Hackers hijacked ASUS software updates to install backdoors on thousands of computers This is a really In-depth supply chain attack and I'm gonna leave links to all this in the notes below And if you're not familiar with supply chain attack It is where someone would up the chain as in where the computer or software or device was produced Insert some type of malware that would be distributed from the top down So from the source of the supplier all the way to your computer Maybe via an update via something embedded in the system that you purchased Supply chain attacks are not new. They're a really challenging problem and Krebs on security did a good deep dive into this And I'll leave you as links you can read about some of the background into supply chain attacks But let's talk about operation shadow hammer Operation shadow hammer is the name given by Kaspersky who did some really good security research work No matter how you feel about politics and the quality of their actual product. They do some really in-depth great security Dives and they did this here with the ASUS because there was some suspicious Contacts going on and what I mean by that is the ASUS update software seem to be reaching out in some unique places And this is kind of what trips people into going. What's it doing? Why is it doing on there? So In short what happened here was the ASUS with their certificates And if you're not familiar with how certificates work if you are a Issuer of software the way your computer if you're running Windows or other operating systems have different methodologies But we're going to specifically talk about Windows where this attack occurred Here's your digital signature as they're highlighting here issued by DigiCert. How does that work? Well, they certify and sign the software and they use a public key encryption system So ASUS internally keeps this key very locked down within their software development teams We think really locked down. I know that's going to be subjective after what's going on here And then they sign it and then you can verify publicly that that was signed with that certificate and it cannot be reversed engineer That means you can trust software was Completely produced from ASUS and allowed to run on your computer with their available certificate There's certificates for Microsoft. There's certificate for ASUS. Most every major software vendor has this This is how you get that untrusted like if you were to compile a software yourself You'll see this do you trust this because there's no public certificate available It validates that it was produced by that company or that company just doesn't have a valid signing certificate or individual that coded this so ASUS Potentially had this system infected. We're not exactly sure how this that information is not there originally ASUS denied being infected at all and Kaspersky well, they seem to think otherwise now We don't know how they got into the ASUS network, but the assumption is there because of the signing so it's also These hot fixes distributed by the ASUS live update were automatically installed in computers who ran ASUS live update And Kaspersky has a deep dive into some of you know where those Versions where which versions they identified in there and where they found the hashes of Suspicion in there now what's interesting about this is it takes a lot of effort I feel and I don't know this you know subjectively to be true, but I Feel that ASUS probably has because a reputation in their company well is currently in jeopardy over this they have good security processes in there, but Somehow the ASUS system was pushing out these updates now the updates themselves that came through with the virus in there Do not necessarily pose that we can tell an immediate threat what they are doing is looking for a very an oddly specific Number of MAC addresses and MAC addresses are the unique identifiers like a serial number per se For the network interface card if it found one of 600 and we're talking millions of infections millions of downloads, but only 600 MAC addresses in a list This list of MAC addresses would cause them to go out to a website that was registered called ASUS hotfix Which has now been taken down So we don't really have the clearest answers because it's been taken down how many of these computers of these 600 were out there and contacted that command and control server So if you were among the 600 people you probably are someone who's important now the parts We just don't know how did they come up with the list of 600? guesses and Speculation is going to lead to there was a purchase order from another company or a government entity of ASUS computers ASUS laptops per se And they have that list of MAC addresses of those computers However, they obtained them, but they can't touch them. So in a lot of security environments They can't touch those laptops and they come sealed from ASUS direct delivery However, that process is handled and someone verifies, you know seals aren't cut because that becomes a very obvious problem When a laptop is delivered and it appears to have been tampered with the company, especially if it's a security company may reject said laptop So the next thing to do would be have something already installed because you compromise ASUS This is supply chain and when those 600 Devices get online They then call out to this command and control server and then do something else now Why this is concerning is the ASUS live update tool also does in performance BIOS updates This could present because we don't know because a very strong risk of modifying something in a BIOS So even if these companies then practice really tight security by wiping and updating these systems That would still allow the system to install whatever mail where they did because many of these UFI bios Does have high-level access well They do have high-level access and sometimes have storage components that allow them to install other software even after you reload this so this is a Really big problem mother board did a this article and it's a long read is great though They have more details than Kaspersky and Kaspersky kind of advertising per se they're Telling you they're going to drop a lot more at the upcoming event. They're going to be a security conference Like I said Kaspersky like any of these companies. They want to drag it out in the news They want to make sure they get some attention. That's it not a bad thing really a lot of these security companies keep their name in the news by Hacked tracking down these threats and reporting on them, which is great because well as a public We really want to know about these threats and see if we're at risk now a couple questions that I've seen pop up in forums And things like that has been you know am I affected if I'm running Linux? No, you're not because to my knowledge I've never seen any ASUS updates come through on Linux I don't think they have any repositories also if you're using only the Debian repositories for example They only allow open source in the default repository. So if you've added something special Yeah, but if you're just running a standard server and you're running on an ASUS computer Shouldn't be an issue at all. No evidence of that and this is one of the Reasons open source offers a lot more security when you're doing it because the supply chain on the open source It's all open source They code it if someone were to put something into the source code the binaries wouldn't match And this is referred to as reproducible builds basically you take the source code Which can be audited and if someone were to put a series of 600 MAC addresses as a back door in there It wouldn't match the reproducible build of the binary that actually gets delivered to the customer This is why doing code very transparently helps with security because it really presents a challenge for someone to put something in I mean doesn't mean there's not bugs in code That's a separate issue finding a bug finding a zero day as an attack point really difficult really challenging But getting all the way up into the supply chain where you can just distribute it and then fly out of the radar by only Despite having this massive infection of machines and opportunity only looking for 600 MAC addresses means most people would have never looked for Some type of one single call out of a couple computers It wouldn't have raised a red flag your security stack top to bottom Wouldn't have noticed it because it's not something flagged now Going back a little bit of history and I'll leave this link as well and this this is in here from the Motherboard article apparently someone did notice something strange. So this has been going on for a little while at about nine months nine months ago ASUS force update or you see trying to do some mystery update But won't say what and it kept popping up So this may have been where they pushed it out in terms of the updates But I left a link to virus total is this is an example where There was nothing suspicious because this all relies on signatures Or even these higher end AI AI antivirus systems that try to do pattern recognition When you're only pushing out signed updates that aren't doing anything suspicious because they don't activate until they find that 600 MAC addresses before they do anything that would seem even slightly unusual There's not enough data to go on so the updates are trusted. They're signed and installed So it's really an interesting read read the supply chain This is a lot to think about. It's once again one of my calls for open source because people say, you know, can I trust Uh, oh, but yeah, when everything's done with reproducible builds This is going to be where we have to go into market to help protect against some of these supply chain attacks and this similar to Things I covered before related to the super micro alleged hacks talking about that supply chain You get similar things. They have schematics for the motherboards We're seeing a little bit more open sourcedness in that, you know open hardware forums So we can look at their hardware and it does what's expected because this is You know as security gets a little bit tighter with new challenges come up And This is the latest one here. This is just interesting But we're going to see more and more of these type of attacks And like I said in my opinion open source and being able to see the code and reproduce the binaries Is the way you help protect against this and have a better understanding of what's going on So good news is if you're running linux, you should be perfectly fine provided You didn't add any type of proprietary asus software to your system If you're running windows and you're running there New can pave if you're running a windows computer that got this new can pave because the other fear is The whoever's behind this in attributions really hard Will someone else take over knowing now that all these machines have this waiting on some next command Will someone else figure out how to send something else to these machines to make the activate differently Could there could this get out in the wild and create some big security nightmare just because 57,000 computers that they know of downloaded That's only people running kaspersky and the number could be bigger because the number of asus computers being According to the article here the fifth largest PC vendor So there is a Lot of potential out here if someone finds and is a way to exploit this further there could be problems So if you have an asus computer and you've run this live update at all or came with your computer Probably time to wipe and reload just to be safe if you're concerned at all about security highly recommend it. All right, thanks Thanks for watching If you like this video, give it a thumbs up if you want to subscribe to this channel to see more content Hit that subscribe button and the bell icon And maybe youtube will send you a notice when we post If you want to hire us for a project that you've seen or discussed in this video head over to launch systems.com Where we offer both business it services and consulting services and are excited to help you with whatever project you Want to throw at us? Also, if you want to carry on the discussion further head over to forums.laurance systems.com where we can keep the conversation going And if you want to help the channel out in other ways we offer affiliate links below which offer discounts for you And a small cut for us that does help fund this channel And once again, thanks again for watching this video and see you next time


Why empaths attract narcissists, empaths are receptive They are willing to consider or accept new suggestions and ideas They can be present with people They are aware of their own emotional state They can react quickly and positively To other people's emotional states They are deeply tuned in To the feelings of people around them They are like emotional sponges They have a lot of empathy They have the ability to understand the experiences and feelings of other people Outside of their own perspective They can sense and feel other people's emotions As if they're part of their own experience All of these qualities are good But there is a dark side to this When the empath is around a narcissist They will get sucked into the narcissist's emotional world They will sacrifice their own feelings and needs To please this unpleasable person Until they experience anxiety and distress Empaths also have difficulty setting boundaries of people Because they have a lot of empathy They feel bad for other people Which often prevents them from staying away Empathy is a good quality But when the empath is surrendering everything they have To someone who just takes more and more and doesn't give anything a return It puts the empath in a very dangerous situation It puts the empath at risk of failure or loss Empathy is a good quality It is an essential quality to having a healthy relationship But empaths also tend to be magnets to narcissists Narcissists are attracted to empaths because they care Empaths feel concern and interest for people They want to look after and provide for the needs of other people And they are willing to give more and more While the narcissist takes more and more The empath lets the narcissist get away with everything they do And never questions or confronts them They keep accommodating They keep trying to fit in with the narcissist's wishes or needs Which is the perfect situation for a narcissist Empaths don't usually consider That some people are motivated purely by self-interest So they miss all of the red flags Instead they continue to show pity and concern For the narcissist's display of misfortune or suffering Empaths believe that a relationship is supposed to be about giving They believe that it is supposed to be about being present with another person And in a normal situation they would be right But you cannot do that with narcissists In some past relationships The empath may have had experiences Where their empathy worked very well But when you're dealing with a narcissist They will only take advantage of you They will only treat you unfairly for their own benefit But regardless of what the narcissist does The empath will give them a chance of the chance They will try to understand the narcissist They will attempt to explain or justify the narcissist's behavior Or attitude with logical reasons They will try to be compassionate towards them They will blame themselves or some other situation For the way in which the narcissist is behaving They will try to heal the narcissist Because they just can't accept That some people cannot be healed with love And they don't like the idea of abandoning people When a narcissist gets involved with an empath They quickly assume that they can do whatever they want Because the empath just lets them get away with it Until the narcissist becomes a spoiled toddler The narcissist will then test every limit and restriction that the empath has And this will hurt the empath It might even make them angry or frustrated But they will continue to give the narcissist a chance of the chance Because they believe that everyone deserves to be given a chance They believe that everyone deserves to be loved The red flags were there right from the beginning But empaths overlook red flags Because they're more focused on emotional connection They're more focused on attending to the narcissist's feelings and needs But there is a point where the empath starts to become aware of the danger And that is after they have children Before they had children They were only justifying things from their own point of view Of what was happening to them But when the empath sees how the narcissist's behavior is affecting their child It causes the empath anxiety and distress But it can also make the situation more complicated Because once you have been around the narcissist for long periods of time It can exhaust your empathy Until you have nothing more to offer Because you have no empathy coming to you But yet someone who is in need of special care and support Who you empathize with is experiencing distress Empaths are not only narcissist's magnets But they also have great difficulty getting out of toxic relationships Because they feel bad for people And they hold themselves responsible for other people's decisions or situations Instead of recognizing everything the narcissist did to them They will often examine their own behavior They will assume that they should have done more for the narcissist The more time an empath spends with a narcissist They can become codependent They give everything they have Until they experience extreme physical and mental exhaustion Until they have no energy left Empaths stay in these relationships with narcissists for long periods of time Because they don't have the knowledge And even when they do have that knowledge They don't want to accept it It takes a lot of work to make an empath realize what they're actually dealing with But when they realize and accept it Some of them will still choose to stay They have difficulty getting out Before the narcissist causes more damage or losses Because they think that they can fix things They think that they can make things right Even though the narcissist is the only one who is benefitting from the relationship The narcissist will manipulate the empath into thinking that it's not good enough No matter what the empath does for the narcissist It will always be minimized or dismissed The narcissist will not acknowledge the empath's efforts They will only play it down And focus on real or imagined difficulties or problems For this reason The empath will always think that it's not good enough For this reason The empath can spend years of their life in this relationship With no other purpose Other than being the narcissist ATM Or their emotional punching bag While still being compassionate towards the narcissist While still hoping that they can change Some empaths do eventually realize That they need to leave the relationship Which is due to a difficult financial situation Or serious health problems as a result of the relationship But regardless of everything the empath has done for the narcissist The narcissist will see it as though the empath is abandoning them They will see it as though the empath is selfish Narcissism is characterized by an inability to self reflect So the narcissist never looks at themselves to see their own behaviors Instead they project their traits onto the empath They also believe that the empath has a duty to serve them They believe that the empath exists to meet their needs For this reason Even when the empath does leave the relationship It doesn't end like a normal breakup The narcissist will find themselves holding on for dear life The empath is the sustenance that keeps the narcissist together The empath is their source Is the source of the narcissist's strength The empath maintains the narcissist's life and existence Which is why it is often so difficult for an empath to ever be free Where there is an empath There will always be someone who is dependent on them Because empaths are like emotional sponges They are very given And they don't expect much in return Which makes them very attractive to narcissists Empathy is a good quality in relationships But every relationship should be reciprocal There should be an equal exchange It is not your responsibility to save the narcissist You have the right to set boundaries You have the right to protect yourself When your empathy is restored to its former condition You will find that it can be an amazing thing You can then give empathy to people who give it back to you And you should especially give empathy to yourself Thank you for watching I hope this video has made it with you Please like, comment, share and subscribe If you would like to donate My PayPal link is in the video description Coaching Inquiries You can email me at coaching.narcsurvivor.uk Thank you for watching and I'll talk to you soon


Yo, what's poppin people welcome back to another episode of kicking their bass TV Thank you guys so much for the love and support if you could please hit the like button on this video It really helps out the videos. I greatly appreciate it if you're new to the channel hit that subscribe button Also share this video with a friend. We got a banger for y'all today. We had a crazy day on the water and We filmed one video all the sudden I was like hey Cody you want to make a few casts and he just started slaying the fish And then I was like I'm gonna cast to and we ended up catching probably 30 or 40 fish like in the Matter of what Cody 30 minutes. Maybe it was crazy We doubled up probably 15 times and we had a great day But before we even hop into that actually have a kicking combo right here that I'm gonna be giving away I haven't gave one away yet. This is the first ever kicking combo giveaway So if you guys want to enter this all you have to do is be subscribed to the channel Hit the notification bell next to the subscribe button Hit the like button on this video and drop a comment down below on what type of content that you guys want to see And if you could also follow me on Instagram at kicking their bass TV I'd greatly appreciate that but if you guys do all them steps You'll be entered to win the rod and we'll announce the winner next week on the channel And if you guys want to check out the rods on the website you can check them out kicking their bass comm We got right hand left hand bait casters and spinning combos available right now in stock Well, we're gonna hop in to today's video. I hope y'all enjoy it. It was a freaking like I said It's a banger. We caught a lot of fish and I know you guys are gonna like this one So let's go ahead and hop right into it Kind of let it sink and just rip it up one time and you'll fill and slap it on the fall You got one Big one Did you fire them up whatever you just did? Cody's on with the fish right here. Oh, that's a nice one dude. It's not bad one Dude, look at him going crazy. Get that thing off Nice nice Look to the right of me see them on the edge of that dock Should be able to get another one.  No, right a good one You double up That might be a big one dude. Really? Really. All right. I'm gonna try to get mine off the hook. Maybe I might help you. Oh No, they feel good. Sometimes how they eat it. That's how they're eating it Yeah, it takes you a second. It kind of that's how I was Yeah, that's freaking fatty Seriously, let's just catch a few while we're here because out of that other video I'm gonna try to find something else fish Maybe we can do this one Hey I'm a fish blower, baby. Hey Nice It's literally every cast Dude, you felt crazy on this crank. He got him. He was running at you. How'd he come off? Oh A little twinksy, but they're biting like crazy. Oh my gosh. Yeah, right at the boats a decent one This two pounder they were schooling right here on the left, too This guy's just enjoying his lunch over there. You see that? He's probably like what in the world are these guys? Yeah, they're on there. They're on there. Guys, we are just slamming. You got another one That's like Dude, that's Cody's like fifth cast in a row Hooking one It's creepy. He's getting it done too. It's a little 5x debuff striking Discount codes down below See if we can fire a couple more out I can see where they followed the boat up. You got one? I know there's big ones in the mix of this. That's the thing is just takes a One good cast to get when big ones fire up might be No, no Come on double up and double up I was technically a double up. Yeah Triple up bigger I don't even know what you're talking about No There has to be a hundred fifths on there. Oh dude, there's more than that There there's so much bait here. I don't blame them for being there They're just stacked Nice. Yeah, that's like what seven or eight for me already. Dude, we've been fishing for five minutes. Maybe Cody's record breaking day that's the title of today's So it's just like how can you leave this spot with these fish?  He just came off Yeah, yeah, there is loaded up on there shallow right there. Yeah, you're about to get eaten Right away You got him. This is crazy, dude Like what is going on here? I feel like this is winter This is the winter bite But How have we not got two on one bait so far of this? Yeah, I know what I'm trying to figure out. I should get one right here They're not eating this crankbait as good, but they're still eating it That's a bacon. Yeah, that's big actually No, it's not it's not Why do you feel so large? I mean it's a good two pounder, but Yeah, they're going crazy right now dude. They're literally Going insane And look at this guys.  But look at this every cast He doubled up Okay, they're pulling dude. They're pulling us to the bank. I'm trying to keep us off But we've caught so many We did oh Dude aren't all right. Yeah. Yeah. I want to show that to the camera. That's what I'm saying. It's literally identical There couldn't be a better pair job That's what I'm saying, dude.  I'm just kind of enjoying it It's been a tough week of fishing and to come get on them like this What?    You know what I mean?  Did you see him come up come to the top throw in there? I'll throw right here where they're popping. Oh, they're chasing. Look at this. Look at this. They're going crazy.   We're not getting bit right there. Come on. No, they're all under us too You got one Good How many have we caught in the last five minutes dude like 15 20 I mean This is crazy Guys, I'm sorry. I'm not talking much this episode. We're just It's just I don't even know man. This is just crazy to me Like You fish are just uh, they're just eating They're just eating that's all I can say.    So I probably won't put that on What if I put one of these on can I cast it? Cody's freaking biting a fish back here. This is insane I've had one cast though that I didn't but you didn't get a bite on Yeah Yeah, you don't have many days like this often guys. This is something that you just get spoiled with every once in a while, but We had the toughest week of fishing that we've had all year Probably the toughest day of week of fishing that I've had in the year and a half And uh, man, this just makes it all worth it man. That's why you gotta keep a positive attitude Always keep fishing You'll get into them. I just ruined my shorts. Are you kidding me? Always be casting.  They're definitely gonna just tear this thing up You got another one.  It's so crazy to me Dude, I was messing with the GoPro and my rod tip was just going crazy. Nice So guys, let me tell you something. I don't know if you notice on this dock You know, this is a place that's very well maintained Um, not saying that it's super easy to catch them because sometimes, you know, these fish are Hard to catch.  There's a feeder on that dock over there And uh, we never catch a fish here. You you think on a feeder like there'd be some fish around Now there's fish around, but I've been fishing this place with Fletcher for two years And we have yet to like slay the fish right here next to this feeder like Which the feeders aren't for bass, you know, they're for a carp and Whatever else comes up and eats those pellets, but I don't know if it adds anything to do with that bait being around here, but I just think these bass got this bait just on lock in this corner They got them pinned up and there's nothing they can do. There's literally six or seven bass sitting right under Kody right now Like it's just there's so many fish here right now that I just it's unbelievable They throw in there.    I'm gonna stop I'm telling you it. I bet there's a lot of fish that I just said, you know screw this I ain't biting anymore, but there's so many fish here Yeah There's so many fish here that they just keep biting like it just They don't stop We are matching the hatch identical though. I will say that Like if we had different baits on dude, I don't think we would be Slaying them as good as we are Feels like a lot better fish Is he I don't know he's not a giant, but he oh, yeah, that's a good one dude. That's two and I found it Look at that one That's a nice one one of the best ones you got out of this school Oh, yeah Yeah, you got jerk bait Striking jerk bait has been probably I always have a few baits every year that I just slay them on This has been one of them baits man Guys, this is crazy. You know how your hands get pruney and water this hand's completely normal This one is what I've been taking the fish off. I've been taking so many fish off that my hands are pruney Yeah, that says something We're putting these kicking combos to work too guys if you guys want to check them out kicking their bass com link will be down below But there I'd have to say this is the most fish that we've caught on the kicking combo in one day I mean in 15 minutes. Heck Yeah, not even one day Okay There he is This fish is not moving Might just have him hooked weird Yeah, look at him. He's not even swimming. I'm just lugging him in What to say this fish has not fought. Yeah, I got him hooked under the gill. I wonder if he felt so large.  You're reading my mind throw it in there where they keep biting On that right hand side I don't know You think they'll eat it using live bait and artificial at the same time. Is he still on there? I'm telling you I bet you can get one to bite. They're biting a little less, but Dude, that's the trick with my uh-oh Cody. I got a big one like I ain't Ain't no playing this time I'll be very surprised if he's not big Look at him. He's not moving. Oh, I got him in the side.  That's why he felt so big. He's a good one though.   Once I started pausing it. Yeah started slamming it.   That's crazy You got one You see how I twitched it and watch this oh, he's not on there, but Usually if I pop it a few times and then just let it sit like that I'll come back to reel it and he'll just be on there. Oh You got one. Oh God dog. That's a big one Dude, you can't tell me that this isn't a five plus pounder. I mean I I'm being serious right now 100% dude Look at this I can't even move him Look Oh, they hook in the belly.  I'm catching a little further off now. Just kind of giving a pop pop On this side of the dog Yeah, they're kind of they kind of moved off a little bit.  Oh my god.  Yeah, that's sick. Oh, dude Man, what a good day today, man. It's a nice out not windy not cold Just a nice day. What is he 1.76? Oh my gosh. Almost a two pound crappie. Dude, that's that's impressive


This video will talk about exponential functions in an introduction. If we look at our definitions, exponential function can be written in f of x is equal to a times b to the x. Where b it says down here, it's our base on the exponent of x, which is an unknown. a and b are both real numbers. a can't be zero because zero times anything would just be a function of zero, and that's not going to be an exponential. And b has to be greater than zero and it can't be equal to one. So we want to look at this f of x is equal to three times two to the x. And over here on my calculator, I actually have put that in and I'm looking at the table. I want to look for some patterns. So let's look at the x. We can see that the pattern is that it's increasing by one. And then we want to look at the y's. And we can see the pattern happening there. We might be doubling because if you double seven point five, you get to one point five and double that, you get three, double that, you get six. So it looks like we are doubling or we could also say that we're multiplying by two to get from one y to the next. Let's look at another example. Now we want to look at this function and see if we can see the patterns that happen here. So we need to clear this one out and put in six and then in parentheses. I'm just going to put point five for that one half. Close the parentheses, clear it x and then go look at my table again. And this time again, let's look at x and see what's happening. X is again increasing by one. And if I look at the y, now my y values are getting smaller and it looks like they're getting smaller by half. They're decreasing by one half. Let's see if we can make some sense then out of those patterns that we just looked at. This means that the coefficient of A, if we were to go back and look at those, the coefficient, let's look at this one over here that we already have in here, the coefficient was six. And if I look back at my table, zero six was a point on my graph. So A tells us the y-intercept. When x is zero, we know what the y-intercept is. And B tells us how the function changes. Now this particular one, B was one half. So that would be this case down here in red, where B is greater than zero but less than one. Our function was decreasing. And in the other case, when we had three times two, remember we were multiplying by two and our numbers kept getting bigger so it increases when B is greater than one. So let's find an exponential function now and go the other way. Let's look at a table and see if we can find the exponential function. So let's answer these questions to see if that will help us. How is the input of x changing? Well, it's changing by one, increase by one. How are the y values changing? Well, it looks like from 20 to 60 I might have multiplied by three and 60 times three would be 180. So we're multiplying by three. How much should we start with? That's when x equals zero and when x equals zero we started with 20. So that means that my 20 is my A and the three is my B. As long as x is increasing by one, I should just be able to write this function as f of x is equal to A which is 20 times B which is three to the x. Our last example here then we're going to look at what happens when x doesn't change by one. If you look at this we're adding three each time to get from one x to the next. So x is increasing by three and the y's are decreasing. We are going from 3200 to 800. It looks like we divided by four and 800 divided by four would be 200. And 200 divided by four would be 50 and so on. That's a divide. We divide by one fourth. We could say that we divide by one fourth or the same thing is also multiplying by one over four. Same thing as dividing by four. Now how much should we start with? Remember x is zero so when x is zero we say that we started with 3200. So 3200 is our A. One fourth is also our B. But we've got a little bit of problem here because if I were to put that in my calculator and then double check my table to see if I did it right. Right now it feels like I should be able to say 3200 is my A times 0.25 which is one fourth. But if I do care at x let's set up my table to do what I wanted to do. So second window and I wanted to start at zero and x is changing by three in that table so I want my table to change by three to confirm. And I do start at 3200 but the way I had it written when it's three it should be 50 not 800. So it's really 3200 and it is 0.25 but the exponent it doesn't happen every one. That would be x but since it happens every three it's every third or x divided by three. So if we come back in here and fix our exponent and I need to put it in parentheses since it's a fraction. Now a parentheses and then x divided by three. Close the parentheses. Now if I look at that table that's going every three 3200 800 250 just like I expected it to be. So when it doesn't happen every one then you're going to have to divide by how often it does happen.


Here in North East Cambridge, we're creating a place for all of us.  A mix of new homes, schools, workplaces and beautiful green spaces. We're building a community. One that's designed for walking and cycling so you won't need a car. And because we want to make sure it has everything you need, let's do it together. Visit our website and tell us what you think.


For this problem, we are trying to calculate the heat loss. We are given the dimensions. We are given the r value and the temperature difference. Those are the quantities that we need to calculate the heat loss, basically. The dimensions are the wall dimensions are 8 feet, and this side is 10 feet. So the area is 8 times 10 will be 80 square feet, and we are also given that inside temperature is 70 degrees Fahrenheit, and outside temperature, average outside temperature is 43 degrees Fahrenheit. Therefore, the difference or delta T is equal to 27 degrees Fahrenheit. Now, area is given. A is, we already calculated, 80 square feet, and r value is also given as 22, which is 22 foot square degrees Fahrenheit hour over BTU. Now, heat loss, BTUs per hour is equal to area times delta T divided by r value. And in this case, it is 80 foot square times 27 degrees Fahrenheit divided by 22 r value foot square degrees Fahrenheit hour over BTU. So this will be equal to, here you can cancel foot square, foot square, degrees Fahrenheit, degrees Fahrenheit, we are left with BTUs per hour. And the heat loss comes out to be 98.2 BTUs per hour.


It's my privilege to be here. I've been associated with the FATHP session for a while now, presented at PHP in the cloud and couple of other events often as the. So, my name is Janaki Ram. I don't have a slide. This is a very interactive session. I'm not going to. Okay. This is okay. I'm going to stand here. Actually, no, no, this is good. So my name is Janaki Ram. Before I started off on my own, I was with Amazon Web Services for about a year. And prior to that, I was with Microsoft Corporation for about 11 years. I've been involved in cloud related stuff for about four years now, worked on Windows Azure, worked on Amazon Web Services. And now I run an initiative called get cloud ready where I primarily help individuals and ISVs to develop applications and refactor applications for the cloud. So before I get started and walk you through some scenarios and use cases, let me take a quick poll. How many of you are familiar with Amazon Web Services? How many of you are attending a cloud related session or hearing about cloud or have never done anything on AWS? Okay. Have you have you deployed a server on AWS? How many of you? Okay. Great. Okay. So this assumes that you're familiar with Amazon Web Services. I'm not going to do an intro to AWS, but given the fact that there are more number of people who are new to AWS, I might just give you some background. And then I'll actually make you appreciate the value of cloud formation. So to quickly walk you through AWS and the current landscape, what is actually happening in the space? So cloud has certainly changed the way resources are being provisioned, resources are being dealt with. And cloud is all about automation. What typically takes to set up a stack on a physical piece of hardware will be reduced to a few minutes when it comes to cloud, right? So cloud is extremely powerful because of the automation capabilities. And there is a new concept that's being evolved, which is called DevOps. How many of you have heard this term called DevOps? Again, three, four of you. So the most interesting part of cloud is the cloud turns developers to be administrators and administrators to be developers.  As a developer, you still need to understand some of these techniques and the best thing is you'll be able to write code to provision most of this stuff. So that's the power of cloud. And that actually creates a new job function in the environment, which is called DevOps, where administrators become partial developers and developers become partial administrators, right? Imagine writing code to set up a load balancer to set up a firewall, creating four different servers in a web form, adding them to the load balancer, then creating a master slave database cluster and pointing them to your app servers and then completely declaring this whole stuff in code and then executing the code to set up the complete virtual data center. So if you carefully analyze this, you have developers trying to administer the stuff through the code. So those individuals who are capable of writing infrastructure code and treating data center as a programmable environment are the new DevOps professionals. They are the developer operations professionals. They do what administrators do, but they are much more cutting edge because they actually script it and code it, right? So this has fundamentally changed the landscape. This has turned into a new revolution in IT operations and deployment world because today it's all about repeatability, right? You can't just assume things will work. You may want to create a web form, a complete high availability architecture, a topology, and you should be able to replicate it multiple times. So with that concept, there are new tools like Opscode Chef and Puppet. Actually, there is a parallel session happening on Chef. So all these techniques evolved primarily to manage and help you manage the configuration at runtime. So what I will do is I'll quickly walk you through a scenario and then I will show you what we are going to do with cloud formation. So this is basically the AWS console and because some of you are new, I will spend exactly five minutes walking you through the nuts and bolts of Amazon Web Services and make you appreciate the value of cloud and then we'll move to the next phase of cloud formation and see what it can do for us. Okay, let me ask you, if I am running a website on my local host on VAMP or MAMP, how long does it take for you to go live with a live domain and take it beyond your local host to the public world? How long does it take? Sorry? Three days, okay? Any more? Any more? That's a simple application. It's a LAMP application. Depends on the web hosting provider, right? The turnaround time could be anywhere from 24 hours to 48 hours to even 72 hours. That's a maximum, right? Okay, so I basically have a local host application that I am running and what I want to do is to go live with the same application on the cloud. So let me walk you through what it takes to basically launch this. So Amazon Web Services is primarily the cloud computing environment that comes with fundamental building blocks of doing anything meaningful for your application. So essentially today when you are going live, you need to deal with a bunch of building blocks. Definitely you need compute, you need servers that have tremendous power. You need massive storage for durability and for scalability. Then you need a little bit of networking in terms of firewall load balancers and so on. Then you need databases. So all these four are the essential building blocks for developing and deploying applications, right? So traditionally you go ahead and procure them. You set up physical machines. You install the stack on cloud. These are available. These building blocks are available to you in the form of pay as you go model, right? So EC2 or Amazon Elastic Compute Cloud is primarily a flexible elastic compute environment that's available to you, right? So you can launch a server and you can scale up or you can scale out your application. So what does it take to launch a simple server? So let me launch a plain vanilla Linux box and then set up Lamstack and quickly go live with my application. So I want to first show you the manual way and then we are going to automate the same process through cloud formation. So I'm not sure if this is visible. Is this visible? Okay, great. So here you have multiple varieties of operating system choices. So Amazon has a distribution customized for the cloud called the Amazon Linux AMI. So I'm going to select that one. And in the next step, I'm going to choose the configuration. So if you're able to read this, there are multiple configurations. For example, the entry level configuration is called a micro tier, which comes with the burst compute capacity up to two ECUs, which is two CPUs roughly, and you can go all the way up to 20 ECUs with eight core siege and seven GB or even 70 GB of RAM. So you have a variety of configuration choices that are available. Let me stick to the entry level configuration and I can launch multiple instances at the same time, but I'm going to keep them as one. And then you can safely skip this. And here let me just call this the lamp server. So I'll create this and then I need an SSH key to log into my server because sending the username and password in clear text is not an option, particularly when you're on the public facing internet. So there is a private key that's available to me and I'm going to choose that. And then I'm going to configure a firewall for this server. So I'm going to choose HTTP and let the traffic come from any IP address. I'm going to add that then I'm going to open up SSH port. So basically I'm configuring a firewall for my server or I could choose one of the existing firewalls just pre-configured. So I'm going to choose that and then I'm going to finally review this whole thing and click on launch. So this process has essentially launched a plain vanilla CentOS-based Linux box. So in a few seconds, this server would be available to us. Now meanwhile, what I'm going to do is to bring up a very simple script that I've already saved. So this is still pending. It should take about 30 seconds for this box to come up and to become available. I don't think I'm walking you through AWS 101, but only when you see the manual operations you'll be able to appreciate the automation part of it. So now I basically tap this public IP address and let's open another browser instance. Obviously this is not going to show up anything because we are not running a web server, we are not doing anything meaningful in that. So now what I'm going to do is SSH into my instance and I'm going to log in as DC2 user. So this will get me into my box. So this is the beauty. Now I quickly become a root user and this is my box. It took us less than 40 seconds to bring up our first server. Then I'm going to run a mundane script to get us the lamp stack completely set up. So I'm going to pull it from the M repository that Amazon internally maintains. So it's extremely fast. In few seconds you would actually see that the entire lamp stack is going to be up and running.  So this is going to make sure that my Apache, MySQL, PHP is set up the right way. Then I'm going to basically pull the latest build of my source code either from an SVN or from S3. So I have already uploaded my latest build of the website there. I also get a database dump into my box. So now I have what I actually need. You're not able to see this but there is a website.zip and then there is db.sequent. So now I go ahead and unzip my website into... okay there's a typo here. So I did that. Then I'm going to quickly import my database into MySQL. Now I come back to the browser and do a refresh and there we go. So that's our lamp website that has gone live. And this whole process has taken less than two minutes. Like from the time you launch the server we have gone live. So in this process we have gone through a series of steps. We have actually launched a server, we configured a firewall, we attached a private key to it and then we accessed and ran a lot of scripts. So let's say you want to do this across multiple regions, multiple data centers in a repeated form and you don't want to really do it manually because when you are attempting anything manual the chances of making an error is far more higher. So how about achieving the same thing through some kind of a declarative form where you're going to basically define your cooking recipe and then just publish it and get the same stack up and running. So this ability of automating and declaring your stack in in plain English is what is called as CloudFormation. So CloudFormation is a runtime environment on AWS that lets you define the stack that lets you define your entire configuration and your server orchestration in plain English and when you actually publish that the same effect that we achieve now can be completely automated. So that's exactly what is called as CloudFormation. So let me show you one of the very, very simple scripts here. In fact, let me start creating a simple JSON file on my desktop. So what does it take to launch a server automatically as in instead of really going to the manual stuff and the manual process of clicking through it, how about declaring the whole thing. By the way when it comes to Amazon Web Services there are multiple ways of achieving the same thing. Basically there is AWS control plane and then there is an API that is exposed by Amazon Web Services which is very, very popular and multiple tools leverage this API. There are command-line tools that you can actually use or you could also write program in any language of your choice all the way from Java to C sharp to VB or even you can script it using Ruby or Bash and so on. But all those require some kind of scripting, programming and dealing with the API. This is the first time that Amazon has come out with something which is very similar to a Chef recipe but this is more towards orchestrating the server than configuration. CloudFormation is not a replacement to Chef or Puppet. It's more of a complementary tool or a technology that works really well with the Chefs and the Puppets of the world. So Chef and Puppet are essentially meant for configuration of your software after the server comes up whereas CloudFormation is more about orchestrating your cloud resources and basically provisioning your cloud resources. And once CloudFormation sets up your primary mission it can bootstrap Chef and download the cookbooks and the recipes and can actually execute whatever you think might. But this is a level above the question of the Puppets of the world. How many of you are familiar with the Chef cookbooks and the recipes? So let's get started. Let me walk you through what it takes to basically declare the launch of a server or the configuration of a server and then use CloudFormation to achieve the same scope that we have. So let me start with this. So I'm going to create the very first so CloudFormation is primarily a JSON file. It is extremely simple to get started. So it just consists of a variety of name value pairs completely serialized in the JSON format. So it starts with a very first line where you define the template format version and this template format version is based on a specific date. So currently we are using a version that is 2010 0909 after that you can give a simple description which is going to define the description of this template. So basically a template is more like the decorative format and from the template you can create multiple stacks. A stack is a live implementation of a template. So now we have the very basic skeleton here and this can have multiple resources that can be defined. So these resources are going to be for example we are going to define an EC2 instance. So it starts with this and then we can actually start explaining multiple resources. For example EC2 instance is based on type so let's define the type. Don't bother much as I type you're going to get a lot of clarity but once you understand what is how a stack or a template is created you'll be able to relate to a lot of things. So for now I'm basically creating the simplest cloud formation template to launch one server. So I'm going to create an EC2 instance type. So that's the type that we're going to launch, the cloud resource. But the instance in itself requires multiple properties. For example you need to define what is the AMI type, what is the key that you are using, what is the firewall configuration and what is the instance type, are you launching a micro instance or a large instance and so on. So you need to explain a lot many details when it comes to cloud resource. So here we start another simple snippet where we're going to define the properties. And within the properties I'm going to define the key name of my private key. Then I'm going to define the instance type. Let's call this the T1 micro which is an internal name of the micro instance that AWS gives you. Then of course we need the image ID which is the Amazon machine image. So basically when you're launching any instance on AWS it has an associated AMI ID. So this is the AMI ID. So let me grab the same AMI ID and put that here. Oops, let me get it from a better place. This is not the best way to copy. I'm going to grab the same oops. This is the AMI ID that we are trying to launch. It's kind of unfortunate that we had to go through this step to get the AMI ID. Then we are going to define the security group which is the firewall related to this server. So I'm going to add another name value pair. This time it's actually so basically this is the basic format or the cloud formation template that we have just created. Now I wanted to spend some time analyzing what we have typed here. So these two are more like the mandatory requirements and after that you start explaining and articulating your cloud resources. So it starts with resources and within that we put easy to instance which is mapped to a resource of the name space. For example if you're adding a load balancer that would be awsvc2 elastic load balancer or if you're adding an elastic block store the type will change here and once you define this we are going to have multiple attributes that will explain the resource better. For example what do you require to launch an instance? You require the private key, you require the instance type, you require the image ID then you require the firewall that's associated with it. So this is the simplest very first cloud formation template that we have just created. Now we will save this and then come back to aws management console and go to the cloud formation tab. By the way if this process is not very intuitive as in obviously when you're automating you never want to deal with the GUI or the browser there are command line tools for you to launch the same template from the command line but to keep this simple through the conventional model of cloud formation I will use this wizard. So now let me let me call this Linux and I'm going to upload a template file. So this is the template that we just created and I can also give advanced options related to this. For example I can raise a notification which will tell me whether the stack has been successfully created or not because some of the stacks are extremely complex and long running. If you are setting up a load balancer and if you are setting up a cluster that might run into a few minutes and you don't want to stare at this so you can associate this with a notification mechanism within AWS called SNS and you can actually get a mail or a or an sms the moment this process is completed. Now during the process there may be a failure in which case you can roll back the entire stack for example in a transactional mode you might want to roll back and reverse the entire operation all the way from creating a firewall to creating a new EBS volume load balancer the moment something goes wrong in your stack the whole stack gets reversed. So that's the option here roll back on failure and you can also define a timeout in seconds. So this is going to basically sorry this is in minutes and you can basically tell how long the stack can execute and when does it gracefully exit. So that's the advanced options here and then this is going to parse our simple template that we have created and it also uploads this to a location that is centrally available to AWS. So the simple stuff that we created here is now available and it's being uploaded to one of the cloud storage locations. So now I'm going to click on continue. So the moment I click on continue it's going to parse everything and starts the creation of the stack. So while this is happening let's come back to the EC2 console and do a refresh and if that has kicked off the process you would actually notice that there is a new server that's going to be created for us. So the question is based on JSON can we have any other format? Thanks. No, this is actually a JSON standard. You can't really use XML or you can't use any other format because the runtime that's going to parse the cloud formation template is designed to understand only JSON. You can set up command lines tools for the same thing. So let's see if we are back in action here. So we will review the options here and then when we continue this is going to kick off the whole orchestration process and if you look at the events here it's going to tell us what is going on behind the scenes of the cloud formation. So currently the Linux EC2 instance is being created and while this is happening we can go back to the EC2 console and do a refresh. So here you'll see that there's a new server that's being provisioned. So this is coming from the same JSON that we just created. So now this should be done. So here you'll also see the status create in progress. The moment this turns green it's an indication that the stack has been implemented successfully. This will also turn red in which case it's going to get rolled back and resets the whole configuration. It's going to undo everything that it has done as a part of the stack. So now this is complete. So this turns green. So this is one of the simplest AWS cloud formation template that you could create. But next what I want to show you is slightly more complex template to automate the installation of WordPress. So this has multiple things. So at a very high level any cloud formation template will have parameters, mappings, resources and output. So these are the various sections that you can put in a specific cloud formation template. So parameters are the dynamic parameters. For example, you don't want to hard port any of the instance types but you want to prompt the user. So when you create a parameter and when you are executing the stack, it's going to ask you for the input values and you can also define a set of valid choices by creating the appropriate values here. Similarly, we'll prompt the user for the DB root password and you'll actually see there is something called no echo is equal to true. So this is an indication that what you're prompting the user is a password and it shouldn't be shown on the screen. So when we're creating the WordPress stack we are primarily asking for the instance type and then we are asking for the DB root password. So that's about the parameters. Then there is another section called mappings where you're actually going to pick up from an existing map. Okay, this is a lookup kind of a thing where when you are executing this script across multiple regions of Amazon web services this is going to map to multiple machine images. So you can take the same script and run it across eight different regions of Amazon web services and when you are executing a specific region this is the mapping that it's going to use. Similarly the architectural details of every instance type also comes from the mapping. So mappings is primarily an array of values that you can look up and it's almost like a drop down when it passes during the interface interpretation. So once you create the mappings then you go ahead and create resources. So here we're also creating a user. Are you familiar with the concept called IAM Identity and Authentication Management in AWS where you can create an enterprise level account and you can have multiple sub accounts. So what we are doing here is we are creating an identity and access management user only to access the cloud formation metadata. So we create that user and then we use his credentials of the access key and the secret key to log on to the web server and automatically install the LAMP stack that's required and then it can also pull the latest version of WordPress from the location. So it's going to get this and automatically expand into the W3 HTML directory and then it's going to create a very simple script which is to create the WordPress database and it's going to get the details that we entered during the setup. So now you'll actually see there is something called ref dbroot password. So this is the dbroot password that would have prompted the user to enter during the execution and that's going to be replaced here. So this is a specific notation that's being used within cloud formation where you're dynamically replacing this value with whatever the user has entered and then this is primarily the WP config file that's going to be created and finally it's also going to make sure that the the HGTPD, MySQL, mail services are being started automatically and it basically runs all the script to basically run the MySQL commands to create the database and to execute the database script. So finally this is the five wall configuration that's being again described declaratively within the template. So we are opening port 80 for this and this is a CIDR notation where the traffic can come from any IP address and finally the output section of this template will join the web server public DNS name and finally gives you the final URL of the WordPress website. So let's go ahead and execute this. So I'm going to create a new stack and let me give the name of the stack as WP and I'm going to upload this the WP.json in the next step it's going to parse all the details that we have asked. So here as you see there is a DB root password and instance type. So this is primarily coming from the parameters section that we have defined here. So here the instance type is a parameter default is M1 small that's what you would see here the DB root password is also being given here with no echo. So let me change these parameters let me change this to a T1 micro and because we are creating an IAM user I also acknowledge that I'm going to give access to this guy and click on continue. So this is going to provision a plain vanilla lamp server and then download WordPress build from the WordPress.com site and automatically configure everything that we require. So if you keep an eye on the events tab this will take a while because it's going to do a lot of stuff all the way from creating a plain vanilla server to creating multiple firewall configurations and also downloading the latest build of WordPress. So it does whatever we are supposed to do to set up WordPress manually. So in about two and a half three minutes we'll actually notice that the entire WordPress stack is up and running. So while this is happening any questions? So a good question I think I partially answered this before you joined us. So basically the fundamental difference between cloud formation and complex share is complex share for more like complication management. That is much more useful after you bring up a server like for example I mean a combination of with for me which is right this isn't particular which which right. So the number one reason is if you are an Amazon customer and you have a massive investment you can you can integrate Chef and Puppet with cloud formation. For example just like I am bootstrapping WordPress I can bootstrap Chef and I can point it to the cookbooks it can download and perform exactly the same. But to bootstrap Chef I need an external environment even before I get up to that point and that is cloud formation. Of course but this is an official Amazon flavor of the same and this is meant for customers who are going to be married to AWS. It doesn't give you the platform agnostic advantage but then if you are already massively invested in AWS this makes it further easy and there are going to be many features coming into it as in see inherent capabilities of adding an elastic block store or creating an elastic IP is going to be very hard with third party tools because they are not aware of certain certain integrities of dealing with AWS specific resources but cloud formation is completely aware of those. For example have you played with AWS you are familiar with okay so you know EBS right so in the same declaration I can actually block let's say one TB of elastic block store and I can add it to my instance and mount it create a mount point and dump my database log files on to that while declaring the stack. So that's a kind of integration it has but I totally agree it's not very unique as in you can achieve the same effect same impact by using Chef and even Ruby scripts but this is more like an official Amazon flavor of partial DevOps. Okay so hopefully we are done with this formation now so yeah creation is complete and now if we come back to the management console and look at this so we have a new server that's up and running and let's grab this public DNS wow it hasn't really deployed WordPress yet no it actually dumps it in the root because if we look at the script it is in the root right oh okay okay let's also try this you're right cool so okay my guess was we have dumped this into yeah so when you obviously expand WordPress.zip it dumps it into WordPress right so that was essentially the script for the WordPress deployment I know this is like scratching the surface many more use cases in fact I have one more cloud formation template that I am working on where you basically get the same e-commerce portal that I have run earlier automate the whole stuff but somehow in the last minute I couldn't really get that done but you can pretty much automate everything that requires manual intervention and you can it's almost like baking versus cooking so according to Amazon Chef is more like cooking because when I get the portions recipe are like very accurate it's almost like baking if you are dealing with Chef it's almost like cooking because the proportions may vary so you get more accuracy when you are using cloud formation I don't work for Amazon but that's what I used to say when I was working for Amazon okay so I don't have much time but questions yeah anything as long as you yeah so the question is can I use CentOS actually depends on the AMI ID you can pick up an AMI that belongs to Ubuntu and you could pretty much repeat the same stuff anything anything that the OS can understand can go into that yeah does this integrate with route 53 absolutely in the resources section you can actually create a new zone and you can start registering your domains there so is the question installing the certificate related to SSL right so the question is can you also associate the certificate to a specific domain during the cloud formation template I'm not too sure but my understanding is it has to be done after the instance completely comes up and then you have to actually execute the route 53 command line tools to do that absolutely so what you can do is as a part of the installation for example here instead of downloading the WordPress binaries you would actually download the route 53 command line tools set them up update the environment variables and execute that specific command which will map your certificate you can invoke that yeah any more questions so your question is this is the last one the question is how do you build an Amazon stale environment in your own premises there are multiple things you can actually set up a private cloud either based on euclipters or cloud stack or open stack and emulate pretty much a lot of things that Amazon gives you but let me tell you Amazon is far ahead in the game getting all those capabilities within your premises is very difficult to achieve but you can emulate most of the core capabilities through either euclipters or cloud stack or open stack so thanks for attending this session I am around for any discussion thank you


I am Kronika, Keeper of Time. I've guide the destiny of the realms. But my work's perfection has been tainted by Raiden's actions. I enlist all those who disdain the current course of history. By merging past and present, we may draw upon allies from both eras. I offer a greater empire in the new era. Will your outworld armies defend it? They shall. Codal car, we have common cause. Solving this temporal crisis. And in defeating Shao Kahn, I will have my scouts track Shao Kahn.  Right? I've been in the future for a whole hour and I haven't seen one jetpack. Not one. Elder gods, the realms are in crisis. Every being will be erased in a temporal argument. Find Kronika's key and gain control of her allies. Only then will time's momentum be restored. We've got to take out Netherrealm's army now. Before Liu Kang can bring it here. As my strength gathers, the new era draws ever closer.