Hi, thanks for checking out our video on growing potatoes. So we got a couple different varieties of potatoes and started them ahead of time by putting them in boxes and milk crates so that they could grow and chit or they could start their little sprouts. You can get more potatoes out of them by cutting them in half or even in quarters if they're big enough as long as you leave two eyes or sprouts on each piece and let the skin harden over for one or two days before you put them in the ground. So I put them in cool windows so that little sprouts would start. Then I went and I dug rows. I went about six to eight inches deep and turned over the sod. I leave the sod sitting on top, it'll kill the other grass and I dig all the way down and then I clean out the bottom of the trench.  It wasn't real exact but I'm spreading it out with a scoop here that's well composted manure. I spread that through each one of the trenches. Then what I do is I'm going to take the box with the potato sprouts in it, the spuds, and I am going to do this old Irish thing I saw on an old video on YouTube basically to space them out.  That spaces them out at about 12 to 16 inches. I'm then going to spread a little more manure on top and then I'm going to come along with my rake and break up the clods in the mounds and scrape about six inches of soil onto the spuds. This covers them loosely and still leaves me plenty of soil that I'm going to be able to mound up on top of the spuds once they've sprouted. Stay tuned for later videos on how they're growing. Thanks for checking out this video. You can find more videos on our YouTube channel. You can also check out our website lowtechinstitute.org. Thanks for stopping by and having a look.


We're getting back guys. Welcome back. So like I said, I'm going to be down in the Florida at trade station at the next week. So hopefully get to see you guys a couple of times over there If I said, can you send me your driver? And what you good? Why don't you pick me up in your Ferrari that you all the money been making lately All right, anyone in the meantime, let's talk about what happened yesterday and what's going on today obviously shut down is still kicking in and I know they have a vote that's coming at the end of the week You know, I'll be honest with you. I you know, you had some good good You had some really good announcements that came out regarding what happened with IBM IBM spelled it wrong. There we go. The IBM is doing pretty well You know up 7% stock is gapping up really really nicely. Let me just fix my time frame That was yesterday's clothes and I'm doing too well right there.    I just can't be how much hatred there. There is out there Oh, yeah, I mean can't people just come to a compromise. Let's just go. We'll just get along for crying out loud unbelievable But it's gonna, you know, we're gonna keep a close eye on it and let's see what happens regarding about the market though All right and as Regarding about what happened yesterday a couple of things did make some nice moves I know we had class but some of you guys did really well There's actually some of the stocks that we traded that are going to be kicking in obviously the PCG's one of them I want to look at that really quick, but a couple of stocks the ARNC Bring that up here There we go. So the ARNC was actually a really really nice move yesterday This was a nice little dead cat bounce for some of you guys missed it you could see a thing got crushed and right in pre-market just kind of went up and Made that nice little move all the way into the open only bad thing about it Is that she would check for a couple of pretty nasty shakes You had to be a little bit more of an advanced trader and a few guys did pretty well. I mean Neil Kay He made about 48 cents Phillip made 79 cents give those guys a round of applause. Good job There you go Jerry also made about 60 cents from what I remember So that was a really nice push and pretty much it wasn't you know, we didn't have a really really good pre-market Yeah Like a like a good good list. Well, listen, we saw like last week You just need one, you know like N bot and you know and then obviously this one the PCG this one did pretty well and You know PCG is going back on my list a couple of you guys did really well on that one also You know who did well Nancy did well Bill did well everyone did pretty well be 42 cents Nancy be 25 cents not a lot, you know, she shorted it what was nice about her what I liked about Nancy's trade She shorted it at 835 which by the way that is an extreme gimme Major major major resistance levels at 835. So I just thought that was a great call. Thank you Nancy Now listen, I've been reading up on this stock PCG now you guys got to remember something very important I say this all the time you want to be a listen I'm gonna be doing a new webinar this week and it's gonna be a little bit different I want to basically I'm going to be doing a webinar regarding talking about you know how to make a living in day trading and You know why you want to day trade and why it's such a big failure rate and let me just tell you just really quick just a just a You know a tip, you know in regarding a sneak peek What I'm gonna talk about is that a lot of people want to swing trade, right? And they they mix and they think they think swing trading is day trading, you know And they forget that day trading running out the same day now. I like swing trading.   I just like you know what I mean like you had great opportunities So it happened when the market, you know took a we had a Christmas crash, you know I know some great opportunities out there, you know, I got some really good deals on certain stocks now Would I day trade some of those stocks? Absolutely not But you don't know how to swing trade those stocks if you don't know even know how to day trade So my point I'm getting to is like this PCG, you know, I'm like really I'm really like on the fence with this Is it a good good swing trade a lot of you guys look at it's a form, you know It's one of the yeah, we talked about this yesterday, you know, and and the thing is this There's gonna be a lot of PCGs out there. There's a lot of them out there Okay, every day if it's if it's a pot stock if it's a you know If it was some of you remember the cryptocurrency stocks, you know, they're there every day and every time you do a trade You learn from it. So what I'm trying to get to regarding about this PCG. I Know a lot of people are thinking and I was almost on the fence like you know what this might be a good buy as a swing trade Listen, I'm a little cautious about it because the company announced that they were looking to file bankruptcy and the company files bankruptcy You know, maybe you buy it when the bankruptcy happens, you know after the news and if they don't I mean, you know Listen, it's on the fence. So I just want to be very careful. You're seeing all this volume going on in PCG I mean with this stock was trained 200 million shares. It was unheard of that was all high frequency trading So just be very very cautious and be very concerned guys I know some people getting some, you know, are on the on the fence like, you know, I You know Want to do a little swing trade on certain stocks, which ones are good buys and so on and we all know we're not gonna be trading stocks like Tesla and Netflix, you know 200 300 dollar stocks, you know, but you know, we all want we all want less risk more reward so, you know, listen, there's some opportunities out there, but as a as a As in a trader like we're doing just always remember the tip of the day is we always risk the least amount of money is possible The high amount of reward. So anyway, that was basically what happened what we traded and what's going on That's your tip of the day. Now, let's go on talk about some of the stocks are moving this morning Now the one that I found this morning was doing pretty well and now she's doing these nasty shakes the SFY now Stocks up 12% eight over 800,000 shares trading 145,000 you guys got to remember just the big thing I was pointing out this morning about pre-market is that you got to be careful on the spreads, you know People don't understand that it's not it's easy to buy it It was you know, it's very hard to sell it, you know And you know where you know that is what we covered in the phase one class So you got to focus on those spreads guys remember don't ever look at a stock like oh This is the stock I can make money on yeah, they all can make your money But most of them make you lose more than you can make because the spreads are very very big We focus on it remember what we cover in class is the three T's tradeable trend and trap so the only thing I was concerned about this when I pointed out as a spread was a little cautious But anyway, she's doing okay. I'm gonna keep an eye on it I think it is going back on the watch list the SNG X is another one that Also had a nice little move half a million shares up 30% cheap little stock love it, you know buck 32 Won't that one? You know not really picking the trend that I like, but I want to keep an eye on it I want to get a kick out of this one the AVCO. We did great on that one. How about that one took off, right? The eight VCO, what do we all say? Whatever comes up. I was crashing down Whatever goes up comes down twice as fast on the way down So we had our big moves on this one. You saw what was happening So, um, you know the stock was three dollars went to 13 literally, you know up what? 500% you know, whatever it is 400% in about a couple of days So listen stay away from it guys. This thing got pretty damn nasty to AVCO All right be very very course of it. We made our money.  Okay, you know, you're not right. I get a kick out of I see people I'm getting tweets from people that I'm watching. I'm just I'm always Learning and seeing okay, what are my competitors are doing? You know, what are they looking at and I just get a kick out of the stock is listen You deal with the best traders on Wall Street, right? Well, I would rather go go trade a $7 $10 stock and Try to make my 500 then a thousand dollars and try to go trade a hundred and thirty one dollar stock making the same money It's it's it's just you know But the good thing about it is gonna help the market and this will trigger other stocks that within its industry So that's how you usually supposed to trade it, but IBM the same thing and the same thing with Tesla so So Tesla listen stocks taking a big hit two hundred and thirty two dollars stock Just guys just maybe some of the stocks might reflect from it maybe IO or something like that, but listen, don't don't sit there and Focus and listen too much read between the lines focus on what we're trading on So I just want to bring up because obviously that they've been all over the news today So I want to bring them up Stocks that I'm gonna also be watching as I'm gonna watch his VIP s some of you already know about it You've been watching it in pre-market. She's doing pretty well She's got major resistance levels at a buck 98 focus on the iceberg orders on the matrix You can see right there. You got some big orders out there already probably gonna prevent it from going higher The PCG is gonna still be on my watch list, you know, remember we got a brick brick wall right there right at 837 So it's got to break that and then the Crohn's The CRO NS I told you this yesterday is one of the stock that I actually did a swing trade on it Because you know, obviously I chased it, you know looking at it where it was not just literally not too long ago But you know 10 ounce 15, but it's breaking all-time highs and just remember something very very important Some of the biggest things we're gonna teach. I'm gonna leave you off with this one last tip. Okay? When you break through a roof of the building Okay, where is the resistance levels? Okay when you break through the roof There isn't any So that's right Lewis. It's the sky there is any so it's it's what we call non charter territories And you all have been here long enough to see what happens when we broke through all-time highs We saw it what happened with with TL the other pot stock ESL Y we saw it happen with elfin We saw what happened we see it happen with tons of tons of stocks out there so you guys got to remember that I Haven't have a problem buying a stock that's going higher You know, but when they break all-time highs and you're dealing in uncharted territories There's no one that's gonna prevent from going higher and that also can cause a Short squeeze that could show the tons of things that could it could affect So just keep an eye with one of the big things and it's not with this stock with any stock You know, so that's one of the great things that we're here to learn and also obviously make money doing it So let's keep an eye on those two So that's basically what we got going on this morning if there's anything else out there guys Just let me know.  Yeah, the SN the SN GX some of you guys are already looking at yeah I made a little pop like I told you Ben you already made six cents on it. All right. That's great Give him a round of applause but Basically is what we got going on now remember listen, there's a we found that there's always something opening up in the morning and If there's something opening up a little bit more when the market opens up We'll find some new ones But this is what we got in pre-market hasn't been so far the greatest list in pre-market this these past couple of days But overall we pretty much had a pretty decent week as so far All right, everybody listen good luck today if you're not it if you're not going to be here in a cyber group room You should be in class We got the phase one phase two going on and then we got a bunch of events going on this week Thursday Friday and Saturday, so look forward to seeing you there. Listen. Good luck everyone happy trading and You're not going to be in class. We'll see you back at 2 30 for the afternoon meeting so happy trading everybody All right in the trading room. Good luck everyone


The following is a presentation of TFNN. The Tiger Technician Hour with your host, Basil Chapman. Call now. Call free at 1-877-927-6648. Hi everyone, Basil Chapman on this Tuesday, Thursday of March, March 1. We've wrapped up the month of February with a candle that we wanted to see how we closed. We can talk about that in a moment. Let's just run the numbers so we've got everything in sync. So we've got minus 261 in the hour, 32,626. A really big move from 32,272 just four days ago. Up to 34,095 in two sessions, Thursday and Friday. Monday actually started off really weak and then there was a rally. I think it's the exact opposite of the day. We're rallying up. I think that we might end weak because you've got to put this in the geopolitical economic perspective. How can you not do that? When you think of this, think of when I'm traveling on the road, wherever it is, turnpike in Massachusetts, I-90 or we get to 84 going to Connecticut, go to 91, 95 all the way to New York. Whenever we see the traffic backed up, that's if we are not backed up, and for a while we haven't already been backed up, but we've seen a lot of traffic going in the opposite direction. I'd say to my wife, wow, I've been going two miles and the traffic is just backed up and most of the time you're seeing every third vehicle is a truck. And it goes on.  You say, wow, can you imagine a convoy? I remember yesterday at some point there was talk about, well, maybe it was Sunday, 11 mile contingent of vehicles and I guess they tankers, tanks or whatever in Ukraine. And now you hear 40 miles, 40 miles, I believe I might be wrong by a little bit, but 40 miles would be the circumference of Route 128, 95. That's the south and north, yeah, south and north. That's the circumference of the semicircle that envelops the greater Boston area. Can you imagine if there were just vehicles? So I don't know what this market is thinking, only being down now 300 points, there is a chance that the configuration is going to get a lot worse, the humanitarian aspect is going to. So all I can say is I understand how crude oil can be up. Over 100 is 102.07. I can understand why if I'm looking at the agricultural, I don't want to go through it again, but just exactly what the Ukraine has, Ukraine has 40 million people and there's an incredible amount of resources. So DP agricultural fund, which is trading at 21.28 up 35 cents, something that we've owned since the 13s back in July 2020. You can understand why these, look at this wheat, wheat at a new recovery high. It's in, it's at 984. This is leg E in the Chapman Wake methodology in the dating. It's a leg D in the weekly and it's only GCSE in the monthly. Look at soybean. This is a continuous contract of soybean. Made a peak E in the 17, was it? No, higher than that. 17.54 level. No, even that's wrong. 7.16. What am I doing here? I moved it by mistake. Sorry. So you're looking at the high of 17.16. Let's call it. And it plummets down to the 14 period moving average at about 15.79. And then it bounces, but it's up in the highs and it's broken the cup formation, left side, right side, price, time match. Soybean continuous contract is a leg B in the monthly chart. I mean, what are we thinking here? We're looking at the corn at 725. This is not a leg G. To me, this looks like a brand new leg C to the upside in the dating, leg GCSE. Maybe it's GCSE in the monthly. Only a leg C in the monthly. And you see this letter here. You see this B. That's before corn. I don't know whether it's split the contract. I don't know what it did. But at some point it was right here. That's in the 7700 area. And then it got reconfigured. And now we're in leg C at 725. So that's an incredible move that it's had since, since about the 180 level way back in 2020. So I'm the way I'm looking at this is. Yes, we are long. A vehicle within the index 100. But that's because of the extremely oversold condition and some kind of a balance is likely. Larry says we just limit up. Oh, my goodness. We just limit up. And that means this is a reversal of fortune. That's some point today. And it opens and suddenly is limit down. It's still way above the median. I could consider the H64 level 859 to 864 kind of. That's that's kind of any retracement. That would be a pretty good retracement, but that would still say it's still much higher than the lows just two months ago. Right. I love to look at this. Look at this. The 200 period moving average just as an icon, just as a vehicle, a trading vehicle, a tool that I always use. I like to use for subscribers to to intimate that if something goes towards or underneath and starts getting closer and closer, this 200 period moving average becomes a repellent or a propellant line so many times. So back in around about the 13th of September of last year, it hits in the 70 700 area and it goes peak ABC. The letters move because it gets smoothed out. E F alternative count B G alternative count C. And then it goes to the requisite D in the Chapman way methodology. These last time was a peak D high as well back in August. Right there. And then there was a sharp pullback. I haven't got these automated Steve Rhodes that hasn't done night has done a very nice job of automating, but the subtleties of the Chapman wave is the reason why I did still by hand. So peak D and pulls back where to do three times hit four times actually 200 period exponential moving average and then rallies to leg D doesn't hold back. It does have a big pullback and rallies to leg E today. So all I can say is that to dismiss and say that the market can independently find its footage. This is our market. I think yes, if you're looking at sectors, but know if you're looking at the general the general overlay of the market because there is just with crude oil going this high and really is an issue. All right. Let's get back to our story. And so the DBA as I say is doing very well. That's the DBA cultural fund. Let's just go back to what we're looking at. I'll just do this quickly. So that Chapman wave Roman candle right at the top at 48 1862 three months ago said to me just be real careful because if the market goes halfway into the week in a shorter time frame, you could test the lower range and break it. But we've done that and we're almost up. I think you can almost call this a second Chapman wave Roman candle. Are you looking for a way to consistently add winning trades to your portfolio? Tom O'Brien is here to help. Tom O'Brien has been successfully trading markets for over 30 years, a frequent contributor to TD Ameritrade Network and CNBC. Tom O'Brien founded TFNN over 20 years ago to help educate investors just like you. Tom's daily market newsletter Market Insights is published every morning when the markets open to give you the competitive informational edge you need to succeed. These newsletters are packed full of Tom's advanced technical analysis and are geared to deliver comprehensive strategies for a successful portfolio. Get Tom O'Brien's newsletter Market Insights today and try all of our products and newsletters 30 days risk free with our money back guarantee at TFNN.com. TFNN Educating Investors That's right. Information. Having all the information gives us the perspective we need to place the right trades at the right time. The TAS Profile Scanner is the premier market profile based scanner. Powered by its acclaimed TAS proprietary algorithms, this feature rich scanner instantly filters over 2,500 plus global financial markets such as stocks, ETFs, commodities, futures and forex. This powerful suite of tools leverages instant trade filtering and strategy formulation to show you emerging trades before they happen. For a limited time you can save $100 off your first month by using the promo code upgrade and you still get a 30 day money back guarantee so you have nothing to risk. Level the playing field with the TAS Profile Scanner which you can find under the services tab at TFNN.com. Sign up today. Sharpening your skills as an investor is like getting better at playing a musical instrument. You have to practice, sure, but you also need excellent instruction from experts. At TFNN you'll get advice and guidance from the authority in technical market analysis and it's not just dry tedious text either. TFNN airs live financial content streamed live on TFNN.com and TFNN's YouTube channel with Tiger TV. Live every market day from 8.30 a.m. to 4 p.m. Eastern for free. Each host is an experienced trader and gives their take on the market while taking calls and questions live from around the world. From the moment the market opens until the closing bell sounds Tiger TV has eight different shows with expert hosts to help you make the right moves with your money. Watch online at TFNN.com or on TFNN's YouTube channel and become the investor you were born to be. TFNN Educating Investors. Call now. Toll free at 1-877-927-6648 internationally at<PHONE_NUMBER>. My bones were back. I was down to 277. We're looking at the gold up 21. This is always, every time I've looked over for the last, I'd say the last week, looking over at gold. I'm a little surprised because I still consider it as an icon of fear. It's the go-to place, geopolitically and economically from countries and banks and really big players. And they're the ones that really move the price at times like this. And yet gold is not, testing the 1976 high that was made just four days ago. Let me just double-check. I said, I'm going to do that by memory. Let's see if memory is holding correctly. 1978. 1976.5, correct. So I would have expected that gold would be much, much higher. Why? Because if it was the go-to place, then I would anticipate that in some sense the safe haven places, I always say that when equities become volatile, meaning they go down in Wall Street parlance, money tends to flow to the safety of bonds. It hasn't done that for quite a while and I did a little bit briefly in the last few days. But so gold to me is a hedge in many ways. So the fact that it's come back off the highs today and it's lower than the highs of yesterday and yet the Ukraine situation is getting, I wouldn't say worse, I'd say very much worse in the sense that the general populace, I don't know about the army per se, I don't know about the army at all, but the general populace, you can train as much as you want, but you're not training with the ammo and you're not in the vernacular of army. You're not using the terminology, you're not using the strategy, you're not using this incredible equipment. So that says to me, either this is going to wrap up really quickly and it's going to be, I mean, Zolensky say, hey, I can't let my people die like this, we are surrounded and we have to give up. Oh, there's just an incredible amount of tactical moves and my thinking for a while now is why didn't they blow up the road so that you stole these guys, you got 40 miles stored and the engines are running, where they're going to get the gas from?  Hey, I'm not, this is not my area of anything. I'm just saying, I'm just thinking out loud here. So gold is going to be telling us something. Crude oil is telling us about a situation that is virulent because there's only a limited supply of crude. We've cut back every day, even now there's talk about cutting back and so the vulnerability of many countries because of the lack of potential of getting oil, we've got to consider that's really probably what's going on. The whole strategy of getting the oil out of Putin, I don't know if you can even afford to do that. How can you have 40 miles of tanks and you're going to not get the money that you need by cutting back on oil supplies? I don't know how that's going to work. So this is a complex situation and I think that at this point I admire the market for being as resilient as it is our market at this particular point. I just don't know how long that's going to last. Normally I would have said, hey, buy signal, beautiful pattern, look at this in the Dow. This is exactly what you want to see for a takeoff. You've got three sessions after the Thursday low that really had this V-shaped pattern and even if it stalls today, if there's a sudden moving to the 34,141 area, up 500 points, no, 34,000. Yeah, about 500, 600 points from here. There will be spectacular action. But at this particular point, you have to think that it's very select and I'm going to go back to say, NDX 100, this is holding way, look at this, holding way better, it's up 18 points and that's the reason for subscribers, you have a position in an ETF that's based on select, NDX 100 stocks because I think you got to separate things out at this particular point. Now, talking about separate, first of all, the dollar, is the dollar holding up well because it's American economy still one of the strongest economies in the world. Look, all the news events that are coming out regarding the economy so far. This is not a recession, this is still pretty good and you can understand why the Fed, on the one hand, would love to raise rates, on the other hand, they are terrified of scaring the market. So that's another thing altogether, we'll get there in a moment. So I am looking at this and saying, dollar's holding well, gold is not, it hasn't really broken out on a short term basis. Yes, it's in the breakout area but it hasn't even broken out. Question about the GDX, GDX, look at this, the monthly chart says what conflict, what are you looking at? What are you thinking about, gold? This is nothing. GDX starts to trade from 35 into the 43 area, then you've got something. That can happen very quickly, it hasn't happened yet. And I do call this a leg deal, the weekly chart, still the technicals are not bad. Look, the stochastic hasn't even gone above 80%, it's at 72%. Does that give it room to go higher? It certainly does. But look, even beyond the daily, the technicals are already mixed, at 9 over the 14 period moving average, is a sense of really good strength. So GDX is up 91, 35, 30, good action. And if you're looking at the individual stocks, they are actually now moving very nicely. So that's the GDX. The key support will be in the 33s. If it closes under 3270, something's going on that's really weak. But at this point, it hasn't had anything like that. Just quickly, silver, silver is trading up very strongly. It always plays catch up to gold. Then all of a sudden, the chart looks a little bit better. And as it looks better, that's when they all tumble down together. But in the meantime, you've got a, whoa, whoa, that is a new leg seed because that went underneath the last low. So in the Chapman Wave, it's a restart. New leg seed, good action, 24.95, up 0.58 cents today. Weekly chart improving, monthly chart doesn't look very good at all. Now let's do this high grade copper. I just wanted to show you something else in the meantime.  EURUSD, this is the euro dollar currency pair. There's the dreaded H pattern. It goes up, comes back down, took out the left side low. So this is actually a brand new leg B to the downside. That's A, that's B. All right. And it's a leg D in the monthly chart. And there's this trend line. Remember, we spoke about it for months. How this trend line, inside track, pro pattern zone, it went under, it went over it again, and now it's coming back to retest it. <IP_ADDRESS> is really a key support in the euro dollar currency pair. And I want you to do high grade copper, high grade copper, holding very nicely. If you put this together with wood, the iShares global and typical global timber ETF, you've got to save yourself good, gracious, whatever the expression could be. How they're holding so well internationally. This is a sign that internationally, economies are actually doing a little bit better. And wood is down 44 cents at 87.72. Stuck between a trading range for now, reported between 91. And I didn't say 83. Goes below 84, that's a big part. There's a lot to discuss. Oh, steel stocks. Look at this, SLX. This is the steel. Oh, my goodness. This is making. Why is there a steel moving up so strongly? That's a cyclical. Is it a late cyclical? And the things have really turned. I'll talk about it when I get back. Are you having fun trading the markets, but having trouble finding like-minded individuals to discuss your trading and investment ideas with? Become an Apex creditor in the trading markets and join the Tiger's Den Trading Room only at TFNN.com. The Tiger's Den is an exclusive trading room where successful traders from around the world come to exchange trades and ideas. Join the den and surround yourself with the sharpest minds in the trading world. Subscribers to the Tiger's Den are also the first to have their questions answered live on air and can privately chat with our TFNN hosts live during their shows. Interact with other Tigers and Tiger's as they share trading ideas, news analysis, and discuss the market action all trading day. Subscribe to the Tiger's Den risk-free with our 30-day money-back guarantee and become part of the TFNN trading community. TFNN Educating Investors Get advice to give you the power to control your financial future. Go to TFNN.com and find the newsletter for you. Whether you're into trading gold, metals, futures, currencies, or options, you'll get advice and analysis to help you seriously get ahead. TFNN also features trading services with a 30-day money-back guarantee for new subscribers, as well as TFNN's Tiger Den trading room, trading software, and educational webinars for all trading levels. Make sure you check out Tiger TV for free on TFNN.com or TFNN's YouTube channel for live financial content from 8.30 a.m. to 4.00 p.m. eastern on market days.  TFNN Educating Investors If you're into trading, your ultimate trading mastery system, David White has programmed an outstanding piece of software that will complement any trader's methodology. Using this first-of-its-kind program, the art of timing the trade charts allows you to scan thousands of stocks for Fibonacci formation setups, including guardleafs, ABCs, butterflies, and much more. The art of timing the trade charts is designed to help you when scouring the markets for stocks searching to find. And right now, we're offering licenses available at only $79 a month. We are so confident that you're going to love this new charting software that will even give you a 30-day unconditional money-back guarantee. Don't miss out on this incredible new piece of software. Get your copy of the art of timing the trade charts today by visiting TFNN.com. Hi, folks. I'm just trying to find you the steel. I did read about steel within Ukraine, largest iron exporter in the world. Iron is not steel, but there's a relationship there. I don't quite get it. All I can say is that why is steel routing like this? I did some work looking at it historically. Once, I think it was in 2008 when the market was making lows, steel had gone higher for a little while longer after 2007-October top. So maybe as a late cyclical, that's kind of what happens. All I can say is that look at this. X is U.S. steel. Fabulous move up. It's up again to have 3.27% at 28.10%. Look at that all-time high, not all-time, but the most recent major high about 7%. Look at the CLF. This is Cleveland Cliffs. This is flat-roll steel. Iron ore pellets. Iron. There's the iron. Aha! So maybe that's the nervousness that maybe through Ukraine producing less, we're going to have to produce more. Maybe that's it. Well, it's acting beautifully and beautiful. Cup formation. Leg D. Underneath the previous high, we're watching this very closely. It's up 4% up .90 at 23.28%. All right. So a couple of things that we want to look at. Question came in. Can I look at Bitcoin? Bitcoin is up about 1900. Up 1960. Having a gap obsession off the spectacular turnaround yesterday from the 37,000s until now it's at 43,995. The high today is 45,110. What I say to subscribers today is that there's a chance that Bitcoin has found a place just in this particular environment as a not just a cryptocurrency but a vehicle of transmission, electronic transmission that allows money to be transferred country to country and at this particular time before things clamped down maybe this is the way it's going to be and this in a sense if this really works for the cryptocurrency this would be another feather in its cap to say there's a legitimate reason I remember hearing listening coming back from New York once we were listening for about 40 minutes a long time an interview with Armstrong the young man that started Coinbase COIN it was really absolutely fascinating I remember one of the things he said if you want to if you want to go start a business the best thing that you can have is for somebody to find you and he was lucky to find someone who was just exactly the perfect fit for what he was trying to do after speaking to hundreds of people who just dismissed him Coinbase Global Inc. it's up $8.998.67 so it is a gap we've got to watch this closely because this could pull back the day is young as I like to say it's important to see because if Bitcoin actually starts to move above the 200p moving average of $7.81 which it hasn't been able to do since back in January when the trade there for a while and then it cheated it as a full crop going up and down and up and down kept coming back like a magnet until it broke away so if it starts to trade it can't just go once it's going to trade for about a week it's going to have two or three sessions nicely above the $45,780 level that's going to say but it's back in play as a some form of sub-currency obviously it's kind of a currency but I mean sub under the auspices of your traditional dollar yen etc so this is going to be very important and it will start to legitimize this as a form of cryptocurrency a medium that in its own right and that's really what it's been wanting to do for a long time in its own right has validation for all those people that are saying oh it's just a it's nothing nothing it's really something very big and it's really an alternative for a lot of an alternative vehicle let's put it that way for many players and the players could be just locals and it could be countries alright so then we've got that out of the way let's get to bonds change so here we are 158 and 2130 seconds up a dollar almost $2 this is what we've been talking about and I've been saying for ages what happened to the traditional fluctuation between I don't want to call it interest rates I'd rather call it bonds and the market when the market starts to weaken the history for me is that all of a sudden what you see is money start to flow out it migrates from the weakness of stocks and it goes into the so called safety of bonds and bonds start to rise yields start to come down and eventually it goes back again so that's like the risk rate is off it's going into actually a different risk rate 152 to 158 in just the blink of an eye in bonds that's like a stock so it isn't quite the safety of bonds in the sense that it does move it does move so I've got that out of the way now what I want to say is that the TLT is telling me it's in leg C remember the TBT I said aha we had from someone calling the other day and I said you know what I'm thinking that it's safer that you take some of your profits in the TBT because even though Powell is going to have to do something the chances are that just in this particular period with market weakness with Powell probably giving a little bit more finite statement saying we are going to do this maybe 50 cents initially or 25 but a promise of 50 cents he's going to do some kind of 50 basis points I should say he's going to do something and once the market knows it's something then at least it puts a little bit I always say market works on uncertainty every day it's uncertainty about uncertainty just once removed and you have a problem with the markets so that's what we're looking at if there's a little bit of uncertainty in the bond market it just alleviates the worry there now you can worry about other things like World War 3 who the hell knows hopefully nothing even close so that's that and I want you to do a couple of other things I want you to look at oh I've got a bunch of questions yes I'll do that look CVX that is Chevron breaks out this is a massive move up to 5.46 at 149.44 up 3.77 percent when you realize just how and I'm going to call this a G Smash that's a peak A great peak A D C D and it's just for now I'm going to call it a D I can change that and it's an E that's a daily and E in the weekly when you think the kind of capital that Chevron has to be able to move like this over the last two days that is money being put to work that is incredible I mean to move stocks this high you have to have a fear factor and you do so that's that Exxon the question about Exxon Exxon is all self sharp not as sharp as that 1.27 actually no this is not performing as well and if you look at COP which I had a question about which is Conica Phillips that is having a nice little break out there so um yeah the whole coil sectors I'll be back in a moment I'll be back with that from the price you should be paying per square foot in certain up and coming areas to the type of cash flow investment properties are capable of creating Tiger Real Estate can help you make the best decision when it comes to all areas of the market before you make one of the biggest decisions of your financial future call Tiger Real Estate LLC today at<PHONE_NUMBER> or email us at Tiger at TFNN.com that's<PHONE_NUMBER> call us today Dave delivers his weekly newsletters every Friday with updates throughout the week you can get the technology insider at TFNN.com for only $37.50 Sign up for Dave's newsletter the technology insider and get an inside look at everything the technology sector has to offer try it risk free today with our 30 day made back guarantee TFNN Educating Investors or has run its course trade LABU or LABD Directions Daily S&P Biotech three times bull and bear ETFs Visit Direction Investments.com slash Biotech today an investor should consider the investment objectives, risks, charges and expenses of the Direction Shares carefully before investing the Prospectus and Summary Prospectus contain this and other information about Direction Shares to obtain a Prospectus or Summary Prospectus please contact Direction Shares at<PHONE_NUMBER> the Prospectus or Summary Prospectus should be read carefully before investing an investment in the funds is subject to risk including the possible loss of principal the funds are designed to be utilized only by sophisticated investors such as traders and active investors distributor four side fund services LLC don't forget you can listen to TFNN live on your mobile device 24 hours per day go to TFNN.com watch Tiger TV Hi folks, we've got Mars calling from the United Kingdom I'm Mars, how are you? I'm good, thank you you would like to look at the group that's just been I don't like to use the word anymore on fire but they've been like Rocketships, oops I don't want to use the word Rocketships either Lockheed Martin, RideLNT Beauty at Aerospace Research, Design, Develop Manufactured, Tax Systems Identify a Five Potential and that's what I wrote from when I googled it a while back Trading up today 16.75 up 3.86% at 450 I have to chuckle because I have a really good friend he works for Raytheon, he's Mr. Peace Love I mean talking about peace, he is Mr. Peace himself wonderful guy I mean with Raytheon under these conditions Raytheon also is soaring to the sky it is at up $1.05 at 103.73 I don't know what I can tell you about this it's just obviously this is the whole this is what I would have expected from Gold but this is more realistic because these are the guys that are involved totally in the whole area of our geopolitical security so have you got a position yes so I did take a position at the close yesterday I'm about $20 into it positive just wanted to see what sort of wave structure do you have for this because it has made new highs I think it made all-time new highs today so the most important thing is the pattern that I call the rectangle formation you can see this in the weekly and I made not the very big from the outside $429.52 high of the first of February a year ago two years ago February of 2020 plummets down to $266.11 March of 2020 then it ratted sharply higher to about $419 and then it pulls back to $320 and then it sets itself up for the lowercase H you can see it right here makes a lowercase M holds at a higher high almost like an inverted in shoulder just for this particular pattern I'm talking about and then breaks out above the arch high the first one and the second one and then the all-time high I to be honest I have to call this a leg B in the monthly I didn't really want to think of it as a leg B in the monthly because that says it should still go to a C and a D over the year 2022 and at the same time the weekly chart is in a leg D and the monthly chart is just broken out there's no other way I can count it well I could but I'm going to count it right now as a leg C the mag D is screened to the upside stochastic is very high at 88% on balance volume is a tad overboard but that's all you can say overboard doesn't mean to say it has to decline but it is somewhat overboard so I like this I'm just I'm suspecting right now this particular pattern has two outcomes that to me are very bullish one is that it has just a minor pullback for a peak C it doesn't take out today's low on 435 round number low instead what it does is it pulls back and very quickly goes to D and then it either has an Eiffel tower sudden plunge looks like an uppercase A straight up and then straight down I think that's unlikely or it has a big consolidation between the say the 460s could even go a little higher and maybe the 440s and I put in a big rectangle and says you know what it's broken out is holding really well it's in play in the sense that it is part of the curriculum at this particular point that's working for the overall as I call it the geopolitical economic situation that we see and therefore it's in demand so I like it what you do right now you took profit yesterday and today it gaps up and has another big move up yeah you it opened at round number 435 that was an open and that was open and the low of the day and that just says to me that if it's at 451 at any point in the next three it's three sessions it can't include today it has to be Wednesday, Thursday, Friday so going to Friday at four o'clock if this has not taken out on the downside 440 to 335 support if it hasn't gone in fact it's held very well then that's telling me that there's something even more desirous of these these defense now this is defense the C defense unlike defensive stocks like Procter & Gamble or something like that or McDonald's even this is defense, this is the military side of it and I'm just saying this is in play so if do you still have some position in it? yes I do I'm $20 positive actually I took a position yesterday on the close so I've got all the okay that's the opposite I was talking about you actually took the position so you were pleasantly surprised today so what I'm going to say to you is as an overall strategy I'm just going to say to you I don't know if you want to risk part of that $20 but I like your position it's a little gutsy but it was well thought out and I'm just going to say I would rather see a pullback and you add to that position treat that as a trading position treat this little one that you got yesterday the one that you got yesterday is like a core position and then trade off another one on any $5 or $6 pullback because if it goes to leg D you can just keep your core and then use that other one as a trading position I hope that helps you that's great thank you very much Basil have a great day thank you very much for calling let's go to Sharky and Nate Ignace hi Sharky how are you? hi good morning Basil I want to ask about ST and just the overall crude and I want to apologize maybe some of my medical recent medical issues have some cloudy eyes I hope you're seeing a lot better thank you ST did go to the 14 today is a high we spoke yesterday and you thought it might get to the 14 I was looking at the left side can you give me the symbol again I just don't have it in front of me oh I'm sorry it's ST ST ST right okay for a minute I thought you were saying ST which is also a stock but no okay so this did exactly what we were talking about yesterday right so it went right to the I didn't get into it little cautious because of the markets and the turmoil and you know what's going on so I'm not sure if it's too late earnings are coming out March 2nd after the close I'm sure they're going to be yeah whatever the whatever the estimates are whatever the results are the estimates should be looking out should be positive so I'm just going to say to you just risk reward is up 69 cents SD is the symbol SD language energy ink independent gas and oil company develops and acquires oil and gas products so I properties I'm sorry what I'm looking at at 1406 up 69 I like this very much it is bumping into resistance it's really tough because I'm saying to you you're on the risk of war but it should be good I mean what if it comes out I don't know when it'll come out before the market opens or after the market opens it could have it easy yeah I'll hang on I'll hang on okay hang on I'll finish up a secret to post the dollars down 130 SQC 36 right sharpening your skills as an investor is like getting better at playing a musical instrument you have to practice sure but you also need excellent instruction from experts at TFNN you'll get advice and guidance from the authority and technical market analysis and it's not just dry tedious text either TFNN airs live financial content streamed live on TFNN.com and TFNN's YouTube channel with Tiger TV live every market day from 8 30 a.m. to 4 p.m. Eastern for free each host is an experienced trader and gives their take on the market while taking calls and questions live from around the world from the moment the market opens until the closing bell sounds Tiger TV has 8 different shows with expert hosts to help you make the right moves with your money watch online at TFNN.com or on TFNN's YouTube channel and become the investor you were born to be TFNN Educating Investors you might think that if you want to be successful at trading in the stock market you're going to need a crystal ball after all it's impossible to predict the future right like any endeavor in life before you decide it's impossible get some advice from the experts you might find that it's not so impossible after all for daily market that give you direction on the key indices selective stocks and commodities subscribe to the opening call newsletter at TFNN.com the opening call newsletter is written by Basil Chapman creator of the trading methodology known as the Chapman wave the Chapman wave up down sequence gives you an edge in identifying price turns finding the peaks and valleys in stock prices get the opening call newsletter by Basil Chapman in your inbox every day first time subscribers also get a 30-day money back guarantee if you're not satisfied let us know and you'll get a full refund within 30 days of signing up TFNN.com Educating Investors The target first mortgage program pays 7% per year paid monthly on secured high value buildable properties in St. Petersburg, Florida the investment is for 4 years paying 7% per year or $7,000 per $100,000 invested your investment is secured by high value real estate in St. Petersburg, Florida your investment can be anywhere from 100,000 to 500,000 you want to make 1000 per year on $100,000 invested or $7,000 per year on a secured target first mortgage the target first mortgage program may be just the program for you the target first mortgage program pays 7% per year paid monthly for more information you can call<PHONE_NUMBER> that's<PHONE_NUMBER> this segment is brought to you by Thinkorswim the Thinkorswim banner on the front page of TFNN.com Hi folks, let me just say because you were talking about being a little cautious yesterday here at 1404 and with earnings coming out tomorrow if you weren't I would say to you if you had a position I'd say you know what even if we pull back sharply it's in a buy mode in the dating chart and the monthly chart I would start a small position and if it's exposed to the upside that's great if it pulls back that's where you can start thinking of maybe now you want to add some but because you stepped aside yesterday why go to an extra added you know situation now where all of a sudden the risk is higher of just maybe being wrong I don't think you're going to be wrong if you were wrong but just so I'm going to say maybe just step aside if it does explode to the upside you'll have to deal with it but in the meantime because you didn't do it yesterday when it was on an upside move I wouldn't do it now just because earnings are coming out and you just never know how it will act so hold off a little How is this continuation with crude we're still going to see you know pretty much strength and short supplies there going forward most likely that will that will the contract will continue to move on the upward upward swing so as I see it right now because what actually it was very interesting I mentioned the other day and I never actually followed through with it I said stocks or anything that goes to the 95-96 area very often the next move up is rather quick and it goes to 103-105 well I didn't follow up because here it is at days high is 104.99 how close can you get so once it does that then it starts to get to an area that maybe it's consolidated but this is something different this is in play for this whole geopolitical situation thank you so much for calling for having a great day yeah thank you you as well thank you I'm going to hand you over to Leipzig's event coming up I'll do the news as Larry you want to hear programming okay back in the moment for the new


So hallo, maenai Simon Glass, maenai tawak ti about verified boot in Chrome OS. Little bit about how it works and also how you can do this yourself. So here's a bit of a rough agenda. There's quite a bit of material, quite a few slides. I'm going to go at a reasonable pace. I believe that a lot of it will be familiar. So I'm going to be mostly focusing on the new things. I'm sure you'll ask me questions. I'll leave some time at the end if there's something that's confusing. So I'm going to talk about Chrome OS, how verified boot works in Chrome OS, and then I'm going to step back a bit and talk about the requirements of why we want secure boot at all and also some of the technology that makes it work. I'm then going to introduce a verified boot which is upstream and new boot and the Linux components of that and do a couple of demos. All goes well and then we'll finish off with some resources. I hope you're all enjoying your time in Edinburgh. My first time in Edinburgh I walked into a pub and I said, please can I have a whisky? I haven't had a whisky before so I want the mildest possible whisky you can give me and the barman gave me a LeFrog. I've since learnt that not all Scottish people are liars. Anyway, it's good to be back. So a little bit about me. I've been working with ARM technology for many, many years. I used to work at ARM in the 90s. I had an electronics company for about nine, ten years in the same field and more recently Google Chrome OS working on ARM laptop. So let's start with what is Chrome OS? Chrome OS came about from two forces, the migration to the cloud that we're seeing and computing all over the place and the fact that HTML5 has more and more support for the types of computing things you want to be able to do. So for example you didn't used to be able to do 3D graphics in a web browser, you didn't used to be able to do canvas, you didn't used to be able to do video and audio and so on and now there are frameworks for all of those things. Chromebook is about speed, simplicity and security. Some of you may have seen a Chromebook and you've got a bit more familiar about this material. Chromebook is a normal computer but we've tried to integrate the components of it so that everything streamlined and works together and fits together nicely. And the only thing you get when you start up a Chromebook is a web browser. So there's no applications or anything like that, native applications.  We want it to just work for them and we don't want it to rot over time. Now interestingly about ChromeOS, interesting thing is that the security was built in from the start. It was not put in afterwards and the idea with the security model is essentially that we don't trust any of the applications. Even Chrome, the web browser, we don't trust that. Everything runs in a sandbox and the OS keeps everything isolated. So that's essentially the security model. And there are a number of interesting things that help make ChromeOS more secure. One is that there is a read-only root file system which is cryptographically signed and we know that it cannot change out in the field. And we also have the ability to update it so when we do discover a problem we can update ChromeOS or the firmware. So how many of you have seen a ChromeOS machine? OK, so about half of you. Well, now the other half of you know what it's all about. So why do we do verified boot? Well, a number of reasons. One thing is that by verifying what actually runs we can presumably protect against malware because the user can't install accidentally or otherwise software which can compromise the machine. So it helps to keep users safe. It allows us, it gives us the confidence to send a software update out knowing that it will, that that's the software that will actually be running on the machine that won't be attacked and modified. Now it doesn't mean that the user has to be locked out. It's possible to install keys on the machine, for example. And in fact in the case of ChromeOS you can put it into dev mode which will run whatever software you want. So we're not trying here to have the user buy a machine that they can't actually do what they want with. It's not the intent. What are some of the things we need for verified boot? Well, let's go through them. I'm going to talk about some of these in a bit more detail later. So the first thing is a route of trust. The way this works is that we have to boot something when we start up. When we first start the machine it's not, we're not necessarily in a position where we can check anything with our crypto or otherwise. So we kind of load some software that we pretty much trust. I'll talk about that in a minute. From then on, from that route of trust onwards, every byte of code and data that we load needs to be verified to make sure that it's what we actually set we were going to run. And when we can't do that, when we have software is doing unpredictable things, maybe we can put it in a sandbox so that as Chrome does, for example, with the Flash Player or with PDF and so on. If there's user state on the machine, we have to validate it. So if the user can change any settings when we load them, we must check them to make sure they don't cause strange things to happen. We have to be very diligent to protect against security holes. We have to fix bugs when we find them, that sort of thing. There's no point in having a really wonderful, secure system with lots of bugs in it that somebody can drive through and break it. We want to be able to upgrade the software. The reason for that is if we find a problem, a security problem, we need to be able to do an upgrade to fix the problem. And related to that, we need to make sure the machine can't go back to the old version. So we have to have rollback protection because once we decide that version one is compromised, we don't want to allow any machine in the field to run that ever again. So that's sort of a rough overview of the requirements. So I'm going to talk a little bit about some of these a little later. So I'm assuming that the material I'm going to talk about now is relatively familiar. Most of you know about hashing. What a hash is? Pretty much everyone. Good. Excellent. So very briefly, the idea is to reduce the image into a very small size, maybe 32 bytes. It has to be secure. Now the key thing about the hashing algorithm here is that changing one bit in the image should completely change this digest, the actual hash, if you like. And it can't be possible to modify an image to obtain a certain digest. That's really important because if somebody can change the software and then make it have the same hash as what you said, what there's a software you sent out, then your protection is gone. So that's a really important part of hashing. That's why hashing algorithms are actually quite complicated to devise and why most people use ones that are well-known and known to be pretty good, like these two down the bottom here. And how many of you know about public key cryptography? Great. Excellent. So I can be very brief there as well. So in brief, we have two keys that are mathematically related. If we sign with one, we can verify with the other. And we use this technology to allow us to sign any image we want, to get it out there knowing that the device will only boot images that we sign. So this is kind of everything I'm talking about here relies on this. And a really common algorithm is RSA, and 2048 bits is considered fairly strong. Chrome OS actually uses 8K bits for the initial key bit. That's extremely strong. And the other thing I mentioned briefly is a trusted platform module. So TPM. This is a security chip with lots and lots of features. So it can generate keys, random numbers, it can store keys, that sort of thing. So for verified boot, what I'm talking about here, we don't need all of those things. The main thing we're interested in is rollback protection. And that is where we have a version number for the firmware or for the kernel, or both, that sits in the TPM. And when we start up, we compare the version number that's in the TPM and we don't allow it to boot if the version we're trying to boot is older. So that essentially provides that rollback protection. Once you've ever booted version three, you'll never be allowed to boot version two again. So, as I say, there's lots of other features of the TPM which we don't need to concern ourselves with. So I mentioned about the route of trust. So I'll just talk a little bit more in detail about that. When you turn on a machine in a better system or something like that, it has to boot some code. Now, I'm ignoring for the moment that the SOC has maybe some crypto features that you can use to help here. Let's ignore that and I'll talk about that briefly later. But the initial code that you run comes from memory and has to be assumed to be correct and to be trusted. Now, that's what I call the static route of trust model. It might be the boot ROM, it might be U-boot. Now that could be stored in read-only memory. It needs to be stored somewhere that cannot change after manufacture. And it could also possibly be signed so that the SOC can verify it. So what you do is you put into that root stage keys which verify software you load after that. So having loaded the initial software which you assume to be correct, you then can load further stages. And each one that you load, you verify to make sure that it matches the keys and so on. OK, so those are the concepts out of the way, most of which you already knew. It seems like. So here's how Verify Boot runs in Chrome OS. I'm just going to take you through some of the stages that we have. There are a number of different parts to it. We have firmware, we have kernel, we have user space, and we have some other things as well. I'm going to talk about each of those in turn. So here's the firmware flow. So over here we have the read-only firmware. And you can see there's some various bits and pieces. It's a read-only U-boot sitting here. We have a device tree and what's called a Google binary block which has some data in it. It has recovery mode screens, it has keys and things like that inside it. This is all in read-only memory. So if you've got a Chromebook, maybe you've taken the screw out so that you can reflash the spy flash. Has anyone done that? OK. Of course you have. Everything works on the firmware, so we'd expect that. But there's at least one other person that's done that. So it is possible to do that and then you can do what you like. But once the machine's been manufactured, unless you do that, unless you take that physical step of physically removing the screw, this cannot be changed. The software can't be changed. So what we have here is essentially our route of trust. The firmware may be compromised. We may discover a bug. We may want to fix something. For example, with Snow, the ARM laptop, we wanted to fix a keyboard debounce problem soon after release that was actually not in the firmware, it was in the EC. So we had to rev the firmware. So we want to push out a new firmware for the device. And that lives over here. So the read-write firmware is verified by the read-only firmware using the keys that are sitting in the GBB. And we have the confidence that it was signed by Google and we can boot it. So we jump to that and run it. Having got that far, we now want to boot a kernel. And similarly, with the idea of a chain, we load some keys that this time are in a V block, verified boot block, sitting here. And we use those keys to verify the kernel image here and the command line and things like that. And now we know that the kernel was signed by Google, so it's okay to boot that. And in addition, we want to, once we boot the kernel, we want to make sure that the root disk is valid. I'll talk about that in more detail later, but essentially we have a hash that we store in here, that we store in here and in that same place and once we have that hash, we pass it through to the kernel and it can do that verification. Life is very difficult. Yeah, that's the answer. So, yeah, there's a trade-off here. We would like to be able to update the read-only firmware. On the other hand, we don't want people to be update. We don't want a virus or some problem to update the read-only firmware. So the decision we made was you can't. So we don't have any bugs in our read-only firmware. It's perfect. Yeah, I recommend you do the same approach. Bugs are bad. Okay. So here are the components of firmware. I'm particularly talking about snow, but the same applies this year's Chromebooks, I think, except for one of the x86 ones. So we have Uboot 2013.06. We use the... We're very close to upstream in ChromeOS. There's a Vboot integration layer which connects to what I call the Vboot library and the source code for that is all there. But all of the ChromeOS stuff is kind of in its own sub-directory. The Vboot library was originally written three years ago to work with UEFI, which is what ChromeOS initially was going to use. And it includes hashing functions, RSA, and all sorts of things. Much of which we've been able to upstream into Uboot now. So Uboot has support for TPMs, RSA, hashing, and so on. Not all of it done by ChromeOS, of course. And anyway, we're still using the Vboot library. It's still there, and the source code is available for that as well at that link. The key thing that the Vboot library has that we will never upstream is the verified boot flow. So this is something I'll show you a little bit later, but essentially it's the business of deciding how to boot, whether you're in developer mode or not, whether you can, if you can't boot, how you're going to recovery and things like that. OK. So I mentioned before about the root disk, and some of you may have heard of DMVarity. It's upstream in the kernel. It's essentially a way of verifying a root file system. If you imagine you have a file system and you break it up into blocks, let's say 4k blocks, and you hash each block. And then you pass that great big list of hashes to the kernel. Then every time it loads a block from the disk, it can check it against the hash, right? So it's a very simple concept. Unfortunately, we don't really want to send a huge chunk of hashes down to the kernel. What we want to do is send one hash. So we hash the hashes, and then we hash the hashes, and so on and up to a tree, and we end up with essentially this hierarchical structure here. And at the very top level, there is a single hash value, and that's the only thing that firmware needs to pass to the kernel. From there, we can verify the entire tree of hashes, and therefore the entire root file system. So that's essentially how DMVarity works. So if you're willing to have a read-only root file system, you can use a similar approach and completely verify all the code that runs from the root of trust all the way through to user space. There's also a thing called crypto-home, which I'm not really going to talk about because it's not really directly related to verified boot. Talking about user space, in Cromwell West there are a number of utilities. There's a thing called cross-system, and a cross-system allows you to see what state the firmware is in. So did we boot in developer mode? Are we in recovery mode, to reinstall things like that so we can look up that information? It also allows us to send signals for the next boot. So we can say, please next time you boot, go into recovery because I just had a disk error or something like that. So it's essentially, think of it as a way of communicating between the firmware and the rest of the system. You don't always need it, but Cromwell West has got quite a sophisticated mechanism for recovering from errors and so on, so we do need it there. It's a thing called an update engine which updates the root disk and updates Cromwell West and a firmware updateer as well. And we have a signer which can sign images, as you might imagine. It's a thing called cross-bundle firmware which produces firmware bundles containing the U-boots, the EC images, device trees, Google binary blocks and all that stuff and packaging it all together, compressing some of it maybe and signing it and all that sort of thing. So you can imagine it's a fairly complicated setup. That bit of it. And there are a few utilities to do with images as well. So that's essentially the way Cromwell West operates. Very brief, I understand, very brief overview. There's loads of material available at the website, the chromium.org website if you're interested in more detail on any of these topics. In fact the original design docs for Cromwell West are still there from when it started up. And of course there's a source code that you can dive into the source code and have a look at how any of these things work. Although I have to say that we've been pretty good at trying to upstream most of the stuff and get it into the kernel or U-boot or whatever. OK, so that's all very interesting. How can we do this with U-boot and with the kernel without running Cromwell West? So that's what I'm going to talk about for the remainder of the time. Essentially it's possible to implement a verified boot on your own platform using U-boot and Linux and it can run on pretty much any device. I think the requirements are not that demanding. If for U-boot, if you're not already using fit, do you want to watch fit is? No, OK, some of you? All right, so it's not the Intel firmware fit. It's U-boot thing. So I will explain that in a minute. It's basically an image container format. If you're already using make-image, you can continue to use that because that's what's used for sign-in. If you're already using the boot-m command in U-boot, you can keep using that because it's all plumbed in there. So that's what I'm going to talk about in some detail. De-inverity is upstream, as I mentioned. It's in the Linux kernel, so you can use that without any trouble. And in terms of the firmware user space layer, there isn't really anything that I'm aware of there that specifically helps with this. Certainly you can pass things from U-boot to the kernel using the device tree or ACPI or something like that. Going back the other way, you probably have to roll something yourself, put it into memory somewhere like that. So actually Chrome OS stores has 16 bytes in the EC. That's where it stores the information that flows back from user space to the firmware. So since you don't know what fit is, this is what fit is. It's essentially a, think of it as a device tree which contains images inside it. So if you look up here, we've got a kernel image. We have an FDT, a device tree image. Here's the kernel binary. Here's the device tree binary. We have some metadata and so on. The kernel is being hashed with the sha1 algorithm and the hash will land up in that place there. And down the bottom, we have a list of configurations. Here's a configuration that boots kernel 1 and FDT 1. So once we have that information, U-boot can load that. It can decide it's going to select configuration 1. And once it's decided that, it knows as to go and get this particular kernel and this particular device tree. It's a very simple format, but you can see it's very flexible. We can have multiple configurations, multiple images and so on. So if you're using U-boot and you're not using fit, you should probably have a look at it. So having decided we're going to use fit, how do we add a signature to it? Well, you saw the hash before. We just replaced the hash with this little bit here, signature. And essentially here, we're saying here's the signature that we want to use. Here's the signature algorithm we want to use. When you run bootM to boot the thing, it boots as normal. You'll notice these new things here where it says we're verifying hash integrity and SHA-1 and RSA 2048. So you get these extra lines in the output, but otherwise bootM was working as before. How do you sign an image? Well, we currently use makeImage to make images, to make fit images and other types of images. We can do the same thing. We just use makeImage. We have to tell up the key directory and some other things which I'll talk about in a bit more detail, but essentially we're using the same tool. So let's have a look at how the signing works. So we have our device tree source, our fit source, if you like, that file I was showing you with the config, the kernel, the FTT and so on. We have our binaries that we want to chuck in there. We run makeImage and it produces the fit image over here. That works today. That's what everyone's doing today, if they're using fit. So what's been added essentially is a new signing flow. Having produced this image, you can now start using keys from over here to sign the images that are inside that fit. We're just modifying the fit, adding a few more properties, information that Uber can then use to verify it. And the outputs of that are a signed image, signed fit image, and somewhere we have to put the public keys, which we put into the Uber device tree. So the public keys, remember if you've signed something with the private keys, you have to verify with the public keys. They have to be made available. So what does it look like? Well, this is what you end up with when you sign a fit. The makeImage will put some additional stuff in here. Here's the actual signature here, bit of information about the algorithm and the signer and so on is here. So here we've got two signatures. We've signed both of these images and we've produced two 2048-bit signatures that get stuffed in there. What about the public keys? Well, the public keys get put into the Uber device tree file. That's going to have to go in your route of trust so that it can't be changed because if someone can change the public key, of course all bets are off, right? So this is a bit weird. It's going to look a bit unusual because it's in a kind of internal format. The reason for that is that we didn't want U-boot to have to spend a lot of time taking apart encapsulated keys and bringing in the open SSL library into U-boot. So here it's preprocessed. We're only providing the parameters that are actually needed and all U-boot has to do is exponentiation, which is pretty quick and requires very little code. So I guess you've picked this up but we're using what's called in-place signing. So when we take a fit, we sign it and we still have a fit. We're not required to have separate signature files.  It might have signatures in it, it might not. You're not even to send them multiple files. And of course, I should also say that there was a little bit of a drawback with this which is that we've signed the images. If somebody creates a new configuration and says, hmm, actually I didn't like that image in that device tree, I want to use this image in this device tree. Now both of them have been signed by you but you have no way of protecting against them mixing and matching them and using them in the wrong order. So that's a bit of a problem. So how do we actually fix that? Well, we fix that with configuration signing. So some of you looking at this before were probably thinking, why are you signing the images? You should just sign the configuration. Was anyone thinking that? OK, anyway. So the reason for doing this is because the configuration is what we've actually decided is valid. It's this kernel here in this device tree and this is valid for our platform. If we can just sign that, then all will be well. And essentially this is what's provided. There is an additional option in the verify boot to allow you to do this. And the way it works is it just hashes the yellow bits of the fit. So we're not now hashing the entire image but we're just hashing this metadata, if you like, here. So because the kernel has its own hash we don't need to even hash the data here. We know that that must be valid because of the hash here. So we can actually hash maybe 400, 500 bytes of data and that's enough to protect the entire configuration. Which is quite a nice property and on the right-hand side you'll see there are a list of things that actually need to be hashed. So when you use boot in with configuration signing, this is what you get. As soon as you select the configuration that you want to boot, COMPF1 you get this verifying hash integrity business here. And it will verify essentially that everything looks good so far. And then when you load each of the images the kernel and the FTT it will then check the hashes to make sure that it still looks good and you're done. So now we've got essentially 100% protection. There's nothing anyone can do or change in that fit that would not be detected by the signature arrangement. On the other hand we still have a flexibility to want to sign with a different key later on. You can do that. So how many of you are worried about the code size of this arrangement? Surely it's going to bloat the code size of your boot. Must be horrendous. It's actually partly because of the way that it's been implemented in terms of having all the preprocessing done by make image. It's pretty efficient. It's about 2K bytes for RSA and it's a higher verification code including the RSA fit stuff is about 6K on thumb 2. So it's a very small amount of additional code. If you're not using fit then there's an additional 20K there. Much of which is strings and error messages and some of which you can turn off. But yeah, the overhead of verify boot in your boot is very, very small. And in terms of performance it could verify a configuration on a beagle bone in about 6ms. So it really isn't noticeable on the boot time front either. Chrome OS on a modern SOC will boot through one new boot, a second new boot load a kernel and be ready to boot it in, I'm trying to think, 700ms, something like that. 710ms. So it's not necessarily a slow thing to be able to do. So in summary some of the nice properties of your boots, I'm nowhere near finished sorry, if you're hoping that the nice properties are that it's a very small amount of code in terms of what it adds to your boot it's pretty fast 6ms as I said it uses existing fit format, there's nothing really new there and it uses the existing make image tool existing boot image boot end flow, so it's fully plumbed into what you're currently using with UBoot. And it does support this multiple stage idea so that you can load an image and then it in turn can load an image and so on. So you've already seen the way boot end works but there's really no change in syntax everything kind of, it already has UBoot already had the facility for checking hashes now that it can check signatures there's really not a lot of difference there the main thing that's slightly odd is the configuration checking which happens right at the start of boot end but it's no big deal it's all automatic. So now I'm just going to do a quick demo I'm going to show you two things first of all I'm going to show you sorry can we switch to the camera sorry so here's Chrome OS booting up on a little laptop so if some of you have got a machine you've seen it doing that and it comes up with the screen what you may not have seen is that if I boot it into recovery mode the machine will come up in this state where unfortunately it's not really legible that looks like Japanese but it's in fact English but essentially we're on a screen here where we can flip between different languages and it's saying we're in recovery mode please insert an SD card to get a new operating system so we're sitting here in new boot and what's called recovery mode waiting for the user to install a card and when they do we will boot that and copy over the new operating system and similarly if I want to I can change into developer mode again in Japanese this is actually honestly is Japanese and from there I can select developer mode and from then on for all time until I change it again I will be booting in developer mode so that's kind of the firmware interface when I talked about cross system cross system sees all this information once you boot through the user space it can see it, it can adjust it and change it and so on and still on the camera I'll just show you this little thing here actually I need to to show what's going on there sorry let me just try this so can we see that oh that's the camera um yeah okay can we go back to the computer please see if I can play this video or not doesn't look like I can oh yeah okay so that's it booting oops sorry I don't know what is wrong here but it just might just be my very small screen I'm not really sure this is it booting on a beagle bone which I have here um and when the machine when the thing starts up it will um boot normally with the thing and you can just see my high life up there the sha one verifying the hash integrity that means it's running happily and it boots some of you maybe can see this screen here um if I boot with the key held down the enter key in this case it's going to boot the second configuration unfortunately that doesn't boot and the little light will flash and it sits there forever flashing the light you can see the GPIO perhaps on the screen flashing so that's just showing it running on a beagle bone it really has no effect on the standard operation of the device it's just normal u-boot and normal scripts and everything else I didn't have to change anything other than I took a fit and added some signatures to it so it was pretty straight forward okay I'm just going to go back to my slides so um some other things you can do many SACs have accelerated hashing so they allow you to do hashing very quickly using built-in hardware you can use that they even some have public key crypto which is also can be used um you can do an auto update feature useful if you think you're going to make a mistake and want to update in the field or even to add new features this is the recovery mode that I was trying to show you with Chrome OS a little bit hard to see but if you've got a Chromebook you know how to go into recovery escape refresh power it's perfectly harmless go in there and never look around some SACs have on-chip crypto very much but if they do then perhaps you can have your route of trust be in read write memory but be verified by the on-chip crypto you probably need to talk to the SAC vendors to make that work um you can see that you can make it go fast there's really no issue there and you can use a TPM for rollback a new boot that's support for there's a TPM library and you can use that to define a rollback space that is in there and you can even implement a trusted boot where you tell the TPM every time you load new data or new code and it can verify that that's good so in summary verify boot you can enable it in an embedded system with very little code or execution time penalty and you've got a lot of features in there for hashing and all the different things that you need and if you can put up with having a read-only root file system you can use de-inverity essentially to completely protect the user and that's the end I've just got some links there if some of you are interested in looking up some of this material in a bit more detail I realise this is very much of an overview but hopefully it's given you some way to look and if you like you can ask some questions does anyone have any questions in a branch yes yes so here's the way that Chromebook development firmware development works obviously we have a very limited time to get the product out and particularly towards the end of the project we have bugs to fix so we end up on a branch we then work hard to upstream the code and get it into mainline they are quite different they are quite different so the branch I mentioned 2013.06 really bears no relationship to the one 18 months earlier so for the Chromebook this year we threw all that code away we took and taken the upstream U-boot from June and we started adding patches for the new SoC and so on so for Snow for the last year's Chromebook you've got to use the branch it is actually possible it does boot on mainline I don't think it's sort of there's a couple of errors and problems and it's just not quite polished that's for sure there's quite a bit of stuff going upstream if you watch the mainlist in fact there's 5420 stuff going into U-boot now so there's an effort to do it it's kind of tricky because I don't know once the product ships you kind of take a breath and you can start looking at these things while it's happening it's kind of tricky so the root hash essentially if you think about the root hash it's the hash of 50 hashes below it on the level below now we provide that root hash from firmware yeah it's actually that root hash is signed and protected against being changed no one can change that so having made that protected it's impossible for anyone to change the ones underneath and so on and so forth I mean one of the nice properties of hashes is with sha256 or sha1 you can say well I'll hash this and it's just as protected to say that I'll hash this and hash this you can have a chain of them and it's perfectly safe it's considered quite reasonable to chain the hashes yeah essentially so okay well there's two reasons one is that if you wanted to so let's say you just had one 32 bit hash for the entire file system there's an increased risk of collision let's ignore that for the moment but you then have to read the entire file system in to verify it because you can't calculate the hash until you've got all the data so with the hierarchical method you don't have to do that you can just read in the first the small number of rows of hashes and verify from there so yeah it would take a long time to read a gigabyte of memory just to verify your hash and the second reason is that because it's not directly related to verify boot but the auto update works on blocks the auto update comes in it doesn't update every single block in the XT2 file system only the ones that it wants to change it essentially sends a delta down to the Chromebook and of course if you're updating only some of the blocks then it's nice to only update some of the hashes as well so that's why that is the way it works is that here's your partition here's your file system here's your hash, that's it at the end and yeah they're stored in the same partition but separate from the file yes, every time you read a block you compare it against the hash so the de-inverity essentially does that it reads a block then it reads the hash and then it hashes the block and it compares the two and if it fails it reboots yeah you're up at the start of the root well you kind of do you have to read the root you have to get the root hash you then have to go down a level and read all of those and then from then on whichever blocks you read you're going to have to read the hashes that lead up to it you know what I mean yeah it's sort of a separate issue though if you want to squeeze it up that's fine I think we don't no I mean on the ARM Chromebook it loads about 90 megabytes to get up to the login prompt and I think it's about 1800 hash blocks so 1890 hash blocks so it's fine it takes about a second to read that on a fast MMC you had a question why why so thinking about the objectives of Chrome OS there is a there is the idea of being able to remote attestation where you're saying I promise that I'm running this code and there is we have a little bit of that to do with Netflix and so on but for the purposes of Chrome OS trying to verify what actually gets booted this scheme works perfectly fine we don't use the TPM I agree we could use the TPM a lot more mind you the TPM is a dog you know 550 milliseconds of boot time on snow is due to the TPM so it's not it's not necessarily something we want to use more unless there's a good reason and at the moment there really isn't someone at the back yeah well GPL refers to the source code and the you mean ah yeah well it's not actually encrypted it's verified yeah yeah I mean the interesting thing is when you flip to developer mode it doesn't have to rewrite the image or change any of the software on the disk it's the same software it's just now not being verified so previously if you changed something on the disk boot it would die and tell you you've got a problem and go to recovery mode if you're in developer mode it doesn't there's certainly nothing the encryption I mentioned if that's what you're talking about is to do with the home directories we didn't want obviously user data to be visible to other users so yes there was encryption for the user data but that's ephemeral anyway on a Chromebook you could blow all that away create a new user login and all the data comes back down from the cloud so half of this the second half of this talk about uboot and linux and how you could implement it yourself that's all using upstream uboot code and that's gpl2 plus that stuff so you should be fine obviously I'm not giving illegal advice but that's certainly the intention of what I've been showing here everybody else happy? well thank you very much