits. Really gets what we do. So, I think we're at the end of the tunnel. Though I've said that before in the tunnel, we're still there. So, I think it's all coming together but I had to then understand the needs of the people across the table from me. I realized that we're looking for about $600,000 but given that I realized it was going to be impossible in the channels I was looking for, I really looked at the business but I'm like, okay, how can I reduce the ask so that at least we can get going, reduce those button mushrooms, show the banker what it is, how it works, that it sells and so on and then go look for the second phase. So, we cut the investment in two phases and now we're only looking for about $300,000 and some of it we're likely to get as a grant from someone and the rest then we can finally get us a loan. Right.  How do you maybe, Ruslan, if we can start with you and you can tell about how do you balance that bit? You're always starting with me with the hard question. Right. But so, I mean, we have a turnover about a little more than a million dollars right now and we do make profits and I think that's very important. I think if you call yourself a business, you have to generate revenue because you've got to pay salaries, you've got to grow and you've got to do all that. So I think that's primary, especially in the area of energy access where we work in that we need to make money. But we make impact and we've clearly defined it in three ways and that's defined through our team and also to the investors. Number one is the communities we work with and that's very important. I could be selling solar in San Francisco and making a lot more money, but I choose to sell it in off-grid areas in India which makes me social and not a commercial. Number two, the kind of products we sell in. I could sell cigarettes in the village and make a ton of money, believe me, or maybe beer and get it from my friend here. But I don't choose to do that. I choose to actually sell solar power plants. So that makes us pretty much social. And the third is the vision of the core team is aligned because I was also an investment banker. Seems like the worst job to do before you start a company. So I was working out of Singapore and selling fixed income bonds. But the fact is the core team's complete vision and the inclination and the opportunity cost that they left behind to do this is the third factor which makes us social. And I think we've encapsulated the definition in just these three primary terms. Who do you sell to? What do you sell? And what's the intention of the core team? What's the sacrifice they're making? And that makes it very simple for us. We don't go around saying that we're gonna cross subsidize or we're going to somehow star or sell my first bond, child or whatever. But we make it very clear that these are the metrics and if investors like these metrics, great. If they don't like it, then you don't like it. I mean, it's not everything to be like. And how crucial is creating impact for women? I mean, is there a specific focus around that in your business given that you work in villages? I mean, it's like Laura mentioned. Women run enterprises or women led managed enterprises are more sustainable and especially in developing countries because women tend to be more loyal to what they are doing. They tend to actually do it much better. So we do have a fair number of women and we regularly have trainings for setting up women entrepreneurs because what we found is if the entrepreneur is a woman, she tends to be more on the educational front. So she'll educate the person about solar energy, about the need for clean energy, about the need for access and be a little softer in the commercial front which is actually great for the penetration that we do. And of course, I mean, it's also gives us the softer edge because it's a very commercial market. So I think it's fairly important for us. Manik, I know women's safety is built into your business itself but you're also looking at the family safety market and how do you look at creating impact? What are the specific metrics if you guys are already thinking through those in terms of women impact and the kind of impact that you hope to generate? So as he said, women impact, so I'm just taking a line from Rustam. Women impact is very much important and how you do that because women is the one who's running the family out there. So that's the reason why we went for women safety first and rather than kids are in elder safety. Those products are already selling out there and they're good. So why women's safety? If you can secure the core of the family, that's how you move forward. You get those few things secure and then you start moving forward because it's more about giving freedom and empowering them so that they can travel at night, they can travel when they want to and we feel safe, you know. Feel that people will know if there is a problem out there. Feel that there is a way out to go at night and just be there, work at a nighttime in a BPO or do anything of that sort. So that's what we realized at that point of time and moving towards the family safety, you know.  People, kids get kidnapped every eight minutes. That's a United Nations statistics across the globe. A woman has had 12.5 seconds. So that's huge. We have to sort those issues out before we even think of moving towards solar cities. They are brilliant. The idea is nice. Everything's amazing. But the basic question is if we can't provide freedom, where else would we go forward to? Freedom is very basic need. At least I believe so and I really love what the solace and the echelons of the world are doing because that's how you move forward. But it's a freedom. Let's make them safe first. Let's make them safe and then think of all the problems. Lohan, what about you? You employ women in the value chain, right? They are the ones who are usually the mushroom farmers. Yeah. Does it go beyond that? Does it go beyond, you know, just providing livelihood? Maybe you can elaborate on that. Well, so, you know, it wasn't designed as a women-centric business per se, but what we found, we didn't particularly try to encourage women more than men to get into the business, but what we found is that a great majority, two times as many women are mushroom growers. So two-thirds of our growers or employees too happen to be women and so we looked into it a little bit and yeah, it seems to be better suited for them. It's what I said at the beginning, the tenderloving care, the attention to detail. It does matter. Mushrooms have really high yields. They grow over, they grow really fast. You know, you're in the mushroom house, but things can go wrong really fast too. So you could get an infection of parasitic fungus or bacterial infection or something. What's really important in those cases is to detect it quickly and weed out the bad ones. If you catch the problem early, you're gonna be all right.  And that's where probably women tend to beat men out a little bit. There's another interesting dimension, but I can't really make a claim or I don't have hard data about it, but we have a couple of customers, ladies who come and buy mushroom powder. We also dry mushrooms and sometimes mill them into powder. And so we had this customer who repetitively came to us to buy a half a kilo, a kilo of powder, which is quite a bit and it's a bit expensive. So we asked her why, and she used it for her kids, for her kids and she put it in a porridge and things like that. And then she was adamant that she had a baby and she was breastfeeding. And she was adamant that it improved her milk production. And so the mushrooms might be a galacta-gogue. I looked up the terms, it's a galacta-gogue. I googled it, I never found any reference to mushrooms being galacta-gogues, but maybe because nobody ever looked into it. So we're going to look into that. That would be an interesting dimension, really. The number of children they have in Rwanda, that would be a very useful product.  Is there a conscious attempt to do that? Yeah, yeah, totally. At the moment, we're talking about exporting mushrooms across the region, but if this takes off, yes, it should be regional. There's no particularly good reason why mushrooms would travel from Rwanda to Nairobi to Kampala. And once it gets going, there's other locales around the region where either competitors will set up shop or we'll do it ourselves, depending. But yeah, at the same time, I think there's a logic to concentration. There's a really interesting stat. So you've all seen button mushrooms, and they're produced here in Watsonville, California. But the biggest state, the biggest mushroom producing state in the country here in the US is Pennsylvania. And there's an interesting stat, it's like 47%. So half of all the mushrooms grown in the United States come out of just one county in Pennsylvania. And so there's enough, seeing that in other places too, where it tends to be a concentration, I think it goes back to a fact that really excites me actually, is that the reason there's a mushroom industry there is because some guy decided to start it, some entrepreneur, some they decided to do it there. It could have been somewhere else and then that other community would have become rich. But no, it was there. In case of Pennsylvania, there was, I think it was Amish countries, there was a lot of horsemen who were around and some Italian immigrant families, they remember doing mushrooms back home and they put two and two together and boom, now it's a $365 million a year business in that county alone. And I've seen the same thing in Spain and in Holland, you have a lot of concentration. So what I'm hoping is, when I started this, I was looking for something where Rwanda might have a competitive advantage. And now I'm envisioning like the north of Rwanda becoming like the center of excellence of mushroom growing for the region, but with a hub and spoke system where there would be growers everywhere. That would be logical. Fantastic question. Manik, for you, do you see once you get to market and I know the product is not necessarily for India, where do you see sort of your footprint in the world? How global is this going to be your product? So we have already gone global to be honest. We already have a distributor from Europe who has have a good letter of intent of a sizable order, to be honest. And if we have to look for global in the security domain itself, everything that's internet of things and variables that are coming up is going to be linked to the internet. And the security of that is also going to be a huge challenge. So you have to have privacy security and all those things in place. And that's where our long-term vision lies. We have to secure you guys from everything out there. And that can only be done if you have everything out in open and if everyone knows there's a problem, that is the whole point. Everyone gets to know there's a problem, the problem's going to get solved. No one knows about the problem, the problem always remains. Pristam, for you, I know India is a challenging country itself in terms of building a company like yours. There's tons of competition. Where is the uniqueness and where do you see the next phase of growth happening or scale happening for you? That's a good question. I mean, it's a perception that there's a lot of competition. But the first generation was just products. So there's a lot of products, of course. There's a lot of solar lamps made in China. There's actually a whole city which makes it and exports it all over. But our differentiating approach is we don't go as a product company, we go as an ecosystem company. So we'll go to the village, we'll understand, we'll have people who are trained to understand the demand, people who are trained to assess the technical requirement of the village and then set up the right technology for them. Of course, based on solar power. So this could be a microgrid if it's a congested community who can't individually afford a solar panel. It could be individual systems which are financed by a bank. It could also be a water pump which has water which is on a pay-as-you-go meter. So individually. So that fairly differentiates us. And on your topic of how do we grow and how do you replicate, I think the concept of every social entrepreneur is you're more passionate about the problem you're solving and the idea you have. Rather than the number of branches you'll set up and I don't know if I'm speaking alone or the number of thousands of people who work for you. So that's what's exciting for us is people copying the model or wanting to replicate it and take it to do it wherever they are and that's great for us. I mean, we are in it because we philosophically believe that energy is the fundamental, one of the most fundamental problems that people are suffering from and it's a huge paradigm generational problem. My dad studied under Streetlight and he was one of the biggest bureaucrats of the country because he slogged his life through studying outside Streetlight, studying in neighbor's houses because he didn't have electricity and thanks to him I'm here. Similarly, there's a generation of people who are in millions of households trying to just come up to a certain level and who need that first park of light, who need the basic energy services provided. So I think the goal for us is take it, take the model, if it works for you, go implement it in whichever country you are. I'm more than happy and that would be the real successful stuff for us. Great. I think we're going to, we have about 17 minutes remaining, we're going to stop here and see if there are questions from the audience. I don't know if there's anybody with the mic. Okay, fine. We have energy issues here too, you know? Yes. Hi, this question is for Monik. How do you make sure that you're addressing the root of the problem, so that is the perpetrators themselves to get that to lessen rather than putting the onus on the people that are victim of the perpetration? So what we're trying to do is build a community out there. You know, it's a more of a community effect and it's a more of a models thing to, you know, you just can't go and put the perpetrators in jail, keep on piling them up in jails and hospitals. First, you have to root it out from the community. So you get everyone involved in it. You get everyone to be their protector for that person. You get everyone out there. If I'm sitting here, if something's happening out there, I go out and help that person. That's the first part. As soon as we do that, then we start working towards the society. I hope I answer your question. So I'll interject there. One of the things that he's also trying to do that the company's also trying to do is, is create a reporting mechanism with, with police and they're piloting that with, with the police in a particular city and seeing how they can actually have direct, you know, signals sort of go out to a police station and that could help with a rapid response time. But I think it's still very early. Yeah, it's still being done back in New Delhi, but that's the plan of action.  So that's the whole thing. If everyone knows, that will be solved. And if everyone knows, that problem won't arise again. Any other questions up there? Great. So one last round of questions for all of you. Where do you see, you know, your company in about 10 years from now? And Dursam, if you don't want to go first, maybe. Yeah, no, no, no, that's fine, that's fine. So the name of the company is Boond. And Boond in Hindi or Sanskrit means a drop of water. And conceptually, that is what we want to be. We want to be the drop of water which goes and spreads across and there's multiple droplets all over. We want to mainstream the fact that energy access is important. We want to make a strong statement and we want in 10 years time that gets into the political establishments as well as the funding scene that giving people access to energy is a fundamental solution that has to be worked on even before you industrialize your country and wanted to become a superpower. Even, I mean, there are more, I mean, this is appalling statistics, but there are more gun manufacturers than there are more people who make solar electronics. And that is a shame. So hopefully in 10 years we can move and change that. And so we are just a drop of water, just to signify that this can, the first drop of water to quench its thirst. And in 10 years, hopefully we won't be required. I mean, we shouldn't be required. I mean, we should be moving on to other bigger problems. We should be working on something that's in the Abraham Maslow's pyramid of needs slightly above that. If we are still sitting and electrifying villages with small solar systems after 10 years in India, God help us. The Indian population is 67% under 30 years old. These people need solutions today, right now, right at this moment. If they don't, they'll find some other solution which probably will not be good for the whole world. So in 10 years time, we want to be a company which obviously is established in solar and doing whatever we are in a much larger scale. But we want the philosophy to penetrate the decision makers, the policies and the investors. We want them to really understand that, you know, this is not just something you do to cleanse your guilt and feel happy about and report it in a nice document somewhere. It's something that's fundamentally essential for even your next generation. Mani, 10 years. 10 years from now, no one will have to talk about security and safety in the way which I am talking about. 10 years from now, he'll be my age, first of all. That's awesome that he's 22 right now. Incredible. So from, as Rustam just mentioned, you know, 10 years from now, we shouldn't be solving these problems. 10 years from now, we should be solving the next level of problems. There are huge lot of problems arising. There's huge in medical space, healthcare, everything else. But let's just kill this problem in the next three years and make the world safe and then move forward. That's what we would be. We would be an innovation company. That's the reason why we kept the name Leaf Innovation so that we can be as simple as possible and as innovative as possible. So we take the big problems, which are huge, solve them and move forward. Wow. I don't think we're gonna, I didn't set out to solve malnutrition. I'm just hoping to make a small dent.  I'm watching TV and maybe there's a documentary about the mushroom industry in East Africa and you see like, you know, tens of thousands of people making a decent income from mushrooms. And it's not completely a pipe dream. In China right now, there's a million small farmers that make money from, so out growers, make money from growing mushrooms. It's a big number and it's actually a relatively recent number. If you look at the stats that's come up in the last 20 years, there's actually, you know, there's a lot of food safety concerns with China right now. So a lot of the mushrooms produced in China are for export. But there's consumers around the world now who are like, you know, a little skittish about food safety in China and they're willing to pay a premium to get non-China products. And so I think for Africa, there's a market share to grab there. So I'm hoping that that happens. That would already make me very happy. But another thing that I haven't talked about yet today because I didn't want to confuse people, but there's a lot more to mushrooms than the edible mushrooms that we know. In fact, fungi, there's an immense diversity of fungi that are everywhere in the world.  But fungi, they're all around us and some of them have really interesting characteristics that have absolutely nothing to do with eating. I'm thinking of one in particular thing called trichoderma, which tend to associate with plant roots and essentially acts as a natural fertilizer. It's not a fertilizer per se, but it helps the plants fight off other fungal diseases or bacterial diseases. It helps the plants that have been colonized by trichoderma have a much healthier, much deeper root system. The basic technology to make trichoderma is so easy because right now trichoderma is a pest for me. Trichoderma is a very aggressive fungus and it's attacking oyster mushrooms. So I'm trying to get rid of it. I once met a guy at a conference who said, hey, I'm in mushrooms too. I said, what do you do? He goes, trichoderma.  Trichoderma, I'm trying to get rid of him. Then he explained it to me that in fact, it's like used in organic agriculture to, you know, if you don't want to use chemical fertilizers and so on. And remember I told you earlier that there's a few million people in Rwanda that have to make a living from their one acre or two acres of land.  I mean, when I realized that, I was like, I had this second aha moment and I still think the edible mushrooms that we've been talking about and that's the business right now are really important. But we can go a little step further and start working with autofungi, which are, you know, it's more subtle. But there we can really impact millions of farmers because in Rwanda to put it very simply, and I'm thinking that's probably true of other African countries, there's just not enough money to go around to buy the fertilizers that are needed and you know, anything that farmers need. So those are fertilizers, call them that, to simplify. That could be produced in country. You don't need foreign exchange to buy them anymore and that would be cheaper and could be distributed through the agro systems, agro dealer systems throughout the country and impact the lives improves the productivity of the one asset they do happen to have is that little patch of land. So that's where I'd like to go. Yeah, no great inspiring stories and I think you all have a lot to achieve, a lot to do, I think great vision out there. Privileged to share the stage with all of you and I think we'll bring it to a close in case there are any other questions, please catch these guys offstage. And thank you again, thank you Mr. Manek Long. Thank you, thank you so much.


What is going on guys welcome back to channel critical overload here sick on top We're gonna be talking about screen six in this video here again today now screen six we know is gonna be starting its production out in Montreal in a couple of weeks and We are still awaiting to know who the new cast members of we we already got of a crop of survivors joining us for this new Adventure with Ghostface as they leave Woodsboro the survivors included Going out into their next chapter in life but I wanted to talk about Sam Carpenter in this video mostly and Kind of relating to Hank Loomis and whether or not we will see Hank Loomis in this movie and How Hank Loomis could factor into a screen six now shout out to one of my good friends cast Clark They recently did an article talking about Hank Loomis and his poor and his role in this franchise so The thing that intrigued me was that Hank Loomis could of course be someone brought in to give more insight for Sam Who might be a little bit curious to address someone tied to the Loomis lineage someone alive that we know of at this stage I guess it's still Hank Loomis Because we don't know what what she's gonna be dealing with in screen six years yet We are expecting that Tara and her friends will be dealing with college and all the college struggles that go under that But where has Sam gone as far as her life? What is she up to? What is she dealing with dramatically and trying to cope with has she maybe Developed a bond with Sydney that's led to her wanting to reach out to Hank Loomis And Hank Loomis could be someone who she shares scenes with where they talk about Marine Prescott And go into some more details about Maureen because I know a lot of people would want to have Maureen brought up in some capacity I'm not saying this could be a sequence in which you make this all about Maureen once again But maybe there's just something that Sam herself is interested in knowing Since a lot of what what has transpired and what has happened with Sydney Prescott Sydney Prescott's mom and now of course Sam dealing with the sins of her own father They can all be led back to certain actions that Hank Loomis himself has made so whether or not we see him in the movie I don't know. I do think it would be great to see him once again He hasn't appeared on screen in person since the original film He had a he had a I guess a brief appearance in via video in screen 3 when Roman was going through his whole spiel And why he was doing what he was doing But maybe we learn in scream 6 that Sam Carver to herself has started digging into a little bit more of who she is Where she comes from and just wants answers trying to understand Why certain people in her life made the decisions that they decided to make which ultimately led to what Billy did Ultimately led to or contributed to it in some capacity because all these people who have done these things They're still responsible themselves for what they did not to say it undermines the things that have also happened to them They brought them to these heinous acts that they did But still they're the ones who decided to follow up on all that pent up frustration by going on murderous rampages And maybe Sam herself is trying to do some soul searching so that she doesn't end up like her father Maybe that's still a fear that she has that she's gonna end up just like Billy So trying to understand what Hank Loomis was thinking when he got involved with Marine maybe Hank will dish out more details about Marine and Maybe this ties into maybe a little bit of the friction going on in the household between Sam Carver inter and Sam Carver inter and Christina Carver inter because with Sam and Christina Well with Christina, I'll just say we are already expecting them to Have Christina Carver inter in the film so if she actually is in the movie and Going off of that audition tape where it sounds like somebody is yelling for Carla who going off of what I think from that ocean audition tape I think Carla is a cold for Sam Maybe Christina and Sam have some friction because of her reaching out to the Loomis family in this case It would be Hank Loomis. So maybe that's why we hear them yelling her name. Maybe there's some friction in the household Maybe there's a divide going on between herself and her mother But Tara of course is still sticking right there with Sam. They all live together They've gone they've gone closer tears away at college But Sam herself is still dealing with where she comes from and she's trying to digest Who she is and learn some new details about that through reaching out to Hank Loomis not saying it's gonna happen I just think that if Hank Loomis were to appear it'd be a great thing to see Maybe he can shed some small bit of more details about Marine Prescott in her life And how they ended up beginning their affair and what transpired that led him to get involved in set affair That could just be eye-opening for Sam to kind of understand where he was when he did that and just I guess Sam herself Just looking for ways to kind of cope with where she comes from even further But jumping into something else now this isn't necessarily confirmed But potentially from what I saw the budget according to this article that likes to cover Montreal based projects I think it's what's titled Journal de Montreal and I'll leave a link to it in the description They went over the cast of the scream six project coming out and then it got into the fact that this movie looks like It's gonna have a budget of thirty five million dollars thirty five million dollars is I think five mil no actually that's no Because I think screen four was actually closer to a hundred million I think this would make it the second highest in terms of the budget correct me if I'm wrong in the comment section Please but thirty five million dollars. I think is more than enough for a screen movie I think this also lends to maybe a hint maybe a sign of who they have Gathered up in the cast or maybe just having certain actors involved a little bit more heavily and also maybe speaks to if true Things they want to accomplish this time around While they're shooting still potentially of course at McGill University a lot of the different elaborate things You can have unfold maybe you'll get those chase sequences that you wanted to have and maybe these chase sequences will be very suspenseful and Just a lot of I guess them trying to go outside of that box I I know a lot of people feel they were trapped in when it relates to the production of screen five screen five feeling very Contained so with screen six and them having a bigger budget Obviously, this would be a sign of confidence from the success that came from screen five with screen six if it has a budget of 35 million dollars That would be more than enough for a for a slasher movie Some might think it's a little bit too much but given the things that they might want to accomplish We'll probably see why they had that budget and of course until we know who these new survivors are This probably somebody in the cast that is needing to have their You know their checks signed with a few extra zeros or somebody else who's returning that needs a few extra zeros Because you're using them a lot more this time around but we'll see what happens I know people are still honing in on whether or not Neff Campbell will be back if she will return I at this point if it comes that announcement is gonna be probably days prior to filming starting I still think it'll come with the reveal of the rest of the new cast They might actually pull a plot twist on you and save her alone for her own special announcement After revealing the new cast members first just to even get you more intrigued as to whether or not she'll be back I still think it'll be best if they just save her as a surprise Honestly at this point save her as a surprise so that everybody be floored in the theater But let me know just think about all this down in the comment section below if you haven't already of course make sure you subscribe Turn on postification and I miss a video in the description links my social media accounts on Facebook Twitter and Instagram You can message me there of course There isn't any movies news or views let me cover in the future and with all that in mind guys I will see you in the next video


Spider-Man is one of the most dangerous street-tier Marvel characters of all time.  There's no doubt that this man is a bastion of brutality. From flinging massive chunks of concrete to slamming people into the ground on their necks, Spider-Man is everything that everyone says he is. This man is a menace! And today we're gonna take a look through Spidey's old playbook of pounding, just to fully understand the extent of this man's brutality and display some of his most brutal moves to a general audience who thinks this man is a child-friendly character. Friendly neighborhood Spider-Man? No.  So off the bat, the elephant in the room is PS4 Spider-Man. This man is definitely a violent psychopath. This video was also written by J. Jonah Jameson, if you couldn't tell. This particular Spider-Man fighting style mostly consists of Spider-Man either throwing himself at his enemies at a lethal speed or throwing his enemies up into the air and then slamming them down with the most brutal force you could ever imagine. Take a shot every time I say brutal in this video. No, I already said that joke in the last video. I can't say it again. There's no doubt about it. This is definitely lethal. This man forged the term superhero brutality right next to Arkham Batman himself. My organs hurt.  And you know, that's just what I'll tell myself so that I can sleep better at night. And I refuse to watch the game theory video about it. And it doesn't get any better after this either if you keep looking into it. If you actually play the canonical story of the game and abide by its canon rules, you realize that Spider-Man is wearing a suit that has armor plating on his arms and feet.  He upgraded his suit because maybe he didn't think he was being brutal enough.  Like come on, Spider-Man, you could be out here fighting for easier access to jobs but instead you're out here being an instrument of the corrupt law.   I mean if you really think about it, Spider-Man is kind of just a cop in tights.  He's sad. All Spider-Man are bad. So slamming people on their necks onto the concrete is already pretty bad, right? Like there's no way that if Spidey decided to hit you with another move it's gotta be something less lethal than that, right? This Spider-Man flings concrete chunks at people. Big ones.  You know, these games would not make Spider-Man look like such a mass murderer if they just made it so that you can't do these things to normal people. It's not really helping Spider-Man's reputation.  It's not helping.  There's a pothole in the road now. And it's not like this version of Peter learned his lesson after the first time he started throwing concrete chunks at people from the ground. Here he is doing it again in the second game he shows up in. Like, bro, come on. These poor security guards show up at Alchemax to work their 9-5 and provide for their families. They don't know what the fuck's going on in this company. They don't care. The security guards.  They'll never even get to see the 5 at the end of the 9-5. It's like he's fully maxed out a sock with rocks in it.  So throwing concrete at people is bad. There has to be an end. This has to be it. There can't be any more. It can't get any worse than this. Unless you decided to surf on the unconscious bodies of the people you've already knocked out mid-air.  Spider-Man, Web of Shadows is a game that's praised by many Spider-Man fans. Some would even say that this game is better than Spider-Man PS4. Why would they say that? It's definitely not because of the acting or the story or the shit-stain aesthetic of the game itself. It's the combat. Well, it's also the swinging, which is really good, but it's also the combat.      Yeah, don't think I'd let you forget that.  And I'll tell you what, boy.  Being so brutal to people who could never deserve this amount of brutality, despite how evil they are, boy, it feels good. Like, knowing how strong you would be if you became Spider-Man, and then being able to put a controller in someone's hands and be able to feel that power to the full extent, it's a pretty cool thing. It's been a while since I've actually popped this game in and gave it a try, but I am not afraid to say that the swinging and the combat in this game far outclasses anything that we see in Spider-Man PS4. This game makes PS4's Spidey's punching power look like that of not even a baby, a sperm cell.   It's nothing like any Spider-Man game that you've ever played in terms of feel. If you can't get the game physically, pirate it. What, what are you looking at me like that for?   Alright, fine.  Meh, meh, meh, meh, meh. But when is he allowed to actually be brutal, huh? When is he allowed to go all out? Ultimate Marvel vs Capcom 3. Marvel vs Capcom has been one of my favorite fighters as of recent, and it's because it's the only fighting game that you can play as Spider-Man in. Smash Ultimate, Guilty Gear.  You can't play as Spider-Man. What's the goddamn point?  Playing as Spider-Man in this series of games, specifically this one because I can't speak to any of the other ones because I haven't played them as much as I've played this one, feels like you're playing as a sticky hurricane full of kids. I don't imagine he's very fun to play against either.  All these special moves he does are pretty cool too. Even if I complain about Spider-Man and the recent Marvel vs Capcom game, it is nice to see that they've kept his moveset pretty much intact with only some small additions like Smash Ultimate and how they treat their characters, except it's getting stale, guys. We need to, like, come on. Mario's played the exact same way almost since Melee. Can we change it up a little bit? There's been new Mario games that have come out. You know, there is one finisher that I actually don't like in the new Marvel vs Capcom game. It's this one.  All these pumpkin bombs are coming at me.   I didn't press the green goblin Brutality button. I want Spider-Man to do all the murderizing. Why is green goblin here?   That doesn't make any sense. Okay, maybe it does make just a tiny bit of sense.    That is brutality. This man is a menace. He's got a criminal. I want him strung up by his web. I want Spider-Man! Ah, yeah, I know you saw the reference. I know you saw the reference, come on. Oh man, that's low balling though. Don't give yourself too much credit for cashing that. That's Spider-Man too. Okay, that's not a deep cut. Anyway, this video is pretty much over. I hope you guys like the new format. I'm only going to do this every once in a while. I'm going to test it out, see how you guys like it. I like the green screen format, because it lets me wear a suit in a video. And I also get to be more expressive and act out. So I'm going to see how editing this video goes. And if you guys like it and this video pops out, this might become the main format for how I do videos from now on. But I don't want to be a naked, jaky clone completely. Excuse me.  Is it enough to talk about Spider-Man all the time to not be considered a naked, jaky clone? I don't want to be a naked... We're getting existential. This is the first time I've ever done like an end card where you can see me. Okay, the end card's over.