Well, hello and welcome to Understand Men Now. I'm Jonathan Asley of JonathanAsley.com, and I'm so excited to be doing this live stream for you today. Our topic, the five signs he's serious, and he may go the distance. We're gonna get into that in a second. Really quickly, if you're brand new to my YouTube channel, please hit the subscribe button, hit the bell so you can be notified of new videos. And if any time during this video, the content resonates with you, please hit that like button so I can be seen in the YouTube algorithms.  It's direct, a little tough love, and a lot of heart. And occasionally I use expletives to enhance a sentence. So if an F-bomb or two isn't your cup of tea, I suggest logging off right now. Lastly, these are my thoughts, my perceptions, my opinions, by no means do I suggest this is the truth. You have to decide the truth for yourself. I'm a bit of a contrarian, so my advice goes contrary to public opinion and traditional expectations. All right, so I want to share something with you that happened to me this morning. Well, not really happened to me, but I had an invitation from a client to listen to a podcast on the prevailing narrative. That's the name of the podcast. And in the podcast, the host had an FBI negotiator on there, and I thought it was really interesting because it was talking about how people lie. And they were giving a lot of different examples of how people lie, and in particular, they were talking about the Netflix special called the Tinder Swindler. That's right, the Tinder Swindler, how this man conned many, many women out of multi, multi millions of dollars. And I thought the podcast was fascinating listening to an FBI negotiator because their job is to read people, to understand people. And one of the things I thought was rather interesting is that human beings have a propensity to see the good in people. That's right, human beings have a propensity to see the good in people. In particular, people who are strangers, which I thought is rather fascinating. Now, to the extent that they see the good in people, what it means is that there isn't necessarily this intentional mistrust, but we oftentimes want to see the good in people. We want to believe people. And so why I'm bringing this up is because I'm not necessarily talking about lying per se. Okay, I mean, the Tinder Swindler was kind of an extreme situation and this was a genuine con man. What I thought was more fascinating was just how humans operate, particularly in the dating realm, because these days we are meeting total strangers. That's right, we're meeting total strangers. We don't know much about a person when we connect them with them through our online devices. And because we don't have any degrees of separation, I mean, I want you to think back 30 plus years ago and beyond or back in time, I should say, for the most part, if you mated with someone, they were from your tribe, they were from your village, from your town, from your workplace, maybe from your college, you had people that knew people about the person you were going out with. And this all changed with these little devices. It changed in particular. It first started with online dating when we used to have to use our laptops. Remember when you had to use your desktop or your laptop? And now everything is done through a swipe. And these days when we're meeting total strangers, we know very little about a person. We know very little about a person. And there's this misconception that if we talk a lot on the phone and especially when we're clicking with someone, especially when our estrogen and our testosterone levels are up and the dopamine levels are up and we start to feel this chemical reaction. Oftentimes this chemical reaction is limerence. And if you've never Googled limerence, I highly recommend typing it in your computer later after this broadcast because limerence is extreme infatuation. Extreme infatuation. What oftentimes happens is when we have this extreme infatuation, it moves into lust. And when lust takes over, when that dopamine rush of lust takes over, men in particular can say almost anything to make you believe that they actually genuinely care about you. And I want you to think about this. In many cases, you've only known the person a nanosecond. And I often believe it's the movie Pride and Prejudice that sets you up for failure because Darcy knew Kira Knightley for only a nanosecond and he was madly in love with her. He literally said 10 words to her at a 10 word exchange and he was madly in love with her. You know, really? And today, we would think that's kind of insane, right? But this narrative that many of you have grown up on, this Disney narrative plays into this. And I know cognitively, I know rationally, you don't think this way and yet it happens over and over and over again. This is why this morning when I wrote, I did a short video about the importance of testing people, of testing people. And in particular, the test is not to jump into bed so quickly. And this is gonna piggyback on what I'm gonna share later, but it's so important to actually spend about a hundred hours of face-to-face time just to get to the first layer of trust to invest that time getting to know another human being not over the telephone. You know, by the way, did you know 90, and by the way, this is the FBI profiler talked about this as well. You know, 90% of communication is non-verbal. It's looking at their facial clues. It's feeling their pheromones. It's their hand gestures. All of that plays into communication. And that's why all this incessant telephone communication doesn't really give you a full picture of a person. Now, why am I saying this? Because I think it's hugely important to recognize that chemistry doesn't equal relationship success. And I have everyone who knows my relationship, Iceberg, and by the way, one of you beautiful Sam fans out there sent me this, although I'm only gonna use it once because of the glare, but they update, this is my current relationship, Iceberg, what I'm gonna use there is today. I wanna thank Gloria for this. So you can see that up above the, see the light's gonna reflect too much. So I'm gonna use mine. You can see above the water line is chemistry. It's the first thing we see or feel, but below, and that's attraction and below the water line is compatibility where we share the same values where our lifestyles are blendable. And more importantly, is this person emotionally mature enough to be in relationship with? Because all the chemistry in the world cannot fix dysfunctionality of a person. Can I repeat that? All the dysfunctionality of the world cannot fix the dysfunctionality of a person.   Okay, I get why people do that because it's not genuinely lying to deceive you. It's the misrepresentation is because of fear of rejection, a fear of rejection. The real lying you should be worrying about is the people that lie to themselves, that lie to themselves because whatever they say to you is indicative of a true misrepresentation about their genuine feelings. When I mean lying to themselves, and let me give you an example. I'm gonna share a personal example right now. After my divorce, I thought I want a relationship, I want a relationship, I want a relationship. I mean, I was like so ready after my divorce wanting a relationship. And I met this woman and we began dating. And sure enough, three months into it, I'm like, I can't handle a relationship. I was lying to myself. And yet what happened is when we ended it, I was back online because I was thirsty for connection, companionship and sex. And yet I wasn't ready for the most important thing and that is commitment. And many human beings are actually lying to themselves. That's the bigger lie you should be worrying about, not whether or not they fudged on their dating profile. And by the way, women do this as well, men do this as well, women do it on their body, women do it on their height, okay? It's because the reality is is human beings judge one another based on those surface things above the water line. And what they don't realize is human beings are actually lying to themselves below the water line, in particular in their emotional maturity and their relationship skills. And if you're not familiar with my chart on emotional maturity relationship skills, here it is. By the way, this is not a fact, this is an opinion. Most people have clinical issues, clinical issues. And while I say 20% and while I suggest that 20% are healthy and I'm being ridiculously generous, the vast majority of people believe they're, not believe they are dysfunctional but they believe that they're healthy and I'm pointing the finger at you watching this because I really do believe the majority, a significant majority is lying to themselves on their real relationship skills. So why is this critically important to understand? It's because it's, I'm here to remind you that dating today is a clusterfuck. It is a clusterfuck because you're meeting total strangers. This is why I've been repeatedly recommending this book called Talking to Strangers by Malcolm Gladwell, what you should know about the people you don't know because the reality is this. The strangers out there, what I mean by strangers, what we don't know about people can effectively affect us long-term when we've gone on repetitive dates that go nowhere or we invest time in people who aren't really capable of being in a relationship. It can wear on our emotional well-being and sadly, most humans are so thirsty for emotional connection that oftentimes you'll settle on crumbs without doing a vetting process. So I just wanna remind you all this. It takes a hundred hours of face-to-face time just to get to that first layer of trust and remember that.  Read this book, it teaches you the mechanics to a healthy, happy relationship and that's my invitation for you going forward because the reality is you don't know a person until you actually get to know a person. Food for thought. All right, I wanna talk about those five signs, he's serious and he may go the distance, there's my notes, I'm gonna talk about that right now.   So, so this is how you'll know he's serious.  Number two, he introduces you to family and friends, he introduces you to family and friends. Now here's the thing, sometimes when men are in that limerence stage, again, extreme infatuation, they might wanna introduce you family and friends before sex, but that's not a really good sign. I think you should wait till you've actually agreed on being in a monogamous exclusive relationship before you begin meeting their family and friends in vice versa, that you're an agreed, mutually committed relationship, it's monogamous, okay? But he introduces you to his family and friends, that's a great sign, he's into you and he may wanna go the distance, okay? Number three, he is considerate of your feelings, he's considerate of your feelings and he wants to hear about how you're feeling. Again, this is all after you've been intimate with one another, when a man is progressing the understanding and desiring to get to know you, he's gonna be considerate of your feelings and he's gonna wanna hear how you feel in your day, not just how's your day going? Did you have a good day? I hope you had a good day.  Number four, he apologizes when there's a misunderstanding or a conflict, he doesn't get defensive, that's a great sign, he's serious, gaslighters get defensive, people who are incapable of being in a relationship get defensive, but someone who's serious about wanting to be in a relationship with you, he's capable of going beyond the surface, he's capable of going on the surface and he's capable of apologizing to you when there's a conflict or a misunderstanding. And number five, he progresses the relationship forward, meaning here's the bottom line, most women who are in healthy, happy relationships today, they rarely ever felt doubt in this relationship. If you're feeling doubt, if you're feeling uncertainty, and I mean, listen, many of you can create that doubt and uncertainty in your head, he doesn't text for a few minutes and all of a sudden your anxious attachment style pops up, but that's not his issue, that's yours. I'm talking, he's progressing the relationship forward, this is after sex, this is after you've become monogamous and exclusive with one another, he's moving the relationship forward, that's a great sign that he's serious and he may wanna go the distance, now I say may wanna go the distance, the reality is you could be in a relationship for a year or two and it may not be a fit for one another, just may not, sometimes that happens, usually men who aren't, okay, so men who are just seeking companionship, connection and sex, they'll nest into a relationship, men who are seeking companionship, connection and sex and commitment, okay, companionship, connection, sex, I should think of a C word for good sex, what would be a good C word? Someone come up with a good C word that represents sex, connection, connection, companionship, sex and commitment, when a man is genuinely ready for that, by the six month mark, he pretty much knows it with you and he's progressing the relationship forward, it may not be about marriage, but again, men who are in it for just companionship, connection and sex will nest into a relationship but they won't progress the relationship forward, it's not moving, it's in a standstill, it's in a standstill and when you're feeling that, you're usually feeling like the relationship is going backwards, but for those women who are in healthy, happy relationships right now, they're not feeling doubt because the guy is, you're both, let me reframe that, you're both progressing the relationship forward and that's a great sign that he may go the distance for the long run and again, men may nest in a relationship but men who are genuinely interested in a long-term commitment, they'll progress the relationship forward. Now let me repeat those five things really quickly and then we're gonna take questions. So one, he makes effort to spend more time with you, not less time, he introduces you to family and friends, again, this is after you've agreed to monogamy and exclusivity. Number three, he's considerate of your feelings and he wants to hear how you feel. And number four, he apologizes if there's a misunderstanding or conflict, he doesn't get defensive and number five, he progresses the relationship forward, meaning you're not feeling doubt. These are great signs that he wants to progress the relationship beyond, he might wanna go the distance any serious about you. All right, oh, someone said copulation. That's a great C word. So connection, companionship, copulation and commitment. Thank you for pointing that out or coitus. Thank you, Heather, for that one. I think I'll go with copulation. All right, this'll be our time for taking questions. So those who've been a regular on my channel you know that if you have a question to write the word question, post the question there after or you can purchase a Super Sticker Super Chat. All the monies from the Super Sticker Super Chat goes to a scholarship fund in the name of my son Connor Asley. That's him right there and that's him right there. He's my son who passed away a few years ago. All the Super Chat monies and Super Sticker monies go to a scholarship fund in his name to be given to charities like the Hoffman process, the Insight seminars and to help those defray the cost of personal development in their lives. So purchase the Super Sticker Super Chat in the chat box and if you're listening to the audio you won't be able to see that. So we are gonna take questions. Looks like we have our first one ready to go from Rebel. Question, in love with a man who's fighting cancer not seen since 25 years ago, platonic love. Now he pulls back because of his illness. I'm almost lost and very deep connected to him. I'm sorry you're going through that. Since you don't have a question, I don't know what you're asking, but I'm just sending you a lot of love for going through that. All right, thank you for sharing that. I really appreciate it. All right, let's see what else we have. Let's go swimming, let's go swimming, let's go swimming. Let's see, we don't have any questions. We've got a bashful group tonight. Well, if we don't have any questions we're not gonna be able to go very much longer. Come on, post a question. Write the word question or purchase the Super Sticker Super Chat. Otherwise we're gonna have a short one tonight, which is fine by me, it's Friday night.  All right, here we go, Danielle has a question. Question, was dating a guy seeing each other every day till Christmas break?   Wow. So just literally a few days apart and that killed the relationship, that's pretty sad. So that seems like a person to me who isn't very, he's probably emotionally immature or has terrible relationship skills because if literally he lost interest over a short break that just tells, and I don't wanna blame it on he's just not that into you.  Maybe he met someone else. I mean, there's a whole host of things can happen. As far as I don't believe in chasing someone to try to get them back. Listen, if you haven't read my book, What the Heck Is Self Love Anyway? A Journey of Personal Development, Self Health and Spiritual Work. By the way, there's a link below to get my book. By the way, there's also a link below to schedule a free discovery call with me to see if working with a coach is right for you. Listen, if you're chasing a guy, if you have to convince a man to wanna be with you you've already lost. I gotta tell you, I remember once I was briefly seeing a woman and she just basically said she wasn't that into me.  You'll never find a guy like me, blah, blah, blah, and I'm like, and we hung up.  And I looked in the mirror at that moment. Here's a mirror. I looked in the, there's a mirror right there, okay? And I looked at myself and I'm like, what are you doing here? You are an amazing human being. You never have to sell yourself to another person. You never have to do that.  And if they don't, that's on them. It's not on you. It's not your job to convince someone to like you. And I know this is a reflection of when you were a kid, that little boy that was in the playground that wanted kids to play, but they wouldn't play with you.  That was hard for you as a child. But it's okay because the right people wanna play with you. And the wrong people, that's okay too.  And that's what matters most. That's my invitation for you. Don't ever try to convince someone to wanna be with you. When you love yourself enough, that's okay.  I hope that helped. Thank you so much for that question. I really appreciate it. Wow. Okay, we got a lot. Julia says, where is all the love gone? Yeah, where is everybody tonight? It's a bashful group. Rebel says, question how to build a relationship with him and make him believe in love, even in adversity. Rebel, what I just did in that mirror exercise, I want you to do for yourself. And then come back to me. Because do you really wanna be with someone if you have to convince them to be with you? I hope not. All right, Zim says, question. If I had to Vancouver, Canada, I met my current girlfriend. However, my ex might scare of manipulating on her. She's older than my ex. I'm sorry, I don't understand that question. Thanks so much, Zim, for the question. I don't understand it. Julia says, question, how do you know what a man considers you? Possibly wife, fun, buddy, friend?  So that's pretty good sign that he wants to be in a relationship with you. A man that wants sex agrees to monogamy and exclusivity. That's a good sign that you're not in the friend zone. You're in the friend zone when he doesn't try to. Now, again, he wants me a monogamous exclusive and have sexual, he wants copulation with you. So that's the way I would look at it. All right, Lynn Rockwell says, how often would an interested guy contact you after two dates if he's interested in your opinion? Wait, how often would an interested guy contact you after two dates if he's interested? Look, if I'm really interested in a woman, I'm gonna do my best to talk to her most every day, most every day, at a minimum of five times a week. That's a good sign that a man is genuinely interested in you. Now the problem is differentiating between the guys who are only horny for sex versus those who want to actually get to know you. This is why it takes a hundred hours of face-to-face time doing social activities, hobbies, mutual interests, spending time with family and friends, teamwork, building skills, traveling together. That's how you get to know someone over a period of time.  That's a good way to get to know someone. Remember, everybody is mostly a stranger. And ladies, guys are rather clueless out there. They're winging it, they're winging it. A lot of guys want commitment. They just don't know what they're doing. So you guide the process.  You are the emotional leaders of the relationship. So start taking charge of your destiny. Don't leave it up to mostly clueless guys because the right guy is gonna be happy to invest in the books I've talked about.  Let me tell you something. I'm getting email after email after email from women telling me, this is a great strategy. I'm now having clients. Oh, by the way, I just had a client reach out to me. I'm happy to share her picture, eight months into a relationship. There she is with her guy. I'm so happy for her. This is a client who worked with me about their, let's see, she worked with me a year ago, a little over a year ago, and she's in an eight month relationship. And I just went, oh, oh, so going back to, I even have clients who are just starting dating a guy saying they have to talk to my dating coach. Like I have two clients right now saying they're dating a guy and they must talk to me first before they're gonna have sex with the guy. I love it because I'm your big brother. If I could be there on a first date with the shotgun pointed at the guy's head, I'd say, what's your intentions? These clients are asking me to talk to them, to these guys, to vet these guys for them. That's what your big brother should be doing for you. Find the big brother in your life or call me to have that do that because guess what, if a guy really likes you and they understand this is important to you, they want to be vetted. They want to be vetted if they genuinely like you. If they're only hit it and quit it, they're gonna run away as fast as possible. So it's okay, have them speak to me. I'm more than happy to do that for you if you're my client. Check out the link to a free discovery call to see if working with a coach is right for you. All right, I hope I answered your question, Lynn. Let's see, Louis says, question. How can I meet available quality men? I'm a 32-year-old woman and I'd like to meet someone in person. So it's getting progressively hard to meet people in person because of online dating. By the way, folks, do all things with love. That's my invitation for you. It is getting progressively hard to meet people these days in person. I wish I had a great answer for you.  I've gone to speed dating events. And yet people do meet these ways. I think, you know what I'd like to suggest?  Okay, so you get a group of friends together. Each one of you has to bring a male friend. So you get five female friends and they each have to bring five single men to a social gathering and you meet at a bar and you start doing, do that. You know, when I was in my 20s, it used to be go pick up chicks in bars. Well, create your own pickup type of environment in a good way. I'm not talking a healthy way. Get five or six of your girlfriends. They each have to invite a single guy and do social gatherings. And who knows? One of them might, two of them might get lucky. And then the next time, do it again, again, again. Because listen, it's hard to be seen by single eligible people. So you have a choice.  Would you like to go out? Hmm, is that really gonna happen?   Six friends call six guy friends and schedule something. That's my invitation. Who's willing to do that? Are you willing to do that? Say, yes, I'm willing to do that in the next couple months. All right, by the way, is this content resonating with you? If it is, please let me know. Say, yes, Jonathan, this resonates with me. All right, this is gonna be our last question for the evening because I'm gonna go relax. Question from Heather. I know it's not right to chase someone if they want to break up with you but what if you broke up with them and later realize you made a mistake? Is there any going back? Great question. Well, first off, I don't think there's anything wrong with trying. If you sincerely state what caused you to for break up. Now, if it was about them, I guess the question is how are you gonna resolve that in your mind?  Now, if it was about them, how you've gotta reconcile that in your head. And if it was a character defect in them, I think it's gonna be very difficult to reconcile that in your head. So I would say that if it was on you because it was a fear, then reach out to them, tell them what happened and have a conversation, have a conversation. By the way, if most of you don't know, by the way, most of you have terrible relationship skills. You don't know how to have good, healthy communication. This is why I wanna recommend two books to everyone. I hear you and excuse me, and Nonviolent Communication by Marshall Rosenberg. This will teach you how, by the way, you can go into YouTube and watch videos on these two books, okay? I recommend checking them out to help you get better acquainted with how to have better conversations with people because most of you, actually one of my gifts as a coach is when clients reach out to me, I'm literally writing their scripts of what to say to their boyfriends or to the men they're dating to help them learn better communication skills. This has taken me a decade or longer to learn how to be more of an effective communicator. Now I say decade or longer, I used to be in sales before that. So I had a running start, but from an emotional perspective, by the way, I highly recommend checking out this book, Couples Guide to Communication. It's a short little book, but it'll help you so much, get better acquainted with how to communicate more effectively because ladies, I know you don't like hearing this because it sounds graphic, just because you can vomit your feelings doesn't mean you're good at communicating your feelings in a way that's seen, heard, and understood. Your girlfriends get it, but guys, you sometimes say 10,000 words and we're only hearing 100 words. So learning how to be more of an effective communicator, I know this doesn't directly relate to your question, but it does, is gonna help you determine or it's gonna help you overcome maybe the original block that caused you to wanna break up with them. That's my invitation for you anyway. If this has been resonating with you, please purchase the Super Sticker Super Chat before we wrap up this evening. I'd love to have some money in that Conor Asley Scholarship Fund tonight. As always, if you find value in this, please like this video, please share it with your friends, please give it a thumbs up. If you'd like to connect with me, check out the free discovery call with me, check out my group called Midlife Love Mastery. Check out my book, What the Heck is Self Love Anyway. Or you can follow me on Instagram or go to my website and follow me there. I think this would be a great place to wrap up for today. I wanna thank you all from the bottom of my heart for being on. It's my true pleasure to be able to share this content with you. Am I making a difference in your life? If I am, please post it. I wanna hear about that. Just say Jonathan, you're making a difference. And my sincere invitation for all of you is to do the personal development, self-help and spiritual work. Because it's not about finding the mate. It's about finding the mate inside of yourself. And I wanna end on one more book. This changed my life. The Hoffman process. The Hoffman process. This is a deep dive into healing, childhood wounds and traumas. And I invite you all to do this because you'll be better prepared to attract in a healthy, happy relationship when you can heal from the past and certainly heal those traumas you might have existed in your adult life. And do all things with love. That's my invitation for you. All right, I think this will be a great place to wrap up today. First off, I'm gonna give myself a big, gigantic shot at the marriage of self-love. I'm gonna reach into the camera and give you a hug of love if that's okay. I'm gonna ask you to turn to someone. A pat, a teddy bear pillow and give either of them a hug of love because hugs are a great source of love. And let's face it, we could all use more love in our lives. I wanna thank, I wanna thank Mastoref, Carol, Heather, Mel, Angie, Rebel, Bridge, Al, Sandra, Zermi, Zim, Robin, Lynn, Elise, and all of you in Bridge, all of you and Paula.  You be well. Bye-bye now.


Want the easiest tack for boosting your grades in English? Correct your past mistakes. Feedback on your essays is your teacher's way of telling you exactly what they're looking for. Read it, re-read it.


Hello and welcome to yet another episode of Nicolaus praises gnome because if you've been following me you probably know that I'm actually a big fan of the gnome project. I don't use it and yes I do develop for catyplasma but nonetheless I do think that the gnome project is pretty good and if you're not into catyplasma for whatever reason I do think it's fair to use gnome to be clear. I think I've said it. I've said it. So there are a couple of reasons why I think that I think this and before we get to the main thing that I'm totally envying gnome for these days let's get to a couple of smaller reasons that make me think that the gnome project is actually pretty good and the first one is that I actually think that having a clear idea of what you want your desktop to be and then acting on that idea is a good approach. Like I think it works pretty well yes if you're not really into the gnome sort of workflow then you're probably out of luck and you will need to find another desktop environment but if you are into the workflow and I think that many people are then it works really well to do that. In fact myself I'm a big fan of how gnome deals with things with the idea of virtual desktops and not having a minimized pattern not having icons on the desktop all those things I fully agree on and I actually do just that but on kdplasma too because I think it's a nice approach but I do think that the gnome approach works best on gnome. I replicate it on kdplasma but I think it works better on gnome simply. So that's one thing also by choosing specifically what you want to do and sticking to that well that allows you to make sure that your software is as stable as possible which is a great thing for a kdplasma user so considering the amount of flexibility that kdplasma has and that it's you know its biggest advantage I think that also has the downside of bringing a lot of bugs because it's hard to test for all configurations and stuff which is why for what I'm currently developing as you know the floating panel as an example for me it's really important to say this is what I want to do and whatever would make it harder to maintain harder more bugs more flexibility I have to put a limit on that because the floating panel the panel in general is already quite complex and making it even more complex will just exponentially bring in a ton of bike reports and I don't want to deal with them there's not enough workforce to so these are the things that I like but there is one particular thing that I envy which is particularly easy to see if we go into the gnome blog post like this week in gnome blog post I think you know it. So these are the latest blog posts let's take this one as an example and we can see as an example that we have this nice app in the gnome circle that is used to customize the stream deck which I don't have it's an example and in the latest blog post there is this nice application that is used to upscale images that is very interesting I've actually talked about this in the past radio and in general if you go ahead and see pretty much any blog post from the gnome this week in gnome blog then you will see some update about some new application that is coming on or you know all the applications that are getting updated at better and better and it's impressive actually because if you look at all of those applications they all look very good and very consistent with each other I'm not too into technical details about how gnome does application theming I think there's like jdk that offers basic widgets and then there's libadwita that offers more complex widgets to integrate in your app but they're apparently doing it very right even the very idea of the gnome circle is very good and something that I think should could benefit kdplasm as well if you don't know what a gnome circle is basically it's a way for gnome to somehow make third-party applications more official and into the gnome ecosystem and there are there are lots of very good third-party applications that were previously third-party but then get you know integrated into the gnome circle but also is one I can think of and you do get a lot of benefits like you get the ability to promote and advertise your application through the gnome community you also get some I think like hosting benefits like being able to host your application on the gnome gatelab this kind of thing on the gnome circle gatelab and you can just go to the list and there are lots and lots and lots and lots and lots of good maintained third-party applications that are actually not third-party anymore they're kind of first party because they're within the gnome circle you go through them I did for some and they all look good and consistent and are generally actively maintained especially because if you do want to get into the gnome circle then you have to go through some verification that you have like gnome designers that tell you you're doing this correctly this could improve and then you act on the feedback it's a very friendly process I think so in general I've always said that I personally prefer kdplasma applications because kdplasma core applications like dolphin, gwenvue, ocular they're so powerful in what they do and I think they're great applications so I'm not taking that back but what I totally envy of gnome is the ability to have such a large ecosystem of applications that are maintained that look good and that really make it feel alive for kdplasma it's a bit more difficult so there is a lot more work for first-party applications but from what I've been able to see maybe I completely wrong but it's not close to what gnome is doing in the amount of applications that you have and how much maintain they are if you go into the kdplasma website for applications if you go through the list of all of the applications and actually try to amount to see how they look how they're maintained and such I think you will easily find a bunch of applications like all the games applications usually that look very outdated outdated compared to the current design of kd has a hole and that are also not quite maintained take conqueror as an example yes it's in this list but I would never I would just never suggest anybody to actually use conqueror I did for a while it's it's that it's unmaintained it's very old some applications yes are maintained but because of some you know lack of works workforce very often they're not able to advance as rapidly as some other kd applications and then you can really see how different the core applications are in terms of their design and functionality compared to some that receive updates much less often like take calligra as an example I have used calligra for a lot of time and I think that in its design it's it has had improvements in the last years but nowhere as quickly as other kd applications and nowadays if you use calligra it does feel a bit old and you know when on one end I would totally want to help with that but on the other hand I don't have the time and I'm trying to be at the the panel even from a technical point of view I think it's not super clear of how kd applications should be done like nowadays new kd applications are usually done with kori gami which is a super nice library and I think that most applications done with kori gami look absolutely amazing out of the box and I'm a big fan of the library at the same time as far as I understood it and I've actually discussed with agnome developer to clarify this kori gami is kind of the kitty thing that is libadwita for agnome so offering more widgets more you know yeah more widgets to built in your applications with of course some differences in design but the fact is whereas it feels like libadwita for agnome is the clear path forward for kori gami in kedi plasma with the fact that kori gami is really meant to be convergent it's sometimes not clear what kori gami really should be especially if you're talking about the kedi plasma desktop if you are doing a application that is like desktop only should you use kori gami and a lot of the time the answer seems to be yes but lately it didn't seem that clear a choice and as far as I know there hasn't been quite a choice about this from the design group so it is something to discuss about to think about because as a whole I think that the agnome environment as far as the amount of applications and how well all of those applications are done is something that I totally envy and that I think that from the kedi plasma side is things are yet not yet that good I think we can improve though we'll get there we'll get there


Gary at feral offer the love of my clique. Come on. We've got to get there Linwell's house before the man sees us Yeah, I know, but what are we gonna say when we get there? What do you mean? Well, I mean, we're not supposed to let Harold know anything about this golly. I forgot well How can we tell mr. Linwell without letting Harold know? Well, I Don't know I guess we'll just have to figure it out when we get there. Yes, but we should have some sort of an idea I'll tell you what I'll ask Harold to get us a glass of water And when he goes out into the kitchen we'll tell mr. Linwell We've got something very important to tell him and that he's got to get rid of Harold for a few minutes. Yeah, that's good Okay, come on We made it. I was watching the windows of mrs. Cooper's boarding house and I didn't see anybody looking out Oh, you can't tell though. You might have been back from the window someplace where you couldn't see him Yeah, that's right Well, hello boys come in. I'm happy glad to see you. Thanks mr. Linwell But where's Harold? Isn't he here? Yes, he's here Harold's well. He's feeling pretty badly right at the moment. I Felt it was the best thing to tell him about all this mess, and he took a rather hard poor kid. I'll say that's too bad Yeah, well, did you really have to I mean well, I know what you mean Jerry? Yes, I felt it was the best thing to let Harold know about it because if he does He can keep an eye out for himself too. Yeah, that's right. Well come in boys Mr.. Linwell We've got something very important to tell you will it be all right to talk about it before Harold. Oh, yes It's all right now. I think we should all know about everything that's going on. Yeah, I do too. I don't hear boys This the living room Hmm first Harold Harold Oh Harold, how are you? He's probably getting rid of any evidence the little crying spelling had a minute to go don't mention it to him Well, sit down fellas, you don't mind. I'll take this Jerry.  Linwell? Oh, no not at all Well, hello Harold. Hi you Harold Sit down son the boys have something to tell us All right now. What is it fellas? Well, go ahead Jerry. Yeah Mr.. Linwell We've seen the man who was in the shack on woodman's island. Oh, yeah, do you really think you have we know we have He was in max place just now and he addressed an envelope with a gold fountain pen that exactly matched the gold pencil We found in the shack hmm Jerry, where'd he go? Did you see yes? We did after he left max We followed him by cutting across the outer campus and we watched him walk down this way. Oh gee, it's all right son Don't worry now. Go on Jerry.   Cooper's boarding house Where's that down at the end of the block about five or six houses down hmm?  Yeah, I don't call this fun. I mean excitement Harold Yes, I think this is the man. I've been expecting expecting have you been expecting you mr. Linwell? Yes, Lee I have but he looked like well He was quite tall and thin you wore glasses gold rim spectacles and he talked with an accent. Yeah, that's one of them What do you mean one of them dad? Well, son, I might as well tell you and the boys the entire story. We're all in this situation now and it's Important that we know exactly what we're doing About two weeks before I was to make the test flight and the new bomber two men came to me and made me a proposition They told me that they wanted me to make a fake force landing in a field near the airport But they would be near in some trees and that when I landed they'd run out and take some pictures of the ship Gee I was also to give them the specifications and a copy of my log during the test flight They told me they'd pay me ten thousand dollars ten thousand dollars. That's right I tried to find out who they were but I couldn't get any more from them except that they were agents of some foreign government spies Yes, exactly spies Of course after they told me what they wanted I just left them often said nothing more about it except of course to tell Bill Layton the president of the company I work for and He got in touch with agents of our government right away, and I was trailed night and day you were trailed What for oh no not account of me Harold they were trying to pick up the men who had contacted me But they never showed up again Well as a part of the test I was to drop a couple of dummy bombs into a field The field had been roped off and people were kept away from it And just as I got over the field and was ready to drop the first bomb I noticed a little white flag the one that you boys read about in the papers Yeah, and just after I dropped the first dummy bomb something started going wrong with ignition and Well, of course, that's when the crack up happened. Well, what's this man here for now, Mr. Linwell? I mean, why did it come to Farrell and Dudley to keep me from talking?  Linwell? That's what I think Jerry golly. This is awful. No it isn't awful The only thing I've got to do is to get a message to Bill Layton without this man knowing that I've sent it Well, we can do that for you. No, I I don't think you can Jerry I'm afraid that as soon as this man finds out that you two boys and tubby young a particular friends of Harold You'll be watched too. See I know how we can do it. How corporal dance. Yeah, that's right He knows all about this too. I mean he knows about the man being on the island and everything. Yeah, sure he does Well, I think an easier way would be to have Captain Gardner take care of it Oh, sure. I didn't think of Captain Gardner. You see boys. He knows about this too, and I think you'll be in much Jim and he don't yell like that Lee. What's the matter Lee? There's the man what? Yes It's one of the two men who first talked to me. Yeah, and he's coming in here Quick boys into that other room. Yeah, come on Harold. No, let Harold stay here. Just you and Jerry Lee. All right Come on Jerry. Yeah, okay, and close the door and don't say a word boys. Just listen. Yeah Now with me Harold, okay How do you do mr. Linwell? How do you do I have come with another proposition? I should like to have a talk with you. Yes. What about? Oh, this is your son. Yes. This is my boy Harold, uh, mr I don't believe I've ever known your name. No, I have not thought it necessary before this to inform you My name is Yorga. Alexander Yorga. Yes. Well, what is it you want now? I? Thought I made it clear to you once before that I had nothing to give you or sell you I Thought I was quite explicit when I told you I wasn't in the slightest interested in discussing my affairs They're yours with you. Yes You were quite explicit may associate and I understood your attitude perfectly, mr. Linwell, but now Well, the picture has somewhat changed changed Failed to see how it's changed in any way. I'm still not interested in anything you have to say. No Mr. Linwell, this is a fine-looking boy you have here Go on Not at all Is it possible that you do not follow my reasoning? It's a good thing for you that I'm crippled up the way I am. Yes, mr Linwell, I took that into consideration But if you think you can keep me from talking about your dirty proposition to me before my last test flight by threatening my That is exactly what I think mr. Linwell I am certain that when you realize how it might be possible for us to make you and Your son extremely unhappy and shall we say uncomfortable. I am sure you will as you say Think twice before you reveal anything to the agents of your government. Yes Suppose we leave it up to my son No, very very clever of you. That is an extremely intelligent idea. We will see what the boy has to say Herald, you know what I've told you about this man Yes, dad and you've heard how he's threatened to harm you if I tell our government what the plans of this man is Confederates are Yes, sir, I know Herald shall I tell our government or not? Sure dad sure tell him. I'm not afraid. There you are Now if you have an answer to that yes, mr. Linwell, I do have an answer to that It's very simple You make any move to communicate with the agents of your government and shall not be responsible for the consequences to your son Get out of here Go on get out. Yes. I was about to leave What do you think he'll do dad nothing nothing he won't do a thing you're absolutely all right Herald don't worry Well, I'm not worrying. He can't scare me the big log That a boy Lee Jerry come on out Golly mr. Linwell, what are you gonna do? He sure sounded as though he means business, didn't he? Of course he means business and that's exactly the reason why he must move fast you bet What do you want us to do mr. Linwell Jerry? I want you and Lee to get a note that I'm going to write to Captain Gardner as fast as you can Well sure anything you say but well don't you think this your go will see Jerry and me if we leave the house now no Lee There's a side entrance to the house that opens in the driveway going back to the garage Yeah, I saw it as we came in all right then you can go out there and run back the alley that opens into court street By that time you'll be too far away for anyone to see you yes And I'll bet Jerry and I can run faster than that man too. You bet you can all right I'll write that note over here on the day Gee here all that was swell of you to talk up to that man the way you did you bet it was all that wasn't anything Say my dad's the most important thing in the world to me I'm not gonna let him tell lies to the government just on account of me Wonder if your dad will keep you here or whether he'll let you come back to the school I don't know we'd better ask him when he gets through I think we'd better quit talking now. Mr. Linwell is trying to write a darn important letter.  I mean put it in my shoe or something someplace where nobody will find it Oh, no, I don't think that's necessary Jerry It's more important that you get to Captain Gardner as quickly as you can. Yes, sir. Mr. Linwell. Yes, Lee Do you want Harold to stay here or shall we take him with us to the school? Oh, I think he'd better stay here right now for two reasons first because I think it'd be safer here until we Can get somebody to guard him and second because I think probably you two boys can make better time without him Yeah, I can't run as fast as you. All right. Come on Jerry. You got that note put away Yeah, right here in the pocket of my coat. Okay. Come on. Yeah, come this way boys through the dining room Yeah, let me look out first All right, the coast is clear. Okay. Here we go. Thanks boys. That's okay This is your awful isn't here golly. Yeah, I don't know whether I'm gonna be able to turn out for the right in practice Till this thing is cleared up or not. Oh, sure you will you can't let it get you down Yeah, but well just thinking about anything happening to Harold. I know how you feel and I feel the same way Well, mr. Linwell and captain Gardner will be able to figure something out You'll see we won't have to worry about it much longer. I'll bet the government will send some men here right away. Yeah I sure hope so


Women creators from all over the world, this is your moment. You're probably wondering why I brought you all here today. Artlist is proud to launch the Artlist Women Creator Fund. And since I'm not a woman, I thought it'd be best to bring Kelly in, our communication and community manager here at Artlist to give you a bit of a breakdown of what the fund is and how you can participate in it. This fund has $15,000 worth of prizes. That's three, three fives right there. Okay, I'm rambling, Kelly take it away. Okay, I forgot the prize. All right, so here's what the Artlist Women Creator Fund is all about. The goal is to empower women creators and creativity in general by helping you find and make your voice heard in this creative industry.  This is your moment to bring your vision to life. So if you're an aspiring woman creator, here's what you need to know about the Artlist Women Creator Fund. To apply, visit empowercreativity.io and submit your idea for a video project you'd like to initiate inspired by the theme of voice. Visit empowercreativity. Submissions are now open until March 22nd, so get on it. You get a chance to be one of three women creators to receive funding, pro-film gear from brands like Nenlight and June, and most importantly, you get mentorship from the three following extremely talented women creators. First, Cash Bunny, an alley-based video director and visual effects artist. She's worked with brands like Adobe, Microsoft, Virgin, MTV, and plenty more. Next, we got Premier Gal, the founder, host, and creative director of Gal Media Creative. She also runs a pretty successful YouTube channel with over 370,000 subscribers and millions of views. Lastly, Karen Chang, an award-winning viral video director with more than one million Instagram followers. She's run campaigns for Apple, Instagram, Snapchat, Beats, and plenty more with some fresh gear, a packed wallet, and the best mentors in the biz. Finally, you get to create your project and showcase it on our website and social media channels. So go check out empowercreativity.io to learn more. Again, the goal of this fund is to give more women creators the opportunity to create some really powerful work. Get ready to share your voice and express your vision, because this is your moment. So go check out empowercreativity.io and apply right now. Great. Woo!


All right. I will just start now. So my name is Yannick and I'm a developer devops, slash security person from Hamburg, Germany. And I'm now doing this talk really spontaneously. So I just filed out the form yesterday to submit this talk. And so there's not going to be any slide or anything really prepared other than the tabs that you're seeing here in my Firefox tab bar and some kind cluster that I just started a couple of minutes ago. And what I want to show you today is an open source project, which is not from the CNCF, but it's from the OWASP foundation, which is more of a security foundation than a devops slash cloud native foundation. And I'm going to show you two projects, which belong together. One is the juicer project, which I have open right now. And the other one is the multi juicer project, which belongs to the juicer project, but basically a side project of it to basically make it runnable and usable from Kubernetes. So what juicer is, is it's what we call it is a intentionally vulnerable web application. So it's basically a web application that is intentionally developed badly. So the web application built in Node.js, which just a bunch of security vulnerabilities in it. And the primary use case for it is to learn about security vulnerabilities, especially in the web space. So that you can basically just start the juicer and then start hacking around in like a playground environment without risking to get sued by hacking something which is actually running in production somewhere. This is basically just a friendly training environment just for people to try out and play with software security. The second part is this multi juicer platform, which we're going to take a look later, which is basically juicer, just running on Kubernetes for multiple users at a time for training settings, where you may be hosting a centrally organized training for more than a couple of people. And you don't want everybody to install juicer on the local machines, but want to provide it for them. But before we're going to jump into the multi juicer side, I just want to show you a bit of what juicer is and what it looks like and how you can use it. So what I have open here right now is the juicer repository. It's just on GitHub juicer slash juicer. And juicer is like I said earlier, it's an application written in Node.js. So it's entirely JavaScript, both on the front and on the back end. And what you can do to basically make it run on your site is either basically just install it from source. So basically just do a git clone and then just running the MPN installs to get the dependencies. But as we're here on KubeCon, there's also obviously a Docker package or a Docker container for it. You can just start up.  And then you can use it just locally, which is also one thing that I've prepared here. So if we go to my terminal, I think it's this tab here. I just started or I just ran this container here in the latest version. And what we're going to do now is just going to look at how a juicer looks like so that you get a better feeling for it. So this is the primary web interface of juicer. So basically juicer has an intentionally vulnerable web application. What it is, is basically just a fake web shop where you can buy all sorts of things. As a fake shop, you can obviously, obviously can't really buy anything. You can't spend any money. You basically don't risk anything. But it just basically looks like a standard boring web shop where you can buy things. And the interesting thing is now that basically under underneath all of these features which are packed in this juicer, there are actually more than a hundred different kinds of vulnerabilities in them. And just to give you a feeling of it, we're just going to run one of the more basic ones. So one thing that this juicer has is it has a user sign in or a sign in.  But what you will find is that this log in form is just vulnerable to an SQL injection. So basically you can also try to do an SQL injection here to make it do interesting things. The one thing that we can just try is basically instead of providing an actual email here is that we try to circumvent the security measures to provide a SQL string inside of this form. So we can do a log in without actually providing it a password. So like the normal one would just be, which has happened demo, demo, which works because it's a demo user account. But now if we would try to do it with an SQL injection, what we can just try is basically just try some quotation marks here just to see if this does anything interesting. And what we'll always see is by just basically putting some quotation marks in here, we can see that we're getting this weird error back. You don't know this notations is basically the standard JavaScript error or object stringification. This is already looking very interesting. And one thing that we can just try if you just imagine that this is like an SQL string, which is saying something like select a star from users where email is such and such and password hash is such and such and such. We can basically just try to do this with an SQL injection to now say, okay, I want to have a user row back where either the email is this thing here or where the expression one equals one is true. So it's basically just always true. And it will just return the first row of the database, just like a relatively normal SQL injection type of thing. What I'm just going to do is put a semicolon here to basically say, okay, the statement is now over. Don't even look at the password part. And I'm just going to comment out with the minus, minus the rest of the SQL statements. So basically, this is now basically just getting me back to the first user in the database. And by that, I can basically just log in. And if I do this, I can see, okay, I'm now successfully assigned in. And if I now look at look here, I hope this is somewhat readable. In this case, even signed in as a administrator, because in this case, the administrator was the first user in the database, because it was the first user who actually signed up for the service. So I'm now also by coincidence signed in as a user administrator. And as I said earlier, so this is one challenge, we also see that we got this, wait, I solved this earlier when preparing. So we didn't get this nice batch. We only got this for this missing error handling. But the nice thing in due sharp is due sharp also has a scoreboard. And it has a session or a tracking for all of the different hacking challenges that it has. So basically, in the scoreboard, I have the list of all hacking challenges that are in due sharp. And I can already see basically which challenges I have solved. And which challenges are available in due sharp in general. And like I said earlier, due sharp now has over 100 different hacking challenges in all kinds of categories, especially from the web development sphere, but also some which slightly touch into the cloud native sphere. So there's just a lot of things that you can do. A lot of things that you can try out. And especially nice as a teaching tool, if you're working at the company and you have like a web development team, that's just a very cool tool to basically do like a like a day long workshop with them, basically just run them through on how web application security works. And especially on how hackers would potentially try to attack their applications. It's just a really cool tool to just walk you through and see how this is working and learn on learn yourself on how these vulnerabilities can be used. So maybe just one challenge with slightly touches on cloud native things is there's a challenge called, I think it's called exposed metrics, which is this one here, which might be, might ring a bell for people using Prometheus for their metric system. So in this case, due sharp also provides Prometheus metrics. The problem here is that future basically does nothing in a way to protect these metrics. So basically everybody who can access the application can just basically go into the user URL browser bar and just type in slash metrics here. And what we're then going to get back is just the Prometheus metrics and point where there are all kinds of interesting things. Nothing super critical. So this is more of an information disclosure type of thing, but definitely something that we wouldn't want to expose to every user. There are just a bunch of these different challenges just to teach people on what kind of things to look out for when developing applications. So now if we refresh this example, this exposed metrics is now marked as green because it's now solved. And one nice thing is also with most of these challenges now, we also have these associated coding challenges. So it's not just like the hacking side of it, but we also have the coding side of it where we can basically just open this up. And what we're going to see here then is basically the actual vulnerable code running inside of juice shop. And then there are basically two types of challenges on the coding side to basically mark the vulnerable code. In this case, just basically marking which lines are vulnerable. And then in the second step to basically select from a selection of four different choices, basically which one is the correct fix that you could apply to make this vulnerability go away. Another really nice thing with juice shop is juice shop also has this companion guide book. So which is this basically this ebook, which you can also just take a look at online. It's completely free. So you can pay money for it to give the project a bit more budget, which as a guide and an explanation how to solve each challenge in juice shop and basically what's wrong with each of the challenges, which is a very awesome tool. If you're basically just going through juice shop and you might be a bit overwhelmed by the scoreboard and all of the challenges in there, you can basically just then reference this companion guide to just take a look and really learn on how these challenges can be solved and how you might be able to prevent them in your own applications. This is all cool now, but I now want to do the shift over to the second project. This is the one that I primarily want to show because basically juice shop is primarily intended as basically a single user application. So it's just meant to be run on a local machine and used by one user or maybe two users sitting at the same keyboard, but it's basically not meant to be shared across multiple people because it has this challenge tracking built into it. It has like a local SQLite database. It's just basically just not meant to be used by multiple people at a time.   So you can't also switch back to Docker if NPM doesn't work. It's just always a pain because you basically just spent the first hours of these training sessions basically just debugging people's laptops.  I don't need to debug other people's laptops. So what we basically did is we started a site project to juice shop, which is this tool called multi juicer, which is now basically part of the official juicer project. So it's a sub project in the larger project. And what this multi juicer project is, is basically a platform to dynamically start up juice shop pots on a Kubernetes cluster and then expose them just to the network via one host name by having like a dedicated load balancer, which then basically gives every team their own juice shop instance and ensures that basically the teams can hack on their individual juice shop instances, but that they won't affect each other. There's also a short diagram here. I'm just going to zoom in a bit to make it a bit more readable. So basically it has, or this multi juicer consists of one primary component, which is this component called a juice balancer, which is basically a custom load balancer, like I said earlier, which is getting the traffic from the different teams and is then basically redirecting this traffic to the dedicated juice shop instances for the team. And the nice thing is, is basically because this multi juicer platform is basically directly built for Kubernetes, it's also able to spin up these juice shop instances on demand. So if a new team comes around and you basically don't have a juice shop instance for them yet, they can basically just register and what multi juicer will do is we're going to talk to the Kubernetes API to start up a new juice shop pod for them and then just going to wait until the pod is ready and then the team can just start hacking on the new pod. The installation for it is also really easy. So it's basically just multi juicers, just a hand chart. We recently switched from the HEM repo YAML to having the chart only in an OCI registry. So this is still looking kind of crazy, especially like with these GitHub package links. So this is basically just hand chart in this OCI registry. And what I would like to do now, especially just basically just run this once on my local machine here, then we can maybe just take a look on how this is working. So first, I'm just going to shut down this docker container so that I have this 3000 freed up because I'm going to need this in a minute. And then so basically right now, let me just make sure that I cleaned up earlier. Yep. Okay. Perfect. So what I'm just going to do is I'm just going to run the HEM install. I'm really hoping that the images are still cached on this cluster because the network is kind of slow. No offense to the network sponsors. Perfect. They're still cached. So everything is already up and running. That was really quick. So I'm now just going to port forward my port 3000 not to the juicer directly, but in this case to the juice balancer. Let me see if there's any history here. Yep. So if I now go back to my browser and open up port 3000, I'm not a juice shop anymore, but I'm now at multi juicer, which has this very straightforward UI, which just consists of a form field to ask, which asked me to put in the team name and I couldn't put basically, not quite everything in there, but just everything was just standard characters. So if I just put in the name cube con and click create team, what we're going to see if I'm switching back to the cluster view is that in the background, multi juicer already started up a new pot here or actually start up a new deployment with basically just the name team cube con juice shop instance. So it already started. The juice shop is also already running. So if I'm switching back to the browser here now, you can see now, okay, also test tells me that the instance is now ready and I can basically just start clicking on start hacking. And now I have this juice shop running here, but I didn't need to start it up locally. So I could just put this on my communities cluster at my company and basically just host all of these juice shop instances for all of the participants of the training so that the participants wouldn't have to do this themselves. Just as a way to make these trainings more straightforward, make this easier and just really safe on the on the starting time of the trainings by just providing it to them centrally. Yeah. So what we also have in multi juicer, so basically right now, we've primarily promoted this multi juicer tool inside of the security community. And what we found there is that the security community is often really lacking Kubernetes skills. So what we did was we put in some really detailed guides on how you can install them on different clusters because we just got really specific requests on how we can help them with like specific cloud providers and cases where they didn't even have a cluster to start with. So basically we have just really detailed guides for security teams with very little Kubernetes experience on how they could set it up. But as I said earlier, some multi users read just this relatively straightforward Helm chart. So if you're if you're trying to use it, I'm very confident that everybody here at KubeCon is able to just install it without much problem. So it's very easy to configure very easy to change the settings just with normal Helm things. And we also have this dedicated production nodes guide here because basically the the default configuration is primarily used for easy testing. But if you actually want to run a like a production level training, you will probably want to have more than one balancer instance just in case the first one goes down. And you will also want to make sure that like a couple of secrets are rotated because the because the default Helm values actually has a couple of I would say security problems in it because it has a couple of hard coded secrets because they are supposed to be rotated before you install it on production. It's not a huge issue but it's all detailed here in the guide basically on how you can easily rotate these secrets, which is basically just linked directly below the Helm install. So if you if you want to run it, I'm sure you will find this production nodes as well. Yeah, and basically this project has now been going for or this multi juicer project has been going for I think like since 2020. And I just learned that basically juicer and Kubernetes basically must have started the same year because juicer was also turning 10 this year. It's basically the same age. And the nice thing is that with multi juicer basically already being also a couple of years old, we now also have another project in the in the OS foundation, which is this. So this is more of a sideline here because I'm already finished with the multi juicer part. But if you're also interested in this like other security training environments, I can also really recommend this was wrong secrets project, which is more focused on like secret management best practices. And the nice thing is, is this wrong secrets environment also basically has a multi user platform, which is just based on multi juicer because they basically just fork the repo and then change some configurations for it. So it's basically also multi user compatible. So if you want to run a training more on the secrets management side, especially also a wasp tool for it, which you can just use to run these trainings. Also very cool for multi user trainings. Yeah. And this is basically already everything that I really wanted to show you. I think we still have quite a lot of time left. So if anybody has any questions or anything that we would like to take a look at together, definitely can do that. Nice. Thank you all for being here. And there's the mic coming to you. So while you were explaining this, I was thinking, you know, I could put that in my integrations environment. I could make that part of my annual training for my for my devs. And then I realized that my container and vulnerability scanner is probably going to find it or my static code analysis scanner is probably going to find it. I might not want to put on the integrations environment, but I would hope that your scanner is going to find it. Otherwise, you might want to take a look at another scanner. It's actually crazy because with the due shop project we've been getting, especially lately, we've been getting like a ton of spam per request where we just people are trying to integrate like different scanning tools in their pipelines. And I'm not quite sure if they are intentionally opening up per request because like 90% of the per request that we're getting are people just trying out random security tools. And I'm hoping accidentally opening up per request for them. In this shift, they're just blindly following some security training guides when they don't understand what a per request is, but it's getting quite annoying. So basically it's a tool which also often used by different security or by people trying out different security tools because it's very, very easy or very just a very good tool to basically just benchmark these tools if they are able to actually find things. But the PRs you're getting are people trying to patch the vulnerabilities or have you updated to a less vulnerable version? It doesn't seem like it's really following a pattern. I mean, most of them are basically just adding different CI integrations for different tools. Without a common basis, really just trying this out. Some people are just randomly changing text just to see things are getting triggered, I guess. I don't understand it. It just seems that a lot of people are trying things out there with tools. Any other question in the bank? So in a Juicer UI, Juicer, right? Yeah, Juicer. There was one section I saw that there is a way to fix it. So is that the fixing is how happening?  Maybe we can just do one together just to make it more visual. So basically, the find it is just basically just marking the lines. This is not going to be interesting if I can actually fix it. So this is for the metrics thing. This was probably the point here with the six posts where we are basically mounting the shroud. So if I submit this, then we can basically just see this more easily. So basically now we've found the place where this is because here in this line, the metrics actually exposed.  But this is not basically patched directly into them. It's basically just if you are able to find it, but it doesn't change the running software. Okay. Thank you. Hey, so this is really interesting stuff. I'm really excited to hear about all of this and a little embarrassed. I'm hearing about some of it for the first time. I think it should be a little more well read, I guess. One thing I noticed that was kind of listed as a selling point is it says itself contained where additional dependencies are prepackaged or will be resolved and downloaded automatically. It doesn't seem to be updated all that often, which means that I think there's some supply chain problems with how some of this is done. So do you think there might be interest in putting together an OAS juice supply repo or something that looks at software supply chain issues? We definitely have like some supply and chainy types of things. We also have a bunch of outdated dependencies in here, which I can just tell you from a maintainer's perspective, it's hard enough to write secure software, but it's really hard to maintain intentionally insecure software, especially if you're depending on outdated packages, which just don't run on new operating systems or new Node.js versions.  I think we also have a typo squatting vulnerability, basically where we're pulling in a package, which is just slightly misspelled from the original package. The vulnerability here is basically just to find or tell us which one it is because there's a way to basically take a look at the package list. So there's also a lot of vulnerabilities basically coming from the supply chain, but we don't really use this wording here yet because I think these challenges were actually in here before the entire supply chain naming really took off, but we might want to change this to make this clearer for users. Any other questions? Well, I joined a bit later, so I might be asking something you already answered, but how easy it is to create a new challenge as part of this, and is there like a community which is keeping on adding new challenges or not? It's a hard question because it really depends on the challenge that you want to integrate because it can be somewhat easy to extremely hard, depending on what the vulnerability is. Yeah. Well, a follow-up question to this would be, is there like an official guidance on how you set up like a new challenge for this? Any new challenge would have to come in as a new pull request, as a new feature, and we are always happy to hear of new challenge ideas via GitHub or through the chat channels basically listed from the GitHub repository. So if you have a challenge idea, the best thing like always would be to open up a new issue just to the basic view that we can discuss it if it's maybe too similar to the existing challenge, but we would definitely would like to hear of new challenge ideas. Okay, cool. I guess lingering on your previous answer, what do you need as a project to continue to develop further? What is your call to action? This is an interesting question. So on the due shop side, I mean, we have a couple of open issues, but these are mainly for actual like development focus things. So as we're here on KubeCon, I'm guessing the question is somewhat catered to like more of a deaf, obscene, cloud native kinds of help that we could need. And these kinds of things would rather be on the multi juicer side. But the thing is that basically most of basically due shop and multi juicer are relatively finished projects. I mean, there's obviously no such thing as a finished project or very few things as a finished project. But we don't have any extremely huge new features planned out. Especially on multi juicer, I would be interested on basically feedback or basically more ideas from the cloud native community on if there are different ways to basically make this balance a component that we have here easier and maybe integrate this with basically something more of a prebuilt proxy. Because basically right now this is basically a custom crafted proxy using a Node.js library, which is actually working surprisingly well. It can even handle WebSocket connections, though not super stably. So I would be interested in if anybody has like an extremely easy way to basically get this set up with more of a standard reverse proxy setup, which basically still has all of the qualities that we have with the current thing that we can basically dynamically redirect this traffic based on these teams, which is kind of hard to do. I tried to investigate this for quite a while, but then I basically just chickened out and basically just went with writing it myself. But if somebody has a really nice idea or knows on how to do this with a prebuilt proxy, I would be very interested to hear from it. All right, that's a quite extensive answer. Thank you very much. All right. Any last question, I would say? It does not appear so. So thank you all again for coming to this spontaneous talk. And thank you all for the awesome questions. I wasn't expecting this many questions, but it's really nice to see that so many people are interested. So thank you all and have a nice day. Bye.


Hello and welcome to the Grand Line Review, your source for everything one piece. My name is Liam and rather regretfully, I only have two arms instead of six. And today we have review of chapter 1010, also known as one of the most insane things that we've seen on 1.0 yet. This is another one of those experiences where in summary format, it would probably read kind of just like fanfic, you know. Kid and Killer decided to take on Big Mama Loan, Zoro was a confirmed Conqueror's Hockey user. Oh, and he also used Zashra because of why not? Also, Luffy uses advanced Conqueror's Hockey, which before now did not exist and is going to face off against Kaido one on one. It really is slightly ridiculous in all of the best possible ways. And while I was weirdly lucky enough not to be spoiled on the chapter this week, even if I had heard what happened, I probably would have thought it was fake, especially anything to do with Zoro and Conqueror's Hockey because that's one of the greatest fan-based wet dreams of the internet. But before we get into things, it's time for a quick round of one piece based trivia, very simple mini game where I ask you a multiple choice question and should you answer incorrectly, then your punishment will be to subscribe to the Grand Line Review, which will also result in consistent injections of one piece culture administered straight until YouTube feed. And if you do guess correctly, then you will be rewarded with an all expenses paid by you tripped to the island of Wano. But here is our question for today. How many years ago did we last see Zoro use Ashra in the story? Is it A, 10 years ago, B, 11 years ago, or C, 12 years ago? I mean, whatever it ends up being, it's been a criminally long amount of time, but which is it? Select your choice now when we shall reveal the answer in three, two, one, and bam, it was C, 12 years. The last time we saw Ashra was in chapter 510, published in August, 2008. So, you know, exactly 500 chapters ago. And if you chose A or B, then, well, you know, thing to do and please do say hi in the comments below if you are a new member of the Grand Fleet. Welcome. But Zoro is definitely where we need to begin. There were two world breaking characters in this chapter and he was definitely one of them. Because even though it was far from the most unpredictable revelation in the world, I was completely stunned by the vague confirmation that Zoro has conqueror's hockey. So much so that I really wasn't sure quite what to say at first. All I'll say is Zoro actually has conqueror's hockey. And so that's pretty cool. Oh, and this is why I don't post for reactions because you could throw like the most world shaking revelation at me and with my stupid Australian sensibilities, I'll just react with, yeah, it's pretty all right I guess. I don't even know what to say about this. It's just slightly problematic because saying things with my mouth is pretty much the entire point of the channel. It's just strange because even though we have collectively theorized about this possibility for years and years and years, in fact, I made a video as recently as February, but I argued for why Zoro probably has it, which I suppose is now going to be flooded with a bunch of comments about how well it aged. Unlike the video I made about the whole Ode Mystery that video aged about as well as milk in the desert. But it feels very surreal because Ode just keeps slapping us in the face with Zoro hype chapter after chapter. Not that I'm complaining, especially because this revelation just makes a lot of sense. Zoro is aiming to be at the top of his own particular sword based empire. So conqueror's hockey just fits. With that said, there is a brief caveat I'd like to go over because I would be hesitant to say that it's 100% confirmed that Zoro has conqueror's hockey and this is entirely because of Enma. Right before Zoro invoked Ashura, we were treated to this panel showcasing Enma specifically. Once again, just letting us know that, hey, hey, this is kind of important and you should probably keep it in mind. And while I consider it to be a small and unlikely possibility, I wouldn't completely discount the idea that there is perhaps some lingering conqueror's hockey in Enma from Odin that was just unleashed here accidentally by Zoro. I mean, I'm not going to argue it too much because I do think it's a shaky concept, but it just fascinates me that Odin went out of his way to go, hey, have a look at Enma right before this revelation. However, I do really enjoy the thought that Zoro was just having his moment of invoking conqueror's hockey without realizing it. Sort of like what Luffy was able to do pre-times give. The conqueror's hockey just started leaking from his hockey orifice. And it's also quite fun because of chapter 997 where Odin made a joke about Zoro having conqueror's hockey, which I supposed is now technically going to be classified as foreshadowing unless the Odin potential pans out and then it could just be a running gag of people thinking that Zoro has conqueror's hockey when in reality there's always just a weird coincidental explanation. What is simultaneously glorious and frustrating though is Ashura. Firstly, I love that we saw it. It's been far, far too long. It was almost at the point where I felt like Odin may have been intentionally trying to forget about it just because of how weird it is, but even better than seeing the technique itself was getting to experience the Law's reaction to the event. Law's reaction to Zoro, he just has no idea what he's looking at.  Ashura is still kind of weird though because here's the thing, at first I kind of muddled my thoughts a bit here and suspected that Kaido's explanation for Ashura was Zoro using conqueror's hockey to spawn his limbs and swords and stuff. Upon further reflection, I don't think that's the case anymore because Kaido only mentioned it after being cut which would imply that he's referring to the damage inflicted rather than the fancy demonic auto phenomenon. Then again, there's also this really cool panel of Kaido reacting to Ashura with the utmost of seriousness and a shot of like pure dread in his eyes or to did his cool straight line shading effect here. So I guess Kaido could have picked up upon it then. It's just very hard to say and it's probably left deliberately ambiguous for the sake of fun fan discussion which is what I hope this is. Whatever the case we've rather unceremoniously reached a point in this series that Zoro fans have desperately craved which was him being pushed to his limits post timeskip. I don't think it's quite the way anyone would have imagined it playing out but as suspected from the hints of the last chapter, Zoro is pretty broken and at least temporarily going to call the quits for now. I can't imagine that he'll stay out of the raid entirely though there's just too many decent healers roaming around. I mean, lore right next to him is a doctor. Downstairs Chopper is a miracle making doctor and even Marco is a straight up Phoenix magic shaman doctor. So there's a lot of good options floating around to get Zoro back up on his feet. Whether or not he'll be facing off against Kaido again is another question and one that we may answer when we get to talking about Luffy. But first we do have something rather important to do because Zoro has actually become the first character during this raid to land a properly wounding hit on Kaido as slash that will indeed leave a scar very akin to the achievements of one Kozuki Oden. So that is a definite raid point for Zoro bringing his total to five. With that said, Zoro was the mere opening act of 1010. Anything he achieved was pretty much immediately blown away by the one and only Monkey D. Luffy who for the first time in I think ever has convinced me that he might, might be able to take on Kaido one on one. For a very long time, I've felt pretty strongly to the belief that Luffy would not be able to bring down Kaido on his own. There's just a lot of problems with it from my perspective one being that it would immediately make Luffy the strongest pirate alive potentially actually even the strongest character alive in general which seems like a bit of a big leap and not at all friendly to the nature of the underdog story beats in one piece. With that said, in this moment, I am well and truly prepared to eat my words because as much as it may not satisfy me in the grand scheme of things, I simply can't deny that seeing Luffy deliver a proper smackdown to Kaido is just so much fun. I love this panel in particular, the gut shot and this should be a very familiar shot to all of you because it's very classically Luffy. In most of his battles there is a moment where he gets in this solid gut shot one that forces his opponent to lean forward and cough up blood. And this is generally the moment where it becomes clear that yeah, Luffy can actually win this. So it was very exciting to see once again surreal though because this is legitimately the strongest pirate alive in his Zoan hybrid serious mode form being decimated by an attack delivered from a simple rubber lad. And you better believe that's a raid point for Luffy. A much needed raid point as well because as of right now Luffy hasn't actually done all that much on his own during Onigashima. What's mostly happened is a lot of team ups are being saved although a point will definitely be awarded for his smackdown of Kaido chapter 1000 and along with this conqueror's Haki based demolishment that will bring Luffy to the enviable number of two raid points. Let's get back to conqueror's Haki though where there was some ambiguity with Zoro there is absolutely none with Luffy. He just came to a realization mid battle that Kaido was imbuing his attacks with a different brand of Haki. And as a user of conquerors himself Luffy recognized its distinct flavor which is kind of cool because it's the sort of thing that Luffy was only able to realize after being brutally hit a couple of times one of which was way back during act one How classically Luffy is this? He's figured out another technique just via the process of being repeatedly beaten up. And just a quick shout out to my channel banner artist Revajo who aesthetically predicted Luffy's conqueror's Haki imbuement over a Yenel with this beautiful image showing the black lightning trail emanating from Luffy's arm. Now when the opening of this video I did refer to it as advanced conqueror's Haki but I'm not entirely sure that's the right terminology. It feels more like a different application of the basic sort of like our observation has a wide variety of basic uses like predicting your opponent's attacks or feeling the emotions of others. Those are both basic uses but then again like I don't know we're using armament Haki instead of conquerors and that's definitely the advanced setting so I don't know Haki is just very vague and odd like that. Right now I'm just going to call what Luffy does a conqueror's fisting but chapter 1010 really does mark the point in one piece where Luffy is pretty much officially risen to the top of this world given that he is now performing feats of a similar nature to that of Whitebeard and Roger albeit on a smaller scale regardless it still puts Luffy within a very very different realm of combat and I actually think that his confidence at the end of this chapter is quite well earned.  Because that Luffy pose right there to me suggests that he is. The final panel of this chapter is also important in the same way that the gut shot is. This Luffy pose is quite possibly the most iconic in the entire series and it happens when Luffy is driven to the point of excitement to accomplish something huge. An example of where we've seen it before would be during any slobby right before the straw hat slept into combat with CP9 and to a lesser extent we also saw it quite recently on Wano when Luffy finally broke out of his collar and decided to wreak havoc. What it does to me though is signify impending victory and obviously yes we do have a long way to go but this is a very positive sign and like I said before Luffy does have good reason to be as confident as he is because this has become a battle of conqueror's Haki which more so than any other brand is based on pure willpower and mental domination and in a battle of willpower look Luffy isn't going to lose. That's what we quite painstakingly discovered throughout the Kartakuri fight and if Luffy had been able to channel his willpower this potently back then well that fight probably would have gone very differently. So this is a true clash of kings now whose desire is going to prevail. Got to be honest in this situation I really would not put my money on Kaido. Not that this guarantees that the fight will be one on one from here on out we could always find ourselves in another Dressrosa style situation where Luffy needs a whole ton of help during the climax but what we do know now is that Luffy has the appropriate tools he needs to potentially bring down an emperor of the sea and that is very exciting. Not to be forgotten in all of this is Eustace Kidd who admittedly I kind of forgot about which is why I'm only just talking about him now. Whilst it looks like Lorenzoro might be out of this fight for now Kidd is still very much in it boldly declaring that he and Killar shall take on the biggest of mothers. And the reason why I think that's important is because Kidd is also a confirmed conqueror's hockey user so if he could exploit a similar phenomenon to that which Luffy unlocked then all of a sudden Kidd versus Big Mom well it's not as ridiculous as it sounds still an incredibly uphill battle I suppose especially because something very interesting is happening with Big Mom. At the request of Prometheus and this is just my interpretation but I think that Big Mom is planning on ditching Zeus you know they had that brief discussion about how useless he is rah rah rah damn cloud rah rah and then all of a sudden we have some other clouds stirring so I wonder if Big Mom is now creating a new Thunder Cloud homie to replace Zeus something a bit more in line with the fearsomeness of Prometheus and that's an option I like because that opens up all sorts of Zeus-based possibilities because if he does get ditched by Big Mom well where is he going to go running? There is only one place and that place would be Nami because she feeds him all of the delicious cloud gnomes and if that were the case then Nami could permanently end up with the upgrade of a lifetime although if you'd like to experience an alternative lifetime then do check out this video exploring what the series would look like if Luffy was a bounty hunter lots of berries to be made so I look forward to seeing you there


Embedded partnering teams are tasked with training the Afghan National Army and other local security forces in various military procedures and principles. Marines and sailors of the Second Room Logistics Group Embedded Partnering Team recently provided Afghan soldiers with a complex mass casualty exercise at Camp Shorabak Afghanistan, the training focused on how to react to an improvised explosive device attack on a mounted vehicle. The idea is that they understand when a vehicle gets hit that there's certain things they need to think about which is covering the vehicle and taking care of the casualties and continuing on with the mission. One of this was for them to react and continue to loop around. Marines and personnel from military professional resources incorporated have worked to prepare Afghan soldiers in previous training operations and are taking their time to ensure they remember these life-saving procedures. The training included dismounting, vehicle recovery and casualty evacuation exercises. Navy corpsmen with the Second Room Logistics Group also showed Afghan soldiers proper IV and blood transfusion techniques. Marines and sailors along with MPRI work daily to ensure the Afghan soldiers are properly conditioned and ready to face these dangers in the field. Reporting from Washington, I'm Private First Class, John Tucker.


The first governor's debate since the primaries being held tomorrow at Grandview Lodge in Niswa. The Democratic nominee Tim Walls will face off against Republican nominee Jeff Johnson in their first one-on-one debate. The debate is going to be held in the Gull Lake Center and being put on through the part through a partnership between the Minnesota Brainerd Lakes and Niswa Chamber of Commerce and the North Central State's Regional Council of Carpenters. The event will be moderated by Tom Hauser and will cover many topics that are important to the Brainerd area. This area is incredibly important to the state of Minnesota due to our natural resources but also we're a tourism destination. We have a great business mix here and we feel like we're going to get into a lot of those topics tomorrow but for our area it's just a great asset to have the first governor's debate right in our backyard. There is still time to sign up and to attend the debate the event is free but registration is required. If you enjoyed this segment of Lakeland News please consider making a tax deductible contribution to Lakeland PBS.