Hi everyone, I would like it to say good morning, but it's already noon, so hi everyone It's noon and I'm glad to see so many faces here because the last time and Stephen Doesn't give me to like here last time. I gave this talk a flock last year We were happy for people in the same room a video operator to people who came to listen to the talk and I'm presenting there, which was nice because in parallel there was Korea's Talk everybody went there. That's perfect because people love new technologies and it's great to have them there but I'm talking about all technologies and Actually, we have 40 years anniversary of these old technologies. So all the functions that we use for granted get PWNAM and get group stuff came in 1979 right and That's amazing We use something that was designed at 40 years ago And it's still in use in production all around the world and basically we don't know how to get rid of it But unfortunately with any old technology comes a nice thing called Off by one error because it's 41 year this year not 40 And really all those API's if you look at them I come back here So name service switch which kind of obstructed the way of using it came in 93 so the Authentication API subtraction came at at the end of 90s So we really talk about stuff that that really is not from this century it's maybe even out of this world and Kind of last API's API's made in in 90s That's what we deal with all the time and those who were Or familiar with Finland history. This is the stuff that finish Students are doing every year Upon graduation or before they get to the matriculation exams. They all jump on those tracks We're the these kind of funny stuff that they can find draw these posters and Ride across their towns Throw in kentus and there are people trying to pick up these kentus in Helsinki for example, this takes Something like two hours because there are many Colleges and every one of them is at least two or three trucks like this, so it's it's a fun and these were really the last students made in in the 90s so 1999 and 2000 and they ended like when it was two three years ago. That was my elder daughters Graduation thing but really if we look into it the evolution was really slow, so that was kind of a bit of fast evolution in 80s a bit of aggressive transition to Simplification of those technologies in 90s, but since 2000 There's a bit of stagnation, so we reuse the protocols were used technologies on the system level that Proven to be working and it proves to be hard to change that and Agreeing something that applies on again on the system level while at the same time on the on The application level there is a huge diversity and an approach is the web basically changing everything web 2-0 all these semantic stuff that got replaced by Rest API's and so on and we got into interesting situations in 90s and Early the thousands we got bunch of projects that implement the system level thing for remote access in something like LDAP protocols, so there were a bunch of Projects implementing how you query post-ex-data from LDAP how you plug it into your system How you use Kerberos? There were two PumpKirby 5 Implementations at the same time right there was a smart card handling with PumpPkcs 11 Every big system and of server-side provider Dean to introduce their own NSS and PAM stack modules, so it was flowering There but with this variety of implementations of kind of standard API We got where it is. Yeah, we got to a Typical let's say linux distribution that has bunch of these modules, so This is Fedora like two releases three releases before right we have SSSD provided Lib and SSSS says that we have bunch of modules inside to FC the standard ones We have Samba providing its windbind connector We have Lib and SS LDAP from an SS PAM LDAP and a ONL CD projects That give access to LDAP stuff and on the PAM stack. We also have those those modules the problem here is that it works for Single machine and it works and of nice, but if you need to deploy configurations of this to a fleet of thousand servers thousands servers or worse than that Workstations, which might be a bring in Bring out stuff in your office. You you will have to deal with the Evident configuration changes that happen on a particular machine, especially if there's somebody root other than you like on the work workstations you need to add complexity of the Local configuration tweaks because if if this is workstation then most likely I'm Wanting to use it against my home network as well as Corporate network as well as like with Fedora. I have Fedora Accounts right which also requires certain handling because Fedora provides the Kerberos authentication to access some of its endpoints and so on so we got also Requirements for the universal access for user and group data beyond POSIX so POSIX API for example for retrieving user information never in 40 years Had any kind of field for email address for new generations emails becoming Something that they might start asking what it is because they they moved on to stuff like what's up and Social networks and maybe don't have any email at all, but in 40 years that email Matter it it did not exist in the POSIX API So the first thing you do when you connect your web applications you use some sort of identifier and that Identifier needs to come needs to be Some something unique many applications. We're using email addresses for that because that allows you to also get back the Notifications to the user over the channel that at least be predictable in what it is and If you map on the same database that contains your corporate users or your Fedora Contributors users you don't get through the same POSIX API access to email address as basic as that so there are requirements that might look contemporary but really they They are not fulfilled by anything and So another example is home D Which is a project from system D Family of projects where they try to store much more information about the user like user related Keys that would be used to encrypt to create encryption of the home directory and some additional details about it Which cannot be resolved through the traditional POSIX API for advanced but on the other side with this variety of implementations we get a lot of Issues and those issues are typical so we get bunch of modules these modules need somehow be configured but they also were written here with Often with the concept of not taking into account that they are loaded directly in the application and therefore their state actually is capable to See what's happening in the application and not the same side Application itself can see the state of that module. So if your module for example loads Credentials needed to access some remote Database like LDAP binds the application technically can Look up into what is loaded into it itself via glibc nss modules and Pick up those credentials, which it's supposed not to have access at all. So there were approaches to have privilege separation talking small shims over the Unix domain so it gets to a demon that runs in background. That's effectively how SSSD works or how windbind works or how NLCD and this has palm LDAP D work. So they all have and a separate demon, but Many of those don't have like palm care B5 doesn't have it You need to load all this stuff in your application and sometimes you might have libraries also loaded with this That clash with the libraries that you're supposed to use an application ABI problems are real and they do exist and but the other part is many of these modules over 20 some fish years became broken Abandoned in the upstreams Completely removed the the owners might The people who developed them might switch to a different topic which is perfectly okay. That's their life and From the distribution point of view. This is probably the worst thing you're you're becoming the one who maintains it so streamlining this kind of a stack of Thunderweed Becomes an interesting thing Especially if you need to support this for 10 years or even longer and Also a fanciness Weird out 40 years is a different fashion now It is something that many Students or used to be Graduating and going to work. They look mostly at the mobile wall and see potential there not working with this boring Protocol stuff that might have no future from their point of view Again, it's her with us. Well, we just faced the real problem of All struggling with real maintenance problem for various reasons So life may be easy on the web side Because there is some rest and there's a stress here and The funny part is that I think it was two years ago that the year We celebrated the decade of SSSD in fedora So the core 11 was 2008 2009 so yeah a decade of Of that pass it so fast We gained a lot of functionality gained a lot of Support for a lot of things it's now one of the pieces of the client side That that exists everywhere almost in all distributions. It's packaged and assumed to be Used there are some things that are kind of debatable, but that's okay. We we Go forward and improve through debates here, right so on the other side If we look at all this stuff, then fedora actually quite conservative If you look at rail 7 and rail 8 development rail 8 actively deprecated some punch of the modules that still available in fedora because there is a voice of Customer in fedora asking to keep it and maybe there are people who are willing to maintain it unlike on the Red Hat Enterprise linux site where maintainers choose where the battles are and For some of these things it's it's better to focus on something else so for example the pumpkin b5 was removed from rail 8 and As I say, there are two pumpkin b5s. One of them was dead Well Maybe five years ago as soon as red hat removed pumpkin b5 from its Soon to be at that point rail 8 And publish it better in three months after that the original author of the presumed dead pumpkin b5 in dead end Restored its work. I don't know what was the reason that he started doing this again But he started doing so now we got the dead module restored on that zombie, I don't know We all zombies we walk for years the same was with one of the pks is 11 things but Here the progress was quite Quite big on the Smart cards infrastructure side, I'll get back to that part Thanks to our colleagues and Yeah, the other neck and the others on the unification of the smart card access and So all of these this functionality is not lost. It's all provided through SS Same in fedora just that we have options But on the other side configuration of those options happens in I Would say there's a very success Failure rate and sometimes something very simple might might be looking innocent to the package change a package maintainer that changes it and Causing the problem. So for example, look at this the Off-config thing existed since 1999 So quite a long time the off-config has standard standard thing The if if package provides a module for example this finger print. This is the real bug from fedora three years ago, I think the module installs its own stuff and updates the configuration and When you remove the module, it's supposed to remove itself Otherwise, it will be some something will be referenced in the Pam configuration that does not exist which might not be pleasantly You know usable for for the planet stack itself and it might just fail to allow you logging This is exactly what the bug made with it Unconditional removal Disable fingerprint Was causing the problem with the removal because Update doesn't have the off-config doesn't have the estate of what what the other options were there You you call update and it wipes out the configuration from what was there in simple cases It works in more complex ones when you have windbind, but you have a SSD or something is not there So at some point off-config Was also needed to be Rewritten from Python 2 to Python 3 fire that kind of migration Needed to happen because Fedora moved us Yeah, I know I know it was set story in in in in all of this and Effectively the decision was made. Let's let's do the whole refactoring of this space with a new tool and new tool was created and Yeah, it it caused it some gripes around it But we sort of simplified things Among the configuration things but didn't do really the actual Setup of the things that get configured. So if you set up your palm stack to use SSSD It doesn't mean that SSSD is configured. That's for some something else. So for example Where is it? Let me get Yeah, get back here All select sets the NSS configuration to the predefined one PAM to predefined one, but something else should create SSSD or Samba configuration to to use and That's done with the let's say IP client install or realm join dependent on the target there and Finally ansible roles that that create something and become kind of ubiquitous nowadays. So With all these on the single host you kind of get more or less predictable Scenarios predictable configurations you can extend them if you want but for the majority of people This is not and it allows you to reduce the scope of of maintenance and support because if the tool knows about the basic kind of configuration and Handles it well. It allows to move move away from the configuration itself into let's say SSSD in this case all the other steps Like handling all this configuration for the certificates and eventually move them centralize it like IPA does or AD On the authentication part the grid this was a big advancement over the previous state by effectively having a unified view on to what what is the Smart cards and certificates in in the system and how they can be used Effectively to P11 key in almost all cases except no PG Whatever is above is Using P11 key one way or another which means that you can do nice things like specify the very simple URI I Think it came in around 2015 this specification for the URI was implemented in a year after that That allows you to just say okay. I have a smart card With this token in it and if I specify this URI or I have tools that actually point me to this URI I don't need to handle all the configuration all the all the things it it magically appears and Works so nowadays it works in almost everywhere We have fairly Good stuff But on the Kerberos side There was also progress. This is not Kerberos, right? This is not a three Three had a dog that you expect but it probably looks like scary stuff the off of those owls attacking you when you try to actually Configure and use Kerberos like I saw on many mailing lists. We we also dealt with the content of how many 30 35 years history of decisions made 30 35 years ago, especially around the DNS Using DNS for the resolution specific encryption types that were there inability to operate in multiple realms Environment where you have multiple providers sources of the truth of your authentication data, which is for example, very simple. I have free AP at home I have free AP at Fedora Those are two different the hounds one of them I'm using to log into to my system another one I'm using to log into Fedora Things when I do commit for my packages and then I have a third free free APA at Red Hat at work where I used to access all the services in Red Hat So kind of I have three of them. They are different. They do not trust each other and That's good, right, but I want to have access to all of them at the same time because Here I'm logging in into the machine then I am building a package and Building a package for Fedora might be actually part of my work During the day and also accessing the red hat resources also might be there So I need to have some sort of a common access at the same time and depending where we are trying to authenticate that proper credentials should be taken care of and This this work This problem was known for years and there was an attempt to solve it in Kerberos with So-called director credential caches then Trying to increase security of that with the kernel key ring based at C caches all of them had their own limitations Finally when it was I think again ten years ago or so Heimdall introduced the Kerberos credential manager protocol and It was picked up by the MIT Kerberos by 113 version again six seven years ago But that's the client side the server side was really never implemented well until We did this work in SSSD to implement the storage and nowadays Fedora can use and I think it's configured by default to use the KCM provider from SSSD which can be used independently of Using any other features of SSSD. So if you don't need to have LDAP stuff That's fine. You just use the KCM part for Accessing Fedora infrastructure for example and Since these caches cache types they they existed at the same time they implemented and you can use them on your kind of Depends on where you should use it It becomes quite The only problem we have with with for example key ring is it's it's great. It's it's useful for Having secure access to them, but it's not namespace it So you cannot use it in containers containers will see the same key rings that Is in the host system or in other containers if they share the same host ID for that carry there is a work on going to create namespace for the key rings This work is still not complete the patches were flying last year Quite a lot. I think that there are basics out there but for example file systems networking file systems do not know how to pick up from the Container riser things and there are some existential problems how you run these Networking file systems mount them within the containers how you treat them how treat IDs and scope them so KCM allows you to kind of sort this problem because in the end It's a unix domain socket towards the client between the client and Unix domain sockets already namespaceable so you can separate them naturally already Okay, and one thing I wanted to say is that Aside from normal fedora use where if you create a new fedora installation and you don't copy any files By default fedora will use KCM in the Kerberos operations, but fedora toolbox container Actually notices that you you have access to the KCM and you have some tickets there and Automatically pulls it in into the container. So when you in the container you will Automatically get your Kerberos tickets from the host system. This works on fedora core as for example Quite nicely, but only in the fedora toolbox container or something you built on top of it so there's Something to to improve the other problem we had again if you have multiple parallel Kerberos installations that don't really talk to each other don't know you need to somehow handle the DNS resolution of the of the services and Kerberos can be made not dependent on DNS to the level that Everything that works automatically, but it's really very boring situation. It's better to have in some cases better to have the dynamic reflection from the DNS to Get the load distributed between different KDCs and get Some some way of saying hey this set of hosts belongs to one realm Another second belongs to the other one. The problem is that it's it's a Typical deployment of this 30 40 years old Behavioral so people tend to for example use SSH Server access using just a host name not the fully qualified host name and that doesn't really work well with Kerberos So there was a method that kind of expanded the host name to through through some magic and That method was broken If you switched it kind of to always require the fully qualified name for security reasons and whatever This kind of canonicalization and then this is going Public with Kirby 5 1 8 18 but Fedora built of Kerberos has the DNS canonicalization tri-state patch for year or two already and allows to basically be smart if something is not resolved or you can fall back to another method or you disable this behavioral and Depend on the Non fully qualified name or always fully qualified name there depends on what what you deal with this is especially handy if you have gained multiple Realms and parallel and you have one rules and one of them and another rules It also helps open shift basic applications where host names host names for the containers They typically are not fully qualified within the We have been looking at the other things there is a mechanism to proxy access to the Kerberos Key distribution centers if even if the client is not really having direct access to them proxy over the HTTPS connection this KDC proxy it doesn't work if this KDC proxy information needs to be resolved dynamically through DNS currently. It only works via Explicit configuration and there are some Low-level details why you cannot do the discovery of multiple of those at the same time and choose one or the other So that the work is ongoing mostly in upstreams of Fedora Sort of special here because it gets hammered with the upstream the newest upstream code Faster than the other distributions in this area. That's happened to be a problem my and Robby's fault So sometimes it's a bitter experience sometimes we actually Get smooth and sleeker stuff on the other hand a Lot of work has been done in Kerberos community to finally say no for with crypto and say no for the stuff that is known to be broken and You cannot really imagine the level of opposition from admins That say we have stuff that works. We never touch it Even if the actual system that provides that stuff Already unsupported by its vendor a typical situation is something like Windows Server 2003 Which apparently is so so widespreadly used still by the Big organizations for built-in-the-air forests active at the core of the forest they keep the oldest thing and Never updated or updated or something really conservative the key with 2003 server is that it doesn't support any new crypto, so it requires desk three and and desk single desk was used for NTE hashes in the windows NT networks where the password was stored So it's it's inherited from that. So there was finally an attempt a couple years ago to build up Request for commands for removing both of those from Kerberos making it last last notice and Kerby 518 removes Completely this support but on the other side we have system-wide crypto policies which allow us to force applications to not use those Again if the support for the crypto primitives exists in the crypto library Somebody can can try to use them outside So we remove that conflict except the RC for Which is market-deprecated, but it's used within the SMB protocol and within the active directory In couple places where you cannot get away So there's a work on going to fix that But I will talk about this a bit later. So the other part is introduction of crypto based on relatively recent research as in 20 years and 20 to 10 years let's say this way so so-called spake pre-authentication implemented now in Kerberos for quite for three four years and enabled by default in Fedora this has a good Feature that your passwords cannot really be Attacked over the internet so Kerberos originally was Created as a way to work over the insecure networks, but it didn't have a mechanism to prevent Impersonation and one of those mechanisms was to To have encrypted timestamp, but you still have the window of opportunity to get there So spake closes this window of opportunity for the attack and if you disable all these older methods We don't disable them by default yet But if you disable those old methods and your client support spake like all recent figures You prevent the dictionary type attacks on your infrastructure through the Kerberos quite serious The other part is that you could have a mechanism that says Okay, I used smart card or I used multi-factor authentication to obtain this ticket and you can use this information from the ticket at the server which you try to access to Say you cannot access this service if you don't have for example multi-factor or smart card Obtain a ticket so something like using a password is not enough to Obtain it you really have to raise your security to access resources Free APA implements this through so-called authentication indicators and you can associate the service with an indicator and then Application that runs this service will never see requests from anything But users that actually fulfill this because it will be stopped at the moment where a ticket needs to be issued by the key distribution center There are yeah policies now that allow you to handle a bit But we are it's becoming a bit wobbly because we are still in the process of Defining what you could do how you can reassign certain properties of the ticket that is being issued by KDC According to how you pre-authenticate if you got something like OTP which is multi-factor authentication Ticket then you might have some sort of extension of Lifetime of the ticket so it could could live longer or be Renew it for longer time or maybe the other way around. It's really policy for the administrators to Yeah What is what hardened? Yeah, the question is what is hardened here. So it's it's a spake basic authentication and time stamp encrypted Authentication either of those basically use a pre-authentication with password in both cases just We define as hardened Just because it is not clear password Basics negotiation We use some pre-authentication think about it that per authentication at least happened before we actually authenticate On the edge side We have Kerberos 118 which hopefully will land in Fedora 32 or in rock height before branch it We kind of working currently on the breakage on a bi level between different things we get Ability to Look up into the content of some structures and the ticket before the ticket is issued So the free AP a Driver on the KTC side can actually modify certain things insert or remove or deny with a greater flexibility than before which allows us to say to Microsoft Systems the Microsoft Windows systems that this user who used PKI in it To authenticate with the smart card on Linux machine Actually is the smart card authenticated user and the Windows will recognize that and will do Certain things it does for smart card authenticated users not implemented yet This is where we are going on the both directions so that you kind of get fine-tuned settings so for example one thing you could do is to add to this MSPAC structure and Information saying that this user has a higher level access Security level access by setting a special well-known Security identifier that says this user is not really accessing as the lowest privileged one but can get access to the files that protected with some higher high security labels on the file systems We were not able to do that before we would be able to do that with Purpose 1.18 1.18 also introduces the resource-based constraint delegation support which existed in Windows for quite some time Finally completes this it's a bit complex topic, but it allows you to close down Decision-making on who can access work Across multiple trusted realms We have certain things cooking and impersonate whom in in that presentation and use the credentials of Ticket obtained from that in the options Also Kerberos 1.18 merged interesting module Called Nego X which is really like a shell where where you put something working in it Microsoft put so called PQ2u Thing which allows it to do peer-to-peer authentication for the machines that do not belong to the same domain While at the same time proven identity of a user by binding it to online identity like your Open ID Connect identity so going outside of of the old technologies and maybe allowing us to to get Some nicer path forward with the new and fences Don't know how it was for how this will work out, but there is a possibility at least now with the infrastructure One thing we were looking for spake is to actually handle long-standing problems of Multi-factor authentication where you need to have some Secure channel between the client and the server to pass the token for validation on the Kerberos side and The work for the base of this passing is sort of in place It needs rfc to explain the multi-factor part of what is put into the spake exchange and then implementation, but this is already getting getting to To the horizon let's say this for you so and on the longer-term work Yeah, having the Support for all this fancy new tokens the web open Thing for Kerberos It needs a lot of Specification first understanding how this web-based exchange and proof of Access and authentication can be mapped into Essentially non-interactive non-browser thing then how it mapped into particular Identities again identity management where the token itself might be issued by Absolutely different party you if you're buying this you be key for example or any anything other it has nothing to do it has kind of a inside it a Certificate with Authority that has nothing to do with you or your organization and you need to allow mapping that to to your accounts and Somehow so this is not written even specified somehow Let's implement it Okay, so there are dragons one of the bigger and of Things that happened in divergence between Fedora and rail was that in rail Open held up server was removed because red hat mean that really there are better ways to support customers with open held up using open held up community Partnership there on top of rail apparently there are so many customers of those companies that actually run braille But the support better comes from people who actually develop open held up But in in fedora we have on this at this time like for Alternatives for the directory held up basic directories One of them is two of them are folding into kind of one But with different purpose of 389 DS server as a generic held up server Free APA as an implementation of a particular view on the directory and identity problem set then Samba AD Which tries to implement? AD compatibility and open held up and 389 DS does a great 389 DS project does a great job on introducing the visual Handling and tuning of the Server it's it's all available in fedora, and it's really really making the experience of using Directory server and seeing what's behind the bonnet is Much easier there. There is also a command line tool in but integration with cockpit is Kind of interesting and I would recommend if you look at this even with free APA You might want to look into the cockpit plugin on the free APA side we complemented work done for the Kerberos by removing some default settings aggressive defaults for tips mode Trying to Follow the system why crypto policies not everywhere. It's still work in progress, but we are going there and with Fedora 31 We actually got a First step of our free APA Samba integration in place so you now can have Samba file server running on IP master in a support of an IP client enrolled into a free AP environment in a supported shape Before that it was like a bit of Hacking here in there still there are things to be fixed to be Produced but we also forced to use Kerberos only here. So we closed down the password-based authentication for example and Try to to enforce and get better Better security there There are a few things interesting for example for Fedora infrastructure folks like the hidden and advertise and advertise it Replicas which allow you to have something that just used for back taken backups, but skipping the law from from the Clients that try to authenticate or search for it. They will skip it and The other part is the extended group management. This is what we was talking yesterday in the Fedora account system rebirth thing, so I hope we Get improvement on this, but this is also useful in other places where you need to grant two-step level kind of access doing the group membership by Designated persons rather than the administrators of free AP itself and And yeah, we working on having Access to Windows machines using IP users. There's some progress there We have prototype that shows that what is possible to do there You can even manage be an administrator on the Windows domain controller and manage it all by being IP Not the other way around because that's already supported And that's a path to actually have IPA to IPA trust which I hope will be in the next three Something like 3D Fedora releases Hopefully and the final part here is improvements and Getting the defaults higher Better in the certificate management give more configuration options if you set up new integrated Certificate authority support IP addresses and certificates. That's I think open stack often requested and We have bunch of utilities now that we use the same infrastructure for all three big parts So IPA health check does something like 300 different checks on the machine to verify that something is Good of wrong and warning you about it It doesn't provide remediation yet Hopefully at some point we will look at what to do with it but the same for a specific for the directory server and for the doc tag for the certificate authority and There is a work in progress. It's not yet in Fedora On the doc tag side to implement the local acne service so that you can ask over acne protocol for IPA Back at Certificates regularly Same way as you do with lads and crept and others not yet in Fedora. I wonder why they haven't yet cut the release for that there's sizable unsupply integration a plug in a in a 40 minutes there will be a talk about it go to Dio 6 which is actually the next room where the whole security track will take on and Listen there actually there will be like like video live demo not video there and Finally Samba Disabled SMB one by default. We got a lot of bug reports But what we can do we have to remove SMB one simply because it's insecure and it should be gone The the only problem we do not have implementation of the POSIX Semantics on top of a newer protocol. There is a work on going Hopefully by end of this year. There will be something upstream that that we can do the work on going is happening in a collaboration between Samba upstream and Microsoft which is willing to put this into Specification as an official specification not extension of part of the specification and actually Putting the bill for client side implementation of that in Linux. So Steven French and Another developer works on this on the Linux kernel module they they actually work at Microsoft on that and Yeah, we are getting a lot of improvements, but many of them are not visible to users. They may be important to administrators. There is some improvement work on the using active directory Implementation and Samba with MIT Kerberos. It's not done yet. We're still blocked by some fundamental pieces not implemented And the lack of time Which I guess is My problem right now. I have two minutes. Thank you


Switch off the phone, sir. We'll have a moment of silence. We'll move to the Divine Presence. Bhagavate, Bhagavate, Bhagavate. Thank you very much. The invocation team to invite me here so that I can share my experience prior to being in Auroville and after being in Auroville. Without going in too much detail into my life and trying to concentrate more on how Shubhindo and mother touched me, I will start from a small childhood at a boy of five-year-old, a child who had this wild imagination, out of the world imagination, who decided to go into different worlds, to talk to different things that we don't see in this normal world. But at the same time, had a very high level of concentration on things that are actually real. So these two paradigms of concentrating on the real and imagining a world out there, that child was not able to synthesize these two realities. He would see fairies, he would think of gods, he would think of animals flying, he would think of birds walking, all kinds of things. The things of fables that we hear once long ago, probably because his parents used to tell him a lot of stories. But then he would concentrate on people as well, on how they groom themselves, on how they talk to each other, on how they behave, how they keep things, use things, he would do that as well. So these two worlds, he lived in both of them. But there was no connect between both, this practical and what others would say, an impractical world. And as he grew, the divide was even bigger. Probably his parents, this boy called Gajanand, who was named by his father later when he was giving his birth certificate, they decided to name him Drupad. This child later, we could say that he got influenced by his multilingual background of his parents and the people that he lived in a state of Goa. His father and mother spoke in Konkani to each other. But they decided to speak to him in English and to his sister as well. But to the relatives, they would speak in Kannada, they would speak in Marathi, and they would speak in Hindi. So imagine his second grade teacher to her bewilderment when he comes to her and says, teacher, this place is not enough to fill my mother tongue. So she said, which language do you speak at home? So he really imagined that his mother tongue was English, Konkani, Hindi, Marathi, Kannada, all of those. This was very fantastic because he would relate to all these people. But at the same time, the people would not relate to him. So this brought positive things, but at the same time brought negative things in his life. So he could not relate because he would think in all their thoughts. But at the same time, he didn't have the experiences they did. They would talk about one culture and he would talk about multi-cultures. So there would be misunderstandings. All would laugh, but he would be confused. But one thing that always saved him was his father and mother's laughter. I was that child. And so was my sister because she also went through the same journey. I remember while I was growing up, I would relate to a few friends in the school who were multi-cultural because they were studying in various schools like Kindre Vidyalaya and all that and they would come for short time. And I would relate to them, but they were not there for too long. They would go back. So I would relate to all, but all would not relate to me. So in this divide, I would always try to search a humanity in books to name a few Chandramama and Amar Chitrakata. And I would plunge myself in these books that my father would bring as a growing child. And I would try to find out this so-called multi-cultural life. The word multi-cultural, I learnt now. But for that child, imagine, he wanted to see all kinds of things packed into one. Like our Bharatmatyam dance performance where we have the music, we have the dance, we have the theater, we have all the things in one. He wanted to see that in one. So he could find that in the books. And then he scanned and scanned more and more books thanks to his father. But then at the same time when he was scanning those books, he would find once again that divide in the books and him. Because those were characters that he could not see in real life. Perhaps they were mythological, perhaps they were fictional, perhaps they were something else. But he did continue seeing them in his imaginary world, sometimes creating them, sometimes making them part of his stories. So then he started growing up with the children around his place and he would play with people, he would play a game called House House. And he wanted to see this imaginary world in the real world. It took a lot of time and he got a lot of setbacks as a child. But these setbacks could not be seen outside, it was just within himself. His friends did feel these setbacks or he did not show it. Thanks once again to his laughter. When I heard back, I remember a discussion I had with one of my friends. So it sounded very fascinating. A galaxy that would finally meet our galaxy, the Milky Way. From far away they would meet each other. Imagine this, two galaxies meeting each other. That sounded fascinating and it reminded him, oh there is a reality that is really vast, that is humongous. And he saw, yes, I want to see that reality because I can't see here. So he went on searching. So in order to search that, he started writing at the age of 13. I think it was modern Mahabharata. Those days they used to show Ramayana and Mahabharata. So he decided to write modern Mahabharata. Thanks once again to his father's humor. But to see the other world, that was his inner intention. Things went, things went forward. His parents also were known by the folks all around Goa by the intelligency of Goa. His father was a director of a department. His mother was a homemaker. But at the same time they were theater people as well. Passionate theater people. So there would be a lot of people coming to his house. Why I say he is because, it is because of Auroville. Because this place snapped me from that he. It brought me to the place where I can resonate with that imaginary world, that impractical world and the practical world joining together. That is why I have to make this separation between he and the current me. So things went on in his house. And the only thing where he would relate to is his imaginary world. And the second is his love to talk to beings that we will not see in day to day life. One of those beings is Ganapati. He would talk to him once in a year. Ganapati would come home on his birthday. He would talk.  They used to not celebrate Ganapati. They would do Lakshmi Pooja. So I said no I want Ganapati Pooja at home. So that is the time this child would talk to this godhead. And he would talk, he would play, he would have fun with this godhead. And he would ask about different gods. Probably he would imagine the answers that Ganapati would give. It could be Ganapati who gave those answers. Right now I don't know. So this discourse went on between Ganapati and he. And at the same time reflecting with his books, with his friends, with his schoolmates, with everything around him. Trying to make sense of these two separate worlds. What humans would call the practical and the impractical. That of fantasy and that of real life. The turning point came after he completed his tenth grade examinations. And he went through almost seven, eight years of turmoil. Because the education that he was getting through all these external sources, he wasn't happy. So he tried multitudes of things. He tried engineering, he tried fine arts. He got admissions everywhere. But he left within three months, four months. Various courses catering, he tried everything. But he was not interested in the way they were teaching him. He was attracted to his father's way of teaching. Which is learning how to learn so that I can learn myself. I remember we used to have these things called summer vacations where it was almost two months of window where I would be home. And my father would make, he had interest in almost everything. History, geography, in physics. He was a physics graduate. He did law. So he had interest in almost every field. So he would make big charts. And when he made those big charts of history, what happens in India. And at the same time what's happening in France and what's happening in the western world, what's happening in the eastern world. And I would see those charts. It was very interesting charts. And I would ask him, could you make these charts for geography? He would say, I have done this for history. Why don't you do for geography? But I could not do the way he would do. So it would sort of irritate me. And I would try to relate different subjects together and try to see how to make that. I was already a skilled artist at that time. And I was fascinated by almost every subject which I couldn't see my friends. I was not good at them, but I was fascinated by them. There were people who were not fascinated and would get higher marks than me. It didn't matter to me. As long as I have fascination, they were gods for me. Mathematics, algebra, physics, geometry, home science, these were all gods. Some gods I didn't know. Some gods I knew a little better. Some gods I knew very well. So they were gods. But I could not do the way my father did. So I had to put my mind during that summer vacation. But after that summer vacation, it went to just mugging up things. And I would be disinterested. And out of this disinterestedness, what happened was, because when you are in a school environment, you are supposed to be participating in that environment. And I was not able to do that. And because I was not able to participate in that environment, I started lying. I started saying, I'm doing this thing when I was not. Sometimes I was interested in geography for three, four days on an end. Other days I was not. So I didn't understand why I had to do geography homework on the day I'm not interested to do it. So I started lying at home and lying in the school. So this brought additional problems to that whole divide which I mentioned earlier. Things went on. My theater world went on. My lies went on. My experiments with my fantasy, not fantasy, but my mythical readings went on. And I tried to make some sense of it all. That the divine existed was not a doubt for me. But whether this world existed was a huge doubt for me. I did not believe that this existed. I thought it was a figment of my imagination. Because my imagination had run so wild I could think anything on any day. I could think like anybody on any given day. I could think like my friend. I could defend my friend even if I didn't believe in him. Even if I didn't agree to anything he said. I could behave like anyone else. So I thought if I am able to do so many things, if I am able to be so many people it is not possible because they are not doing that. This must be my dream. So whatever happens in this dream is either unreal or is my fault. There was only one way and I knew books were my only way and solace. So I said let me try to find some other types of books that may give answers. Now it may all seem quite grim but it was not. It was there were quite hilarious situations in all this grim. So I started reading self-help books at the age of 16, 17. So Dale, Carnegie and many of the names I don't even remember. Self-help books, Robert Kiyosaki and all these people I started reading at that time. And I did not know again how to read because I did not know how to relate to them because they were talking about marketing. They were talking about how to win friends and I didn't want to win friends. So but anyway I said books have given me answers. Let me go and find some answers in these books. So I went through everything, self-help books, guides, life coaches of that time. I went through all of them and I imbibed a lot being an actor at that young age and being already started directing, choreographing dance. I started imbibing. There are many parallel stories but they are not so important because this imaginary and non-imaginary world I feel are more important than all the skills that I have acquired before that. They play no role. They are just skills. Some of them stayed, some of them stopped. I developed new skills. But these books, I could advocate these books to all my friends and my friends would come and they would ask things and I would ask them and we would try to make sense of those books and I would implement those books. But at the same time, they would not lead me to that Andromeda galaxy, that huge galaxy coming and meeting the Milky Way. It's unfathomable even now. It's like quantum physics and astrophysics talking to each other on the same table and that is part of our real world. That is not part of the world that people may say, Oh, no, I do not believe it. It's not part of that world. The number of stars, the number of... It is just mind boggling when we just talk about this simple fact. I wanted that fact which means if this fact can happen, this collision can happen, then there must be another collision. So all the books got over and at that time I was exploring all the skills I had developed by studying various things, by starting working in supermarkets because I started fending for myself. So I started going to work at places and start exploring how can I do things by doing. Because still now I was reading. I was seeing, but I was not doing anything. So I decided I should start doing things. Maybe by doing things I may start learning something. So at first this was somewhere around 93, 94. I met a few, I can call them acquaintances but people who were evangelicals who wanted to share the word of God with me. So I went with them. I remember my father, I told him I have to go to this evangelical meetings. I said, oh, that's nice. He had all the religious books and everything in the house so he would read all kinds of interpretations and all that. He said, very good. So he dropped me every day for those classes. And within seven days I decided I will become a Christian. So the first thing we have to do as Christians is to repent our sins, our wrongdoings, the things that we have done wrong to others. I said this is fabulous. So I wrote all the wrong things I have done. I couldn't write everything. So the most of it I wrote and I went to my father and I gave him that and I said I want to tell something. I have accepted Christ in my life and since I have accepted Christ in my life I have decided to tell you my past and I gave this document to him. He looked at that and he asked me what is this.  To me right now that is surprising that every single lie I could remember, every single bad thing I could remember. That was shocking, that is shocking right now. I can't remember all the good things I have done.  So you can imagine me at that time when my father already in his mind he is putting me in curfew now. So I went up, there was a Bible, I sat with it, I just put my hand on it and I concentrated. I didn't know what I was getting into. So my father told that let him sit in that room, I will talk to him later. Later in the evening he called me down and he was furious. But my father doesn't show fury in violence that he would do but not in these cases. Then he was very furious that he was not furious that I was becoming Christian actually. He was furious that I had to listen to someone else and tell the truth to him and that why couldn't I tell the truth myself. But I understood this about 8 to 9 years later. But at that time I thought he does not want me to be Christian. As he did mention if you are Christian you are no more my son and I did answer to him that I was never your son. I have always been God's child, not yours, not my mother's. So the evangelical in me decided to be strong and decided to follow it. In the curfew I would rigorously read the Bible day in and day out and I would see downstairs he would be playing bhajans more than ever. Bhajans and the Vedic chants, it was like 10 times than he used to do. He would do pujas, he would do all kinds of things. He would do it himself and I would wonder why is he doing this. So one day he called the church group and told them that this is what's happening and please don't call him to your church group, he will devastate your church. He's a nuisance, please whatever Christ you all have he will take it out of you all. So I didn't understand from where it was coming. Please you don't know him, he will spoil Christ's name. That's what my father told them. They said no, no he's not, he's a good boy and all this general conversation happened. No, no, no you all are very nice people, this is a messy boy. He tells lies, do you know that? So poor people they went back, they said don't worry you can do it.  They realized that I must have even had a tiff with my father. They said don't shout at him, he is loving and so they went. But in me was this, was this still this anger that this again separation now it became Christ and the other world. Although for me at that time it was only Christ but inside these two worlds I always wanted to collide. So I could not negate anything, nothing I could say no to. Everything that came to me I could not say no, whatever it be. No matter it looks bad at that time and I wanted to join. That anger at my father say okay I'm going to read his literature to prove him wrong. Of course this was not a one day thing. So I started reading his literature, what was his literature? He would read many things, he would read Dhammapada, he would read Zandavesta of Zoroastrian things. He would read all kinds of, so I started reading that stuff. Let me read interpretations and this and that. So what happened from 94 to 98 was every six months I started following a new religion.  So literally changing of opinions every six months. So I told my father I want membership in central library, I don't understand what's happening. So I joined the central library to find out my guru, this was in 1997, I was working as a night auditor, so I had whole day free night auditor in a five star resort. So in the morning I used to go to the library and I would sit and every day I would chant our Kuladevi, our hometown god, her name, her name is Parmeshwari. So I would say Om Namo Parmeshwari, Om Namo, the whole day I would chant, I want guru, give me the way. And at the same time I would go to the central library, death, death, Christian version, the evangelical version, the born again Christian, the orthodox Christian, all this just scanning and scanning. So again that brought a lot of confusion once again. But I didn't stop because once I set off there is no stopping. But now the practical world and the impractical world had to meet. There is no looking back, Swami Sivananda, all the books, every books of Swami Sivananda, all the books of Ramakrishna Paramahamsa, all the books of Swami Vivekananda, all versions of everything. I would get lots of answers but nothing to join these two worlds. I would get answers of what is Europe, what is this thing, what it represents, all these answers, but not something that joins everything. So I would create all kinds of equations, all kinds of equations like how we have the astrophysics equation and the quantum physics. I would create all kinds of equations but unified string theory, I would create all kinds of theories within me but they would still not meet. So central library, those days people used to steal the central library books and not return for months sometimes on end. So they made special fine on certain sections and the spiritual section was notorious for stealing. That's a nice thing actually, that people read spiritual books and then there are other sections that were notorious for people stealing and not returning back.  So I went and one day after reading all the volumes of Sivananda and not eating vegetarian for almost five years in a fish eating house, I took out one book, blue book, it had a freedom fighters face on it. This particular freedom fighter had asked for total independence, the first person actually. And the Britishers they had given him a tagline, the most dangerous man alive. In fact what is interesting about this blue covered hero is that we got independence on the very on his birthday. So I read Sri Aurobindo or the adventure of consciousness. I said what a silly title. What has this book got to do with this? Just to be in the history section, what is it doing here? So I thought consciousness, maybe some author is very creative. You know sometimes authors do a lot of creative works and he might have.  I said okay let me just take it. Something intrigued me inside and I took it home. I didn't return it for six months. I read, reread, it became my Bible. And I frantically searched the entire central library to see that if somewhere. And they had these sections where you could find which books and this thing. And Sri Aurobindo was nothing. There was no Sri Aurobindo. That's not possible. Such a freedom fighter has to be there. So I went entire history section, entire this section, nothing. In one section I found Nolini Kant Gupta Sri Aurobindo. Oh Sri Aurobindo here. But it was in Nolini Kant. I went, took that book, read all Nolini Kant Gupta's books. So then my father saw and he looked and said, he looked at the adventure of consciousness. He said oh you are reading Sri Aurobindo. It is about the central library, the center. I looked at him and I told him why you didn't tell me. He said why you didn't ask me. So I went on top to Sri Aurobindo center. It was the last center where actually mother signed. After that she didn't sign any center. And my father was one of the founding members. So I was so annoyed and so happy and all at the same time. And I'm going there and there was a book exhibition. So I tell my father there's a book exhibition. And my father purchases for me synthesis of yoga. Which first page, English is my mother tongue. So the first page took me whole day. So I'm filled with joy right now. So I had to go to Shubhinder Ashram. So I told my father I have to go. But I had no money. So I would earn about, I think it was 2500 rupees per month. It was not enough to go. So I started saving, saving. As many connections I can make with Sri Aurobindo. I got to know the person who started the center was SS Kulkarni. He has done doctorate in Sri Aurobindo's place. So even my father suggested his name. So I started studying under him. And so I started making a plan to go. Next year I collected some money. My father decided to give me some money also. So I calculated, I thought 3000 is enough. My father decided to give me more. But I said no, I will go with 3000 and come. And so he booked all the tickets. I made the necessary letters. He was the one who actually wrote the letters. He said I want to write the letters. So he wrote like an advocate actually. To one Sri Ramakant Bhai from the Ashram who is from Goa. And so I remember the time when I came to the Ashram. So I asked, I requested to meet Amal Kiran and Neerot Baran. Both of them I wanted to meet. So I asked Ramakant Bhai that can I meet them. He said yes I have fixed an appointment with both of them. And then he called me and said what is this letter you have written? So I said no sir it's my father actually wrote. And we were speaking in Konkani which is my another mother tongue. So I said okay okay. And he got he understood. So then we went and met them both. And before leaving he said you have to go to Matramandir before you leave. So the April, me and my father it was April 3rd one day before the final arrival of Sherbindo. I went to, I went and entered Matramandir. I remember that time I had, they had this punching, punching system. They had this card where you have to go and you have to fill this card.  And then they give you a kind of card where you can punch for five, six times. So I did the whole process and went back. I got this multi-card paper and I went to that guy and he looked at me and he said you will have to come on this date. And he said four days later. I looked at him not understanding what it meant four days later. So do I have to wait for four days or do I have to stay here? I didn't understand. Then I just told him without knowing what it meant. No, I was supposed to go today. I didn't say I want to go today. I said no, we are supposed to go today. He looked at me and he looked at the card. I said okay, then you can go. And we entered the bathroom there. And then my father came out and we talked to someone. And they told my father that here you can build a house and it does not belong to you. My father told me isn't that fascinating? Actually nothing belongs to us. We should have a house here which does not belong to us. We should pay for it. And we should stay in that. I said yeah, yeah, yeah, yeah. Not knowing because for me mother and Shraabindo came on earth. So the entire, on the universe. So the entire universe has become pure. So for me ashram, Auroville, Goa, it doesn't matter, it didn't matter to me. It mattered to me that they were close to Andromeda galaxy and in the Milky Way. They were close to these two beautiful galaxies. They were there in the universe. They did not come for just two physical locations. They came for the universe. This was what fascinated. So it didn't, I was staying in Auroville, okay, okay. Auroville, yes, okay. I told my father and went back. And after a few years, I got a job as a theater teacher in a school. And my father told my sister, now what I have to do? I have nothing and passed away. Yesterday was his 20th anniversary. My first guru, my mother also passed away in August. My another guru, Ambashankar, also passed away in August. A few days after my mother passed away. My eternal guru, Shri Urbindo, is born in that month. So I said, you are leaving me to him. And I folded my hands to them. And I folded when my father said, you are leaving me to my guru right now.  So I decided, as a teacher, I decided my time right now. It's a time for practical life. So SS Kulkarni tells me that if you have any plans, please let me know. I'm going to Auroville and Ashram. And I will try to see if that plans are successful. And I told him, I have a plan of starting Liberatua de Iblission. He said, what is the purpose of this? And I told him, I want this land. And it has to be like this, something like Auroville, something like this in Goa. He said, okay, there is a project like this called Ushakal Shri Urbindo University. And there's a trust in Goa which does this work. I jumped on them because they were close to where I used to teach. So I went there and I told them, I am so and so. I teach in this school. It's Manavika school and I would like to be of help. I don't know how to do things. You tell me I will do. I have all the resources. I have bike. I'm a performer, so on and so forth. And they started spreading the news. This boy from Auroville. And every time I had to go, I'm not from Auroville. I'm from Panjim. And they would call me the boy from Auroville. So every time I would come here and I would try to study administratively how this place works so that it could be implemented there. Seven years, many years passed. I don't know how many actually. It looks like many. And my mother asked me, what are you doing here? You go there, no? I said, yeah, that makes sense. It didn't work because most of them became old. Some got Parkinson's disease. Some left from there and went and settled with their daughters or daughter-in-laws. And just things went and that trust, Ushakal trust just dissolved. They were all devotees of the mother and Shubhindo. They were DySPs. They were SPs. They were professors of college, principals of college, all such important people. And so I said, yeah, maybe I did something wrong by doing, if I had not gone there, they probably would have done. So I came here in Auroville. Finally I had got the funds to do that. I came in 2007 and started working in Matramandir and Deepanam school. And said, yeah, I will check out how this place works and see if I go there. And everyone who would ask, I would tell the same. You know, I've come to check out this place, how it works. I know the ideology. I know everything, how it works. You know, the inner stuff. I know how it works. That I can read in Synthesis Yoga. I have read. So all this kind of stuff I would tell. But I don't know administration. That is what I want to learn. And I will go and implement this Ushakal project and this thing. All these grand plans. And that time Jill comes and tells me, we require a MIME artist and all this person who does movement to act as Hamlet in a play. And in that process of a MIME artist doing a role, I remember the time I used to write plays and I would not remember my own scripts. And now I had to play Hamlet. And during that process, it was a process which brought me inside Auroville. So nothing mattered anymore. Not the economy. Not the style of operation. Nothing mattered anymore. But Auroville. But it took time. I remember the time. Almost six months I was in haze when I used to enter Matramandir. I don't have memory of those six months. I only have an emotional memory. What I saw, I don't know. What I did, I don't know. Where I went, I don't know. I have no memory of six months in Matramandir. No memory of what happened. Except when I started doing Hamlet. So I realized later when I was doing Hamlet that I had to buy heart everything. And I told Jill, I am bad in memory.  My own scripts I don't remember. What will I remember? Hamlet. So everybody started saying, we know all our things. I said, Jill asked me to do some movement. And I know Marcel Marceau's wife had done the entire play in Hamlet in mine. So I knew it was possible. So I thought I would do some kind of movement. We would put recording of the voice and I would do... But no, I had to buy heart. So I went to Dorothy, who was my guide in Matramandir. And she could see this in me. And she said, what happened? I said, I have this problem. She said, don't worry.  You know, why you have to leave Matramandir? Do it here. So I took Hamlet and did production on socks level where everybody wears socks. That is during the cleaning time. I remember learning from my father how to learn. But that time I learned that actually if we do not put in action those realms, they will not be true. They will not come down on earth. So that action I learned here in Auroville, how to merge that two worlds. Always, always I was trying for the external to see those, to merge those two worlds in the external. But they were always merged. There is no difference between the impractical and the practical. They are merged together. They have always been. That I understood while reading, while doing that production, while doing that roundings and with Hamlet in my hand. My love for Auroville, I realized a few years later when I went to give a workshop in Sinfropel. I had a problem with my visa. It was one day prior to the flight, it was expiring. So they detained me and they thought that I wanted to become a European citizen or something like that. So they asked me. There was an interrogating officer who came, a lady with impeccable English and she started telling me and she said, so why you are here and all that. I said I am for workshop. I have come to help. My sister is here. I have many sisters everywhere and when she called the main chief officer and he did not know, he was speaking in Ukrainian and she asked many questions on his behalf and he asked me one question. Do you want to be a European citizen? I said no way. I don't want to be any citizen of any country. I live in Auroville. I have Ukrainians here. I have Russians here. I have Japanese people here. I have ballet teacher here. I have theater teacher here. I have people who I worked with Marcel Marceau. I have people who I interviewed Marcel Marceau seven times. One of the people who I founded Auroville Radio. Daniel. I have people who I worked with stalwarts. Why will I go there? And that time I realized, oh my God, I love this place. I didn't know that. That was the practical example of me, how much I loved this place. So for the next half an hour when my sister is sitting up, that guys, that officer was asking me about Auroville. So how do we visit there? What is it? Who is Mother and Shobindo? What do you all do there? How does it work? How does the thing, then I had to tell him there is embassies and embassies have connections. Yeah, yeah, I remember some of the people had come here. And so I realized that day why she made this place. She made this place not because that we Aurovillians are united here. She made this because she made this as an experimental laboratory. An experimental laboratory where sometimes hydrochloric acid and nitric acid mix together and create an explosion. Which I always knew that in an experimental place there are bound to be mistakes. Before coming here I would think, what are they doing? What is this? What is this thing? I would look at the ashram. Why are they so austere, so without humor? But I realized, I realized one thing. These are places of experimentation. These are places and they are, they have done two places of experimentation. I do not know how many more million places Shobindo and the mother have put these bases. Physically and practically we know too. And I have seen them experiment with us here in Auroville. I would like to invite now an experiment or as what we call in mind exercise. I would make an exercise of calling a very close friend of mine. His name is Sanjay Biswas. He is an experiment just like me. Sanjay Biswas I met him here in Pondicherry. I would like him to come and sit along with me. I met him here in Pondicherry. Now this experiment is born on 15th August that I got to know in Pondicherry. He had an experience or an exercise where he in UP, he is from West Bengal. Again from Kolkata from my master's home. In UP he was there and during the lockdown he suffered great loss. And he went into terrible depression. This man who is also born on 15th August. And he went in terrible depression. And he was almost three and a half months alone himself in one room in Uttar Pradesh. Look at this experiment. And he had to go through it. We were all guinea pigs of this experiment.  And so he attempted what we call as suicide. So when he attempted he attempted I think twice. And fantastically he failed. Two failure attempts.  He failed to suicide. So after failing to suicide he got an inspiration. A fantastic inspiration. Sir can you tell me that inspiration in Hindi? In Hindi can you tell me? I will try to translate it. Tell that inspiration in Hindi. It's a fantastic punchline. I don't know what is this punchline but it has changed a lot of people. Am I right or not? Yeah but he has changed. And I have seen him change here in Auroville with a person who lives in Auroville. What he says is when we go through immense depression and sorrow we decide to take a step of taking our life to solve that depression. So what is our intent to solve that depression? But we are not solving that depression. We are marketing that depression to the people around us. When he came to Auroville I invited him because he travels all over India by cycle to do this. Someone had suggested to him please go by cycle your depression will get less and it did. And he decided to go all over India. Next month he goes all over Bangladesh. 64 districts right? 64. So in next month he will travel all over Bangladesh to help people come out of depression. On the way he just goes find somebody and tries to help them. Here he came and I know a friend who is like my sister. So she never reveals herself to anybody. Now she is in Auroville. She is in Auroville. An experiment. He also is an experiment. So am I. So he comes and sits down and we are having tea in visitor center. And he starts talking to her and she starts telling her problems in a way to contradict him. No you can't do this. It can't be done. You are wrong. Within five minutes he opened her up so much that she gave him her number. She talked to him for the next 15-20 minutes. So it did not become anything about me. They started talking. And then later asked me is he coming back? So I think hopefully we will meet her today or tomorrow. So is he coming back with such enthusiasm and a ray of hope. See how things work. How the experiment works. The experiment is not happening here alone. It is happening through this place, through the whole world. Thank you very much Sanjay Ji for this experiment. And thank you for being part of this grand experiment. He started the trip along with us. We had performed in Shorbindo's house on 5th and 6th. We did calligraphy. So I will try to give you a gift of Shorbindo's. And after that I will end. Shorbindo says he has, yours is a punch line. But his is a mantra. When Shorbindo says it will be a mantra. So I will attempt at writing this mantra in calligraphy. Just as we did it in Kolkata on 5th. We had done calligraphy over there. So similarly I will try to do it. And gift this to you. The mantra is all life is yoga. This I have done in new calligraphy. Inspired by Leonardo da Vinci who used to write mirror image. This I have written in English. All life is yoga. Sri Aurobindo. So I have written from up to down. Thank you. I will end with Shorbindo's mantra. Shorbindo's Gayatri mantra. Parashyadhi Mahi. Yannah Satya Nadeepaye. Savitur Varam Rupam Jyotih. Parashyadhi Mahi. Yannah Satya Nadeepaye. Savitur Varam Rupam Jyotih. Parashyadhi Mahi. Yannah Satya Nadeepaye.


Hey guys, it's Nate, AKA The Foot Accountant. Welcome back to the channel. Yes, we are in the midst of the team of the season market crash. There's a lot going on with the game right now. And we're continuing to talk with this and about this market with team of the season on the horizon with the prices dropping. Did we see a low point yesterday? And as we see some stuff rebounding back, was the lowest point yesterday? Well, I'm gonna answer that question right off the bat and say no, it was not. But I wanna talk about why you're seeing some stuff bounce back on the market already. Even though it's little amounts and also is the panic selling going to continue? We're gonna talk about that, of course, as we head into the second half of the week where you have weekend league and division rivals rewards and people looking to buy teams. And a lot of people have panic sold and that panic selling can only go on for so long because at some point that panic selling is going to stop and you are going to see people go back out and buy cards. Because when people have their coins liquid in that top left hand corner, they don't sit there for long. People are doing SBCs. People are gonna be wanting to buy cards through a team and all sorts of stuff like that. So let's start here with this team of your Mbappe card. The high tier, the really, really expensive cards today, icons, icon moments, team of your cards, just very meta expensive promo cards were the ones that got hit hardest by the crashing prices yesterday on FIFA. Now we saw some of the biggest drop offs yet. Yesterday on Tuesday, like this Mbappe card again who has been dropping down, he was 5.5 mil. Look at this, like Tuesday morning. Tuesday morning he was 5.1 million coins which is down already, basically a mil. He was 6.1 on Friday, April 9th at the start of the week and leave this past weekend. And of course you've seen crazy, crazy drop offs but he was even 5.1, 5.2 mil, went all the way down to 4.8 on the PlayStation and is now back to 5.1. So we're seeing interesting fluctuations with these cards as they have dropped off. People are kinda, it's kinda going in like rounds of panic selling and that's what happens on these really rare, high tier cards. And there's been some actual profitable fluctuations from these because you see a couple people that decide they wanna panic sell, they keep undercutting each other, a price hits a very low amount and that panic selling stops and the card just naturally rebounds back up and you can possibly pick up some sales. So that is what we saw yesterday on this game was we saw crazy undercuts. Stuff got a little bit too low for it still being over a week until we are in team in the season and some of the stuff rebounded back up. Look at this Ronaldo 5 under 6.1 mil from 6.5 down to 5.9. Right now he's back to almost 6.162. So we had fluctuations on the high tier market. Bruno Fernandez was 2.2 million coins flat. This Alfonso Davies was 1.05. Actually a crazy market movement today was this Sergio Ramos who was 1.25 apart from that one small undercut there. This guy was 1.28 went all the way down to 1.08 mil and rebounded back up almost not quite 200,000, like 150,000 coins on the market. So some of these cards got panic sold big time. Now I wanna kind of explain what happened and why this happened and will we see prices go that low again? Well, easiest to answer that last question is yes. We will see Ramos is probably gonna get back down into that 1.08, 1.09 coin mill range. I wanna talk about why you saw the prices go down and why you've seen this rebound back. I don't think we've hit the low point. This is not gonna be the low point. I still think that as team of the season starts whether it be during most consistent team of the season or on that first day of prem team of the season and during that week of prem tods, a lot of this stuff is still going to go lower. I don't think that with this team of the season problem and I've said it a couple of times, the cards that come out during team of the season and how supplied they are on the market, the SBCs that we get the upgrade packs that everybody is going for. It's all about those team of the season cards right away. People may go into team of the season and they say, man, I want to search a Ramos card for my team. This is the center back that I want. But what happens is EA drops those tots cards and it kind of distracts you from that because there's new content that's coming out. The cards look insane. And that's what happened last year. And I think it's gonna kind of happen like that this year too. But Ramos at like 1.08 earlier today, I think that's if you're somebody who wants to buy a card like this or if you're watching panic selling, some of the prices that we saw earlier yesterday are gonna be good reference points for next week after this weekend or maybe even on Friday, whether we get team of the knockout stage or not, which right now it's looking like we're not gonna get team of the knockout stage because we had the Weekend League Plus objectives added for this Weekend League. And when they add those, usually we see no promo being run. So potentially, we'll talk about this a little bit later too, but we might actually have a loading screen this Friday, a four team in the season because the voting could start for most consistent. So anyways, we'll talk about that in a second too. But Anzu Fatih was another card that I was watching today that had a huge sell-off and then a rebound. He was 1.4 high in the mornings. 1.2 on the Xbox went down to almost a million coins on the Xbox and to 1.3 flat on the PlayStation and is now rebounded back up on both consoles. That's the kind of panic selling that you saw yesterday. And what you're gonna remember is, you're gonna want to remember, if you have your eye on any of these cards, when you're trying to buy them at a low point, as we get into team this season, remember some of these panic selling drops. Remember, this card literally went down almost 200,000 coins and now he's kind of rebounded back. So just kind of remember, all right Fatih was at 1.3 mil at his absolute lowest or like Sergio Ramos was down. This soccer card has been bouncing, he was 950 at one point today and he was just back up to almost 1.1 mil. Well, now he has actually come back down with a nice undercut there. But you saw big time fluctuations yesterday. Even cards like Gold Neymar and Gold Mbappe, it's kind of like the panic selling hit a rock bottom for a few cards and people said, hey, this is too cheap. Whether it's just for this weekend or whether it's for team of the season and I'm buying these cards, I'm gonna go and splash the cash. Neymar on Tuesday was 285,000 coins all morning until the content drop and we didn't get anything big except for that Saoul SBC.  So that's why you saw a bit of a bounce back in the market Tuesday after the content drop since there was nothing big that came out. And now if you look at some of these prices that are here on my transfer list, you're gonna see, Kane at 610K, you know, yeah, this card is still down a lot. He was in the 700s last week, he's bounced back to like 650. This kind of viral was 1.05, he's still right now about 1.15, so a nice bounce back there, but you saw a lot of cards move around. You saw a lot of panic selling, this Bruno Fernandez who's actually getting upgraded today to a 92 was down at 1.05, which was ridiculously cheap. I didn't have the coins to buy it at the time and I'm kicking myself because that would have been a great flip to have. So that's the stuff that we saw yesterday on the market. Don't look at the prices that you're seeing right now on FIFA and think, I'm never gonna see prices that low again. I missed the buy time because 100% you did not miss the buy time because Goretzka 340, that's low. Holland 438, that's pretty low. Ube McConnell 228, that's pretty low as well. Whether it's high tier, mid tier, or just low tier cards, this Mane is 1.12, he was down at like 1.08. You're gonna see those prices. Team of the year cards too, right? You're gonna see those prices down at where they were earlier today or lower, I think, whether that is on this coming weekend or whether that is next week with team of the season actually starting, I'm not sure, but you're gonna see prices get back down to where they were because what happened again today was a lot of the high tier players on this game decided, hey, I need to sell because these prices are gonna keep dropping lower. They keep dropping every day and they're gonna keep going lower until we actually get two team of the season.  Now, the reason why I'm saying yes, I think prices are gonna hit lows again and lower than what we already have seen is take a look at this Mbappe card. This is obviously last year. He went from 5.3 million coins. Team of the year Mbappe, 5.3 million coins. He dropped off like 700, 800K. And then he kind of held that price through the first week of team of the season. But then when this tweet right here last year, people saw this and they went and they panic sold everything. You see two 99 rated cards, big time players, Aguero, Rashford in the team, Richarlos in the team, Adama Traori, they juiced Prem Tots last year with the 99 rated cards for De Bruyne and for Van Dyke as well. And you saw basically the high tier market again that wasn't Premier League cards drop down a ton during that first week, right? This is also shapeshifter at all who at this time of the year last year, 600K at the very start of Premier League team of the season drops all the way down to 502 the next week and then the next week after that, 393. So you're gonna see prices still even at the startup team of the season drop lower than what they were pre-team of the season. And that is why I'm saying you're gonna see a lot of these prices go down even further. So if you feel like you quote unquote missed the buy time, I wouldn't feel that way, especially with how we had team of the years this year with not as good of boost, not as good of stats and not as high of ratings. I really think that again, this is gonna be a year where we see the 99s for team of the season. We might have a 99 Bruno Fernandez, you know, a 98 Kevin De Bruyne. So we might have big time cards like that. And we'll talk more about those movements and for the team of the year cards and what that means. But I just think that if you see the market rebounding back and honestly with the Weekend League Plus objectives, you know, that tells us a couple of things right off the bat. If we move into more of what's gonna happen today on Wednesday, Weekend League Plus objectives for this game doesn't guarantee that we're not gonna have a promo coming this weekend. It doesn't guarantee it by any means, but what it does kind of tell us and give us some insight to is that probably not. Two things we know from these objectives, right? Probably not getting a promo. And the second thing is team of the week is gonna be shocking. Every time they release these Weekend League Pluses, they should have released it for last week's team of the because last week's team of the week was probably one of the worst ones we've ever had. Can't wait to see how they top that this week today when they drop the new team of the week, 29 for whatever it's gonna be out in red picks for this upcoming Weekend League. But when there's nothing to do on FIFA like there is right now, no promos going on. Of course, it's all about this team of the season hype. You're gonna see the market, I think, rise post rewards on Thursday. And if there's no content today on Wednesday, you're probably gonna start to see the market pick up a little bit even in the Thursday afternoon into the evening timeframe and later and into rewards. I think you're gonna see that. So that's one thing that I'd be looking out for today. I think Thursday flipping investments is gonna be. You're gonna see a nice little rise after rewards. So there's probably gonna be buys that you can find today. If there is more panic selling today on Wednesday, I would honestly look to get involved if it's on high tier icons or high tier meta special cards. I would look to get involved. I bought a Rashford today at 805 and I just sold it at 897,000 coins, right? He's 885. That was a really nice flip because I knew this guy was like 920, 930K plus. He went all the way back down. It's a rare card and he rebounded back up. This Stoikov was in the 1-2 lows. He has rebounded back into the 1-3 mids.  They just get rare at night time and people start panic selling when they wake up that next day as we have more and more rumors about team of the season coming. So I'm not entirely sure if that panic selling is gonna be trending again today. I feel like a lot of people who have just panic sold their cards and now we're kind of in limbo and with people seeing potentially no promo this weekend, they maybe will go back and buy some stuff post rewards on Thursday. Now we do have a couple What If cards getting upgraded today. I wanna touch on this. I think Daniel Was is getting upgraded today. If you have this What If card, you know what to do. You're selling it pretty hype. I'm pretty sure he's like 100,000 coins after being around 80K. Yes, this card's gonna look really good when he gets upgraded. But the links on this card are just not the best. He's like 107. Is that what this card is for price? That's kind of crazy. This guy's like almost 110,000 coins.  But you know this time of the market right here, I wouldn't be chanceing it with anything like this to continue to rise because all the hype is around team of the season. I think that might be one of the only cards that's getting upgraded today. Other than that, we do have Bruno Fernandez headliner that is gonna get upgraded. This one kind of fell under the radar. I'm gonna be watching this card very closely. 1.15, he's dropping back down again. If I venture to see like a 1.1 flat on this card on the PlayStation, I'm gonna get involved because this is going to a 92 and there's gonna be high pre-content with that card potentially going back up. So, one other thing is SPC fodder. You didn't see of course with the foot player days promo ending we didn't have a crazy amount of fluctuation yesterday. Stuff went low and kind of went high pre-6 PM again with people saying, hey, rumors of icon SPC coming today. Of course, that is some of that could come today on Wednesday as well. Who knows? Not expecting it, but at this point, who knows? I'm probably thinking about cashing out on some of my fodder that I have. I might end up taking some of those losses just because I wanna have my coins liquid heading into this weekend. One week before team of the season, I wanna be full liquid and be able to take advantage of these fluctuations because if you can time them perfectly, there's huge money. There's huge, huge money in them. Now, if there's anything that's kind of risk-free right now that you could put your coins into, I would not recommend gold fodder. I mean, there's less of a chance that that could rise in the short term I think than there is for some of these informs. A lot of these informs have really dropped down. A lot of people are looking at this cost-ish left mid card for 38K as an 86-rated inform saying, hey, the next cheapest is in the 40s and this card with the Bundesliga left mid links, this could be easily an upper 40,000 coin card or higher than that in a couple of weeks. During team of the season, they require a lot of informs. Last year we saw informs go crazy again during team of the season. So, not saying this is gonna go unassigned on or whatever but if you buy one or two of these informs and stock them in your club, if you sold your team and you have some coins liquid, that could be a quote unquote safe investment where you're putting some informs in your club for whether you wanna do SVCs during team of the season or you just wanna make that as some sort of investment. So, again, today on Wednesday, I'm not expecting huge content. I do expect a little bit more panic selling and if you're gonna be watching the market today for panic selling headed into the 6 p.m. timeframe, the number one place where I would look is icons, middles, babies, primes, icon moments, all of them, right? Cause of course these guys are down a decent amount in price. I saw this block at 750,000 coins earlier today being panic sold and look where he is right now, 870. This guy is up 120,000 coins from where he was. This Puskas car was three mil flat. What's he doing right now? He's still pretty low at three mil flat. So, the big thing when you're looking at panic selling, right, is this stuff right here. I'm gonna use this FATI as an example. When you see them on that specific day drop a lot of coins, right? This was 1.5 mil almost went down to 1.3 flat. I said, hey, a 200K drop off, that's a bit steep. I don't think he's gonna go back to 1.5 flat but when I was sitting here in the daytime when I didn't have enough coins to buy this on stream and didn't find quite frankly a good enough undercut that was sitting at 1.35. I never saw the 1.3 but I knew it was like, hey, this card might not go back to 1.5 but he could go back to 1.4 so he could rebound a little bit just because of rarity and look, he's almost back to 1.4 so that's the kind of stuff that if you're looking at panic selling today on Wednesday if there is some, make sure you're looking at the drop on that day in the last few hours because there are gonna be flip potential on these cards and it just doesn't have to be icons. Wow, 2.6 for KaKa, man. This guy was 2.2. See, these are the fluctuations that you can have in a scared market like this. People say, oh wow, stuff is down, you know, I don't wanna mess around, I don't wanna buy any of these players it's just gonna keep going lower and it makes people scared but especially on PlayStation 4 I'd be a little bit more careful on the Xbox because you don't have as much hype for the market there as much demand but this Ben Yetter was like 860K he went all the way back up to like 970, I think at one point, so fluctuations galore on these cards right now on the game because that's what happens when you have, you know a couple hours of panic selling and then a couple hours of people saying, wow that's too low, they buy it back and then boom, all of a sudden that card has jumped up in price you get one or two sales and boom you just have yourself a very nice flip right there like this haul was down to 400K and I was trying to be greedy and find an undercut and look where he is now, he's back to 440 and you know what, I missed out on, you know 10 to 15K profit on this card because I was trying to look for a good deal so watch the fluctuations I don't think we have seen the lowest point in the market yet I just think we saw a little bit of an inflection point we got to a low for where we're at right now and it just kind of went back up based off of rarity, based off of people saying hey that's pretty cheap and I want to get involved with that card so if you're rocking an untradable squad for this weekend good luck, have fun that's probably the way to do it still because I think a lot of this stuff is going to continue to go downwards after the weekend league, Friday one thing we could see is a tweet from EA Sports releasing the vote for the community team of the season which we should be seeing as the first tot squad if that date of April 23rd is the actual team the season release date that would be something we could see the voting start a week ahead of time so just kind of mentioning that there and yeah, that's kind of how I'm feeling about the state of the market right now I wanted to bring you this video today and talk in depth because I know a lot of you guys have sold cards you're like man, should I have bought yesterday I don't think you would, if your plan is to buy when they get a lot cheaper I think you just might want to wait another week see what happens on Friday if they do release any loading screen if there's any panic that is caused because of that and we'll just continue to monitor prices and trade on the fluctuations don't be scared to make coins right now, right? Scared coins, don't make coins you can't make coins if you don't spend them so take a few risks if you want to do your research, watch the card, watch the graphs and just you'll figure out which cards really continue to sell because they're hyped they're meta and people want them so there are ways to trade right now 100% last thing, I know I was kind of ending it off right there, I did want to make a quick shout here Prem Rare Golds are already rising up they were actually 1,000 coins at one point earlier today now I'm gonna dip back down but people are going full send in investing in these rare golds right now already and going on a sign of before team this season because sometimes those upgrade packs require those rare golds now remember we saw this happen last year too it was very invested in and honestly the cards didn't move much and then they would kind of move up a little bit after the supply was done on the weekend after people had already sold their cards off so you know I wouldn't necessarily think to recommend to invest in that stuff just yet I would probably hold off maybe during rewards tomorrow those go back down to 650 coins if you wanted to stack your club I guess with Prem Rares that will be one of the earlier team of the seasons that will be coming out so if they do require Prem Rare Golds for upgrade packs then that could be a little bit of an investment there too but we're still trying to make some coins to raise that coin balance pre-team of the season which is almost upon us boys so that's why we're making a lot of these videos and talking about a lot of this stuff but if this video helped you at all today smash the thumbs up on it comment down below if you have any questions and subscribe if you're new it's been Nate the Footage Hound and I will catch you guys later peace out


An echocardiography is a technique that's been around for several decades. It was actually first developed in the First World War as a sonar type technology. So it's based on sound waves that bounce off different organ systems inside the human body. There's no radiation and it's not invasive. It's a very powerful tool that we can use in research because it tells us about the function and the structure of the heart. So it's exciting for the students because they get hands-on experience with these imaging techniques which are entirely safe. There's no radiation to them or to the people that they scan. It's great for us to be able to use that because it's real hands-on physiology which means that we're actually seeing the structure and the function of things change in front of their eyes and that's a really powerful teaching tool.