The following is a presentation of TFNN The morning market kickoff With your host Tommy O'Brien Morning everyone. This is Jacob Schoop Last day filling in for the man Tommy O'Brien. He will be back Monday And I'm sure all looking forward to that. I'm gonna say good morning to the den We got Shazam and Jimmy D fifth element fish and Riverview How you guys doing? Let's see what we have going on today before the market opens We are moving a little bit sideways right now a little bit down The clothes yesterday was pretty good. We were green in all the major indices on some okay volume You one second to fix this You know the hair becomes a liability sometimes with these headphones I'm keeping it for the winter next floor to summer. I can't do this with the hair Anyways, SPX futures were sideways Russell futures sideways as well same with the NQ's and the YMs. We are up a Minor amount in gold the gold contracts at 1931 right now silver contract 2327 copper contract or 381 This is doing pretty alright, especially with China easing some of its Restrictions regarding Cash that needs to be held Let's see we have the light sweet crude futures at 89 98 so we are flirting really heavily With that $90 area. In fact, we went up to 91 of 15 at its highest This will continue to bring some pressure on the United States and the Federal Reserve in particular because this will increase inflation as I've been saying this past week. We are probably out of the woods at least in September. We're not due for another rate hike Depending on how long this persists and other kind of factors You know, we might see some more rate hikes before the end of the year And then the Brent crude is at 93 46 30 year Treasury up 118 At 118 right now We have the 10 year at 109 and then we have the five year at 106 And we're staying pretty stable there Tesla up minorly point seven nine percent before the open steel dynamics coming back off that $100 area on some okay volume See this $97 point would have been would have been the buy entry, but I was not paying attention, which is shame Because this will probably float back up to this 104 area if they can get some more volume and we might see a Maybe a structuring of that kind of channel that it has been trading in The DXY well over that magic number. We're trading at 105 31 So quite a break to the top side and we'll see we might be flirting with 105 50 sometime next week that does bring selling pressure into the market after the Price in essentially of no further interest rates for this month once that's kind of set in we again might see some depressive effect on the indices As the dollar tends to do that when it goes up And then obviously we'll see some press down on gold the gold contract right now at 1941 actually even with a stronger dollar You qq at 376 Google will talk a little bit about later They had a settlement with the state of California for about 93 million dollars Just for some just overall shady practices But honestly you could probably incorporate that into some section of the balance sheet for these large tech companies because they tend to Do those kind of things Metta 3 10 38 At point 43 percent down Mark Zuckerberg is officially the 10th richest person on the planet today with 108 billion net worth Disney at 84 85 We'll talk about them a little bit in some proposal that someone gave it to buy Some of their streaming and then Apple at 170704. They are actually going to go ahead and update iPhone 12's after it was discovered by a French Government-related watchdog group that it emitted too much radiation So look into that Big news for the day is Ford. We're talking about them a little bit. They had some lagging EV sales not competitive yet with that They're bringing back some of the descendants of the original Ford I might put them back on the board. This was posited with a Bud Light as well of course the family sold that to I They sold it out of the family and they want to buy it back Because of again lagging sales with Bud Light will talk about them a little bit too because they were losing shelf space which Me one second pull up something they're losing shelf space which in The kind of grocery market you cannot do in any kind of Brick-and-mortar retailer you have to dominate shelf space and this is there's a bunch of formulas surrounding that it's pretty interesting So anyways, there is a auto worker strike beginning at the Ford plant in Michigan same with GM Hundreds of people including auto workers on the night shift and their supporters gathered at the Ford assembly plant in Wayne, Michigan As members of the United Auto Workers Union walked off the job to begin a historic strike This is the first ever simultaneous strike against the Detroit three automakers, including General Motor Chrysler Parents to Lantus Chrysler had some issues as well with their EV batteries that were catching on fire And of course Ford as well and that kicked off early on Friday today On Thursday Chief Executive Jim Farley warned of a grim scenario if Ford acquiesced to the Union demands about 40% Hiking pay and end to a tiered wage system that pays new hires less than veterans and a return to defined benefit pensions He says that these proposals would put them out of business It's a pretty intense statement The way W. President Sean Fain said that Ford could have funded better pay and benefits for workers if it curtailed stock buybacks and dividends to shareholders Ford reported returning 2.5 billion back to investors in 2022 As the strike began Fain and Debbie Dingle a Democratic US representative from Michigan or among the high-profile visitors There's about 3,300 UAW members assembled at the Bronco SUVs and Ranger pickup trucks. This is pretty intense I think Ford really needs to look into this and see how much they're really investing In EV I'm concerned that the Main demographic of Ford Doesn't necessarily care about electric vehicles. The infrastructure nationally still isn't there to really support it I had a buddy who's trying to convince me to buy a Tesla because they have the tax breaks and it ended up It would have been an okay deal Honestly, even if I sold my newer car But the point is you know, I like to travel I like to go out to rural areas We have a lot of springs here in Florida and I like road trips as well and the infrastructure isn't really there There's not like a set relay, especially like when you get into the deep South Which is you know, I got a pass to get anywhere else in the country if I'm driving and it just didn't make sense to me really and I think you know Ford has definitely done and a lot of these pickup truck companies have kind of gone into this like luxury Vehicle business, right? I've sat in some of these newer pickup trucks and I mean they're massive and I mean they're pretty nice, right? But I'm not sure that's really what a lot of people are looking for when they're buying these kind of pickup trucks I think they need beaters. I think these guys are contractors. I think they're laborers and They care much more about utility than form and I think Ford is focused on form and that has driven up the price and That might be negative for them on the long term folks. Stay tuned. We'll be right back If you're looking for potential trading setups in the stock market then rocket equities and options report is a newsletter You should try Tommy O'Brien delivers options and equity trades when the markets present them using a combination of fundamentals and Technicals sign up for rocket equities and options report today with a 30-day money-back guarantee So you have nothing to risk for all the details and to start your subscription today visit the front page of TFN and calm TFN educating investors Everything in the universe is governed by the Fibonacci sequence This mathematical principle is responsible for everything from the most aesthetically pleasing artwork to patterns in the stock market To stay on top of stock patterns You can take advantage of sign up for the Fibonacci 24-7 newsletter at tfnn.com When you subscribe you'll get a weekly report from veteran day trader Larry Pezzavento on stocks You need to pay attention to and you can trust Larry's analysis after all He's got 45 years experience as a day trader Larry will also provide daily charts videos and data on the key markets that he's tracking Expect notifications from Larry on market movement You need to act on at any time first time subscribers also get a 30-day money-back guarantee If you're not satisfied, let us know and you'll get a full refund within 30 days of signing up Subscribe to the Fibonacci 24-7 newsletter today TFN and calm educating investors Steve Rhodes started his trading career as a student almost 20 years ago and the student has now become the master Steve won the prestigious timer of the year award in 2018 and barely missed that mark again in 2019 Finishing at number two for the year an amazing accomplishment Steve Rhodes is committed to sharing his techniques and knowledge With anyone who wants to learn and he shares his vast amount of trading knowledge every day in his mastering probability newsletter Steve's award-winning newsletter Mastering probability is delivered every trading day with updates throughout the afternoon sign up for Steve's market newsletter Mastering probability and you'll receive access to seven of Steve's educational webinars Absolutely free at TFN and all our newsletters come with a 30-day money-back guarantee So you have absolutely nothing to worry about visit tfnn.com and try mastering probability 30 days risk-free today TFNN educating investors TFNN has launched the Tiger's Den hosted at Discord TFNN has been educating traders for more than 20 years with live programming hosted by a variety of professional traders during market hours The Tiger's Den available to all Tigers and Tigris's for just one dollar for the year There's no catch or added costs when you join our community of traders sign up today and become a part of this educational community of traders Just visit the front page of TFNN.com This isn't that thinkorswim has Arm holdings on here yet. I'll see what happens just when you when you type in arm You get arvin mariter incorporated, which is not what we're looking at anyways A simple chart on it. We'll talk about this a little more. Obviously the IPO was yesterday This is a chip company That started trading at about 55 71 at the close yesterday at 63 59 and pre-market 65 87 obviously a little too soon to make any kind of assessment on it But as we know IPOs tend to ramp up pretty significantly Once they're first released and then you see a major sell-off and then really a price Kind of stabilization and then we go from there as quarterlies kind of get released and obviously this company will have a lot of Screwed me essentially try to pull up So yeah, this is soft banks chip designer. That's arm and extend a gains of 65 billion on its NASDAQ debut Stock closed 25 percent higher than its offer price $51 on Thursday, so I gapped up to 55 71 Immediately it's now up 34.2 percent from that level at 68 44 Analysts expect more trading volatility for the arm stock if it draws more interest from AI focused retail investors and Also due to a limited number of publicly traded shares a soft bank continues to own about 90% of the stake Something to keep in mind as well when you're getting into this You're always kind of at the best of whales here a little bit This happens in crypto as well Currently has just a 10% share in the segment that was expected to grow at an annual rate of 17% through 2025 Mainly due to advances in AI Arm generates very high margin revenue, but much of that is put back into research and development So we'll stand to see when Quarterlies come out for that company Some more chip woes TSMC is telling vendors to delay chip equipment deliveries So Taiwan's TSMC has told its major suppliers to delay the delivery of high-end chip-making equipment As the world's top contract chip maker grows increasingly nervous about customer demand This is two sources familiar with the matter the instruction by TSMC, which is grappling with delays is it? 40 billion chip factory in Arizona is aimed at controlling costs and reflects the company's growing caution about the outlook for demand That suppliers currently expected the delay to be short-term the source is said declining to be named as information is not public The company referred Reuters to comments by CEO CCOA in July that weaker economic conditions slow recovery in China and Software and market demand is making customers more cautious and more mindful of controlling inventory companies affected by the instruction delay included Dutch firm ASML obviously they produce a lot of these wafers very cutting-edge Technology and they are the world leader in this which makes lithography equipment essential for high-end chip making In an interview Reuters last week ASML CMO Peter Venick Said some orders for its high-end tools have been pushed back without naming customers and that he expects It would be a short-term management Issue ASML is operating at maximum capacity and overall sales or forecast grew at 30% this year if you guys haven't checked out That lithography works. There is a video on YouTube I forget the guy's name and I will try to remember to link it, but he's able to tour IBM's chip making factory obviously very It's a guided tour of course a lot of this technology is kept secret and no one person that knows how to do every part of the job But you get a little insight into how these wafers are made in the different processes They go through and I think it's pretty fascinating. I'll link that as well and yesterday on that note too Getting kind of a side note. We were talking about Tesla trying to figure out how to make die casts for the undercarriage of their car So instead of having so many little pieces. It would just be one major form There's a video that's done by the same host on YouTube that goes over how these dies are used And you know, it's just little things you don't think about right again all these small little metal parts that go everywhere And kind of keep everything together and how integral that is to the economy So I'll try to find both of these videos and I'll link it in the den if you're not in the den yet Give me a second because I'm gonna plug this again You know, I had we had a longtime viewer who got into the den and They sent me a direct message yesterday and they said they just absolutely love it And I get that from a lot of people and I really suggest getting in here You have any issues you can always call me of course Getting into the den you can send me an email to but Jacob at tfnn.com I will absolutely take time out of my day to get you in here and get you set up So it's an enjoyable experience just $1 a year guys Just $1 a year and I'll say to you know There's a lot of different trading rooms on the internet and stuff like that and obviously for intel purposes I go and look at them. We're a you know, we're a private trading room a lot of these other guys are public So, you know, we know who's in there. It's secure. It's only $1 a year and we easily have on average I'd say in total number like six times the amount of people and a lot of these other big-time trading rooms other private rooms trading Teaching you 30 bucks and they just want your money. This is $1 a year This is just so we can keep everyone safe and know who's in there and it is it's really good Scroll down here. This is a three-step process very simple Anyways moving forward from that oracle You know, we had a little bit of a downtick as they're kind of lagging a little bit But let's take a look here.  This was September 11th But then you had even a larger amount of volume tapping down as well A little bit of recovery. So what's happening with this is again, they're bringing their database infrastructure to Microsoft Azure What does this do? This cuts down their expenditure on maintaining Infrastructure, which is a massive cost sink into any company and this is good for this is This is mutually beneficial for both companies involved. Okay, because Microsoft Azure Microsoft makes a ton of money off Azure. This is their cloud hosting program I mean if you even know how to and this is one of things has been so interesting If you even know how to manage an Azure database for a company even an AWS database I mean your your income just is a manager or security professional for that is absurd Right and this is because it's so integral to a lot of these companies. You can keep spinning New machines. You don't need to invest in hardware. You know, when you have these massive server rooms That are native or on-premise There's a lot of Complex kind of planning that goes into making sure these things operate efficiently. I mean you don't think about it, right? But if you stick a bunch of computers together, they're going to be exchange of electrons that kind of fuzz each other out it maybe degrades the integrity of some of the data being stored yet to think about heat and cool air flow and Of course, you need to be able to source this hardware and so this is a massive cost sink And so what you do is you defer all of your kind of infrastructure to a company like Microsoft with Microsoft Azure Or even AWS. This is also another massive one and it's very interesting. So In this article has days after Oracle missed Q1 2023 revenue expectations and gave a downbeat rest of the year outlook Sending its share price to suffer the worst one-day performance in 21 years. This is this boy right here The cloud provider announced to team up with Microsoft to co-locate a portion of its infrastructure in the Azure cloud and then again, this is really what's so crazy for Microsoft, right?  You don't need to hire like an IT guy really But when you start getting massive companies like Oracle shifting over infrastructure This is when it becomes a snowballing effect for Microsoft, right to where they become the end solution For infrastructure folks. Stay tuned. We'll be right back The gold report as a precious metal gold is still king It continues to hold the most effective safe haven and hedging properties across the global major trading hubs of the London OTC market The US futures market and the Shanghai gold exchange The gold report Tom O'Brien publishes his weekly gold report every Monday morning for subscribers consisting of coverage of the XAU HUI GDX the dollar bonds the South African Rand as well as 25 different mining equities with specific buy-sell recommendations The gold report New subscribers get a 30-day money back guarantee. So you have nothing to risk Subscribe to Tom O'Brien's gold report newsletter now at TFNN dot com Currencies commodities and bond markets are as important as ever right now with how they're driving the volatility in equity markets across the globe Which is why it's a great time to try out Teddy Keg stats Tiger 4x report Teddy Keg stat breaks down the 4x markets every Monday using his 30 plus years of experience as a trading veteran of futures 4x stocks and options Teddy releases his weekly Tiger 4x report every Monday morning with coverage of all the major currency pairs Including the dollar index the euro dollar pound dollar dollar Swiss dollar yen as well as many more And he also has weekly coverage of the crude oil market and the 30-year t-bonds as they both influence 4x markets Tremendously when you sign up for the Tiger 4x report You also gain instant access to Teddy's 60-minute webinar archive He just hosted 4x strategies and fundamentals What is behind the Tiger 4x report for all the details and to start your 30-day Tiger 4x report subscription today? Visit the front page of TFNN comm TFNN educating investors Sharpening your skills as an investor is like getting better at playing a musical instrument You have to practice sure but you also need excellent instruction from experts at TFNN You'll get advice and guidance from the authority and technical market analysis, and it's not just dry tedious text here TFNN airs live financial content streamed live on TFNN.com and TFNN's YouTube channel with Tiger TV Live every market day from 8 30 a.m. To 4 p.m. Eastern for free Each host is an experienced trader and gives their take on the market about taking calls and questions live from around the world From the moment the market opens until the closing bell sounds Tiger TV has eight different shows with expert hosts to help you Make the right moves with your money watch online at TFNN.com or on TFNN's YouTube channel and become the investor You were born to be TFNN educating investors Don't forget you can listen to TFNN live on your mobile device 24 hours per day Go to TFNN.com then hit watch Tiger TV That's TFNN.com then hit watch Tiger TV All right, welcome back everyone Yeah, just to wrap this up again for people who aren't here Oracle's moving their database infrastructure to Microsoft Azure on the long term This is going to cut costs for Oracle at least in that realm So they'll either have more cash or you know more cash to dispose to other places to grow and obviously that is pretty solid For Microsoft in general. We're talking about fish and the grateful dead in the den and Why that is interesting is because well, there's two things First, let's talk of this Where the heck is it? Yeah, of course, I need to be better Kind of categorizing these tabs essentially there's conversation that here we go To begin You know, I'm pretty brutal on the potstocks, but you know, whatever Anyways, this is really good for them Report released Wednesday by the Congressional Research Services state that is likely the DEA will reschedule marijuana to schedule three Which will have broad implication federal policy You know the fact that schedule one is insane up with like heroin and stuff like that But I you know that's they did that time before I was alive. So I'm not really sure Recently the Department of Health and a letter to the Drug Enforcement Agency officially requesting marijuana to be reclassified as a schedule three drug Under the Controlled Substances Act, which would effectively legalize it for prescription use The letter came in response to request by President Biden last year For the government to research and consider rescheduling marijuana So, you know if this is done, but what really happens with a lot of these, you know one pot farmers Okay, what happens with the pot farmers one? I think this is awesome For them because I think it's so much money and it's good to get some money back into cashcroppers pockets Especially when it's not tobacco or anything like that So what occurs they can't really put their money in any kind of like bank, right? I'm sure now there are some workarounds to it, but when we're starting out I mean you had a lot of these dispensaries and farmers just sticking their cash in warehouses and having You know private arms groups kind of protect it Right very very old school in some sort of way, but this would be pretty good The pot stocks might seem a bump up. I still think there are some major problems regarding the financials behind a lot of these companies and It stands to see what will happen. I think also, you know when you go to states Where this is legal especially for recreational use. I mean this stuff's so expensive and it's taxed so wildly That they end up losing revenue And then obviously your street dealers Kind of get back into the game But this would this would change a lot of things so then we might see some serious looks at maybe larger companies adding pot Socks into their portfolio or greater investments into it further along the jamb and line is Silicite in treatment and I've seen a few companies now psilocybin is I believe schedule one This is a little bit different in Oregon. Obviously the states Haven't been incurred on against the the Fed hasn't kind of made incursions on the state for doing this especially with pot psilocybin is being used as like treatments And I think it's recreational in Oregon. What's interesting in Florida as I've seen a few of these Companies pop up now. They can't sell psilocybin. You know, this is that's the active compound turns into psilocin And that's what gives the effects of these mushrooms and that is illegal Now there is another mushroom that exists up in you know, like North Europe The native Sommys in Finland take it and you know, whatever I won't go into the history of that But it's called anamina muscaria and anamina muscaria is active compound is muscanol And this is not scheduled by the DEA. And so I've seen in Tampa And in St. Pete there's one popping up now that there are these mushroom houses And there's something all these different products. And so you might see this get added in To some kind of portfolios as well. There's a there's already a lot of therapeutic companies that are using psilocybin for treatment and You know, they suffer from the same thing as like the pot stocks, you know, they go through these kind of like hype cycles And then they sell off because there's nothing super tangible there yet But I think it's interesting to talk about and we're definitely seeing a laxing Not only of You know compounds like this, but also in medical treatment fields as well, right? I mean, they're using MDMA as well to help in therapy as opposed to some of these other pharmaceuticals So I think that's interesting if you want to look a little bit more into that Uranium is Going big today It's hitting 12 year highs as the government warms to nuclear power and we'll talk a little bit more about this, right? So uranium prices have surged to their highest level in 12 years Underlining a global renaissance in nuclear power as utilities race to lock in fuel supplies Prices is excuse me prices for the commodity. It's Friday morning guys. Sorry Prices for the commodity dubbed yellow cake is yellow cake uranium have jumped about 12 percent to 6550 per pound over the past month breaching last year's peak to reach heights not seen since 2011 according to data from UXC, which is a pricing data provider Uranium demand has been lifted by governments from Washington to Seoul to Paris Seeking energy independence by extending the lifetime of the existing fleet of nuclear reactors as they contemplate building new plants after gas prices skyrocketed due to Russia's full-scale invasion of the Ukraine but also Because of Saudi Arabia and you know all these prices are so interconnected in the world so interconnected And the point is is we don't live, you know in the eschaton and history moves forward so highly integrated markets You know when other countries tend to have other plans that are separate from the general hegemon, you know You get price disruptions, so I think this is what we're seeing a shift away from and I've always been pretty big on nuclear at least not just uranium, but there's a lot of other Compounds as well such as thorium the milestone for uranium prices marks a big step towards nuclear power's Reemergence as a critical carbon-free source of baseload power in global efforts to tap climate change Excuse me. I rolled in an undermined by Japan's Fukushima nuclear disaster in 2011 Yeah, well that was built on a fault line as well. And that's something that needs to Everyone needs to remember You have focused on energy security colliding with focus on clean energy said Grant Isaac chief financial officer of Kumiko the world's second largest uranium producer The days of buying $40 uranium order are over and probably also for 50 or $60. We're gonna need new supplies So that's really cool. I think baseload is talking about uranium as well This is the uranium stock. Yeah, you you you only up modestly 1.36 per 1.36% right now for quad use But I think that's cool. There's a Michigan as well is Trying to reinvest in there, let me try to find this Give me one second guys. Sorry They're reinvesting in this nuclear plant and they're trying to reopen it I think this is so cool because you can have localized energy production, right and It is quote-unquote clean Of course, you need to figure out how to store the waste but digging a big hole in the desert I think it's a lot better than letting it seep into the water table Holtek international subsidiary of Palisades energy LLC signed the deal this week with Wolverine power cooperative Not-for-profit energy provider serving rural communities across Michigan So we might be in a new atomic era, which I think you know just for the war is pretty cool folks Stay tuned. We'll be right back You might think that if you want to be successful at trading in the stock market You're going to need a crystal ball after all it's impossible to predict the future, right? Like any endeavor in life before you decide it's impossible get some advice from the experts You might find that it's not so impossible after all for daily market Overviews that give you direction on the key indices selective stocks and commodities Subscribe to the opening call newsletter at tfnn.com The opening call newsletter is written by Basil Chapman Creator of the trading methodology known as the Chapman wave the Chapman wave up down sequence gives you an edge in Identifying price turns finding the peaks and valleys and stock prices get the opening call newsletter by Basil Chapman in your Inbox every day first time subscribers also get a 30-day money back guarantee if you're not satisfied Let us know and you'll get a full refund within 30 days of signing up tfnn.com educating investors build the S&P 500 continue to climb for bold trades on us large cap stocks in either direction trade SPXL SPUU or SPXS Directions daily S&P 500 bull and bear leveraged ETFs Direction leveraged ETFs an investor should carefully consider a fund's investment objective risks charges and expenses before investing a funds Prospectus and summary Prospectus contain this and other information about direction shares to obtain a funds Prospectus and Summary Prospectus call<PHONE_NUMBER> or visit Direction investments.com a funds Prospectus and Summary Prospectus should be read carefully before investing an investment in the funds is subject to risk including the possible loss of principal the funds are designed to be utilized only by sophisticated investors such as traders and active investors distributor for side fund services LLC tfnn has just launched their new trading room the Tiger's Den hosted at discord tfnn has been educating traders for more than 20 years with live programming hosted by a variety of professional traders during market hours And now they are expanding their reach with the Tiger's Den available to all Tigers and Tigris's for just one Dollar for the year. There's no cash or added costs when you join our community of traders in the Tigers Den You can look over the shoulders of Tom O'Brien and the other tfnn hosts while they analyze charts during their live Tiger TV programs and join an interactive trading community with hundreds of members exchanging ideas interact with other Tigers and Tigris's as they share trading ideas news analysis and discuss the market action all Trading day even at night and on the weekends the Tigers Den at discord is accessible on mobile or tablets as well So it's always at your reach to sign up today and become a part of this educational community of traders Just visit the front page of tfnn.com This program is brought to you by Vista gold traded on the nyse american and tsx under the symbol vgz Mark from down east said in the den and this is why i'm telling you to get in here guys One of our posters z Great i mean super Super informative right keeps you post on everything He was talking yesterday that gold might be uh moving up He said that yesterday and gold is we're at 1948 right now Z is also always posting great information into den keeping us all updated get in there If you're interested in gold too i gotta recommend Trying out again 30 day money back guarantee for whatever reason you don't like it You send me an email and subscribe you we get you refunded. This is the gold report newsletter by tom o bryan You also get access to all of his subscriber webinars and he just did one recently on what moves the gold market That was august 30th still super fresh get in there check it out 119 a month great deal. He releases this weekly. It's a very comprehensive Newsletter so i recommend checking that out. You can just go to tfnn.com You get to the home you navigate to newsletters And you wait for it to load and then you get to the gold report and you're going right there And while you're there again hop over to services one dollar a year the trading room So you don't miss uh some of this information that's going on all day long Our friends over at direction are rolling out Nvidia focused ETFs for bulls and bears. I love these. I was not used to them before Uh coming on board here at tfnn these leveraged ETFs But uh, I've I've come to really like them makes you feel like a cowboy a little bit, right Now the direction is rolling out two new exchange traded ETFs Excuse me strange traded funds ETFs tied to the price movement and shares in the video The financial products provider said on wednesday seeking to capitalize on the experiment over developments in artificial intelligence That helped boost stocks this year and it gets you a better exposure to both the upside and the downside Which can benefit you And uh, yeah, I love these. I love these leverage funds. It's 1.5 times return And they are just fun to play around you gotta be you gotta be smart about it, right?  Let's take a look Now this is a leveraged oil. This is bullish Right now So trust funds as a p oil and gas. This is the bull two times right now at 4123 Down 150 and then they have drip as well And I play around with these sometimes obviously they are inverse Um, but yeah, take a look at those. I think that's neat There's also some other things going on. We have qqq zero days to expirations being released That's not through direction. Um, but these zero DTEs are wild The qqq y and again that's zero DTE for the cues that's being released And I think that'll be really fun. These zero DTEs Are super interesting and uh, very good to kind of add into your trading arsenal I really recommend learning how those work And we're going to try to do something a little bit like that with tfn, hopefully I talked about how Caesars and MGM got hacked pretty badly By a western hacking group. Um, but Overall casinos have done pretty well either best july ever winning nearly 5.4 billion from gamblers That's like kind of an insightful title, right? I don't know Anyways commercial casinos in the u.s. Had their best july ever this year winning nearly 5.4 billion from gamblers According to the figures released thursday by national gambling industry group If you any have if you ever had a reason to kind of convince yourself not to gamble that might be it right there The american gaming association said that casinos winnings were up nearly six percent from july 2022 The association also said the casinos remain on pace to have their best year ever in 2023 With winnings from in-person casino games sports betting and internet gambling at nearly 38 billion and that's so real I There has been really like a big cultural shift like a lot of guys my age especially starting like in college Um, they they loved sports betting. I don't know what it was But it just became almost like part of the culture and i'm sure that maybe was the case Everywhere and now everyone can just do it online So there's more access to it But you know with companies like barstool being so Uh influential culturally speaking, uh, you know, we've seen just an uptick in uh gambling There's also like gambling youtubers Um who just go and gamble and see what they win and uh, hey You know if that's your kind of thing they have it The association the national trade group for gambling industry also revealed that revenue from traditional in-person casino games in july Was 4.4 billion which is a new monthly record It said those figures were aided by seasonal travel trends in the addition of several new physical casino properties around the country Including illinois pennsylvania and virginia sports betting generated nearly 498 million in revenue in july Uh up over 28 percent from a year ago and internet gambling in connecticut delaware michigan new jersey pennsylvania west virginia It generated another 481 million up nearly 23 percent from a year ago. So there you go. That is uh That's pretty impressive And if you want to get some exposure we got stocks for that So we're talking about christler a little bit earlier This is owned by stilantis Uh christler calls over 4 000 plug-in hybrid vehicles citing risks of fire It okay Give him a little bit of a break, right? This is like newer attack and maybe they're trying to figure out some things For themselves, but i'm also starting to have like thinner kind of patience for automobile companies And one thing i'll bring up is like jeep. I was helping someone. Uh, they got sadly they got into a car accident With the car that they were so it was essentially paid off or at least they just didn't own any You know debt to a company for it Got into a car accident. They wanted to get a new car So I was helping them kind of navigate that and figure out what to pick out And they really wanted to jeep and I don't blame them right jeeps are beautiful cars They look good, but they were looking in the market for like a 2016 and uh 2017 jeep um and I was like don't buy these cars right one of my family members had a jeep commander And spend a lot of money for it in two years into the thing. Uh, it just started breaking I mean everything started breaking on it. I don't understand, you know And then now coming out from the 2015 2016 models of of jeeps You know like their crossovers and stuff like that, uh, they after 110 000 miles they catch on fire And it's like, you know vehicles aren't new This technology is there and of course you're adding and developing. I'm not trying to sound ignorant on this But um, it just seems like this happens so often and it's not, you know, minor things like, okay the airbag You know, didn't work with some new tech.  Well for chrysler at least As you're calling over 4 000 plug-in hybrid vehicles citing fire risks um And uh, the company has issued a recall for 4 129 model year 2023 24 alpha romeo tenales and dodge hornet plug-in hybrid vehicles Uh, into certain cables not being tightened properly Uh, the electrical connections may overheat and cause a fire even when the vehicle is parked Um, the company said in the filing with national highway traffic safety administration So keep that in mind if you're in the market, you know for an alpha romeo or anything Um coming out of chrysler For that Speaking on some stuff regarding evs. This is uh, not necessarily american news, but it's interesting Since it is it does have to do with the global economy The chinese are flooding electrical vehicles, uh into e.u.  I don't know if we'll see any here in china's uh from china soon, but it's interesting folks Stay tuned. We'll be right back the gold report As a precious metal gold is still king It continues to hold the most effective safe haven and hedging properties across the global major trading hubs of the london otc market The us futures market and the shanghai gold exchange the gold report tom o' brian publishes his weekly gold report every monday morning for subscribers consisting of coverage of the xa u h ui gdx the dollar bonds the south african rand as well as 25 different mining equities with specific buy sell recommendations The gold report New subscribers get a 30 day money back guarantee so you have nothing to risk subscribe To tom o' brian's gold report newsletter now at tfnn.com You might think that if you want to be successful at trading in the stock market You're going to need a crystal ball after all it's impossible to predict the future, right? Like any endeavor in life before you decide it's impossible get some advice from the experts You might find that it's not so impossible after all for daily market overviews that give you direction on the key indices Selective stocks and commodities Subscribe to the opening call newsletter at tfnn.com The opening call newsletter is written by basal chapman creator of the trading methodology known as the chapman wave The chapman wave up down sequence gives you an edge in identifying price turns finding the peaks and valleys in stock prices Get the opening call newsletter by basal chapman in your inbox every day First time subscribers also get a 30 day money back guarantee If you're not satisfied, let us know and you'll get a full refund within 30 days of signing up Educating investors Everything in the universe is governed by the fibonacci sequence This mathematical principle is responsible for everything from the most aesthetically pleasing artwork to patterns in the stock market To stay on top of stock patterns You can take advantage of sign up for the fibonacci 24 7 newsletter at tfnn.com When you subscribe you'll get a weekly report from veteran day trader larry pesavento on stocks You need to pay attention to and you can trust larry's analysis after all He's got 45 years experience as a day trader larry will also provide daily charts videos and data on the key markets that he's tracking Expect notifications from larry on market movement You need to act on at any time First time subscribers also get a 30 day money back guarantee If you're not satisfied, let us know and you'll get a full refund within 30 days of signing up Subscribe to the fibonacci 24 7 newsletter today tfnn.com educating investors Don't forget you can listen to tfnn live on your mobile device 24 hours per day Go to tfnn.com then hit watch tiger tv That's tfnn.com then hit watch tiger tv at 954 right now about 25 minutes after open We are down to sideways. Yes down 0.55 percent Russell down 0.63 and q down 0.93 The ym sideways almost 0.3 percent gold at 1945 Disney at 85 92. What are we doing here at disney? I like the one month, but that's not so bad not an intense volume, but not, you know negligible volume either We'll see what happens all right We only have a short. Yeah, we have a short segment All right. Well here. We'll talk about this very quickly Generative ai love to talk about the cyber security. I'm going to keep you guys posted on this. Don't you worry Generative ai has led to exploding cyber security risks for facing Excuse me risks facing everyday people. McAfee CEO warns. We don't even have to go through this. This is pretty wild Okay, when you're you know trying to Hack someone right one of the traditional ways to do it is you know, you scan the network You scan you find computers on the network. It's called enumeration Um, you run a port scan on a specific ip address That's connected to a machine within the network that computer in the network Your computer communicates With other computers or programs through ports, right? There's different protocols on these ports and some of them are less secure than others You find out what that is You run an exploit on the port if they have a week one open and then uh, depending on What port you use you can do a bunch of different things within the computer This is a very multi-step process. It can be pretty time consuming I know it made it sound simple Um, it is straightforward, but there's a lot that goes into it. I saw a guy use chat gpt To write a script that automates a network enumeration port scanning and then finding the most Insecure ports um for what he wanted, which was something called remote Access, right? So there's a lot of like rdp ports and everything like that Pretty insane furthermore samsung, uh coders were using generative ai To write some of the code that goes to the cloud hackers were somehow able to access that and um, We're able to compromise some samsung devices. Anyways, i'll link this in the den folks. Thank you so much Tommy will be back monday. We have basil up next and larry will be here for the one pm. Stay tuned for that


Hello, everyone. Thank you for joining. No merosis. Today I'm going to present the art life of securing a particle accelerator. I know it's a catchy name. And security at CEN is a hot topic. And cover many, many aspects. Today we are mostly covering the identity and access management part. My name is Antonio Nappi. As you can understand from my accent, I'm Italian. I work at CEN since 2015. I was in charge of moving. I mean, my role is to basically provide infrastructure to host Java application, useful for the daily life of CEN. My role was to basically move this infrastructure from VMs to Kubernetes. So I started really early to work with Kubernetes since 2016. And previously I was an open stack and Python developer. And my name is Sebastian Wopieński. As you can perhaps guess from my letters in my name, I'm Polish. I work at CEN since 2001. Now I'm the service manager of the single sign-on service. But for many, many years I was doing computer security at CEN. So that's my kind of main profile, I would say. And my background is software engineering. So perhaps it's a good moment to very briefly remind what CEN is, although perhaps hopefully many of you do know. So it's a European laboratory for particle physics. So the slogan is accelerating science. But what we, or rather what physicists really do is they study the fundamental laws of nature by doing experiments with particles. And this will be actually relevant to the requirements to our systems. So that's why I'm covering heat here. So we operate a number of particle accelerators, including the Large Hadron Collider, in this machine. You can see the ring here in the countryside around Geneva, Switzerland. But actually the accelerator is 100 meter underground. It's 27 kilometer long. So this is where those huge machines, the particle detectors, which you can see here in the picture, they observe particle collisions and they observe perhaps new particles being created. And this is where in 2012 the Higgs boson was discovered. It resulted in Nobel Prize in physics in 2013. However, closer to our domain, CERN is also the place where the web was born in 1989. So Tim Berners-Lee, who you can see here in the picture, he designed or invented the HTTP protocol, HTML language, implemented the first browser. And well, it wasn't called browser at that time. And certainly the first HTTP server. So there is also some computing part to CERN certainly. What is also relevant is it's really an international organization with over 15,000 scientists from all around the world working together in this logic of peaceful collaboration for science. It's fundamental science, so we don't do applied science, we don't do research on nuclear energy or weapons. It's really fundamental science. With nationalities, with people coming from all possible nationalities. And again this will matter in a moment. So as you could see from our presentation, myself and Sebastian, we have a different background. It's more focused on the part of security and key clock application. We are more focused on the infrastructure and deployment of key clock. So we are going to cover this in two parts. So Sebastian, we start with the key clock specific part and then I will focus on the part of deployment infrastructure. All right, so I don't think I need to convince anyone in 2024 why having a centralized single sign-on service in an organization makes sense. So I will not cover all the details, but just to mention that this is one of the unique cases where you can achieve usability, security and cost efficiency at the same time. So obviously single sign-on is the way to provide authentication and perhaps authorization to different resources in a big distributed organization. So what we use at CERN is key clock software. Now, just to have understanding how many of you, if you could raise your hands, if you are at least somehow familiar with key clock. All right, excellent. So most of you, which is very good, which means you're in good room, that's great. So I'll not cover too many details, but for those who maybe are less familiar, it's the open source identity and access management solution. It provides single sign-on with support of multifactor authentication and second factor authentication. It could be OTP, some one-time passwords. It could be web-offend tokens and with role-based authorization. It allows for user federation with active directory or LDAP or Kerberos servers. It supports external identity providers so that people could log in with... in different organizations and still have a session in CERN SSO, in our case. It supports social login, so people can log in with their Google or LinkedIn accounts. And what is very important is that it uses... it's built on standard authentication protocols, well, the modern ones, such as OOF2 or OIDC, OpenID Connect, or maybe not so modern as SAML. I'm not a great fan, but anyway. And okay, we're here, and obviously I think you know this because key clock since spring last year is in CNCF incubation. So maybe I should mention briefly why CERN has gone for, you know, first of all, on-prem, you know, single sign-on service and not in a cloud as an organization. Why do we go for open source and why we have chosen key clock? So I mentioned that we operate, you know, particle accelerators and experiments, so all this technical infrastructure must not be interrupted and computing systems that support it, and then I must really work while the machine is turning, which means that we really need to have full control over configuration of the system but also over release and patching cycle of including single sign-on service. And we need the service to be available from our internal industrial control systems network, which is a private network with non-routable IP addresses. So they couldn't, you know, the network could not go to the cloud. Well, we value openness. You know, open source is really compatible with CERN's initiatives such as, you know, open science, open access. I would say open source is really in our DNA. And we really wanted to avoid vendor lock-in and, equally importantly, to avoid the situation where we didn't want to be subject to, you know, sanctions or export laws. We may have, I know, scientists from Iran. We want them to be able to authenticate to our services regardless of what maybe is decided for good or bad reasons, you know, by some politicians somewhere. So this is important for us. And then key clock really fits our needs. It has a lot of big adopters, which proves it works at scale, a very nice growing usage in academia and research, very strong user base, actively develop with many frequent releases. It is extensible, which I will mention later how we use that possibility, so it can be adapted to our needs. So we use key clock, actually not me personally, but we started with key clock in 2018 with key clock 4. You may know that these days the recent release of key clock is 24. So we really started very early on. So this is how the service looks like right now. We have 200,000 users, including external people who connect to CERN for whatever reasons. That's a lot, but that's perhaps not a huge number. We have 10,000 OIDC clients, which is mostly web applications, but in key clock and OIDC standard, as you say, clients. And that's a lot. Normally organizations don't have so many applications behind their single sign-on. Well, this is because that CERN everyone and their dog can set up a website and put it behind single sign-on. And we have 10,000 logins per hour during office hours, so you can see it on the right. For those of you, especially in the back row, which if you cannot see the shape, just to explain to you, it's actually, I don't know what you think, but it's basically logins in the morning and in the afternoon with the break for the lunch. All right. So the service, our service, again based on key clock, so it's really using key clock features, which is, of course, to factor authentication with time-based one-time passwords or web-authent tokens, which could be hardware tokens or biometric devices, fingerprint readers, and so on. Kerber's authentication. It offers integration with EDUGain, which is this educational identity federation. And it means that, actually, people can log in to CERN, or have a session in CERN single sign-on, by logging in at their university with their university credentials, right, and then have a session at single sign-on at CERN. It doesn't necessarily mean that they're authorized to do anything yet, but at least they can connect and perhaps be given privileges that they need. All right. And we also support social logins, Google, Facebook, GitHub, and LinkedIn, and guest accounts, which means if someone needs to log in to a CERN system and have a session, you know, identities, they can just create a local identity with an external address. So, our single sign-on is tightly integrated with what we call CERN authorization service. I will not go into detail, so, you know, the diagram on the right is not readable on purpose, it's just to show that it's a complex beast. So, it's a service that manages identities and accounts, applications and their authorization, so, you know, roles, level of assurance, and some 80,000 groups. And now the decision back in 2018 was to implement this outside of key clock for various reasons, which perhaps I will mention here. Well, you know, we at CERN have some complex use cases, which sometimes necessitates that we develop our own solutions around them. And at that time, 2018 key clock was much less matured than now, and some of the capabilities were limited. And we also wanted to have this possibility to switch from key clock to another solution. We didn't use that possibility and I don't think we will use it now. You will see that we're very happy with key clock, but however, this was the decision taken at the time. Now, it's important to mention that key clock does provide support for pretty much most, if not all of those features, maybe not exactly the way we would use them, but still. So, perhaps if we had to take the decision now, we wouldn't have done it anyway. All right, so I mentioned the extensions that we do. We put into key clock so that it does some specific things that we want. And this is using so-called service provider interface, so SPIs. So we can provide our providers that run within key clock. So part of this is to do integration with this CERN authorization service that I mentioned before, and which also creates identities for external accounts if they log in to CERN for the first time. We, of course, have our own CERN team so that the login pages for the users they have CERN look and feel, which is kind of normal, obvious. But also, a tiny but nice thing that I like is that we developed this provider for the admin console team so that depending to which environment you connect, there is a different color of the banner. And this is very simple. This is just to avoid that we do something, change something in production while we think we're connected to dev because we have so many tabs open. So it's stupid, it works. When I see red banner, I don't click anymore. It really works. All right, and a few of the extensions that we develop, which actually may be, which are not CERN specific and which can be useful perhaps for other people. So one of them is OTP validation endpoint. Because if a given OTP, a one-time password code, this six-digit code, is currently valid for a given user. So why would we expose this? Well, because this is used by our custom PAM module in SSH servers to enforce 2FA on SSH access to sensitive machines, bastion hosts and so on. So that's how it works. Which also means that we have the same OTP for web access and SSH access. We also have a provider to detect compromised passwords. So how it works is that when a user logs in, of course we don't keep clear text passwords anywhere, obviously. But when a user logs in, the password is hashed and then compared against a list of known compromised passwords, we have this huge database that comes from have I been pawned so Troy Hunt and many other security sources. The password was compromised somewhere and it appears on some list. And we have our own CERN CAPTCHA which is used when guest accounts are being created and it replaces the default Google RECAPTCHA which we do for privacy reasons and also for availability reasons so that people could register their guest accounts from countries where Google is perhaps blocked or not available. All right?  Let me mention some of them. They're obviously, you know, minor inconsistencies, limitations in bug, a few examples is we very recently discovered that when we edit in key cloak, a user that is blocked already temporarily perhaps in Active Directory then editing the user blocks it in the key cloak database which means if the user is then unblocked in Active Directory, the user is still blocked in key cloak and cannot log in. So I think there is something strange here, we haven't really reported it yet but it's a very fresh finding but sometimes you find things that, you know, in some corner cases that hit us. You know, there are some small inconsistencies maybe the user name doesn't appear in the log message but the user ID appears or maybe the user name appears but in the user ID field so sometimes, you know, it's inconsistent and requires special parsing of the logs. Another thing is admin console which actually provides different features and different information depending which team you choose for the admin console which is kind of strange OK then, you know, major versions when we upgrade they obviously occasionally bring breaking changes including sometimes unexpected breaking changes. When we migrated from key cloak 19 to 20 open ID scope became mandatory in requests to the user ID endpoint. So this was to make it standard compliant which makes perfect sense except that some clients were not standard compliant so they were not considering that open ID scope in their requests and all of a sudden things started breaking. So there was some research. You know, some features stay in preview mode for a long time so one of them is this token exchange support which was mentioned yesterday they had this very nice presentation in the morning some of you may have attended it so it works very well we use it actually a lot so should we trust it, will it change so if you go to even key cloak discourse forum people ask about this regularly actually each link is a different discourse thread when people ask every year will it stay in preview mode what are the plans so it's a bit sometimes frustrating a little bit however and I'm very happy to say that just two months ago Thomas, one of the maintainers who is perhaps even in this room I'm not sure he published actually plans so one of the key cloak maintainers published plans to move this feature out of preview which is great news so thanks and very appreciate it this is also to show that things change and things get really better from one release to another one last thing I want to mention is that since we manage and I think by default you manage key cloak with the admin console so web UI it's great it comes with drawbacks there is no versioning of the configuration there is no change detection there is limited traceability who changes what if you have several admins well you can't find it in the logs eventually but you know this is what it is how we deal with it is that we have our custom solution to basically regularly dump configuration so realm exports realm and other settings manipulate a little bit the adjacent and objects are sorted so that are comparable and then push it to git which means whenever there is a change there is a new commit so we can track what has changed in our configuration if you manage key cloak I really recommend this approach thank you Sebastian as you can maybe understand the send single send on is probably the most critical services in IT department and the whole send the reason is that is not only used for the daily life of send it doesn't have access any application, administration financial engineering you need to log in but also experiment we're using it for data taking this means that if the accelerator runs and some of the tools that are monitoring the accelerator the data that is taken from the collision they don't have access to the single send on that's a problem so back to the 2022 I think November to review the infrastructure of the single send on because there were some issues with performance I put here how it was deployed at that time you can see that everything was managed on VMs with puppet so there was a layer of frontend where there were basically two machines one HEProxy one active and one passive the switch between the two was taking 15 minutes this means that if the active machine was going down there was 15 minutes where basically the key clock itself was not giving any I don't know then this was the frontend from the key clock back end servers where we had multiple VMs in multiple availability zone where all the key clock process were running together with infinite span this means that all the operation were much more difficult when for example the SISO team had to change SPI that to be really careful to not lose the user session as well as I said everything was maintained by puppet and actually there was probably only one maintainer at that time that was constantly update the puppet module to the new version of key clock so we decided then to look at this and to propose an alternative architecture the choice was quite easy we decided to move everything to Kubernetes the reason probably if you are already aware why we should move to Kubernetes but this was not so obvious in our department and to some of the management so we had to really to demonstrate that moving to Kubernetes was a good choice the first thing is that key clock direction was clear the Jboss that was the application server that was hosting the key clock application basically replaced by Quarkus that is a Java framework designed for Kubernetes and then also they were providing Kubernetes operator for deployment that was making things much much easier plus you get with all the advantages of Kubernetes the key clock itself become much more portable now we can move across multiple clouds on premise public cloud without any problem because we use Kubernetes as platform of deployment and then of course is reproducible and mutable this allows a lot to speed up operation and reduce the team effort because before a lot of effort was done was basically to maintain this infrastructure up and running more than actually focus on needs of the end user of key clock and then this makes of course much easier to maintain the infrastructure in long term because we have a vibrant community around Kubernetes and key clock while for the puppet world was basically one guy that was dedicating his time to a puppet module that anytime he could just decide maybe to move as well to Kubernetes or something else so this is how it looks like now the big change is that Git becomes the source of truth so we have all the part of login monitoring, key clock operator key clock configuration of the CRD in Git and then there is Argo CD that automaticaly synchronize this in multiple cluster I'm a huge fan of Kubernetes Cattle service model that maybe is not nice for Cattle but the idea is that basically all the key clock are running in different Kubernetes clusters each of these Kubernetes cluster is a different availability zone and basically we also decide to split the key clock from infinite span the reason I will explain a bit more later and watch which are the advantages but basically this was a huge change for us in infinite span actually on VMs actually not fully on VMs we use still puppet but only to spawn up podman so basically infinite span is a container running in podman and puppet is only used to configure the podman and that's it and last piece is gonna be here there is infinite span cluster dedicated and plus we replace also the load balancer where basically we have now a cluster of tree machine and we use floating IP and basically every time the active machine goes down the IP is moved to another one of the passive nodes and this is almost invisible to end users so the failover is almost so we don't have basically downtime for that and then I don't go too much in detail years because it will take too much time but basically we started to update also all the monitoring and logging part we replace the flume base logging part with fluent bit to rewrite all the parsing and so on and then also started to adopt Prometheus was already partially used but this was fully put in containers now as I said we had to demonstrate that this move was actually worth it because we had to spend some resources I mean the team at center is extremely small and sometimes people don't see reason to change if something works even if there is a clear game it is obvious so we wanted to demonstrate that since we are adding a new virtualization layer that is Kubernetes we are actually not losing any performance and so basically what we did we upgrade to version 20 of key clock and start to stress test basically we use this closed workload model where the number of user there is a number of user in this case 50 concurrent users were executing the same scenario in multiple times this means that more requests your server is able to handle more requests that will come to your server and this run for 10 minutes as you can see probably from the screen is that the new infrastructure based on Kubernetes and the separation of key clock from infinite span was 4 times more efficient than the previous one and we were able to end much more requests in a way to get the green light from management to go forward and now I want to actually focus on the split, infinite span and click I think this was the real breakthrough of the infrastructure why we decided to do that I think well first because of experience with Java application we as team we have a lot of experience with Java application with caching and we always prefer the model of having the cache separate from the application that sometimes in this case we demonstrated that was not extremely useful plus infinite span and key clock they scale differently key clock can be almost stateless it can scale from zero to whatever while infinite span depending on how much times you replicate the cache it has some performance issue so if you go through a certain result it has some performance losses so and also I mean one question that happened I remember there was an issue about key clock they asked what actually was the component that was failing infinite span or key clock in the previous model of VMs since they were sharing the same Java process was almost impossible to understand which process was using more CPU or more memory splitting them now we have a more clear view of what is going on in the memory intensive of course this simplifies a lot of operation because it makes key clock stateless now if you need to upgrade snspi for example the team or whatever you just need to restart quickly the pod key clock and this is almost invisible to end users because they don't even realize they don't lose session because this is infinite span while before it was still possible but you had to have much more coordination because you had to start first the first node waiting that was up waiting that the cache was replicated to another node and so on so the operation was taking much longer where now is you kill the pod it's up in 40 seconds and that's it and you are happy and no one see anything actually I tell you I remember that when the first week we moved to Kubernetes we had some issue with the Java settings they were too low and so basically for three days all the pods were restarting every three hours at different time but there was no complaint and I mean this is a service that is fully utilized every basically day because of course we have people at CERN that work from 8 to 6 p.m. but there are also people in the states in the Asia that are connecting through the CERN SSO at any time even in the night so this is a service that has to be always up I mean this is now actually fully documented in the key clock documentation but when I look at that I think it was yes beginning of 23 I remember there was no clear way to do that it was possible I had to dig a lot in GitHub issue to find some example people that were trying the same but it was not well documented actually this was I think a recent update maybe with multi-site setup so basically what we did we just created the config map out of infinespan configuration where we specify remote server we set up the infinespan cluster with adns alias so basically the three IPs are behind the adns and then basically we tell to go there and then we mount this file in the key clock through volume and volume ones are like any Kubernetes resource and then we specify through this cache config file option where key clock should look for this config file now we move key clock to Kubernetes in September 2023 so it's more than actually six month we are going for the seventh month and I think I want to highlight here the good things of this move first of all is operation as probably we all know make all the operation much faster and easier there is less time spent in coordinating because you need to be careful to infinespan, you can restart key clock without any problem and then we introduce the gigtops approach that allows us, I mean if you remember what just said Sebastian about there is not really way to track in changes still there are pieces that are in that database and they are not easily to track but all the other changes that in the CRD they are easily also docker images, they are easily tracked by git because basically there is someone, there is a merge request someone has to review it and so on and if you see any problem you can just refer to the previous comment we demonstrate that this infrastructure was much more realable than in the past, in the last six month we never had any issue while before was happening a bit more often and this is a redundant architecture as well so is even as more resources in the past that is kind of required because I mean all this in different availability zone and also I mean we know that now the time that we are spending on the operation and on the infrastructure is much less than it was before before was basically ejecting the time of the SSOE team now is basically just a small perfection that they have to do from time to time for example like upgrade key clock or things like that less good things you know when I went to manager in this presentation and then I show them there is unsupported field has been there for many years is extremely useful but maybe I mean to justify people a bit scared when they see why there is unsupported in something that is running in production is some hard to explain in finish finding BMs we want to move them as well to Kubernetes the main issue is that usually multicluster approach with stateful they are not best friends we have some luck in term of service match so we are looking at that to see how we can achieve that and then probably this is a bit provocative is there an alternative cash to in finish fund key clock is part of CNCF but in finish fund that is basically required to run is not so what is the future of that our plans I think we are almost there we want to prepare a BCDR plan because this is what we were asked I mean as I said this is a extremely critical service if it goes down the whole certain activities will be basically stopped and this is not reasonable we want to investigate service match for in finish fund deployment so probably something like Cilium to basically be able to run multiple instances of in finish fund in multiple cluster or even to look I think this test multi site deployment that was recently advertised in the key clock block so this is something that we will see in the next year I leave the floor for the key clock part thanks and the other parts of our plans is to define how we upgrade and how we keep upgrading key clock so how much we want to be far away from the mainstream most recent release do we want to apply all the minor version that appear you see that they tend to appear in that very particular case 24-01 appear just one day after 24-00 I guess we would never anyway go with production for the 0-0 new major release but still to we have to get our feeling how often and how we should upgrade we certainly want to contribute back to key clock we kind of very slowly started but I think the community deserves more so whatever we develop internally if it's usable we will want to contribute back and perhaps actually reassess whether we should be using or using more key clock so called authorization service which I haven't really mentioned much but because this is what we currently have implemented outside of key clock but perhaps we should just use what key clock provides alright and this brings us to the last word and last slide and there are actually two very simple messages we are very happy with key clock it's a great software with strong community behind so we absolutely have no plans to change we will use it and happily grow with and see how key clock grows and we are very happy with the move to Kubernetes hosting it's obviously the mainstream supported approach to host key clock it gives us much more reliable infrastructure as Antonio mentioned before it makes again easy to test and deploy changes it's just the way to do it alright and with this we thank you very much for your attention thank you any questions I think we have one minute for question if you have any otherwise we can just there are microphones in the middle of the corridor there is a microphone in the middle so I already have one question how do you deal with security events when it comes to key clock so you get a failed user login and it happens like 60 times in an hour do you actually monitor for that so the question is if and how we deal with security events with users like when users perhaps get compromised or when we see some suspicious activities we this is more done by the computer security team for 15 years there are various mechanisms in place it's a separate discussion but basically they do analyze the login logs that comes from key clock for various aspects including for example connections from unknown or let's say suspicious or unknown locations so for example if I connected from the train to Paris or if I connected from a hotel I got a message from your own saying you've connected for a location that you didn't do before is it you, if not please let us know please report and there are other mechanisms if I just may add as well we have a system to detect sometimes they are not only compromised users there are also some users that are testing key clock integration and they start wandering the service it means that people they do 10,000 login in less than 3 minutes that is not reasonable so we don't have a really policy we at the moment contact user and say please can you stop this and figure out what is going on but we would like to have some more autonomous to react and then I list these kind of users if they start wandering the service so thanks for the question I have a question so since you decided to split in finispan from key clock and running in a separate service why in finispan are not ready sketch for example why in finispan instead of ready sketch for example we cannot use redis because key clock only supports in finispan as first sketch so that's actually my provocative message is why we cannot support multiple cache system so that's well thank you all for hi thank you very much for the nice talk did you consider using infrastructure as code tooling like Terraform instead of exporting jazens and why did you not use it I think it was using most I think what Sebastian mentioned was more related to realme import because I think when we started the realme import was not part of the e-tops we actually discussed this yesterday and I think we need to align on that because when we did this there was this change between the old key clock operator to the new one and the realme import was removed from the e-tops part I see recently in the new versions actually the realme can be part of the CRD so probably this we will look at that I don't usually like Terraform because there is not this concept of reconciliation so basically you push something but then you well that's so that's why we usually prefer the githops because we are not sure that we are going to look actually I think it would be nice to have even more configuration in gith than actually in the database but this is going to be a difficult task thanks for the questions are there any other questions in any case we are going to stay in this room for certainly some minutes more we welcome you very much to approach us directly if you have more things to discuss or if you have other experiences to share because we also want to learn from other key clock users and I guess there are many here so thanks


Hi everyone, Sean with jaspyscasebrakes.com here doing 2020 contenders football two box break pick your team number six Where we're giving away the chargers if you had two or more teams in the break as well as tonight only $50 and break credit to two people in the break tonight only So a little bonus extra for the people in the breaks Here is the list of customers and their corresponding teams from Greg S. Vang and the Cardinals down to John Wenzel and the Washington football team. I'm gonna copy the customer list over to a separate sheet And we're gonna alphabetize that To see how many people get entered in for the chargers so Adam Kaepernan with four teams gets two entries Austin gets one Brian gets one Edward gets three. We'll use one of your spots with the last spot mojo as well Greg gets one John D gets one John W. It's one Joseph gets two Sean gets one and Summon gets two so from Adam down to Summon 15 names and name on top after Five and a two seven times gets the chargers Seventh and final time congratulations Edward Sepulveda with that last spot mojo spot Maybe that's the one that helped out that got you the chargers so seven times on the randomizer seven times on the dice So let's pop back over here Pop that in there for you And print this out the fifty the hundred dollar break or break credit give away two spots Fifty dollars each will be after the break itself separate dice roll and brand advisor So you can see the lines on there. These are the last two boxes in this case that we use for two box pick your teams 12 boxes six breaks two boxes each 12 last spot mojo Edward Sepulveda Steelers and Titans And that last spot mojo spots got in the chargers as well So last spot mojo Jordan Jordan love for the Packers and Sean Maddock Alvin Kamara to 199 for the Saints Edward Sepulveda Kirk Cousins veteran ticket auto. No, why was that turned around? What a tease? Come on Patrick Holmes for the Chiefs Austin Holmes II round numbers both of those for the 49ers Those go to the Edward to Edward Sepulveda KJ Hill for my chargers rookie ticket auto Edward Sepulveda and the Chargers spot he won Henry rugs for the Raiders summon Kim Kyler Murray for the Cardinals Greg S. Vang Four more autos left in the stack should Herbert Chargers Edward Sepulveda Marlon Davidson Rookie ticket auto and Lena Hawks could use a little bit more of the sticker there Marlon Sorry Hawks Falcons Joseph Barton Gladney Jefferson for the Vikings summon Kim Tom Brady for the Buccaneers Joseph Barton Tom Brady Bucking ears Joseph Barton Grant Delpit for the Cleveland Browns rookie ticket auto That's going to Brian Crouch JK Dobbins for the Ravens Aaron Billingsley got two more autos in there So we should have two left in the rest of that stack Herbert Love dual So that'll be randomized at the end left side right side Patrick Queen rookie ticket auto For the Ravens Aaron Billingsley T Higgins for the Bengals John DeNene redemption Get your guesses in so that'll be the fifth auto Denzel Mims for the Jets Adam Kaepermann rookie championship ticket RPS Is that out of 49? Super Bowl tickets a one-of-one right? Playoff tickets 99. I want to say championship tickets 49 maybe lower Let's see card number 126 a J Dylan For the Green Bay Packers Shawn Matic very nice There you go Shawn Nice championship ticket RPS for you there AJ Dylan. That's our fifth auto from that side I guess that I think those are out of 49 maybe lower Second box Kyla Murray again for the Cardinals Greg S. Vang Logan Wilson rookie ticket auto for the Bengals John DeNene chase young for Washington John Lenzel Round numbers Okuda and young 49 or less Anthony says on championship ticket. So there you go Bryce Perkins rookie ticket auto for the Rams Adam Kaepermann Tua for the Dolphins John DeNene Kyla Murray again for the Cardinals Greg S. Vang So that's two auto should still be three more in that stack for us Thank you very much Anthony For looking that up for me They said I knew the playoff I thought was out of 99 so Pop championship was 49 or less Super Bowl ticket. I think is a one-on-one We got a ticket stub fingers crossed Quarterback low number. We got points 250 points so These usually get paired up with really really big hits The points will be randomized to one person at the end of the break Let's really hope that that big it stuff is a really good name Isaiah Simmons for the Cardinals the great guest Vang Super Bowls one-to-one cracked ice 22 cool. That's what I thought Anthony Uter Grossmottos KJ Hamler round numbers randomizer at the end Damon Arnett Championship ticket out of 49 For the Raiders Summon Kim So the points will probably count as one of the autos just adds up as it's typical Jordan Love for the Packers Sean Matic Okay, so with the points counting as an auto and this auto here That's four autos from this box that ticket stuff is probably gonna be our fifth one Michael Pittman, Jr. Rookie ticket RPS ticket stub 74 out of 86 for the Colts That is Brian Crouch Congrats, Brian Big fan of hits There you go, that should be our fifth and final order see what the rest is Jovan Kinla Brandon Ayuk both going to the 49ers Edward Sepulveda Henry rugs for the Raiders Summon Kim Josh Jacobs to 99 championship ticket for the Raiders and Summon Kim and my guy Justin Herbert to finish it off for the Chargers Edward Sepulveda So two randomizers to do guys one for the left right randomizers on those round number dual team tickets actually three so left right on this and Then what we'll do is there's points remember who said 250 points So on the break credit giveaway first two names $50 and break credit each number three 250 points So only the two randomizers to do so left right and second randomizer Greg S. Vang back down to John Wenzel New dice roll Randomize both lists a three and a six nine times Ninth and final time. Those are all gonna go to the right side nine times on the randomizer nine times on the dice right side is Broncos lions Packers and now nine times on the names for break credit and points Ninth and final time Congratulations, John Wenzel and Edward Sepulveda You guys both got $50 and break credit John Deneen third spot. You're gonna get yourself that 250 points There you go guys that will do it That was 2020 contenders football two box break picker team number six from jaspyscasebreaks.com I'm Sean jaspyscasebreaks.com. Thanks for hanging out. See you next time


Where will the first Axis coaster be going and when will it open? This has been a big topic of discussion ever since this innovative new roller coaster model by SNS was unveiled last year, and I am going to discuss my thoughts about possible parks it will end up at and how soon we could see this model opening. I will say right away that I believe the first Axis coaster will open at a Six Flags park. It is no secret that Six Flags loves to invest in these fleshy types of prototype coaster models and clone them at several of their parks for a pretty modest price. In fact, they've done precisely this with another concept by SNS as well, that of course being the 4D free spin. Given all of that information I just laid out, what Six Flags parks would make the most sense to test out the very first Axis coaster? The parks that I immediately think of are Six Flags Great America in Gurney Illinois and Six Flags Fiesta Texas in San Antonio, Texas. I will tell you why. Six Flags Great America. What has this park historically been known for? Innovation. Great America received the one and only Intamin Space Diver Z-Force in 1985, BNM's first ever coaster, the revolutionary stand-up known as Iron Wolf in 1990, the very first BNM inverted coaster in Batman the Ride for the 1992 season, and one of the very first BNM hypers along with Apollo's chariot in 1999, opening mere weeks after the latter. Great America kept this tradition of innovation alive in 2019 by opening the first of SNS's new generation air-compressed launch coasters in the US, so far the only one in the country, and this is known as Max Force. So Great America has this history of many prototypes and firsts for the chain, along with a very solid relationship with SNS in recent years. I think there is a very high chance that Six Flags Great America could be the first park we see one of these new access coasters at. However, if it is not Great America, I believe Six Flags Fiesta Texas could be the first park to receive the access model. Fiesta Texas in recent years has also been a park to receive models that are first of their kind, or at least first for the chain. 2015 saw the addition of the first ever SNS 4D free spin, which I touched on earlier. This installation is known as Batman the Ride, and six clones of this free spin would open in the Six Flags chain over the next four seasons. That's pretty impressive. This once again really helps to demonstrate that strong relationship that Six Flags has with SNS. In 2018, Wonder Woman Golden Lasso Coaster, the first ever RMC Raptor, would open at Fiesta Texas as well. And now a custom Raptor is being built for Six Flags Great Adventure with Jersey Devil for 2021, and Six Flags Magic Mountain is all but confirmed to get one of these larger RMC Raptors as well. Once again, I feel as though the strong relationship between Six Flags and SNS, as well as the recent testing of prototype models at Fiesta Texas, just speaks for itself. It would not surprise me at all to see the first access coaster at Six Flags Fiesta Texas or Six Flags Great America. When will the first one debut though? I'm predicting 2022. The current situation obviously screwed up the 2020 plans big time, and Six Flags is delaying most new for 2020 attractions to 2021. So I think 2022 will be the year for the first access coaster. The reason I say this is because SNS has strongly hinted at one coming soon, stating that many parks are interested in the model, and that someone would be purchasing it very soon, if they hadn't already. What do you think? What park will get the first access coaster, and when will it open? I know Cedar Fair probably wouldn't be too far of a stretch to invest in one of these either, seeing as King's Dominion will be getting a 40 free spin very soon, so I'd love to hear your thoughts. Be sure to like this video if you enjoyed it, as it really helps get this out to more people, subscribe to my channel for more videos like this every week, like Coaster Daddy on Facebook, and follow Coaster Daddy official on Instagram. Also, don't forget, I do have a merch store with lots of awesome stuff you can buy to help support my channel. Once again, thank you all so much for watching, you are the best. This is Coaster Daddy, bye.