Hi everyone, I'm Joe for jaspyscasebrakes.com coming at you with a really fun break here 2021 22 hit parade goat all-time greats multi sport edition series 3 Six Fox case red and player number one Sounds like a sounds like a football player there 21 22 hit parade go all-time great series 3 Very very high risk high reward look at Look at some of these names here. We've heard of these guys. These are great. These are goats greatest of all times You know, you've got some tennis in here as well.  Hey first off thanks to the people who just bought their spot straight up Taken the risk on a very very risky break, but could be very high reward Congrats to the people who won their spots in those fillers that we did And if you if you're if you're just to what as you missed out on this and you're just what you're watching live We got one more case of this so get in on it jaspyscasewrakes.com. We can run that tonight There's all the names Let's go. Let's roll it randomize names and players Five in a two seven times names and goats one two three four five six and Seventh and final time Shawn Matic down to Brenton Goat hunting five into two seven times for the players one two three four five Six and good luck seventh and final time We got Tyson on top down to Steph Curry Now if you're intending to trade trade at your own wrists Shawn Matic Mike Tyson Steve Burch Muhammad Ali Jason Serino William Stephen flat Michael Jordan Adam Tom Brady Michael We're saying bolt David Joe Montana Bennett Mickey Mannell Stephen flat Michael Phelps and Pelle Gail Kobe Cody Alexander Ovechkin Neil Rafa Nadal Martin Jim Brown Eric Novak Yovic Matt Lewis Hamilton see the flat city Crosby David Hank Aaron Michael Robinson Wayne Gretzky Brenton Marjola Mew Bennett with Tiger Woods Mark Roger Federer Patrick Mahomes Sean Christiana Ronaldo CR7 Jaden with Mike trout John Bill Russell Brenton LeBron James Branded Diego Maradona Brian with Floyd Mayweather Jesse with the babe the Sultan of Swat Roy Leonel Messi and Brenton Steph Curry. What a list What a list So I'm gonna alphabetize this by your first names, I guess let's sort by column a It's just so you can see all of your if you have multiple Orders you can see kind of all your names grouped together right there. All right I'm gonna pause the video when we come back when I see if there's any trades and then we'll come back And we'll have that break Be right back. Stick around All right, welcome back ladies and gentlemen as you can see a Deal was done between Steven and Eric. So Eric is out of the Novak spot and into the Michael Phelps spot Put a tee there for trade and Steven is now Occupying the Novak Yolkvich spot. All right, so good luck to both of you. Let's see what happens nothing could happen Both those spots may not hit Both of those spots could hit one could hit the other could not we'll see and here is the list the final list hot off the presses Thanks, everybody for making this happen Title is way too long. So random player number one. There we go In alphabetic order by your first names Except for the trade part actually I'm gonna on my list here I'm actually gonna alphabetize by player name so I can quickly identify Players. All right. Good luck Here we go. We'll go hunting. Good luck everyone He's covered up. They're not covered up. Okay All right First player out of the gate is a PSA 9 Usain Bolt that's pretty cool from 2008 sports illustrator for kids Usain Bolt PSA 9 Yeah, he's pretty great that goes to That goes to Michael nice Michael L and the Usain Bolt spot Good start next go next go PSA 10 Tom Brady From 2014 Bowman Chrome football Tom Brady refractor and it's a 10 Tom Brady Adam Adam Levy with Tom Brady next goat next goat is Mickey Mannell Wow nice That's really cool from 1956 tops baseball PSA for that's really awesome 1956 about that That's for Bennett and the Mickey Mannell spot a little bit here. All right next goat. We've got one more of these cases In the store right now if you want to run this back and we got time to run this back tonight. All right next goat Mike trout 75 out of 99 from tops now Mike trout. That's a great card for for Jaden next goat PSA 9 From 1997 metal universe Michael Jordan, that's an awesome card That is for Steven flat Where the spot he got straight up? Got randomized MJ Nice Congrats All right, and the final go got five great goats our sixth the goat and six and final goat is Is Mario Lemieux nice the nice low number two eight out of ten from the Cup hockey a Program excellence on card autograph In his national team gear Canada and that'll be for for Britain with the Mario Lemieux spot. That's awesome. And there you have it boys and girls Pretty great break got the got the Lemieux got the Jordan Mike trout the Mick TB 12 Tom Brady The world's fastest man Same bolt Thanks, everybody. We got one more case in this door if you want to give it another go Let's do it. Jasper's case rakes comm. I'll see you next time for the next goat break. Bye


Hello from Embedded World 2015 in Nuremberg. Now, from smart industrial to smart consumer to smart health, ST has a range of solutions for power efficiency and management in the emerging IOT world. Philip Lollies is a Vice President of Marketing and Application for the EMEA region. So what's your advice to developers who want to go quickly and easily to market? The first advice to these developers is I should tell them, come to ST, we have it all. When I say we have it all, we have all the components to make an IOT object. We have a microcontroller with a full range, low power, higher efficiency and we also have the product that will allow the object to connect, to sense the world and to power the IOT as well. So to connect it will be various range of radio frequency products and to sense we have a full range of MEMS sensors from accelerometer, gyro, humidity, temperature where we could move, sense the motion and sense the environmental as well. Now Philip, on the wall next to us there are examples of your technology in action so to speak. Talk us through some of the things we've got here. There are very nice interesting applications on this wall of customers using our products. The first one I'd like to highlight is a smart goggle that a swimmer can put on and it will monitor and give him the information on the energy he's spending while swimming in the pool. The second one, very interesting for your kids in the family that can monitor the sleep and the quality of the sleep and also give indication when to go to sleep to the kids in a room. And the third one is a very nice interesting tablet that consists of a cover that you add to a smart tablet and you can draw something and it will directly communicate to the tablet. Certainly the sleeping one for my children might come in handy. Just finally what else can developers look forward to? So for the developers in 2015 we are coming with a new concept that we call Nucleo and Nucleo Shield. The developer will be able to use all the components of ST starting from the microcontroller to the sensors, to the powering, to the connectivity and add them together to do his development. So by doing this we are providing the hardware and the software for an easy and fast go-to-market approach. Philippe, lovely to talk to you. Thanks very much for your time. Thank you.


Let's explore the different types of youth workers' training and networking projects, which are often implemented within the Erasmus Plus Youth in Action program. If several partner organizations identified a need to develop skills in using new methodologies of working with young people, they would probably choose a training course. Usually, there would be a team of trainers who were experienced in that methodology, and they would build an educational program for participants to develop the necessary competences. The duration of such an activity is usually between 5 and 10 days. Depending on the number or complexity of competences to be developed, it could also be a long-term training course, consisting of several training sessions with some practice in between. If organizations need to share or exchange ways of carrying out youth work with colleagues from other countries involved in using similar methodologies, they might organize a seminar. Let's take the example used before. If a number of organizations were using various theater techniques in youth work, they might wish to share their methods and also learn new methods from others. A seminar is usually shorter than a training course, and lasts from 3 to 5 days. In most cases, there would be no trainers, as most of the partners would bring their expertise from the field. There might be a team of facilitators, though. They would provide some structure and methods for sharing and learning together in an international group of youth work practitioners. A contact-making seminar might be organized if partners are eager to develop new projects in the future. In this case, there would be a common topic or similar types of organizations sharing common needs or interests and ideas for future cooperation. Contact-making seminars can be a good space to get to know new partners better, to explore each other's realities and the needs of the young people and actually start developing new international projects. Such seminars usually last from 3 to 5 days. As an ancient proverb goes, it's better to see once than hear a hundred times. A study visit is another type of youth worker mobility, which allows people to visit several places in a given country and explore the specifics of youth work there. For example, it could be a study visit focusing on street work, or it could be one focusing on social inclusion practices in youth work. A study visit would include trips to various organizations, as well as sessions to reflect on what has been learned, how to apply this to the participant's organization. Such an activity would usually last up to one week. Let's imagine that someone participating in a study visit is really excited about the methodology used and the way an organization is working with youth. It would be challenging to learn about it just by visiting that specific organization for an hour or so. No problem. A youth worker can take a job shadowing at that organization. Such an activity is usually longer than the ones explored before. It may last from one or two weeks to up to two months. In this time, a youth worker from another country can observe the daily activities of the hosting organization, explore the methods used, get a better understanding of the socio-cultural context of the youth work, and much more. It's also a great way to develop long-lasting relationships, which can grow into long-term partnerships between the organizations. Partner organizations may decide to combine several types of mobilities in order to achieve their goals and match the professional development needs of their youth workers and others actively involved in the youth work field.


Hello, my name is Erin Robinson and I'd like to take this opportunity to express my gratitude to Dr. Bolan, Dr. Harlan, Dr. Chow, the members of the Students' Awards and Scholarships Committee, as well as the iSchool faculty. It is a great honor to receive your generous special session scholarship for continuing students. The scholarship will help fund the expense of my education at San Jose State University. I am most grateful for your belief and support. I am currently pursuing the Digital Curation Career Pathway and the Digital Assets Management Certificate. I am in my final semester at the iSchool and I'm looking forward to graduating this May. This past year I've been involved in leadership roles for both the first generation student group and the Society of American Archivist Student Chapter. Working with my fellow students has been one of the most rewarding experiences at San Jose State University. By awarding me the special session scholarship for continuing students, you have lightened my financial burden, which allows me to focus on school. As a caregiver in a single income household, this has truly been a blessing. This act of generosity has instilled a greater sense of community in this program. When the opportunity allows, I would like to contribute back to the students of San Jose State University's iSchool. Thank you so much.


Project management techniques, they are two popular techniques which are used in project management. These are one is critical path method. And the other one is a program evaluation and review technique. It is program evaluation and review technique and CPM critical path method. Both of these techniques were developed in 1950s. We will go ahead with its details. The framework of both these techniques, basically it is that first we have to define the project. Its work breakdown structure, which is called WBSP, we have to develop that. After that we have to see which activities, with which activities it is related. Precedence precedes that it is following the activity. There are some activities which do not have a link, so they can be performed simultaneously or in any sequence. Because they do not have a link. If there is a link, then we will have to meet the precedence requirement. So which activities will precede, which activities will follow. And then on the basis of that we have to draw the network, which we call precedence network and precedence diagram of all these activities. Because precedence diagram clearly shows us that although we can write, but we do not have a clear picture in it. It can also be a table, which activities are there, which will be performed first, then it will start. It can also be a table. But again, the clarity, the precedence diagram does not give this table. So we have to make that. And in that time and cost estimates are provided, because we calculate on the basis of that, that actually how much time it will take to complete this project. We will calculate the longest path, which we call critical path, that which activities are being called in this critical path. And if we have to complete the project quickly, then what are the activities on which we put our resources. Only those activities, which are falling on the critical path, will only benefit from putting extra resources in them. Because by putting resources on them, the time of activities will be reduced, then the time of the critical path will be reduced. And critical path is the one which determines how much time the project will take. So if there is no activity on the critical path and you will put time on it, you will put resources on it to reduce the time, then there will be no benefit of it, the time of the project will not be reduced. So in this, this is the plan, schedule, monitor and control project based on network design. Because this is in front of us, what are the activities, what is the relationship and how we have to monitor it, what is the activity first, then what is happening and so on. And on that basis, this network design becomes very important.


And this is my 2022 talk about electronic locks. And I see some familiar faces here, but not everybody knows me, so I'll quickly introduce myself. So what is it about this guy and why is he always talking about locks? For me, this lock story goes way, way back when I was like a little boy. My great-grandfather was supposed to make me a key to the apartment, so I can get back into the apartment of the school. And he did not give me a key, he gave me this. This is called Dietrich in German, or Schwerhaken. And it opens more than one lock, of course, and somehow this all started for me. Later, when locksport became a thing, I started to compete in locksport as well, but this will be probably the only picture you'll ever see of me of winning any major prize. I'm not the fast guy, I'm more the analytics guy. So I wrote a number of papers about locks, published them, you can find them there. Obviously, I do conference talks now and then, some of them were recorded, some of those are on YouTube, and I made a playlist for this. And then, yeah, software and electronics. My father often predicted I'd become a locksmith, so I also found that I like to take apart electronics and write software and so on. So I became an engineer, I do my living with software development, and as a personal project, I made an app that may help you if you have an Android device and use this Bluetooth COVID warning app. But now let's look at locks. So to make it a little bit easier to follow this talk, I made like four segments. Obviously, electronic locks are electromechanical systems, so you can attack the mechanics part or the electronics and software part. And also to sort it a little bit, there are generic attacks that work maybe on many locks and then there are also very lock specific attacks. As an example, it would be like what I will show most bumping. It's very generic, it attacks the mechanical part. There are other ways that you can do it. Magnets are typically something. And other attacks. Electronics and software, there's a lot of attack surface, but it is typically very lock specific for one specific system. And yeah, some of the things are generic if RFID keys can be copied and you know that. Okay, I'll start with bumping. You have heard about bumping, I'm very sure. For mechanical locks, there was a patent early in 1926. And then in the early 2000s, it was made public again. And also by some people here in the Netherlands, there was a barrier and drop from tool. There was a paper about it. And what you probably also know is bumping cheap electronic saves. So that is a well-known technique. You can use a potato or a fist or whatever. And here you see ray bumping open or safe at Munich CCC. So you probably have seen that, right? And most of people who know something about locks also know that this is because of the solenoid in these cheap saves. And yeah, they have become an anti-pattern in mechanical lock design or in electronic lock design because they are so easy to manipulate from the outside. So people generally accept that motors are a more secure way to lock something. Okay, but I did find a modern lock with a solenoid. And this is now a lock-specific mechanical attack on a very specific lock. This is a electromechanical lock with mechanical keys. And the keys also have a little chip in there and electrical contacts that you can see here. I actually covered them up with a little bit of tape. And just by the way in this presentation I typically put the left side of the picture is like the secure side on the inside of the door. And on the right side of the picture is like the outside. And in this case you would have the key on the outside and a knob on the inside. This lock works with batteries on the inside knob. And then there is a solenoid. And I think it was designed with a solenoid because solenoids are fast. If you think of a little lead screw that would move this pin up that may take too much time. Yeah, let's try that. So you can see that now, right? Yeah, very good. Okay, so this is the correct key. It will beep once and now I can turn it. This is the modified key with the pins covered. The lock does not know it's in there now. But it doesn't know once I start turning. Well, that was too... demonstration work too early. So basically if I start turning it will now fire the solenoid and I cannot turn any further. Okay, so if I turn it really quickly and I know I can do that, I'm not sure if I can do it live on stage. Let's try. Yes, I can also turn it quickly. I mean it does beep, but it also opens the door. So much for locking out the person you don't trust anymore. Now bumping. Bumping, as we said, the solenoid is bad. Let's use a proper motor. This little key safe, I have it here, actually does have a motor. And this motor pushes down on a spring-loaded latch. So it's convenient you can close it and this latch will close. But yeah, you can also do the same thing as with the cheap safe. And this has a nice time delay thing to it. I like to do that. I can also... well, I don't do it on stage here. To be fair, the manufacturer has... or I'm not sure if there's only one, but they have improved it and there is now a little function that the motor turns the other way around when it senses a close. And then now this attack doesn't work on the new versions of those anymore. So I like that when manufacturers actually improve the product. Okay, but now we know it is the spring as a problem. It's not to have a motor or a solenoid. It is this coupling or this blocking is typically a spring and mass system. And I mean, you know spring and mass or such system like that. If you want to do something from the outside, you can just hit it and now a collision happens. You know, this thing is called Newton's cradle. You hit from the outside and if there are collisions, then this energy will be transferred and it's called conservation of momentum, for example. The other thing that you can do from the outside, if you cannot reach this and it's like isolated, now you can actually use inertia. So you just hit it from the side and it will still start moving. And if you hit it multiple times, there will actually be a resonance frequency and so on. So you may actually be able to hit it even harder. So let's test this theory for this because I cannot zoom. It would be cool if you could switch to the other camera, please. And have a look at this cylinder and this lock. So as you know, these electromechanical lock cylinders work like this. You have on the inside the opportunity to open and close the bolt. But on the outside, you can only do that after authentication because then the motor will move something and it's free-spinning and it's secure. Suppose it's secure. Okay, let's see. I think we can see it on camera, right? Yeah. Okay, so it will be a little bit loud but not only for a short time and you have to watch this to see that it moves in. Yeah, open. Okay. Okay. We will have another demonstration later with the other locks, but let's have a look at them first. So the theory was this. Just so you see what I just did is I attacked this lock cylinder. This is a very complicated system where all the electronics are on the outside of the door including a magnetic override key and you can use a RFID chip and everything. But yeah, it also has a spring-loaded clutch, an actual spring-loaded clutch element. Okay, and there are typically some questions, frequently asked questions. The first one is why test this in the door? Some people in Germany will now be angry with me because locksport ethics say you should not attack a door, you should only attack a lock and this way it doesn't look like we are thieves and want to break in. The only problem with that is you cannot have a real test if you just hold the cylinder in your hand. I want to show you with this cylinder here. This is an electronic locksuner that is not vulnerable to these attacks, at least I didn't fight that yet. But you can see that this cam, that's the thing that operates the bolt, it actually turns even though it didn't put a key here. The thing is though, if I put my finger here, you see it does not turn, so there is a slip clutch and that is now a way to design it in a way that it will not open the door lock if you don't authenticate it, but to test whether this attack works you have to put some, you have to prove that you can really transmit torque to the cam. The other thing that you may think of if you look at this is don't put this into a lock where you don't need much torque. So if you have like a key switch that maybe doesn't need much torque to activate then this is not the right lock for it. If you have like a thing that just blocks based on the cam like a little safe, something like that you can easily know here, you know this type of thing you can easily pull it out if you can just move the cam without torque. But yeah, that's the reason why we have to put it into a simulated door or something like that. The other question is if there is a motor like a heat screw or whatever why is there a spring inside? If it just were like a fixed motor lead screw drive there is no problem with moving that, right? But if you design a system like that you will see that you have to engage the clutch at all the angles even at those where the things don't match like the both sides don't match. So now the motor can actually put the energy into the spring and then once you turn it it will actually engage the clutch and the other way around if you hold the knob and retract for example the latch put much torque on the clutch then it cannot disengage. So that's why there are usually springs the only problem with that is if they are actual then we can use the Rotary Hammer to do that. And then another question would be why are the springs weak? And that's because if they are really strong then it takes a lot of battery power, right? Other things and as I hear from vendors of these locks is yeah it's not a silent attack and if you do it more often you see scratches and stuff like that and that's maybe true if your lock is not meant to secure anything really but just like make sure that honest people stay honest then it may be fine but if I buy some lock that is supposed to have like 10 minutes drill resistance from has a SKG 3 star rating and so on I expect it to resist for some minutes and not a few seconds. And then also the other thing and we have seen that today when we did the dry run if you do it too often maybe you put too much energy until the lock and it will fail and that is really annoying for me as the pen tester but I mean still if it opens the first time somebody wants to attack my lock that's still not a good thing. Okay there is one thing that I think it should be kind of part of the training of lock designers you should not use actually spring loaded clutch elements. Okay I will demo other locks soon and these are the locks that I want to show you this is where the whole thing started this is a really old lock from a manufacturer like I don't know 15 years ago it's really old 20 years ago and they have two more generations in the meantime that are not vulnerable to this but I want to show it briefly and this actually does have a solenoid in here so it's like just if you hit on it it will move and yeah so that's the first one so it has a solenoid base clutch. Then a lock with a weird sorry with a wired electronic key that one when I took it apart and looked at it it looks like the clutch is actually radially coming out of this which would be good could have its own problem if you turn it really fast then like centrifugal force would maybe pull it out but that's not the case they designed it well however there's also a part of the movement is actually and that's why it's also falling to this. Yes but while we look at this lock I promise some other things than bumping other mischief this also has bad crypto and a time penalty bug yeah so the vendor says the key is read and copy protected through cryptologically and crypto dialogue procedure but that was like invented home rolled crypto by somebody 20 years ago and if you look at the key you also see this it's just a little pic microcontroller so what would you expect? Let's have a look right so do a standard reverse engineering procedure would be look use a logic analyzer to record the transactions I use a layer logic and then look and you see the physics layer and the physics layer is really simple it's like a zero and then the bit and then the one and the zero and next bit and the one you can write for this type of logic analyzer you can write a low level analyzer and then you see the bits figure out it's 40 bits, challenge and response then teensy is something like an Arduino but faster made an analyzer, wrote some software for that and then we could actually understand the encryption and we'll look at this on the next slide but once that is done we can also simulate the key and then copy the keys and then while doing that this cylinder has a knob with digits and you can turn it and then you push it and turn and push and turn and push and so you can do four digits, five digits or six digits code that way and it turned out that if the codes were four or five digits and we entered it through the key interface then it wouldn't have a time penalty meaning you could easily brute force it by just trying out all the four digit codes in short time so that one the renderer has fixed in new firmware releases which are, well the whole system is not updateable but if you buy a new cylinder like this now it won't have the time penalty buck anymore let's look at the crypto so I chose this picture people who stare at bits and at this time I also want to thank the nice people from Music CC and SSDF for being such nice sparring partners and inspirations so thank you Ray, Emke, Sek, Robert, Avanti and all the others we did GC sessions GC session during the pandemic and stared at bits so on the left side you see the challenge on the right side you see the response bits and what you can already see is like if you look at cases where only one bit flips here not much happens on the right side and Claude Shannon wrote about cryptography called as diffusion the single bit change should change more bits on the right side you see this already after an idea there's something that doesn't seem to be right and if you look more closely and I'm not sure if you can see it here but I highlighted the change bits in bold print you can see that it is six bits changing and they are always at the same side and that is very much looking like a linear feedback shift register and it's actually a little bit more complicated than that and it's two linear LFSRs and that's it so now that we understand it you just need to have one single transaction and you can get the secret of this key good, so that was about cryptography attacks if you want to call it like that bumping again, another lock this is a very strong smart lock cylinder and it is designed very well because all the electronics parts are on the inside of the door and there's only some strong metal on the outside of the door in strong drill protection and you see the SKG 3 star sign here so yeah, that was a strong lock taken at the part you can see that there are actually spring loaded pins clutch pins yeah, that's the problem of course if you look at this knob you see there is like on the left picture these pins are not engaged but on the right side they came out zooming in, so now they are out in, out, now it's coupled in, out you can see that yeah, and that's the problem that we'll see when we bump it okay, there's a very similar design by another manufacturer this one even has a mechanical override down here, it's a really neat design but same problem okay, then the locks I've shown before they are quite expensive like a few hundred euros per piece there's also cheap electronic lock cylinders that you can import from Asia typically and yeah, this one has a lead screw based clutch mechanism again but spring loaded and all the electronics in the outside of the knob there are actually four, sorry, two generations of them pretty similar but slightly different and then a completely different next generation has actually two little motors in here it's really nice, like a redundant thing there's two of them one can be activated through Bluetooth and the other one you have to connect a USB override thing but I mean both of them actually have the problem we've seen I took one apart it's turned around now and made a slow motion sequence so you can at the right side of the picture I'm not sure if you can see it here but there is this clutch part and you can even see that the little pin stuck out from last attempt here and here you can see that it painted as black and when the pin jumps out you'll see this black covered yeah, let's see how much we can there's another hammer comes from the left and the whole thing moves and you see the pin coming out now and now it is back again but it's jumping a little bit back and forth so that is what's happening in there, obviously and now let's have the camera switch again please and we just do it live again on these locks so number two is the very basic one with the solenoid let's see so one thing I want to tell you I didn't make many of these little mini doors I made little demonstrating things instead and you can see here's a white wheel with a black tooth and this is to prove that the clutch or the cam was actually transmitting enough force to turn it so after the attack the little black tooth will not be at the top but will be moved and then you know that it would have opened the door okay let's try open this one I didn't put the expensive knob with the key interface and this coat entry on there but just a little brass piece so don't destroy the expensive knob open that's the strong one with the SKG three stars and it is really strong maybe let's see oh yeah okay I should have there's a screw to keep that in let's try once more open okay then we have this other very similar one open now we come to the cheaper versions open open okay getting there one last open okay so I have a feeling like there was a German TV show called Wettendass and I just okay if you want to try it yourself what you need is a strong rotary hammer it needs to be a rotary hammer not just a hammer drill so there's this electro pneumatic thing that really puts some jewel of energy into each of the hits so this one does two jewels a very cheap one imported to Banggood or Aliexpress or whatever it does about 1.5 although they claim more and this one is also you get it at Aldi or Lidl and so on it has like one jewel and for many of them it works you would need something like an adapter because if you just use the typical hammer like the typical drill bit you will drill a hole but you need something that distributes the force of a more surface and I made TPU covers with 3mm TPU and then you can either use duct tape to tape it to the knob or what I did is I did some adapters with different diameters and some little other machine I promised I wanted to buy a time lock for a certain reason I will show you but it turned out this is a sex toy but anyway the attack is called fault injection and the thing is you can reset some very cheap electronics with this EMP device that is sold to as an advertiser the device that makes slot machines pay out money but it can really only disturb or reset only the cheapest of electronics like this lock it doesn't work and obviously maybe there are some others some ad side there are some Chinese locks that it is effective against and then there's a lot of ads where it says it's not effective against this something that is effective sometimes is a rotating magnet and if you look at how to influence the motor from the outside what you could do is if you have a really strong magnetic field you can really superimpose that over the existing magnetic field and then the motor will turn the other way around the other thing you can do is pull the iron core of the magnet of the motor so I got this time lock now it's set to 33 minutes still so it doesn't open you cannot push this button in but here I have a magnet it's north post-houseball on these sides diametrically magnetized and if I just put this here and turn it I can now open the lock and I can also close it again what else this was pulling if the motor is inside the knob and you turn it really fast you may be able to use centrifugal force or if you do acceleration to actually turn something okay I think we made it thank you very much for your attention there is a lock-picking village here next to the stage C, Clairvoyance you can also reach me over deck and I will be at lock-on this year again there is an email thank you very much


Hello, who just in Hello, I'm high of both justins Hello Have you guys just in mate? If you thought I've done How's it do you guys do your keep calm recordings yet? Yeah, yeah Same here When the when the schedule first came out the first thing I did was like screw it on to the bottom the page and grab my thoughts Yeah, I don't think we have a an agenda today. I was talking to the key lime folks about Doing a presentation, but looks like one of the speakers is not It's not available So let's say this may be a really quick meeting. Let me put the meeting notes in the chat Go away with the one Hey, yeah, let's say I Just put the meeting notes in the chat. So if you don't know just putting a name there And we'll wait a couple more minutes for people to join into zoom Justin Kapp was from the assessment slides. I think that Needs discussion Yes, but Roberts before me in terms of updates and he may His he may want to discuss his issue. So I'll let him talk about that when he gives his update I guess the only other thing is there was a question about a key cloak here and It looks like they've just completed the dumb question phase and initial review and so they're gonna need to schedule a presentation For the you know for the group here to tell people what they've been up to So, I don't know if any of those folks are on this call or if you're not and you watch the video later Please coordinate with us to find a time to present in the meeting. All right, cool So it looks like more people have joined in so let me re-post this on the meeting link again And then let's get started with the check-ins Okay, so let's go down to this All right, let's start with Robert do you want to talk about? Custodian sure good morning, so we did a initial kickoff call with Custodian team and Justin and I and I think that the big need is from this group We'd love to get two or three additional volunteers who can help with the reviewing the self-assessment and then reviewing what we suggest as sick security and I'm leading that process. So I'll do most of the heavy lifting I just need as many volunteers will be interested to be additional sets of eyes and give good feedback so if there's anyone there who would like to use this as an opportunity to Participate in the process learn more about the process. I promise to make it a an easy ask Awesome. So is this for the this year past the Dumb question phase, so I forgot what the new name was And you're looking for reviewers for the the actual assessment, right? Well, I think I think we're I mean correct me if I'm wrong. Just and I think we can reopen the Initial question phase because we have the most recent updates from the Custodian team on their Self-assessment document. So now the process really starts. I'll be reviewing that that information Obviously, if we can get two or three more sets of eyes on it We'll allocate enough time for a productive review of that and then I think we will do a few rounds of question Answer with Custodian team. So that the the question answer phase starts now. Okay, I got you Depending on how many volunteers we can get I think The the Custodian team is is flexible. We can elongate that cycle if we need it So yeah, I think we have enough runway to make it productive Yeah, in general we've always had Maybe three or four additional people other than the main review we're doing the review and right now It's just Robert and myself and I'm in the process of moving to Shanghai for the fall Which means that my ability to put like really focused attention on this is also limited So we really need You know two or three other motivated people who can go and and give a hard look at that Because we've had I don't think there's been in his assessment at least none of the ones that I've been on Where we haven't had Multiple people with really really really valuable feedback that the assessment would have been much worse without it It's never just been like a person steps in and basically does the assessment and everybody else just kind of ticks a box So would really appreciate having two or three other folks if you're Not quite sure about it. It's fine to go and say hey, I'd like to participate, but I don't know what I can contribute That's okay, too You know we over time people get more and more comfortable Yeah, and maybe we can also I'm not sure if you are very done that but maybe can post it in the slack group In case for those people and other time zones. Maybe you will participate as well Sorry, you broke up a little bit. Can you read the question? Just saying maybe we can if you already haven't put it on the slack the slack channel There may be some people that are not on the call that maybe about the help as well Yeah, so so two things on so I did I did post yesterday. I'm happy to post daily And and also there is like a custodian assessment channel, which I posted there But yes, I mean definitely we'll we'll post again today All right Cool. Thanks, Robert Just in careful. So you want to continue on with the Chat about key club I don't have too much more to add about that But I I do have another very brief thing that I mentioned it doesn't warrant like a real agenda item Which is a few weeks ago I had mentioned kind of in passing in the meeting that I'm planning as part of an application security class And I'm teaching in the fall to try to basically take students through Looking at a badly set up in like a very, you know Think about all the mistakes people you see people make setting up cloud native Trying to give them an environment like that and then talking about those mistakes and having them fix them and So I mentioned that there was a lot of like oh, that's a great idea I'd like to participate kind of things and I wanted to mention to folks that I haven't forgotten about this and At some point in the not to just in future. I will get something basic together and Maybe start the discussion either on the slack channel or in these meetings depending on time Okay, sounds good Just to follow up there Justin Would you see that as totally separate distinct from or someone overlapping with something like a red teaming Set up Um, I mean the perspective we're giving in this exercise is more of you've been Hired into a company like, you know, and they had some, you know, the the the bosses nephew had looked online and hacked some crazy thing together and now you have to actually make it You know, like work and be reasonably secure I mean, it already works, but it's you know, it'll have these like weird little errors that come up when you get, you know certain things happen and stuff like that which will be, you know indicative of security problems but then there'll be a lot of things like You know, like checking credentials into like checking private keys into GitHub or database passwords or stuff into GitHub rather than using like Docker secrets or vault or whatever And so the idea is is rather than just tell the students like don't do these things will give them a In environment that's pretty basic But you know has has a lot of different Really rookie mistakes in it and then that way when they're thinking about like, oh You know, like how do I set this up correctly? Or what do I do? They already have an sort of an example like a bad example to fix Rather than just seeing it on a couple of slides or whatever and not really getting any experience Okay, great. Makes sense Yeah, so Justin, maybe if you want to it sounds like And probably well, that's gonna be Qcon and stuff like that But I'm guessing that after Qcon in the next couple weeks If you're gonna put something in the plan Meetings and then we can I think we will have a pretty packed September in terms of presentations if you're not do that Sounds good. All right So just to recap again on key cloak you mentioned that You're done with the dumb question phase and you require additional People as well for this Sorry, so I want to make sure So key cloak is separate from what we were just talking about which is cloud custodian, right? Yeah, Robert's been talking about so key cloak From what's been discussed here According to Ash and Emily and others They've made it through both of the both the dumb question phase or naive question phase or whatever we're calling it now, but also the broader review so that everybody who's on in the assessment group Which is a Christian Erin or whoever that is. I'm sorry if I Okay, and Emily have have in addition to Ash who's the lead all gone through and on like deep dives into the document and left comments Okay Yeah, all right, cool Do you think that? so I'm not sure with the I Guess that's if we do can find people for cloud custodian, but I'm just wondering whether anyone from the key cloak team you know ones that's done whether they've been interested in Clock custodian sounds like it's just kind of like a lack of people And also I think which are under I get to the next point I'm gonna skip just in comics check in for a bit because Andrews also mentioned about Looking for volunteers for the built packs assessment So yeah, I don't really get to get a round up a couple folks At least to to get started The security assessment is available. I have actually started to Glance over review seems pretty complete, but yeah, I could use some assistance From other folks make sure we give it a thorough look So I just wondering right from the from kind of like resource perspective I don't know would we be spreading to then do you think we have enough to Or should be kind of like serialized some of these I Don't know what the current plan for this is I think What I prefer we do so we have sort of kind of done two at a time at times But that's mostly been when something install it hasn't really been like two completely or like a separate groups of people that You know in some cases we just have an assessment that's followed for a couple weeks or month or something And then another assessment got started. So I prefer we don't have three active assessments now at least Unless we get plenty of people for cloud custodian and then we have plenty of people for You know build packs then great. Let's let's do it all but I would prefer, you know We won't do it be doing anybody a service if we have half half an assessment for Build packs and half an assessment for cloud custodian. Yeah So I'm guessing that we can kind of see like after kind of calling for volunteers and see what the numbers are and then maybe we can kind of See whether the reviewers would be okay with Doing one assessment before the other But I don't know that that's gonna work out But I feel like it may be something that we may have to visit if we don't get if we have spread a bit to then Yeah, it's a good point definitely something to consider. I Wanted to test some folks who we work together on the harbor assessment So we have prior experience working together I see Martin and Chase on the call I've actually been meaning to reach out see if they have the cycles to work and build packs and Assemble that crew, but yeah, let's let's see what we're able to get and determine we can certainly Just pause one for the time being and do them in order Okay, I Just wanted to add that I'm still Interest in joining in other assessments, but I just have to check my availability. That's why I'm Silent and don't have anything to add or say But thank you for mentioning that I Yeah, it was a good experience working together. I agree for me to Okay, so I think we're good with assessments Justin come I do you have an update? No, nothing today, okay And I think the last update is capel. I think we talked about cloud custodian rigid. Did you have something to add to that? No, I'm straying in late. I heard the tail end of it So it sounded like it wasn't clear what the what the result was is that We're doing a call for volunteers and otherwise Build taxes in the queue in front or what was what's the end result? I mean So we have a call for volunteers for cloud custodian I'm assuming that You know, unless I'm missing something and we have a completely fleshed out completely ready to go team for build packs and they have everything going then, you know, my inclination is to Have cloud custodian, which has been around longer Go first if for some reason we can't get a team together That's an adequate size or something then maybe and another project's ready to go we can maybe look at that but Because resources will be freeing up as we finish this the key cloak assessment You know, we can we can look and re-evaluate but I think, you know, I don't think it really matters what order you view these as because Key cloak should finish in a week or two and then I hope that frees up enough capacity for us to have both of them going and so since you know, the projects have already done a lot of the hard work and we're already kind of in the the, you know, he's starting to get in the clarifying question phase it really I don't see this as like a Hill anyone should feel as we're thawing on what did Order of those are because it will should be going quickly quite those should be going quickly quite soon Sounds good Okay, it sounds like maybe we wait one or two weeks and may resolve itself, but let's see Okay, I don't have I don't think there's any Kind of agenda items we have for today So it's does anyone have anything to talk about if not will probably just call Just a quick update from the policy work group. We had our calls. We have an 8 a.m. Pacific every other week So we had our call today at 8 Meeting I think the recordings so we're using that this zoom I'm not entirely clear how the recordings get published It's not not something I have access to but I think that we have published them in the past through some mechanism If they're on this zoom they should happen With the same words these but ping Amy if you're not on slack if you're Not sure. Okay perfect and then just a quick thumbnail we're working continue to work on a custom resource definition for kubernetes for policy results And we also have a discussion today about kind of miss 853 Fedram Scop oscal type automation. So if anybody's interested in that feel free to once we get the recording posted indoor Ping here in the agenda meetings. I'm happy to reach out to anyone if they're interested in those topics Will you be posting in the slack channel when those videos are posted? Yes, I will do so Thank you. That's it for me All right Any any other things anyone wants to bring up? I got a couple of things from spiffy inspire that may be relevant to several projects in the ecosystem one being we've been looking closely at rfc 8705 which is oop 2.0 mtls authentication and certificate certificate bound access tokens So we've been looking to for a lot of clients use the spiffy IDs protect that using mtls and start bridging machine identity to user identity and just remove the need to manage client credentials. So for those doing assessments around user identity management related projects Something just I want to put in your head and like starting to light a path towards that So just something to raise for consideration or awareness to some of these projects A couple other things. Sorry Have you got any links to that? I'd be interested just Yeah, for sure Yeah, I'll share that links in the in the meeting notes. I think that would be good In the chat and I'll I'll send up a In the meeting notes I can include a brief summary The description of that A couple other items one has been Asked this may be interesting extending S fits to carry Key value pairs that could be claims. Yes. I was waiting for that That's something that I've been looking forward to for a long time Very anticipated. Yes. Yeah, it blurs a little the lives between Often and not see but there's high demand for that folks from netflix, which Ironically much of spire was modeled after netflix metatron netflix has come around and said hey like The spire has now leap forwarded Metatron and we may be looking to consume this for some of our newer systems or have dual compatibility So they may be opening up an issue around this pretty soon And we're gonna we're gonna have a big request for comments around it And uh last justin we had a we've had a conversations with the dod around spire integrations for in toto And just in toto machinery, but like well with like key pairs in in toto like how do bind those to spiffy IDs And there are things at several levels I'll send some more detail on that, but I think it's another area that could benefit from like broader group discussion of How to move spire earlier into the supply chain and we've talked about that at different points in time, but I think we now have a particular end user Wanting to see this worked on upstream And the state of the technology is that that that we may be able to To integrate it well Great. Yeah, I look forward to hearing more about that Yeah, this is awesome. I'm super excited Yeah, if you could if you could post some of the I got the rsc thing then put it in the meeting notes if you could post the If there are any links or design documents for the the other two points you brought up on the Svc key value pairs and the spire integrations for in toto Uh, it would be good if you can put them in the meeting notes as well For sure. We'll do all right. Thanks address All right. Um, any other topics Okay, if not, let's close the meeting for this week and I will see everyone again next week Thank you later. Thank you. Bye. Bye


The modern Air Force is a set of complex interrelated systems. The Air Force itself is an immense aerospace defense system. For example, the military airlift command is a transportation system. Your paycheck comes out of an accounting and finance system. As an Air Force member, you are part of a personnel system. For our purposes, a system is a combination of resources, human and material that operate in unison to achieve an objective. These systems are highly complicated products of a technological explosion that has had a profound impact on the Air Force people who operate, maintain and manage these systems. Their jobs are more complex than ever, and training them for these jobs requires a major effort at all levels of the Air Force. In developing its instructional programs, which are systems in themselves, the Air Force uses a process called Instructional System Development. This is one in a series of films on Instructional System Development, or ISD. ISD is a process for developing instructional programs which ensure that personnel are taught the knowledges, skills and attitudes they need to do their job successfully. ISD is a five-step process as this model shows. The subject of this film is system analysis, the first step in this process. System analysis involves collecting data about the system and then analyzing that data for its implications about what instruction is needed and who needs it. So we begin by looking for answers to a number of questions. What is its mission? In this case, its mission is to provide close air support for ground troops. What are its functions? It must have long staying power and carry heavy ordnance loads. What are its major components? Its navigation system, its radar system, avionics system and the like. What are its operational concepts? In this case, they include destruction of armoured targets such as tanks and personnel carriers. What are the functional responsibility of the personnel who work with the aircraft, the pilots, the navigators, the munitions loaders, the fueling specialists, aircraft maintenance specialists, ground equipment operations and so forth? Once you get the answers to these questions, you're in the ballpark. You know what kind of system you're working with. Next, you need to identify the tasks and duties that must be performed to operate and support the system. We call them the job performance requirements. Now the job performance requirements are the tasks required of the human component of the system, the condition under which these tasks must be performed and the quality standards for acceptable performance. Note the key words, tasks, conditions and quality standards. Here's an example. One of the job tasks for a crew member is to perform a pre-flight inspection of the aircraft. Now the conditions under which he makes this inspection are that he does it using a checklist and he works with an actual aircraft. The quality standard for this task is that he must do it correctly. Another example. One of the job tasks for this administrative specialist is to type an official Air Force letter. Does she have to memorize the details of format, how to prepare a multiple address letter, whether or not to number paragraphs, how many spaces between the body of the letter and the authority line? The administrative specialist should have a copy of Air Force Reg 10-1. Now this regulation includes an illustration and explanation of the format details, so memorizing these details should not be part of her training. So you see that specifying the conditions under which the job is performed may make a big difference as to what should be taught and how it's taught. The tasks must be accurately described and that description should include the conditions and the standard of performance. Air Force policy requires that the students be taught only what they need to do the job, no more, no less. When the job performance requirements are accurately identified, it is possible to develop training that's in line with this policy. Well then, how can one determine precisely what the job performance requirements are? One way would be to observe the expert do the job and record what you observe. You might supplement what you see by asking the expert some questions. This will help you to identify the skills and knowledges needed to do the job. This method probably produces the most accurate information, but it's also very time consuming. The administrative specialist is an example of a job that has many variations. In order to know what administrative specialists as a group do, you would have to use a large sample drawn from many different offices in many different organizations. For this kind of situation, checklists and questionnaires are much more efficient ways of gathering job information. The Air Force has developed an especially reliable approach using questionnaires. It's called the Occupational Survey. For relatively large programs, the Air Force uses occupational surveys to determine job tasks and performance requirements. The surveys are conducted by the Air Force Occupational Measurement Center at Randolph Air Force Base in Texas. Through the use of job inventories, occupational surveys obtain from a representative sample of job incumbents data about the duties and tasks they actually perform. Job inventories are usually mailed and contain questionnaires and or checklists. Questionnaires ask individuals to indicate the duties and tasks they actually perform as well as the materials, the tools, and equipment they use. The checklist contains a listing of duties and tasks taken from available data and believed to describe the specialty or positions within a specialty. In this type of survey, individuals identify by a check mark those duties and tasks perform. The results of the Occupational Survey are compiled to form an updated list of tasks and duties for the specialty or position. If further information is needed, it's obtained by individual interviews of representative workers and observations at the work site during which the interviewer asks questions and records data about the work being done. The job data gathering methods that have been mentioned all depend mainly on the availability of qualified people who have had experience doing the job. But how could you determine the job performance requirements for a job that has never been done before? If equipment is involved, study the related documents, logistics data, procedural guides, maintenance manuals, and similar documents. Where these documents are inadequate, you may have to consult the designers, engineers, and technicians who planned and developed the system. Most new or advanced systems are really the second or third generation of existing equipment. Many similarities may exist in job tasks between the new system and similar systems that already exist. Now, you may be able to make educated guesses about the new system based on what you know about similar systems that have been around for a while. Whatever means you use to determine the job performance requirements, don't forget that most systems are not static. Changes are made and often these changes are planned. Try to include reliable advanced planning information in the data you gather so that your instructional system won't be obsolete by the time it's ready to be implemented. The job task data must be analyzed for two things. Now, the first is the personnel implications. That is, what officer and enlisted Air Force Specialties will be needed to operate and support the system? You should also be able to come up with an estimate of how many of each Air Force Specialty will be needed. The other determination that must be made is, will the people who are to be assigned to the job be able to handle it without any instruction? If qualified personnel are available, it's not necessary to proceed any further with the ISD process, but if instruction will be needed, then you should proceed with the next step of the ISD process. So that briefly is the first step in the ISD process. It's a thorough analysis of every aspect of the operational system, the duties and tasks needed to support it and the educational situation for which there may or may not be a need for instruction. If instruction is needed, you have the basic data to proceed with the next four steps of the ISD process to develop a program that will teach students very thoroughly everything they need to know, but only what they need to know to do their job. But before you can develop that training program, you must determine what the system and the jobs that operate and support it are all about. That's system analysis.


Catch up and get ahead with the edge. In Bear County, 80% of those eligible are registered to vote, but only 12% of registered voters cast a ballot last spring in the most hotly contested mayor and council race in a decade. During November presidential elections, as many as 50% of local voters cast ballots. That's one reason San Antonio Councilman Ron Nirenberg proposed moving local elections from May to November to boost voter turnout. Also at the 2015 Civic Engagement Summit at UTSA, scholar Peter Levine said cities like San Antonio should consider lowering the voting age to 16 or 17 to increase voter turnout. And it's a specific reason to go to that age, which is that then the kids can be taught how to vote, not who to vote for, but the voting process during their high school social age classes. The city of San Antonio issued new policies that says will make it easier for charities to feed the homeless, while making sure the food is safe. The new recommendations come after last month's Homeless Feeding Summit held by the city to address concerns of local Good Samaritan groups. We need to find ways to get you guys to help you do what you want to do, help you do the good that you do. It's not illegal to feed the homeless in San Antonio, but there are regulations regarding safe food handling. Under the proposed revisions to Chapter 13 of the city code, a charitable feeding section will be added that specifically addresses the safety of prepared food and outlines minimum requirements for outdoor feeding of five or more people. At a city council session this week, SAW's president and CEO, Robert Cuente, apologized for calling a report critical of the Vista Ridge Project a joke. And Mayor Ivy Taylor pledged to hold public meetings where SAWs will answer questions about that project and the utility's move to increase water rates. Groups from Save Our Springs to the Greater Edwards Aquifer Alliance and others are planning protests, news conferences, and educational meetings on Vista Ridge and on water rates. September 15th to October 15th is National Hispanic Heritage Month. The San Antonio Public Library kicked off the celebration with an evening of storytelling and poetry. Colombian storyteller Carolina Quiroga Stoltz brought to life captivating myths sprung from indigenous central in South America, their vibrant cultures and their conquest. And he, trade maestro Salmandro Sol, for something that we will never know. Then UTSA Chicano Literature Professor Ben Elgin at former boxer presented his testimonial poetry bearing witness to the ongoing struggles of Latinos and replayed the discussions by local scholars on Latinos' roles in World War II from training soldiers at Fort Sam Houston to welding bomb parts of the Friedrich refrigeration company. Go to nowcastsa.com where you can weigh in on how to boost voter turnout, catch up on the water debate, learn about policies making it easier to feed San Antonio's homeless. Celebrate culture and history during Hispanic Heritage Month. Thanks for watching The Edge.


Here is every type of medical specialty I considered before ultimately deciding to become a cardiologist. Now going into medical school had tons of experience working with kids, so I thought it'd be a pediatrician.  That sounds amazing. Realized I didn't like the OR, so I thought maybe I could be a family medicine doctor going into sports medicine, or a PM and R doctor, which is a physical medicine and rehabilitation doctor. Then I considered the fields of oncology, the radiation oncology, ultimately coming to internal medicine. And then I considered doing things like rheumatology, becoming a hospice, which I actually did for an entire year. Ultimately becoming now a cardiology fellow. Every single one of us on the medical journey will have experiences that maybe this field is for me because of these reasons. But then as you look further and have more experiences, you'll find that maybe another field has a better fit for you. And that is completely okay, and you have the permission of being able to jump from one thing to another using those experiences of saying, this is the kind of doctor I ultimately want to be. Now if you enjoyed this episode and are interested in more pieces of advice and strategies to help you on your medical journey, hit that like, subscribe and follow for more content just like this one.