With the first decade of the 21st century coming to a close, a look back at the past few years reminds us of the rapid development of technology, which has launched us into the information age. Innovative and imaginative engineering has expanded the electronic domain to include wireless networking, cellular communications, global positioning systems, satellite radio, and many others. All of these devices continue to advance in speed, efficiency, and complexity. Paralleling this growth is also the changing cost, as customers continue to demand a lower price, manufacturers have started to push the majority of their production overseas. This low-cost, high-volume competitive production means that most devices that include integrated circuits will be fabricated outside of the country in which they are produced. This makes all of these devices vulnerable to an attack from potential competitors or even enemies of its designing country. So what if an adversary were to insert malicious code into a hardware design, causing it to appear as if it were operating as expected? However, in reality, the device is leaking sensitive and important information to whoever re-engineered the device. This kind of Trojan is built into the hardware and can be activated unknowingly by its operator. This is what we are exploring. Thank you very much. All right, so that was a short introductory video to get us started. But the talk is a demonstration of hardware Trojans. And my name is Dr. K. And the crew you see here, they ride with me. We came here. We're kind of, although we are a research group at University of Delaware, we're kind of more like a ship of pirates. So if you look at the back of our shirts, what you'll see is written there is, we take pride in our junk drawers. Crazy ideas are encouraged. We can't tell you everything, but you can still ask. You simulate it, we build it. Our mess is a sign of work in progress. And our toolbox contains more than just MATLAB. No device is safe from disassembly. And like everyone here at Defcon, we love what we do. Yeah. So actually, what we do is many different things that anything that involves making electronics. And this stuff that we're presenting here is just a part of projects we're involved in. That ranges from writing some software, firmware. We build FPGA systems. We build special instrumentation, for example, for solar energy applications. What we're showing here today is kind of reverse engineering. We design our own printed circuit boards. We do custom integrated circuits, both analog and digital. And we're actually pretty good at the gigabit data link design, I think so, and power conversion. Now, before Ryan Hoover, who is a graduate student and the crew will give you a demonstration, I just want to get some definitions in place so that it's clear what we're talking about here. So how many people here have started hacking their Defcon badge? Let's see a show of hands. Yes. All right. Good job. So what you guys are doing, that's probably, we call that hardware hacking, right? It's a creative process. You've got some piece of hardware, you're trying to figure it out, trying to make it better, trying to discover it. Now, hardware trojans, that's kind of similar, but it involves malicious intent. So what you have is you have a party who is not trustable or has bad intentions, and they insert some bugs, let's say, into your hardware design that under specific conditions perform something that the user is very surprised and perhaps unpleasantly about. Examples of this could be a time bomb trojan. So let's say you have a cell, a GPS system, and on a certain important date it stops working. Another example is data exfiltration trojan, and that would be, for example, your cell phone would somehow covertly leak or exfiltrate some secret information, like let's say your PIN codes or whatever. And that is the focus of our talk is data exfiltration trojans, and we will demonstrate you some possibilities for doing data exfiltration. Why should we be all concerned about trojan, hardware trojans? Well, I would say that the audience in this room probably not in danger, huge of a hardware trojan, because we are all hackers, right? We question everything we get, right? You give us a cell phone, we'll test it out, we'll figure it out, but we're a small part of the population, right? 99% of population, they get their electronics, they get all these devices in their cars and their refrigerators, they go to their ATM, they don't know what they're using. So, and increasingly, you know, electronics is such an important role in our lives, right?  Now, the problem here is that manufacturing is globalized. So, when you look at your cell phone and it says made in China, well, the truth is that actually the chips inside of that cell phone could be made in Taiwan, Korea, Singapore, United States, but the problem is they all use second and third source suppliers, so, you know, you buy a cell phone today and buy the same cell phone tomorrow, it may have the same parts but manufactured somewhere else. So, the problem with that is you might not control that process, so that opens a possibility for a malicious party to insert something into your design. So, let's talk about what can be changed. So, there are three levels in hardware that can be changed. Now, I realize the audience here is probably also very familiar with firmware and hacking firmware, so that is not shown here, but that is another way that you can change a hardware design, but from the sort of really low-level hardware perspective at the chip level, the three levels that you can do this Trojan alteration is you can do it at the HDL source code, you know, people write code that becomes hardware, and you can insert your malicious code in there. Now, people have gotten clever in their obfuscation techniques, their obfuscation tools that will take your code, mangle it, so it's pretty hard to get in. So, then what you can do is take it to the next level because people typically obfuscate blocks, but blocks still communicate in predefined ways. So, then you can get in between the blocks and start watching the buses between them and attack that. And finally, the most I would say treacherous way would be to actually modify the mask set. You know, the integrated circuits are produced by making masks, and you know, a leading microprocessor has a billion transistors. So, let's say I add a few thousand transistors that will attach to some IO port or PLL, you wouldn't really have an easy way of finding this out. So, these are the three ways, and now I'm going to give it to Ryan Hoover who is going to show you the demonstrations. Okay, so, we decided to try and find a way to show data exfiltration Trojans without actually sending off hardware to a fab, because that would be insane monetarily and time wise. So, what we decided to use is called an FPGA, which stands for Field Programmable Gate Array. What that is is basically a device that allows us to program basically a hardware design in VHDL, which is a hardware description language. And then that is synthesized, placed and routed for a specific FPGA. The vector is loaded in that tells it which gates to switch to give us our actual hardware design. So, we're basically using an FPGA as a simulator for a real semiconductor device. We chose AES Encryption, which is a six-year-old algorithm. It's widely available online, I think Canoe has it up on the web. And so, AES, the most important thing to get out of AES obviously is the encryption keys. So, we will be leaking them out via our hardware, which is a Spartan 3E board. That's that guy right there.  We have a PS2 keyboard, which is connected to that, and an LCD display. Now, once our Trojans are triggered, they will be triggered by the keyboard, obviously, where it could be any kind of trigger. You could have a specific text that you enter that activates the Trojan, and then everything thereafter would be leaked via our covert communication channels. So, there's two different methods that we could insert this, the Trojan. And the first is with tapping into the buses. So, there's buses in between everything, in between every module in a semiconductor device. So, in this case, we're tapping into the bus between the keyboard and the AES cord with a trigger module. And what that does is it just sits there and waits until it gets specific input. Once it's activated, it sends another signal to our transmitter module, which when it's turned on, it wakes up and starts transmitting via that covert communication channel. And that it grabs the key off the bus between the key and the AES cord. The other method that we came out with is actually inserting this Trojan into the Harvard description language for the AES cord. And, of course, you have to have the code in VHDL or VARALOG in order to insert it in this manner. So, now we're going to show you them to you. We're going to demo them. And I want to say, before we do that, that we have a video of all three of these demos and the little blurb you saw earlier up on our website, which is up on the screen right now if you want to jot that down. And it's also on the CD that you guys all got in our slides. And I'd also like to mention that after our talk, our Q&A will be located at the Harbor Hacking Village, which is Skybox 209. We'll be showing all this stuff and you guys can come talk to us. And we also have a bunch of gear that we're giving away. We're giving away a free oscilloscope. We have a contest. And we're giving away a bunch of other stuff. So come check us out. And I'm going to switch over so you guys can see what's going on up here to video input. Okay. So the first thing we're going to show you is an optical Trojan using our Spartan board. And basically the premise of this is that the human eye can't detect changes in modulation above one kilohertz. So most devices that we have today have some kind of LED or backlight or whatever that if it were modulating, you wouldn't be able to see with your eye. They're usually solidly lit, but if this hardware were Trojan, you wouldn't even notice it. So Ray is going to show you right now. He's going to run the optical sensor over a solidly lit light and you'll hear nothing because it's not flickering at all. But he's going to go ahead and activate the Trojan. And you can hear modulation in the LED. It looks exactly the same as it did before. So there's no real change in what we can visualize with the device. And so you look at that and you're thinking, okay, it's a board. Like, how does this translate to anything that's in my life? We've got over here a Linksys router. It's a WRT-54GL. Some of you guys might have those. And we've actually done the same thing to the firmware on the Linksys. So Steve's going to run it over the first Linksys, which is not Trojan. And you don't hear anything because they're all solidly lit. And then the one below it actually has a Trojan on it. And it looks exactly the same. But it's actually transmitting Morse code. So now we're actually playing around with being able to spot stuff like that from far away. And that is our spying scope set up here, which we'll have up in the Harbor Hacking Village if you guys want to check it out or we'll play around with it up there for you. So come see us afterwards for that. We're going to move on now to the thermal Trojan. And we're going to actually switch the video and put it over to the thermal camera here so you guys can actually see what's going on. Now the thermal Trojan operates kind of as you would expect. We're heating up and cooling down, actually in this case a resistor, which I mean it's one of the little guys that you guys have on your badges and is on almost every device that you have. And we also have another version of this. We're not going to show you today that actually like saturates the processor or the FPGA with operations so that it will heat up and cool down pulsing as, you know, when it's heated up, it's a 1. When it's cooled down, it's a 0. So right now it's not doing anything. Ray's going to trigger it. And you guys are going to be able to see it right here. So that's our thermal guy. And we're going to switch back the video so you guys can see the last guy up here. The last is our radio Trojan. And we implemented that because our board actually has a 50 megahertz clock built in, but like any electronic device, like this guy has a 12 megahertz clock, that generates a square wave signal all the time. So what we're actually doing is taking that square wave signal and sending it out on unused pins. So like, you know, an iPod or a phone has like 32 pins on its connector, and you're only using about five to six, sometimes more of them, but not all of them. So you could very easily modify hardware design to send out a Trojan signal on one of those pins. And that's what we're going to do right here. So he's going to turn on the radio here so you can hear the radio noise. And then he's going to activate the Trojan. And you can hear there's not even an antenna on there. And you can hear pretty clearly from that far away the signal being sent out, which is the AES encryption keys. So those are our Trojan demos. Now I'm going to hand it back to Dr. K. All right. So to wrap things up, we've shown you three demonstrations, an optical exfiltration technique, a thermal exfiltration, and a radio. And we've also used an off the shelf board, 150 bucks development board for FPGAs, but you can see that normal devices that everybody uses like a router can be modified in the same way. So I'd like to finish by saying that this is an emerging threat because we are more and more using electronics devices and people not necessarily familiar with the electronics are using it who don't question whether it works or does something funny. And systems at risk include military systems, financial systems, but also household devices. The purpose of the work here was to educate and to demonstrate people that this threat can is there. And of course, the more difficult question is how do you protect against hardware Trojans? And I just like to say we're continuing to work in the area of hardware security. We'll be having the Q&A in Skybox 209. And as Ryan mentioned before, we have a number of good stuff to give away. So please visit us and check us out in 209 and hardware hacking village as well. There's a lot of good stuff there guys. Thank you very much.


Everybody traveled safe everybody's doing well. I'm ready when you are Yeah, well, this is we're excited to be here at the combine and this is an important exposure We went through a very productive round of February meetings So we're able to set the board based off the film and now we get into this part of the process And I know different people see the combine different ways But this is a very important exposure for us any touch point with the players that we can have is Critical the the interviews the formals the informals Seeing them work out and compete and just being here with all our peers agents if you handle this week the right way It can be very productive. So we're excited about being here. Yeah, well, the most important thing is the makeup We're we're here working to build a championship roster one player at a time and to build a championship roster you have to have championship makeup and you have to have the right kind of culture and So assessing the makeup and assessing the character Making sure the players fit our ethos smart tough highly competitive players That's always gonna be number one and what we do everything else matters the tape obviously matters and and what kind of football players they are and their talent level and yes, the measurables and The statistics and all those things matter. It's all a part of the equation But number one is always gonna be the makeup Yeah, well are the elephant the room, right? We have some big numbers associated with four players Particularly our quarterback. We have a big cap number and all those players with the big cap numbers. It's not their fault They're just good professionals that come in and do their job and I want to be clear with that But it is a challenge. It's not a I wouldn't say it's a It's a problem. I would say it's a challenge and something we have to work around so it's important to Make sure we go through the process of finding the right ways to open up some cap space and And we have to add players and we have to improve this roster. That's important and when you're at different points There are times where you'll handle the salary cap and handle contracts a different way Some some teams feel like they're one player way and they're gonna make a big splash in free agency and spend a lot of Money. We're not at that point. We have to be patient. We have to be patient We have to be selective and we have to be cost-effective So where we are with our team, we have to figure out ways the right ways to create cap space and then make sure we're patient And and we make we find value Well, there are a lot of different ways whether you're talking about contract extensions Whether you're talking about they're gonna be cuts. They're gonna be trades They're gonna be contracts that we do convert and we don't I think another elephant the room is Are we rebuilding are we are we trying to win now and I would say we're trying to have our cake and eat it too We want to be smart and and we don't want to make decisions that are gonna hurt us in future years But we also want to build the best team that we can so we're gonna work hard to To be smart and calculating our decision-making, but we also have to improve this roster this offseason and add competition Well, I think I think every the seat I sit in I'm a general manager. I'm one of the 32 So what I have to do is look in the mirror and and look at what we're doing in Atlanta I can focus on that area. We're doing in Atlanta To help this part of the process And so I have to make sure that number one is whether we're talking about people in the person in doing that And then also the pipeline every time you're bringing in people whether you're bringing in Coaches scouts or any area of the organization Make sure you're bringing in minorities and and everyone has opportunities to get in your organization and then grow So for me personally, I just look in the mirror and make sure that we're doing the right things here in Atlanta Yeah, absolutely. I think it is and and look the league is is gonna look at The situation every year and and I know the league is is trying their best to improve in the areas that they can But I do I think for me I can I Can't solve the we can't solve the problem for every single team But we can look in the mirror and do the best we can for the Atlanta Falcons Well, we look for succession plans at every position we have to add to the roster at every single position and I think where you can get in trouble is if you if you reach and you feel desperate in certain areas and But we're not going to do that and and yet we're gonna evaluate We got to we actually had formal interviews with several quarterbacks yesterday and there's a good group in this draft There's different flavors and so we're gonna evaluate those players and at the appropriate time we'll add to that position But I think you can get yourself in trouble if you if you reach and you don't feel good about what you're doing I'm not gonna say anything about any particular players or any because if I answer that question We can go through the entire roster and talk about who they are But I would say we're gonna look to add to every position And try to improve this roster Well, I would say if you go through each position in the draft There's there are some positions where they can be a little more top-heavy and it's not a strong midway through the draft And there's some positions that there might not be a player at eight that we love but yet we know there's depth in the draft So we're still going through that process and I wouldn't say where we see the strengths and weaknesses But but but I would say they're good players at every position the the wide receivers There's some we met with a lot of those guys last night, too And there's some real good receivers in the draft again some different flavors depending on what you're looking for But and there's value at the top and throughout the draft at receiver I'm glad you got the question in because you've gotten interrupted like four times, man. You're persistent So Cosmith's a stud it's funny when people ask about Cosmith always showing my phone Because I get texts from him or calls every night about 10 10 30 11 o'clock and he's watching film And he wants to talk through something and he just doesn't stop This is all he does all he cares about his football and building a good team his his mind's always going That's the way he's wired So he's a he's a stud. He's a really hard worker, and he's just obsessed with what he does Well, I think of that position when you when you go historically and look at edge rushes that have been successful They've come in all shapes and sizes. You've had the tall long You've had the undersized and you've had guys with great 40 times guys that don't have great measure balls They come in all shapes and sizes and so it's just about assessing can that player get to the quarterback And is he a true pressure player does he win because when you start focusing on just the measure balls And you try to create something sometimes you can get yourself in trouble So I would say the most important part is is he winning those one-on-one matchups? It's not something we can talk about right now. There's there's no update on it And when there is we'll let you know it's it's great Matt He's a great professional and he works it from my vantage point from my standpoint I really appreciate Matt and what he's been in terms of a leader in terms of a worker In terms of professional everything he's done here in Atlanta and So I would say for from my standpoint from my vantage point. It's been excellent. I appreciate him Yeah, that's exciting and I've said it before obviously Kirby and that whole staff that whole building They did a great job building what they've built there and and it is kind of overwhelming when you look at all the players on that roster particularly on defense but also on offense they have some really good players and so and there's so many local Players from Georgia that are really good. I'm hoping we actually can have the local day We weren't allowed to have it last year with COVID But if we can have that that's exciting because there's a lot of kids That that grew up in the Georgia area that ended up in some different areas that are really good football players So but we're excited about spending a lot of time with those Georgia players So you're asking if the Calvin Ridley situation? Got it. Got it. Well, well again, that's a question for Calvin I can't address that how he's particularly doing but I will say yes, the receiver position is important and But it's a complimentary game So our goal is to improve our team overall because when you when you have a when you protect when you have a good run game Then receivers are gonna be more open when you're when you're playing good defense and you're playing with leads It changes things so I would say it's a complimentary game So our goal this offseason is to improve the entire roster and Obviously the receiver position that's an area we have to improve as well the value of being here at the combine Yeah, and and it really starts with with assessing the makeup and we have to take advantage of every touch point We have with our with with with the players in this draft process because the most important thing is the makeup And so whether it's the combine whether it's pro days personal visits We have to take advantage of getting around those players getting our hands on them our coaches our scouts and make sure The players that we pull the cards off the board and the players we sign and bring into the building We're bringing in the right culture and we're bringing in the right types of players. So it's it's extremely valuable Last year from being virtual What did we learn? What do we learn from last year being virtual? I guess I can say we we're still going to utilize as As long as as much as the league allows us to do in terms of virtual meetings and we're going to utilize that and We'll still utilize that part of it. You can be pretty you can be really efficient Still having virtual meetings and virtual interviews as long as we're allowed to do that So so we'll utilize that we did learn some things last year, but being in person is important as well Thank you, ma'am well number one when The first thing we have to do is create a little cap space and and then number one is is our players and we have a lot of players I won't talk specifically about CP But we have a lot of players that that we want to resign and that's important now It's important for us to you're never a player away so we have to look at each specific player evaluate the player and Look at the parameters of the types of contract that we can sign and what makes sense for us And we have to stay disciplined with that because we're not trying to sign one player We're trying to build a team so we have to make sure we assess the value and stay within our parameters with every player And on the other side of it It's important for players to assess their market value along with their agents and their families and find the best situation for them Because they have a small amount of time to make as much money as they can and so we respect going through that process of the Business so with that they're going to be some players that we're going to be able to resign Some players are going to move on and and we understand that but talking specifically about CP That's an example of what we have to do this year in free agency That was a situation where it was a month in a free agency when we signed CP He wasn't getting the offers he wanted and and again a month into it We signed him. We had a clear vision for him It says a lot about him the success that he had because he's a great man He's a great player. He added on and off the field and it says a lot about our coaching staff And that they were able to find What he does well and and he had the most productive Season of his career as an offensive player So that shows the way we were able to find value in that and and I believe it It really shows the league that this is an attractive place to be and you look at our coaching staff and and you look at what they're able to do with players and you look at Atlanta and living in Atlanta Whether you're young and single or whether you you're married whether you have a big family It's a great place to live. So living in Atlanta the The opportunities that we have in all three phases because we have opportunities here And we have a coaching staff that's going to get the most out of players So I think cp is an example of what we have to do especially with the constraints we have here this year Yeah, because a lot of things we do and we evaluate value is we look at comps position comps And so when when it is kind of that hybrid unique position, it's tough to have You know a rolodex of a lot of comps with players like that So it's tough to value but at the end of the day for us It boils down to assessing that make up assessing the fit and looking at at what we can do Currently with our specific team. So it's not always easy to value that specific position, but It's something we have to do Say it again Yeah, yeah, just like just like our whole rookie class and a lot of young players It's important this offseason for them to to work and come back In a better situation, but he did some really good things this year and we're excited about him in the future Well, like I said with any measurable, it's all a piece of the puzzle, right? It's all a part of it any measurable any statistic It's all a part of the evaluation But there's never going to be one thing that that makes the decision It's it's all it's all a part of it It all factors in but there's never going to be one thing that completely Eliminates or or makes a decision for us, but we're going to look at everything Well, like I say, we do have goals at every at every with every measurable with every statistic So it's things we look at but the key is is it's all that does is it makes that particular player or that particular Whatever we're talking about it can make them an exception in a certain category But it's never going to make a decision All right. Thank you. All right d led Yeah, we're looking for anybody Like most teams and so we're trying to do our due diligence and making making sure we know every one of these players are and You know for me, this is just a Kind of beginning stages of the personnel evaluations Obviously our scouts and our personnel staff have been working on this class for several years Well, we'd had a few coaches that had worked with them in chicago had had been with them and You know daver going charles london had been with them in chicago and so His name obviously was up in free agency and they kind of Pitched atary and i hey this guy. We think he can do a little bit more that some of the things we dabbled in in chicago And so Obviously, like I said, we're looking for help anywhere we can get it cp Did a terrific job and embraced the role and took off from there I do Yeah, no, I don't I'd coach terrific person and he'll do a heck of a job Sure Yeah, I think you you understand where your issues are Obviously When it deals with protection and you're you're involved in everything you've got to work your straight get the play started So ben's got a great mind great football mind and I've never worked with him professionally But I've known him for a long time and I'm sure he'll do a great job in detroit We have a plan d led that we feel good about Whether we have an offer out for him now or not I mean that's their prerogative and that's what the the rule set up for right I mean that You do Obviously, this is like for me, you know, this is the first time and some of these guys we saw at the senior bowl But as as coaches it's a good opportunity You know, we'll have our formal interviews and we'll certainly have guys that we will meet with at night Some of them in the morning, but So it's just beginning stages to get to know who these who's yeah, I know d led and these guys that He is Like all of our guys that are up for free agency You know russell did a terrific job, you know, he Got injured early in the season and came back. I thought he was really productive late in the year and helped us Right. Yeah, you had to do it by zoom. It's good to be back. I mean, it's it's good to be in person I like being around People and getting to know them everybody's got different strategies.  Some teams are here. Some teams aren't from a coaching side, but Personally, it helps me I'd like to get to know them and and it's like the early stages of is get to Put a name with a face and see who they are as people Yeah, I don't think you're gonna make a snap judgment off of 18 minute speed dating meeting But I think you look at their body of work and again, it's just a part of the process I've seen guys come in there and they light up the room and they're Um, that's you know, they can fake it for 18 20 minutes I've seen other guys that you know, that's not their setting and you gotta look at their body of work So it's just a small part of it Uh, I don't subscribe to a one-size-fits-all. Um, you know, I still believe in due process And so I just you gotta dig into it and don't take it You know, you may hear a story or somebody may have agenda that they've talked to at the school and Again, you just try to look at somebody's body of work and I'll give people the benefit of the doubt until they prove you wrong Um, and you just take a case by case Well, I saw some of them down at the senior bowl.  I mean, I know It's a great The build up to the drafts are great. I love the hot takes this time of year. There's always players There's always good players at every position.  So Uh, you do do diligence every year and there's a good group of right. I guess I was pretty born Certainly that's You know, we're we're matt's ad. I mean, I Obviously we just watched in our division. I mean tom tom played till he was maybe a still play. I don't know He certainly didn't look his age And that is a lot younger than tom and I understand there's only one tom brady But I think you don't ever back yourself into a corner somebody gives you an offer You can't refuse. I mean matt knows how we feel about him and I think matt's got a lot of good football left in him. Well, I think every year. I don't think Certainly you look at the history of the draft. Um And that's at every position So, you know, you may feel good about your running back room or your receiver room and Somebody may fall that you think's a generational talent.  I mean, I think that's at every position I think in hindsight Been a part of it where hey, you think you're set at this position and you passed up on some good players So I don't think every year that's your charge is to make sure you know this draft And obviously, uh, you that's the one thing about the NFL So it's not like recruiting where you can take 25 Really, you know top top in players that you know, that are all first-rounders I mean, you've got to do your due diligence and make sure you get the right fit for you Yeah, I think that's every year, um You know, we certainly Guys you can find players and you better You can't skip steps because there's really good players that come out of that are undrafted every year And uh, it's always an open competition and obviously You know on the surface, you know, if you invest in a first early-round pick, you know You know what the salary cap structure is right there But if a guy's a better player that you that's an untrafted he's gonna play for us Excuse me. I couldn't really hear you Depends what the offer is. I mean like I said, like it's like the old Don Corleone Like if you give him offer, you can't refuse.  So That's it. All right. Thank y'all


Hey friends and welcome to Noura's Cove. I'm Yoshida and today we'll be doing my monthly hair and my motorm personal. Just a side note, over here I have my utensils that I like to use and I'll do a video separate on some of my favorite things. It's a little junky junky right now but I'm going to take out what I mainly kind of use in this like what I use stickers from. So here I just have some stickers in a experiment gun pack. Here this is from Simply Gilded and there's stickers there and I have this from Sadie stickers and these are a lot of samples and then some of my stickers, other stickers and I just have them in here. It's very small. So let's get into it. I got to go kind of quickly because I'm sharing office with my husband. He went out to a doctor's appointment so I'm going to try to get in what I can. This was March. Love how March looked and if he comes back sooner I may have to do a voiceover for the rest. So this is another dashboard. I got this dashboard freebie from Ayumi.plans on Instagram and so we're going to do April. April is my birthday month. I'm excited. I can't remember where I got this from but I got this from Shakisha over at Scripps by LNC. Okay so now I have my calendar out and we're just going to plan. So first I'm going to make a note of my birthday of course and probably my sister's birthday. We both have birthdays in April so I'm going to do that first. Also you guys I have some stickers back here in the back so I'm going to whip those out. So I'm kind of marking birthdays with these little stickers here that I got from AliExpress. So I already have them kind of highlighted here so I guess I don't need to use that. I just realized I normally use these small black stickers that I made on my silhouette for bills due. There's two bills due tomorrow which I just paid yesterday. So I'm going to put here on Thursday. This will be for Amazon. Now we're in a pandemic and I had some of my bills pushed back. Some of them they gave me like a 30-day grace period. One of those was my car insurance. So I'm trying to pay that like now my husband is helping with that and then husband and my sister. Thank God for family but I have another one due here on the 28. So I'm going to put car insurance. So I like to list my bills first and then here on the 15th I have my Capital One credit card. So I'm not depending on that stimulus chart. I'm just depending on the good lord above and prayerfully family. And then on the 17th I have two. One is the Barclays and one is come on in. I'll just do it sadly. Okay you guys so sorry my husband came in. So right now I'm just continuing to put down bills that I do. These are bills that I think that I'll be able to pay. My husband has been a blessing in helping me do that. So yeah I'm excited to at least put those little bit of bills down and I'm just going to write those in. If you have to hear some background noises I had to get my husband back to office. My son is outside playing ball so he'll be back in. So yeah I'm just going to continue to just put those little black transparent dots down that I have to state what bills are due. Excuse me guys so now I'm going into my little sticker book here and I'm just trying to find some stickers that will you know kind of decorate my monthly and also that are functional. I'm really enjoying functional stickers and these stickers right here I have made. I have not put them on my Etsy yet but I plan to I like to kind of test my stickers out first to see how I like them to see how functional they are if there's something I need to change about them. So I've made these maybe a month ago maybe longer and I still haven't put them in the shop I don't think I may have not sure but they'll be out soon if they're not already there. I will leave the link to my Etsy shop below.  So now this kit here is a monthly kit by the planner spot I love her stickers so I'm just getting like some balloons and a present well I'm getting the yeah the balloons and a present to mark my birthday my sister's birthday and I'm trying to see through this recording thing here y'all bear with me because this is like my first ever voice over so with this sticker this says this month and this is by the planner spot and I'm cutting it down to kind of fit because there is no note section with this insert here and this insert is by I want okay guys so here I'm just taking the flowers from my deco sheet that is listed in my Etsy shop it is the spring deco sheet and I'm just placing these flowers just around and just to give the insert the spread some color you guys there's gonna be a lot of noise a lot of things going on because everybody's home so I'm just trying to work with what I got and the time that I have to myself if I did not mention these inserts are by Brooklyn Grace Coe you can find her on Etsy every shop that I use I will definitely list them in the description bar please check them out right off the break my top shops are the planner spot which I'm using here Elaine Michelle Studios Anika's creative closet and scripts by LNC that's the only stickers at my shop of course those are the only stickers that I'm using in this spread and that I basically use on an everyday basis every now and then I'll you know test out some others or pull out some more functional stickers from the happy planner books that I have but other than that those are the top four shops that I use along with myself so here I'm displacing another sticker from the planner spot it's just like a little paper clip um sticker and I'm here I'm taking this month and excuse me next month sticker from the planner spot and I'm just making my own kind of like notes or next month section so again this is where I keep most of my stickers and the simply gilded pouch that I got in a subscription last year and I'm looking for another sticker I think I want I'm looking for that uh budget sticker right there no that's the insurance sticker sorry and this one says voice over by scripts by LNC definitely check her out also I'll be using one from um I'll be using this in here from Elaine Michelle which is the budget sticker I believe I don't know what that is that's something else do but also check out Anika's creative closet that will probably be the last sticker that I use and it'll be right over top of the voice over sticker by scripts by LNC these stickers are from my shop this is a little deco kit that I have it's my glam essentials deco kit feel free to check it out and this is just a pin from that deco sheet and I'm just placing it here just so that it can add a little bit more functionality to the spread and then these boxes come from my spring deco sheet here and I'll take a oops sheet and use that as well I think I need to make some more of these functional boxes now I think about it I think I need those so I'm gonna make some of those you all let me know leave me some comments or feedback and the comment section let me know if I should make some more of those um functional boxes and then I'm adding some here to next month again just to list some top things that I want to remind myself of anything I regret is I wish I would have got a little closer for you guys so that you could see but I'll remember that in the next one and so also from that second deco spring deco sheet I'm taking some more of the florals and cutting them in half and just kind of placing them throughout and yes I still struggle with placing stickers straight but it's okay that's what I like about minimal planning I don't have to have a lot and I don't have to lay them straight so you guys we're about to wrap this up but um it's just one more um I think I already I know I already mentioned it but the last sticker that I'll place will be by a niggas creative plans that's what I'm looking for right here and that is my youtube sticker so I'll be placing that right up over top of the voiceover sticker and I hope that you all are being safe I hope that you are well and I will see you all in my next video thank you for watching okay you guys so sorry I had to do the voiceover but this is my completed April and I'll go in and fill the amounts that I have to pay and all the little extras but I think this came out really really cute so I hope you enjoyed this video again sorry about the voiceover and I'll see you guys in my next video if there is some things that you like to see from me please list them in the comment section I'd love to hear from you some of your ideas that you would like to see and I'll be sure to upload those for you thank you bye


All right guys, welcome back to the channel if you're new my name is Bobby guys today We're gonna talk about why I am anti-vegan and not only Ex-vegan when getting that question quite a lot lately Can't you just be an ex-vegan except that veganism didn't work for you and move on? Why do you have to bash vegans?  That is the question that I get on a daily basis Guys first and foremost. It is about health about human health I know nowadays in the media you hear a plant-based diet is a healthy way to go But guys we already tried that if you look into what we've been eating it is a plant-based diet I know it's quite a shocking fact people can't understand this and I didn't believe it myself But once you start looking into it You will find out that most people already eat a plant-based diet We eat processed plants absolute sugary Carby foods be it rice be it sweet potatoes be it processed Fries be the cereal in the morning.  We're eating a highly processed plant-based diet So therefore, how can you claim by adopting a plant-based diet? Somehow we will heal the planet. I am anti-vegan for health Veganism wrecked my health veganism wrecked my sister's health veganism wrecked my girlfriend's health veganism wrecked my Friends health, but hey who cares right? guys veganism wrecked the health of thousands and thousands of people online for every little vegan troll comment that I get I get Hundreds of thanks comments on a daily basis of people that are reclaiming their health This is why I run an anti-vegan channel. I run it because it needs to be hurt Right now we face a huge push Global warming because of meat reduce the meat even Arnold Schwarzenegger will tell you less meat less heat Yeah, of course How please explain it to me? When did cows that are grazing eating their natural diet outside became such a threat to global Climate change. It is absolutely ridiculous and we know it But somehow the media still achieved to trick a bunch of millennials that are going out on the street Protesting right against climate change against meat animal activists or should I say animal Terrorists, this is what we see nowadays Absolute false news and who suffers The humans simple as that the true suffering is created in humans Every single day I have people reaching out to me and telling me how they Deteriorated to this very day people are still brainwashed They tell me that they see the improvement with every single ex vegan on YouTube You don't have to be a scientist to acknowledge that every single ex vegan is Improving tremendously the health markers increase Every single one of them name one ex vegan and I show you a person that got healthier It is that easy but still you have brainwashed people that can not make the shift because of their indoctrination People write me messages. They asked me how about karma how about getting reincarnated as an animal I can't make myself eating animals.    Oh, it's an appeal to authority Felicity all you do is appealing to authority Don't you see that you're appealing to your cherry-picked studies for every single vegan study There is you can list a million counter studies But of course the vegans won't believe it the vegans won't listen They will go back onto the internet onto their keyboards right and start typing and they're gonna ask the vegan leaders What they think about they're gonna pray to dr. Gregor to debunk the ketogenic camp They're gonna ask their vegan role models to debunk the carnivore YouTubers they will go out of their way just to brainwash themselves again and find back into their religion Find back into their cult where they can feel comfortable and can tell themselves Yes, this is the truth. It's a plant-based diet. We're creating a bright green future a bright green future It is all brainwashing. It is all cultist mentality.  If you look into certain studies that really showed health improvement in vegans, did they show health improvements in every single one? The answer is no So you look into those studies and you will see that there was a reduction in heart disease for example But there were still three people out of ten that were getting heart disease So what does that mean? How can the narrative that the vegan diet? Eliminates heart disease can hold true then. Can you follow me? I know this takes a little bit of brain capacity It's kind of hard if you're depleted in DHA and EPA. However, try to listen try to understand what I'm saying What does that mean? It means that a vegan diet was not healthy for every single individual So what if that individual is you? Right now we have a new study coming out showing us that vegans get strokes So why do you keep on pushing your narrative? How can you still believe that a vegan diet will make everybody healthier if it clearly doesn't? Even if you take the best science and I challenge every single one of the vegans out there Show me the best science and then you show me a 100% success rate There is no such thing and this is why we here in the carnival community are not dogmatic about shit Man if you tell me I do not feel good on zero counts Then so be it then you can eat sweet potatoes. You can eat rice You can eat plants actually and I wouldn't mind But if somebody tells you that they do not feel well on a plant-based diet the vegans get outraged They get ape shit crazy because there is no possibility for you to need meat But still we see vegans dropping dead from heart attacks from strokes There are studies that show us there is real brain shrinkage in vegans Depression is higher in vegans and vegetarians But who cares the science though, which Science the science that a doctor Gregor that a cultural Esselstyn that any other of your vegan prophets cherry picked for you That is the science you talk about Science that cannot be replicated. That is what you are talking about You're not talking about real science. There are just as many if not more Scientific papers on meat consumption, but you like to choose those that fit your narrative That is all this is why I'm anti-vegan. I'm anti-vegan because I cannot see the feminization of men the feminization of boys. I do not want to see dying babies I do not want to see malnourished kids. I do not want to see a weak Society of soy boys.  I am anti-vegan because you vegans are anti health You are abolitionists that cannot accept that people want to be healthy You are against human health and this is why I am against you All right, and this is it for today's video just a quick rant Let me know in the comments if you like this format today I used OBS center with a slightly lower camera quality here, but here we have my Sony alpha Which delivers a pretty cool angle and better quality. I hope you enjoyed this little mix-up if so Leave me a thumbs up if you haven't subscribed already guys, please do so if you want to support the channel The links are in the description box Subscribe starlings Amazon links butcher box and CBD links all in the description box for you Very much for your support guys as always much love and peace


This is, we're going to run until 11.25, this is the first time, at least I'm aware of that we've had a bof on this specific topic. This is also the first talk of today's enterprise trap. So, the basic premise of the bof that I was thinking about was that Demian has some really great technologies for dealing with a single system. You know, I can go with one command, get a variety of wiki sites, or blogging systems, or content management systems, a phone PBNs. You know, a database, my choice, all on one system. But the competition does a lot better at putting the systems together. Sometimes we don't really focus a lot on, you know, Windows conference. But I want to tell you a bit of a story about, it was, earlier this year was the first time I set up an active directory for Demian. And basically, I was shocked at how simple it was. Effectively, with one command and clicking a few buttons, I was able to get to a point where I had, you know, a consistent corporate authentication infrastructure, directory, DNS system, all synchronized. And with basically a couple of button clicks, any machine in my organization could join that. And conceptually I knew that, you know, that was the case, I've been working on related software for years. But I never actually gone through and looked at user experience. We don't have anything like that that can take a single Demian system and make it part of a group of Demian systems with that sort of level of use of use. And that sort of level of integration where basically we can have something kind of like package and transcend one system and actually get to a group of systems. But we do have a lot of the component technologies in Demian that are used as part of these infrastructures.  We have all the components, but what we don't have is the integration. So I wanted to focus on three things. First of all, we do have some integration. There are technologies like Puppet, SCF Engine, you know, plenty of things, DevConf databases. Plenty of things I'm missing that are part of that integration puzzle. And in particular, organizations where we've actually gotten to a point where we have that level of integration. Basically, it tends to be custom within that organization, but it's taking advantage of all those sorts of tools to build it. The second thing is we have sub-projects. Things like, you know, Demian to Get You and various things that actually do seem to be within their target domain, putting together that level of organization. People have built embedded Demian systems that have incredibly high levels of integration. And finally, there's what to do better in the future. What are the areas where we can, where we, as packages, enterprise infrastructure software. Can get together and, you know, make the situation better. So I'd like to talk about, you know, tools. So the three topics I am aware of for this block are, you know, what is the integration story like in our competition? What is the integration, what are the tools and what are the success stories we have, how we can do, you know, similar things within our software. And finally, what should we be, what do we want to be doing next? What are our target priorities? How are we going to work on them? And so I propose to open this up as a discussion for, you know, these sorts of things. I've been a little bit myself, but mostly what I think this will be productive is an actual background. I don't know if we need to be passing the mics around yet. But if the video, if he does get things working, then we'll have fun and want to do that. So thoughts, anybody going to have any thoughts? When, where are the audience part? So this one. Are we on? Have we got it? Usually takes a little bit for the next one to catch up. So my name is Jeff Crompton, I'm from Melbourne. I might be jumping the gun a little bit and skipping some of the air. Oh, there we go. I might be jumping the gun at the skippings and all these steps. But I think one thing that might be important is automated kind of inventory type software, automated detection of systems and on-the-net and recording them and reporting details about them. And I believe maybe we might have some of that already with OCS inventory, which I'm not really favourite. What am I looking for? So public does have some of the new stuff built into it as well. We wrote something internally called out of date, which is package management kind of inventory, what package are installed everywhere, how recently were they updated, that kind of thing. Inventory seems to be one of those things that people do find commercial products to do and we keep seeing people try to do this to run commercial products. Usually there are things like these that you can do where you put a job listener on every single box. And I hate that kind of thing. So yeah, there seems to be a lot of demand for it. I don't know if you're familiar with CNDB, the ITL framework for configuration management. But there's a whole set of tools around that and servers and whatnot and none of this open source so far than now. I think important for us to keep in mind that if we do come up with a solution, it needs to be a solution that's not limited to dating boxes or not limited to boxes that are running up and it needs to be something that can talk to things that aren't running up and down like switches, like maybe in projectors. Because those devices are important to enterprises as well. Hi, I'm Michael Shultai as I work for Indiana University and we recently upgraded our ADS main controllers to Windows Server 2008 R2 and every time Microsoft changes their server software it seems to make it difficult to integrate the open source distributions into our AD structure. But one of the things that WN does do better than, for example, Red Hat Enterprise Linux is that it does include a more recent version of SAMA which tends to interoperate better. So even though we do have a university wide site license for Red Hat Enterprise Linux, a lot of our Linux using departments are using alternatives to Red Hat such as Debian or Ubuntu because they do tend to interoperate better due to the newer software even though Debian often is maligned for having Debian stable being too old. Debian stable actually has newer software than Red Hat Enterprise Linux so that is a plus for Debian. One thing I was thinking was that besides simply just having packages in the system in which you can create your own key environments such as, for instance, Webbin which already does some of the things that we might be talking about here today but also other distributions such as Ubuntu have spins which can be essentially turnkey installations for a particular task. So you could have a turnkey image that is set up with Carlos and Samba and such. So there's actually, first of all, there's some things you can do with Debian installer to get that. We're going to be having a talk later today talking about the current state of FAE, FAI which has been around far longer than Debian installer. I remember using it back in 2002, understanding it's evolved so much since then. And another project you might want to look at is MIT's Debian theme app which is, I think, which has one mode that I think is the DI-based that basically is looking at putting together that sort of turnkey installation. All of these solutions, as far as I'm aware, involve a fair amount of work within your organization for you trying to decide what your turnkey installation can include. It's my impression that that work is more than the similar work to do group policy for AD although getting group policy to deal with software installations that are not set up to work with group policy is my understanding is tricky. I do not have much personal experience with that. I think that that problem of having to require a lot of work to work for your institution is kind of our big problem. Debian is very strong on the customer vision front. And we certainly do a lot of that at Stanford where we have a bunch of configuration we apply at the top of Debian to make everything work the way we expect it to do. It's more of a small site where you don't have somebody with you. Stanford was going to do that regardless. You know, you get turnkey installations and they're not going to work for us. We're going to have to do that kind of degree of customization. And most of the sites I think have done a lot of work on Debian on infrastructure and similar work both where they're certain out of customization you're going to have to do no matter what. You can do it on Linux and you want all the tools available to build your own customization. I think that what you're in production you're kind of needing more of a somewhat different audience which is the idea of, you know, we collect the directory out of the box and install it and configure it when those systems point out of it and it just works. No, no, because I think you need to. I want the minimum bar to be lower. And I also want us to figure out, because basically our minimum bar for single systems is much lower, right? I mean you can, we do a lot of customization of things within single systems but the fact is I can, with very little effort, get started within a single system and pretty much any sort of, you know, any class of software. You know, I basically just install it and within a couple of minutes I probably have something that I can start playing with. And for integration, I think the minimum bar is a lot higher. And it's a lot higher on Linux than it is other places. I mean, Mac OS kind of tried to tackle the same problem in terms of how do you do a small worker solution fast with Keros and LDAP. I think that there mostly ended up being an example of things I wouldn't want to do. Actually, I have looked at that kind of stuff, I got really, really complicated. But I think that's kind of, I think that's the thesis missing.  If you're on an individual box, there's a lot of tools to do that kind of thing. If you're doing something similar between, there's a big gap. Right. And I guess one question is, do we even want solve that problem, right? I mean, you know, are we willing to invent part of that? I think another thing is that if you're using stuff like Kerberos, I mean, if you've been using it, you're already familiar with how to set it up, how to do it, you know, people who are looking at these solutions don't necessarily need that much handle. There are a lot of newer, you know, technologies and newer things that are necessarily not quite as likely to see that, you know, maybe more emerging technologies in that direction instead. I have an example of, you mentioned about a case where a competitor has something that is pretty interesting. And it was many years ago I found out about it. I remember learning that Solaris had the ability that if you were running a Solaris site and you got some new hardware and you took it out of the box, you plugged in power, you plugged in ether, and you turned it on, and the machines were set up to automatically come up to HCP. You know, some of these technologies aren't used as much anymore, but they would join the NIS domain automatically set up the automowner and find all your file servers and a bunch of other stuff. So basically your deployment was, you know, just turn the machine on and it's part of your infrastructure. And that was something I always thought, man, you know, we need a way to do that in Debbie and so that all these services already have set up, everything just gets automatically discovered. Yeah, I guess two things. One, I have a feeling that the companies that are doing the integration pretty well have probably gone through a pretty long phase of trial and error and the development of management interfaces is some kind of a common note. It might be a starting point to try to come up with for the different major applications that want to be integrated what a, say, relational database schema for their configuration might be so that they could be put together and merged and, you know, turned into something that people can deal with without having to know the specifics of the syntax and configure every individual piece. That's one thing. The other thing is I mentioned CMDB. CMDB really isn't very real at this point. It's mostly a marketing concept and it's a very dumbed-down explanation of databases for administrators who really don't have a skill set to do it. Oh, I mean, CMDB is real. Since the Stanford University tracks all of our servers through CMDB and using CMDB as a federated CMDB data model, on the other hand, certainly having gone through that experience I would not have recommended it at this time to anybody else. But it's one of the problems is how they use data models. And I think it's one of the things that Active Directory uses is that you don't know that it's using Kerberos and you don't know that it's using LDAP. You're just using Active Directory to install it and you can dig into that stuff if you want to but it's kind of all hidden behind an interface which makes it a little easier to deal with. And, you know, our experience is that with LDAP you really want that. Some degree of that information hiding until you're ready to dig into it and change things because fighting is kind of unfortunate a little bit that all this stuff right now is built on LDAP. But I find LDAP really opaque in terms of trying to understand how it's data models put together. It's really kind of strange if you come from a world of relational databases and it doesn't, it's a little bit hard to wrap your mind around and that's, I think that's, it's like, is there a better way of representing that data because right now everyone does this kind of integration including Microsoft. When they want to plug all these pieces together what they put in the middle is an LDAP server and that's where all the data actually lives. And, you know, it may be that we can't do any better right now that there's definitely pluses and minuses to that technology and I know at Stanford we've put a lot of effort into putting SQL databases in front of LDAP and we don't put stuff in LDAP directly. We have middleware which does that for us which is the only writer of the LDAP and all the actual work happens in SQL databases. That's an interesting comment you just might have just thought outside that from my perspective it's been enough time with LDAP that now I don't find it too misspond and maybe that's just, you know, different strikes or different bugs. Anything we do that isn't LDAP is probably going to have to speak LDAP on some level at least for the, you know, year term. But that if you can at least get halfway to actually understanding it, it could be that hard. One thing that I just wrote for wanting to say for a while is that we have all the pieces for most of this stuff. We just need to glue them together. That's an excellent segue from two things. First of all, could I get people who are speaking to identify themselves and preferably if you're willing to disclose your organization that would be as well. Secondly, how many packages do we have in the room who are actually inners of software in this space? Like, you would view as sort of part of the pieces that Carl was talking about. I know I am, I know Russ Arer, but you're also here. About six, seven, maybe eight. Is there anything we as packages should be doing to actually create that clue? Are there, you know, would there be more value in having coordination between the packages? And, you know, do we want to try and work on that? Are there actual items we should pick up there or better communications or anything like that? CJ, firmly. I've been involved in Debian since 95. Linux, Force is my Debian consultancy of sorts. This is a tough one. The data is, and you're talking enterprise and so things like Puppet and CF Engine make sense, but all my clients are distinct entities. Some of them are bigger and maybe CF Engine or Puppet would make some sense for them, but a lot of them are small and coming up with a solution that integrates both for larger scale organizations and small business that might have two or three servers and, you know, 10, 15 workstations. I'm having difficulty imagining what the architecture should be that is flexible across those different size domains. And if you had the architecture, how would you interface with it? Is it going to be web-based or GTK? You know, the Debian Wiki has a great section on control panels, which is one way. Every one of them uses a different architecture, different data models, some LDAP, some Postgres, and everyone does it a different way. So, you know, there's a big policy question about the architecture, the data, and I don't even know where to begin to solve it. Does anyone have any? This is the beginning of a solution. I think it's just kind of a solution approach, which is, I forget whose law it was. It said that the software tends to grow organizational lines and reflect the nature of the organization that created it. So, you know, one thing I've seen in a bunch of places that I've worked where I've heard the line, yeah, we've got all the pieces, we just need the glue to go together is that if you actually have a project that hooks them together specifically, you know, as the catalyst to hook them together, then that can actually drive the integration. Right, but... I mean, if we did, Devin had decided as an organization that they would want to do something that involved LDAP in some specific way that involved blah, blah, blah, blah, blah, blah, blah, I don't know this community participation that would probably help. But I mean, right, I guess, but one of the questions to me is, are any of the people who are actually, you know, working on the pieces interested in working on the glue, willing to actually spend some time? And so far, I'm not really hearing a hack of what I've heard so far. And I mean, maybe this is just a problem we don't solve. Okay. On the IRC we have Andreas today asking whether anybody thought about using writing this Devin Enterprise at LDAP. This Devin Orman for discussing issues like this. Did not know that it existed? It did not exist at all. Does it exist? Apparently Devin Enterprise, Devin Induction Enterprise, writing this doesn't exist in LDAP. So we don't know. Actually, I don't know. It shows that we are not very organized given that the rest of our problems we don't have anything to listen to. I know I don't understand, right? But I mean, this, I mean, that is kind of one of the interesting things is that, gosh, I wonder who goes out there. He says it exists for years, but at least it's been not used. I will mention on the front of LDAP in terms of practical things we can do at Devin. Open LDAP is one of those chronically under maintained packages. And that's a place where it could definitely use some kind of a detention. There's some work that's going on right now in terms of getting some scening to be back in into Open LDAP, which basically means that your schema is now stored directly in the LDAP server instead of a bunch of files on the desk, which is the direction that upstream is taking things. And I know that the WDU folks are using the LDAP support in Devin pretty heavily, but almost all this stuff, like I mentioned earlier, almost all this stuff right now drives through LDAP, and the LDAP packages in Devin are not in great shape. And they're not in horrible shape because one person's been doing a lot of work on them, but they definitely could use more than one person working on them, particularly given that we have an annoying open SSL versus good in TLS issue with those packages, and upstream really, really hates good in TLS, so we end up having to do very much the burden in terms of SSL debugging. Drake Beaker at Google, but I wanted to comment on Devin. The primary way Devin decoys their configuration to all the different clients is by building configuration packages. I worked with one of the developers in Devin and had to come across and do an internship, and some of the things that we were doing internally are out on wiki.devin.org in the config packages directory, and they have a system-uploaded config packages that allows you to build your own custom configuration packages, hopefully. I will strongly encourage people to take a look at that. It's a very interesting concept. Basically, the idea is that in many ways some package probably doesn't provide the configuration knobs you need, and it's a way for you and your organization to help a package this configuration along the way that it's going to work well with upgrades. And I found that prior to the development of that work, I was not involved in the development of config package dev, but I have in multiple instances had to reinvent that work before it existed, so it's something, the design pattern, I think several Devin packages who are making this organizational changes have found them some day. There's a whole lot of logic in the curf5 config package, for example, to try to build a curf5.com for you. Basically, I think that package is a great example of a package with solid one-specific problem in a way that there should be a more general framework available to do what it's doing, and there just isn't right now. There actually was discussion, I know, last year's dev, when I was doing a Facebook curf5 config, someone pointed me in a framework that seemed, it didn't seem far enough long that I wanted to depend on it for a curf5 config, but I think there is an attempt at something like that. Unfortunately, I don't remember what it was called. Config model is one that I've seen floating around. Yes, that was it, that's it. There's a discussion that's happened from time to time on Denny Devel in the config model, which is a pearl framework for modeling configuration file languages, and the idea is that you should be able to use that to... You should be able to use that to... Basically describe the configuration file because everybody uses a different configuration file format and then use it to programmatically manipulate that configuration file. And ideally, you would want to be able to expose all that behavior to dev and package maintainers for us, so then you can do upgrades in a much saner fashion. I'm sure that I'm not the only person who has dev and packages who wear my maintainers for us during upgrades. Do these horrible, grubby, sad, odd things to try to fix configuration parameters that have changed? Jeff Crompton from Trinity College. Does config model have any similarity to August, which I've seen in public messaging and on many use? I believe as is often the case with these kinds of things, config model and August are essentially the same thing except that one of them was written by Ruby people and one of them was written by Pearl people. But I think they're very similar sorts of ideas. And I know the public being a Ruby community thing, mostly, has August support built into it and can manipulate configuration files that way. And that kind of seems to be the direction that public is trying to move in for solving that similar sort of problem. One of the, I mean, we love Puppet and we're going to talk about Puppet in the next boss, but I don't know if Puppet scales down all that horribly well. I know that we would not have put the effort that we put into rolling Puppet out if we had, you know, 50 machines. At 200, 300 it's great and above, but you're buying into a whole configuration management framework and that's one of the things that makes the configuration packages interesting because then you're just reusing Devian facilities and you don't, that scales down a little bit better. But there's various things in policy and in the way that Devian packages work that you run into some trouble when you start trying to manage configuration files in Devian packages that are not the same package as the software that you're configuring. I mean, that's the beauty of config package Dev is it comes up with a reasonable, it is not a policy compliant solution. It's not upload the results of the config package to the archive, but organizations are required to follow policy and what config package Dev is, it tries to solve the practical problems, but obviously it is possible from the underlying package to change in such a way that it becomes out of sync with your config package. We got about five minutes left. So I'd like to think, I guess, a couple more comments and then see if we can wrap this up and figure out. This is Matt Hecker for ResNetworks. We can also go a little longer if we want to cut into the public box as well. So we're always going to need the ability to manipulate these weird existing configuration files. One thing I kind of liked recently that Devian has done a lot of has been pushing to move to kind of the .d directory idea where you drop in config file snippets. And I really like that model a lot because it makes it easy for the package and it makes it easy for end users to drop things in there as well. And so, you know, to what extent should we really be kind of convinced upstream that they should use a model that allows for that as opposed to trying to work around and where config files. I don't know if anybody has any comments on that. Hey, we can fix copyrights. Yeah, I was... I think a lot of us are happy about that. Oh. One idea that's occurred to me many times but I've done absolutely nothing about it was that it would be really nice if you could do something like update on install, controlling the machine that you're on, waiting for you to end the second machine. So, you know, make it so that you have an enterprise-wide control system controlling one machine you're on from the start and then adding the second machine is critical rather than waiting until you have two hundred thousand so it can make a difference and then you want to decide yourself from the bottom out. So does anyone want to work on that at death camp next year? I mean, seriously, like, take a good idea like that. Get three or four people to say, actually, yes, I'm willing to come and work on that on a specific period of time and that's how you, like, actually do it. Well, I've been demonstrating my, my sort of competence of getting around to it for about five years. Some other people want to beat me up. Well, yeah, I come to death camp and then I'm sticking a gamut over the walls. Right now, I understand you're busy at death camp but you've done step one, which is how other people are ideal. Yeah, that's how I do it. Most things done these days. I want to make another comment about the configuration packages and the packages they are configuring the two worst things to configure are the LAP and Kerberos because of all the logic that's already in the existing packages. I have this table in that Wiki page discussing several different things you have to do to work around and veg other packages so they stop updating the configuration files since you've already taken over. The best solution is hierarchical by the .d directories where you just create a new file somewhere else and that takes over and that can produce your system. A lot of them can be taken over with d package deferred even though it's not policy compliant you can do it once and you can make it work for a lot of systems. Some of them you have to wedge something into dev comp in order to make the dev comp script not run and others are even harder to get rid of. One of them I had to use behind mountain in order to wedge the system to keep it from destroying the configuration files. So simple is better? Certainly I would be interested in cases if there are cases where for Kerberos where it is overriding changes you've made that's a bug I can't promise to be able to fix it but it's supposed to be very good about noticing what you've done and not screwing with it. Let's take it offline if there are bugs in Kerberos so just sort of some improving remarks we've had sort of discussions raged around a couple of things. I think if we're going to do this in the future we should coordinate on the enterprise list have some specific topics and specific proposals to discuss to make it more effective use of time. Thank you for your interest. I hope we all join the enterprise listening and creating a vibrant community.


In this presentation, we're going to take a look at multiple choice questions related to a job cost system. First question, the journal entry to apply overhead costs to jobs will credit factory overhead and debit, either A, overhead expense, B, cost of goods sold, C, job sheets account, D, finished goods inventory, or E, work in process. Let's go through the skin using the process of elimination. The journal entry to apply overhead costs to jobs will credit factory overhead and debit. Now note that this is one of those journal entries that basically one of those questions, which are asking for a journal entry and we don't know exactly what that journal entry number is, but we could still just write out the journal entry and I would write it out in journal entry form. They actually give us half of it here. So what we're doing is we're taking it out of factory overhead. So, you know, you can write down support accounting instruction by clicking the link below, giving you a free month membership to all of the content on our website broken out by category further broken out by course. Each course then organized in a logical reasonable fashion, making it much more easy to find what you need than can be done on a YouTube page. We also include added resources such as Excel practice problems, PDF files, and more like QuickBooks backup files when applicable. So once again, click the link below for a free month membership to our website and all the content on it. Factory overhead is going to be credited, let's say $100 and then we're going to debit something. And if you write it down in this format, at least it helps for me to we don't know what that account is. So we need the account helps for me to think about what the journal entry is going to be if I see it in journal entry format. So if you write down the debits of credits and make up a number, we're just put an X or dollar sign there. And then that might help you to think about about what the other side will be. So a is going to be overhead expense. Now, that might sound reasonable, except the fact that there is no they're not really an overhead expense overhead is going to be kind of an account that we're going to use to track overhead. We're not really going to expense it, we're going to put the overhead into the into the inventory. So it's going to go into work, it's going to go into work and process and then to finish goods. And then we'll expense it in the form of cost to get sold. So it's not that B says cost of goods sold. Now that's going to be the end product, you know, we are going to expense it to cost to get sold but not yet. It's going to go into inventory first. And then when we sell the inventory, it's going to be expensed in the format of cost of goods sold. So it's not that C says job sheets account. And we do use job sheets. Job sheets will be used but they're not going to be used to support a job sheets account. The job sheets are used to support either work and process or finished goods inventory. So that's not really an account. That's kind of a made up thing. It sounds like D says finished goods inventory. And you might think finished goods that sounds kind of reasonable. I'll keep that for now. And E says work and process inventory. So that sounds kind of reasonable. Those are two inventory formats, which is where the overhead would go to. So let's read it one more time. The journal entry to apply overhead cost to jobs will credit factory overhead and debit. So really what we're thinking is it's going out of one kind of inventory account and going into another. Which other one is it going into? Is it going into finished goods or work and process? And if you just think about the normal process of this, you would think it would first go to work and process and then finished goods. So that's going to be the process, the factory overhead. We're putting it there because we don't know what job to assign it to. And therefore we're putting it into factory overhead because we cannot put it in the work and process at the time incurred. Because we don't know which job it should go to. Then we're going to figure out which job it will go to based on an estimate later. So we're going to use some type of estimate. When we do that, we take it out of factory overhead and put it into work and process. And then once the job is done, of course, it'll go from work and process to finished goods. So final answer. The journal entry to apply overhead costs to jobs will credit factory overhead and debit. E work in process inventory. Next question. When overhead applied is less than actual overhead incurred. It is either wrong. Sounds could be. It's wrong in a way. I'll keep that for now. Be under applied or see over applied. And those sound like our two kind of terms. Those should sound kind of familiar if we've seen, you know, if we've gone through this under applied or over applied overhead. And then D says correctly applied. And that, you know, something's wrong, right? And they may have been correctly applied because it doesn't really mean it's wrong. But it's not that. And then C E says it's backwards. And that doesn't seem to apply here. I mean, so I don't think it's E. So between a B and C. Again, I would think that B and C should sound the most familiar a being wrong. It is kind of in a sense wrong, but it's an estimate. The estimate isn't wrong because it's an estimate. It's just an estimate. So it's always going to be wrong compared to actual. So B and C are really the correct answers. The rest of them, of course, are just fillers between, you know, the two options that we really have here is between under over applied. So when overhead applied is less than the actual overhead incurred, then we under applied the overhead. And so sometimes these under or over terms can get a little bit tricky. We start to they start to get mixed up in our heads. But if you think of the T account then of overhead, the actual costs will be on the debit side. And that's going to include direct labor. I mean, sorry, indirect labor and indirect materials. And then all other costs like utilities and whatnot that are going to be on the factory any other factory costs. And then we're going to credit to take it out. And that's when we apply it to work in process. So if you think about the T accounts, then these are the debits and this is going to be the credit. So when you think about it just in terms of over and under applied, it kind of makes more sense. We could say when overhead applied is less, it was we applied less. So therefore it's under applied. They could ask the same question in terms of, you know, are we left with a debit balance or are we left with a credit balance? And it does that mean we're under or over applied and just you have to apply out the T accounts so that the actual costs would be on the left. And then we would credit out how much was applied. So if the actual costs here on the left are higher than the amount we applied out, we would be left with a debit balance and we would have under applied. If the credit balance over here is higher than the amount of actual costs, we'd be left with that credit balance. And that would mean we had applied out more than the actual costs, which means we would have over applied. So final answer, when overhead applied is less than actual overhead incurred, it is be under applied.


Welcome to the 2015 NCHA Great American Insurance Summer Spectacular. We've just had the amateur derby final. I'm with the winner Lisa Pinkston, who won on Stylish Metallic Cat with the 219.5. Congratulations Lisa. Thank you. So talk me through your run. How did it go cow by cow? Well my first cow, well actually both my first cow and my second cow, we had picked them out and I took them over to the side to the edge and got them up to the top and I was determined to cut my cows clean and I think I accomplished that. And then my third cow, well before I actually got it cut the buzzer went off so but I think my first two cows were really good and my horse was good. So how did you feel about it in comparison to the rest of the runs? Well compared to the run I just had it went very good. This run wasn't very good but he's been great. He's been great for me. He was great in the Ferturity. I won the, I believe it was the amateur bonanza on him this year and did really well at the BI and at the non-pro and he's just been good for me and he's, he does what? Sean, my trainer, Sean Flynn, asked him to do all the time. He's not hard to work. How long have you had him? We raised him. Oh wow. So it must be quite special then knowing that you've had this success on a horse that you've raised yourself. Oh yeah, for sure. More special than had he been one I'd bought. And has Sean trained him the whole way through? Yes, yes he has. So what are your plans with this horse? Are you going to just keep competing? I'm going to keep competing on him until we get as long as he stays healthy until we get through his age to be years. Okay and why do you like this horse? What is it about him that? He's just really honest and easy to ride and he and I just get along. We just click from the beginning. Now you mentioned you were in the next event, the Unlimited Derby and he didn't do so well. But is it tough for a horse to back up again? He had plenty of time off. I don't think, that didn't have anything to do with it.  Sometimes it just doesn't fall your way. It just doesn't happen. Just gave. Alright, well thank you. Congratulations again and we appreciate your time. Thank you. I appreciate it. And I want to thank NCHA and all of the sponsors for everything that they have done to get this show on. Alright, thank you. Thanks.


A lot of presenters don't know their own material very well. Vlad was very clear, knew exactly what he was talking about the entire time, and proved that repeatedly throughout the process. Very informational, very structured. It's something that you can do on a repeated basis to get a consistent result. He has a lot of good ideas with the one called closed script. As long as we implement it, stick to the script, should result in a lot more sales. Get off the fence, just do it. The grass is definitely greener on the other side.


In the Anthropocene, the state of water stores and fluxes has become dependent on human as well as natural processes. Drought definitions need to be revisited to explicitly include human processes backslash and driving and modifying soil moisture drought and hydrological drought. We give recommendations for robust drought definitions to avoid confusion with related terms such as water scarcity and overexploitation. This article was authored by AF Van Loon, Kastal, G. D. Baldisari and others.