Now luckily that barbarian will be slowed down by this river, so I should be able to sneak my guy around and I'll bet I can safely work this plantation. Meanwhile, this guy is coming in to get rid of these barbarian camps. I decided not to harass Scott too much. I could have sent that composite bowman in and really menaced him, but instead I am going to fall back, build a city, almost immediately, and bust out. I'll decide if I'm actually going to build a city right now if I build one more unit first. Let's see, visibility would be useful, and healing would also be very useful, especially because I am fighting barbarians right now. I'm going to take that though, and I'm just going to camp here. Let's see, could I do better? So, grainery would actually let me grow a little quicker, and would only take 8 turns, that's a little while. It wouldn't take me that much longer to actually build a settler. Now, if I build a settler, remember the city is not going to grow anymore. That's actually the one main problem. If I'm building something else, it will take 11 turns for the city to grow. Not great. I can speed that up a little bit by working on stuff, but I'm limited in what I can work on until that barbarian is gone. And since I don't have any military units here, I think my best bet is actually to go for that settler and try to get the city early. So, where will I put it? Because my military units up here, this way is probably the safest and best way. And actually, to hem Scott off, it might be worthwhile to go somewhere here. Probably on this hill. Because I will eventually get that copper. Oh, there's whales there too. Yeah, it's a pretty good spot. Just as good to be on this grassland. Now, if I go on this hill, I'll still get the copper. I'll still get those cows. I'll still get that hill. Closer to those whales. And I can work Mount Sinai. That'll also menace Scott heavily. He's gonna gray general in though. It'll be a problem later, but I can handle that better in this game since I won't underestimate him. I think I might blitz ahead, build a city up here, then I can come back and build a city elsewhere later. The barbarian moved correctly. So the question is, it'll take me six turns to finish a farm, but then that will not significantly impact anything. So I might as well take this stuff, because I'll need that happiness for my new city. This guy should hunker down one more turn, get a little bit more health just in case. I don't want to risk him. This guy's real important to my later game. I retreated my composite bowman, as promised, all the way back across this expanse, killing barbarians along the way, which got me plenty of culture. I'm retreating this guy back to search around here just to see if there is anything over there, because I ignored that before in my rush for Scott. And we'll see what I do with him. Mostly I got him here to be ready to immediately build a third city once I get my second one. You can see I'm almost done with the settler, and I'm gonna send this settler. This guy came back also partly because he's gonna escort this settler all the way across, skipping this good spot for a city. And I think I can beat Scott to it. I'm gonna build a city right here. This is a better spot if you just look at the area around it. Starting at a hill is also usually a better idea. Not always, but sometimes. But here is a real interesting spot, because one is a grassland hill here and here, mountains blocking this approach. The edge of the map is up here somewhere, so I think there's a way around here. But even then, that would be a tortuous process around. So if I build the city here, then I've got two hills. I can basically stick a unit here and here. And then I've ranged units here, or ranged unit here, in the city. And I can have one here in case anyone's in this forest trying to bombard the city. And then it's gotta have one hell of a time coming across to attack this guy. Especially because I'll get double territory right away due to being the Shoshone. It's like spanned all the way out to here. Maybe I'll even build a gray wall just to make it impossible for him. I don't think he's gonna navy too well, so I'm not too worried about a naval assault. I'm actually gonna push navy pretty hard pretty early. Not super early. I'm not pushing it now, but I will be pushing it. The other thing I'll probably do is I have the city here. I might put a citadel right there on that hill. Or maybe, maybe, I don't know if I'd bother, but I might even put it here as a forward base just to sort of control this zone and make it just a really tough path to get across to attack that city. So I'm gonna build this city first. This is a real important city. If I get this, Scott doesn't have a big chance. Secondly, this guy's gonna kind of move around. I'm gonna explore it a little bit. But I kind of want a menace over here, because I don't want him to...  So he won't have any other coastal cities, thus ensuring that I can take his capital and then the game will meet suddenly with a navy. So while there's no case spot down here for a city, I'm not gonna try to rush to build another one right there, unless Scott is really slow in getting his cities going. So I'll probably build my second city. I'd like to build it here, but there's no luxury resources of note, or really any. There's truffles all the way down here on the edge of the map. So all these spots are kind of crappy. I guess I could build the city inland here a little bit, but it doesn't matter. My third city after this one is actually gonna be a support city right here, I think. Maybe here, even though the marsh is not great, I'd like to get access to that sugar right away. So policies. If you look at the tech tree, I didn't push into the classical era, so I can't get patronage, which I actually really want for this game. So while I would like to push this and be a threat to Scott early, and while I can even make a case for this, despite the tiny map, I'm not gonna bother. I'm gonna fill this out because filling this out earlier is way better than filling out later. And if I do this, that'll be good because I'm about to settle two cities in pretty rapid succession. And then I'll immediately be able to come down here to reduce my unhappiness, or I'll be able to go here and just force the capital to grow, or I'll be able to go here. And I want to finish this pretty quick because that'll just give me growth and aqueducts. Alright, I timed a whole bunch of things to happen simultaneously. And because of that, we got a lot going on this turn, pretty much everything. So the first thing that happened this turn is I have discovered the lively art of writing. And because I'm Babylon, Babylon, that gives me a great scientist. Hooray! Okay, what else happened this turn? Well, I finished building a bowman. Go bowman, go. We're gonna send this bowman in this direction because there is a city-state quest encampment of Barbarios over here. So, start going that way. Okay, another thing that happened this turn. Spearman. He can move into the city. I'll talk about that in a second because we've got a cultural social policy, and the next social policy is oligarchy. Garrison units cost no maintenance. So we choose this. Yes. Well, our city is stronger at bombarding any Barbarios and also money because we're not paying for the spearman. Okay, next thing that happened this turn, this worker finished marble the quarry. The quarry is complete. Because the quarry is complete, the worker can now go do something else like repair this pasture that got pillaged by Barbarios. Because that only takes like one turn to repair something, and then we're gonna chop forests. Speaking of chopping forests, that great scientist we got. We could discover a free science by pressing this button. Which could give us pretty much whatever science we choose. By the way, the science we're choosing is philosophy, which actually means calendar and then philosophy. And the reason is that way, national college. You can only build national college if you have a library in every city.  A regular library in my only city. I can then build national college. National college gives you plus 50% science in that city, also plus three. So really, plus four and a half, plus eight. So eight plus three is eleven, plus national... Well, okay, so hold on. We're gonna see... Okay, let's go back a second. So right now we have eight science already. We already have eight. Then, when you finish the great library, that's gonna give us a regular library. So it's three, plus three science, so it's eleven. Plus one for every two citizens. We're probably gonna have six citizens, so it's three more, so it's six. So six and eight is fourteen. Fourteen science. Fourteen, fifteen, sixteen, seventeen science. Seventeen, plus fifty percent. Plus eight, so like twenty-five or twenty-six science. So we're gonna build the great library, followed by the national college. We'll take us from eight to like twenty-six science in about, you know, whenever it's done. Oh yeah, by the way, yeah. Great library. Now, this great library, thirty-five turns, that's a lot of turns. I mean, we want to get that done a lot sooner. We want to get that done, you know, in time to build the national college. We also want to get the national college sooner. That looks like it's gonna take thirty-something turns. Good thing we got this great scientist. We're not gonna choose Discover Tech, we're gonna choose Build Academy. And where can we build the academy? Now, normally you'd build it on like a hill, because it's a crappy spot, there's nothing going on there. Even in this desert, that'd be a great spot to put in the desert, because you turn this pretty much useless tile into an amazing tile. However, we're gonna put it right here in this grassland. Some place you usually wouldn't build an academy, and the reason is, because this grassland has a forest on it. And see, now it takes me a few turns with this worker to chop down a forest to contribute hammers to make the great library go faster. And we might do that, perhaps on this forest, or this forest, or that forest maybe. Probably this forest. But, we use the great scientist to construct an academy on the forest. Look at that, look at that. The forest on this tile will be removed, providing twenty production to the nearest city, immediately. Boop! Clearing a forest has created twenty hammers. And now if we check Babylon, the production should have gone now. Oh right, it was the thirty-five, now it's the thirty-one. We just basically saved four turns of great library building, right? Now, more importantly, the academy. Right? Let's do our science math again. We now have sixteen science, thanks to that beautiful academy that we just made. Sixteen plus three is nineteen. Sixteen plus one for every two citizens is three more. Right? That's nineteen twenty, twenty-one, twenty-two, twenty-three, twenty-four, twenty-five, plus fifty percent. We're going from thirty science. Forty science? Yeah. There's going to be a lot of science as soon as the National College... Great library is going to be huge science and the National College may be insane science. So once we have that much science, after we build the National College, we're going to be like Boop! All these things are going to take like one turn, one turn, one turn, one turn, one turn, one turn. We're going to just discover everything. But we're going to choose after that. After we get, you know, this. We're going straight here. Because our production is way low. And which means we need to build the workshop. It allows production to be moved right below. Production plus two, production plus ten percent. Right? Ironworks. Production plus eight. Right? That's what we need to get to. We need to start workshop and ironworks. Because our production is low in this place. We're going to chop all our forests to build the Great Library. We need to get ironworks built in Babylon. And then we can start building stuff instead of garbage. The Great Person was born. Bowman, the spearman, the worker who's going to fix that. Alright, scout. You haven't done anything. I guess we should scout. Oh! There's a bowman. So he's going to shoot two spaces. One, two, one, two. Let's go away from the bowman. If we can sneak up on him with the scout. It's actually advantageous that the scout attacks that bowman with melee. But let's not get shot at. Because then we're in trouble. We'll have to just run away and heal. And we can't scout around anymore. Alright. That looks like we're good here. Next turn. So as you can see the game has progressed while I was in Hong Kong and Australia. There wasn't enough bandwidth and I wasn't going to bring all the equipment. So I didn't really record updates while I was there. But you can see I'm following the plan just as I said, with a little detour to deal with a surprisingly aggressive barbarian incursion. I actually had quite a bit of gold and I had to buy a warrior to deal with this. Slight unhappiness due to the fact that they took out my one luxury resource. Because I don't actually have a plantation here yet. But I did rush ahead. I got my city situated here in a highly defensible position. I suspect I might actually build a citadel on this hill next to it. Or possibly in the plains here. But either way I'm going to make this a heavy choke point. So scout won't be able to come through here. He's going to get to settle here. I won't be able to fill in a settler here just yet. But I will settle here and I'll back settle here. So I'll have a pretty good set of cities. I've been taking out the barbarian camps now. Take care of those guys. But my plan is to finish a worker here. And hopefully get this worker really buffing out this city. And protect it with this guy. Who can also keep an eye on Scott. And finish the Great Library. So I suspect Scott wanted the Great Library. And he'll probably be pretty mad when he finds out that I built it. But the reason I built it. I actually was not going to go for the Great Library in this game. The reason I did was pretty simple. I have pretty good production here. Despite having not really buffed this all out. But if I look at the demographics. You can see in terms of manufactured goods. See how it shows that I'm at 13. And the worst is at 9. That number 13 is hammers. I'm making 11 hammers here. And two 2.5 hammers here. So that accounts for basically the 13 hammers. So I know that even without this city. I am making more production in my capital than Scott. More importantly, when I was going here. I noticed that for a long time. Scott could not make an embassy. Because he did not have writing. You need writing to make an embassy. So I pretty much kept an eye on him every round. Until I saw that he had just finished writing. And as soon as he did. Because I knew I had more production capacity than him. And because I knew he couldn't have been working on it until that point. The moment he finished it. I started to build or finished researching writing. I started building the Great Library. There's no way he'll get it before me. And now, nine turns here. But check this out. I'm going to fill this tree in anyway. And while I would normally do this. To get the happiness boost. Because I am unhappy. That's going to be taken care of right now. When I finish repairing this. I guess he needs one more round of repairing. But next round that'll repair. But more importantly. That means I can do this. Plus 15% production for building wonders. Let's take care of these barbarians. Oof. There's a lot of barbarian going on here. Well he won't be able to move past. Because this guy is in the way. I want him to stay and heal.  He's going to come in and pillage though. So I'm going to have to come back around and deal with him. You'll notice. That I do not have the Great Library. So Scott being clever. It looks like what he did. I'm assuming. Is he went down this track. Before I did. To get the plus 15% before I got it. Which is fine. I'll use this later. I got to fill this whole tradition track out anyway. But he also must have. Switch to heavy production.  In short order. Which is fine. Because I remember I had that pile of money before. And then I didn't have that pile of money.  To deal with the barbarian invasion. Well. Now I've got the pile of money again. Which I'll either use to buy a work boat. Really quickly get these whales. Or I'll keep ready to build a military unit at the time comes. Or. More importantly. And more likely. I've noticed. Because these dual maps don't work like regular sieve. Like a lot of the strategies and rules. That you would expect from a normal game of sieve. Or even a small game of sieve. Don't apply at all in a two player game. And one of those things. Is that it's actually very hard to generate a steady income. I mean look at this map. The city states aren't even on the water. You gotta do land trade routes. There aren't good ways to generate cash. So that's moderate pile of cash will be useful. Because I can run a deficit. If I need to. For a significant span of time. So. I would have. Considered getting this guy. Because even though he's upgraded. He still has native tongue. I would have brought him all around here to get this. But the rules of these things. Are that you can't take the same upgrade that you've taken in the last. I believe two or three ruins. So if I go in here. Let's see what I can take. Population would be. Okay. Ah. I think I'll do this because I'm not generating faith. And that should give me enough to immediately make a pantheon. This will only give me an ancient era technology. So it'll give me like archery. That's literally useless. I'll get that in a few turns on my own. Don't care about that. It's not enough gold to matter. I think this is the best bet. Ooh. Let's keep upgrading these guys. And I might as well move closer first. That way next round I can just take this thing. This is getting a little bit dangerous. Not dangerous in terms of losing anything. Dangerous in terms of just being annoying. And in terms of I can't just rush this guy down and around. I want to protect the horses. But I also want to heal. You can't attack me in one round. So if I go here. I'm going to heal a little bit. I'm going to want to be friends with these guys down the road. I've got one more movement. I can bring this guy back around. The city is going to be able to defend itself against his relatively small army in the short term. So I might bring this guy around this way. Take that out.  I will do that. This guy I want to... I don't want to risk him dying here. So I actually have to go up and back around that way. This guy is just going to fortify here. Because that's the only thing that's worth defending in the area that this guy can get to. And now I need to pick Pantheon. Now this is very interesting. In a duel I got to think very differently from how I would in an actual normal game of Civ. So... This might actually be the most useful one. Because it just makes my capital city better. But equally useful is this. Though as I realized in the second game we were playing there's kind of a side effect. In this sort of game there's not a lot of early game opportunities to get happiness. So you can actually very easily outstrip yourself happiness wise. Because you can't expand or trade to get luxury resources in any reasonable way. Don't really care about these minor culture boosts. I'll have two plantations here. But it's not enough. So actually what I think would be the most useful, especially because I have this choke point up here. Would either be this. Because plus 30 hit points healed per turn if adjacent to a friendly city. Meaning guys sitting here and here defending the city would just heal every turn. That would be nice. Or I could just make the cities plus 30% range combat strength. Which is not the worst idea. Because I'll also have this plus 50% range combat strength as long as there's a garrison. So that'll actually make my cities pretty powerful to shoot at guys who are held out here. So either one would be pretty much equally good. I'm gonna go with the faith healers.


we can still show up in a meaningful way this November and pull as we did in 2020, pull our democracy again back from the brink. But Portia kind of touched on this. The motivator there has to be for people to understand and it's up to us to do everything we can to help spread the word on this. Then when you see those obstacles, they are not there by accident. They didn't just happen. It's not a bureaucratic glitch. It's not some back office breakdown. Somebody doesn't want you to vote. Like Rafael Warnock says, there are some people who don't want some people to vote. And so when you see something going wrong, receive it as somebody is trying to stop you from exercising your franchise and make that your motivation to redouble your efforts, to do whatever it takes you to climb over, around, under the obstacle that's in front of you to get to the ballot box, make sure your voice is heard. If we can get that kind of electoral energy in these midterms and beyond, then we create the next wave of pressure for the kind of policy in Washington that can deliver one America that respects the vote and lifts up the voice of every person in our country.


Hello everybody! Watch this video to find out how to move a virtual machine from Hyper-V to Proxmox V Hypervisor. Nowadays, virtualization has become an integral part of IT infrastructure, and many companies use all kinds of hypervisors to launch their apps and services. Sometimes, users may need to move a virtual machine from one hypervisor to another. In this case, if you have a virtual machine working on Hyper-V and you would like to transfer it to Proxmox, you may need additional information about how to do it properly. In today's video, we will explore the steps you need to take to move a virtual machine successfully from Hyper-V to Proxmox. There can be a few reasons to make you want to transfer a virtual machine from Hyper-V to Proxmox. First, transition to a different virtualization platform. If you have a virtual machine which you would like to run on a different virtualization platform, you may have to transfer the machine to that platform. The second reason is better performance. If you notice that your virtual machine works slowly or not to effectively on Hyper-V, moving it to Proxmox may improve the situation. The third reason is software update. If you are planning to update your Proxmox or Hyper-V, you may need to transfer the virtual machine to a new platform. The fourth reason is a server failure. If one of the servers where the virtual machine is running suddenly breaks down, moving it to another server might be required to make sure that your work continues without any downtime. In any other cases, I have listed moving a virtual machine elsewhere could be the step you are required to take to preserve the system's upper ability. Before you take any actions affecting your virtual machine, we strongly recommend creating a backup so that you don't lose any important data. Creating a virtual machine backup before it is moved to a new platform, in this specific case it's Proxmox, is extremely important. You need this backup so that you can always revert changes in case something goes wrong with the migration process. Also, creating a backup gives you a chance to see that the virtual machine works properly before this machine is moved elsewhere. If the virtual machine encounters certain issues after the migration, you can always go back to the backup file and try to fix the problem. Besides, creating a backup is a good virtualization practice because it helps you to prevent data loss and possible system damage in case of any system failures or user errors. To create such a file, you can use the tools for scheduling automatic backup. To create a backup in HyperV, just export the virtual machine. After that, you will need to import the machine in order to restore it. In our channel and blog you will find solutions to any problem, from installing an operating system or configuring it to fixing possible bugs and errors or optimizing mobile gadgets. Our specialists will answer any questions you ask in your comments under the videos or articles. Here is what you have to do if you want to move a virtual machine. Before you start moving a virtual machine from HyperV to Proxmox, you need to make sure it is stopped. Choose a virtual machine to move and stop it if it's running. At the next step, after the virtual machine is stopped, you should create its image and this is how you do it. Open HyperV Manager and choose the virtual machine you'd like to move. Right-click on it and select Export. After that, select a direct rugby to save the virtual machine image and choose required export options. Then click Export and wait for the process to finish. The third step is to move the virtual machine image to Proxmox. For this purpose, you can use any FTP client. To the Proxmox server by FTP and upload the exported virtual machine file. Now, you should create a new virtual machine in Proxmox. To do it, open a browser to access the hypervisor controls. Create a new machine by clicking on Create VM. Give all its properties. In the virtual machine you have just created, remove the existing disk and import a new one. Open the new virtual machine settings, jump to the hardware tab, select the hard disk and click on the Detach button. When the disk is detached, you can remove it. The corresponding button appears here. Click Remove. Now, you need to convert the virtual machine file into the format we just supported by Proxmox Hypervisor. You can choose between using a utility like Starwind V2V converter or using package manager tools in Linux. I'll show you how to convert VHD into an IMG file and to import it into a virtual machine. To install starters, let's install the command prompt utility called VHD2IMG. This utility can be installed to Proxmox with standard package managers in Linux. Here are the steps you should take to install VHD2IMG in Proxmox. Open shell in Proxmox and run the command. Install VHD2IMG with this command. Check if VHD2IMG utility is installed using another command. If this command runs successfully, the utility is installed and ready to use. Now, use one more command to convert the virtual machine file. At the beginning, you have the virtual machine file format VHDX and the path to such file. They are followed by the path to the converted file. After inversion, the resulting file should be imported into Proxmox. To import a disk, use this command. It contains the virtual machine ID, the path to the IMG file and the storage directory. Next tool lets you convert files into the IMG format, which is also supported by Proxmox. Open the virtual machine settings in Proxmox Hypervisor, choose hardware, and you will see a new disk which is unused. Click Edit and then Add in the new window that opens. Now that the disk is added, start the virtual machine. As you can see, it runs properly. Moving a virtual machine from HyperV to Proxmox can be a challenging task, but with the right kind of planning and preparation, it can be as seamless as possible. For status, you need to understand the differences between HyperV and Proxmox and make sure that your virtual machine is supported by the new platform. After that, create a virtual machine backup and prepare the new Proxmox server for importing the virtual machine. In the course of transferring the machine, make sure that all of the settings have been correctly moved to the new platform. After the transition process is over, check if the machine works properly. If any issues arise, you can use the backup to revert the machine to its previous state. Finally, it should be noted that moving a virtual machine is a complicated process, so if you have any doubts or you lack confidence in your skills, it's better to contact professionals or study manuals and tutorials more closely. And if you lost any data from your virtual machine, use the proper tool to bring it back – Hetman RAID Recovery. It will help you restore lost files from virtual disks. This program supports all popular hypervisors, including HyperV and Proxmox. You can learn more about data recovery from virtual machines if you watch other videos on our channel, and I'll put the link in the description below. And that is all for now. Hopefully, this video was useful. Remember to click the Like button and subscribe to our channels. Leave comments under this video to ask questions. Thank you for watching. And good luck.


as part of the work that Inter-American Development does, is not only help countries in developing solution, but it's actually helping to mature their legal framework, let's say. So, and as part of many other aspects that the IDV is helping countries. So in this case, we do a lot of research. Some of those research are based on legal framework of each countries and identify what countries of maturity level they have in a way that they can adopt, for example, digital identity. And what we have found in most commonly on all the countries is that the regulatory limitations are based on anonymity of the transactions and the relationship with cryptocurrency while they are executing a transaction. So the transaction fee, basically.


What's up guys? This is Coach Ben from the Build My Sports Biz.com podcast and YouTube channel and today I want to show you the best way to market yourself if you are brand new to your sports business. Let's say you don't have a lot of customers yet and you're looking for customers. Today I'm going to show you a very simple three-step process that's going to help you get your first customer into the door. Here is step one. Step one, we want to always pretend that nobody knows about you.  I always try to think about who is the ideal client. For me, I know exactly who my ideal client is in my soccer training business and this is what I help coaches do all the time in our mastermind. I help them understand who is the ideal client and only target those people. This way you are serving the ideal client within your business. That's number one. We want to figure out who that is. If you're trying to train athletes or clients in too big of a spectrum, too big of a range, then you're not really specific and that's normally what a lot of other trainers do. I'd rather you be a specialist and figure out who the ideal client is and let's try to figure out how we can get in front of them. Number one, figure out who the ideal client is. Number two, when you understand who the ideal client is, now what we need to do is see how we can position ourselves in front of them. Here's a very easy tip. For me, I like to train soccer players that play at the YMCA in a certain part of San Antonio, Texas that's very close to where I live. The area that YMCA is located at is a perfect area for soccer. There's a lot of families that live over there. There's a lot of parks that are over there. There's a lot of pluses to that area that I target. I dig deeper from there. I think, okay, how old is the player that I want to train? What is their goals? Do they want to go play club soccer? Do they want to just stay where they're at? What is their goals? I start to dive really deep into that player profile. When I understand exactly who I want to train, then when I do step two, which is position myself in front of those parents, those players, it's very easy because now I'm in front of the ideal client that I want to serve. When I position myself in front of them, it's very easy. I can go to any YMCA in the United States and tell them, hey, I'm Coach Ben. I would love to add value to your soccer program. Can I put on a free clinic here for 20 kids? I would love to invite all of their parents as well, so I can meet them. I can show them drills that their kids can be doing on their own. Now I've literally just injected myself into that YMCA and now I'm in front of 20 kids. So 20 kids who don't know me, 20 parents who don't know me, and now I'm positioning myself in front of the right people, the right audience. Now I could take that same concept and multiply that across all of the other recreational soccer leagues, recreational clubs. There's literally thousands of people, and that's just in soccer. In any sport out there, you have that opportunity because there's always going to be a beginner league or an advanced league. It doesn't matter. You have to tailor who you want to train. That's really up to you. So number three, from there, step three, is once I position myself in front of the right audience, I know my audience, I position myself in front of them, and then I make them an irresistible offer. So after I set up the free clinic, free camp, whatever it is you want to do, then I should have all of the parents contact information. I should have their name, their phone number, their email address, and really at that point it's about how can I set up an offer that's going to attract a lot of those 20 people who have to be training into my actual program. So this is why you have to be very strategic with how your business is set up. What does your program look like? Are you training kids and just exchanging time for money, or do you have an actual program set up that's scalable? So that's something that I'm going to be talking about in other videos, and I can definitely help you one-on-one over the phone as far as how to set up your program, but you want to make an offer to your program that is an irresistible offer. For example, this is what I would do, I'm going to go position myself in front of the right kids, I'm going to go train them, and at the end of the clinic, I'm going to make an offer to the parents, and I'm going to simply ask them, hey, would you guys like to be a part of my monthly training program? It's very affordable, it's a group session just like we just did today, and whoever's interested, I would love to chat with you after this session, and we can take it from there. So after that session, the interested parents, they're going to sit there and talk to me, I answer any of their questions, and then from there, it's very easy, and all the people who didn't ask me for help after that, I have their contact info. Now I can call them, now I can email them, now I can text them, and now if I am persistent in following up with people, that is where you're going to grow your business, that's where you're going to get more people than you've ever dreamed of, to come into your business and be clients, because you are following up with them. That is the number one mistake I see amateurs who try to start a business, they aren't doing that, they're afraid, they hesitate, they aren't bold when they reach out to people, and if you do things the exact same way I just talked about, you can multiply that across 10 different organizations in three months, easy. If you're just willing to go out there with a giving hand, help people, position yourself in front of the right people, and then from there, give them an offer that they can't refuse, and then you follow up with people who haven't committed yet, you're going to get clients. And this is why I tell everybody, no matter what industry you're in, there is no shortage of clients, okay? I can go to any city right now in America or in a role, there's always going to be athletes, no matter what sport, that need more help, right?  Alright guys, if you liked today's video, make sure and click the thumbs up button, from there hit the subscribe button so you stay updated with all the news content we have coming out. I will be releasing videos every single week, and basically twice a week throughout the rest of the year, I'm going to be doing this. And really my whole goal outside of shooting these videos is to personally talk to you one-on-one over the phone. And so here's how I have this set, every single Saturday, I talk to a select group of coaches who apply for a free phone call, right? And the way you do that, it's very simple. If you want to chat with me about your idea, about your business, and you need to help, right? This is why I'm here, this is why I started this YouTube channel, this is why I started our other YouTube channel called Soccer Entrepreneur. You can go check that out, I've already helped hundreds of soccer coaches there. And this is why we started Build My Sports Biz to help more coaches, no matter the sport. So if you want my help, and you want to chat over the phone, over a free phone call, you got nothing to lose, right? I would love to chat with you. And simply all you have to do, just go down to the link in the description. It'll say, chat with Coach Ben, you just click on that button there. And that takes you to my website, you'll see a big blue button on my website. And from there, you just click on that, you go through an application form, it's very simple, and we will get in contact by the end of the week. So that's it guys, thanks so much for watching, and I'll see you next time.


just eat my last fruit snacks that was the last one we start off with so much food I don't know how we ran out so fast but if I don't get food real soon I'm gonna get real mad like they all have never seen me mad before dude we're out of snacks yeah I thought we had some more maybe some of those drinks I don't want them drinks I want snacks you need to go get some more and why do I have to be the one to get it let's go they'll give me some snacks right now I'm not playing I understand why he's mad that we don't have any more food I mean we get all so quick and we're stuck in here with basically almost nothing else to do but this you really have to go that far oh well we'll have to keep stocking up that way we won't run out of food anytime soon


Live from New York, it's theCUBE covering Big Data NYC 2015. Brought to you by Hortonworks, IBM, EMC, and Pivotal. theCUBE, theCUBE goes out to the event. Live from New York. We're here at Stratoplus of Duke World. This is our event, within the event, Big Data NYC. Craig Steele is here. He's the General Manager of Global Strategic Alliances at Pivotal, and he's joined by Chris Harold, who's the global field CTO for Big Data Solutions inside of EMC. Gentlemen, welcome to theCUBE. Thanks. Thank you. Craig, I want to start with you. A lot of talk about the Federation last several months, you know, last couple years really.   Talk about the Federation play as it relates to Pivotal and EMC relationship. Certainly, so I think we all wish we would have started a little bit sooner. EMC is a very large organization, VMware, as well. And, you know, as Pivotal was spun out, and we started working on enabling each other, if you will, to build joint solutions to take to our customers, you have to take into consideration the multiple solutions and technologies that are available from all these different organizations, and come up with winning solutions that customers will actually be willing to invest in. And I think, recently, we've seen a lot of momentum, specifically to the Federation Business Data Lake. We've got some wins under our belt with some, I would say, significantly large customers, and we're in the various phases of deploying those options for customers now, and we've got a pretty significant pipeline lined up together as well. So, I think for all intents and purposes, things are going very, very well, and we expect that to continue. So, Chris, I wonder, one of the things that we talk about all the time is the difficulty of using Hadoop, and you're in the solutions group, so part of your job is to make it easier. Talk about the mission of your part of the organization. Sure, so, we started with a very simple premise about, really, I started about four or five years ago working in the Hadoop space, trying to help enable customers using the EMC sort of core offering storage and compute and things like that from a VMware and block and file storage perspective. What I realize, just like you said, is that everybody has a challenge with that. It's tough, it's hard to get environments up. Once they're up and running, people basically just, I don't want to touch it, and that makes it very hard to innovate, it makes it very hard to iterate and make changes rapidly, and about a year and a half ago when I came into the Solutions Organization, I came in specifically with the goal of designing a platform that allowed our customers to get out of the plumbing business, right? And the adage I always use is that if I buy a house, I don't want to actually have to do all the plumbing work, I just want to walk in and take a shower. And when we built this platform, that was the whole goal, is we want customers to have a push button, get cluster experience, Hadoop as a key technology, but across the board, right? And so, Pivotal brings to the table a number of analytics technologies outside of traditional MapReduce that are also complex, are can also be difficult to deploy and integrate. And instead of spending a lot of time on the plumbing, on the making bits work together and actually run, we've said our stated design goal for our solution is, let's simplify that, and let's get to the really hard work, which is the actual data science, which is the actual analytics, right? We want to bring those things to the table as fast as possible. So one of the solution areas that we look at a lot is governance, you know? It's kind of in the boring but important category, but it's becoming more and more important and less boring for a lot of organizations. It's interesting because Pivotal, you think of Pivotal Labs as like this, maybe oftentimes shadow IT, you know, organization, because somebody in marketing or sales says, hey, let's call it Pivotal Labs, these guys, we know how to get stuff done, you know? Our IT guys, we don't want to work with. And so, they'll perpetuate some big data analytics project, right? And they'll pop up all over the place, but then there's the governance gap. How are you guys, first of all, is that a fair representation? And how are you guys addressing that? Yeah, I think it's a fair representation, I'll start and then you can probably pick up the details there. What we're seeing more and more is, there is a definite link from an application to actually big data analytics and understanding whatever databases you're attaching to that. And then making sure that those interface with the application in a way that can scale, and it's, in some cases, it needs to be very, very fast when you start to think about machine learning and other capabilities that we bring to bear. I think if you look at it holistically like that, it is challenging, but I think we worked on together and Chris can expand on this, a way to make sure that the technology pieces are, you're aware of what data is going to be part of that ecosystem. And then I think the gravity of that data as well goes into the decision-making process with what you bring in. And I think as that starts to expand and it moves into different business units that want to take advantage of this technology, that's where the governance model starts to really show its importance. And then Chris, you can probably tell us what we're working on. No, and that's absolutely, that's exactly our model in governance. And I think you see a lot of activity right now, specifically, certainly pivotal and through the ODP initiative, you guys are part of some of that activity. I know Cloudera and Matt Barr are working specifically around governance. And for us, as much as we 100% wholeheartedly support that effort, it's a very HDFS-focused, it's very focused on Hadoop as a microcosm of a much bigger ecosystem, right? And when we think about data governance from a federation level, from a solution level perspective, our goal is not just to protect HDFS, it's to protect anything you're running inside that framework, right? And so the key point for us is, we want to get to policy-driven data governance that allows you to govern that data regardless of what you happen to store it in, what tools you happen to consume it with, and most importantly, who you happen to be, right? Because you could be a data scientist, a BI person, whatever it is, and we realize that, I mean, Wikibon just put it out this morning, right? You guys just put out the report that the number one and two, or code number one, is Google and Azure. And what is Azure analytics based on SQL? That is what predominantly most of our customers are using. If we're protecting Hadoop, but we're not doing anything above that layer where we're addressing the governance and policy and access control into SQL, all of the advanced tools like machine learning and stuff that we want to bring to bear from the pivotal side of the Federation relationship, we're in the wind, right? Now we're trying to stitch together this little bit of open source over here and this little bit of a consumer product over here and whatever it might be to make that patchwork work. And that's just not a good approach when you're thinking about a larger, broader solution set, and customers are coming back to us and saying, we can do that. We'll go stitch together the open source stuff, what we really want from you is a bigger view into enabling all this new machine learning and all of this stuff with our existing people, with their existing skill set, without having to teach them Java. So especially your large customers have the capabilities to do that. They want to help in those areas that they just aren't really focused on, is that? Yeah, I was just going to add that that's SQL, there's a very large ecosystem of folks that know how to develop code with that framework. And so the parts of the product portfolio from Pivotal that are also with the Federation Business Data Lake, we see that as a trend that's continuing. That's why Azure and Google are having success in that area because the intellectual property is there and folks that are dealt with business intelligence tools in the past, they don't want to learn a new language, just don't have the scale to ramp up as quickly as they should. So I've always been a huge fan of the Federation when EMC announced that I was actually down here at the financial analyst meeting and when they sort of laid out what they were going to do with the Federation, so it made a lot of sense.   What struck me at the time was, okay, this changes the game for EMC in particular because it allows you to become more strategic as opposed to just talking to storage admins which is kind of, you know, the guys do in Lund Management and sort of a dying breed anyway. At the same time Pivotal, this startup has this distribution channel and then you've got this strategic component of VMware which everybody has VMware. So it sort of made sense that, okay, this can organically grow but you guys have now more deliberately, we were talking about at the top of this set, deliberately sort of developed capability here, I don't know, the Tiger team and overlay. I wonder if you could talk about that a little bit more. That's the color. Yeah, sure, we both have comments on this but I'll tell you a couple of things that we're doing. We're focused on accelerating what we see as initial success with the Federation Business Data Lake. And what we're doing is we're going to double down and we're going to invest, actually we've already made the decision in our signing contracts now to build a center of excellence. And that center of excellence will be focused on differentiated technologies between Federation entities. So you look at the portfolio again, from a Pivotal perspective, it's a lot of what's happening now and in the future and as we build and integrate entire systems and I think it was your phrase and I'm going to rob you here in public but taking the science out of doing data science, right? Just making it easier for customers to be able to leverage these tools for a unique business use case in a way that's not so painful for them, right? I think one, and I'm sure these stories have been told before, but one I was actually reading about recently was Netflix. When they first launched, they had what most people thought was sort of a blockbuster killer, right? It's a DVD delivery service and then they went to a streaming model and what they were actually doing was collecting information. It's a data model. Yeah, it's a data model. They built the data model, the killer data model. They really did. A step above that or simultaneous to that is the microservices that they're using to develop applications that are widely used as well. But back on the data side, if you look at viewership and viewer affinity for a specific show in a specific region, how often they're watching a show, how many episodes they'll watch in a row before they burn out, they had enough information to then go into the production business and know with a great deal of certainty if a television show was going to be successful before they spent a penny on writing a script or hiring a director or the rest. So it's really about collecting that information and being able to leverage it with the application and that's what we're going to focus on in the center of excellence. Yeah, and I think from the Federation side, from the EMC side, Craig and I were talking about this before. I banged the DevOps drum pretty hard within EMC and obviously Pivotal has a strong DevOps presence that are more on the Dev than the Ops side right now. But the whole concept of DevOps is, it is where the rubber meets the road with this analytics workflow. And EMC is trying very hard in that, for lack of a better term, that legacy environment, the storage loan administrator environment to talk about DevOps. And it just doesn't resonate with that type of audience until you bring in an actual reason for them to want to do it, right? And when you talk about the complexity and the scale and the diversity of analytics and analytics tools, you can't do that unless you are embracing a DevOps cultural mindset, period. You will find yourself right back in 1993 very, very quickly with a thousand physical servers that all look the same.  I came from that operations world. I never ever want to see anybody go back to it. So I'm trying really hard to make sure we don't. And it's a different message for EMC, right? And I'm sure you guys know that the Federation are bringing together Best of Breed. That's a new tack that we've taken and then we've embraced and I think is huge, our customers love it. It resonates very strongly with everybody who hears the message and speaks about it. And when we tie all that together, with that cultural mind shift, that actual DevOps mindset of, I need to be able to make my physical environment work like my developers do with their software environment. It's absolutely unparalleled the capability we have within the Federation to bring that to fruition with our customers. I mean, the stuff that we're doing in the COE and joint development of platforms and things like that, we're embedding Pivotal Cloud Foundry into our Federation Business Data Lake. So it's very much the, was it the Gillette, not only am I a customer, I bought the company, right? We're very much, we're embracing that technology. We want that within our platform because of the power that it gives us to meet that DevOps demand. And we've got to bridge that gap and we, as Federation partners and Craig and I work very closely together, but I've been embracing that Pivotal message for a long time, personally and within my solutions team and it just, it makes so much sense. So it's interesting what you're saying about the DevOps culture and the 1,000 servers all the same, presumably because that's the only way we can deal with all this complexity. So we're going to force this standard on you and good luck. But you talked earlier about some of the successes and I know a couple of sort of Federation customers. I guess I won't name their name, but one is I'll say Describe Insurance Company and you talk about this DevOps culture, which Gartner has this thing about bimodal IT and it's kind of interesting, but, but what you're describing, I wouldn't say is bimodal. It's unimodal in a new way. So the bimodal reeks of, and Gartner's a smart guy so I don't want to be pejorative here. If they were here, I'm sure they could defend it better than what I read. But this idea of you have old and new is not what people want to do and the one customer I'm thinking of this insurance company, they really understood that problem. They drove the DevOps culture. It was a Federation situation. You probably know who I'm talking about. And they basically took their legacy infrastructure and they said, we have to make it speak new. And they worked really hard to create that layer. Maybe you call it an abstraction layer, but so that it could participate as a full first class citizen within that new DevOps environment. Is that sort of the model? You guys know who I'm talking about, so okay. So is that the model that most of your customers are taking or is that the sort of top one percent that went into each other? So I would say it's a majority and there are actually several examples of this being done successfully. The one I think you're talking about started as a lab's engagement based on the customer realizing that it was a big insurance company that Google is getting in the insurance business. And when Google gets in anyone's business the whole phones start ringing out. So they wanted to develop a better user experience, be closer with their customer and we came at it from an application perspective. As we start showing customers, paired programming, extreme paired programming, our DevOps sort of culture and we immerse folks in that we actually bring them to our facility to put them through that and then have them take that back to their headquarters and their devs. That's really where we introduced this idea of leveraging tools like Pivotal Cloud Foundry to build, push, scale and push apps out. Once that's sort of, and that's a process in many instances as you talk to a large enterprise company that needs to move very quickly, you kind of have to surround the different players within an organization to get them to make that big cultural shift, if you will. So our sales model, our go-to-market model is really based on surrounding folks like VP of IT. After you get the devs involved and they buy into this technology and process, then it's how do you get the enterprise architecture folks involved? How do you get the lines of business involved and get them to buy in? And once the devs are in, it seems like the rest of the ecosystem will come along in many cases, but after you start wrapping that together, then the question becomes, and even immediately in the process of trying to disclose what this technology brings in terms of capability, the question is asked, do you want us to spin up a proof of concept on-prem and some infrastructure that you have currently or do we need to do it online in some way? And we'll make recommendations that are friendly to our brothers and sisters in the Federation, but that's when the connectivity between the infrastructure and the process for the operations needs to map to the devs at the top. Okay, well what about that? So obviously, the guys we're talking about are big customers of all three parts of the Federation, and that's clearly where you want to start. I mean, that's sort of the obvious top of the pyramid, but what about other customers who don't want to necessarily, they want to mix and match. That's a great point, and actually, our solution philosophy, and Craig stole it, so it's fine, but data science without the data scientists. And the reason that we're approaching it that way is because an organization like Nameless Large Incarnation Company, or Partners Healthcare, who I will be speaking with on theCUBE later this week, talking about the FBDL and the Federation solution. They have a lot of resources in-house. They've got talent, they've got data scientists. There's a lot of things that they genuinely just don't need our help with, right? They have technical challenges that they have a specific need, and the Federation is there to support those things and help them build a bigger framework. But to your point, what about everybody else? What if I don't have 20 data scientists on staff? But I know data analytics are a big deal, and I know Google is getting into my business, right? And I'm a small insurance company somewhere. How do I start, build up this capability and this infrastructure, and meet that rising demand? Because if businesses don't evolve, they're going to go away, right? And we're really focused on that platform piece, that scale out capable platform, right? Because a lot of our customers don't want to go to the cloud. They have data sets that they don't feel comfortable leaving the building, right? It's much easier to adjust and manage on-prem than it is in the cloud. And that shadow IT concept that you brought up earlier, that's a very pervasive thing. And I know we see that in a lot of our customers and people are trying to stomp that out. So we give them that infrastructure piece, that on-prem side, right? And then we bring in this cultural side from Pivotal, which personally and professionally, I'm hugely thankful that EMC made that investment because we were sorely lacking that, right? We needed that cultural infusion of dev into our ops to actually get to where we needed to be. We're great at storing data. We're great at compute. We'll do that flawlessly all day long. And then we would get to a certain point in the conversation. And people are saying, well, okay, now what do I do with this thing? Stuff, right? Now we have that credible end-to-end detail discussion. We've got incredible momentum in the open-source community through Pivotal. And that's feeding back into us, our own engineering side, even just in core EMC and solutions is contributing back into open-source projects. That's a huge departure for EMC. Well, I think this is huge. Five years ago EMC couldn't spell open-source. Pivotal brings instant credibility and timing couldn't be better, right? Yeah, I would say, John, to your point, it's a process, not an event. There are business units within EMC that develop applications in the old sort of waterfall methodology that we're sort of learning how to crack the code with and nudging them over. So it's happening in fits and spurts. And in some organizations within the ecosystem the federation are in wholesale from day one. So I think it's a good blend. The success will drive others to adopt this strategy as well. Where's the COE? So I'll tell you where the infrastructure is going to ship to Hopkinson because we've found space, power, space and cooling. The intellectual property and capital will be, human capital will be based in Denver. So close to Chris. And our goal there really is to two-fold. One is to make sure that we have the right engineering resources together, whether they VPN into infrastructure somewhere else on the planet is of no concern. It's really about having these folks in the room, discussing new ideas, new differentiated technology and capability for our customers and being able to do it in an environment that promotes this sort of DevOps culture. And actually we're building it at Galvanize in Denver, which is a new sort of epicenter of new young talent that is really coming up through the DevOps sort of culture. That's a fantastic collective thing. It's really cool. It really is, yeah. And then a long-term goal is after we're well-established and build up some momentum, is to start to bring customers in and let them experience kind of firsthand what we're doing from a federation perspective in terms of developing these new technologies and they will get a taste of that cultural atmosphere when they attend. Well, it's an awesome story.  But with the slow collapse in infrastructure software pricing, you know, the key is solutions. That's where you're going to add value to customers. That's what they'll pay for. There's certainly money to be made in this business. Gentlemen, thanks very much for coming on theCUBE. Sharing your story was really great to have you. Thank you, sir. Thanks for having us. Keep it right there, everybody. We'll be back with our next guest. This is theCUBE, we're live from Big Data NYC at Strata and Hadoop World. We'll be right back.


sonnet for unethical practices. I seek the haven past the airlock door, in coat and collar white my love to meet. She calls to me with hunger evermore, that I may lay new tribute at her feet. My love is even-handed as the sun. She caters not to sentimental pride. Within her arms the frail become undone. Her touch will warp and break the feeble mind. Unto her searing glare I turn my eyes. I'll bring what sacrifices she desires. My ears are shuttered to the haunting cries of those who must be gifted to the fires. I join the strong of mind within her light. The weak of will I offer to her knife. Seven Children Watching from a park bench on a lovely sunny day, I notice seven children who had gathered there to play. Zeru was the eldest and he led until his end. Ursula was skilled but filled with envy of her friend. Owen was beloved but could not avoid the fight. Rocky is the only one remaining here tonight. Nessa was forgotten by her friends and disappeared. Yorick lasted longest but still left as Rocky feared. Myron is the mystery my observation cost. I know I saw him playing too, but now it seems he's lost. Watching from a park bench on a dark and lonely night, only one remains here to protect and give us light. I wonder how much longer Rocky can put up a fight. A transcribed collection of haiku graffiti from site 42. Life without a name. Perhaps you should be its friend. Life returns to death. A float in a lake. Monsters come in from the fog. So it floats in peace. Black, white, yellow, red. The hanged king above it all. Black, white, yellow, red. Hate sealed in acid. Kill it as soon as we can.  All things are unclean. Pure water washes away. The world that we know. Visions of five sides. Coven of mushroom eaters. Can you trust your past? Weapon of Vishnu. Chimpanzee in a trench coat. Gift from Lord Shiva.  A neck snaps where no one sees. Rain at site 19.  You should lock it up. Keep it a legend. The burned one soars overhead. What's your sacrifice? Portrait of a man. We all die cold and alone. Forever in paint. A cold and gray death. Don't look too long or we'll see. A portrait of you. A city in song. The one that never belonged. We can help her heal. I'll speak not of it. Some forest. Names are not safe. This is just karma. In the storm she digs. Mother's love lasts forever. Now then we can rest. Lavender and death. Does this doctor know what's best? Were you ever well? Friends from childhood. It's a small world after all. Careful what you read. A world of green dreams. You can expect a fair deal. Come back anytime. Two halves of the same. Look at all the friends I've made. Purpose forsaken. The primeval king strikes a bargain for mankind till the black moon howls. The first of many. Florida saves all the earth while he walks through walls. He played Elrond, right? Why is he playing Cain's sled? I want a refund. To create greatness. An artist must suffer well. Gladly I endure. This here is horseshit. And I can't stop eating it. Happy not death day. Once in a blue moon. The world is in agreement. The blue moon screeches. All life becomes death. Green flourishes a farewell. And then it doesn't. I don't remember what I was writing about. So I guess I'll stop. I'll do this later.


He raised his hand. I wish my son alive again. The lucky charm fell to the floor, and he looked at it with fear.


Once again, please remember to enter and leave quietly as you can if you are leaving midway through the talk and don't forget to tweet. This is Till Maas. Thank you. Thank you very much and welcome to my presentation. Yeah, say this for later please. So I will be talking about let's encrypt and best practices. First I start with a little introduction about me. I'm from Aachen, Germany. It's a small town near the Belgium and Dutch border. Next biggest city is Cologne and we are for example famous for our printing. It's a nice bakery thing that if you would like to try you can try it here or later I will give some to the Fedora booth because I'm also involved with the Fedora project as a volunteer. Started a while ago as a packager and also patching all the things that I needed to fix for example in the infrastructure and recently I'm involved in the release engineering process, mainly cleaning up packages. As a day job I'm a penetration tester at Retin Pen testing and I'm doing a lot of security stuff and therefore I'm now here to talk to you about especially transport layer security more or less. So who of you knows transport or TLS? Okay so most of you for those who don't know it it's a basic protocol that you need to secure a lot of services. For example HTTP for websites or mail services with IMAPS or SMTPS and of course you can also secure file transfer with it. And to use TLS properly you need TLS certificates and if you don't have the right certificate you see errors like this and usually you don't want that your customers or your users are seeing these errors. So how do you get a certificate? For this you need to go to a certificate authority and the author CA basically says that you have certain cryptographic keys and they belong to you so that everybody knows which keys to use to access your service properly. And what do you think how many certificate authorities are currently stored directly on the Fedora system because a system needs to know which certificate authorities exist. Was there 100? 200? Yeah 200 was right. So you get something?  You can take it later. Yes that's right it's about 202 but these are only the so-called would certificate authorities because every certificate authority can also allow others to issue certificates in their name. And these are more or less several thousand authorities nobody really knows how many they are because you don't need to register for them. But this graphic is from the EFF the Electronic Frontier Foundation and they just checked all certificates that they could find for which certificate authorities were issuing them. So we have lots of certificate authorities. Why do we still have connection errors like this one? So why are people not using certificates properly? Or why is there no TLS at all used? And they even cite not enforcing TLS even though they could be using could be enforcing it. And when I ask people why are they not using TLS for example if they're running a service or even sometimes our customers don't actually enforce HTTPS or use it properly there are several reasons that they tell me why they don't do it. And one reason they state is that's not fast enough. But as you can see from on istlsfastia.com the TLS has exactly one performance problem it's not used widely enough and everything else can be optimized. And if you're still wondering what you need to do this website also contains a lot of information about how to optimize TLS. So performance is not really a proper reason and for example at Google there's only about one percent of computational overhead for TLS and everything else is used to provide the actual services. So this reason is not valid but still there are other reasons for example certificates still cost maybe cost too much money. That's also not true in all cases because there are already some CAs that provide cheap certificates or at least or even free certificates but sometimes only for normal users not for businesses.  Yes it's also very hard to set up TLS properly. So for example if you want to get a certificate you first have to get an account at the certificate authority then you have to validate your account then you get instructions how to create a so-called certificate signing request where you state what kind of certificate you would like to have. And then afterwards you also have to prove that you control the actual server that you want to have the certificate and after a while you get the actual certificate but then you also have to configure those servers properly to use the right certificate and also do it securely. And to fix all these problems the Mozilla Foundation the EFF and the University of Michigan started a project called Let's Encrypt a few years ago and they basically created a new certificate authority and it's three important properties it's free automated and open and currently it's already available but still in public better so everything it's not it's not finished and it's not not everything is already final and I have to say I'm not directly involved in the Let's Encrypt project I'm just more or less a very interested observer so if I tell you some details it might be that the actual project might change in the future or maybe decide to implement features in a different way than that I'll find it out I only had access to public resources to get this information. So what makes Let's Encrypt special the first property is it's free and it's free to use completely but this doesn't only mean that you get free certificates you don't have to pay for them but it also means that you can use the service of Let's Encrypt and for example they are about 20 or more businesses who already include Let's Encrypt as a service in their service so if you go to one of these hosting providers you can just enable TLS and then you will get a certificate from Let's Encrypt for free and you don't have to worry about anything it will just work and for example this is also an impact on other services like WordPress and they are also planning to provide TLS for a lot of their blogs so if you host your own domain there you will just get a certificate and don't even have to decide about this it's not final yet but you can already see that they are getting the certificates and it's not only free to use but it's also free as and free speech so all information all code from Let's Encrypt is free software you can have both the client and the server code that you can look into and you can also use it and the client provides a Python API that you can use to implement your own client and also the server provides a defined API using the ACME protocol which is a new standard written by the Let's Encrypt project and therefore there are already different clients that you can use and they all fulfill different needs so for example the official client is more or less the biggest client that does most of the stuff and then you can see that there are also clients that try to minimize the feature set and if you want to provide your own client in any language you also find libraries for probably in the future every language and there's even and even if you still like the old way how certificate authorities work with the website you can even use a self-hosting website which just implements the Let's Encrypt client in JavaScript so you can download this website one open it in your browser locally and you get all the steps as before so everything is possible but the official client is actually the one with the most fun especially if you don't want to spend a lot of time because it does all the things automatic and if you're using for example Fedora you can already install it in the latest release and it's already packaged in EPS 7 but it's not quite finished yet so it is possible to get certificates but not everything is already automated so now we get to the next property and it's also open so you can get all the details about the client but you get also all information about what Let's Encrypt does so there's this project called certificate transparency and it's basically a distributed system of several servers who all collect all information about certificates that are issued and Let's Encrypt uses this to store information about all certificates that were ever issued by Let's Encrypt so it's completely transparent if they for example by accident issue a certificate for the wrong domain because of some vulnerability also you can for example see that a certificate that you're connecting to is really issued by the certificate authority and this is already required for example for certain certificates to make it sure that the browser Chrome displays them correctly but not all certificate authorities use it already and Let's Encrypt and I forgot this is also a website not provided by Let's Encrypt but I think Komodo it's called crt.sh for certificate search and there you can search for all these certificates and Let's Encrypt wants to go even wants to become even more open they also plan to publish all the logs about the interaction with the client from the client with the server so you can even comprehend why how users authenticated to the Let's Encrypt server and everything is transparent and now the final but the only problem is that Let's Encrypt is still in beta so there are still things that need to be improved and need to be added and there are also some restrictions in place for example since everything is automated you can only get five certificates within seven days per domain and also each certificate can only contain up to 100 host names so depending on your use case this might restrict you a little bit and actually and there's another problem or there's another restriction and this is that every certificate is only valid for 90 days so this means if you really want to renew every certificate at the latest moment you only you can only have about 60 certificates per domain because otherwise you won't be able to renew every certificate and but usually if you have a service that requires a lot of domains it might be that's the restriction does not need to be for the domain but for a so-called for us domain for public suffix because you do not only have server we just start sub-domains for example FedoraProject.org but you could also have domains for dynamic DNS services and then you can get these domains added to the public traffic list and then the restriction about the or the weight limiting only applies to these sub-domains so you can so each domain for example below these domains can have up to five certificates within seven days and this is also this is not only used or the primary use case of this is not let's encrypt but actually you should you do this already if you're in this situation because this list is also used to separate different domains that have different security properties so for example in browsers you don't want to have one during DNS sub-domain access cookies from another during DNS sub-domain and the only way that the browser can know that it should separate these domains is if it's properly stored in the public suffix list there are also some other restrictions that let's encrypt currently has that will probably not change in the future so for example there are a different kind of validated certificates and in an organization validated certificate you also have additional information about who the certificate belongs to and in extended validation even more and this is something that let's encrypt cannot do because it's an automated process and then you don't have the possibilities for to for example validate that is a certain organization that requests the certificate also code signings out of scope for let's encrypt and they decided to not sign IP addresses at the moment especially because you still have a lot of users that use dynamic dynamic IP addresses and currently it's also not possible to get certificates for military certificates for military domains but this should not be a problem for us there are some features that are not yet available but are planned for the future for example wildcard certificates are currently not possible so you have currently you have to get a certificate that contains all the host names that you want to use it for and the problem here is again that when you do it when you want to have a wildcard certificate created automatically you need to make sure that you really control you really have a person that is allowed to get a wildcard certificate and for example you don't want people to get wildcard certificates for all the dundee and s host names but the current but that it's not easy to verify this properly and as you probably know if you ever seen a python utf unicode encode error international domain or writing for proper encodings is also hard therefore international domain names are currently not possible and elliptic curve cryptography is also currently not implemented but planned and it might be that you can use let's encrypt also for secure mail encryption with asmime in the future but still something that's not done yet and currently let's encrypt is already trusted by most systems but there are still some systems that might not accept let's encrypt certificates that valid certificates for example java might not know the actual root cr that's used to sign let's encrypt certificates or android systems don't support it and in blackberry it's currently it's going to be included maybe the biggest problem might be still windows xp and it has actually a problem with if it's not updated enough with the kind of kind of signing algorithm that's used in let's encrypt certificates but this is handled by a new service pack but the other problem is that let's encrypt is currently using is currently a subordinate certificate authority and it contains this restriction for dot mill or military host names and therefore and this is something that windows xp doesn't seem to handle right now so it just does not accept the certificate but this might go away if let's encrypt gets included into other might or maybe doesn't go away for windows so skip that so if you have now a proper certificate and want to use it and you have still some things to do to make sure that you're doing this correctly so for example if you have any links make sure that they are already using https because otherwise you might already might have set up a proper server that provides https but nobody is using it if you still have links that don't use https if you have a lot of links that you need to update for this and don't have the time yet there's a feature called upgrade insecure requests that you can set in your http browsers and then make sure that the browser automatically updates insecure requests but this is still not the best possibility there's also another option that's called strict transport security and this basically says the browser that certain domain should be accessed over https for a certain amount of time after your access after the browser accesses once via https so this makes sure that a user cannot even access the website anymore insecurely except for the first actually request ever to this website and even this can be mitigated because google maintains a so-called hshts preload list and you can add your domain to this one and then the browser already knows which domains will always should always be used via https but you should do this only after carefully testing that everything's working because once you're on this list it's really hard to stop using https so if you still have one subdomain that's not actually working well with https but requires plain http you have a problem if you have in the strict transport security list and for example in the fedora project we are working several years now to migrate all services from http to plane to proper https with strict transport security so now if you have the proper certificate and you have it configured properly there's still another problem because for example let's encrypt might be a very good and secure certificate authority but there are thousands of other certificate authorities and who knows what all these names have in common yes yeah so you also get some printed afterwards and exactly so these are former certificate authorities or sometimes also still operating certificate authorities but not trusted anymore that the hacked or contained for example the certificate or were included on notebooks so that everybody had access to the private keys of the certificate authority or they issued certificates not to the proper owner of a domain and you can also avoid this kind of problem by using public key pinning so initially the certificate authority certifies which public which encryption key to use for your domain but you can do the same with an http header and then the bowser um knows which keys to use for future request and if there's any other key used it will deny the request or if you want to experiment with it first you can also make the bowser just report problems with false keys and this is for example the feature that made it even possible to identify all these problems with certificate authorities and there are probably even more certificates out there that are not in use by the proper domain owner but nobody really knows because it's not properly reported and if you're doing this you have to make sure that your keys are properly stored so and you have a backup key for example if you now use access to one encryption key and all bowser's think that's the one key that you need to use to access the website then the bowser's will not be able to access the website anymore and the system even mandates that you should have at least one second backup key that you can already specify but of course to make sure that this one is not compromised at the same time at the primary key make sure that's properly hidden and there are still even other options that you have to set to make sure that TLS is properly used so for example you can you have to make sure that you also use the right encryption after your certificate is set and Mozilla allows you to set up to get the proper configuration depending on your needs because if you have to for example support all systems it might be that you have to lower your security but if you have a modern system like Fedora you can even make it better so if your clients are using the modern system and there are so many settings that I cannot get into detail about them but there's one page by Kralis the SSL labs where you can test your website and you get information about what's all good and what's bad but eventually the good news is that the let's encrypt client will support all these settings and make sure that you can select the security level that you would like to have so with this I would like to conclude my presentation and would like to thank everyone who allowed me to use their pictures I would also like to thank you and I hope you enjoyed this presentation and even if you there's something that you didn't like please make sure that you fill out the feedback form because it's really appreciated as a speaker to get any kind of feedback for example last year I only got one feedback mail and I heard that the speaker for most feedback mails got only 10 so that's not so good for a speaker to not get feedback thank you very much and I'm not here to answer any questions okay so the question is how long will it take to learn everything required to set up a website for example running nginx to use https properly so if you're using so if the official let's encrypt client is finished and it already ended with support nginx eventually then it's just it just takes a few seconds because you just install the client and run it and then it will get the certificate and also update the nginx configuration so this will be the best case if you don't know everything there's already a lot of documentation about it but I can't really estimate how long it will take for you but at least getting the certificate will be very easy because you can also use the client just to get the certificate in a few seconds without it having when it does not already support your configuration so the question was if you just have to go download the client and tell it something about your configuration and yes you only have to tell it you might only have to tell it which domains you actually are using unless it is also possible for the client to get this information from your configuration so you get stomping up about just combined so the question is how easy is it to automate the renewal of certificates and it is as well very easy because you can just run the official client in a cron job like every 60 days or even maybe more often in case you skip some ones and it will verify whether or not it needs to renew the certificate and then do it and it's currently recommended to do it after 60 days the question is if you can sign subordinate certificates with that encrypt and this is currently not possible the question is if there are plans and I don't know of any plans because yeah I think you have the same problem currently at least with wildcard certificates because you would like to delegate trust for a certain unknown large set of domains and this is really hard to do it properly in an automated way so the first question was about the location of the servers that issue the certificates whether they are only in the US I'm not quite sure yet where they are located properly in the US but there are plans to locate them at different to have validation from different locations on the internet to make sure that there's not a local attacker directly near the computing center of let's encrypt and the other question was okay so the question was whether the server code is also open source and yes it is it's written in go and you can use it to set up your own certificate like let's encrypt for example there was a question at another conference about whether or not it would be possible to sign dot onion addresses with let's encrypt and this is currently not possible but you could use all the set up the infrastructure yourself and then use like a dedicated certificate authority for tour hidden services okay the question was since it's an automatic process what is there what is done to prevent someone from register registering an address for google so the even though it's automated there's still a check like classical certificate authorities do and for example you have to make sure that you have a certain value in your available on your document route which let's encrypt tells you a secret value and or random value and then if you provide it then let's encrypt we get it and then more or less know that the certificate is that the domain is yours it's also possible to use dns so you have a dedicated dns entry where you have to use this random value which makes it easier if you have a lot of domain names that you need to register and there's also some very interesting thing planned called proof of possession where you have you can use all the certificates or if you have a certificate already you can make use this one to prove that you where are the actual owner of the certificate because it was used already and but I think this is still planned and this is also something where you can use certificates from our other certificate authorities to have more or less like a trust on first use process so you once got a certificate and then it's more or less locked down to all people having access to this certificate or all certificates issued afterwards so the question was how a certificate relocation handled and I believe there's probably a regular cl there's also a signed ocsp responder which is an interactive method to revoke certificates and the other question was whether expired certificates are put in the cl and this is actually the good thing about the short validity of the certificates because you don't need to put them in the cl they are already invalid because they are expired so this also makes it easier for let's encrypt to keep the workload on the ocsp responder or small because they have only a signed information about the certificates that are still valid and that were issued within the last 90 days so the question was if there's a defense against registering domain names that look like official domains and there's a list of domains I think maybe the top 100 Alexa list or also a list about financial institutes and other high value domains and it's currently impossible to register domains that are too similar to them or are more or less the same and this even but this is also the also something that's currently a little bit developing for example it was possible for some people to register domains that looked too similar to to a banking domain but not by not by intention but more or less by accident so they have a domain that's similar and they got the first certificate but then later they couldn't renew because the restrictions became more restrictive okay so the question was whether I know any attacks that or any phishing site that's already using let's encrypt I think there were some phishing sites using let's encrypt but let's encrypt is also using the safe browsing technique used by browsers to identify malicious websites to also make sure that they don't issue certificates for bad domain names so the question was why are certificates only valid for 90 days so there are several advantages of doing this the one is that the workload for let's encrypt is reduced because to make to use this OCSP service which allows it to verify whether certificates were reworked or not other certificates need to be signed and since it's an automated service let's encrypt could have millions of certificates that they need to handle and with these 90 days they have a little bit of restriction in there also it makes sure that if you have a compromise of private keys of a certificate for example with hard bleed then you only have to


Here's why you should never pay it forward in a drive-thru. Although the intentions are good, paying for the next person's order can cause major headaches for employees who have to keep track of who is paying for what. Things get especially hectic during the holidays with long lines full of people looking to spread holiday cheer. If you find yourself in a pay it forward chain, take your order, leave a big tip and go.


This is stock number AT171B. We are here at Summit Automotive in Fond du Lac, Wisconsin. You're new and used half-ton truck headquarters. Remember, we are the guys with the trucks on 41. Today, we are taking a look at this super clean 2013 Chevy Silverado 1500 crew cab short box. This truck has the 5.3 liter V8 motor. From this HD video, you will be able to tell that for the age and miles on this truck. It is in excellent condition. Headlights are nice and clear. The lenses are mocha steel is the color. I'd like to point out that we shoot all of our videos in 1080p, so if you have HD capabilities on your computer tablet or a smartphone device, turn them on now because it is like you're right here looking at the truck with me. Factory alloy rims. These are the Z71 rims. Pretty nice condition. It has the 265, 65R16 or R18 Cooper Discoverer tires. These tires have right around half the tread left. Maybe just a hair more. Front fender is in nice condition. The hood is in pretty nice condition as well. You get the chrome trimmed grille. This side of the bumper is in nice condition as well. Passenger side rim, not bad. As we go down this side of the truck, you can see just how clean the body is, how reflective and mirror like that paint is. We take these HD videos so if you are far away or even if you're close by and just cannot make the trip down, you can still see the vehicle, hear the vehicle, and have confidence in what you're looking at before you even get here. So it does have the Z71 off-road suspension package. The cab is in nice condition and it's always nice to see trucks like this with a little bit higher miles to make sure you're not getting something that's going to be a problem, but really nice down this side. Back rim is in pretty nice condition as well and the back tires have about as much tread as the front tires. Framing underbody, pretty nice condition. Those box rails look like they're in really nice condition. That's really what you got to look at on higher mileage trucks like this and believe it or not, there are 130,000 miles on this truck. Framing underbody is in really nice condition. The lower rockers are in pretty nice condition considering the miles on here and I didn't see any rod or anything on the cab corners which is a good sign. As we come around to the back you can see it does have the reverse sensors. Full towing package which includes a receiver hitch and seven pin wiring. The tailgate is in nice condition, no dents or dings on that and it does have an ARE hard locking tonneau cover. The bed, pretty nice condition, a little bit of light due to usage but that's pretty normal on a 130,000 mile truck. That shuts nice and solidly and as you go down this side of the vehicle just as clean as that passenger side. Back rims in nice condition too. Doors are in nice shape.  There are no rips, there are no tears in the seats. You get the 40, 20, 40 split bench seating and the seats are in really nice condition. Power driver seat, got ducts on limited floor mats in the front and the carpentine is in pretty nice condition throughout. Auto headlamps, information center controls, power windows, power locks and power mirrors. As we hop inside the truck here you can see that this one has 130,949 miles and that the instrument cluster is very nice and clean. You get Bluetooth audio controls on the steering wheel, cruise controls on the left and the steering wheel is in pretty nice condition. Just a little bit of wear at the top but nothing bad. It has the six-speed automatic transmission turned out full-wheel drive and you have the dual climate control right there. Power pedals, backup sensors and stability control.  You have an AUG's jack right there. It has the on-star capabilities up there and home link buttons up there. Headliner is in pretty nice condition. No major rips or tears and the passenger seat is in nice condition as well. Carpentine is nice and clean. We'll take a quick look at the back seats and then we will check out under the hood. The back seats are just as nice as the front seats. No rips or tears back here. It does have the latch child safety system for car seats. Rear window with fixed glass window with defrost and the carpeting and floor mats are very clean back here. You can see that those seats do go up for extra storage and we got all-weather floor mats back here. Take a quick look under the hood. I'd like to thank you for checking out the video today. Hopefully from the video you'll be able to tell. We'll have been able to tell that this is a really nice truck considering the age and miles on it. Under the hood we have the 5.3 liter Vortech V8 motor, active fuel management. The engine bay is very clean, runs very smooth. This truck has been fully safe and inspected by our service shop. Has a fresh oil and filter change. All the fluids have been chucked and topped off. And this vehicle is 100% ready to go. To see more pictures of this truck or one of our other 400 new and used cars, trucks, SUVs, minivans, Wranglers, half tons, three-quarter tons, one tons, you name it, we got it.  Videos of every single used vehicle that we have, all at summitauto.com. If you want to check out just the used inventory, you can go to truckson41.com. That's truckson41.com.  Ask for one of our sales associates to make this truck yours today. If it doesn't say sold in the title, it's available. Once again,<PHONE_NUMBER>. And if you want to check out more videos like this one, you can go to youtube.com. Remember to like, subscribe, and share on this truck and all the videos that you see there. In fact, in a second, you will see a link to subscribe to our YouTube channel on your left. A link to more half-ton truck videos like this one on your right. And if you have not been to our website on the bottom, a link to this vehicle on our website, click those check us out. We really look forward to helping you with this super clean 2013 Chevy Silverado 1500 crew cab short box. Thanks again.