We're at UW Shibuygan where tonight the Wombats take on UW Washington County. Hello everybody alongside the court Chris Wright I'm Mike Martin Chris Shibuygan comes in on two and they're gonna have to play a strong Washington County team who's been good over the years Interesting it's Veterans Day today, which thanks to all the veterans But my gosh are playing basketball and it's November 11th and like you said Shibuygan's got two games But this is your home opener. So maybe coming home will make things a little bit easier home cooking a little bit They've been putting up a lot of points so far. That's for sure But I mean kept to see maybe some defense by Shibuygan, but I'm excited for basketball One of the things we like to see when we come out here is some familiar names and Lucas McKnight played last year and made some Heavy contributions, but they got a new kid on the block who's really been scoring the ball New kid on the block well for us It's not new new for out here, but TJ pitch longtime my player over at Shibuygan South has brought his town over. Hey only four years Brings his town over here the other day yet 32 points in the game and their loss the other day So it's nice to see TJ There's a couple kids from Shibuygan falls starting and a kid from Kohler starting so very much of a county type Team here and you know, this is a two-year college where you know You for basketball you get two chances of playing if you turn out to be really good You can maybe move on to like a bigger better program Maybe then the WAC WIC or something like that So it's always a nice thing to see these and you said that Washington's got a pretty talented team as well And that's not unheard of to have kids come to Shibuygan and play for a couple years and move on to bigger and better Things so that's not out of the question. TJ pitch, you know hasn't played a whole lot I don't think the last couple years since high school. So this is another opportunity for him Also an opportunity for us to get started this year Get us out of the shoot. Yeah, I'm excited that the NBA start a little bit now Basket the college basketball. They're starting this week a little bit and like we said before already two games in for Shibuygan County, they play their season basically until February It's always nice to come out here and see some of the kids We saw before and you know, this is something that maybe the community doesn't always get an opportunity to you know To see either so you should come out here and see some of their games They know they're always their scores are in the press and stuff But again, it's a chance for a lot of local kids who maybe don't want to go to a bigger college right away Maybe live at home and come to here and you know start their their careers and sports here And aren't even just continuing their careers There's a lot of players we get that don't even play in their high school teams and they come out here and play as well Great opportunity that way Shibuygan does have a new coach William Greenwood the second and one of the things that I read That he had mentioned was he plans on doing some recruiting. I don't think the last couple coaches Maybe it recruited as much as they could have anyway. Yeah, and that's something you know to be successful in this You got to get some local kids and you know probably not again those all conference players But while TJ pitch was an all-conference player But maybe a little bit down the line kids that maybe were the third or fourth or maybe six man off the bench to come And play and you can build a nice little program and this has been a nice league that's been around for years I mean there's been a lot of good players that played here and with that we're gonna step out for a minute When we come back, we'll have the tip-off for tonight's ball game Today to be a winning team you have to work like a winning team my team depends on me and my team 50,000 strong You always made sure I brush my teeth You told me this smart was cool You always told me to dream big To all of those parents who took the time to make raising their children their most important job We'd like to say thank you. Thank you from the bottom of my heart. Thanks, mom and dad This message is brought to you by the US Air Force I'm super excited to introduce my dad because he's my hero when I was little He was doing this really important work driving aminesis in Iraq now He's home and he's still a hero because he tells the aminesis where to go when there's an emergency I'm so proud of him. He's awesome. He's my dad if a service connected disability hinders your civilian career Volk rehab offers a variety of services to help prepare you for your next mission. Close the door to cancer HPV vaccine is cancer prevention Vaccinate your kids at 11 or 12 best compliment. I ever get is when someone says to me You had breast cancer. They look at your chest. Did you have operations? I said, yeah, if I never messed up to me in reconstruction, that's the best Women who are told about their breast reconstruction options report feeling in control and Experiencing a higher quality of life after cancer before you undergo surgery for breast cancer Get the facts make sure you know your breast reconstruction options for more information visit bra day I tell people I have three kids one of them adopted. I just don't know which one I Can't imagine having to be in a birth mother's position to make that choice, you know I was kind of just asking her, you know, what is your motivation? Why are you doing this and she looked at me and she said because you can give my son a life that that I could not We always tell her thank you. He is such a blessing to us every day is just a Ray of Shenzhen for me. So we're chand and Brian and we chose adoption Get the line-ups coming up and we'll turn it over to the public address announcer There you're starting line-ups for tonight's basketball game Familiar face over on the shabuigan coaching staff Chris butch cane. Yeah from Plymouth Yeah, dad long time coaching basketball last year at Plymouth. I believe he did I know he was doing some coaching Yep, over there. Anyway Great to see butch by the way, do you know what his real first name is? No, I do Francis, okay Do not know that our officials tonight are Scott Valenstein Tom rush and Eric Van Hull Shondelle Hunt and Richard Bartzen our running camera Kerry Kautzer is our director tonight and Washington County Controls the tap set the shrink has it on top Sheboygan and a man-to-man defense Three-point attempt is no good Rebound by Washington County is no good. They get the offensive rebound again And this time picking up the fall for Sheboygan was Jordan Taylor They're gonna have to rebound a lot better than that Chris on the line for Washington County is Deandre Johnson There's a pretty good crowd here for a Wednesday night Normally come out here. There's not a lot of opener. That's why well Washington County is coached by Steve Murphy Couple of this is another offensive rebound and the God is missed coming away with the rebound for Sheboygan was Holtzscher No score Sheboygan's first possession Yeah, and travel call on Sheboygan's Ryan Halverson. I think he did it twice Finally get a possession after they get three offensive rebounds and then you turn it right back He could have kept dribbling Taking it hard to the basket, but getting it blocked was a TJ pitch and Ball call pitch will be going to the line shoot a pair TJ in their game on Monday night had 32 points five rebounds and two assists He's been a scoring machine Well, he always could shoot Marty. There's no doubt about it Like I want to correct you on that. I could always shoot too. He makes them Couple of free throws by pitch makes it two-to-nothing Sheboygan Shrank penetrating and pitching Another three-point attempt is good that time by Colin Lieber Second-year player from West Bend East hits the three Now you'd almost lost it Looks like they run it, you know, dribble dribble drive kind of like North A missed shot, but a tap-up is in by Jordan Taylor Three-point attempt is no good and another foul this time It's gonna go on Ryan Halverson The one I don't like Marty Yeah, follow a jump shooter And he was out at the three-point line besides 1830 left Steinhardt on the line That's not the score at four points each Ryan Russia in the house watching his dad officiate tonight's game He's got to leave go play a city league basketball game So I think the plan is to get thrown out of the gym He's not listening Trifecta for Hayden Steinhardt Chris six to four Washington County pitch at night. I Didn't think he traveled on that one Chris look like he did it right Shrank also West Bend East. That's the point guard number two There's your international travel To turnovers a piece For each team Which has it they're calling out the play Washington County has been in a zone defense basically now they switch to a man-to-man Really filling up the lane McKnight from outside the line can't get it to go The hand went down and the travel was called and Deandre Johnson is saying what Well, I think the reason he's upset. He got clipped Yeah, and then the travel called then you got to call a foul instead It's tried to penetrate but good defense by Washington County McKnight on a turnaround in the lane puts it up and in Makes I take a nice year last year here as well. I'll tie it up at six Another three attempt is no good and Washington County just jumps a little too good But coming away with the rebound that time was Marzano, but pardon me Holscher Pitch from outside no good Holscher gets followed Falls gonna go on Colin Lieber 17 minutes left Sub Marty. Yeah first sub you're right good swing night open bang Lucas McKnight has five points Leads all scores first three-pointer made by the wombats Lean in is no good. Look like a good block inside, but I think they're gonna get Taylor with his second foul Getting ready to check in for Sheboygan is a Tyler Hollis Remember him from last year Marty. He's our Georgia connection South Cobb Georgia like I mentioned in the opening you can only play two years so Be his swan song. Yep Hollis hit the line trying to save the ball Washington County will get it out. It's nine to seven Sheboygan on top I guess they thought it hit out of bounds before the save happened. Yeah, Hollis grabbed it McKnight trying to get around the corner did Shot in the lane is up and in Nice play by Lucas.  Ashley's got her hand on her chin They are doing the stats and running the clock and just trying to keep everything in order Oh, actually I take that back. Ashley is shopping online You got a full minute for timeout they even have put up on the board Marty, that's kind of nice Yeah, hey little change in high school basketball this year, too. Oh Yeah, that 16 minute yeah the house that'll be a different attack I'm not sure if I like that Marty some things. I'm time tough for change. I understand it's a One of the things that I thought was actually a positive for making the change was less stalling out the clock You know when you stall out the clock at the end of the first quarter take the last shot And then the same thing would happen at the end of the third quarter Good points eliminate that Javon Williams in the ball game for the first time Pretty good defense Hollis was able to knock it away Pitch has an opening down the lane couldn't get it to go. I thought he was fouled no call. Oh That's gonna be a charge Good call by Scott Valenstein. Yeah, pretty easy one Dominic Ritchie commits the fall Basically just tipped his shoulder right in here and now we're gonna have a little pressure from Washington who has many more players than Shabuigan at 13 to seven eight act nine for Shabuigan Actually the one guy's got a shirt on but he's not suited up. So it's seven eight players for Shabuigan McKnight Couldn't get it good rebound and a put-back by Nick Holsher 13 to 6 Shabuigan Shabuigan in the man-to-man defense good pressure by Halverson Wow and Basket is not gonna count there was a fall before that on the rebound Tyler Hollis Will pick up the fall Gallup has four offensive rebounds number 13 for Washington County Overall, they have five offensive rebounds, which is way too many for the first five minutes Mary is young in the ballgame and checking out is Colin Lieber Lieber was leading Washington in scoring with four Good night playing.  It's gonna be a short half for him two fouls and couple minutes of play 13 to 7 Shabuigan on top good defense Good pressure on the shot and after the shot Marzano a little too aggressive That really should be an after-the-shot foul, but I don't know if that's what it's gonna be. No, they're gonna give him three I don't know what you think that was well after the shot and he was boxing out and that's six team fouls and five minutes We don't have enough guys at this rate to Continue this foul thing Might have to fall back into a zone for a while just to protect your guys They keep missing free throws Marty. Yeah, you could use some misses They were making all their free throws we'd have just about a tie ball game Sean Fisher, he's from Hartford Hayden Steinhardt early in the ballgame went to the line to shoot three and Knocked them all in and Sean Fisher makes two out of three Night bringing it up Pushes it in he gets followed. I think they're gonna say before the shot Fall goes on Washington County's Dominique Richie Shabuigan moving the ball pretty well Chris Easy call again. Yeah drew Gallup on the reach in That's an easy call for an official when you reach across the body This is not playground ball. No, there are guys and stripes calling it McKnight gets it down deep fix the pass looking to go one-on-one Good step-through move Chris. Oh, he couldn't get it to go and then he commits the foul Lots of fouls Marty. Yep That's seven on Shabuigan We're gonna be here till 10. Oh My wife I'd be home early They're in a bonus already And we haven't even played six minutes of basketball 1430 left Fisher was just at the line made his last two of the three Free throw a trip and that former Oriole makes it couldn't get the second Good rebound by Marzano 13 to 10 Shabuigan still on top Off the glass and in for Nick Holscher These two of three from the floor got three rebounds already young man from Shabuigan falls Jump shot no good rebound put back is no good. And you know who I think tipped it in I think that Holscher tipped it in will give the basket to Fisher he has five points. Oh, McKnight was open on the cut-through And Halverson throws it away We've actually played a full minute Chris without a whistle D3 no good Marzano at the right spot at the right time gets the rebound Shabuigan 5 of 11 from the floor early on Pitch looking for an opening couldn't find it Halverson does Glances off the rim and the glass No good Fisher with the rebound for Washington County under 13 minutes left little give and go shot is They're gonna say no and hit the wire the wire But there will be a foul called Fall goes on Halverson that's his second I've got Halverson Hollis and Taylor all with two fouls each Dylan Gilbertson getting ready to check in Fisher's at a busy half Chris at the line again This is gonna be a seventh free throw already. I have them for two baskets Marty two of ten and that's what I have 13 points Everything's been done at the free throw line another make by Fisher Seven points for him. It's 15 to 14 Shabuigan Pitch's layup attempt is no good and Fisher comes away with the rebound He's got five rebounds for Washington County Driving attempt is no good by Shrank and coming away with the rebound was Holscher and then Shabuigan calls a timeout And coach Greenwood is not very happy I might give some of guys a blow as well. I was reading this book It was a it was a John Wooden the most recent book by Seth Greenwood, I believe or Seth Seth somebody anyway in the early days back when he was a player John Wooden. Yep, you called timeout the coach couldn't talk to the team. Oh really? It was basically for a rest. That's what it was Wow Now the way the game is played and run you only need seven players as long as they don't fall out Yeah, because you get so many breaks There you see butch Kane in the suit jacket in the gray hair they have a Believe Wooden went he was in Indiana in high school, right went to Purdue That's where you all American. Yeah Purdue obviously Was a good friend of coach Tom DeSattel at Shabuigan North. Yep. I Was talking to Deso about the book. He's not a big fan of it He said he was actually visiting with John Wooden when this author was doing his interviews Under 12 and a half minutes left in the half Shabuigan continues to lead but it's been slowly going down Bolsheer shot is off no good and shrink with the rebound Washington County trying to run good inside feed shot is up and in By DeAndre Johnson Johnson was deep there and nice to lay up off the glass Pitch on the drive couldn't get it Marzano with the rebound Elverson shot is no good, but he does get fouled and I think that's gonna go on Hayden Steinhardt TJ pitch without a basket. He's all for four But there hasn't been a lot of openings for him and I think Washington County's kind of focused on him I guess when you put up a couple 30-point games, you're gonna get a little Yeah, some attention. Yeah, right Chris that was the first free throw by Shabuigan in the half well 1141 and Washington County's made all their hay at the line Washington County is shot 14 That's too many. Oh Washington County comes down and they have the lead 16 to 15 1130 left in the half Good inside feed Johnson puts it up and in Johnson making a living in the lane there. I think he also put up a house I Good insight Marzano on a great catch and shoot and got it up and in Like that pass. We've run by Washington County Three-point attempt is no good pitch with the rebound trying to push it. Oh looking for a backdoor cut Yeah, a little late on the on the cut Gilbertson didn't recognize that he was gonna be open Fall goes on shrank. That's their seventh fall. So Shabuigan will be in the bonus Moving forward Pitch can't get it to go He's too for you know, I missed two free throws Chris TJ did make two free throws very early in the contest So this is the sixth attempt coming up for Shabuigan, but they've only made two so far We're all tied at 18 Little crossover a pitch out Good effort that time by Washington's Washington County's Drew Gallup Get a good shot at the basket couldn't get it to go and then did a Outstanding effort to get the offensive rebounds. Yeah, he's been very active on the offensive glass as I mentioned before He's already got four offensive rebounds. Here's we're having pitch really gives you a big benefit Chris is his ability to handle a ball and handle pressure But night back in the game Good inside feed and making the basket was Jordan Taylor Halfway home in the first half a very long first half. Yes, it has we're only playing 20 minutes, right? Inside shot is no good Rebound put back is no good and Gallup stole it away from Holscher, but Shabuigan gets it back Fortunate break there for the Wombats Pitch with a short jumper bang. Oh He has five 22 to 18 was a nice pull up Jay boy. I can't be a continuation Falls gonna go on pitch It'll be his first Checking in for Washington County is Zach Cull Zach is from West Bend West Shrank with a free throw His first point of the half is a good shot Sean Dellahunt See him back there running the floor camera Richard Barton up on top Kerry Kautzer our director tonight and Lucas McKnight turns it over Just the fourth turnover on the Wombats. Oh Nice drive good move that time by Drew Gallup Ties up the ball game with nine minutes left in the half the night on a shot fake Rises above the crowd but can't get it to go and the ball goes off a Deandre Johnson Wow Yeah, I thought you might get tipped it out. So Gilbertson knocked out of his hand Not a good pass. So TJ Kuhn set his feet, right? Had a great double screen to work with but the bad pass meant They couldn't get the shot a good layup by Johnson taking his time getting it up and in Very lanky Johnson is yeah It's looking down the lane gets a good feed and picking up the fall was Taylor. He'll be shooting a pair Coach Rainwood yelling out there. What are you running? Sheboygan's really struggled at the line Chris three of seven Fisher checking back in coming out is Johnson Hey, did you see the news about Mike Johnson? Yeah, congratulations to him Sheboygan is Hall of Famer Mike is gonna be inducted this summer into Sheboygan is Hall of Fame Sheboygan Lutheran grad and yep You know when I think back to his playing days I don't remember him so much as a pitcher, but that was probably as strong as position. I agree Again Washington County controlling the boards and Gallup with another basket Washington County on top 26-23 rolling down to the eight-minute mark of the first half Gallup with six offensive rebounds now Pitch from outside the line couldn't get it to go tap up is no good Washington County comes away with it Cole had it gave it up to the three-point shooter Leave her, but he couldn't get it to go He does have one three matter of fact That's the only three of them up McKnight has a three each team sitting with one three right Chris. Yep Seven and a half McKnight on a strong drive and he scores and he's fouled Just fourth basket of the half. I am four for eight Fisher picks up the foul Wow, all of a sudden the beeping is tough. What did you do? I don't get a wire Maybe I think I did hey great move the best move you've made all night now It's almost too quiet Marty. Uh-huh Gallup with another enjoy this So you're getting the same thing in your era yep you That's it. I'm done talking Who made that Basket by Lieber He has six points. I don't think pitcher McKnight have been out the whole game Marty They're the only ones really not in foul trouble either nice steal by Gallup He drives. He's fouled goes right into the tripod and Sean Delahunt was banged up against the wall, but he's smiling Sort of the girls they like that when the boys get run over First foul on whole sure pit Chris. That's pretty amazing They got to keep Wholesure McKnight and pitch out of foul trouble because everybody else is in it 643 left first half been a long half. Yeah for sure No boy let them sneak right in between there Fisher was the Basket maker and that was bad blockout by Sheboygan Matter of fact, you couldn't even call it bad blockout because there was none That's the tenth offensive rebound for Washington County Marty. That's that's way too much there's Washington County's ups 31 to 25 Well, and Sheboygan not too long go ahead the lead at the lead it for the longest time they sat at 15 for Quite a while and they kept chipping away Gilbertson is the only Sheboygan player without a foul Ryan Halverson Tyler Hollis and Jordan Taylor Taylor in the game right now each are sitting with two So they're gonna have to be awfully careful Dominique Richie 23 is the only player with two fouls for Washington County Silly foul by Cole. Yeah for sure Bonus time. Yeah, Paulis has not been to the line yet. Chris. Hopefully he doesn't have the same Troubles the other free throw shooters have had both are in double bonus. Excuse me Hey, did we ever mention in these broadcasts the importance of making free throws? Yep Fisher Going on leave her pardon me going hard to the basket couldn't get it in Now they look like to be in a zone again Marty. Yeah Pitch oh couldn't get it to go Leave her with the nice rebound Gallop going hard to the hoop had it tapped and out of bounds. They'll keep it Pitches 046 Marty Or excuse me one for seven One for seven. He's missed all three of his threes Leap her with a good move, but good defense played that time by Lucas McKnight That's the second time I can remember Chris where he really played smart defense nice Good movement of the ball and getting the basket for Sheboygan was Taylor He probably doesn't deserve the basket, but he's gonna get rewarded some very good passing there by McKnight Too deep. Yeah, not another offensive rebound by Washington County And kissing it off the glass that time was Steinhard That's the first points for him since early in the game when he made those three free throws 33-27 Taylor shot no good McKnight with the rebound Holscher Couldn't get it I was reading the article about their game the other night Chris and Sheboygan only shot like 33 or 34 percent and They were at about 50 percent for much of the half, but Good anticipation by McKnight. He saw the play develop and made the interception and drew the foul He had a three-point attempt made the basket obviously missed a free throw and see if he can knock down a couple here I have them 11 for 28 Marty. So just over about 38 percent, maybe You pretty good in math like that in your head Sometimes the average is all the baseball. That's right. I remember as a kid always doing averages and stuff You know, uh-huh different weird things She's Sheboygan continuing in a man-to-man defense Good feet inside the Johnson he rolls it in he likes it right there Marty. That's his little Spot. He's got eight points We roll under four minutes in the first half Sheboygan don't eat Yeah, that was a good call Pitch is gonna pick up his second personal And right now the wombats look flat they just can't get anything going they need somebody to start picking things up You're having trouble making baskets and then you can't pop any free throws in you know, it's pretty devastating Only down eight see if they can crawl back in here see Told you sheboygan Trying to add furniture to his home that I said he was building before this time he got caught adding a deck J pitch has it out on top Washington County back into a zone Pardon me a man-to-man By McKnight and he puts it up and in He's really got a nice drop step 11 points in the first half Little backdoor lob easy basket for Johnson. He's a high riser Yeah, he's made his last five baskets All inside the paint Or to McKnight leaning in off the glass can't get it to go Leave her gets the defensive rebound Going right down the lane missed it Holscher Gets that all-important defensive rebound Holscher wide open Washington County on the alternate possession will get it. No sheboygan does arrow points their way Somehow that doesn't seem fair Opening tap went to Washington County.  Yep Going down hard Was Ryan Halverson and he's smart in a little bit. Yep Little grimace 217 See if Washington County takes some clock 32nd clock here And they're up eight. Yeah, they shine in our area off a double screen Sheboygan comes away with the best shot Pitch taking it hard to the hoop couldn't get it Steinhardt on A runner couldn't get it in gets the rebound Bango Steinhardt has seven and Washington County has their biggest lead of the game at 10. Oh boy They allow right I was just thinking Need to work the ball around better Kick that wire again fix some things at half Still a lot of game left another opportunity to score from the free throw line Finally five for 14 so far Chris Six for 15 40% too easy that time for Lieber Tell you that Washington County's made a lot of hay in the paint part of the reason is the foul trouble. I think Sheboygan County is a little nervous about Falling there but 10 points down minute eight David Slarson in the house tonight Good play They cleared it out for Holscher and he had an easy basket. He has six in the first half He had a little fake pass to the opposite side and minute left Good back cut Williams on the dish off the Lieber, but he travels. Yeah, he couldn't get the handle Eighth turnover by the Wildcats a little bit of a change in the college basketball to Chris The boys used to operate with a 35 second shot clock. It's down to 30 now Might open was Taylor. They missed them. Hope it doesn't change anymore Marty Shot is no good strong rebound that time by Camarius young About two second difference in the shot clock and the game clock it's down to 20 15 seconds Coach Murphy tells him to go for one Too far away long shot through the rafters No good and we're at halftime with Washington County on top 41 to 33 Day we need to get outside But honey, I think there's a game on somewhere. Well, I know another game we can play Golf you and me. I'm ready to learn and I found a great deal on lessons Okay game on I think I can take it Now you can learn to play golf starting with one great deal five lessons from a PGA or LPGA instructor Starting at only $99 get the details at get golf ready calm get ready to play Parents sure have their hands full and they could use an extra hand Now every state offers free or low-cost health insurance for your sports hero Or a budding artist Kids up to age 19 can get checkups doctor and dentist visits hospital care prescriptions and more Your child's make qualify based on your family size and income. It's one less thing to worry about Call or go online for more information. There might be drinking or taking something else We can't talk with her about it. She keeps everything secret, but when I pretend everything is okay. I'm keeping secrets, too My therapist suggested Alan on family groups. It was helpful to hear what other parents said Are you troubled by someone's drinking? You might be surprised at what you could learn in an Alan on family group from people Just like you call one eight eight eight for Alan on or visit Alan on family groups org We're coming out a halftime here at UW Sheboygan. We're a Washington County leads it at halftime 41 to 33 Chris We could go through some scoring, but I think the big story was two things Sheboygan was able to stay out any serious fall trouble But the free throw shooting has just been atrocious. Yeah, I think what you say there are six of 15 from the free throw line The other negative thing for Sheboygan was they allow 12 offensive rebounds, which is way too many Sheboygan actually shot a better percentage 39 percent to 31 percent but Washington County got so many more opportunities because Sheboygan committed fouls and they got free free free throws and then the other thing is those extra opportunities on the awesome It's a rebound nice to see TJ pitch get on track. They're gonna have to have him to have a better second half He had 30 points the other day and today he's only got five I got a Washington County making 12 out of 18 attempts from the free throw line Chris So Sheboygan was six for 15. It was a very long first half Marty Took less than an hour Should have taken less than that. Yeah, about 40 minutes normally Well, we're often running here in the second half Sheboygan in a zone 131 good attack there by the Wildcats, but they just didn't get a bucket off of it Leave her got the air and pass and put it up and in he's now three of five from the floor Pitch from deep no good And it goes out of bounds He is all of four from out there one of nine in the game 10-point advantage for Washington County early in the second half Again Sheboygan comes out with that one three one trap Pitch on a steel attempt but couldn't get there There he is Gallop Bolsheer comes away with the rebound for Sheboygan But another offensive rebound and shot attempt by Washington County McKnight was a high score in the first half. He had 11 That led both teams DeAndre Johnson's 10 points led Washington County Good cut through the lane and a layup by Steinhardt is good. I know this is the start to coach Greenwood wanted Hey, it's not the start. We want it Bolsheer tried to kiss it off the glass, but it came up short Fisher with the rebound Oh, yeah, Fisher for coming off the bench is doing a nice job on the boards timeout I miss who made that basket Chris I Think it was did you have number 30 Lieber? Yep, okay, we'll give it to him They have three baskets Number two number 30 and number 15 and get our first foul two minutes and well, it's a long time for a ball Yeah Steinhardt picks it up. It's his first I misspoke Washington County is actually 36% they were 14 of 39 in the first half William's got to get something going here There you go Nice pull-up jump shot that time by Halverson Little back cut is no good coming up with the interception was Hollis Hollis way short, but the putback is up and in by Nick Holscher Bolsheer with eight points Bolsheer is gonna pick up the fall look like he had all ball Quits greenwood expressing what I just said jump ball don't reach Rising up for the basket Was Sean Fisher Fisher has eight rebounds now Come back Get in there just can't get it to go, but Holscher rising above the crowd puts it up and in nice little tap in 10-point advantage for Washington County to go there good defense by the Wombats Lieber got bumped by McKnight and he made the basket That one hurts Can't believe he put that one in really Second foul on Lucas Seven points in the second half for Lieber. He's got 15 in the game And a great start for Washington County to this second half. They're five of seven in the second half shooting Halverson short no good No good Holscher with a tip in again Scorn baskets close to the hoop good thing for Sheboygan, but now they got to play defense number 10 on Washington 1543 left You know this is something Chris that could show up later in the game with all the substituting that Washington County does they're gonna have fresh legs at the end sheboygan will be dragging When you're behind it's so much effort just to catch behind he traveled and threw it at well Still plenty of time on a shot clock nice pass from TJ pitch, but Holscher couldn't get it in No good But Lieber comes away with it and kisses it off the glass and in and gives it a little fist bump Chris Even he didn't expect that one to go in Lot of hands by Washington County. They're very active Pitch trying to drive through the crowd, but had it tipped away You know they reset the shot clock. I can't it should go back to where it was Gonna reset the shot clock to four seconds Not quite a catch-and-shoot Chris, but pretty close shot is short that time by Tyler Hollis And pushing it down and scoring on the driving layup layup was set the shrink That's a 15 point advantage for Washington County. There's an easy one Mistich, but he does pick up the fall, but still it's getting away here Marty. Yeah, it is the next game for Sheboygan is Monday, November 16th. They're at Marshfield this 28% shooting here in the second half for Sheboygan to go with their 39% in the first half Next home game for Sheboygan is next week Wednesday, November 18th No, Sheboygan's perfect this half on their free throws Chris They got that message Lieber trying the Scoop pass, but his teammate wasn't looking Still a lot of time left 14 minutes McKnight, no good pitch Good TJ pitch with a three Gives him eight points on the night and Sheboygan's within ten Step in with the three is good That basket was by Camarius Young his first points of the ball game. What a comeback you get a nice three pointer Which neither team has made any by Sheboygan and then Washington County comes right back with one Halverson lean back is no good a nice pass, but just not quite enough hang time for Richie Halverson with a 10 footer He's got four points 59-48 12-45 left in the ball game It's amazing how much faster the cap is when you're not standing on a free throw line every 20 seconds or so And another turnover gonna need a bunch of those Get it under double-digit here boys. Here. Oh, there should be McKnight had a good look underneath but couldn't get it in McKnight 5 of 12 in the ball game Speaking of fouls each team is sitting with only two personals two team fouls. Pardon me Washington County calls a timeout Sir second timeout Marty. Yeah, I was just gonna do a little more housekeeping in regards to us We will be back to UW Sheboygan But that's not until January 6th when they play UW Marathon our next broadcast isn't gonna be until December 10th. That's a Thursday when South come pardon me when Manitouac comes to South Look forward to starting our high school season Lot of graduates out of South a lot of guys gone from last year's team. Yeah, they had a very good JV team Marty but They'll be young and coach rank will Have those guys starting up on Monday. I know he's excited about his season coming up We've talked to him a couple of times at the football games They said they had a very nice JV team a year ago and high school basketball by the way starts on Monday Yep, so it's that's so gonna be in the gym at 6 o'clock 6 a.m. 12 o'clock Sunday night No, traditionally, I know this north does two of days. I'm not sure what coach rank does but Two of days is not uncommon to start a season So we know South should be pretty competitive like you mentioned they had that good JV team Nice runner that time by Javon Williams. How do you think north will be? North will be up there, too As well we mentioned Davis arson here He's one of the best in the state come out to see him sometime this winter as well The kick out to Halverson. He had a good look at a three, but couldn't get it in and fighting for the Revan was Collis and Nailing the three is second of the game second of the half TJ pitch Get him on track Still didn't break that 10-point deficit though. We got to get under your single digits plenty of time Hollis was the impetus between that three for Pitch when he fought for that rebound got it It's a fifth turnover ready for Washington County Little token pressure. I don't know if this was called by the bench. Just pick your guys up a little bit full Javon Williams says pitch you're not catching the in bones pass this time We can work it round for an easy basket underneath Good switch on top Pitch off the glass no goodies followed he'll be shooting a pair Good decision by TJ hit the couple three so they come out on you. You take it to the rack draw a couple Bodies on you shooting some free throws Javon Williams picks up the foul TJ is three for four in the game on his free throws make it four for five now It was one of the best last year in the FRCC. He's got 12 points in the game CCA on the south side What's that stand for Christ child Academy and Honor Harrison was one of his teammates Good feet inside the Johnson. He rises above the crowd kisses it off the glass for two It's his first shot attempt and all his baskets have been right around that area there. He loves that left side Pitch is open. He's gonna take it. He feels it couldn't get at that time Nice with the rebound couldn't put it in and Washington County comes away with it great opportunity for the Wombats And they just couldn't cash in Washington County Steinhardt comes back with a three every time there's a little mojo on the Sheboygan side someone seems to get a basket for the red shirts Pitch open in the corner Couldn't get it to go You know whistle underneath That was a good call Taylor was down deep and pushing his way around Holscher and Gilbertson check in for Sheboygan and Halverson and Hollis Check out for the Wombats at 945 See if Washington County starts to use some of the clock. There's not as much to use this year Good pump fake Fisher shot is no good, but I think McKnight Is gonna get the fall if it is it'll be Lucas's third 930 left in the ballgame Washington County up 66 53 Sean Fisher on the line He had nine first half points Sitting with 11 right now Dominique Ritchie checks in for Washington County Need to string some baskets together and some defensive possessions and Johnson going over the back Oh, he walks And then laying it up and in at the other end was Steinhardt and Starting to really get away from Sheboygan now nations Put one in Step back three is no good by Taylor under nine minutes Johnson gets it down deep And had it taken away Good steal that time by Dillon Gilbertson There it is Gilbertson had a shot block good recovery by Johnson Johnson had a look from just about the three-point line and passed it to a teammate good decision that time And he goes down hard Now check that that was Ritchie went down hard, but he's up and back in the ball game McKnight bingo and pushing the ball and shooting the ball was Jordan Taylor and he scores And he's gonna have a free throw attempt Johnson picks up his third foul my Lieber and Fisher come back in or was it Lieber and No number Dillon Tylen Hall making his first appearance Sheboygan's shooting their free throws even after that miss Chris there four out of five in the second half So they picked it up in that regard, but maybe too little too late. Oh my Is good by Fisher Wow not Expecting that no He knew what he was doing Chris or had the shot Fisher thought he had a block Scott Valenstein didn't on a foul. Who do you think's gonna win that? argument Make them pay Jordan. You got to make a couple free throws 12 points now for Jordan Taylor Unofficially I have Sheboygan shooting 29 percent here in the second half Well, what did you say they were in the first half 39 Overall Overall, I'd say it's not very good 36% yeah, it's not good enough Williams on a kick out the hall. Oh, we couldn't get it Lieber couldn't get it Fisher gets fouled by Holtscher and that's gonna be next third Three opportunities to score. Yeah, just One of the much Washington County under the basket. That's for sure That's 16 offensive rebounds only four in a second half, which is a good thing, but Now the shooting has gone bad for UWS This is gonna be Fisher's 11th free throw attempt in the ballgame and I know you're all wondering well How many did he make? 7 at nine first half points and he's got 16 in the game How many second half points does he have? Seven looking at other stuff 630 a good inside feed, but Not a good shot attempt that time by Taylor Probably run some clock here up by 16 Shot clocks down to 10 Wow, seems like they just got down the floor. I know that's weird One That's weird something didn't go right there There's an that wasn't right. I told the girls down in front if we're behind run that shot You know what I think happened is we missed the rim on this side and they never shot reset the shot clock That's a good move. That's a hometown move They're pretty savvy here on what happens when you get a Oh follow before All is gonna go on Lieber that'll be his third Both teams pardon me neither team in the bonus Sheboygan has five team falls Washington County 6 McKnight. Oh boy driving hard to the basket and scoring was Dominique Richie Freshman from Brown Deer and Sheboygan calls the timeout They're down 18 not looking good Chris not at all and remember We said, you know, sometimes it takes tells late in the second half when your legs start to give out You know where I think we're seeing that at least the last couple Trips down The shot at the shooting, you know anything outside 10 feet. It just it's not getting up there. Yeah, no legs Yeah, McKnight's been short Halverson's been short Gilbertson is short Now the clock is the biggest enemy of Sheboygan They're really winding down here the time There's 551 left. You're down by 17 Hulcher leads Sheboygan with 14 points and pitch and Jordan Taylor each have 13 Good save by TJ Williams playing the tight D Halverson Missed a shot, but it looks like he got fall these hurt. I might have turned an ankle Fall went on number 23 Richie That's his third his fourth actually Halverson on the line His first free throw attempt of the game Nicolas are gonna Excuse me Hulcher gonna be coming into the game over to trip that time McKnight from outside the line bingo Another Lucas is first points of the second half Chris. He has 14 Ten of five of ten in the first half just one of four in a second. We're under five minutes Good balance by Sheboygan four guys and double figures A 15-point advantage for Washington Coney good quick knockout to McKnight and All you're just standing in the wrong place at the wrong time and you're right I didn't think you followed them either think of it this way coach Murphy What it'd be like if it was a even ball game We got the buzzing back Chris is no longer kicking below the table And I'm working with some cords on top and just nothing seems to be working right Never happens when Scott's here never never, but we just way too long together Marty One thing we know is not to touch court Nice soft touch by Lucas, but it wouldn't roll in for him Money there Johnson Just like he's done all night get close to the basket and shoot jumpers Yep, seven of nine from the floor and all right there around the pain Bango TJ pitch with another three. He's got 16. I got Johnson with 14 points, Chris He talked about his seven baskets and a throw away All balls pass cross court pass a little too deep 13 points is all it is four minutes 12 seconds still enough time Thomas Freiberg in the ball game for the first on first time. He's a Campbell's Port high school grad McKnight Couldn't get it if Washington slows it up a little bit here under four minutes left in the ball game Brendan the last of itch had the ball number five He snuck in when we weren't looking Johnson on a Follow on his way to the basket. I almost thought he doubled dribble there Chris Just a six-team foul on the Wombats. So Fresh 30 for Washington County Making that call was Eric Vantol 342 left whoops Steal by Sheboygan kicked down to pitch Lays it off a little too hard good pressure by Liebher Forcing the miss a good feed inside And missing a shot only the third time tonight was Johnson put it up McKnight with a three and a fist pump ten point game three minutes Eighteen points for Lucas under three minutes now How Washington County handles itch on a good steal lays it up and in Itch also with 18 points and they're within eight points. Wow 45 minutes yet to 45 plenty of time Let's look at the fall situation for Sheboygan Chris They have four players with three falls that would be Holscher McKnight Hollis and Taylor sitting with two as pitch and Halverson So they're pretty good shape. I think yeah not considering how the game started when everybody seemed to be picking up Fouls left and right Fouls aren't going to be the difference. It's a matter of you can create some turnovers the thing here is while Sheboygan's in the bonus Washington County with eight falls so if they can draw some falls and make them Maybe help make up the difference without the clock even running 250 left You know we had talked about the poor shooting not just from the free throw line, but also from the floor It's amazing how your fortunes change when you start putting the ball through the basket Yeah, TJ with a three Lucas with a couple threes What we have Sheboygan with one three-point basket in the first half and I've got them for Five here in the second McKnight at the point of this one three one half court trap Washington County pretty content to run shot clock Good decision pitch with another steal. No, not quite And they reset the shot clock. That's not what should have happened. It should have been a violation Sheboygan caught a bad break that time. I Think they thought TJ had possession and he never did no On the line for Washington County is Hayden Steiner This is his first trip since early in the born up ballgame when he made three in a roll 222 left in the game This will be the seventh free throw attempt for Washington County They've made four so far four out of six and they couldn't get the second Pulsar with the rebound Fox not moving Fox not moving Fox with a shot. No good clock is moving now. Oh, it's six seconds late Williams to Johnson ill-advised shot by DeAndre Johnson that time. Yep Bolshe was eyeing up pitch, but he couldn't get himself open and Pascoes out of bounds pitches got a bloody nose. I think Where he got hit in the lip Got hit and I thought the ball was tipped as well two minutes under two Yeah, TJ doing okay. No shot necessary 16 seconds on the clock 140 in the game Pick that'll reset the shot clock. Yep, er. I Thought thought coach William Greenwood the second Coach a pretty good game here, Chris, you know coming out with this trapping defense late There you see Tom rush and they're not gonna reset the shot clock It may not reset all the way to 30 it may reset to 15 Whoops 14 you're right there Marty The NBA that's an automatic reset 32nd time out by Shaboy again Don't don't call time out with the clock stop Why not?  It's just Fool foolish when the clocks already stopped ahead of time And enough of this Everything's leaning towards the south Marty. There you go You know, it'll be fixed and a minute 39 Good one Everything will be working then I think it's the rain outside. It wasn't supposed to rain till later, but Somebody decided to open up the clouds a little earlier Ooh, do you hear about all the snow in Denver? Yeah, major storm. Yeah, my brother Talked to me. He lives in Colorado Springs said he's snowing six five four three Launch it Williams. No good Even the horn is not working right 123 left Shaboy getting down by only nine a couple of threes could really make this interesting Pitch wide open bingo Now you could use the timeout, but the clock is running Down to a six-point game Pitch on a good defense on the baseline, but they leave Johnson open and he passes it off of Halverson out of bounds Fisher's gonna check in get the big fella back in Johnson coming out Fisher and his ten rebounds and now we got a timeout by Washington County 103 again 30 16 points in the second half for TJ and With the five in the first half gives him 21 for the game Spend those three pointers have gotten Shaboygan back Well, you knew he'd go get off sometime. We just hoped it was be in the game today Shooting them threes Right away Chris. I would put him in the one-in-one before they get to the double bonus Yeah, you want to stretch this game out now? Now with a minute three, you can just get a stop to yeah, right, but they do have 20 seconds I think I just see if we can get a stop Or a foul No time off that way. No Pitch picks up the fall that's gonna be his third if you're gonna have anybody fall and he'd be both the best guy it's out there and Jevon Williams is Gonna be at the line. He hasn't been to the free throw line tonight Chris We'll find out if this was a good fall or not one thing block somebody out They all went right to the basket Marty. Nobody did they didn't do their job And picking up that fall is gonna be I believe that's the 10th follow though, isn't it? No, it is. I think they only have them for nine Taylor was gonna check in they thought Halverson followed out And he doesn't miss that one. I was just gonna say given a second chance. He cashes in this to me Not a they get to 81. It's gonna be awful tough 81 82 They're at 80 right now because that means you got to make four threes So 82 is the magic number. I think for the Wildcats Bullshark three pointer Whoa, baby 75 five points down. It's 80 for Washington County. See in the shot clocks at 22 Marty It should be at 30 30. Yeah, what in the world is going on kids? 44.4 seconds left in the ball game Sheboygan down five See if Washington County observes what I think yeah, they did not switch the shot clock here Marty There you see the Scoreboard and What we've just been talking about the clock running down they give them a minute for a timeout and they run it down Chris mentioned that in the first half I mentioned it again for you people that were sleeping during the first half Well, sheboygan's got to go for the steal or they're gonna quick follow force Them to make free throws I still think if they get to 82 Marty, it's gonna be awful tough Well, they got the shot clock Reset the 30 up with 44 seconds left. You can't let them run it down. That's for sure. Nope And I don't think Washington County will be in a hurry to shoot You have your best free throw shooters in here Going for a trap. They got it. They got it Gilbertson forgot to slide into the spot That's gonna be Halverson's fifth foul You get the trap there. You got to take away the pass. No Jordan Taylor is gonna come in Coach is trying to explain to Ryan Halverson. He tried to get over there. He just couldn't get there quick enough It's like a coach what you don't like is when the player always has an answer Just listen to what I'm telling you and try to do your best That's been an ongoing conversation Block out boys. Oh, this is the big one Marty. This will make it a three possession game And only 38 clicks left. That's an issue and he does Yeah, Javon Williams after missing that first one has made four in a roll. He's got six points in the ball game I got to reset the shot clock. So now you got to get it in again 30 seconds all types of pressure and always get it faster get it up faster when you pass the ball Bolsheer from deep Couldn't get it McKnight tapped it out of bounds Washington County is gonna get it back with twenty three point one seconds left Sheboygan down seven Pull it out.   Oh boy. Good block Bolsheer is gonna get called for the foul. I Guess you keep your guys up there fence of rebounds lots of them tonight Nice to see UW Sheboygan in a couple weeks to see how they improve. Yep It was nice to see him make a spirited comeback. They knew had mentioned it, too They really looked dead in the water there for a while till they started making some baskets so Good effort by the boys. We're gonna come up short again. Don't lose Heart gotta keep hanging in there Pitch on a fadeaway. No good. And that's the ball game Washington County a winner 8475 No closing comments by the coach. So I will I just gonna say that I kind of made it they battled back but Too much of a deficit there Our next ball game is gonna be December 10th. That's a Thursday when Manitoba comes to South We look forward to bringing you that game until then. Thanks for watching everybody and we'll see you down the road


In this new review on the intakes of berries in their brightly colored pigments called anthocyanins, they note four out of five studies suggest that increased intake is significantly associated with the reduction in the risk of coronary heart disease, the number one killer of men and women by between 12 and 32 percent. That lower range is from studies of older individuals, and the greater reduction of risk was noted in younger populations. So perhaps the earlier we start eating berries, the better. And maybe the more, the better, a 47% drop in heart attack risk for those in the top 10% of berry consumption. It's almost like one to one. For every 15 mg increase a day, a 17% drop in risk. So how can you get 100 mg a day? By eating less than a half cup of blueberries a day, my daily dozen recommendation for berry intake. Why the drop in risk, though?  There have been over 20 randomized controlled trials putting berries to the test, and more than a thousand people and berries were shown to help control bad cholesterol. Blood pressure, blood sugars, body weight, diabetes, and inflammation. Now lots of plant foods can do this. I mean, is there something special about berries? Like cholesterol. All whole plant foods have fiber, fiber lowers cholesterol, and even blueberry tea can lower cholesterol, even in kids who are genetically predisposed to high cholesterol. We used to think only about 1 in 500 people had this high cholesterol gene, but now we're realizing it may be as many as 1 in 250. Still for the 249 others who think high cholesterol just runs in their family, more likely bad diets are what's being passed down. But even if you do have the gene, what happens when you give kids blueberry tea, just powdered blueberries in a teabag dipped in hot water for five minutes? So they're not even eating the whole food. Well, I mean, you can imagine the water turning blue as the pigments seep into the water, and indeed the antioxidant capacity of their bloodstream increased over the six months they were in the study. Two things of note here. First of all, no change in the control group, as expected, but note it took three months for the tea to start having a significant effect. And then, of course, six months after they stopped drinking the tea, they were back to where they started. OK, but what happened to their cholesterol? No real change in the control group, but a 30% drop in LDL in the tea group. That's like what you'd get putting these kids on a statin drug, and they just had to drink some yummy tea? But of course, when they stopped the tea, their cholesterol bounced right back.


Hi, I'm Ian. I do container things. Hi, I'm Chad. I do mainframe things. And we're here to tell you a story today about some things we did together. We both live in Minneapolis, Minnesota, which is a cold, dark place where it's winter six months out of the year. Minnesotan hackers spend their long winters stuck inside doing deep dives, studying ancient arcana, and getting good at deep magic, which lends itself well to weird specializations. And that's how we ended up here. It all began in spring 2019. Like many good things, it began with a shitpost. A person involved in Dumb-Offs said Kubernetes is the next mainframe. So, of course, I tagged Chad in it and said, what do you think? I'm not qualified to speak on mainframes. I'm about as qualified to speak on mainframes as I am on beekeeping. I think I've gotten a little better at it since. But anyway, a few days later. A few days after that shitpost, we met at a local con for the first time in person and talked about our niche specializations. The similarities and differences between them. Although our worlds don't usually overlap, the cultures are different, the timeline is different. I mean, mainframes have been around since the 50s, and Kubernetes have been around for, like, what, six or seven days? Our approaches had some similarities, and we both knew we had some knowledge in common. In the mainframe world, it's not uncommon to patch the systems maybe once, twice a year. And in the Dumb-Offs world, people do, like, multiple deploys a day. Culturally, it's really different. Dumb-Offs people are really open to new things, open source software, really excited about doing things quickly, and doing new stuff. And mainframes, maybe not so much. No one would ever accuse the mainframe community of being excited about change. Fair enough. Both of us had experience pulling things off that other people said were completely impossible in our respective fields. We figured how to navigate in uncharted territory. We took apart technology without dedicated tooling, and with little or no prior art. We did have some things in common, though. We had shared knowledge of Linux hacking, which ended up becoming helpful for this project later. Because containers are made out of Linux features, and mainframes use Unix file systems, too. We joked about whether or not we really could prove that guy wrong, about Kubernetes being the next mainframe. But I didn't really think we would ever get to do our thing together, because, honestly, who puts containers on a mainframe? Well, joke was on me, because just a few months later, in fall 2019, IBM announced ZOS container extensions, which we will be referring to from here on out as ZCX. So we made it into a winter project. Joining forces and combining our very specific particular sets of skills, we were able to become the first people on the planet to escape a container on a mainframe. And that was just getting started. This talk is about how we did that. To talk about friendship, collaboration, cross-disciplinary skill sharing, and figuring out how to escape containers on the moon. But first, a couple of things. It would violate the laws of physics and math to fit all of the technical background that Ian and myself have about our two niche disciplines into the amount of time that we have for this talk. However, we have not figured out how yet to do this, but we're making a lot of progress, and we'll make a note of it for future talks. So we're not doing that today. We encourage people that are interested in finding out more to check the resources in our reference sections, or if you're seeing this in person, come around and ask us a question. There's a lot of ways to attack this thing that we're not going to be covering today, but we reserve the right to not answer questions about those. If you're not here in person, and you're watching this virtually an hour later, we're around the interwebs too. You could probably find us on Twitter. Probably Twitter, yeah. Speaking of which, we disclosed this to IBM, and IBM sent us a formal statement about it. To our knowledge, this is unprecedented, so we figured we would share it here. Great to IBM. Yeah, I've disclosed vulnerabilities to IBM in the past, and friends of mine have also disclosed vulnerabilities to IBM specifically for System Z, and they never get talked about publicly. This is fantastic. I really appreciate this, and I hope they do this again in the future. So, yeah, that's pretty cool. Anyway, let's get to it. So, what is this thing? Containers on a mainframe? What? That's weird. First off, let's do some myth busting. Mainframes still exist. They're widely used, and the tech is more modern than you think. UNIX, or AIX, has been ported in running a mainframe since the early 90s, and now they're actual containers that run inside an address space on IBM's most prevalent mainframe OS, ZOS. Every one of you used a mainframe today, or in person, on the way here. If you ran a credit card, if you went to an ATM, if you took an airplane, you used a mainframe. IBM's product name for this is ZCX. I'll explain what that is, but first, let's do some super basic mainframe primer. The mainframe we're talking and referring to today is IBM's flagship System Z. The operating system is known as ZOS. Sometimes, excuse me, sometimes it's still called MPS by its old timers. It runs most of the mainframes on the planet, and it runs a unique architecture called Z architecture. Within this OS, the basic unit of user or process separation is known as an address space. ZCX is a custom hypervisor, which emulates Z architecture and runs in its own address space on ZOS. Atop ZCX, there is a customized bare bones Linux image running Docker containers. IBM hardened this image and created a custom Docker plugin to support a secure Docker base install, which allows the user to create and manage containers. So, Ian, what's a container? What is a container? First of all, let's talk about what it's not. A container is not the same thing as a virtual machine. Containers don't have their own kernels or standalone resources, at least most of the time. Containers share resources with each other and with their hosts.  Docker is the most common container engine, but it's not the only one, and they can vary pretty widely in implementation and behavior. Some of them even have hypervisors. ZCX does use Docker, though, so that's what we're going to be talking about today. This isn't the first time Docker containers have been run on mainframe computers. Docker has been running on bare metal Linux instances on mainframes for a minute, but that's just plain Linux. ZCX is different because it's the first time containers have been run on ZOS. But what is a container anyway? Well, a container isn't really a thing at all. They're basically a set of native Linux features that are put together in order to isolate a process. These features are C groups and namespaces. C groups determine what resources a process is permitted to use, like CPU and memory. Namespaces determine what a process is permitted to see, like directories and other processes. Together, C groups and namespaces make up what we call a container, which is really just an isolated process. Containers as a concept don't really exist in the Linux kernel. As far as the kernel is concerned, a container is no different than any other process running on the host. What this also means is that you can look at a container process like you could any other process on a Linux host. For this demo, we've already escaped to the ZCX host, so we're looking from there. So let's run a container with the name honk, command sleep 1312. The honk isn't really necessary here. I just wanted to honk at you. If we list our containers, we can then see that container running. We can see this or any other container on the outside by running a ps command, which will show us containers running on the host alongside other processes. This command output will give you the process ID, the user running it, the PID namespace number, and the command line argument. If we want to take a look at the inside of the container, we can do so by looking at the procns folder for the process ID of that container. We found the PID of the container we just created in the ps command output we just ran. Let's take a closer look. We take a look here. We can see the C group at the top and the other namespaces on the bottom. All processes on X are made up of these namespaces. As of kernel version 5.6, there's also a time namespace, but ZCX runs an old-ass kernel, so this demo won't show you that one. Depending on the configuration and how the container was created, some of these namespaces might be shared with the host, and some might be unique to the container. We're not going to get into that here, but I recommend checking out the resources in the reference section to learn more. And that's it. Honestly, that might be the closest thing you're ever going to be able to get to being able to actually look at a container, because that's all a container is, a process made of C groups and namespaces. Because containers do share resources with one another and their hosts, containers present a wide and varied attack surface, where if a container is compromised or misconfigured, containers can compromise each other and their hosts. I just think they're neat. They're fun to break, so let's talk about breaking some. So, how to break this thing anyway? We approached ZCX from both ends, using our respective knowledge and skill sets, and we ended up taking ZCX completely apart from both the container side down into the mainframe and the mainframe side up into the containers. But first, before we did anything else, Chad set up a lab in the cloud. It's true. It was a complicated lab, and it took a while to get it going. Let me explain. We had to build a cloud-based ZOS environment with the latest ZCX code release. We used IBM's ZPDT, that stands for Z Personal Development Tool. It's a virtualized platform that emulates Z hardware and runs atop Linux. On top of ZPDT, we loaded the newest ZOS version, fully patched it, and were able to install and run ZCX in the cloud. So it looks a little bit like this. A top of Linux, which is a hosting provider, we run a Linux instance. Running in that Linux instance is ZPDT. On top of ZPDT hypervisor is ZOS. Within ZOS, there's an address space which runs the ZCX hypervisor. On top of that, runs a Linux instance, and in that, runs Docker on Docker. And that's our research environment. Simple. Something along those lines, yeah. So, but to really be able to attack this, we needed to level up our skill sets. So we started out by cross-training each other. We set aside time to share skills and get each other up to speed and have to be dangerous. Because for me, I didn't really know how to do anything with a mainframe. I couldn't spell Docker. But you're good. And so we needed a little bit of help getting each other up to speed. So we started doing that. First thing, I took Chad's evil mainframe class. Chad's a really good teacher. It's a really good training. If you ever get the chance, I recommend it. It's upward as such cons that you may or may not have heard of like Black Hat every once in a while. So the training is multiple days long. It goes over the history of mainframes, how everything works, and there's a CTF at the end. It was really good. I had a really good time at bed. Mainframes were brand new to me. I had never touched one before. I had never really had an occasion to. I'm used to bleeding edge cloud native tech stacks. That old stuff never really comes into play for me at work. And while unit system services felt familiar enough, the older stuff was wild. I had never seen or dealt with architecture like that before. It was so foreign to me. It might as well have been made on the moon. I learned in systems. So it took me a little while longer to ramp up at first until I figured out how the whole thing worked together. Chad was very patient with this. I did get there eventually. I still call them in frames though.  They picked up mainframes super fast, as good as anyone I've seen. The next thing was for me to train up on containers. And Ian helped me do the Secure Kubernetes CTF. I'd done only a little bit of work on Docker before, generally with CTFs and little like. It's always seemed like a little bit of magic to me. Working with Kubernetes and Dockers in the Secure Kubernetes CTF really helped me make some sense out of it. It did bring me back to my beginning mainframe days.  I still put my overall understanding of Kubernetes at like 5% maybe, and containers somewhere in the neighborhood of maybe 30%. But working side by side with Ian has really helped me. They've always stopped to take the time to answer my questions of very detailed answers and examples. I definitely would not have wanted to embark on this without their guidance and patience.  He took right to it, because he already had a base of Linux knowledge and because containers are made out of Linux internals and container orchestration is made out of containers, he was up and running really fast. It was really fun to watch, and it was really fun to get to come up with a curriculum to train you, because I'm not a professional trainer. That wasn't really something I had done before. So it was cool to come up with one for you to teach you everything, early summer things. Anyway, so after we had trained each other up, we took our new skills and our existing knowledge and started taking a look at the product. Working together, but separately, we looked at our respective spaces. I looked at the containers. And I looked at the mainframes. And we tried to figure out how to get into it. On the mainframe end, I started with the initial provisioning of ZCX. This is where the primary image files live in the Unix subsystems on the mainframe. This is where you initiate ZCX, you provision it, and thus all of the artifacts that might be interesting to us are stored here. I uploaded these files used to build the root ZCX file system to a Linux box, and then I could take them apart with the proper tools. I fired up my exotic hacking tools like strings. I quickly discerned that the core of these image had two main parts, a whole bunch of bash scripts, and a bunch of Linux disk images. I extracted and examined these bash scripts alongside the job log, which shows messages as ZCX launches. Immediately, I noticed that the scripts all had debugging outputs, but that none of the debugging outputs were showing up in the job log. What to do? Well, going back to the bash scripts, I looked, and there was this super helpful line near the top of the first bootloader script that gave away the secret. Uncomment this line to enable debugging output. Thanks, developers. Who said being a hacker was difficult? All you have to do is just learn how to bleed. So I patched this binary, put it back on the mainframe, and repositioned a new ZCX. Fabulous. The job log spat out all of the debug for all of the bootloader stages. There were so many messages, though, about keys and decryptions. My interest was piqued, and the hunt was on. I patched the bash script up again and started looking for the initial decryption keys. I used the tried and true hacker skills of echo privatekey.pem, and I dumped the first of several encryption keys to the job log. However, I couldn't fully reverse the file system yet, because despite being able to echo these keys in the initial bootloader processes to the job log, I couldn't actually find the keys in the file system. It's a pretty complex setup.  For the moment, I was stuck, and I turned it back over to Ian. So looking at the container setup, I immediately saw some things that looked promising. First of all, the initial user was in the Docker group, which is a security hole so fundamental it literally comes with a warning label on every new install on ZOS. Somebody had to have seen this label and actively ignored it. Sweet. Wow, okay. So, sweet, this looks good. Moving on. The container setup that ZCX has was Docker and Docker, which has known security holes, especially in certain configurations. There are a couple of approaches to Docker and Docker. It can mean running the Docker daemon inside a container, running inside another container, or it can mean running only the Docker CLI or the Docker SDK in a container and connecting it to the Docker daemon on the host. ZCX has a setup like the latter one. The approach to Docker and Docker that ZCX uses has a few different known drawbacks and some known security holes, because in this setup, the container running the Docker CLI can manipulate any containers running on the host. It can, for example, remove containers. It can create privileged containers that allow equivalent access to the host. And ZCX Auth plugin, which was part of their security model, tried to account for this, but it didn't quite work entirely. Wait, what? I hadn't mentioned ZCX Auth plugin yet. What's up with this? Let's get there. So, I had looked at this and realized pretty quickly that it wasn't completely wide open. My first attempts of doing the sort of like most bog standard, kind of like, okay, can I run a container as privileged in here? Can I execute a command as root? That kind of thing were blocked by this Docker authorization plugin that they were using called ZCX Auth plugin. ZCX Auth plugin did a few different things. Blocked privileged containers, blocked executing commands as root. It also blocked mounting the host path as a read write mine amount. Okay, fair enough. But I neither had to be a way to get into this because honestly, just look at that setup. And I wanted to figure out how the thing worked. So as I do, I went to the docs and as they often do, the docs point the way. Quite literally, IBM helpfully listed all the security restrictions on the product, telling us all the things that we were not allowed to do because they adversely affected security features or may compromise the product. Well then, thanks IBM. I appreciate the tips. I was clearly going to have to try all of those immediately. The language and the docs at the time claimed that it was not possible to become root or access or modify the Linux host, but I knew that it was possible because they gave enough information away about their system to tell me so. Here's why. For one thing, what ZCX Auth plugin blocked gave me very specific error messages. For another thing, the commands they were blocking through ZCX Auth plugin were very specific, which pointed to a specific set of system configurations and also the possibility maybe that they might be blocking through pattern matching projects. Really?  Even if it is possible to prevent all attacks via trying to block known bad syntax, which I think most people here can probably guess that it's not because there's lots of ways to bypass that, it's also immediately clear upon looking at this that there were a lot of options they missed, many of which were security relevant. And in fact, going through the docs, it became obvious pretty quickly that maybe the folks who were developing this thing were a little newer to containers. Another page in the documentation had a section on restrictions on bind mounts, which said that you couldn't mount host resources. Okay. I already knew that the plugin tried to block that one. It also mentioned that bar run Docker socket was read only. Oh, that was the key to the front door. Let's talk about the Docker socket for a minute. The Docker socket is a known security hole if you leave it exposed to, for example, users in the Docker group. This gives that user root equivalent access to the host. And read only for the Docker socket is not a security boundary for a couple of reasons. One, you can make a whole volume read only and all of the files in a folder read only, and that doesn't actually affect sockets because sockets don't work that way. Also, the Docker socket in particular has an API layer that you can make calls to and an entire Docker engine API for commands that you can execute to it while making those calls. And in the commands that the docs had mentioned blocking, they didn't mention any of the syntax around the engine API at all. I made a curl call creating a new container that mounted the host path as a read write find map via engine syntax. And hey, the words. So I knew that making calls could work and that binds was an option they missed. Sweet. But when I tried shooting out into the host system, it didn't quite work the way that I wanted it to because they had enabled username space remapping. What this means for my purposes is that once I was out of that name space, even though it said I was root, I couldn't really do anything meaningful in that name space. And they had locked down the pseudo response real hard, which was throwing weird permissions errors that I hadn't seen before. So that was kind of odd. But okay, maybe this one wasn't going to work. But at this point, I knew I was getting somewhere. I'm going to take a second here to explain username space remapping because it's important. Linux namespaces provide isolation for running processes. They limit their access to system resources without the running process being aware of the limitations. You don't want to run your containers as a root user generally. It is not a secure thing to do. But sometimes for various system reasons, you get a container in which something has to run as root. So for those containers whose processes have to run as the root user within the container, you can remap this user via username space remapping to a less privileged user on the Docker host. The mapped user is assigned a range of UIDs, which function within the namespace as normal UIDs from 0 to 65536. But they have no privileges on the host machine itself. This was why, even though I was theoretically running as UID 0, I couldn't really get anywhere. So knowing that the API calls could work to the engine API, but that username space remapping was kind of cramp in my style, I figured I'd try something else. I tried a username space host option through the API because setting username space to host breaks username space remapping. This option was blocked by the plugin when I tried it before in a Docker run command. But via the API, it worked. And this time, when I got in, I had full root access to all the host resources. This system really needed more defensive depth. It appeared to have been built upon the assumption that no one could ever become root on the host, like they really believed their own propaganda. So nothing was really locked down on the backend by that point. Once you were in, and once you were root, you could really do whatever. And it was kind of fun, actually. I haven't really had that much fun running around an environment since early Kubernetes, which was similarly locked down. And I hadn't gotten to do that. So in a while, since Kubernetes improved, that was fun for me. Anyway, the first thing I did, once I had access to the host file system, was look inside the root folder because, you know, why not? And in the root folder, there was another folder called root keys. Well, that sounded great. Obviously, there's going to be something interesting in root keys. So I took a look in there, and I found a private key called IBM Encapsulation Private Pem. Didn't quite know what that was, but I figured probably you did. So I landed it in Chad. Figuring it might be useful. Chad then took the key, reverse engineered the cobalt or something, and then we had a system to look at. Right. So it wasn't exactly cobalt, but it was pretty complex. So it was like a Fortran, right? Exactly. It was Fortran. Thank you. Ian had found the key that I was looking for. And once I had the key, I could finish reverse engineering the root file system, and then I was able to look at this in more depth.  After parsing it all and reassembling the unencrypted file systems on my Linux box, I had a moment and realized what this was. This is IBM's secure service container, or as it used to be called, Z appliance container infrastructure, ZACI. IBM's secure service container is an offering that they sell for Linux, Linux one, where it runs directly on bare metal IBM mainframes as a secure appliance. The file systems were littered with these acronyms. It dawned on me that what they had done was taken this, and this is why there was this wild maze of keys and encryption and scripts. They lifted this SSC, which normally has its initial decryption keys inside of hardware service module, and poured the whole thing to software on a disk. IBM normally builds these hardware enclaves, but it's harder to do that in the cloud. As it turns out, you can't actually lift and shift things into the sky. What we were coming to find out is that the security model in ZCX was a combination of mainframe and container security models, and a combination that worked in kind of interesting ways. Since container shares resources with each other and their hosts, securing for containers requires a holistic approach. Any given container system is only as secure as any given part of its stack, really every part of its stack. You have to have defense and depth in every layer on a container system. Containers are literally made out of layers, but that means that you, not only do you need to, but that you can do every little bit at a time. This is somewhat different security model than about on a mainframe. The mainframe security model is really granular. You can configure security on literally anything on the mainframe. However, it's also a monolith in its security model, and it can be very binary, like a light switch. Defense and depth on the mainframe can be really difficult if you have made any security configuration errors that would allow you to basically bypass all the security controls because you screwed up one or two really key important things. Mainframes are wild. They are wild. So the differing approaches to these two security models came into play with the way that ZCX got built, and these two combined in some somewhat unexpected ways. And that way they got combined led to some somewhat unexpected behavior for both of us. So we worked together, passing things back and forth. When either of us ran into the limits of our knowledge or saw something that didn't really make sense in the respective context we were used to, we would pass the problem to the other person who would recognize it from their knowledge and context, and then we would do it again. So, back to the container system. I'm in there. I have full root access, but I was having a hard time understanding some behavior that I was running into. The Docker service kept throwing these weird system D errors I hadn't seen before, and my debugging tools weren't really helping in helping me figure out why. I wasn't really sure what was up with this. Meanwhile, on the mainframe side of things, I found this directory in Etsy system D services had these weird permissions on it. 644, which any of you Linux people would know that 644 is kind of odd permissions for a directory because the execute bit isn't set. I found this because I was copying it from a Linux box to another directory and my copy command threw an error because it couldn't copy that directory. Why would you want a non-executable directory? I'd never seen this before. I showed this to Ian with a comment about how strange I thought this was. Oh, huh, okay. This partly explained the errors that I had been getting with the Docker service that I hadn't been able to figure out, sort of. The permissions bit made sense in a container context. 644 are actually pretty standard permissions for the Docker service for compliance reasons, but this particular service didn't quite act the way that I would normally expect it to. The Docker service interacted with several other system D services. One of the services it was interacting with was called ccxoffplugin.service. So I took a look at that. I wanted to know how this plugin worked and could we disable it? Docker authorization plugins aren't super commonly used, but the ones that I had seen, which were open source, generally behaved in pretty similar ways. This authorization plugin was different. It was closed source and it interacted with system D as a service in a way that I hadn't seen before. It kept making these calls back and forth and running it against a list of string magic text.  This wasn't common behavior in container context at all. I had never seen such a thing. Ian explained this to me and it occurred to me that what was going on here might have a similar corollary in the mainframe world. Specifically, mainframe exits. Let me explain. So within ZOS, there's a concept of an exit. What an exit is used for is if you want to do some really specific customization to some part of the system. An exit is literally a program that you write, usually an assembler or C, maybe C++, that is called from an API in some kind of a system routine. So the way it works is, let's take an example, a password processing routine. So Ian's going to change their password on the mainframe to Sparkle. So they type in the password Sparkle. The mainframe then says, okay, that's fine, but I see that there's an exit defined for password compliance. So it will call the program that I wrote and in my program, the mainframe exit for password policy, I'm going to check all kinds of things. Is this word part of the dictionary list? Is it part of, is it the month? Is it the current year? Is it Ian's name? Things like that, that the system wouldn't normally check. And if it is okay, I'm going to pass back a return code that says, that's fine, Ian, can you Sparkle? Or if it's not good, I'm going to say, no good, and I'm going to make them change their password back to something else. So I explained this to Ian. I said, I think what's happening here is that the programmers who know how to write exits to modify and control system behavior have written an exit in the ZCX auth plugin and that's how they're trying to control the security of this product. Wild. Meanwhile, I was also looking at the ZCX auth plugin, but I was looking at the binary. And the first thing that I noticed was that it was huge. I mean, listen, normally on mainframes, things are built with like really tight assembly code or C code. The binaries, even for super complex mainframe systems, are small because of this reason. Take example of the nucleus on a mainframe, which is like kind of like the kernel, like the core bit that tells everybody what to do. It's maybe 50 mags on the mainframe. And the ZCX auth plugin is six mags. I started dumping it and looking at it with a hacksetter and a disassembler. And there's all kinds of calls in here to things that have nothing whatsoever to do with Docker or security. And I was like, what is going on here with this thing? So I called it back to Ian and I said, what is this? What's happening here? This is what I knew. It was a go binary. They were thick like that. They have a lot of dependencies. They make a lot of extra calls. That's normal for go. At one point, I tried to Docker pull the image for go-lining and I crashed to our entire lab for disk space. Oops. I'm just unfamiliar with these kinds of size constraints because I'm used to go spaying. And so although I recognized the go patterns in the code, that made sense to me. Some of what that code was doing looked kind of weird. I was like, it looked unfamiliar in a way that at this point I had learned to figure out probably meant it was doing something kind of weirdly mainframe specific, despite the fact that it was a go-length thing that I might otherwise be used to seeing. So at this point, I think we all knew. This was clearly going to keep happening. And we were going to need to get a deeper looking at system together. But to get into the system as deep as we wanted to, we were going to need persistence and tools. So we made a lab version of ZCX. And we ripped out all of the security features that IBM had left behind for us. We disabled the ZCX auth plugin. We disabled user namespace equals remap. We made all of the read-only mounts into read-write mounts. We stored this file system onto a mainframe dataset. We added a debugger. We got APT up and running so we could update the software and install new applications and programs. And I even, very proud of this, figured out how to make SSH run on the root file system by copying the SSHD binaries and the corresponding libraries out of the Docker overlay file systems and running them in the root file system. So we had a direct backdoor into the root file system and could commence doing a little bit deeper research. We're still doing more with that. So where do we go from here? Well, we have a to-do list. So we're still working on this project. We have a couple of obvious points to attack that we've already gathered some information about and maybe some less obvious ones that we won't be talking about here. One of my favorite things is disassembling, disassembling your reverse engineering code. So disassembling the ZCX auth plugin is something that I'm absolutely looking forward to. However, it's written in Go and it's on an architecture using tools that we're not really designed for that architecture. Let me explain. If you look at any of the open-source tooling designed for mainframe, what you'll see is the architecture not listed as Z architecture but listed as S390X architecture. They are the same thing. In open-source parlance, S390X equals Z architecture. And even though I have things like Objdom and GDB and that sort of thing, when I disassemble these binaries, I'm going to end up with Z assembler code, not X86, not ARM, but Z assembler code. So this is going to make it quite a bit more complicated to get through. But doing this, I think, is going to open up some obvious pointers to other security vulnerabilities. S390X architecture kept coming up and kept kind of throwing wrenches at things throughout this process because open-source tooling sometimes supports S390X but a lot of the time it doesn't. And honestly, for really valid reasons, open-source developers, often who are working for free, are like, I don't work for IBM. Why would I work for something that is specific to IBM architecture? They're not paying me to do this. If you want people to do this, you can hire people to do this. And therefore, a lot of tools just aren't supported. That kept coming up as I kept running into like, okay, I'm going to go with this open-source tool that I used to use it and having it be like, no, and have some sort of terrible architecture failure like seven layers down the stack.  Anyway, the real goal here for us would be a full hypervisor escape, which we believe can be done. CCX runs in an address space within ZOS and that address space runs as authorized. Let me explain what this means. In a mainframe context, running as authorized means something specific. It's like security through the file system. So if you had a folder on Linux where anything that was in that folder automatically ran as UID0 as root and not only that, it had root access to everything else in the system. That's actually how mainframe authorized address spaces work, which is wild. And what this means is that if we can get code execution in that address space, which frankly, we believe that we can, we will be able to own the entire mainframe server, all of it, everything. We already know that there are direct memory links. IBM hopefully provided us this hideously ugly diagram in Comic Sans telling us so and also we know because of this demo. Okay, just going to show you a quick demo on what we think might be possible in the future. We've done a little research on the shared memory links between ZCX and ZOS. We know they exist. They're in some of the diagrams and the documentation talks about it. But we found one of particular instances we'd like to show you now. So this demo is basically just giving you kind of a window into what might be possible by way of just kind of a fun demonstration. So if we log into our log into our backdoor of our ZCX instance, so this is an SSH server that I booted up that's just running on the root level of the ZCX instance now, not bothering having to go back in through Docker and escape down to the root instance. We're just running an SSH daemon directly from it now to get in and out as part of our research environment. And I'm going to run some hackery commands from this ZCX instance that I'm not going to show today. And just to give you an example of what we think is possible, let's log back into the mainframe system. So I'm going to go log in with my TSO ID onto our mainframe. And once I'm into TSO, I'm going to launch ISPF, which is kind of the green screen that everybody associates with mainframe and is still probably the primary means of accessing the mainframe. And I'm going to go into SDSF, which is where all the output for all the jobs is stored, and look at one of our active jobs, which is named Moon, which is the ZCX server that we're looking at. So if I scroll down in this job log and I go all the way down to the bottom, you can see that there is definitely a connection between the commands that I just executed in ZCX and my ability to write to memory inside of ZOS, placing the goose there at the end of that job log. So the demonstration here was basically just to show you that what we have is what we have done is we've gone down through the Docker engine into the root Linux container. What's labeled here is Linux kernel, and that we know there are memory connections between that kernel through the ZCX hypervisor into ZOS. And so our next project is really to try to figure out how to take advantage of that and do memory overwrites and gain access then full access to an authorized address space within ZOS. Doing so would give us access to then all of the data, the programs and everything running on ZOS, which is ultimately the end goal. We couldn't wrap this up without discussing what we've learned. None of this or any of the future work that we will do would be possible without the sparkling partnership between Ian and myself. And I have to add a side note, but I think I've said sparkling in this talk more than I've ever said in my entire life when I wasn't ordering a drink. It's all the glitter I left everywhere. It is indeed. There's a lot of glitter. Here's what I learned. In my niche world, I'm often the expert that people come to for input. I like this. I worked hard for it. I like the recognition that comes with this. I admit, I find it hard to ask for help or admit that I don't really know where to start on a thing, especially if it's something that I could probably figure out on my own eventually, but maybe it would take me six months or a year. I don't know if this resonates with any of you, but collaborating on a thing like this means sharing the spotlight, right? Letting somebody else guide you and being humble. This is hard. This is hard for me, and maybe it's hard for some of you, but it's been a really good experience. It's been really good for me.  Be vulnerable. Ask for help. Be humble. Even when it's hard. It's not only okay, but the outcome can and likely will be better than going it alone. I've learned too. I'm more used to asking for help. I work collaboratively a lot. I'm a member of a hacker crew called Sehkank. We work together all the time and admit when we don't know things and ask for help and do that a lot. So I was more used to that. What I wasn't used to was working with people who have a skill set that overlaps a little with mine, because usually when I do collaborative work, I do it with other container people. And it's been really awesome to get to work with somebody who has knowledge that is so new to me. And it's so different from mine. I've gotten to learn so much from you, and it's been great. And to me, I felt really inspired by that. I think we both have, about what kinds of possibilities this could lead to for people, because we don't always think about this, right? We hang out with people in our bubble. Maybe they do the same kind of things we do. Maybe they're a lot like us. And if we start working more closely with people who are really different from us, either in just their skill set or just in the way that they are, the way that they grew up, the way that they live, you can learn a whole lot from doing that in a way that is really awesome. And if we all start doing that more, we can learn more from each other, and we can build and break things more amazingly, and things that wouldn't have been possible before, if we can work across like chasms in that way. So that's been really sweet. And we want to encourage you all to do that too, because what can you do together? What can you build? What can you break? There are infinite possibilities, and we really want to see what you can do with that. We want to see what we all can do with that. I don't think we do it as enough as an industry. So let's find each other. Let's make things happen. You and a small crew of committed friends can change the world. The secret is to really begin. Thank you. Thank you.