Hello, everyone. How are you? Today, we have the honor of doing a once-in-a-lifetime event. It's the first root key signing ceremony for Project Six Store. You have Dan, Lawrence, and a crew of a who's who in signature and software supply chain on this Juneteenth holiday. Spotlight Live starts now. All right, you all. I bet you're wondering about the hair, but we'll get to that in a moment. First off, I want to thank the CNCF for allowing us to do this. Tough is one of the projects that's being used as part of the process and ceremony today, so it's cool and it's awesome. Again, thank you to the CloudNative Computing Foundation. I want to go through the CNCF disclaimer first. This is an official live stream of the CNCF, and it's such a subject to the CNCF Code of Conduct. Please do not add anything to the chat or questions that would be in violation of that Code of Conduct. Basically, please be respectful of all. All right. The hair. I'm going to bring in the first guest. It's the master ceremonies are the leader here for this event. It's Dan Lawrence. Dan, Spotlight's on you, my friend. By using my crochet over and over again, I'm using my tagline. Spotlight. All right. You know how you inspired? I grew out my hair this week. I was like, look, dude, I need to catch up with you. What do you think? Is it good? Not everybody can grow hair as fast as you can, but I got to say I'm impressed. I think I just saw you a week ago and you look completely different. You see what I do? This is what I wanted to do for this big store root ceremony. I wanted to bring my A game, grow out some hair, all that kind of stuff, right? All right. So listen, you wrote a blog post about this. I kind of want to talk about just the whole overall process. Can we talk about what's going to go on today? Is that cool? Yeah, sure. I'll give a quick overview of what's going to be happening, who's going to be joining us, and all that stuff. Yeah, so we're looking here. You can see kind of an overview of the process and everything we're going through today. But at a high level, what we're doing is establishing a root of trust for the entire State Store project. So this is a bunch of different cryptographic keys that we're going to be putting together into one file at a high level. And then each key is going to sign that entire file. So we're going to have five keys and five signatures over that file. And what this is going to do is give us the root for everything else we're going to be signing and distributing and logging for the entire State Store project. The goal of State Store is to improve supply chain security for all of open source. And so what this actually means is that we're going to be opening up this root for other open source projects to use as well. So we're doing this. This is for open source. So we're doing this just like open source is meant to be. We're doing this as a community effort, which means we had to design this a little bit differently than most key ceremonies. So there are five of us joining today from different projects, different communities, different companies, different industries. And we're all going to be taking our brand new Yuba keys out of the package live here, showing that we're doing all this correctly. Doing this process, there are five different steps we're going to be going through to add these keys, sign all these keys and do everything on GitHub. And the audience is supposed to participate today. We need people to verify these steps as we go, especially today, because GitHub Actions has decided to take the afternoon off. Hug ops to all the GitHub Actions estuaries trying to get this back up. But yeah, we've got some manual commands that we're going to be showing. And people at home can thumbs up LGTMRPRs, post their outputs and stuff to help verify and make sure we're doing all this correctly. Fantastic. Again, it's with a well oil machine we have today. And with that, let's bring in the rest of our key folks. All right, so I'm going to start with Marina. Before I'm going to bring in everybody else as well, I'm going to bring in the key folks. So it's going to be Santiago and Bob Holloway and Luke Hines. Let me get rid of this caption here real quick. All right, y'all, state your name and tell us a little bit about yourself. Let's start with you, Marina. And in the order I put people in, is that cool? All right, yeah. Hi, I'm Marina. I am a PhD student at NYU. I'm a maintainer of the Update Framework, our TAF, as it's often called, and as well as somewhat I do a lot of work in on that and other projects in secure software distribution. And so yeah, excited to be here today. Fantastic. All right, Santiago, you're next. Hello, everyone. I am Santiago Ballers. I am a assistant professor of ECE at Purdue University. And I care about making sure that people produce software security and that people consume software security. And I think part of that whole picture is being here and making sure that we have a way to trust how software delivered pipelines work. Fantastic. OK, Bob, you're up next. Thanks. Hey, folks, Bob Calloway, a software engineer at Red Hat, also one of the steering committee members for SIGSTORE. Super excited about taking this off today. And kind of seeing the SIGSTORE project flourish. Fantastic. Last but certainly not least, I guess the co-creator or the creator, right, Luke of SIGSTORE. Can you kind of tell us a little bit about yourself? Yeah, sure. Yeah, so it's great to be here. Really excited about this. Yeah, so Luke Hines, I work at Red Hat in the CTO office, have a security engineering team that we have there. And yeah, I kind of worked around open source and security for a long, long time now. Another project I work on and help get off the ground is KeyLine. So it's another CNCF security project. And yeah, it's just great to be with these folks. You know, I consider them friends now. You know, it's been really a lot of fun building this project and very much a community effort. So it's great to see this get off. Fantastic. And again, thank you all. And obviously, Dan, you all know. So that is our five, right, Dan? Keep me honest here. You know, this is my first one. Once in a lifetime opportunity, y'all. This is it. This is the initial five. So as part of this, we've got this whole rotation process and kind of the route is going to be living and breathing just like a normal open source project. So this is the first five for the first four months. We're going to be meeting again sometime right around Coupe County in Los Angeles to sign the next one, rotate somebody out, and let somebody new in. Awesome. Our power is combined in the chat. Yeah, perfect. So folks that are watching this, now we have 72 folks joining. Thank you so much. It's amazing to have folks joining. And again, by the way, follow cloudnative.tv. You obviously have if you're chatting, so it's awesome. We love that. We have a lot of other amazing programming here as well. But with that, for further ado, let's bring in a couple of the witnesses. So to explain the witnesses part, so they have to essentially witness you all taking this out of the packages and all that fun stuff. Am I right? Did I kind of clip note or TLDR that too much? Close. Yeah, it's an important role. So the cryptographic keys are using the hardware tokens and stuff can produce these cryptographic attestations to kind of make sure we're doing this correctly from a hardware and crypto perspective. But this is about the community. So it's about knowing who we are and making sure we're who we say we are and stuff like that. So we've invited some special guests that a lot of people here probably know. And to authenticate ourselves, say, we are who we say we are, how they know us, and then kind of ask us some fun questions too. All right. So I'm going to bring in first person, my buddy, Trashank. How are you, my man? Having trouble hearing you, bud? Oh, man, you're muted. I'm muted. This is proof we're doing it live. If we recorded this, we would have gotten it perfectly right. Yep, it's 2020 again. Oops. I'm muted. All right, so it's OK, Trashank. We're going to move on to the next person.  We just need your eyes, not your voice, OK? So it's good. We'll roll with it. All right, so we have next up, Mike Malone. Tell us a little bit about yourself. Hey, everybody. Yeah, I'm Mike Malone. I'm a distributed systems and security nerd. I'm CEO of a company called SmallStep. We're a cloud-native security company, and we maintain a popular open-source tool chain for internal public key infrastructure. So today's events are definitely relevant to my interests. And for having me, I'm really excited to be here. Fantastic. All right, last but certainly not least, this guy, I think he wants to be on every single one of my shows. I don't know what's going on. It's there he is. Hey, hey, I heard there was going to be good here today. So that's a pop-by. My name is Stephen Augustus. I am the head of open source for Cisco. I'm also one of the Kubernetes release managers and secret release co-chair. So hey, I, again, I heard there was going to be good here and maybe snacks or something. There was no guarantee of snacks, Dan. I don't know what you're saying. We have a kind of little budget. We got to get a bigger budget. Got more people watching. We'll have a budget, all right? All right, so last but certainly not least, I think you're pretty much like the hands-on keyboard. Am I right? Like you're going to be helping out everybody and kind of going and doing what we need to do. Can you tell us a little bit about yourself? Yeah, I'm an engineer on Dance Team at Google and I love things all related to like privacy and security. I have like a big hobby about math and cryptography. So I feel like it was right for me to double check what they're doing is sound. Yeah, I'm really excited to catch and make any stakes and figure out what happens. All righty, so let's keep this moving over here. Dan, what are we doing first? Who's sharing the screens first? Let's go, let's make this rain. Yeah, so, Azra, you've got some slides and stuff explaining how the process works. But the first step here is that we're all going to be setting up and adding our public keys to the GitHub repository. So it's at sigstore slash root hyphen signing, which you should make in the chat. Thank you for one second. Dan, can we speak real quick just to make sure you're around? For sure. Oh yeah, hi guys, hi, hi. Perfect. Can you hear me? Yes. Great, thanks. Don't know what happened, but yeah, there we go. OK. Awesome. So Azra shows an overview of the repo and what's happening. This first step is important. This is the one where we get the actual public keys published in GitHub. And so we're going to do this normal open source project. There's going to be five PRs that get sent up with all of our public keys. And we're going to do some verifications using the new keys that we're going to be taking out of our packages live. Everybody can watch that they're brand new on the stream. And we will be adding them to the repository that way. Once everything is checked out, we'll merge those PRs correctly, and then we can start the signing process. So everybody, the scripts that we're going to be running, you can follow along by watching or in the scripts directory. We're going to be starting out with step one. So take out your keys, everybody. Brand new Yubiquis here. Awesome. Take them out, plug them in, and run step one. And if all goes well. Hold please, hold please. Hold them up again. Witnesses, please verify that all of them have it up there. We need serial numbers. Come on. Look, look, look, look, look, look, yeah, let's, yeah. What are those serial numbers? Look, Dan, we were in a big operation over here. We have to make sure that we, this is all good. We need to take a picture. Someone take a screen cap right now. Yeah. All right. Nice. Did someone mention there'd be prizes for the verifiers? Oh, yeah. Now's your chance to really prove yourself. Yeah, that's a good one. Once you get these up, we can talk about the prizes. So also, while we're doing this, to make sure this isn't recorded and everything, as we're proving these, the verifiers are going to be asking us some tricky questions to test us and make sure that we are doing this live. Wait until we get these up so you don't distract us from running these complicated git commands, and then we should be good to go. Folks at home, are you able to see the screen OK? I just want to make sure. Just give me a thumbs up in the chat. If you need us to make it a little larger, we can also do that. I think they're more upset that we are not serving pineapple pizzas. OK, moving on, moving on, everyone, moving on. I know who it is. Magno, I'm kicking you out of this chat. I'm telling you, I have that power now, all right? I'm out of here, guy. All right, now I'm just kidding. I was hoping for some fryhawk for cookies. No real trust. Right there. Azra, right there. All right, good. So my PR is created with my key inside of it. Yeah, let's go check it out. All right, so. Anyone following at home? Let's just make sure we give the URL so everybody knows where to go. Yeah, you can github.com. Slash six stores slash root dash signing. So if you go to pull requests, people will start trickling in theirs. And what I'm going to do is I am going to act as verifier here. So, oh, that's great. See, I passed. I'll pass right there. So what hard work should we're going to be doing right now? If you want like a rough overview, feel free to read this on your own time. But this verification script that I'm going to run is going to check that the search added in dance PR, which I'll show you in just a second, are all changed, valid. And then after that, I'll just be doing some manual checks to make sure that Dan didn't post something on the side that doesn't match up. So all right, so what you need to do is if you want to follow along, by the way, and run these things, all you need to do is clone and fork the directory, go in there, and then follow along with the commands that I'm doing. So what I'm going to do is I'm going to verify PR number two right here. Nice, I see some thumbs up. Thank you for those. What I get is verify 0, 7, 8, 7, 7, 8. Going to the PR, seeing what files he added, looks to line up with the serial number right there. So what I'm doing is verifying the search chain that he added from the key cert to the device cert all the way up to Ubicode's root cert. Then what I'm just going to do just to show you this first one, we can manually verify with OpenSSL. So if you copy and paste these commands in here, you'll see that it verifies OK. And what I want to show you right now is if I go in and take the key certificate, print that out, I'll get the PEM encoded key certificate, which should line up with this pub key that I see right here. So this is the kind of verification we're doing. We're extracting out the serial number, making sure it lines up with the directory and verifying this chain. All this does is verify that Dan did, in fact, generate the public key on the device. So I'm going to go give this an LGTM right here, approve that. Again, if you do this, feel free to leave a comment, LGTM it. We're going to give out prizers to random people who are verifying. So feel free to add in your output. I'm going to go ahead in the background and continue verifying things. Feel free to watch. Yeah, and Magno had exactly what we have these special guests here for, so we should all show today's printed newspaper. I don't know about you, but I don't have newspapers. So that's why we brought Mike and Trishonk and Steven. So you all have some questions for us, right? Yeah, yeah, sure. Mike, do you want to start first? Sure. Let's start with Dan, since you're our host here. Can you visit reddit.com, maybe do an incognito. I want a logged out. And tell me what the number one story is on Reddit right now and how many of those? This could be potentially dangerous. That's a really interesting question. All right, I got a question. What's your story? It says on the top of reddit.com, there are 59.7000 points or votes. Your consciousness is sent back to when you were at age 15 and you maintain all of your current knowledge and experience. What do you do? Is it a deep question? That is what I see. I vouch for this. This is actually true. Wow, that's hilarious. Can you answer the question? Anybody? Yeah. Oh, man. What do I do? Buy Bitcoin. Yeah, buy Tesla. If you can answer, it's not legit. Yeah, I just want to chime in. The reason why there was one close from 15 minutes ago was a test run because GitHub Actions was out. So feel free to discard that. That was, I think, Dan's previous key. So there was nothing pushed to the repo. Yeah, we cleared the repos before this. There's an archived copy, actually, so we did a whole bunch of test runs. We should mention this. There's an archived repo called six-door root signing practice where we did all of our previous test runs with different keys. And then we archived that one. We did it, renamed it over to here. And then we did a couple of tests around 15 minutes before this started because CI never works the first time in a repo. That's the law of CI. And of course, GitHub Actions was down at the time, so the law was proved correct. But it came back as we started this ceremony. There's a somebody named Kim Sturves says, answer the question, Dan. Did you answer the question? Stop stalling. I don't know what it was. Let's get back. Trashank actually sent me a private message. He's very upset. He's just not sure. My consciousness has sent back to when you were at age 50. So I'm not sure I understand the question. I'm loving all these verifications, everyone. Love it. And then the prizes for verifiers, we have these YubiKey experience packs. So if you want these, it's fancy inside. You get a whole bunch of different keys. These are some of the same ones we're using today. So verifiers, keep going. So Dan, I think what the question is really trying to say in red, it is, if you could go back to 15, would you huddle and buy a Bitcoin? What would you do with your life savings? I don't know how much you had in a piggy bank back then. Yeah, it probably would have been enough if I put it into Bitcoin or something like that to be useful today, as long as I got out at the right time. Just kind of shucking everybody says, I want to brush my teeth more or something like that. Like that's a tough answer in red. Wait, what?  Where sunscreen is one of those answers? Oh, yeah, that was a famous song to that effect. I forgot by whom, Baz Lerman or something. All right, are we good for a step? Matt Lerman. All right. I have another question if we're ready for one. Maybe I'll give this a look. What is the current temperature in Tokyo? Oh, OK. But he needs to go to Tokyo. Googling it doesn't count. So keep in mind, 21 centigrade. And it's raining. It's 3 AM in Tokyo. Just what I see here. I just switched the camera. Much information. If you want to chime in CTL Fish, I think, how do we publish that verify? Six needed.  Show you what you did. Any extra commands you did? Yeah. If you have a GitHub account, feel free to comment right here. I'm going to go ahead and start merging the ones with multiple approvals. And then we'll move on whenever ready. What's with all the pineapple pizza hate? This is going down in history. Like, this is like irrevocable right now. It's a wonderful day to be alive. So let's move on and do what we need to do. No more pineapple. All right, so once these all get merged, one person will run step 1.5, which just kind of joins these up into one file. And then we'll start signing after that. Osr did a bunch of awesome work here to figure out how to do all this in a way that would be free of get merged conflicts so that we could do this in parallel instead of all having to go one at a time. Osr, the true hero up today. You all are great. Osr, props, you know, right here.  It's like five people rooted in one person. So who's going to do step 1.5? We should get the chat to vote. Yeah, yeah, anybody want to elect someone? It's a great idea. Any volunteers? Who's up? Who wants to volunteer? Everybody was all about the pineapple. You can't get it. Immerse yourself in this. Process, you all. For God's sake. OK, but I'm the one that stuff breaks on. Hold on, Luke. The people have spoken. Mike, Mike. Oh, yeah, OK. Now he's really key holder. Mike, are you set up for the GitHub repository or do you want to pass that on to someone else? You know, I haven't pulled. If that's all I need, I've been verifying and running the verify scripts. So tell me what look at here. I was in the middle of verifying, but I can try. All you need to do is run script step 1.5 I'm not going to run it. But if this is a step that anyone can run because all it does is collect all the data that the 5p holders let us have. And after I run it, you'll just see a pull request window open up. And that'll, yeah, just click the rewind line. I'm running it right now. You might have to set your GitHub username and stuff so we can send the pull request correctly, but. I got an error dot slash tough no such file or directory. Do I need to? Yeah, give me the tip zero. Step zero to set up. We'll let it happen. Sometimes it's going to go cash. This Dan here is the only good thing to come from the pandemic. Wow. He's talking about my hair, Dan. Clearly, clearly. So that could take a bit of time to pull in all the. Yeah, you're going to have to stop. All right, should we go for somebody up now? You want to go to somebody else or what's our story? What are we doing? Your screen is shared. Or you could just do it so people can watch. Yeah, I'll go for it. I think I should have step zero in here already done from before. Yep, all right. And let's go for step 1.5. Watch it live happen. Cross your fingers. All righty, just pushing. And I'm going to open up this new branch. Sorry about this. You know what? I'm just going to go here. Click on that link. There we go. Set up the route. Let's compare it. Dan, I think I'm sorry, Dan. I think you got to do it. What happened? There's a question from Jacques Chester. And the question is, it's a valid question or thought, is action, is can we show the script source in the screen share for posterity? Yeah, yeah, go for it. I'll do that. Dan, you mind running it and I'll show the script? Sure. Yeah, what happened when you ran it? Just curious. My branch from the deletion. Yeah. So yeah, so basically what's going on is if I go into scripts right here and I'll show you step 1.5 that Dan is running in the background over here, we're setting up our get state. And then over here, we're running this tough in it repository with the four targets that we're adding to the metadata. The targets are right here. This is also a good point for verifiers to go and check. But what we have here is the RECORP public key, which you can find on RECORP.6store.dev slash API slash V1 slash log slash public key. So you can actually download the public key. I know that was a garbage mess, but this is the public key. And you can also go ahead, find the full CO certificate. That's shown right here on our full CO repository. So these are the targets that we're verifying. And so can you show the script source? Yeah, so let me show you the actual like tough binary source. And I'll just display that until I merge that PR.  So we've satisfied that question for you. Not very satisfying. We're going to do a little bit of a source dive. This is the actual command. And then the init script right here, so it's a mess. But it's setting up a bunch of JSON right here. We're adding lots of expirations. Let's go ahead and check the source. I'll keep that displayed. Let's go back to root signing. All right, setting up the root. So let's go ahead and check what's going on here. Verifiers, please go ahead and verify that we have five placeholder signatures. Our expirations in about six months. We've got our five keys here with the Shahs matching up with the public keys. And we've got five root keys with a threshold of three for each top level role here. So expirations look good. Yeah, good question. It depends on the threshold. Yep. Yep, threshold is three out of five. For safety reasons, we're just signing all five today just because we can. It's good always to have all of us here. And then these are the targets that we're just adding, which I just showed you before. So yeah, verifiers, if you go ahead, verify a couple of those things. That'd be great. Yeah, so the three out of the five is our threshold for us to make any changes to this. We have to have three signatures from these keys. And it is good for six months. So sometime in the next six months, we have to do this again. And that's when we'll all start doing, you know, rotating people in and out. So yeah, we can't all get on a plane together in the next four months. But we'll be kind of rotating these things forever. There's a question. How are you going to protect your Yubi keys? Do you have backups in case your keys are lost, or destroyed, or stolen? That's from Andrea Deidre. I've got a big dog. There's your answer. That's a good question. Yeah, so we all have backups and to, you know, rotate one of these out to a certain backup. We would have to get the other four, or at least three out of the other four people to signify that that is the new correct one. So if two of us lose them at the same time, we're still good. If three do, then it's bad. So we've got to meet pretty quickly and refresh a backup if somebody does lose one. Yeah, thanks for running the verification script. As you can see, this combined all of the five public keys that were previously verified. So I'm going to go ahead and merge this so we can move on to some more signing steps. Sound good, everyone? Looks good to me. Looks good to me. I know. Always be closing, Augustus. Always be closing. Always be closing. All right, time for step two. So we're in round two right here. We're going to start signing things. We're not playing today, everybody. We're in round two. All right, you at home, following home.  We're enjoying this a lot. So round two is the actual goods now. Maybe Azra, if you could help explain what's going on here, that would be great. Yeah, let me pull up some of that draft metadata that we have committed. So in these three signing phases that we're doing right now, we're doing a first to sign the root and target. So the root is going to attest to the five root keys that we have. And the targets are going to attest to the four targets that we've added. The RECOR public key, the CTFE key, the full CO root CA, and our artifact signing key that we've been signing our releases with. So if you ever doubt us in the future for any of those four things, you can always come back to this metadata and verify that you indeed saw the ceremony. So what we're going to be doing is signing these sequentially because the later snapshot and timestamps depend on the previous results. So we're going to be signing these. Let me show you real quick. So we have some staged metadata just added from that previous step. Here's the root.json and people as they trickle in their PRs are going to be filling in the signature field that corresponds to their key ID. What you can do is you can choose a person along the way, choose your favorite key holder and take a look at the signature or key ID that they have and follow along theirs, you know, and check Marina's.  All right, so. And Jacques wants to see the source for number two as well. You can also just sort of get hash or the get commit hash two for each one of these steps. There's another ask from Jacques who's now my favorite in the chat. I saw a source for 1.5 in the Tough Cli. Can we show two please? Yeah, I'll go for it. So let me just show you real quick. You know what, that's great. I'm glad that I'll just pull up. Dider is a verification here and I'll show you the source. So the source for step two. What this is doing is signing repository for roles root and target, like I just mentioned before. And as you can see on the right-hand side, Santiago just added one out of three of the threshold signatures for root and targets. So this is what we expect. Yeah, and then people can go ahead, keep verifying those. I'm gonna verify, or I'm gonna wait to merge all of them until we get like one or two LDTMs. And let me go ahead and show you some of the source code here. So this is in MD Tough App and sign. All right, so this is what it is. Actually, this one's really simple. So we're gonna get the payload out that we're signing, canonicalize it, and then sign it. Then we're gonna add your signature to your particular key ID and then set the metadata. So this one's very simple. Let's go ahead and see if people can verify. So yeah, I just verified Santiago's. I'll give that an LGTM. So yeah, please trickle in those LGTMs. Any other questions for us to make sure it's still today and we didn't splice the video? I'd expect as much from Luke Hines though. He's so shifty, y'all, so shifty. All right, I have one. Mike, go for it, go for it. Who's looking for something to do? How about, let's see, where did Dan and Luke, Santiago? Okay, how can I help you? We're gonna look at the current price of horn on the Chicago Mercantile Exchange. So if you could go to- I'm sorry, this is because I'm close to Chicago. Should I go on the street and ask? If you could go to cmegroup.com. Group.com. So in the end, we're gonna need to get a Bloomberg terminal now. I should.  They got it. I think it's corn. And it's gonna suggest corn feature quotes. Corn features. Click that. Are people speculating with, of course they're speculating with the price of corn, right? It's like trading places. Remember that movie? Trading Places? No, I did not. Okay, I don't even know what I'm looking at.  I'll tell you what I need to hear. So you should land on a page. You got sort of a blue header and there are gonna be some letters and numbers, like, you know, a couple inches down. Read out. There's a thing that's called the Globex code. That's basically a ticker. I think it's Z, C, Z1. And then last five, six. Corpostrophe six. Yep. And then what's the volume? All of this, 173,159. Right. And that's what I see. And on that page, just for posterity, they label that as of June 18th, 2021 at 119 p.m. C.T. So there should be a good log of that. For anybody that's taking this in the future. All right, should we merge these? Yeah, I'm super thrilled. I'm seeing some repeated verifiers here. Alrighty. Someone needs to go and verify. Let me check Santiago. Santiago seems a little dubious to me. All right, we got one verifier in there. I call in the chat, come and verify number four. Dan, you're always getting like 10 plus verifications. Like either people really trust you or they're really skeptical. They trust us here. The opposite. They trust us here. Agastas, you said that too? Yeah, yeah. That's his root of trust, right? Roots of trust. If they trusted me, they wouldn't be verifying. So I think I'm the least trustworthy. So somebody in the chat asked about the price of tortillas. I think it's 11 pesos, am I right? Mexico City? Is that something you can just look up? Yeah. I think it would have a price of corn. It's a cross-currant corn, right? Current vaccination rates for Italy. Dose is given 2.5 billion, fully vaccinated, 748 million, which is 9.6% of the population fully vaccinated. I said population. I was gonna ask that, but somebody ruined the question for me. Are people like viewing how strange my GitHub is acting? Like, this is on the record now. Watch this trick. Let's see if it happens. Didn't work this time. Passion validation. Yep. It must have been the Netflix intern. Oh my God. Integration test number two starts today. Okay, so what email? So here's a question to verify. What email did anyone of you get a funny email from a 13th streaming company yesterday and which one was it? I mean, I got it, but... Nice one, Marina, you have... You can name names live. No name names. Yeah, yeah, exactly. Yeah, it was from HBO Max. That was hilarious. So they actually, it looks like a poor intern or somebody managed to email everyone about the integration test. Very nice, very glad it worked. Kind of get more integrated in that, right? Are we all merged? Time for step three. Yep. I just pulled up the code preemptively expecting that. So yeah, right now we're gonna move on after roles and target. We're moving on to snapshot right here. So this is with a script that they're running. Step number three, signing the snapshot. So same code as before, just with a different file. We're back on round three. Ding, ding. Fight.  Wow, already 12 seconds to remember you two. You guys are fast, that's crazy. So again, these last two rounds are all pretty much the same. I just wanna show this one cool thing. Now that we merged all the root and targets, we currently have success for all of the signatures validated on root and targets. So now with Marina's PR number 13, she's added a signature on snapshot. The really cool thing is, I would love to see a verifier in the chat, verify that this SHA 512 lines up with the root.json that's in the GitHub repo. Props to you, if you can add a comment saying, like, you know, showing the output of what you did to get that matching SHA, like, I will like your, I don't have authority to give prizes, but like if I did, I would. I, could you take a look at a Bob Calloway's, it's a little suspect, his PR, thanks. Yeah, yeah, I'll go check. Thank you very much. He's been a little quiet. Yeah, nobody's gonna notice me. I'll turn my camera off. You're number 16, all right. So I've got one. Yay! All right, I want Bob to go to github.com, Kubernetes, Kubernetes and read the last commit SHA for us. The only thing that changes faster than the price of corn by Chicago Market Tile Exchange. Ha ha ha ha! All right, last one merged in was four alpha, Frank Bob, seven two alpha. All right, you're the same thing. That commit is a part of history. Yeah, like I said, when I go back and check for approvals and merges, would love to see someone verify that the SHA for root.json and the repo matches the ones that are in the pull requests. Santiago's a little sus right now. Ha ha ha ha! Always is. It's just a long meeting, just got me thinking. So Dan, what's the plan for key rotation? What's the plan for it? Oh, that's a, got somebody in mind. I don't know if we wanna spoil the special announcement just yet. Is it special, is it like a surprise? It could be, yeah. The four month window though does line up pretty well with KubeCon if people are gonna be there. There'll be a reveal, and there'll also be a haircut. There could be, it doesn't happen. How are we doing on views right now? We are at 75, this is actually a record for the first two weeks of the launch of CloudNative TV. So thank you all for joining, appreciate it. See, I have no problem with the haircut there. My real problem is that now I have to wait three more months to get my haircut at all. I'm gonna go ahead and merge the ones with the most comments. I'm actively checking how people are verifying. I see lots of script verifications, just great. Oop, there's a request. Pineapple pizzas from the CSF, that one?  Oh, oh, what's that? I'm gonna take the keys 90 degrees. Nice! That is Tiziano. Can you all rotate your keys 90 degrees clockwise? What the? I'm gonna rotate my whole computer. I see Jay Chester, I just wanna give you a shout out. Thank you so much for checking that shot. Yeah, all of them, nice. All right, I see some getting merged. Yep, prepare yourself, we've got one more signing round to go. Okay, I have a question to verify that we're actually doing this today. What's the price of Bitcoin right now? Or should we go for Dodgecoin? Whatever you like. Who's next? Yeah, there's coin, there's coin. I think Bob's gonna go. Bob? Yeah, Bob, what's the price of Dodgecoin? Is it Moon and Lambos yet? Let's see here. I'm trying to see when I can retire. According to coin desk, it is 0.285892. Is that good, does anyone know? Looks like it's gone down today. Oh no, like 6.57%, yeah, yeah, you're right. Tiz is here. That is insane. Well, good thing I wouldn't put my 401k in there. I'd in here. What it is, Elon Musk knows about this ceremony, so he's going out of tweet to get the price to drop. Elon, yes, let's call Elon. We validate that. Trashank did that on purpose so he can short it, and he can make some money off of it. All right, there's a question actually. There's a question here, is where is the root key itself stored? Let me show you. All right, so these were the keys that were just added by the first round where they were provisioning keys. And when you go to the staged repo and you take a look at root.json, if you scroll down over here, the root.json is the thing that's actually signing off on the root itself. So in all of these, we'll see keys right here that we're signing. These are the key IDs, and this is the public key value that corresponds to this public key right here. So you can go ahead and also verify that the Shahs line up there. But yeah, these are the actual keys involved and they line up with the keys that are published in this keys directory. Yeah, and we're using hardware tokens here. So the private keys are actually on the tokens. They're generated there. They can't be removed from the tokens. The stuff we did in step one used device attestations from the tokens to prove that. So you can check these keys against the certificates in step one to chain it all the way back to the manufacturer. So there's no single one root key. All the root keys are on the devices. Yeah, and I started seeing some timestamp ones. So I just outputted the script that they just ran step four and that was signing the timestamp roll. And as you can see, Cepenado left some verification on marinas and now we have a assigned route, assigned snapshot and assigned targets. And this PR adds one valid signature to the timestamp and we go ahead and check. And voila, there it is. And we have a hash of the snapshot file, which again, totally welcome to verify. So let's go ahead and verify that. Verify PR number 18. And so this is the last step. Once all of these are merged, we just copy it over to a published directory. I think it's called and that marks it as done. Yeah, the nice thing about this is that you have a total log now of and video proof of anyone who did something to this repo. So if you need to come find us and blame us for something. You know who we are. And then the final step when we're all done with this is to, the final step when we're all done with this and it's all public is for everybody to click fork and update your forks. So that way you're making independent copies that are all verified with Shah's back. So if we ever try to rewrite history or anything, we'll have all these different records across. Yeah, I just wanted to comment that this is a really cool thing that you guys are doing. There's very few public key ceremonies, nevermind private ones. No one really talks about it. So I'm really glad you guys are doing this in the open so that other people can look and learn from you guys and even do their own in the public. I think it's a great idea. Yeah, I'm getting ideas. I'm getting ideas over here for Kubernetes. You know where there's a great place for you all to do these things on? CloudNative.tv. Ah! It's good to see everyone. Paula? So we did ours with Git and GitHub. For the Kubernetes one, can we use kubectl and CRDs? I don't want to talk about that. You heard it here first, everyone. You heard it here first. Augustus is committing to a search ceremony live at KubeCon. You heard it here first. Yeah. Can we tweak this later? We're live, right? We are live. Is this live? Hey, Luke. Oh, we're doing a step four, aren't we? Luke, one, two, three. OK. Marina, you've been styling this whole time. I kind of want to get a pulse from you. How are you feeling about the whole thing? Are you good? Any thoughts? I'm good.   I don't think we have. It's a good point. It's a good question. I've got a good question. OK. We're going to figure out where a particular flight is right now. So cool. Wow. FlightAware.com. OK. I looked up a flight before this. It's a flight from Dubai to Minsk. So up top, there's a search bar. Type in FDB1715. OK, fly you by. Yeah. Find it. OK. On the right, there's a section that says flight details and a link right under it that says view track log. OK, so we'll hear the track log. Scroll all the way to the bottom and it'll give the most recent lat long for that flight. Can you read the time, the latitude and longitude? OK, so the most recent time I see is Friday at 2.47, 23 PM Eastern time. And then the latitude is 42.9029. And the longitude is 33.6894. And it's heading 292 degrees left. I don't know what that means. But yeah. Mike, this is amazing. Amazing level of verifying. Yeah, exactly. You're not worried about your personal fortune, like Tashank is. You're worried about the flight paths and all that. I thought you were going to ask for Oceanic 815, Mike. Where is that flight? I've just had a great idea for the flight. That'd be great. You had a really good idea for a verification. I know this is sort of coming off the cuff, so to say. Somebody open a Twitter page, put an OTP code in, and then post it as a tweet. There we go. Exactly. Deep timestamp, then. Now the audience is being really cheeky. The only one is to do a reverse during test. I always fell that long. And Dan, I think needs to explain, is Oceania a flight? Yeah, that was the flight from loss to the TV show. The flight that just disappeared, I thought. Are you watching the loss in Malaysia one? And also the flight? Somebody did. Yeah, I was afraid someone was going to ask about MH37. Very sad. Yeah. All right, I'm happy to report the team and I have successfully verified round four. What do we do? Do we all fork now? No. Hey, can we, Azra, can we go through just a recap? There we go. Yep. Yep. So we got up to round four. So after provisioning the keys that you saw in the keys directory, we created that tougher repository, did three rounds of signing sequentially on the four roles that we have. And now we're on this final publishing step. So we need one person from the key holders to run step five, which I will show you again what they are going to run. So let me go over here. Show you step five. And all that does is publish the repository. And I will show you again the script. So yeah, who's going to do that? I did it. All right. So yeah, this is all it does. It goes through the code go tough repo.commit, which will verify all the signatures and push it to like a repository. So it's no longer going to be staged. And this is our final step. If you run verify on this, now what we're going to be doing is taking the go tough client and seeing if you can successfully verify and download the targets with that. So you'll see some special output. First verifier, I'll give a shout out too. All right. Let's take a look at this. So yeah, basically what it did, it moved it all to a repository rather than stage. root.json. And we got a move here, file renamed with no changes. Good job, Jen. I trust you. Didn't sneak any weird binary files in here. And let's take a look at Verify. Nice. All right. So we've strong.jz posted what happened when you did. Let's do script.jz. Shout out to James Strong. Yeah. And Carlos, of course. Carlos, the man beast. So here you see the four targets successfully retrieved and verified against that metadata that we just created together. All right. Yeah, that was the final step. I'm going to get a couple more verifications on this. And then, yeah, we're really good to go. Fork, tweet, publish. Give me a shout out. There's a question. Excuse me, there a thought here. This video is not legit until somebody's pet interrupts the live stream. Anybody's pet, please go ahead and interrupt the live stream. OK? I'm going to get one. Somebody. Oh, yeah, he has a large dog. He's guarding his Yubiki. This is awesome. There we go. Pets, everyone. And again, right there. She's like, you woke me up from a nap just to do this. Can we all do a stand and go for Azra, please? Can we all just seriously? Great job. Can we swallow our Yubiki? I got a second. OK, looks at home. Can somebody wrap up everything we did in a TLDR? Are we good? Let's just put a bow on it. Who else will go next? Yeah, we are. You want to go ahead? You're good. Yeah, so we're all done. As soon as this gets merged, we have the root. Everybody, click Fork. Copy it off of GitHub, clone it, put it on GitLab, put it on your flash drives, put it anywhere you can. We now have the root, and everything we do will be chained back to this one. I want to thank Azra for being the coordinator for all of this. Thank Dan and CloudNativeTV, of course. Follow this for other awesome shows. How many viewers did we hit? What was our record? 80. 80, is that a new record? It's a record. Awesome, wow. Yeah, and thanks everybody here for verifying. This was awesome. And everyone, look, I was not mincing words when I said, like all jokes aside, we had a lot of fun today, but this was a monumental thing. I don't think this has ever been done elsewhere. This has been in public. I am so excited to be part of this, but this group has been fantastic. Also, you folks at home that were part of this, it's just great, really good interactivity and all of that. So it was a really cool process, everyone. Thank you all. I'm going to have some parting words here. Real quick, just for next week, you all, just so I will thank you. So everyone, again, I'm closing with today. This weekend, the holiday is called Juneteenth. It's a day of recognition, education, and celebration. I want us to ensure that we're thinking in terms of taking care of one another and being the community that we are. We are one large community, one large community. I want to thank everybody that was part of the six-door key ceremony, and I want you to remember community. The spotlight is on you.


Hey, Nico Carver here, nebulaphotos.com. I have a number of updates for you all concerning the YouTube channel and Patreon, both of which are doing super well, and I can't thank all of you enough for the continued support. The first big update is that this is going to be the last five minute Friday for 2021, meaning I'm not going to be releasing any more videos on Fridays at 10.30, like I have been. I still have tons of ideas for shorter videos, but after releasing a five minute Friday video every week for six months now, I just need to shake up my routine and I want to work on finishing some bigger projects that are in the works, like the video where I'm going to critique 250 of your astrophotos that you've already sent in. And so expect some of those longer videos to round out 2021. And for the rest of the year, I'll just be releasing them when they're done. So keep an eye out. I might do a few as the premiere style where you get to sort of comment along the first time it's played. And then my other updates are all about Patreon. And for anyone that hasn't heard of Patreon, it's a system, a website for supporting YouTube channels and podcasts and things like that. So you can support my Patreon by contributing anywhere from one to $7 per month. But in turn, for your contribution over on Patreon, you actually get access to a number of perks, many of which I'll explain in this video. But before I do, I want to thank everyone who already supports me on Patreon. I just hit a milestone over there, which was 500 patrons. It's hard to believe. And I, but I'd long set up this goal system in Patreon where it said if I hit 500 patrons, I'll make a Patreon exclusive video and the topic would be chosen by my patrons. So that process is underway, but let me now go through some of the other perks of being on my Patreon. We do a monthly Zoom call on Sundays. The next one is going to be on Sunday, December 5th. And this is a chance for me or sometimes patrons to give short presentations. And then we have a discussion, a Q&A session on everything as to photography. It's usually a nice lively discussion and a great chance to catch up with people and meet new people. In addition to meeting people through the Zoom calls, we also have a Discord server, which is like a messaging app. You could also do it on your computer. And we have a number of channels on the Discord that are only open to Patreon members, including our monthly imaging challenges, which I've made a previous video on, but to recap every month, there's a new object to photograph. And each month we pick a winner of the community pick. And then there's also Niko's pick, which is my favorite image. And I share those winning images on Astroban and Instagram. And the winners also get a license for Astro Photography Tool, which is a cool piece of software for image acquisition if you're using a Windows computer. To wrap up these updates, I wanna also promote a new feature we're organizing over on Discord for patrons only, which is a quarterly group project. And the first group project we're gonna do is gonna be a multifocal length effort on the Northern Orion region, centered on the beautiful reflection nebula, Messier 78. And this project is literally just getting underway. So if you're interested in a grand collaboration that is also really a bit of an experiment, now is the perfect time to join in, contribute your data, your ideas, or your processing skills. We're open to anyone who wants to participate in some way. Well, that's what it, if you're in the USA, I hope you're having a nice holiday weekend. And till next time, this has been Niko Carver, nebulaphotos.com. Clear skies.


If a student uploads a PDF file as an assignment submission in Moodle 2.6, the teacher can annotate it directly on the course page rather than needing to download it. This feature can be accessed by going to the individual student's grading screen and then scrolling down to the feedback area and clicking Launch PDF Editor. This then displays the student's assignment with options at the top for the teacher to, for example, add stamps the administrator might have uploaded or highlight certain words or phrases in the text, or add comments and the teacher may either write the comments directly themselves or choose from a comment that they've previously saved. Once they've saved the submission, it can be returned to the students with the annotations displayed.


This 2016 Ford F350 Crew Cab Short Box Single Re-Wheel Platinum is stock number 12102Z. We are here at Summit Automotive in Fond du Lac, Wisconsin, near New and used heavy-duty truck headquarters. This 2016 Ford F350 has the 6.7 liter Power Stroke diesel. This truck has been fully-safetyed and inspected by our service shop as a fresh oil and filter change. All the fluids have been checked and topped off. This truck has gone through 100% and is 100% ready to go. Shadow Black Clear Coat is the color we shoot all of our videos in 1080p 60 frames per second. So if you have HD capabilities on your computer, tablet, smartphone, or television, I highly recommend turning them on right now because it is definitely your best way to check out the quality, condition, and options of the truck before seeing it in person. And if you like the video and would like to subscribe to our YouTube channel to see videos like this, we do each and every day of our new and used inventory in the upper right hand part of the screen is a link to our YouTube channel to subscribe. Click that, and then click the bell notifications, you'll get updates on the videos we do each and every day here at Summit Auto. This one comes with the 20 inch polished and painted alloy rims. It has Michelin LTX AT, LT27565R20 tires, and these tires have probably about I'd say 70% of the tread left on them. Frame and underbody is in really nice shape for a 2016. Front fender is in pretty nice condition as well. Headlight lenses are nice and clear. Front bumper is in great condition too. I didn't see any major dents or dings on there, and the lower valance is very nice as well. Factory fog lights, you get that platinum trimmed grille. The hood is in very nice shape as well. Passengers side front fender looks really good too. I didn't see any dents or dings on there. And the passengers side rim, no major scuffs or scrapes. As you go down this side of the truck, take note of how clean the body is, how reflective and mirror like that paint is. Super clean down this side of the truck. We take these HD videos, so if you are far away or even if you're close by and just cannot make the trip down but you're still interested in purchasing the vehicle, you can see the truck, hear the truck, and have confidence in the vehicle that you're looking at before you even get here. So when you do get here, there's absolutely no surprises, and you can make a smart and informed buying decision from wherever you're at. And if this video helps you make the buying decision on this truck and you do buy it, let your salesman know that you saw the video and that Brett sent you. Back rim is in excellent shape, and the back tires have just as much tread as the front tires. Take a look at how clean this frame and underbody is on this truck. Very, very nice, very little corrosion, and it's like that all the way underneath has all the remaining factory exhaust. Looks like a brand new truck under here. Cab corners, lower rockers are in excellent shape, and the factory chrome step bars are in very nice condition as well. Get the platinum block lettering on the box there, the nice chrome tipped exhaust. Coming around to the back, the rear bumper is in great shape. Full towing package, which includes a receiver hitched four pin and seven pin wiring. Tailgate is in excellent condition as well. This one does have the locking tailgate. It also has the tailgate step assist. It comes with a Kurt 16,000 pound fifth wheel spraying bed liner, and it has the seven pin wiring on it as well. Beds in really nice shape, and that fifth wheel is included with the truck. With that tailgate step assist comes with a gator hard fold up tonneau cover, and that is in really nice shape too. Coming around the driver's side just as clean as that passenger's side, and see just how mirror like that paint is. Very nice on this truck. This back rim is in excellent shape as well. No scuffs or scrapes, and down the rest of the side of the vehicle looks really, really good. As of the door code entry, if you ever wanted to figure out where your door code is, on your 2011 to 2016 Super Duty and the upper right hand part of the screen is a link to the video how to find your own personal door code on your truck. Heated mirrors, built in directional signals, has the power telescopic mirrors, power fold in mirrors, and to that extent with the door code, we do have the door code for this truck.  You get the platinum stitched seats, no rips, no tears on there. Very nice condition. Weather tech, all weather floor mats, auto headlamps, power pedals, wood grain trim on the dash, on the doors, power windows, power locks, power mirrors, memory driver's seat, it does have the Sony sound system, and these mirrors do power fold in. I always like showing both sides so that you know that both sides are working properly. Now, the telescopic feature only works when the ignition is on, so we'll hop inside, we'll turn that ignition on, check out the miles, the radio, those mirrors, and everything that this truck has to offer on the interior. As long as we're waiting for that to load up, you can see that mirror's working good as is that mirror. Alright, inside the instrument cluster is very nice and clean, and this truck has 23,958 miles. You get all your information and your gauges and stuff right there. Comes with the leather wrapped, heated wood grain trim steering wheel, Bluetooth and audio controls on the right, cruise controls and information center controls on the left. Six speed automatic transmission. This one has the Ford MyTouch radio, AM, FM, and Sirius XM radio capabilities. Your climate controls are right here as well, including your heated and cooled seat buttons, your heated steering wheel button, and then up here is your factory navigation system. This is also where your backup camera is going to show up, and that's working nicely.  Four cup holders there, there's storage underneath there, a 12-volt power point, 110-volt, 150-watt plug-in. Passenger side format and seat are in excellent condition, no rips or tears. This truck's never been smoked in, smells like new inside, and it does come with the power sunroof, side curtain airbags, home link buttons for your garage door security systems and lighting systems, and up here are your map lights and power sliding rear window buttons. We'll take a quick look at the back seats, and then we'll start it up and take a look under the hood. Back seats are just as clean as the front seats, no rips or tears back here. Get the platinum stitched on the back seats as well. Four sliding rear window with the built-in rear defrost, there is a lockable storage compartment underneath the seats that locks with the ignition key, there's storage on both sides, and then you get the factory subwoofer back here, which is that right there, and then you get the latch tether anchors. Weather tech floor map back here as well, you also get 110-volt, 150-watt plug-in and another 12-volt power point, another look at those side curtain airbags, child safety locks on the back doors and the bottoms of the doors, all in excellent condition. We'll start it up, take a look under the hood, starts right up, no check engine lights or anything like that. I would personally like to thank you for checking out the video today, and hopefully from this HD video, you have been able to verify the quality and condition of this truck all the way around, inside and out. Under the hood we have the 6.7-liter power stroke diesel engine, engine bay is very clean, runs very smooth. Once again, this truck has been fully safe and inspected by our service shop has a fresh oil and filter change, all the fluids have been checked and topped off, and this truck is 100% ready to go, there's your mission sticker. This truck's 100% ready to go. I would highly recommend this truck from a quality and condition standpoint, and to see more pictures of this truck or one of our other 450 new and used cars, trucks, SUVs, minivans, Wranglers, halftons, three-quarter tons, one tons, you name it, we gotta go to that website right there, www.summitauto.com. Full pictures and descriptions of every single vehicle from two locations, all at www.summitauto.com. If you'd like to check out more HD videos, you can go to www.youtube.com. Remember to like, subscribe, and share on this video and all the videos that you see there. Click the bell notifications, you'll get updates on the videos we do each and every day here at Summit Auto. In fact, in a second you'll see a link to subscribe to our YouTube channel in the upper left, a link to more F-350 videos like this one in the upper right, a link to this vehicle on our website in the lower left, and a link to one of our latest YouTube videos in the lower right. Click those check us out, and we're super excited to help you with this Altra Queen 2016 Ford F-350 Crew Cab Short Box Single Reveal Platinum in Shadowed Black Clear Coat. Thanks again for checking out the video, remember to like, subscribe, and share.


I really believe that God works in mysterious ways of whoever's supposed to see it will see it a hundred percent You know what I mean? He always brings it to you. He always is he's always answering you without him himself Like he sends things to me and like you got it. You've got to be the one listening You know here and take it for what it is. Yeah, we on boss talk Okay, it makes sense and the reason why I always ask a lot of certain questions because Nowadays everybody's stuck on their phones on YouTube watching videos and kids adults everybody and people are going through different situations I'm not sure how to handle it. So if you can speak through these cameras to someone and educate them on how to handle a certain situation That's the reason why I like to ask certain questions because I really believe that God works in mysterious ways or whoever's supposed to see it We'll see it a hundred percent. You know what I mean? He always brings it to you He always is he's always answering you without him himself Like he sends things to me and like you got it. You've got to be the one listening You gotta hear it and take it for what it is.  Oh, she acting like such and such, you know Because you're distancing yourself from certain people, but you know that it's it's in your best interest For so long I feel like I poured into everybody else and I still do pour into a lot of people But it's time to pour into me because it's like I always think about other people and but I'm in and seeing I always just think of other people and it's like well, who's gonna take care of me? Mm-hmm, and then I'm like wait I need to stop looking for someone to take care of me and take care of me myself Mm-hmm, and then that's when I realized I could be the breadwinner. I could be the go-getter like Like, you know, they're always like find you a rich man. It was right. I was looking. I was looking almost like I need rich man Exactly like and I've like heard something like I am the rich man You know what I'm saying like doesn't that feel good? I don't worry. Yeah, like to know you have it because you can do it But if we're being completely honest like I just always I I don't know how to explain I just always felt special like almost like chosen, but I didn't know what for or I didn't know why and like today I don't know why but like I'm definitely I feel chosen like I feel special It just radiates and I can see people, you know They gravitate towards it and I love that feeling if we're being honest and everybody's special in their own ways just that people As you get older you realize what your gift is because as not everybody's blessed enough as kids to know some kids Do know what their gift is as a young age and they grasp it and run with it But as they get older, you know, a lot of people realize as you get older and develop What your gift in life is and God open your eyes to that and you're able to use that to help others


We're here at the National Archives Innovation Hub for this year's scan-a-thon where African-American Buffalo Soldiers pension files will be scanned for digital records. My name is Catherine Branson. I am the Innovation Hub Coordinator here at the National Archives and today we are scanning pension files based on service of soldiers during the later Indian Wars. So about 1866 to 1892. So we're focusing on Buffalo Soldiers or African-American Soldiers. At that time the Army was segregated so we know which units would have had African-Americans in them and so we are working on pulling the pension files of those soldiers and scanning them so we can get them online and make them more accessible to everybody. Well first of all I'm excited to be here. When I heard about the scan-a-thon I said I must sign up. Right now I'm working on the Buffalo Soldiers Civil War Pension Records and so what have I found? I've found depositions, I've found information about the soldier, I've found family members and friends and neighbors that have come to testify on his behalf. And so that's what it's all about. These documents are here, they're historic and they're just giving the story about this soldier and what he did throughout the country. Well the great thing about scanning here at the event is I feel like I'm touching the ancestors of Buffalo Soldiers even learning that the time that they spent in the military back in the 1800s as African-American Soldiers is just fascinating to me so it's kind of touching history, learning history, learning a little bit of what they went through in order to even get their pensions. In a sense to me kind of touching and feeling the spirit of the ancestors especially the first one that I did he actually hand wrote the letter and so that was fascinating to see. It really thrilled me to have my hands and my eyes to look at the real legitimate records of people who lived, served and possibly died, served in this country. The files that we've been working on today represent a small part of this Buffalo Soldiers project. We've got at least 300 more files that need to be scanned so folks are welcome to drop in the Innovation Hub at any time that we are open Monday to Friday 9 to 4.30 and all you need is a researcher card and we would be happy to set you up and help us digitize our holdings. For more information regarding the Buffalo Soldiers visit archives.gov and follow us on the U.S. National Archives YouTube channel. This is Kyra Wilkins reporting for National Archives News.


This video is about disciplinary action for children, not about foreplay. Don't get cheeky. A recently published meta-analysis in the Journal of Family Psychology examined numerous studies on spanking as a disciplinary measure for children. The paper's authors, Elizabeth Gershop and Andrew Grogan-Keylor, brought together data from over 50 years of research, collected from over 160,000 children to answer one simple question. Is spanking children a good idea? In short, probably not. The study shows that spanking is significantly correlated with several negative outcomes as children mature into adults such as antisocial behavior and some problems with mental health, and it doesn't seem to be particularly effective at correcting behavior or encouraging short-term or long-term compliance in children, at least compared to other disciplinary measures. But wherever it's been posted, hundreds and hundreds of well-meaning individuals have left comments recounting some anecdote about their own experiences with spanking and assuring everyone that the study must be wrong. In fact, the authors anticipate this, and note that there's an incredible positive correlation between having been spanked as a child and believing that spanking is an appropriate disciplinary technique. But the problem here isn't that people still believe in spanking, despite the evidence. It's that they believe that their personal anecdotes are sufficient evidence to discount the study. Now, if you're a fan of science or thunk, you probably already know that intuition isn't always the best measure of truth. You might have even heard the phrase, the plural of anecdote isn't data, meant to dampen people's enthusiasm for generalizing their own personal experiences. But anecdotal evidence isn't worthless. In fact, it plays a fundamental role in a lot of rigorous scientific research. It can be really important, and we should use it, but we should know what it's useful for. This is how information flows in science. You make observations and get an idea for how things might work. You collect data about those things. You analyze that data, and then, if it looks like your idea was right, you give it to other people to check. This structure is great for learning new facts about the universe because it flows from specific to general, from isolated events to grand overarching theories, from hey this happened, to hey these are the rules for things happening. Anecdotes are absolutely useful to this process. They belong right here at the beginning, as filtered information to help us recognize potential patterns that we might experiment on. Case studies are a crucial part of several fields, including medicine and psychology, and they're essentially anecdotes, which can provide useful insight into the operation of very complex systems, like the human brain or body. Researchers can't test every single combination of variables, and they can't come up with hypotheses in a vacuum. They have to have some idea of what might be going on, and anecdotal evidence is often enough to get ideas percolating as to what that might be. For example, when Phineas Gage got a railroad spike through his head and kept on living, it became apparent that the parts of his brain that the spike had destroyed must have had something to do with his sudden change in character. That gave researchers a ton of new ways to think about the brain and how they might do science on it. So anecdotal evidence has its place here at the beginning of the scientific process. The problems only arise when people try to use it further on down the chain where it doesn't belong. First, anecdotes don't belong in the data collection stage because they're loaded with observer bias. Objectively verifiable numeric measurements are much more useful for figuring out what's actually going on. Human brains aren't great at being neutral observers. The sort of stuff that we pay attention to and how we interpret it is always colored by things beyond our conscious control. For example, if you go through some sort of traumatic event and rate how upset you are immediately afterward, and then five years after that, it makes some sense that you would be less upset with some time to process. But you also end up believing that you were less upset immediately after the event. Which makes less sense. Scientific data, on the other hand, is sanitized of as much of that sort of bias as researchers can manage. Double-blind studies where neither the experimenter nor the test subjects know if they're getting real experimental medication or sugar pills are a fantastic example of this. Even if you're the most diligently impartial scientific observer ever, the expectation is that you'll construct your experiment so that it wouldn't matter even if you were biased. In contrast, our memories of our personal experiences are subject to everything from how the question is phrased to whether or not we've had lunch yet. Anecdotes also don't belong in the analysis of data. In proper scientific research, the numbers should really speak for themselves. Statistical analysis is one of the most powerful tools that humanity has ever discovered for finding meaning in numbers. CERN records millions upon millions of data points for each one of its experiments, and statistics is the only way that they can sift through that data and say with any degree of justification, there is a 99.999% chance that this is the Higgs boson. Scientists have to justify which data they include or exclude from their analysis according to strict rules. If it seems like a particular data point might just be an error in measurement, they have to use statistics to justify throwing it out. If the math says to keep it, they're stuck with it. Anecdotal evidence, on the other hand, is qualitative, not quantitative. It might feel like our personal experiences are representative of larger trends, but without real data to back that generalization up, all we can really say is, hey, this happened to me once. Some of the things that you experience are going to be abnormal. You might be in the 1% of Prius owners who have had problems with dependability, or the 1% of Fiesta owners who haven't. Without real data to compare that experience to, without rules for determining how weird your anecdote is or isn't, all you've really got is one point and no way to know if that's how the world usually works or how it just worked that one time for you. Finally, anecdotes don't belong in the peer review stage. This is what's happening with this study. People are citing their personal experiences and saying that the paper must be wrong. Peer reviewers of scientific papers are notorious for being absolutely merciless with their criticism, for finding every single possible way that a particular result might not represent what the author thinks that it does. They frequently question the methodology, the quantity of data, the statistical test use, or their applicability or reproducibility, or any number of things. But if they ever go so far as to call out someone's results, they had better have at least an equally rigorous study with compelling contradictory results. This is what happened with Andrew Wakefield's positive link between vaccines and autism. He fabricated a few data points to make it look like maybe there was some link. In response, many researchers meticulously collected huge quantities of conflicting evidence to prove beyond any doubt that no such link exists. It wasn't enough to say, hey, I got vaccinated when I was a kid and I turned out fine. They needed to show something bulletproof and better, something even more sanitized and rigorous that contradicted his findings. This is why assertions like I Feel Cold So Global Warming Must Not Be A Thing are so laughable. Scientific findings can be right or wrong, but there is always a meticulous process of data collection and analysis behind their claims, a compelling justification for believing them to be true. Anecdotes are useful for that process because they allow us to recognize potential patterns and feed them into it to see if they actually exist or if we're just imagining things. But their place is exclusively at the beginning of that process. An anecdote like I Was Spanked and I Turned Out Fine doesn't really prove anything by itself besides this thing can happen sometimes in the right circumstances, and compared to a more rigorous study, it's really not worth mentioning. I mean, it's pretty clear to me that my childhood probably wasn't typical to begin with. Have you ever fed an anecdote to a more rigorous process of analysis? Please leave a comment below and let me know what you think. Thank you very much for watching. Don't forget to blah blah subscribe, blah share, and don't stop thunking.


And in this video, we're about to debunk a lot of that. So if you're a parent, make sure you watch this. If you're a kid, make sure your parents watch this. And if you ever plan on having kids, watch this video and please save it. What is up everybody? This is Chris from the Rewired Soul, where we talk about the problem, but focus on the solution. And if you're new to my channel, my channel is all about mental health. And what I like to do is take different topics going on in the world and try to see what we can learn from it to improve our own mental and emotional well-being. And I don't discriminate. I want to help parents and kids and everybody in between. So if you're into that stuff, make sure you subscribe and ring that notification bell. And if you're not yet, follow me over on Instagram and Twitter at the Rewired Soul, all right? So let's jump into this thing. Yeah, I got the idea for this video for a few reasons, but I really wanted to make it because when I was in California last week in my hotel room during VidSummit, I was watching like Good Morning America and I haven't watched that in forever. And this is a huge, huge show, but they were talking about the dangers of TikTok, right? And there's a website called commonsensemedia.com. And anyways, they were talking about all these crazy things about TikTok and I'm like, we need to talk about this. So some of the main concerns are predators on the platform as well as explicit content. And we're going to address those things later in this video, but first we're gonna discuss the research. And before I dive into this and start debunking stuff left and right, I wanna make it very clear, all right? There are many issues with social media platforms and I've done videos about this in the past about how they're designed to get us hooked and everything like that. And they can affect mental health. But here's the issue, all right? When people are panicking and making huge deals out of the wrong things, we're never gonna be able to help anybody, right? So my goal with this video is to explain the truth, what the studies and the research say so we can help our kids in a much better way. So one of the reasons all of this panic about social media started was because of this book right here called iGen by Dr. Jean Twainy, all right? So in this book, she cites a lot of research about how mental health of young people has been negatively affected by the age of social media and you're always hearing about screen time and everything like that. But here's what a lot of people are starting to realize. Many of these studies were wrong or they were inflated or they were just very small sample groups. So anyways, a lot of these studies in the book have been debunked by some amazing, amazing people such as the psychologist, Sarah Rose Kavanaugh, the psychologist, Jonathan Haidt and the best-selling author, Nir Iyal, all right? So each of these authors, they have books which I will link down in the description below. The book from Sarah Kavanaugh is called Hive Mind. It's brand new and it is oh, oh so good. All right, Jonathan Haidt, he is one of my favorite authors. He's a psychologist and the book I'll be referencing is The Coddling of the American Mind and Nir Iyal, he recently just released his latest book which is called Indistractable, all right? So anyways, Sarah Kavanaugh is an amazing psychologist and she does a ton of research. So something that Sarah wanted to do was understand why some people get PTSD and other people don't. For example, I believe in her book Hive Mind she discusses 9-11, right? So how come there were some people who got PTSD from 9-11? Even people from across the country who weren't even near the Twin Towers, all right? How come some of them got PTSD? Whereas there were other people who were actually there who didn't, all right? So a lot of her research has been discussing our understanding different vulnerable populations, all right, and this kind of leads into the social media conversation because Sarah Kavanaugh wanted to understand why some people are negatively affected by social media and some people aren't. Something that Sarah and Nir both discuss in their books which is something that I really hope people learn more about is that when kids are acting up in any way, parents are often looking for anything to blame, all right? So obviously in this day and age we wanna point our fingers at screens, like video games and social media apps like TikTok and Instagram and Facebook and everything like that. But here's the thing, this is a natural thing that parents do because like I'm a parent, all right? Like a lot of us don't wanna look at ourselves and think that we're doing anything wrong. So it must be those dang video games or the social media apps or whatever. Like did you know, did you know that even the idea that sugar makes kids go crazy and act up is a myth? I believe it was in Sarah Kavanaugh's book. But anyways, they did a study where they told parents that they gave kids sugar and the parents who they told they gave kids sugar to reported that their kids were being more rambunctious, irritating, annoying, running around and all these other things but they didn't actually give those kids sugar, all right? So they've done a lot of studies on this and this is just a psychological effect that parents have and they wanna blame something but the kid was actually just acting normal. So aside from parents looking for things to point their fingers at, Jonathan Haidt in his book, The Coddling of the American Mind, he discusses how a lot of us have become so overprotective as parents and like I think too many of us think of this in extremes, right? Like we think of like overprotecting as like helicopter parenting but there's something like right below helicopter parenting where you're not that bad but it's still pretty bad, all right? So somebody that Jonathan Haidt has done a lot of work with is this woman right here, Lenore Scanesi and she's the author of Free Range Kids, all right? And that book, there's been, you know, a lot of discussion about it but it's basically like, you know, we gotta let kids do their thing and learn and grow and become resilient because Jonathan Haidt as a college professor and seeing just kind of like the outraged culture and everything like that, he kind of sees how since we've been, you know, overprotecting our kids, they've lacked this resiliency. So as they get older, they get really upset about really trivial things, all right? So to sum it up, all right? No matter what generation you're in, okay? That's watching this. Just know that the generation before you was freaking out about certain things, all right? This is something that has happened throughout history. Something that each of these very well-educated people discusses is this and it's so important. Kids need to be social, okay? This is part of the growing process. Like I want you to look back at your childhood, all right? And think about how you were social, okay? Like I grew up, I grew up in this weird time, like right when the internet kind of became a thing and like AOL came out and everything. But anyways, I look at it and like, I used to go to friends' houses, like when I was in elementary school, I would walk or ride my bike, sometimes one, two miles away from home and guess what? This was before cell phones, right? When I got to middle school, I think we had pagers and everything like that.  How protective were my parents, right? And like this affects us too, because as I've gotten older and we've kind of been flooded with this idea that kids are just perpetually in danger, like I remember I got to a point where I was like, I can't believe my dad let me just do those things, but this is just something that's happened throughout history. Like as technology has advanced and as the world has become a safer place than ever before, we've become more protective and it's absolutely bananas. Because today, the thing is that we're so concerned, we're so concerned about kids just even going outside and playing, right? And trust me, like I can be guilty of this too, but we have to be self-aware and recognize that we're doing this, all right? So we need to understand that when we're keeping kids indoors and they have this biological need to be social with others, they can't go outside, guess what they're gonna be social inside, all right? And that is what apps like TikTok and other social media apps are doing. So my son, he's 10 and he hasn't really gotten into social media at all yet, but the way that he's social is through video games, right? He plays Minecraft, he plays Fortnite with a ton of friends. And I look at that and I'm like, oh my God, like this is modern day playing, right? Now, one of the arguments against that is that kids aren't being physically active and things like that. Well, here's the thing, like last weekend, for example, my son and I, we took a break from playing video games together and everything like that and we went to the gym, okay? In my opinion, it's about finding this balance. So let's circle this back to TikTok, okay? So TikTok, one of the arguments is the predators who are on there. Like when TikTok was first blowing up, I remember I kept seeing videos about this dude right here who was pretty creepy on TikTok, all right? But we need to understand that when we see these things, we freak out about it, okay? So TikTok currently has about one billion monthly active users, one billion, okay? So let's pretend in a scenario that the FBI did this massive sweep and they caught 500 child creditors, right? 500 of them, okay? So they caught 500. Do you know what percentage that is of the monthly active users on TikTok? It is 0.000049%, okay? It is a fraction of 1%. So I want you to ask yourself, is that something to justifiably freak out about? Something less than 1%, right? Like think about all of our other irrational fears that we have, right? Like the fear of sharks in the ocean, even though like chances of getting hurt are more likely just driving to the store. You know what I mean? So we need to recognize that. Now, as far as the explicit content on TikTok, like trust me, like there's some balance that we need to find, but again, I look back at my own childhood and I'm just gonna be real with you guys. Like when I was a kid, like I was sneaking around and watching rated R movies. Like when my dad was at work, I was doing that thing because there was before internet and I was like going under his bed and finding his playboys and things like that. Like these are things that kids are naturally going to do. And just like sheltering them and shielding them isn't gonna solve anything, right? So here are some of the solutions and suggestions that I have. From a young age, I've just kept conversations open with my son and I can make more in-depth videos about this, but we just need to have our kids understand that we need to have conversations about these things. And because I let my son try things out on his own, like he comes to me with a lot of things, right? Like I might be an ignorant parent, but my son comes to me for just about anything or questions and all that kind of stuff. But the last thing I wanna talk about when it comes to being social and everything, like Jonathan Haidt and so many others are talking about is like if we over protect our kids and we don't let them have these experiences, like we're really doing them a disservice.  Well, he jumped back into Fortnite since chapter two came out. But anyways, there was one day because he'll be playing Minecraft with his friends and they're just building these epic things, right? And it's cool, like I love it. I love watching, I might do a video on this too, where I love watching how creative they get to be in there and stuff like that. And anyways, I'm not sure how Minecraft servers work, but they spent hours building this thing and my son kept showing me and he was so proud of it and everything and some friend of a friend came in the server and he blew up this huge portion of everything they built. And my son told me about it and he was so upset, right? So upset. And like any parent, I wanted to find that kid who did that and just, you know what I mean? But anyways, I talked to him about it. I talked to him about how on YouTube when I make these videos, sometimes like my computer crashes and the thing I worked on for hours, you know, it got messed up and da, da, da.  And seriously, like maybe an hour later, my son was just so excited and brought me into the room and him and his friend got together and they just rebuilt it and like, they added all these new things and because of the explosion, they were able to put these other cool things and they're like little back cave that they made and stuff like that, right? So what I'm getting at is, I wanted to be very protective of my son. I wanted to coddle him because he was upset, but this was an experience that he got to go through and become more resilient from, you know what I'm saying? So again, just recognize, you know, what the actual studies and the research say. I'm probably gonna do more videos citing some of Sarah Kavanaugh's work, understanding vulnerable populations on social media to kind of explain that a little bit more, but anyways, like I said, make sure that if you're a kid watching this, share this with your parents. If you're gonna be a parent at any time in the future, hold on to this video, check out some of the books, all the books that I cited, I'll be linking down in the description below, all right? Anyways, that's all I got for this video. If you liked this video, please give it a thumbs up. If you're new, make sure you subscribe and ring that notification bell. And a huge, huge thank you to everybody supporting the channel over on Patreon as well as everybody who supports the channel by buying my mental health books and merch and all that other good stuff, all right? Thanks again for watching. I'll see you next time.