Hello, welcome. I am Andy from Control Plane, and I am standing in for my right honourable head of security, Dr Rowan Baker, who very sadly has gastroenteritis and did not deem it fit to get on a plane very sensibly, and a lot of the work in this talk is part of the collaboration with Henry Mortimer as well, one of our cloud native engineers. So huge thanks and greetings, gentlemen, from the past. Thank you for all the work you've put in today, and I hope that as much justice as possible. We will be talking about infrastructure as code potholes with cloud controllers. This is the reverse intersection of GitOps, essentially, and event driven automation. So when we're trying to do infrastructure as code with event driven automation, where are the foot guns, how do we fix things, and where can existing tooling come into play? So we're going to talk about some pain points we've seen around configuring infrastructure securely at scale within large organisations using cloud and policy controllers in Kubernetes to address some of these issues. And as I say, a huge thanks to Rowan and Henry. Very briefly, Rowan runs the security team at Control Plane. Control Plane is a cloud native security consultancy. We are based out of London, UK. We have offices in North America and Asia Pacific, and mostly do consulting for regulated industries. We are, as always, hiring. If you're a security engineer, a supply chain specialist, an architect or threat modeler, please do come and have a word. And the great disembodded Dr Baker. Quite worked how I hoped. I'm going to try it one more time. It should be coming out of here. I've got to need luck. That's not. I think it might be my food poisoning a couple of days ago, so I've been unable to travel. I just wanted to introduce the talk before my distinguished control plan colleagues take over. Today we're looking to show how Kubernetes provisioning infrastructure such as load balances can cause issues for large organisations in regulated industries. Their security architectures are typically dependent on infrastructure as code pipelines featuring policy checks. So Kubernetes provisioning infrastructure just isn't part of the plan. We'll describe how that Kubernetes provisioning infrastructure can be secured using policy agents at cluster admission time. And then we'll look onwards as to how we can start using this pattern to secure infrastructure provisioned by an exciting new generation of cloud infrastructure controllers such as Cross Plane. Then towards the end of the talk, we'll show how we can work towards securing that infrastructure in a manner where we achieve both automated compliance against NIST standards and simultaneous enforcement of preventive controls, preventing misconfigured infrastructure from being launched all via a single OSCAL document that forms the single source of truth for both. And illness notwithstanding, we hope to open source the repo of example policies and OSCAL component definitions for AWS services shortly. So with that, I'll leave it to my colleagues. I hope you enjoy the rest of the talk and the rest of the conference. Thank you, Rowan. Right, there are some demos. Fortunately they have been ASCII Cinemod for me, so I can't but to them. Let's rock and roll. So using infrastructure as code policy with policy gates to ensure infrastructure is securely provisioned should form the backbone of any cloud security program. We can create infrastructure as code templates using Terraform at Al that hard code secure by default configurations that we can distribute and reuse for consumers of cloud infrastructure in large organizations. And we can back this up by allowing users some degree of customization, adding policy gates into pipelines using tools such as Sentinel policy, OPA, check of, et cetera. However, this does not account for infrastructure provisioned in an event driven basis by cloud infrastructure. Most organizations have some non Kubernetes based workloads into cloud first and it's often months or years before a cloud migration includes Kubernetes, which then throws a metaphorical hand grenade into the enterprise security architect's office. Most obviously, Kubernetes provisions service load balancer types. This happens rapidly and flexibly at a developer's request by the cloud controller APIs. However, this can bypass infrastructure as code controls. I'm going back to everything defined as code and get ops. These things just appear in our dashboards rather than being defined and subject to policy. Annotations can define that load balancers configuration and if unrestricted can create insecure infrastructure by adding roots and punching through other ways theoretically secure policies and firewalls. We can see from this example that the SSL cert is commented out and the load balancer is internet facing. It is easy to footgun or intentionally bypass policy in this way. Trying to provision a load balancer via infrastructure is code like Terraform and then integrate it with Kubernetes, which gives us something that we can apply policy to is more difficult. Pods and nodes scale with non static IPs of course and encoding these targets into the balancing pool of a load balancer is difficult. In fact, you can end up using a controller to do this. Whilst you might end up with something that's compliant to policy, you complicate life for developers and operators. So the logical way to ensure these types, these services of type load balancer are secure is to use a policy engine such as Converno or Open Gatekeeper. We install those as an admission controller and those admission controllers intercept the requests as the objects are written to the Kubernetes API server of course prior to the persistence of the objects. So today we'll talk mostly about validating admission controllers that simply send back a positive or negative response to allow or prevent an object being persisted. That persistence then feeds into the provisioning engine and then the infrastructure is either permitted to deploy or not based on the presence of that entity. Using admission controllers and cloud controllers in tandem, we have a single enforcement point for application and infrastructure with policy defined as code. For completeness, cluster admission is not the best time to discover that something is misconfigured of course and the reality is that we can't always run admission controllers to fail closed if there are errors or issues with them. An example being running an admission controller outside of a cluster experiencing high latency and then essentially breaking a cluster. So we need to integrate checks into the deployment pipelines for these infrastructure with things like Converno and Gatekeeper tooling exists that allow us to integrate the CLI and the CLI and gate or respectively. This is also helpful if we're looking to prove to stakeholders that we have equivalent security gates to infrastructure's code pipelines where tooling runs statically on the repository or before requests are made to the cloud APIs. So we're looking to gain parity between statically analyzed the clarity of configuration and dynamically provisioned ad hoc infrastructure. Looking beyond the service of type load balancer, engineers have started to realize the benefits of using controllers to provision back end infrastructure for Kubernetes hosted applications such as storage buckets or databases. There are now quite a few cloud infrastructure controller projects such as AWS act, Google config connect and crossplane and these broadly follow the operator pattern. Custom resources within the cluster paired with reconciling controllers for managing cloud infrastructure. The benefits of this approach, there is potentially less developer complexity as cluster talents are consuming a single Kubernetes deployment pipeline for applications and related infrastructure. There is a you build it you run it concertina of runtime SRE DevOps style risk and management here. This won't work for all organizations. This also enables GitOps infrastructure configuration, not just applications. So, of course, this is then reliant upon a lack of mutation for these entities coming through the Kubernetes API. Because we get back into the same situation where if we don't have a an offline representation of the realized cluster state, well, then we've got a reconciliation gap, even if the operator thinks it's done the right thing because mutating admission control has added in those extra annotations or sidecars or customer resource definitions in this case. The controller pattern provides some drift protection with those caveats. For example, you have to rerun the infrastructure as code pipelines to stamp out the drift. And finally, we can secure this with policy engines, which of course is the counterbalance to statically analyzing the infrastructure's code configuration that we would do traditionally. So, some early projects in this space to find a single controller per cloud service API. But the reality is that creating infrastructure securely is not only about creating one service and setting specific configuration options. These are the guardrails removing knobs and dials in order to stand up secured by default configuration. Often we also require other pieces of infrastructure in place. Take S3, which we will discuss a little bit more today. Not only do we need to create the buckets and configure it properly, but additionally we need to create the IAM roles and users for access to those buckets. The KMS keys for backend encryption, et cetera, et cetera, presumably some population of the bucket as well. Crossplane as a project looks to address some of this issue for us. It is a CNCF incidentally, this is a project that control plane is often mistaken for. Crossplane is a CNCF incubating project that enables platform teams to build abstractions that tenants can consume. Obviously backed by providers to provision the infrastructure. These abstractions are called composite resources. In our hypothetical organization, a platform team defines the composite resources that developers and human operators can consume. The composite resources group managed resources together. A managed resource correlates to an individual cloud resource, for example an S3 buckets or an IAM role. Providers turn managed resources into external resources in the cloud, e.g. S3 buckets. We have our resources grouped into composite resources. They are then managed by providers which are then deployed. This simplifies the life of cluster tenants, application developers, system deployers, who can claim a composite resource for their applications, for example to cure S3 and IAM roles as a single entity. And they are provided for AWS, GCP and Azure. So, why is adoption not more widespread? Well, enablers have only been around for a few years. The controllers themselves are maturing in much the same way as Terraform providers take some time to come to maturity. So, we see the same sort of underlying integration point here. Ultimately, we are configuring distributed systems and so we expect things to fail. Resilience needs to be built into controllers and shaking out bugs just takes a bit of time. We might not be able to migrate everything under a cloud account into cross-plane just yet. There is also the cluster zero problem. We need a cluster on which to install cross-plane itself. Ironically, that's provisioned via Terraform in the repo that we will open source to support this talk. But the biggest issues that we see for many large organisations, they have all infrastructure defined as code. With configurations vetted using policy engines. They then build teams around this pattern that satisfies C-suite and auditors. Kubernetes provisioning infrastructure does not fit into the model that we have taken so long to try and educate upwards to the audit space. So, we need to establish trust in a security model for provisioning cloud infrastructure via Kubernetes controllers. And we will look at how we do that. We have a proof of concept project to demonstrate that we can address these controls and be in a good place from a security standpoint when widespread adoption occurs. The library that we will open source here to be made public soon. We will do that after the talk. It contains libraries of validating policy for S3 and RDS provisioned using the cross-plane community AWS provider. These libraries are aligned to NIST 853 rev 5 and instead of generating mountains of policy and YAML that might ultimately be forgotten, we also started to look at how to make those policies enable the documentation of compliance in an automated manner. So, let's see. I might have to pop this in the window. Can anybody see the bottom of that scroll? There we go. What we have been doing is making sure there are no existing cluster policies. The cluster has just had Coverno and cross-plane installed on it. The policies we've created for S3 exist in the LS policies from previous moments, preventing public access, encryption enforcement, HTTP get requests, et cetera. This is what a typical Coverno cluster policy looks like. In this case, we're ensuring the S3 bucket object was configured with KMS, server-side encryption by default and a validation failed. In that case, the object was rejected from the cluster, preventing the launch of insecure configuration. This policy is now applied. We can see it's correctly installed. This is our minimal S3 bucket configuration. You can see from within the provider fields encryption at rest using KMS was not defined. We've tried to apply this to the cluster and that has been rejected. On the basis that the S3 encryption was not enabled, of course. Now we'll apply the rest of the policies shown earlier in the cluster. We'll just check cluster policies are applied. There we go. There is the deploy. We'll check momentarily. We've validated that they exist. We've created a bucket called the authorised bucket that satisfies all of these policies. This is the first 30 odd lines of that document. But when we apply it on its own to the cluster, it will fail. Because a bucket policy to deny HTTP get requests needs to firstly exist and reference our bucket to satisfy the security requirements as per that. Next we will look at the required cross-plane bucket policy. This is attached to our authorised bucket through the bucket name reffield, which is incoming on 8 and 9. The line is 8 and 9 there. As you can see, the policy denies all requests that have AWS secure transport set to false on lines 18, 19 and 24 and 25. So we will now apply these prerequisites and the buckets will deploy successfully to the cluster without being rejected by the security policy. So we'd expect the bucket definition, policy definition and other prerequisites to be wrapped up into a cross-plane composite resource for tenants to consume. We will then try and request the bucket itself. It will take a moment for the bucket to show it's ready because the S3 server logging is on a best effort basis and it can take some time for the bucket itself to report it's ready. And then finally, when applying the basic bucket, it will be rejected on multiple counts. There we go. So that is the bucket which we expected. But now the basic bucket will be rejected and we have a Coverno test file to ensure the policies are behaving as expected. To be clear, we expect these policies to be triggered by the platform teams when they're creating compositions. Compositions should never contain violations. These were a selection of demos. If they did, they would be self-defeating and useless. So that's a first view for how this can be achieved. So we've just created more YAML to throw at the cluster without fully defining where our controls come from. And I appreciate the frustration this brings on a difficult managing YAML policy at scale truly is. There are entire talks on that. One of our colleagues control plane by the name of Mr Chris Nesbit Smith has a fantastic talk called versioned policy as code which looks at how to make policy changes across massive government organisations. The TLDR is ensure people are allowed to test and have warning before enforcement in various different ways. But one thing we did look at here is how to create traceability between controls on the cluster and compliance requirements which gives meaning to the controls in the library. Here we get into OSCAL. So using OSCAL documents as a source of truth for the enforced policies. Huge thanks to Brent Keller who is the author of the tooling that we'll look at in a moment. We have the open security controls assessment language going on here. This is a collaborative project run by NIST. It is machine readable representations of control catalogs, control baselines, system security plans and assessment plans and results. TLDR, automated policy verification. This enables an ecosystem of tooling for creating, manipulating and validating compliance artifacts around that machine readable format. This removes resilience on out-of-date documents, spreadsheets, screenshots and manual assessments for compliance activities which I'm sure any of us who have gone through an audit are all too painfully familiar with. And this leverages a tool called LULA to validate controls in OSCAL documentation against reality and generate enforcing policy from OSCAL. So there are three documents that we will dig into here. Catalogs are collections of controls maintained by an organization or by a standards body. So in this case we'll be referencing NIST 853 which has been codified into OSCAL for us at 173,000 lines of YAML. Profiles, baselines of selective controls and so NIST has high medium and low baselines for NIST 853 but we can also create profiles for specific components such as an S3 profile that details all of the NIST 853 controls applicable to S3. Finally, component definitions are a more detailed description of controls supported in a given implementation referencing a control from a profile. So to build OSCAL documents for S3 we were lucky enough to have this information available to us. The AWS config ruleset mapped to NIST 853 rev5 I'm sure he's taking the mickey out of me now is public shown in the top left table here. From this we distill the NIST IDs into OSCAL profiles for S3 shown on the right and we wrote Coverno policy equivalent to intent and spirit of the AWS config rules OSCAL component document for Lula to leverage. I'll just repeat that last bit, semi-butchered it. We wrote Coverno policy for Lula into OSCAL. So the documentation here shows how the aforementioned NIST standard control IDs that the S3 profile are addressed. You can see on this slide references to the S3 profile documents the NIST control IDs within that profile followed by a description of the control and a Coverno policy block. This block is an amendment to the OSCAL component definition leveraged by Lula and proposed by the Lula team. In context, OSCAL is still a format under development designed to stimulate discussion and an ecosystem of tooling so NIST are collaborative when taking suggestions from the industry around modifications to OSCAL document structures. Lula is a tool by the right honourable Mr Brant Keller and team at Defence Unicorns to bridge the gap between the expected configuration, required compliance and the actual reality of configuration. It takes the component definition that's shown previously and leverages the Coverno CLI to run generated Coverno policies against the cluster or static manifests. My colleague Henry recently had a PR submitted this project to simply add a generate flag and save those rendered policies to disk so we can then get at them running in Coverno enforcing them at admission time. OK, demo time again. We're going to reset the cluster back to its original state. Target button there again, lonely. OK, so we have a draft. We have a policy here that we've drafted for S3 that is just resetting the cluster back. The important lines we're looking for are lines 28 when they turn up again. Yep, line 28, where we reference the NIST 853 catalogue and then from line 30 downwards, we can see the list of control IDs from NIST, which can be satisfied with the correct configuration of S3. The rest of the file continues like so. So what we will have next, yes, that is the further controls. So, to remind you, component definitions show how the control IDs in the profile are interpreted. This is a cut-down version of the component definition for the demo to reduce time. Under control implementation field on line 28, 29 and 30, we reference the S3 profile shown previously and then the implemented requirements for that profile are listed below. Each requirement has its own UIDs, line 34. The control ID references the control from the NIST profile, which is line 35, followed by a description field where we place the name corresponding to the AWS config rule we have rewritten in Coverno and the rules block, which is the port of Coverno policy used by Lula. In the component definition, we just have implemented one requirement, and that is the S3 version lifecycle policy enablement. So moving on, we will look at the basic bucket, which does not have the define that we're looking for, the S3 version lifecycle. Yes, it is absent. So without policy, we can launch this into the cluster and have a vulnerable bucket in our estate. That is not what we want. We're proving the negative case in order to lock it down. Bad news for the cluster. So we'll now run Lula to assess compliance against requirements in the component definition and see that it fails as expected. There is a compliance violation, which when you look up the UID in the component definition is the lack of S3 versioned lifecycle policy. We should also note that Lula does produce compliance report to disk as well, and so Lula could be leveraged in a number of ways to assess compliance in an automated manner. So let's proceed to remove the vulnerable bucket. There we go. We can also then run Lula in a generate mode, this time against the full S3 component definition because it is quicker. This will create the Coverno policies from the S3 component definition. Thus we have the S3 component definition becoming the source of truth for compliance and ultimately enforcement. OK. These policies are currently named by their UID and there are duplicates as rules such as version lifecycle policy are mapped to many NIST control IDs. We don't want to push these into a cluster just yet. So we will have a look at the component definition which we have looked at before. We've written a script that uses the UIDs to match the policy files with implemented requirements in the S3 component definition and renamed the file and Coverno policy name according to the first word in the description for the corresponding implemented requirement which is our AWS config rule on line 37. Yes, there we go. We will run that script and observe the policies that are created by it as if by magic. There we go. And these are the policies for the cluster. Let's install them as we did previously. We would expect them to fail with the basic buckets once these are deployed. I'll zoom forward slightly so the policies are created. We're now deploying the basic bucket which we do not expect to be permitted because we've applied our policy that we've gone through and generated. And finally, when we deploy the authorized bucket it is permitted to the cluster because it is compliant with all of our policy. Magical, fabulous and wonderful. We can subsequently validate compliance using Lula with the added benefit of preventing a vulnerable bucket being launched in the first place. Doki. So obviously at this point in the demo we've just scripted and glued a few things together with the majesty of Bash. What we're looking for is the final step for a policy to be generated outside by something slightly better tested, of course. We'd like to understand whether that's something we can build into the tool. If that is found useful. We welcome any feedback on the next steps. This is something that we have some utility with compliance at the moment. It would be logical to cover all of the AWS config rules in NIST 853 rev5. We'll also be looking at GCP or other controllers such as config connector. And in conclusion, policy engines for event driven workflows and infrastructure as code are a must from day one. We need to build them into security architectures for Kubernetes and beyond any of our cloud infrastructure deployment techniques. They enable not only the initial case, the load balancer service but can also be used more widely across a large organization to enable self service infrastructure provisioned by infrastructure controllers. There are a lot of developments in that space that could prove exciting in the next months and years. We have some policies enforcing compliance to NIST 853 for AWS S3 and RDS that you can use with cross-plane provisioned infrastructure under the Collie repo that I will open up shortly. And through OSCAL, Lula and Coverno and cloud controllers we're starting to get to a place where we can tell in an automated way where you can in an automated way tell if all your infrastructure and Kubernetes applications are compliant with policy standards while simultaneously enforcing those standards from a single source of truth. Thank you very much to the authors of this talk. I hope I did them justice and thank you for your attention. Would anyone like to ask questions? I may delegate them to somebody else. Do we know if anyone has implemented anything like this with anything other, OSCAL with anything other? My first delegation, Mr Keller. Time environment. But definitely from the perspective of, like, establishing those control catalogs, those are available for a variety of different standards. And then from there, you know, I think we've seen a couple different entities that are starting to dive in and kind of own PCI, for instance, has been explored pretty recently, as well as other kind of OSCAL-related tooling such as Compliance Trussell, kind of exploring these same spaces. Thank you very much. Is there another hand somewhere? Hello. So is the question, is it possible to see a macro view of all policy across the cluster? Yeah, I think, like, from this perspective, I'd say no. Maybe there are tools out there, or maybe there are different ways of accomplishing this that can do the job, and maybe the answer is yes in those cases. Lula from this perspective is very highly focused on, like, kind of an inheritance model of, like, this is my infrastructure or this is my application. Here are the controls that it satisfies or that you can inherit. But then from that perspective, right, it's very focused in nature so that you might still utilize, like, a GRC tool, Governance Risk Compliance, to provide you with that, you know, high-level abstraction of Lula might be the runtime component that's looking at very specific composable modules that's then, you know, producing compliance reports and then exporting those out to a GRC tool that is defining relationships, defining, like, how to look at the high-level picture of all of your environment or, you know, provide filtering into different aspects that might, you know, you might want to focus in on and try and find what's currently validated and compliant versus what is not. So it's one tool and a, you know, possible ecosystem that, you know, could be developed around OSCAL and system security plans, all the rest of the OSCAL models that are available. Thanks again. We might have time for one more question if anybody would like to pose something to Brandt. Hello. So the question perhaps is when different standards have similar requirements for enforcement, is there a way of deduplicating them? I'd say largely the answer is no. Right now, it's going to be kind of based upon how are you crafting the inputs that you're providing to, like a tool such as Lula, and they're trying to develop, like, if there is, you know, duplication across those, how are you performing that? And another thing that we kind of want to look at here in the very short term is, you know, having this evolved from not only CLI-driven but also, like, something that is maybe more event-driven in your environment, that can be able to perform this validation at a kind of a lower layer so that, you know, if only this one piece has changed, then maybe we can go and find, you know, not only one, identify where there are duplicates, but then, with that, be able to, you know, prevent the need to re-run validation against the whole environment over again and, hey, only this application in this namespace has changed. So, we can go and find the compliance information for it and let's go and validate that. Right. Huge thanks to my co-presenter, Mr Brachella. Thank you to everyone else. Have a wonderful day.


here at Duji and this is the new V with a notch. I don't think they needed to do a notch but otherwise this display is really really quite awesome and it's very light fold and check the round corners are very very cool it's just too bad that they have a notch I think because there's absolutely no need to have a notch. It's just to be a copy of an Apple. But right here this this is called a V so it has the MT6750 quad 53 quad 53 so it's octa-core 53 with a 4000 battery. There's gonna be those colors of matte kind of colors and there's gonna be this kind of a shiny blue kind of colors and it's just $110 for distributors. So I think it's actually quite an amazing price it's just imagine if they had a version that didn't have this useless notch and that just put the camera at the bottom you know they call it the beard or whatever they call it you know the bottom and you can just flip it around when you take selfies you don't have this little need for this notch because in the past last year Duji has this had this beautiful bezel tri bezel less phone where they can easily squeeze the speaker in the top right here so there's a you know the speaker this is a beautiful silver one that's a super AMOLED display very very nice so that's the previous generation as the retail price around $150 but now you know the next generation is a larger display much higher display it's a 6.18 19 by 9 display very cool I just hope they change their mind and it take away the notch if they do that how cool would that be and the port is still a micro USB well I wish they switch over to type C and the support to the display port how cool would that be if you can have a like a PC mode UI but okay they don't have that yet but then the next thing that's really interesting over here is that so they'll have a do gv with a P60 CPU this is the fastest arm cortex a 53 73 and 55 I think of 53 that's the most powerful octa core that's coming a little bit later for 200 something dollars so that's gonna be the do gv I'm just afraid I'm gonna put the notch on it but somebody needs to recommend the designer at do gv not put a notch I've said that a few times though in my video that they have the mix too which I think has nothing to do with the mix because the mix is supposed to be a tribe as a less this is not a tribe as a less anyways is a full what they call full display which is being a very tall display which is the new trend and it's a fat one it's a little bit heavy because it's got a nice big battery as a p25 so it's a good chipset it's much heavier than these other ones which is something to consider but just $410 for the distributor it could be quite good just take away that active LCDs are just amazing from the suppliers maybe it's channel I did a video with channel you can check them out it might be a channel display it is possible that potentially it's not as bright as a super amulet or is it actually that super amulet is not so crazy bright I definitely recommend this one except if you I mean if they didn't have a notch for sure it would be a recommended accommodation but let's go walk around this fair because they see if somebody else is courageous enough to not have a notch on this kind of active affordable octa core media tech and just put your camera in the bottom


What's going on everyone Sam here with late in sports cards. We are doing 2022 bowman chrome baseball hobby 12 box full case break number 14 random team style. All right, so again, let me take over to the random screen Initially, I did post the incorrect random results for teams So I went back and changed it. I did it on camera on the stream It is recorded as well. You could see it if you watch the stream back if we take you back here This was 20 22 bowman chrome hobby 12 box full case break number 14 Result after five it is Byron C down to rusty C and then on here It was the Cubs down to the Mariners and if you go over here It's Byron C with the Cubs down to rusty C with the Mariners So again, I do apologize on that, but these are the correct random results. So we're all good to go So good luck here everybody. Let's do it Go dolphins Sean says if this light sells out, he'll do a back flip So if you want to see Sean do a backflip sell that saw this light this last eight boxer of light You heard it from Sean, he'll do a backflip He'll actually go into the gaming room and start messing with Caleb Big way comes out of this case. I'm sorry Kyle See those boxes were smashed We've got blue William Bergola going to the Phillies there you go William Q true blue max Muncie Base auto Charlie Welsh for the Mariners rusty C That's the new redemption card. Yeah, hopefully pull a redemption then we've got a new redemption card So we need to pull a redemption now Shimmer Eric Hernandez first base terrifying dude 99 yeah, yeah, why 2k yeah, you're gonna like it You're gonna like it. Oh, yeah We need a redemption. I want I've never wanted to pull a redemption more than right now We've got Cal Raleigh color match to 199 going to the Mariners. Nice one there big dumper dumper Base auto McKellar Sia going to the Royals. I saw in there rusty big dumper, baby There's SG baby Base Wanda Franco rookie That poker are you what are you gonna play just straight taxes hold them? Caleb is also live on I was What got you Wow, that's brutal. I was like going True purple hobby bias 250 I got a great story from college.  I know man Flopped the top set.  Oh, it's because that's statistically the worst Yeah, so A lot of times to play it, right exactly exactly for a Lorenzo person from each person 45 bucks Yeah, exactly. That's why everybody always played it But it got to the point that if somebody would bet like Abnormally like myself people would get skeptical. So wonder Franco rookie so I had a two seven and I bet and I bet like higher than I usually did to get us going and Everybody caught on to me pretty much right away.  He had like pocket kings or pocket aces and I ended up winning because there was three twos and two two three twos and two threes Christian Baccaro refractor to 499 for the Nationals base Base auto at a sin Paulino for the Red Sox rusty pocket seven Just call yep So now there's two sevens king in an ace and these guys are firing away Oh, yeah, and I'm at the end. I just call again River came out remember the river came out Fire oh, and this is all that I had all the chip Do you call that I'm all in I wind up taking out like five of them at the table Wow Pocket sevens Yes, there's ray wave Miguel Cabrera to 199 on the deal No, oh Mashed potato fingers Jayrod rookie we've got auto Isaac de Leon going to the Orioles guy each CJ Abrams refractor to 499 for the Padres When he told me yeah Yeah, yeah, we asked him we're like what's your best round ever and he goes one under yeah, I was like dude No, that might have been a 76 or something less than that probably if it's one under yeah, it's one under. I mean most of the park 72 69 or Good God true blue MJ Melendez to 150 for the Royals Purple Ryan Mountcastle the 250 for the Orioles got refractor auto CJ Rodriguez to 499 There you go Kyle on that combo spot with the ace nice one there, buddy.  There we go Awesome Kicked out yeah got arrested yeah have Kyle jump in and say yeah And more of those Never kick you guys out come on now. Yeah Speckle Eddie's Leonard to 299 we got connections over there. It's true. It's very true That'd be sick We've got junior Perez another auto for Kyle base nice one there all servers Yeah, Jason Tatum put up 48 Dude, I mean Jose Altuve to 299. It's sick, man. Yeah, he's good. That's sick. There you go You got another hockey game on now. Really? Yeah 20 seconds of that last Yes, I enjoy those Smashing like bar stools over Down This is my kind of party right there. Yeah, man. Yeah, I love it I'm down to play any game Gold of Christian Baccaro very nice 21 out of 50 congrats Nationals pretty much all of those I would say Lars between Mostly we go off number of hits. I would say that's pretty much the number one and then if we have like a Half-and-half like if we're like 50-50 between a team that we're gonna combo and not combo usually we'll go by like the players I would say Yeah, so it's number of hits is above all else Drew Baker auto go into the race Everything ships in the shade. Yeah, everything ships shady. You'll get everything. Yeah, you'll get everything for sure and then There's a Valera on the back there Then if there's like two teams that both have two hits or something and we're like 50-50 on between them Then we'll go with whatever we deem is like the better team Ricardo Cabrera for the reds on the first shimmer. Good question. Yeah. Yeah, very good question Also shady if you ever have like a question on if all card ship or not If you just if you click on the break that you buy into you could see like a description of it and it'll say like It'll say like all card ship or vet base split evenly or everything vet base doesn't ship sometimes like that. Yeah Moe, I would say like what 95% of our breaks all card ship. Yeah. Yeah, there's some there's some heavy that we don't yeah like with With like bowman super jumbo or bowman jumbo like we won't ship base paper.  We Know Yeah, you're like great just donated like 80 $800 $800 worth. Yeah Yeah, I would say Matt probably specializes the most and In the end vintage baseball Paul to Paul does very well. Yeah, very knowledgeable on that Base yeah, yeah, I did see the Yankees offer judge eight years 300 mil. It's kind of wild Ray wave Harry or not Ray wave just aqua to 125 Harry Ford definitely a good number of Goldie's We've got O'Neil Cruz rookie that's gonna be speckle auto Kevin Smith Kyle was like, of course, I get the A's now you're gonna pull a Kevin Smith, there we go Kyle not numbered on the speckle auto and man, that's not number The unreal man, that's funny I think we we partner with some sort of charity. I don't know the specifics on it That's more of like a lane question, but we have like a charity that we Because like Lane's mom is like big like works for like a toy company. I want to say Daniel Quiba Go into the Rangers I was gonna say Chris. That's supposed to be late box only. I was weird Like Lane's mom works for like a toy company, so she has a contact I think that's how we know like that's how we know the people that we donated to it and base Yeah, it's pretty awesome for sure. I know it's better than getting rid of everything Yeah, he does like a toy drive to on an Instagram page that like it's $10 a spot unlimited spot All the proceeds go to charity and then there's like prizes like the top one of the top prizes is like a Dwayne Wade Like there's some big stuff and a lot of yeah, it's awesome man gives gives gives. Oh, yeah, definitely gives. Oh, yeah very good dude Oh, yeah Blue West Calf for the White Sox to 150 No, come on J rod rookie followed by a manual Valdez going to the Astros Congrats Astros I hear you Mike. Oh, yeah, it's a way to go honestly Exactly Jeremy Pena I'm done with all y'all forever See y'all never Shimmer Edison Paulino first. Hey, at least he got other ones though to Kyle Arias first. You got absolute on Friday Oh, yeah, it's our guy right there That's our guy Could never be done with us could never be done with you either Kyle. We'd have to cancel breaks forever Be the end of late and sports cards as we know as we know it Yeah, we have to we have to fly to Austin a beg for forgiveness. Yeah While we hammer some cocktails. Yep That's Rodolfo Castro aqua ray wave to $1.99. Yeah flawless Friday to exactly hit row Yeah, we got that and then stadium club to Base auto Colin Burns for the Orioles Stop my sister has to go She stays in the hotel. She's always like, yeah, I want to come out here and stay here. There you go. Perfect. Now you have a reason to go She pissed I just hang out a Kyle's bar Yeah, I'm serious. Let's go base and Some water really quick here. She was telling me She's She's but No, these are hobby Yeah, one numbered auto everything else has been base that's kind of wild. No. Yeah, these are hobby That's canary yellow or no gold lube up to 50 white socks Yeah, Kevin Smith is a short print. That was weird that that was in this base auto Charlie Welsh. I don't know. It's odd That that was in hobby No, these are hobby hundred percent Purple shimmer Christian Hernandez the 250 for the Cubs It must have been a mistake that that was in there right there Yeah, big big time list of complaints from SG And it has not stopped Yeah, I tried to spill by Chicago's baseball then his next thing he's gonna say is I tried to steal a 50 points card They made a special points card. That was only 50. I think I saw that one. Oh, yeah Refractor Jason Shorio. It's a 499 nice one there. There've been others. Yeah. Oh, absolutely Please start from there. Oh boy base auto Rosemann Burdugo Going to the Padres male cruise shades of greatness One to go last group break spot of the night guys. That is it. I'm light number six. Here it comes There it is Face unbelievable. Thank you guys again for getting it's all the way down to one spot so quickly Absolutely unbelievable All right, next one here. That's gonna be yeast and morabelle first on the Aqua pink vapor the 125 base auto. Yes, or Mercedes nice one there for the twins. Congrats, Minnesota male cruise refractor rookie helly at Ramos Yeah cotton candy. That's what Richard's calling the the vapor one The aqua tea looks like it or the pink in the aqua. Yeah, it really does. Yeah, it should be like cotton candy the 125 Yes, and Mercedes base Sold out guys. Thank you so much unreal man unreal Best customer base in the world right here 100% Thanks.  Aqua Jordan Walker to 125 There's a refractor. It's gonna be a JT Schwartz the 499 on the refractor auto for the mess Green shimmer you're a bell and helice for Kyle to 99 color match And base all right on to the next box see some more color here Oh, yeah, is that where the poker tournament is Score Joe one-on-one happy place. Oh, man You're gonna need me to keep that up. Oh boy. That's a lot of pressure. Oh boy. Oh boy Put the pressure on There's speckle Dustin Harris to 99 They're in the process of being shipped right now tie A lot of them are gone out there still they're still working on they're still working on it It's gone out. Yeah, it was a ton. Yeah, most of it has all these tables are gone that so they're they're almost there, man Hang tight Anthony Gutierrez going to the Rangers nice one there range you want your email in you can ask Yeah, I actually did send an email. I'm gonna I'm gonna Ford this over to our shipping department for you time. Yeah, no worries See if they can get you any sort of update. Yeah, man. They made a big big big. Yeah huge dead in it right now Yeah figure I think that's pretty much they're usually set up like that the autos in the second pack That's how it was last gate. That's how it is in every case as long as you take them out the right way And you put them like face down like I do it goes color on top auto and then the rest of the base packs No problem tie. Yeah, you got a tie. No worries, man Oh Green shimmer Roberto compost to 99 all servers Yeah, usually they're like that every now and then once in a while There won't be like the auto won't be in the second pack, but most of the time it is. Yeah. Yeah. Yeah, I've That's where I'm from down there and I have gone Trust me. We have wreck shop in that place but Yeah, refractor Ronzi Contreras on their variation the 499 for the pirates the guy I was working for before I moved back up here He was a big wig there and do we Base auto Kevin Smith again going to the A's There you go again, Kyle Yeah, for sure Again Why am I a Kevin Smith magnet? It's like me with Christian Watson God Just whenever you buy something Kevin Smith's gonna be in there. Come on. Let's see a better auto in this See like an auto. That's numbered to something. I don't know what's going on with all these faces You have something else by now usually all Maybe Rosemann Verdugo cotton candy to 125 base auto Anthony Gutierrez going to the Rangers Freddie Freeman refractor to 499 Jason choreo. Yeah. All right box two of the mini box. Yeah, I should say Dead sir juice modern bowman sterling Got a canary yellow Brandon Crawford numbered to 75 for the Giants refractor coming up at least of Daniel Quava to 499 for the Rangers Congrats Rangers Oclair and Wanda Franco shades of greatness shimmer Simon Juan for the Mets Base and base Two boxes to go here guys. Good luck everybody true blue Wilman Diaz to 150 Dodgers Fragola Juan Benchio, come on Give us something There's a blue finally we got a blue a good colored auto Of junior Perez to 150 going to Kyle with the a's Congrats, buddy blue ray wave Magenta MJ Melendez Bless you. Bless you. Thank you. Thank you 299 go into the Royals. Yeah, it's definitely an ace case It's unreal man and base. All right. We got awkward way ray wave to 199 Byron Buxton for the twins I won't give us like a red Base auto Jonathan Machia going to the Cardinals Nice one there Cardinals O'Neill cruise shades of greatness for the Pirates shimmer Jordan Walker going to the Cardinals Base Wilman Diaz bowman ascension short print nice one there Is that a hair or is that like a dimple right there? Do you think one second Dodgers? Try wiping it off Dampel will send an empty box and wrapper with the Dodgers a little bit of a dimple on that Sorry Dodgers and the last box of the case. Good luck everybody is blaze Jordan on the orange yellow vapor wave Nice one there to 75. Thanks for the follow there super tech purple coming up here of Jackson Meryl There it is go into the Padres Congrats guy H with the Padres Get that one Mag for a buddy Magenta Ronzi Contreras to 299 Shacktastic I Like it capital. I like it. I like it. I like it Said the break is shacktastic Shacks here clever clever clever What's up? Yeah, it's security. No one's messing with us with shack in here No, all right guys last minute last mini box of the break. That's Austin Wells Atomic to 150 for the Yankees Arizona fall league base See a big auto in this pack. Come on baby Redemption there we go All right, we got Vladdy Matt Manning and we've got our redemption photograph of Ricardo Cabrera going to the Reds Congrats Reds rusty C Last of course last box we hit one Base and base SG was a fan there. Yeah Shimmer James Wood going to the Padres base. I was Kyle not here Bang And base That'll do for the break guys. Go quick recap here. We had autos Jonathan Mejia Blue junior Perez Daniel Cueva Anthony Gutierrez Kevin Smith Anthony Gutierrez JT Schwartz Yossir Mercedes Rossman Verdugo Charlie Welsh Colin Burns Immanuel Valdez Kevin Smith Brando Mosquita Drew Baker junior Perez What is that CJ Rodriguez? Isaac de Leon Edison Paulina Drew Baker Miquel Garcia Charlie Welsh Ricardo Cabrera and then purple Jackson Merrill to 250 For the Padres that'll do it for the break guys. Thanks again for the fill next up is late


Hey guys, it's Nate, aka The Foot Accountant. Welcome back to the channel. We are back in action per usual, and we have a big day of Sunday content to talk about FIFA 21 with upgrade packs. That's the hugest and biggest thing that's coming out today on this game is the upgrade packs. What kind of packs will there be? There hasn't been any code released. Could that mean player picks? Let's talk about it, right? Let's talk about it. Let's see what could be coming today. Rares are rising on the market. People are preparing. There's also other areas of the market that I think we could get involved in. And the rest of the market itself, like in terms of meta players, is dropping. And that makes sense, I think, for what we are having today on this game. I wanna talk about all those possibilities and even how I made some coins yesterday. Now also, GGs to Chelsea, champions of the Champions League, winning the game yesterday. I forgot to talk about that, honestly, in my video last night. But GGs, the Werner Showdown card, it's gonna get that plus two. The Contain Man of the Match item, people somehow thought that this Contain card was a live item. And so today, this Contain Man of the Match went from 260,000 coins up to like 330k. Now he's back down a little bit. Obviously a very rare card, but 317, 319 is what that card's sitting at right now. So kinda crazy right there. But if you have that card and it's up, I would take the cash because it's definitely gonna be dropping off. But anyways, League One team in the season cards, this is what everybody is chasing after today because it's again, a Sunday on FIFA. And that means up grade packs. And that has a lot of people hyped. Now of course, there's a lot of cards in here. There's gonna be some troll flags, right? You're gonna see Brazil left wing back instead of Brazil Cam, Brazil center mid. There's gonna be so many French trolls, right? You've got Andre, you've got, I mean, Bomba is gonna be solid, but Klaas, La Borde, if you're trying to go after a Yedda or Mbappe, there's plenty of trolls in there for that. Marquinhos as well for the Brazilian flag. But for upgrade packs today, I really, really hope that EA makes it hype. Now right now for the start of League One team in the season, we had one good day and one kind of just okay day. Now of course, day one with our insane SBC, incredible value. So many people are doing this card, right? French Lynx OP and League One Lynx OP as well. But then day two, yesterday they dropped this Joe Gomez, which is a really cracked out card as a center back option. But I think that right now people are just thinking this card is a bit overpriced and with all of the full backs and the center backs that people already have, they're not wanting to go out and pay 480,000 coins while fodder is kind of cheap, to be honest with you, and get this card. So this might be an SBC some people craft during the week. I'm sure he's pretty good in game, but I think a lot of people don't wanna play with Joe Gomez anymore. They saw him so much earlier in the year for this gold card that they don't wanna touch him, 10,000 dislikes on this game, on foot bin, crazy. So, albeit I do think this card is gonna get completed and you're gonna see him pop up in Weekend League because a lot of your casual fans and people that run the Premier League squads year round will do this card. So I'm not saying nobody's doing this SBC, but I think we were kind of hoping for more team of the season type content and not just a UCL related SBC. But hopefully that means that we're gonna get more content today on Sunday related to the League One. And I really think we should be seeing another flashback or a player SBC today. That would be quality from EA Sports. But alongside of those, everybody's talking about the upgrade packs, right? Now, rares right now are like 1.2K, 1 to 1. You can get them on a mid for like 1K, right? If we check out gold rares, most of them are selling almost instantly for 1.2K. You can see here we have a couple of pages at 1.2K. So people are really gearing up for upgrade packs.  I still think that 1.2K, if they put out good packs today, or if there's any sort of player pick. And that's what I wanna talk about today as well, is that we have not seen any code released yet. For packs, whether it's like an 85 plus pack like we had for the LaLiga, or an 83 plus times five like we have for the Bundesliga, we have not seen anything like that. Even like a one of three 80 plus pack, or sorry, not a pick, but like a 80 plus pack from LaLiga. So what I'm really curious to see today is I 100% think that they're gonna be dropping that premium league one pack. So the pack that gives you the 12 cards, all gold with three rare, I think that's 100% coming. But I hope that we get the 81 plus player pick today. And I hope that we get a league specific player pick. Now according to the schedule, what we have seen in the past couple of weeks, we shouldn't be getting league specific player picks this week because we had them for LaLiga, they took a week off, and then we had them for Serie A last week. So technically this week, we shouldn't be getting that in the game today. But if we were gonna be getting the normal 80 plus league one pack that we had for the Bundesliga and for the Premier League, that should have been added to the code. And since that has not been added to the code, what's gonna come today? That's the biggest question. Now last year, if you guys remember last year, I got insanely, insanely lucky. And I mentioned yesterday, I packed the big three, Yetter, Mbappe, and Neymar all on my account last year. But the player pack that we had last year was a player pick. It was a player pick of five players from the league one, five rare player player pick. I think it was an 80 plus. So five 80 plus cards from league one.  Now I don't think that's gonna come today because that would be something way different from what they've been doing so far this year. But if they gave us a one of three 80 plus players from league one, league one has so few rares and just so few rare golds on this market, on the game, that your chances of getting blues from that are gonna be insanely high. So I hope the upgrade packs are insane today. I really don't want EA sports to slack on this promo, man. I feel like they've done really good with the cards. I mean, of course, people are loving this Neymar, they're paying out the Wazoo for him. And you know, all around this game, I think EA did the juice and they gave a lot of these cards the stats that they deserved and they needed. And they juice the cards, right? So now give us the good content too. That's kind of the way that I'm doing it. So I do 100% think that we are gonna get that premium pack today for of course the the 12 players with three rares. I think that's 100% coming today, the league one premium. But then for the league one upgrade pack, I don't know what it's gonna be. And that's the thing I'm curious about and that's what I wanna see today.  Obviously, we're gonna give it a shot. So even this Bomba card would be really sick to pack. So that's 100% what everybody is focused on today and FIFA are those upgrade packs. Now other SBCs we could see, we haven't had specific icon player SBCs in a while and we also don't have a new icon upgrade SBC added to the code. We had the 91 plus two weeks ago. We had the 92 plus prime. What I think they might do this week, I'm gonna say it right now. I think they're gonna drop this pack. I think they're gonna drop the guaranteed icon moments pack as the SBC. Now I don't know if it's gonna be today or if it's gonna be on Monday, but I think that pack would be the one that would come out next just because if they're gonna release some sort of icon like upgrade pack, that's kind of the next one. I think they've used all their prime options and now it's time we move into moments. And if they're gonna make this a hype week, that's the next step. Now also with icon player SBCs, people have been throwing out names like Etoe, like Mateus, for the past couple of weeks they have not been released yet, right? We need to see big boy SBCs pronto because we did have Gerard, Yashin and Carlos Alberto with the last set, but Cantona remains to be the biggest card so far as an SBC that we have had in terms of the value of this card on the market at the time when the SBC drops. Now right now I actually bought a Cantona today to try to trade with and while I'm not really making coins at the moment, I made a lot of coins elsewhere in other areas as I was actually on the drive pack from vacation, I bought this Ucaco at 1.2, I bought this Yusebio at 2.8, it was a 50K flip, I bought this Best, that was actually two days ago, I bought this at a million coins flat, so nice profits here, right? I bought this at 6.48, I bought both of these at 205 and 210, I bought this Ansu Fati at 8.30 and then I got this at 2.48 which I thought was really, really low but he's just staying very low, he's right around 2.5 right now which is kind of crazy to me but this card's ridiculous. I played him in two games in a week and they get four goals and he is unbelievable so that card for me was insane but I still think that Icon SBC price point for Cantona is too high. That SBC should be 2 million coins right now because fodder is low right? Fodder is low and with no really, really hyped SBC coming yesterday, we saw fodder even go lower which I still think, I actually went in, you saw the 84s in my transfer list, I went in and I bought some fodder because I did a club stock of 84s because that stuff in my opinion literally has to go up this week so 84s to 86s is kind of the range that I like. 83s still being almost 3K, I'm not a huge fan of those. I mean, look at the difference here between 83s at 3K and 84s at 5.5K, that's crazy. That's crazy. So if you're somebody who does not wanna do upgrade packs this week, if you're waiting for Ultimate Tots or if you just wanna make some coins and do upgrade packs later in the week, I would go in on fodder, I really would. I think 84s, 85s, and 86s are the play. If we get any big-time SBCs this week and of course, when the guarantees come out, that's almost guaranteed rock fodder as well. So this fodder is probably gonna start going up a little bit today into tonight unless we have really, really bad content. I still think that's a good investment or a club stock as well. Now for the rest of the market, a lot of this stuff is dropping, right? People are getting prepared to full send. I think you're gonna see the market drop more today. Like this Lukaku, I sold at 1.3. He's already back down to 1.1. Wow, no way. 1.12, yeah, I'm getting, this is getting to be a situation once again. So that got bought, okay, 1.125. So some of these cards are very rare still and they're gonna fluctuate a lot based off of rarity. Like this Levendowski was 1.8 earlier on Saturday. He went back up to two mil. He's now back down to 1.8, but you see these fluctuations right now on the weekend. So it's gonna be harder today to trade with prices dropping off, but if you find some really rare cards like this Ansu Fati, there's one at 900K that is sitting right now and then mine is the next cheapest at 9.30. So that is perfectly what I wanted to happen with that card. This Benyeter was just down, he still is. He's under 1.7 mil, which is crazy. I mean, 1.68 for this card. He was 2.2 mil yesterday. That card's really rare. If I sell Quentana, I might go buy rares and try to buy this Benyeter because I think that card, even though he's not very hyped, he's still a very rare item that a lot of people wanna try out. So if I could get one at like 1.6 in the low 1.6s, I still think I'll be able to sell that at 1.8 in the morning. We've only got one page and a couple overnight at 1.8. So I mean, people are gonna wake up and see that price being really, really low and that might make them wanna go and try the card. So yeah, there's definitely gonna be the market dropping off today as well. Would you try, would I try to invest in some of the Out of Pack specials today or maybe some icons? Probably not. I don't think I'll really invest in any of that today. The only thing you could be watching out for is stuff that gets hit by SBCs, right? Like let's say we have a player SBC that comes out. My biggest example is like last week from Kessie, right? From Kessie. So last week, this Kessie card was like, you know, 800,000 coins and then they dropped the nine goal in SBC and this guy dropped a ton, right? He rebounded back though later in the week. So, you know, especially this week, if they drop like a Kenny Lala, Kenny Lala would be the absolute perfect flashback SBC for them to drop this week because of his team of the season cards and the hype that he has had in previous FIFAs. So like watch this Sambia, this Junior Sambia for birthday card is up a lot and you know, how much is it right now? 65K for this guy with 92 pays, a really good looking card and five star skills. This is like an OP cheap beast right back in the league one. If they release a Lala toss card, even if everybody does the SBC, this card's probably gonna drop down to like 40K again and he's gonna rise up. The cheap, special cards from these leagues have been doing incredibly well, especially as we're getting later on into these promos into team of the season where a lot of people don't have coins. Like this Leymann Liu, I've got one of my transfer lists that I bought at 35K and he's about 40,000 coins right now. I'm probably gonna take the cash because he's probably gonna drop off more today but that'd be a card that if this gets into the mid to low 30s, I would get interested in because there's really not a lot of Tots cards that are this level, you know. So I would definitely look into stuff like this because people that are on very low budgets are still gonna try to link cards that they pack from like a guaranteed Tots SBC that they do later in the week. So I would 100% keep an eye on this sort of stuff. Now of course, I did mention trying to trade with Ben Yetter, right?  People are gonna be selling these as we get towards content because they're gonna think about more lightning rounds coming. They're gonna think about that supply which won't be that much but the panic selling and the supply Sunday night during squad battle rewards as the week of the ends is really gonna make these cards drop more. So maybe you try some risky flips in the morning if you want to but if you don't, just be waiting on the upgrade packs man, right? Just be waiting on those packs and to be ready for the content that comes out today. So to be honest, boys, that's kind of what we're expecting today, right? A huge day of content with the upgrade pack SBCs.  If you bought rares and you're gonna be crafting SBCs today, like with the duplicates that you get, the walkout and the board duplicates that you get, I mean, if you can, if you have not done our award yet or if you have not done Oblak or even Willak, some of these really easy SBCs or maybe you start like an 83 rated squad for an icon, I would try to not turn in all of your SBC fodder that's high rated yet. Because again, we have so many days left coming throughout. There are so many days of this league one toss with again, SBCs like Lala potentially coming out or maybe EA go all out and they drop like a Renato Sanchez or in a tall SBC, right? So if that kind of happens too, that's gonna send the market into a whole nother level of panic and a whole nother level of just craziness. So, be careful with your fodder is what I would say. Maybe you stock the club, maybe you invest a little bit, stick to those 84 to 86 range. And if you're trying to trade with special cards, good luck, cause there's gonna be coins to be made today for sure, especially on out of packs icons, cause there's gonna be hours of panic selling and then it's gonna rebound, but it's gonna be risky, right? Like this Ansu Fati, you saw me snag one at 830 and now this guy is 900K, right? So I'm gonna hold for two sales and then my card sells. Same thing with like this Eto, right? He really didn't rise up that much this weekend. If this guy gets down to like 550 today, he could very easily bounce back up over 600 and boom. There you have a profitable flip. Same thing with this Mendi, if I see him at like 640, I know we can go back up to 700 because it looks like 699 might be the cheapest one on the market. You're gonna have fluctuations like that today.  Like this Lukaku, man, is really tempting to me. If I see 1.1, if I had those coins, I would buy the card, man, wow dude, this is so cheap for Lukaku because he was 1.3 earlier and that's a very, very rare toss card on the market. So watch out for your centerbacks as well because centerbacks were hurt on the market this week or yesterday because even though it seems like not a lot of people are doing the Joe Gomez, cards like this, this Lacroix card is very rare and it's gonna be a card that goes up with rewards next week because the French nationality links and people still running guys like Mbabu and their team. So if this guy's in the low 400s for whatever reason, on the PlayStation or even like 430, I might get interested if you want it for your team or if you wanna make kind of an investment. I know we have the Kempembe card but those Bundesliga links and the French nationality, there's a lot of cards out there that are like that with the French links. They're gonna be very useful for hybrids later on this week. So yeah man, today's a huge day because it's upgrade pack season, it's upgrade pack grind time. A lot of you guys have been waiting and saving your packs and waiting to spend your coins on rares to do upgrade packs for this promo right here and it's all about to go down this week. So we're gonna try to get this Tots counter right now. What am I at? I have 44 blues. So I'm gonna try to get this Tots counter up to like, I don't know man, above 50, right? Above 50 and of course try to hit one of the big boys this week as well. I hope EA help us out though by putting out insane upgrade player picks because the picks are greater than the packs this year for sure. So that's the market in my opinion today. Again, if you wanna buy any of those League 1 Tots for a longer term hold, wait, right? If you wanna buy Neymar and Boppe, wait. We have Alton Tots coming next week. We're gonna talk a lot about that later on this week and how that is gonna affect the market as well. But that's the video for today boys. If you did enjoy, smash the thumbs up on it. Comment down below if you have any questions and of course subscribe if you're new. It's been Nathan Ford Accountant. I'll catch you guys later. Peace, out.


when the narcissist gets old. Narcissists often depend on their appearance or intelligence to seduce their targets. They have to be impressive or imposing in appearance or style. They have to display a high rank or social importance. Magnificent features or qualities. They depend on these things to lower in their targets. As the narcissist gets older, they begin to lose their physical attractiveness. They begin to lose their intelligence. They are no longer as impressive or imposing in appearance or style as they once might have been. They are no longer of great significance or value in society. This might affect their ability to direct or influence the behavior of others or the course of events. They are no longer useful. They are no longer able to be used for a practical purpose. They no longer have the ability, fitness or quality necessary to do or achieve a specified thing, which means that they are no longer desirable. They are no longer wished for as being attractive or useful. It makes it very difficult for them to obtain narcissistic supply. They can no longer get the attention or admiration that they once used to get. They are no longer attended to or admired. They are no longer regarded with respect or warm approval or looked at as something impressive or attractive. Narcissists need narcissistic supply. They need to be attended to. They need to be admired. They need to be regarded as something desirable or useful as they get older and begin to struggle and obtain in their supply. It produces an inability to cope. It is very difficult for them to cope or deal with a situation. They develop very poor coping strategies, which may include alcohol or drugs. They are trying to escape from reality. They don't want to deal with their problems. They have done so many things to people, burned bridges and experienced a lot of failures and known fulfilment, lost opportunities. They begin to regret a lot of the decisions that they have made in the past. It preoccupies or fills their mind continually and to a troubling extent. They obsess over all of the things that went wrong for them. They experience stress, anxiety and depression. They stop taking care of themselves. They isolate themselves and become even more antisocial as they age. They don't want to be around people anymore because they don't think they're good enough for anyone. They no longer view themselves as being impressive or attractive. They become envious of the youth. People who they might consider to be more impressive or attractive than they are now that they are aging. Now that they are getting old and losing their physical attractiveness and intelligence, as they get older, they will turn to some form of drug or addiction. They will turn to something to distract them from reality as a form of escapism, whether it's alcohol, drugs, gambling, eating, gaming, pornography or even a person. They can obsess over and be addicted to a person as a form of escapism. Whatever their addiction may be, they are trying to escape from reality. They are trying to distract themselves from how they feel inside because all of their past failures, feelings of shame and regret are now catching up with them. But they don't feel bad for you. They don't regret what they've done to you. It's more about them feeling sorry for themselves and the consequences of where their actions have led them to be. They are still preoccupied with themselves. Still self-absorbed with no care or consideration for anyone else. They never take into consideration the effects or consequences of their actions because they are not responsible. They do not respond to the best of their ability. They never hold themselves accountable for their actions which means that they never learn from their mistakes or grow or develop. They deny their faults and mistakes and shift the blame onto the people around them which leaves them blind to the inevitable consequences of their actions which they never see coming as they were never accountable for their actions. They never accepted the blame and as they were never responsible they never responded to the best of their ability so they are left in a very weak, vulnerable position where all they can do is accept the results of their actions. This is where their past failures and feelings of shame and regret begin to catch up with them. But they don't want to deal with reality. They don't want to accept the truth so they turn to addictions. Alcohol, drugs or they find someone else who abuse whatever it takes to numb the pain of their failures and where their actions have led them to be. The narcissist gets worse with age. They begin to turn against everyone. They become more malignant and sadistic deriving pleasure from inflicting pain, suffering or humiliation onto others. They become very angry, bitter and disappointed at what they perceive to be an unfair treatment. They experience even more anger and aggression. If they had any limited empathy or care or consideration for you in the past it diminishes. They become completely heartless unsympathetic, unkind uncaring, unloved, unloving unmoved. Displaying a complete lack of feeling or consideration for you. As they get older they get worse and worse because they can't find a way out of the undesirable situation. They have done so many things to ruin what they once had. They have gone too far to compensate for their faults or bad aspects and they realise that they cannot compensate for their past poor performance or behaviour. They cannot make amends for their sins or errors or regain possession of what they once had.   They don't care about the consequences of their actions because they've gone too far to fix things now. They become even more self-absorbed. They have no care or consideration for anyone because they know that nothing they can do can fix the situation. They know that they're doomed or predestined to live the rest of their lives in misery and pain. Never finding true happiness or fulfilment. So they begin to scheme and plot. They become more predatory and calculating. They become more clever at achieving their aims by indirect or deceitful methods. Their main focus becomes the sabotage and destroy you because at this point they realise and begin to accept that their lives are worthless, useless. They realise and accept that they have no ability or skill. Their lives are not fulfilling and they begin to lose hope. They begin to lose their hope and expectations of achieving their intended purpose or desired outcome. Focusing on anything in their own lives becomes pointless. They see no sense, use or purpose in focusing on their own lives and trying to develop an ability or skill. They realise and accept that they are not going to find happiness or fulfilment in their own lives and their way of thinking and processing is why should anyone else experience happiness or fulfilment? Why should you have what you want? Why should you be happy? If they are doomed or predestined to be miserable and never get the intended purpose or desired outcome that they want they begin to lose any care or consideration for you being satisfied or fulfilled or you getting what you want. You getting your desired outcome and not only do they lose any care or consideration for that but they will even go out of their way to sabotage any attempts that you might make to achieve your desired outcome. Any achievements or progress you might make they will try to destroy it because at this point they have lost all hope and expectations in themselves getting what they want or achieving their desired outcome. So their thought process is why should you be happy? Why should you be fulfilled? If they will never get what they want if they will never get their desired outcome they become envious and jealous very hateful, anger and bitter and they consciously and intentionally plot to sabotage anything that you are doing anything that you are trying to achieve because at this point they accept their fate they accept what is destined to happen they accept the inevitable result of the remainder of their lives as being out of their control they accept that they are not going to be anything valuable or important to anyone else the narcissist develops more evil and manipulative ways of being they target people who are easier to victimise people who are easier to single out for cruel or unjust treatment easier sources of supply that will attend to them and admire them but they are also anticipating the destruction of that new source as the narcissist gets older and becomes elderly they will become less aggressive they will become less likely to attack or confront you but everything else stays the same they become more covert only because they know that they are no longer as impressive or imposing as they once were they no longer have the energy to go out and target new sources of supply so they become less aggressive but they will be more self-absorbed more manipulative, more exploitative they might try to act as though everything is okay and they are happy they have this sense of pride and arrogance this consciousness of their own dignity where they have to act in a way as though everything is fine but inside they are very sad stressed, anxious, depressed and if you let them around you they will infect your state of happiness or joy energy where the positive or negative is very contagious it can spread or transfer from one person to another so be very careful if you choose to go around them as it will bring you down with them you will begin to feel stressed, anxious and depressed because energy is contagious energy can be transferred from one person to another as the narcissist gets older they become more negative more dissatisfied they always have something negative to say they will turn to some form of drug in an attempt to escape from reality but that only causes more problems for them as they become dependent it produces an inability for them to rely or depend on themselves they become even more incapable of doing anything on their own without some form of aid or component and when that is taken away or it's no longer as effective as it once was it makes them even worse as the narcissist gets older they get worse and worse Thank you for watching and I'll talk to you soon