Right, so let's let's go so T is why open source is vital and it's smaller, but actually this is a very exciting fun bit This is we're going to talk about this as well So what is trust with T's and T's and sorts of T's and I don't know I want to get moving so I'm not gonna hang around on this so we're I've spent a lot of time talking about trust and thinking about trust over the last 20 years And this is the definition that I've come up with over the years Trust is the assurance that one entity holds another perform particular actions according to specific expectation We'll come back to this in a bit, but when you search on pixabay for trust you get this picture Which is I think an African land squirrel being trusted not to buy the child's nose off This is a bad example of a trust relationship Okay, so let's think about what you can trust This is a simplified standard stack, right? We all know what this looks like everyone everyone happy with this It's a representation of a stack good good. Okay, so You have a problem. So you write the application Right, so you've got some trust you do that, but it's sitting on top of middleware and you didn't write the middleware and there's every opportunity that someone may have Got something wrong or does something wrong on purpose or just done bad things, but it sits on top of our user space No one ever hacks anything in user space, right? That never goes away. So that's okay. Well, we better not trust that but the kernel we can trust that hmm We have over the years come across some problems with kernel Luckily, there's the boot are You can see around going with this, right? So hypervisor entirely safe firmware Right, okay So we have a bit of a problem Assuming that you wrote the application and you trust that what do we do if we actually want to run stuff on a computer? Which I guess most of us are interested in doing It would be nice to find a way around some of these problems and the CPU vendors realize that we in they had a problem It's a turtle problem. Who knows the turtle story. Oh I get to tell the turtle story, right? Okay, so This is told about a variety of people But it's someone like George Bernard Shaw or someone like that in the early years of the 20th century and in those days people used to go around scientists eminent persons usually men going and lecturing to people about science and and philosophy and and how the world worked and George Bernard Shaw, whoever it was went to a to a packed audience auditorium. I think in the north of England and explained about cosmology and evolution and You know how things works and you know the dinosaurs and strut and all of this and it went down very huge applause at the end And at the end he was receiving questions and an old lady came up to him and said that was fascinating, mr. Shaw but of course it's all rubbish and he said well, what do you mean? It's all rubbish and And and he she said well everybody knows that the earth sits on top of a turtle He said okay. He said ha ha but What what does the turtle sit on?  It's turtles all the way down and The the moral of the story is which is used by security people is that in the end you have to have a bottom turtle You have to have a turtle that you can trust and you can build stuff on and that's what the CPU vendor realized fairly recently and They so they created TEE's TEE's are trusted execution environments. They are Ship level instructions, which basically allow you to run an application in memory Which nobody else can see not the kernel not the hypervisor not someone with pseudo access None of these people none of these entities And this gives us something we can work on so some examples that are in the public domain AMD have one called SEV which stands for something secure something something Intel has something called SGX which stands for secured guard extensions IBM has something called PF which stands for protected something something and The definite and I'm sorry we look them up. This is not the interesting bit of the talk. Okay, we'll get into that So we have a definition of What's a TEE isn't it we call a hardware-based technique for securing sensitive data? So this is key, right? anything that you don't trust to be on the public cloud or on frankly any old system where Joe random hacker can can look at your patent data or your payroll data Or your financial data or your health data. So securing sensitive data And algorithms, okay, this is not just stuff at rest We've typically in the past thought of securing and encrypting data at rest On basic storage in transit basically over the network, but this is the third type This is for in process so it's being processed So algorithms as well as the data in Such a way that even the kernel or the root user or the hypervisor can't see what's going on So that's our definition of a TEE it does cut out a couple of technologies NHSM is not a TEE a TPM is not a TEE Can you emulate them in various ways of the TEE? Yes, would you want to they perform different functions generally? We could have you talk about that another time right so Yeah, so arm trust owners not a TEE TPM not a TEE Using TEE's Do you have any sensitive data not you have sensitive data? Do you have any sense of algorithms? Well, maybe you don't but I'm sure that your banks and your health care providers do Do you trust your cloud provider with them? Are you happy to hand over all of thank you for shaking your head at the back? So that's that's you're quite right. You should not trust your cloud provider with those things But you can trust of your sys admins can't you know? No, okay fine. Um, and do you trust the entirety of your software stack? Are you sure that all of those things I had there completely safe have not been compromised and are entirely safe to be trusted? No, no do be quiet. Mr. Jones. It's a troublemaker in the front. He's got a beard as well So if you answered no to any of these then you need TEE's And I did a pretty picture for the video All of these things are things you might be wanted to put in a TEE um open source If you're going to use a TEE in open source, there's a bunch of things we need right? We need that user space support. We need colonel space support Once we've got those we actually need applications that use them right just saying we've got a set of of Hardware based instructions CPU based instructions And now you can program them is great if you love Assembly but not many of us write assembly for fun anymore There was a time We need to get them into dev ops and hybrid clouds so people actually write stuff and use them and deploy them and Here's the problem if we don't make them The proprietary people will You know Linux is winning at the moment Yeah, open source is winning at the moment but if the Enterprises out there see ways of keeping their stuff safe in Proprietary software, but not in open source software. They will use the proprietary stuff So we need to up our game and do some stuff So this is where my beautiful assistant Takes over. Unluckily all I've got is an Nathaniel. So I'll let him do it right go Can you hear me? Oh, there we go. Okay, so my name is Nathaniel and I'm the technical lead on the nRx project And the nRx project's goal is to build precisely what Mike was talking about And you can see we have a website nRx.io pretty easy to find Yes, there are stickers at the red hat booth I think Mike might even have some as well so so you can get stickers. I know that's the most important part of the talk But so basically we're just going to summarize precisely what Mike talked about which is that we have this stack and The each different color represents a different trust relationship in a in a traditional stack, right and the The big section usually is in red because that kind of stuff kind of comes from an operating system vendor particularly red hat of course ships Ships this stack and so at least you have one trust relationship there And this is the way people have traditionally mitigated their their risk surrounding trust but we still have a bunch of other people you have to trust as well like the firmware and the BIOS and the CPU and They all need to be trustworthy for your application to be trustworthy. So this is what happens when we do containers Containers actually make the problem much worse in terms of trust now I'm not saying the containers are horrible and you shouldn't use them There's lots of good reasons to use containers, but they do increase the complex complexity of our trust relationships Because typically you now have a user space that's coming within your container Which is not part of the container host and so we now have different trust relationships there and Xkcd gives us a really lovely illustration of this problem. They talk about the modern tech stack and they're all compromised So this is a fantastic comic by the way if you don't know what Xkcd is you should absolutely go Spend like at least eight hours of your life going through the kind of information for non-commercial use office Pictures in the sort of way. So we did check. Yes Okay, so we're gonna give you a demo of Some some early functionality in the nRx project. This is not the totality of what we are building But it is a first step in this goal So what you're gonna see here is we're gonna have I'm gonna start and say what's the Alex project for the Alex project Ames to make it easy for you to write and deploy deploy stuff into a TE But we're not an application framework. Okay, so you're not going to write something specifically to nRx You're gonna write using standards and you're gonna deploy those standards using nRx So what you're gonna see today is not that unfortunately We're not there yet, but we're getting there and what you're gonna see is you're gonna see Two entities a client and a server in this case the server is a cloud host of some kind and the Client is the tenant that wants to run some code on that host But doesn't want to disclose any information about what is happening inside their execution to that host So go ahead to the next one The first thing that's gonna happen is that the tenant is going to attest to the AMD firmware and Notice that this goes through the host. We're actually talking to the firmware on the box It's true that the host is proxying that information, but that information does have Integrity protection so the host can't modify it and do malicious things I'm gonna stop a bit more and say what is attestation and why do we care so? What we care is that the AMD firmware is Going to create one of these trusted execution environments Using the chip instructions in a way that it's provably correct Cryptographically we can be cryptographically confident can never be sure of anything We've been cryptographically confident that it's a proper AMD chip And it is created as expected a proper TE a secure VM that we can use Thank you. So and this is happening directly to the hardware, right? So we get that attestation we validate to that attestation cryptographically We now know we're talking to genuine in AMD parts We know that know that we trust those parts to create this environment For us exactly in the way that we expect and then we're going to inject code into that secure VM That's going to be launched. So we're going to deliver code and data Encrypted into the VM because one of the things that we got from the attestation handshake was a lovely key Cryptographic key which means that we can wrap our code in our data in such a way that nobody can look at it including Nobody on the host so it goes straight into the secure VM where it's decrypted So we've encrypted it with that special key and now we're happy that we've delivered something Into the host that it can't see Absolutely. So next up we're going to do the demo. So we're gonna we're gonna play a video demo here We're gonna run this command two times with exactly the same inputs Okay, but we're gonna get slightly different behavior and I want you to pay attention to the slightly different behavior So go ahead and play Please bear with my associate here. He does have a hard time with computers It is that complicated things. How do I get to work? Do I do that? I think you press the play button there you go So So, yeah, we're gonna run this we're gonna run this twice same inputs We're gonna take the numbers three and four and we're gonna add them together and we're gonna produce the number seven Okay, which is which is correct output. We pause that for a second sake. I'm sorry Yeah, it's very small. It's very small. Can we I don't know if we can make it big in it Yeah, do that on the bottom full screen Yeah, okay, let's run it from the beginning again. Let's run it. Okay And you still put a concept, but it is true. So it's fine. Yeah, I've seen happening. It's okay. You can trust us it works So so we're gonna we're gonna run notice that we're doing time so we want to measure how long this takes We're also going to run the command with two inputs two numbers the number three and the number four We're gonna add those two numbers together and if my lovely assistant would point out the number seven as output I think we all agree that three plus four is seven. Anybody disagree excellent, okay? So what what actually happens here is the interesting thing that happens here is not what we do, but how we do it, okay? so Anyone can add three and four together, but instead what's happening is we are first fetching from the server a certificate chain This is coming from the hardware and one of the certificates in that chain has its private key burned into the CPU There's no other way to access it So we have the root certificate from AMD We can validate the entire chain which means that we now know that this is an AMD CPU the chain is okay The next thing that happens is that the client is going to craft its execution policy This is what it's going to give to the firmware to say this is how I want you to make this secure environment And these are the things I allow you to do It's also going to calculate session keys. It's important to note that the session keys are generated on the client We don't have to trust the server for and to entropy the client is fully in charge of all entropy for the encryption so next We have the server starts up the secure VM and it provides a measurement of this VM This meant this this VM is empty by empty. I don't mean it's like a blank Linux distribution I mean there is not a single instruction not a single CPU instruction in it yet So we've lizard. We've literally measured emptiness which should be the same across all Executions right so the client gets this gets this measurement from the server and validates it We now know cryptographically that's the secure VM does not have any contents whatsoever This means that there's no bootkit installed. There's no other malicious instructions installed. So we know provably Through through cryptography that it is in fact empty at this point We are going to take our code which is some handcrafted assembly adding the numbers three and four together We're going to encrypt it using the session keys and that's the actual code It's encrypted so you don't know what the code is, but that's the actual code We're going to send that to the server the server hands that of course to the firmware the firmware Decrypts that for us injects it into the VM and then finally we launch the VM our output comes the number seven Okay, so I'm going to ask you a question Which is can any of you guess why we chose the numbers three and four? You know Anyone else want to guess? It's because Nathaniel couldn't be bothered to work out how to display two digits When we got to here we know that three and four add up to less than ten and as we're working in binary He was happy with that. It's basically because Nathaniel is lazy You are very welcome to write a patch and we will merge it Dust off those assembly skills, right? So So anyway, like I said at the beginning the interesting thing here is not what we do, but it's how we do it Notice also that the execution time for this is 50 milliseconds. So this is something that we can do relatively quickly It is not a big when you think of VM is typically you think like I start the VM and then like a minute or two later. It comes up We are not talking about that here. We're talking about a very rapid execution, but let's run the program before we do that I want I want people to memorize this string, please. Okay. You're the first four digits second four digits that no, okay fine It's important that All right, we're gonna do exactly the same thing again So now you would expect that if we ran the command with exactly the same parameters, right? The code hasn't changed and the inputs have not changed Therefore the code should be exactly the same, but notice that the packet we actually deliver to the server is completely different This is because we have perfect forward secrecy. So this means that we are now resistant to Statistical based attacks on the code, right? Nobody's gonna be able to do statistical analysis and determine what the code Runs giving given all the other things being equal. So that's why we run it twice Notice that our time is also predictable, but we're right about 50 milliseconds in terms of execution so that's the end of the demo and This is not we don't we do not expect to have you write assembly that is not at all what our project is about This is just simply where we are in our development process So so where we are what you just saw is this we we did the attestation. We got that certificate chain We validated that the hardware was who it claims to be we then Delivered our code and data encrypted to the firmware which injected it into the VM ran our code and we got our output Okay, so we are calling these keeps Each different technology has a different terminology for their sort of insecure environment Anarchs has a term which we call keep which describes all of the environments as being operated in an arcs This is currently AMD only, but we are very close to getting other technologies working For example, we are now attesting SGX. We haven't delivered code into SGX yet, but we are we are now able to attest it So I've got a bit further just to explain about that and ox is One of the things about n arcs is that it is Intense to abstract away all the nasty things that you don't really need to want to know as a developer About your CPU architecture, right? You don't care whether you're running on arm or power PC or Intel or AMD You shouldn't care you're far too high up at that level We want you to be right able to write microservices or applications in C C plus plus Java rust pearl one of my favorites Python Haskell and for it just to work So we're abstracting all that stuff where you say I want to keep I want to know it's going to run safely in it Make it happen. So that is the point of n arcs and as My wonderful assistant said we're not going to make you write assembly. So yes so That's going to queue you up there with it The thing he says he wanted to talk about okay, we're talking about that today. Well, okay, let's do it So our actual goal is not to run assembly, but WebAssembly So if you are familiar how many are familiar with what WebAssembly is JavaScript is Anybody know what JavaScript is? Okay? So JavaScript is slowly being eclipsed in the browser by WebAssembly It allows you to write in your own language You compile to WebAssembly and you distribute that code to a browser every single browser supports it, right? It think about it this way the largest Decentralized computing network in the world is JavaScript and JavaScript is being eclipsed by WebAssembly, right? So we're on a good technology technological grounds here. We want you to be able to develop in whatever language you want We're going to deliver that application into a keep and you'll be able to execute it securely Using your own application development framework. This is this is not And or you're not developing to n arcs. You're not going to be locked into n arcs You develop using standard APIs and they all run inside n arcs So if we're successful, this is what we've done We've removed all of these little these middle layers You still have to trust the CPU because you're executing code. You have to trust the CPU What do you think is going to do your instructions if you don't trust the CPU? But that doesn't mean you have to trust all of the motherboard doesn't mean need to cast Trust all of that the memory buffers and stuff None of that. Yep. So you're trusting the CPU and the you know microcoded firmware for the CPU But not from another vendor notice. It's not a different trust relationship You're still trusting the CPU and the firmware from a single vendor Then you're trusting any middleware you include in your application because well you have to include middleware in your application And then finally your application itself, but the entire middle layer has been removed and our plan is to make n arcs Small and easily audible and of course completely open source I had to answer a question from a lawyer yesterday about an article I was writing about n arcs And said it will always be open source and she said will it always be are you sure you can say that? Yes, yes, always always open source. All good. Actually too for those people who are wondering. Yeah So in this current code, there are I do want to be completely transparent There are some attack vectors and I want to disclose those So there are some possible of hypervisor attacks on the guest on current hardware The hardware we ran this on was the Naples generation of AMD SEV And some of these have actually now been mitigated in the next version of the hardware So this is I'm now talking about AMD's Roam chips, which were just announced So the the first or the first two attacks are roughly the same thing Which is that the hypervisor has full access to read and to write to the guest CPU registers Which means that the the hypervisor can see quite a bit of what's happening inside the VM and can tinker with it Which is potentially just as dangerous So this is solved by a CVES, which is no longer future AMD roadmap This has now been announced. So in the realm generation of chips, this is this is no longer a problem We still don't have full software support for the strategies in these chips But AMD is working to bring that upstream. So we should shortly have a resolution to this problem number three is that there are There are attacks with moving memory pages. So the hypervisor could say Convince the guest to write some information to a page here and then move a page somewhere else and get the hypervisor decrypted in it and in a different way that is a possible attack from the hypervisor and the fourth was a Vulnerability which we disclosed to AMD and that is the code that's executing allows the tenant to Select or excuse me allows the host to select what what? location in memory the encrypted code is decrypted to and We we see a potential for attack at that place. However, our code is not vulnerable to that The way that we have designed the code, but this is a potential problem both of these problems AMD Is working on and if you would like more information on that you could you can talk with AMD But we definitely expect a future without these problems So as we said before this is AMD at the moment the demo you've seen is on AMD But as Nathaniel mentioned we are very close to having similar functionality on SPX and It's not I'm not going to suggest Lily is lazy. It's just she decided she had finished a thesis instead Thought that was more important. So We'll get that we're nice and close. So yeah, we've got a really great team of developers We're working on all of these different platforms. Well, well, well, we have a great but very small team of developers and always looking For people with an interest in doing this sort of stuff So if you have expertise and an interest, please get in touch. You can go there and find out all about the project Sorry big plug that. Yes. Thank you So what you where to go to find out more edits on github My this is really funny if you're a cryptographer. This is a really funny Name might I have a blog called Alice even Bob Mike likes to imagine himself clever. So just just engage him I like to think we're having to convince other people that I am and then he has a he has a blog as well Then we have LinkedIn and I'm on Twitter and he refuses to admit. He's on Twitter I think That is it. Yeah, okay. So one will make these available the slides This is going to be big people really care about this stuff The industry is beginning to realize this is really important and that we need to be able to make this happen So please keep an eye out and as I said, we're very interested to talk to people. So I've been up for questions We're about 10 15 minutes. Yeah I will talk into Mike's lapel I will talk in this microphone. Are there any limitations in terms of like size of the code you could send to the Today yes In the future I would so all of the limitations are basically limitations that are Imposed by the hardware manufacturers and as I would suspect you would imagine hardware manufacturers are looking to increase those limits And they again it they are they they're different based on the different Hardware vendors and they've all said they're gonna make changes and what exactly those changes are either either can't remember or can't tell you under NDA so yeah, so I can give you some public information Currently on Intel chips. There is a limit to 96 megs of resident memory for SGX That number will disappear very soon And will become a bigger number a bigger number the on a AMD the current limitation on Rome is there's 512 key slots and I think 510 or 509 of them are usable for VM so you could have 509 different instances If this number will also be in the future replaced by a larger number so and then IBM is has announced PEF and PEF has Some similar restrictions. I don't remember what they are off the top of my head But those will also be getting bigger as time goes on. So hopefully you'll notice the trend here, right? They're starting small and getting bigger You oh, it's on back here. She's sorry first. Yeah My question is why do you say I'm trust zone is not T Because it basically allows parallel execution rather than execution in the main Yeah, it's so basically Trust zone allows you to build a separate operating system rather than a separate child of an operating system and It's sort of a tool that you can use to build a TEE, but it doesn't really have It's a more monitoring what the other operating system is doing rather than doing a separate execution And we don't we don't want you to build that right like we we want you we also don't want So when trust zone gives you the abilities to build that it also means that everyone who builds it has a separate trust level Which doesn't really help us? Reduce the amount of parties we need to trust It also has extremely limited constraints I believe the limit and if you want to know more about this Patrick Ruderweich is the guy to ask I Believe the limit for resident memories only 10 megs and there's really not a whole lot You can do in 10 megs and that 10 megs is the entirety of the parallel operating system Not just your application and we spoke to arm and they said yeah, don't use that don't use trust zone to do this stuff Was the algorithm that I use the encryption algorithm used Yeah, so it's dependent on the on the manufacturer we basically we have to use their attestation process We hide that from you so you don't need to worry But yeah as 256 in in in the AMD Attestation Yeah, everything that's all of the algorithms that are used in these attestation processes are all NIST compliant they the hardware vendors know that they need to sell this eventually to To people that are bound by by NIST requirements, and so basically everything is NIST compliant So the solutions you've described sound perfect for a deterministic compute What about applications that want to do IO or make syscalls or anything, you know more interesting so There so let me let me take up the syscalls one first We actively are disallowing anyone to make syscalls out, right? We want to enforce a double barrier on the technology Any time that you don't do that, which is precisely what SGX does by default Means that we all you've done is created the perfect place to put malware If the if the if the guest in this case right or the tenant can do malicious things on the host without being detected We consider that a very bad workflow, and we don't want to enable it So in terms of in terms of making syscalls We are not going to allow raw access to that on the other hand. We are going to allow things like networking We are going to allow storage at some point in the future where we're not there yet But the when we do offer things like persistent storage The only thing that the host will see is going to be a block device And there's going to be a block level encryption on top of it And then inside the guest you will see a file system that you can do file system IO on But the host will never see that file system and another thing we are enforcing that all Connections out let's talk about the network connections out at the moment are Encrypted there's going to be no Just plain as it's going to be CLS encrypted. It's just the way it works We're not you're going to deliver your application, right? We usually bundled in a certain way with a certificate for that particular application And then you can create TLS sockets using that Certificate, but you will not be allowed to just do TCP or UDP We may allow that as a secondary mode where you get to keep all the bits if you lose your security, right? But the point is we want you to be able to write an application without doing special magic steps and We remove a whole selection of our whole classes set of classes of attacks, you know There is no secure. We know there is no perfect security. We're not pretending there is But we want to do is we want to make it more difficult for you to do the wrong thing For developers who are not experts to create things which have the highest levels of security We can create without making it easy for them just to mess up. So that is what it is You know, so they don't have to worry about the attestation They don't need to worry about the encrypting it so far it goes in it just happens This is an application deployment framework. That's what it's about. Sorry Can you talk about the variations in the different enclave? Technologies which ones are more and less vulnerable? I know that people say that's GX actually stands for stuff gets exposed Or something else instead of stuff But I know there's a wide variation there and I thought it'd be interesting to hear about it Yeah, so there's generally speaking in the industry. There are two essential models One is the what we're calling the process model and the other one is the virtual machine model The in the process module a model You're basically going to carve out a specific section of your process that section is going to be isolated and encrypted in certain ways according to that technology and But there's no two-way barrier So the stuff that's inside of the keep can not in an arcs, but inside of the secure area Can can talk out mess with the system. This would include Intel SGX and But we believe the market is actually converging on the secure virtualization model it appears that Everyone is either working on or Or has already released a secure virtualization technology. So we think that the market is going to kind of urge on that technology The process model has some inherent weaknesses in that it's a completely new security model, right? We all sort of understand user separation. We understand process separation. We understand VM separation These are all existing barriers that we are using every day. We're deploying them every day at very large scale They're well understood the problem with the process model is that it comes along and puts a barrier right in the middle of a process which is We've never done that before and And so even if it can work we have a long way before we really feel confident as a community as a community So I think the much shorter path to acceptance is by building secure VMs because all we're doing with secure VMs is Increasing the strength of an already well-known barrier. I want to stress again that when we say VM We don't mean a thing with a whole operating system in it. We just mean Literally an empty VM into which we could decide what we stuff Yeah, very it is not a virtual operating system think virtual CPU. Yeah Yeah, sorry any other questions we saw a few minutes if and I have I have stickers So when you're running code in a TE what does the kernel see does how does the memory management work? Does it see? Like a process. Yeah Well, so the answer is that it sort of depends on the technology whether it's process-based or VM-based In the in the case of a secure VM It the the way hardware virtualization like KVM already works right is that you start up the CPU in this particular mode And then there's a bunch of things that the CPU handles itself without ever exiting to the kernel when it does exit in the kernel We call this a VM exit and this allows the kernel to do things like emulate hardware or other things In NRX it's our intention to develop our own custom hypervisor for this not QEMU And we already have as you've seen it some send some demo of that And this is because we really don't want to emulate a lot of hardware We want to give that we want to have as few VM exits as possible And there's some really interesting questions that are Have not been decided yet in terms of exactly how things fit So what does a unit kernel look like exactly what you base that on and that's that's the stage of the project We're at which is why it's a great time to be involved because there's lots of interesting stuff today So, yeah Everything's also currently coded in rust so we do rely on the memory protections that the rust language gives us Which means that we also can have a higher degree of confidence in the code itself Yep, please so when you're when your Code is executing it runs on a CPU and then you're done your return to the user Who runs on that CPU after and are you worried about what they can see? After you've run your it's a it's run on a virtual CPU that's encrypted And then when your code is done running that CPU goes away and no one ever Does but the physical CPU correct right on the hardware runs on let's say CPU 17 and I mean then you're done and somebody else Get CPU 17.  So statistical analysis of ciphertext is explicitly not within our threat model We are essentially trying to reduce it to the fact that the only thing you can really do is statistical analysis Which nobody's really succeeding at and clearly, you know, it would be possible for the chip vendors to have miss implemented The instructions and all that sort of stuff so they could get it wrong and when it comes down to it That's you know, we can only do so much We have to accept that threat model and you know feedback whatever we can to the to the chip vendors But this is one of the strengths of an arcs right because if you have an application that you've written You've compiled the two-web assembly You're deploying it with an arcs and all of a sudden you discover that Chip of Ender X has a huge vulnerability You just redeploy on a different manufacturer, right? It's there's it's literally just deployment configuration in our model So if you find something you're worried about if you find you can't trust a CPU just don't use that kind of CPU anymore Are there any risk five designs that include These features there is an initial proposal from risk five called sanctum. You can Google that and you'll you'll find the details of that proposal It's the sanctum project is a process-based model similar to what Intel SGX does I really wish they would focus on the secure view model instead We think that that's a better technology, but but we do plan it to support it eventually It's not higher in our priority list right now so just to finally To wrap up This does not make for perfectly secure computing nothing makes for perfectly secure computing What it does is it removes the number of trust relationships you need to maintain Allows you to have greater assurance and Cryptographic confidence in the bits that you do need to trust Either because they're from the chip vendor or because they're using open source Writtening languages which we have a fair amount of trust in which can be audited both at the code level like a pile level And also at the application level that we're providing Webassembly is key here because even if your code does something wrong web assembly always faults in a predictable way Right, so even in the failure case one of the benefits that web assembly gives us is a constant known mode of failure So we'd love to talk to you more about this. You know how to get in touch with this. We'll be around for the next couple of days I've got stickers go to nox.io There's a You can put issues in there. You can look at the wiki You can submit code. That'd be great. So thank you very much indeed for your time and Appreciate your coming along. Thank you


I'd like to ask you for a definitive and declarative statement without ambiguity or deflection. As the person who speaks for the President, does the President denounce white supremacism and groups that espouse it in all their forms? This has been answered yesterday by the President himself, the day before by the President himself on the debate stage. The President was asked this. He said, sure, three times yesterday he was point-blank asked, do you denounce white supremacy? And he said, I've always denounced any form of that. I can go back and read for you in August 2019 in one voice. Our nation must condemn racism, bigotry, and white supremacy. In August of 2017, racism is evil. And those who cause violence in its name are criminals and thugs, including the KKK, neo-nazis, white supremacists and other hate groups. I have an entire list of these quotes that I can go through with you. He has condemned white supremacy more than any President in modern history. Just to clear it up this morning, can you, naming it, make a declarative statement that the President denounces it? I just did. The President has denounced this repeatedly. The President was asked this. You're contriving a storyline and a narrative. He said, I just did. I read you all of the quotes. And if you need to see them in writing, I will put them in an email. Call us. So, Kayleigh, can you right now denounce white supremacy and the groups that have just found it? I just did. The President has denounced white supremacy, the KKK, and hate groups in all forms. He signed a resolution to that effect. The President just last week, perhaps you all weren't covering it, but just last week expressed his desire to see the KKK prosecuted as domestic terrorist. This President had advocated for the death penalty for a white supremacist, the first federal execution in 17 years. His record on this is unmistakable, and it's shameful that the media refuses to cover it. Yes. Thank you. The FBI and the Department of Homeland Security say that racially motivated violent extremism is one of the deadliest threats that we face in the U.S. Does this White House agree without assessment? And what is it doing to combat this threat? The President has done quite a bit to combat this threat. First of all, last week, he also, in addition to saying he wants to prosecute the KKK as domestic terrorist, he said that lynching should be a national hate crime. And again, I think there's no stronger signal that you can send than advocating for the execution of a white supremacist the first time there's been a federal execution in 17 years. He's been unmistakable. Is it different than actually doing it? He's continually condemned it, and it is really... Record on this? It is really... It is conducted... It is not... He's equivocated at times. He said he didn't want to acknowledge it or address it. His record is very mixed on this issue. His record is not mixed in the slightest. And when you go back in history, you can see that... Perhaps history right here. If you go back in history, you can see that Jesse Jackson has praised the President as someone who served under certain communities. This President, with Mar-a-Lago, it was the first Palm Beach Club open to African-Americans and Jews. And in fact... His record is mixed. He has not been consistent on the issue of white supremacists. He has been entirely consistent. It is quite shameful. It is white shame. It is white shame. What the FBI says is... Let me speak to Paula. Let me speak to Paula. Paula, we're not having a debate on a case of abuse. You're saying that he condemns it. I have his record right here. You need to let me finish. Because the record is quite funny that the media goes haywire about interrupting and debates and then chooses to pursuance that very same tactic themselves. This is a White House briefing. You ask a question and you give me time to answer. Yes. Disogynistic, Islamophobic, anti-Semitic, anti-immigrant views. They're a despicable group by pretty much anyone's standard. So when the President was asked about them and you say he denounced them, that's what you're insisting that he did on the debate stage the other night. That's the case. Then why are they celebrating what the President said on the debate stage in front of millions of people? Well, I don't speak for that group, so I'm not sure why you're asking me why they're saying a certain thing. Someone denounced you. You probably wouldn't put it on a T-shirt and make badges of it, right? The President did denounce them. He was asked, will you tell them to stand down? He said, sure. He went on to stand. And by, which seems like an instruction. He said, stand back. And then just yesterday when he was asked, he said specifically, stand down. He said, send in them with, stand back. And the President said, sure, when asked by the moderator whether they should stand down. So again, another, it's really interesting, too, to see that the media seems to be the only one putting the names of these groups into headlines, into media reporting. He didn't know who the Proud Boys were. The first time I heard of them was in the debate. But the media continues to put these names into circulation and give them a lot of public attention. But this is given about just 12 hours more than that since from the debate from when he was asked to clarify yesterday. And he didn't come out and clarify yesterday. Instead, he did what you did when John asked you to unambiguously denounce these groups. You just pointed to past things that you've said. You can't, I just don't understand why you knew you were going to get these questions and you don't want a statement ready to just say, we do unambiguously denounce these groups. You know what is, you know why people have lost trust in the media? There was a reporter from your network yesterday, your network. And in a tweet said, quote, the President. I'm asking you a question. I don't answer your question. I don't know what you're going to bring up, but that was nothing to do with what I'm asking you right now.  The President and someone from your network said yesterday in a tweet, the President dodged a question about white supremacy. That was a tweet from a CNN reporter. The President specifically, Verbedum, was asked yesterday, white supremacy, do you denounce them? To which he responded, I have always denounced any form of that. Those are the facts. In CNN, I know that truth is of no moment to your network, but those are the facts. He's yet once to condemn white supremacy, the neo-Nazis. He hasn't condemned the darn thing. You've got David Duke just joined, a bigot, a racist, a problem. I'm not looking for it. Would you repudiate David Duke? Sure. David Duke, and Robo calls around again, the white supremacist movement supporting you. Do you have any words for that? Well, I disavow. David Duke endorsed me? Okay. All right. I disavow. Okay? Well, we looked at it and looked at the question. I disavowed David Duke. I disavowed David Duke all weekend long on Facebook, on Twitter, and obviously, it's never enough. So are you prepared right now to make a clear and unequivocal statement renouncing the support of all white supremacists? Of course I am. Of course I am. When Chris joined, we had a news conference, and they asked me the exact same question. I said, I disavow. I disavowed then, I disavowed today on ABC with George Stephanopoulos. I disavowed again. David Duke is a bad person who I disavowed on numerous occasions over the years. I totally disavow the Klu Klux Klan. I totally disavow David Duke. Ultimately he got to the Klu Klux Klan, which obviously I'm going to disavow. I've rejected David Duke, rejected David Duke. I've rejected the KKK, the Klu Klux Klan. David Duke is saying to his supporters and followers, vote for Donald Trump. White supremacists are saying, do you want those votes? No, I don't want them, and I don't want him to say it. And you don't want the supporters? No, I don't want anything. How many votes? White supremacists, by the way. I don't like any group of hate. David Duke announced his Senate candidacy claiming your agenda. Are you ready before you ask the question? Newt Gingrich said, every Republican should repudiate this guy no matter what it takes. I did, and I do. Rebuke. Is that okay? Rebuke. Done. Done. Do you want white supremacists to vote for you? No, I don't at all, not at all. His campaign is denouncing a show of support from the KKK's official newspaper as in the Klu Klux Klan. In the same New York Times interview, he denounced white supremacists. He denounced the neo-Nazis who support him. Racism is evil, and those who cause violence in its name are criminals and thugs, including the KKK, neo-Nazis, white supremacists.  I spoke out forcefully against hatred, bigotry, and violence, and strongly condemned the neo-Nazis, the white supremacists, and the KKK. President Donald Trump signed a congressional joint resolution that condemns white supremacy, neo-Nazis, and other hate groups. In one voice, our nation must condemn racism, bigotry, and white supremacy. Any group of hate, I don't like it. Any group of hate, I am, whether it's white supremacy, whether it's any other kind of supremacy, whether it's Antifa, whether it's any group of hate, I am very concerned about it, and I'll do something about it. Carrying the water for Democrats, the media, it apparently agrees with Jerry Nadler that Antifa violence is a myth. In August Senate hearings, Democrats refused to condemn Antifa, again, no journalistic curiosity here, despite the fact that Andy Nizzo, who was a victim of Antifa, said Democrats have mastered, Democrats, you should add the media, too, have mastered the art of making its violence appear innocuous. Their violence isn't innocuous. Antifa is not an idea. Andy Nizzo can tell you that, because he was beaten by a group of protesters, Antifa protesters suffering brain bleed. Another man can tell you this, who in 2019, the victim, his name was Adam Kelly, suffered from a concussion and got 25 staples in his head, but still, silence from Democrats, ignoring this group from Democrats, and in fact, as we just saw recently, there was a Trump supporter who was killed by a 100% Antifa man, that is how he described himself. And again, no reporting here, but I guess I did the job of the media by getting this information myself. This man, who was 100% Antifa, this man, in fact, had been arrested before at 2 a.m. on July 5th in a public protest carrying an illegal weapon. He resisted arrest. He was taken to jail where he was merely given a citation, put back on the streets, and the very next month, this 100% Antifa man was lying in wait before he killed an innocent Trump supporter. Ideas do not target police officers. Ideas do not burn down buildings. Ideas do not kill innocent Americans' organizations, too, and Democrats should condemn the shameful group in the same manner President Trump continues to condemn white supremacy.


We just wasn't cleaning up execution wise on defense. Got to be better there, but we did some positive things, but just not enough. Final score, Cincinnati 20, Tennessee 16. Tindall! M Studio for the Mike Vrable Show, presented by Shift 4. With the head coach, I'm Mike Keith. We are headed towards December football. It's hard to believe that it is almost December. The Titans final November game at Nissan Stadium saw Tennessee fall to Cincinnati by final score of 20 to 16. Mike, as you broke it down with the team yesterday when they came in, you gave them a real challenge, didn't you? Well, we just needed to focus on the good, the bad, and the ugly. Asked them to drop the shield. Asked them to be accountable, but we got to fix mistakes. We got to go on the road, and we got to take the Titans that we know and love. And the ones that we've been accustomed to, the ones that take care of the football, turn it over, play complementary football, run the football, stop the run. You know, there's a lot of things that we can do better. Did some good things coming out of the game, just like Kevin said there, not enough to win the football game. All right, let's take a look at some of the good things. Pressure early on, Joe Burrow. The Titans actually stibied the Cincinnati offense early in the ballgame, forcing three punts in a row to begin. Here's pressure from DeBarkas' wall. Yeah, kind of from everybody. You see David Long in the middle of the pocket. You see Mario Edwards coming around the corner, and then DeBarkas up the middle. And that really gave them nowhere to go. That's the plan, that's the idea. There's a lot of other clips in there that we didn't have the same coordination in the rush, but you can see a guy that forces him to step up into two guys that are pushing the middle of the pocket. Really nowhere to go. Good coverage. Everybody was getting underneath the verticals that they had on that play. DeBarkas' Walker number 95 has played a lot of football in the defensive line for the Titans this year. Been productive the last four or five games. Probably his most production that he's had thus far in his career. His versatility is why you wanted him. Yeah, he's always, this guy we always liked. He's played along the front. He's durable. He's played different spots. And so he's showing up and continuing to produce, and he plays hard. All right, let's take a look at one of the X plays from the Titans passing game. This also coming in the first quarter. Nick Westbrook, Akine from Ryan Tannick. Yep, good pocket. Ryan was decisive. Nick split the safeties. But again, clean pocket in the middle. And Ryan steps up and is able to deliver the ball on time. Nick's going to take a hit here, but he goes up and high points it. And it does a really nice job on third down there. Westbrook, Akine, four catches for 58 yards in the game. He has become a lot more productive over the last three weeks. What's led to that, Mike? Well, I think just the overall success of our passing game. Guys being where they're supposed to be quickly, protection holding up, quarterback being decisive. Just making sure that we throw to the guy that's open. And Nick's been there. He's been dependable. He's been strong with the football. So we'll need everybody's best efforts here moving forward. 3-3, the score in the second quarter. When we see the Titans touchdown play that I know Coach Mike Grable will be proud of, not only for the execution, but for the hustle. Yeah, well, it starts here with, you know, you see the quarterback kind of pump it to get Derek open. He kind of ran into a little bit of traffic. Bruce Day is legal. He's down there blocking. Hoop's blocking. Traylin's blocking, slips. You know, there's Chick blocking down the field. And then Chick's, or Traylin's guy actually comes off when he slips and, you know, don't want to see anybody hammer the football out of anybody's arms of ours. But it's a great reminder that you never know when you're going to protect the guy with the ball. Something comes out and there's Traylin. So I thought that was a great way to get him his first touchdown. 69 yards is officially how long the reception is. And then the Titans recovered the fumble in the end zone with Traylin Burks. As Mike mentions, his first career touchdown as a Titan, he takes it away from Jesse Bates there in the end zone. Bates thought he had one. And instead it was Burks. And again, you could run to the football 30 times and never be needed. And on the 31st time, you're going to have to put a fire out. And that's certainly what Traylin did. So it's a great reminder to everybody on our football team that you never know when your effort is going to be to play that makes a difference. Derrick, too, on the year has already set career highs in receptions and receiving yardage. And you still have six games left to play. But that'd be great. We're going to have to have more of those. Those are game-changing plays. They change field position, score, X plays. We're just going to have to get everybody on the same page and be able to try to hit some more. How about some more Traylin Burks right here? This is a fantastic catch down the middle. It ends up going for 51 yards. Tannehill gives him a chance. Yeah, the safety kind of bites down on some of the intermediate stuff. And once Ryan saw that the safety bit down, you can see the protection. I know Hendrickson comes late inside, but a lot of protection, able to hold up and we're able to get the ball down the field. Probably could have gotten it to him a hair sooner, but I'm nitpicking a little bit because he had gotten behind him. But just a great job of going up there and high-pointing it and getting an explosive gain for us. Burks for 51 yards on this play. Hendrickson's hit actually ends up being ruled roughing the quarterback, which adds another 12 yards. Titans forced to kick a field goal in that situation. Let's wrap up with a couple defensive plays. Yeah, late in the game here. We're getting everybody out there. And they go with the toss, crack, and guys are running and swarming. And we just need to put it together a little bit. We just, they got us on the one red zone drive. Mistakes, missed tackles, third down conversion, third down conversion. And they just ran it in from the eight yard line, which isn't us. That's what I told the team. I said, there's a lot of things that happened, but teams running it in from the eight yard line. I can't remember when that's happened. And that can't happen. So we just have to continue to find the resolve to get them stopped if they get down to the red zone. All right, let's see a little more of that resolve right here from the defense. One more play from those guys as they make it happen on the inside. There's a quarterback draw. It's a quarterback draw. You know, this is that late third down play to give us a chance. Unfortunately, you know, we got a penalty on the field goal, but guys were tuned in, you know, they had third and 10 late in the game. They went to empty, saw the split safeties. He went with the check and, you know, you could see Jeffrey was ready for it, executed it, tackle for no gain on the cornerback draw. So, you know, we just have to continue to take these keys, understand how the game's being played, what the situation is. And I thought that that was a good example of, you know, things that we can build off of. And so you show them the positive along with the negative to keep it all in perspective. Well, you have to, you have to always keep this thing in perspective. You have to find ways to improve when you win, find ways to improve throughout the season when you lose. Have an open mind, be willing to learn, be willing to take accountability. But we show them the good, the bad, the ugly. And I've tried to do that since I got here and try to be consistent whether we're winning or whether we're losing. All right, when we come back with more of the Mike Vrables show, we'll talk about what's upcoming with the Philadelphia Eagles this Sunday, that and a lot more, including our epic Western Genuine Titan. We'll see the special teamers next. Welcome back to the Bed MGM Studio and the Mike Vrables show presented by Shift 4. If you've watched this show any at all, you know special teams is very important to head coach Mike Vrables. And if you watch the football team, they get it. When the special teams units are on the field, those coverage units, everybody is up to watch them. That's why we feature these guys as tonight's epic Western Genuine Titans. And so you just kind of bring that physicality if that's your specialty or speed, obviously, for some of the smaller guys. But the hard-hitting play is similar to what Dylan had this past week. It just sets the tone. It comes down for you. Exit from the seven, to the 10, to the 15, to the 20. Bam! Dylan Cole! At the 16, looking for room gets away from A3. Just took those pins right out from under him. What an outstanding special teams tackle. Having that angry, like, aggressive mentality, I want to make the play type mentality. He's right in front of the two. Ask it! Love it. We love it. It gets the people hyped, and defense offense are looking and watching and starting trying to create momentum and keep momentum. Stab, set.  And everybody, I feel like, has contributed to that mentality of running and gunning and just ready to go make plays at any time. He's at the 12. He's at the 15. He is hit and melted! Just outside the 20-yard line. Dylan Cole! Fun to see those guys do their thing. A lot of Dylan Cole, because he was wired at Green Bay. He has 11 special teams tackles on the year. Leading the team has signed Haskins with 13. Joe Jones with 9. Trey Avery with 6. And it was interesting, in Sunday's game against Cincinnati, the crowd has now picked up on this. They have gotten what your special teams' units do. And it was interesting to see the noise and the enthusiasm from that. It's electrifying. It's catching. Yeah, and I told him, if we're all gonna do this and we're getting up for you, you better put on a show. And, you know, we went down there and covered a good kickoff. Tori was a physical and aggressive. Joe split the double team. And, you know, it can make a difference. You know what I mean? They set the table for each and every series, trying to bring them and incorporate them into the team. And just so that they understand how critical their role is. And some guys are really embracing it. You know, we've got to get these return units going. You know, we've got to continue to hit these punts and go down there and cover them and send messages with speed and violence. All right, that's good stuff. And it really is something that people pick up on. And it adds a different element that, quite frankly, the Titans haven't had very often. Well, I appreciate you noticing. We have to be better. But, you know, I appreciate that from where you're sitting and your vantage point that guys are up.  You know, we got to watch them. And, you know, so everybody, that means something to me. That's Coach Mack telling me that. Yeah. He's the one that notices. You know that. You're just the brains of the operation. No, that's not true at all. More coming up on the Mike Vrable Show, presented by Shift4. Thanks for joining us tonight. Stay with us. Welcome back to the Mike Vrable Show, presented by Shift4. Last Sunday's game at Nissan Stadium was the organization's second annual Playmakers game, that honors women who are not just involved in football. It's women all over the community making important contributions in so many different ways. This week's Wesley Mortgage Community Hero is Jessica Doyle, an attorney who helps LGBTQ plus couples and families with free legal services for uncontested adoptions. Dear Jess, since the day we met almost 25 years ago, I've been awe of the amazing and selfless things you do. Mentoring kids at Bethany Hills, raising funds and wrangling supplies for urgent needs. Coaching youth sports, fostering community by organizing potlucks or gatherings for hundreds of families. Professionally, your generosity shines through your legal work as children and family advocate, an ally to the LGBTQ community. And the delicate way you navigate difficult and extremely emotional legal matters. In and out of the courtroom, you help us all find family in the ways we need it. Here's what the people closest to you had to say. Jess, the spirit of giving has no limits. She is a force of nature, an advocate for all. And a fighter for what is right. She has the biggest laughs and she makes people feel seen. A community influencer with a servant's heart who reminds us through her work that love makes a family. You've changed the trajectory for many mental test ends. So today we honor you as the Wesley Mortgage Community Hero. Let's go to the game. Getting to see kids end up in a loving home or homes. That I think every kid deserves is the most rewarding part. Those rewards look really different for all kids and all families, but kind of known at the end of the day that what we did mattered is the best. Thank you so much Wesley Mortgage. This is an honor I'll cherish forever. I love these Wesley Mortgage features. Yeah, they get better each week. And this spirit of people in and around our community is amazing. Good stuff. Know your foe is next. We'll talk the Philadelphia Eagles when the Mike Vrable Show continues presented by Shift4. Mike Vrable Show from the Bed MGM Studio presented by Shift4. Time to know your foe. And this one is a good one. It's the Philadelphia Eagles. Haven't seen him in a while. One of your first victories is Titans head coach. A thriller. It was a thriller. An overtime. OT thriller. It was a thriller. Couple fourth down, gotta have it. Woo! Tay Won Taylor with a big catch. Huge. Huge catch. Fourth and 15. Yes sir. Our sideline. Gotta look ahead coach, not look backward. That's what you say. All right, Eagles are 10 and one. They just beat the Packers. Best team in national football league. And Jalen Hurts. Jalen Hurts the quarterback. I mean, my goodness, he has been fantastic running and passing. Anthra, he's taken care of the football. He only has three interceptions.  They're getting it out of his hand.  They're running. They're design running. He's running and scrambling.  All right, so that's Jalen Hurts, who's certainly a candidate for offensive player of the year. Miles Sanders with 900 yards rushing. You know, AJ Brown. And you know, Devonte Smith from Alabama, who's having it out there. Talented skill players. Miles Sanders, really, really good running back. He's healthy. He's taken care of the football. You can see here, he'll hit it anywhere. AJ's got great balance. This is a highly drafted running back a few years ago, and it seems like he's gotten better each and every year.  And then the route runner that Devonte is plays much bigger, you know, than what his weight is. He's a strong player for what his weight is. And on defense, it's about takeaways and pass rush plus 13 in the turnover ratio 36 quarterback sacks on the year and the leading interceptor in the league in CJ Garner Johnson. Yeah, if you float it out there, he's going to go find it and get it. You know, they lead the league in interceptions. They have 23 turnovers. Third in the league in sacks.  You know, you can remember when Fletcher Cox used to be the guy. They've got some guys around him now. And, you know, it's, it'll be a huge challenger this week. Fourth in the NFL in total offense. Second in the NFL in total defense. Work to do. What are the keys to success? Well, those are next on the Mike Brable Show presented by Shiftful. Nissan keys to success. Titans want to go to Philadelphia and get a win over the Eagles. So we got they rushed for 360 yards on Sunday. A good place to start. You got to stop the run, right? It would be a good place to start. Quarterback design runs, runs obviously with Sanders and then the other hidden yardage in the quarterback runs when they drop back to throw it and you don't contain or you don't have coordinated rush lanes. That's something that's going to have to get better than the last time we played last week. All right, for the Titans. Staying on schedule offensively is key number two. What does that mean? Well, that just means being real efficient. We can't live in third and 10, third and 12. We have to continue to be efficient on first and second down and pick up first downs or have third and short. Really Washington is the blueprint.  I like this one, especially with our genuine Titan being the special teams unit. When the Hidden Yardage on special teams, explain that. Well, it all goes into drive start. It's field position, the Hidden Yardage is where we start, the net punting, the how we cover kickoffs, make sure we're catching every punt, making great decisions, leaving it in if we're two or three yards deep in the end zone instead of trying to bring it out. All these things can lead and add up to yards that at the end of the day, sways the field position battle. It's December football, it's your time. It's gonna be critical. Take care of it, win the Hidden Yardage and run the football. For Mike Vrable, I'm Mike Keith. Thanks for joining us for the Mike Vrable Show presented by Shift Forward.


The purpose of this experiment is to study how radioactive material could travel from the land into the sea. We use the simple approximate plaster model and spread water on it and observe how material could be transported particularly from the land to the sea. We've observed that a good amount of this dust or colored pigment can wash away from the top of the mountain down the valley into the river and eventually into the ocean. This map is not accurate and does not represent the current action but is just helping us to understand better the phenomenon. Here we create as if there was a tunnel and the transport of larger debris from the surface into the ocean. Thank you.


Thank you very much for having me here. I think my experience on the past Yesterday as well as today. I think it's a very significant milestone moment for the industry where the entire fraternity comes together and it's It takes a lot of caliber and capacity and I think Exchange for media has really shown the kind of leadership, which was much required in the industry I'm really grateful to be a part of this and to meet my able colleagues from the trade It's just amazing what they have put together and So credible and so thoughtful as well. So I'm very grateful


So, we've got, we've been told that there's a massive natural gas crisis. We've been told that this is going to be a disaster, that, you know, there's no way to solve it, there's been panic, people have been upset, people have been, I mean, it's typical of the media to blow this out of proportion, you know, people are going to die, Europe is freezing, energy crisis in Europe, we're totally dependent on Russia, we can't survive without Russia, if we don't sign a peace agreement tomorrow with Russia, and oil and gas supplies, gas supplies will come, you know, Armageddon is going to happen. And this is consistent with the general kind of, you know, general appetite for catastrophe that exists in the world in which we live. We're always seeing catastrophe, it's just around the corner, Armageddon is going to happen, maybe not this year but certainly next year, maybe not because of this thing but because of that thing. We are an interesting species that seems to believe that the end of the world in one way or another is always just around the corner, it's always going to happen, it's always in my life that I'm going to happen. So, the whole natural gas problem in Europe has been blown out of proportion and then of course there was the gas pipeline explosion and the conclusion from that was, well now, even if, you know, now the Europeans are finished because they can't get the natural gas from Europe and this is a massive horrific disaster and we should immediately beg Putin to be nice to us and to open up the spigots and provide us with natural gas because who knows what will happen if we don't have enough heating right now. So, that's the story. The reality is, of course, very different because once it became evident that there was going to be a natural gas problem, what do markets do when supply, you know, when a supply of a good we believe are going to shrink into the future yet demand is as high as ever. What happens to prices? Well, prices adjust. Prices start going up, not because right now there's a shortage of natural gas, not because right now there's a shortage, but because we have futures markets, because we can buy and contract natural gas or oil or pretty much any commodity today, we can buy it today but for future delivery, then people bid up the price of natural gas today because they're worried about their ability to purchase it in the future. So, what actually happened to prices of natural gas as this panic came about is the natural gas prices went up. What happens when natural gas prices go up? Well, demand for it goes down. So, people consume less of it. Energy prices went up. People consume less energy when energy prices go up. Consumption of natural gas went down. What European countries did with the fact that consumption went down because prices went up is they started to refill their storage. There was massive storage underground in, you know, in the ground. There are these massive capacity to store natural gas in Europe. And what has been happening is because demand went down because prices went up. European governments are being massively using opportunity, the additional supply of natural gas, funneling it into storage. So, one storage is at record highs. It's, you know, there's some capacity for the storage in Europe that can be filled with natural gas. I think with something like 94% of that, that's way above expectations. That's way above anybody predicted way above what Europe thought would be enough to survive the winter. That was around 80% and we're now at 94%. So, that's one thing that happened. Beautiful how markets work. It's beautiful how prices work. There's going to be a shortage. We raise prices. People start demanding less. That creates the potential for surplus. And that surplus gets driven into warehousing, right? Into inventory, into some kind of place where we can store this stuff. So, that has happened. The second thing that happens when prices go up. When prices go up, people become very, very creative in terms of fighting new sources of gas. Prices went up because the expectation was that gas from Russia would be diminished dramatically because of the war in Ukraine and the supply of gas from Russia declined significantly. So, we're now getting, we, Western Europe is now getting about 25% of the natural gas that it gets in a typical year. So, typically it's getting 75% less. So, what's happening? So, where's the rest of the natural gas coming from? Again, because prices went up, demand went down, that covers part of it. But as soon as it was clear that the supplies from Russia were going to be constrained because of the war in Ukraine, as soon as it was clear that Putin was playing games with the natural gas and it became clear that Europe is incentivized not to buy natural gas from Russia because it doesn't want to support the Russian war machine. Remember, Germany was, I'm not sure what the number is today, but at the beginning of the war was sending $1 billion a day in cash and dollars to Russia in exchange for the natural gas and the oil it was receiving. As soon as it became clear that they didn't want to continue doing that, Germany and other countries immediately start looking for alternative sources of natural gas. It turns out there are other players in the marketplace who have natural gas that challenges how do we get it to Europe. So, for example, the United States has plenty of natural gas because of fracking. We have, in a sense, more natural gas than we consume in the United States and as a consequence, we can export natural gas. Qatar, because it is in the Persian Gulf, it can access natural Gulf from the entire Arabian Peninsula. It has massive quantities of natural gas. Kazakhstan has natural gas. Israel has natural gas. Egypt has natural gas. Norway has natural gas. So, the first thing is increase the purchase of natural gas from these alternative sources. Now, the problem is, as you might know, how do you get the natural gas to Europe? Now, some places have pipelines. Kazakhstan actually has a pipeline that goes through Turkey that comes through the Balkans and actually can access places like Bulgaria and Eastern Europe and supply natural gas to those places through a pipeline that can replace the natural gas that they lose from Russia. But how do you get natural gas from the Persian Gulf? How do you get natural gas from the United States? Well, it's called liquefied natural gas. I mean, it's a pretty amazing technology and pretty stunning, after all. If you think about, I mean, we take these things for granted, we always do, but what happens is that you have these terminals at a port and what they do is they turn the gas into a liquid. They turn the gas into a liquid I assume through high pressure or through massive cooling, but they turn the natural gas into a liquid. They then pipe the liquid onto a ship, a special LNG ship that has the equipment to hold and maintain the natural gas in liquid form. I think it's under pressure, right? In liquid form. Then the ship travels to an LNG port, let's say in Europe, let's say it gets loaded up in Houston and then a ship to Europe where they unload the liquid, turn it back into natural gas and use the pipeline to pipe it to wherever it's needed. So what has happened is that Europe has become much more reliant on LNG terminals. And at the beginning of the crisis, the idea was that not enough of them, but it turns out that there might be enough, I think more being built. Spain, where I am right now, I think has about five LNG terminals, maybe six LNG terminals, and it has pipes where they can pipe it into Europe, into parts of Western Europe. Portugal, where I was yesterday, has a number of LNG terminals, and again they can pipe it into the rest of Europe. American ships have been just back and forth between America and Europe with LNG ships. Now it's interesting, it just doesn't aside. You can take a ship from Houston, Texas, or from Baltimore using an LNG terminal and ship natural gas to Europe, but you cannot take the same ship and ship that natural gas to Puerto Rico or even to Boston because of the Jones Act. The Jones Act actually prohibits using LNG ships, which are not US flagged and not US owned and not US built. There's only one such LNG ships that qualify by all those standards to actually ship natural gas to other ports in the United States. So we can ship gas to Europe, we can't ship gas within the United States using LNG.  Well, stupid is like too mild of a term, so evil, so anti-progress, so anti-flourishing, so anti, so debilitating for the United States, particularly for places like Puerto Rico, but even for Boston, which in some years was importing gas from Russia because they could get a ship from Russia to come to Boston, but not from Baltimore. Even though Baltimore would be dramatically cheaper because there are no ships that can travel from Baltimore to Boston according to US law. It's moronic. Thank you, spiral days. Moronic is exactly the right. It's evilly moronic.   Anyway, Europe has accelerated the amount of LNG supplies that it is getting, and indeed right now, last I read, there are 34 LNG ships outside European ports waiting to unload the natural gas that they have, and there's so much natural gas flowing into Europe right now that so much natural gas flowing into Europe right now, that there was a day, I think this week, earlier this week, where prices went negative. That is, don't, I pay you not to give me natural gas. I pay you to take the natural gas off my hands because I don't have any way to store it. I don't have any way to put it. Natural gas prices in Europe are plummeted. They are way, way, way down. Energy prices should follow unless, of course, they are being manipulated by governments to keep them high to suppress demand, which is quite possible. But I was shocked when I read this article, but then once the shock went away, I said, I'm not surprised at all. I know, you know that markets work. And when you get a shock like the Russian shock, yes, prices will go through the roof. But what happens when prices go through the roof, in a global market like the market for natural gas? Supply increases. People take the opportunity when prices are high to produce a lot of it and to ship a lot of it so they can get lots of money. They can make a huge profit. Now prices are lower right now, so that's going to go away for a while. The incentive not to ship that natural gas is very low, but the stockpiles are full. All the backup channels for Europe are full. If prices start going up again, as the weather becomes colder and demand increases, those LNG boats can get back in the water because prices will be higher. Again, there are 34 such ships waiting to unload in ports in Europe. They will all be going back to Qatar, the USA, or wherever they came from. Finland has increased the amount of natural gas they are pumping to Europe. Again, other countries like Kazakhstan, Azerbaijan, I think, have increased the supply. I suspect that all the fear among going, all the complaining, all the talk, all the Armageddon, all that, I think Europe is going to be fine this winter in terms of natural gas. I think we're heading towards a recession. It has nothing to do with this, but so we're not going to be fine economically. But from the perspective of people freezing, that's probably not going to happen. Everybody's probably overreacted, probably too much fear. One other thing has happened and I don't know what you want to attribute this to.  But the fact is that they fall so far to my immense benefit has been very mild. It's been a warm fall. At least this is what I read. And as a consequence, what happens when the fall is warm? People use natural gas and again, another driver for demand to be low, for those increased supplies to be pumped into reservoirs, pumped into storage. And again, we're going to be fine. You know, all the stories, the constant stories about Armageddon and everything to justify appeasement, everything to justify compromise, anything to justify getting along with Putin. Just we want to fear, fear, fear, fear, fear. The latest, of course, and this will be my transition into, I guess, the discussion about kind of the war update. The latest, of course, is the idea that nuclear war, they're going to bomb, you know, Russia is going to start a nuclear war, we're going to die from radiation. Europe is toast. We should, you know, Jordan Peterson is very good at this. We need to appease the Russians. We need to compromise them. We need to give Putin what he wants, because Putin won't lose. Putin not losing might be nuclear war, or it might mean all kinds of dark things that are not always mentioned exactly. But just fear, the idea of fear, we need to fear the Russians. We need to fear, you know, the winter, we need to fear climate change. And fear is an unbelievable motivation, it turns out. And people are, usually motivated by fear, and they write checks because of fear, they get excited because of fear, they certainly vote over fear. And the consequence of all of that is that, you know, bad policy is enacted, because it's enacted not out of thought, not of reason, not of actually assessing the dangers and the probabilities and the risks involved, but out of just pure fear. So we see, I don't know, Jordan Peterson, we see a long mask, and even Biden himself talking about the brink of Armageddon. Thank you for listening or watching The Iran Book Show. If you'd like to support the show, we make it as easy as possible for you to trade with me. You get value from listening, you get value from watching. Show your appreciation. You can do that by going to iranbrookshow.com slash support, by going to Patreon, subscribe star locals, and just making a appropriate contribution on any one of those, any one of those channels. Also, if you'd like to see The Iran Book Show grow, please consider sharing our content. And of course, subscribe, press that little bell button right down there on YouTube, so that you get an announcement when we go live. And for those of you who are already subscribers and those of you who are already supporters of the show, thank you. I very much appreciate it.