Hello, all together. It's time for next talk. I hope you're all active still after a lot of information. My topic is managing distributed secrets in applications on Cloud Foundry with Spring Cloud Vault, quite a long name. You can find the presentation and all demos I'm giving today also on GitHub already, so just in case you want to look at the presentation afterwards. I bought a lot of slides, but I will skip some of these because this is a one-hour talk. In fact, I will more concentrate on giving some demos what is what about To my person I'm coming from Stuttgart Germany, some consultancy company. We also support you in developing cloud native applications, mainly in Java using Cloud Foundry. I'm a frequent speaker at lots of conferences, like I was at a spring IO this year in Barcelona. I'm also an OVASP member, so that's why I'm so keen on security. So there were a lot of talks talking about authentication, authorization with OpenID Connect, like the last talk here. So we are pretty good at that stuff doing authentication well and authorization well for APIs so far. But what about our sensitive data? So that's sometimes in a weak point in our applications. Also seen by the OVASP, the OpenWeb application and security project organization. Just a short hands. Who knows the OVASP top 10 already? A lot of people. So towards the end of the year, we can expect a new version of that. So in fact, they declined the release candidate one at a moment, so they reworking it completely again towards the end of the year. But the point A6 sensitive data exposure is still in the current one. What makes it even more important to our applications is the new general data protection regulation coming in the European Union. I think it will be there in May next year. So everybody has to follow that. They mentioned their privacy by design for our applications and breach notifications for applications. So it is expected that our applications have privacy designed into the application already. From the beginning, not putting it in the application at the end as we do it sometimes currently, but our applications should deal with sensitive data and protect the sensitive data of all people. And also have a clue if there is a breach so that we can notify the people that are affected by that breach. So that becomes even more important. So what is typical sensitive data? You can think of passwords, service credentials like DB passwords, something like messaging credentials, even our two client secret stuff. For this, we also need some kind of secret credentials. Then we have encryption keys of all kinds, credit card numbers, social security numbers. The list can be more and more. I think all people that develop with Spring Boot knows lots of these application property files, application YAML files. You probably also have seen database credentials in clear text into that application properties. That's what I see each day in the projects. Even I noticed some production passwords in such property files. So some developers have always to have it a comfortable way. So they sometimes use the same password for productive and development stages, which is very serious. We want to get rid of that. So that's a sample as we see it very often in the wild. So my super secret password.  Because what to do with the key you need for encrypting that stuff. So you need to encrypt the key again for that first encryption and then it goes on and on. So several problems we have to deal each time in our projects. So today I want to talk a bit about some security evolution there. It starts by using Spring Boot as I mentioned here with the application properties. Then you have the Spring Cloud project. It gets a bit better with Spring Cloud config server already because that supports encryption as a service out of the box. But even there you have the problem still with where to store the encryption key. Either you have the private public asymmetric stuff or you have the symmetric key to store. Next step would be to bring together a Spring Cloud with the world project. I will give a short introduction to Walt. And the final stage is to bring the Spring Cloud Walt together and put it also into the Cloud Foundry Cloud. So what is Walt? Walt is implemented by a company HashiCorp. I think you all know WakeRent for example or a console of that company. So they also build Walt. It's an open source. You can have it as an open source but you can also have it as an enterprise edition with some more features and support for that. Especially if you have to roll it out into your big enterprise company with high availability features and stuff like that you may go to the enterprise edition as well. So Walt is a tool for all kinds of secrets to manage. So Walt can deal with tokens, can deal with passwords, can even create SSL certificates for your local CA. Automatically can deal with API keys, DB credentials and lots of other secrets you can imagine. So the Walt lead at HashiCorp names it as a security Swiss army knife. So that's even more suitable here in Switzerland now. So most people think of Walt as a simple key value security store but it's much more than just that. So you have the key features, the secure secret storage as I mentioned. You have the ability to create dynamic secrets. That's very important for database credential rotating for example. So it does some similar things as the mentioned Grad Hub tool we have in Cloud Foundry. You also have the data encryption inside that Walt that uses a secure EES cipher. And you also have automatically leasing renewal and revocation features. So all your secrets have some lease time. You can configure so they are automatically invalidated at some stage. You have also some supporting features like authentication for Walt. So you can authenticate via several providers for that. You have a fine grade authorization so not everybody can access all the secrets in Walt. So you have a really fine grained ACL feature so that every administrator for example can only see some part of the Walt storage. So if you have an insider attack for example that insider can only attack some small piece of Walt not the complete storage. It also has audit lock so if somebody wants to attack it's all in the lock. So the other admin recognized that at a sudden that somebody else wants to attack something so they can just shut down the Walt to get knowledge of that person that wants to attack that before something serious happens. And you also have the high availability mode for that stuff. So the main architecture of Walt is some small executable. You just have to download the executable and can just run it out of the box. If you want higher availability for example then you can run it with console. Then you have some some authentication features that you can use. You have some different storage back ends, some different types where you store your secret data. And you have some secret back ends or some mechanism what secrets you can store. And you have that audit back end for that logging stuff. And Walt incorporates some trust boundaries so it does not trust the client and it also does not try to trust our storage back ends. So if you store it into some for example MySQL so that's an untrusted data thing for Walt. So Walt never gives the encryption keys or stuff like that to the back end database. Regarding the Walt storage we have lots of possibilities. You can store it in MySQL in Google Cloud, Platform Services, Amazon Web Services, Postgres. You even have some plugin mechanism which is quite new to Walt. So you can even store it to more proprietary stuff like Oracle databases and there's more to come. But you can also store it for testing purposes which I'm demonstrating right now using the file system or in memory. So you also have possibilities for different kind of secrets. So you can generate PQA certificates out of the box for local CI stuff. You have a transit back end for providing encryption as a service, a key value store for just storing key value secrets. You can also generate your keys for SSH terminals automatically. You can also then generate credentials automatically for MongoDB with rotation for example. So there's lots of possibilities there as well. And for authentication you also have several possibilities. You can just use simple username password stuff, use a token, you can use LDAP, multi-factor authentication is possible. Also Google Cloud Platform or Amazon API key. But even you can use mutual TLS and also Kubernetes or you can use GitHub accounts for authentication. So one more security thing Walt implements is that not one administrator can open Walt initially. So if you start up Walt, it is initially sealed. So you have to unseal Walt first and there we have the concept of key shares. So you always need several keys to unlock Walt. So no admin should have all the keys. So at least you should need two or three administrators so that you can initially open the Walt for operation. So that's another security like for example if you wanted to launch a bad example is a Tom bomb, then you also need several persons to initiate that launch. So that's kind of the same approach here. So it's demo time. I want to show some smaller. So as I've mentioned Walt is just a simple executable. You can download it from Walt project. So if you want to start Walt, it's quite simple. So there's also a development mode which I'm already also using for the demo today. It's a bit shorter. You don't have to do all that key share unsealing for that. So that's a bit simpler mode for that. So you just start Walt with the dev command. Then you have Walt in place. So what Walt gives you is... So in the dev development mode it just generates one unsealed key and it's automatically unsealed already. And you get a root token for authentication. So that root token will be important for us to authenticate actually to Walt. Then you have to give information to the Walt client mode where the Walt server has been started. And then you can just operate with Walt or just get the status of the Walt. So it's not sealed. We have one key share for example and now you have to authenticate to Walt. So in fact that that token authentication is also only suitable for demo purposes. So for serious production you should use AVS API or LDAP or something more serious. What I want to do now is create some a bit simpler token that I can remember. I give it just a name so that's also a token I can authenticate because I've pre-configured my demo applications that I have for that token. So that's a bit simpler. So now Walt is operational. You can also look what is inside Walt already. So Walt works with some mounts of backends as I mentioned. So we have two backends now. We have the copy hole and the secret backends. The system backend is just for internal stuff of Walt. So the secret is the key value store you have. The secret key value store operates with that authorization stuff with ACL. So depending on the user you cannot access all trees of the Walt. And the copy hole is much more simpler. So the copy hole is just bound to the token you are authenticating. So there's no ACL with that. You can just store some token. Everybody who has that token can read that token again. So just mounting another backend is quite easy. So for example for encryption as a service you need that transit backend. You just mount it and then you have a new path for just accessing also that encryption as a service which my next demo application will be using. So now with that in place we are all ready to go for the next step. The next step would be to use it actually with spring. So there are in fact two projects of spring. So you can use it without cloud config server actually with just using the spring Walt project. Or you can use it with the cloud config server. So the initial demo will show how it is used with spring Walt. Spring Walt just provides you a Walt template. So those that are familiar already with spring know the gdbc template or two templates stuff like that. Now you have a new template called Walt template. So you can do most of the operations with the Walt template against the Walt. And you also have abstract Walt configuration that configures the connection to the Walt for you in spring. So we have also some demo for that. So for that demo I used that encryption as a service stuff of Walt. As you can see here this is the encrypt sensible data is just encrypting two attributes of that person like a credit card number and a social security number. I'm using Walt so you get that Walt operations from the Walt template. And then you can just call the opt for transit. You have to use a key name which I'm creating on starting the application automatically. And then you encrypt it without actually knowing the key. So it's just a symbolic name to reference the key of Walt inside. Then the other part is to decrypt again that stuff and I'm just calling it in the corresponding operations like for example to find all methods. I just decrypt on the fly all the sensible data to show it to the user on the UI. And also in saving I'm encrypting that stuff. So in starting the life demos are always a bit dangerous as we learn the keynote. So I just call a rest API that I've put above that service just decrypting the numbers. As you can see it's automatically decrypted again. I also have some other API that use the encrypted version of that stuff. As you can see now you see the encrypted values as you directly get from the database. So Walt puts in some namespace in front of that to know with which version of the API Walt encrypted that. So he knows which version to decrypt it again. Also I'm using some in memory database for that stuff. So you can also see that it's really encrypted there. As you can see we have the credit card number encrypted and also that social security number encrypted and I just decrypted it on the fly using the Walt as being Walt project. So that's the first stage to use encryption as a service in your application. So there's no, you can use it very easily so you can encrypt all that sensible data, sensitive data you have in your applications. And I think most of our applications nowadays have some sensitive data that are due to data privacy stuff. So that was the encryption as a service. You can also use spring cloud config. There are two types you can use it. You can use spring cloud config directly. So if you use spring cloud config directly, spring cloud Walt directly as I name it. Then you directly have some kind of config server that points to a Walt server. And you can just encrypt all your properties out of the box with Walt. And all your application properties are automatically mapped into that secret key value store for you. So it's mapped automatically in your application namespace. So if you call your application, for example application one, then it's stored into secret slash application one namespace automatically for you. So you can also rotate your database credential with Walt that way. So you just have to give that Walt configuration the name of your spring data source property which is that preconfigured one of spring boot. And then it automatically puts in the decrypted value when running the application. So it's something similar to the Grad Hub. And there's a second approach to use Walt with spring config server. With that you have the possibility to still use your not sensitive data in a Git repository. But additionally use your sensitive data to be put in the Walt. So you can choose which property goes into Walt, which property goes into the Git repository. What you have to configure for that is just activate a second profile, spring profile just to the existing Git one which is the default so far. You just have to activate the Walt profile in addition and then you get also support for Walt. Then you have to configure the addresses for the Walt server and you're good to go. That's the next one. I also have some small demo for that. First I have to stop the old one here. So I have a spring cloud config server and a spring cloud config client prepared for that. Hopefully that works as well. So now I should have, yes. So I also have some small rest client for displaying my properties. So at the moment I only have that not sensitive property stored in my Git repository. So that Git repository is shown here. On GitHub I have just a small Git repository with just that property inside that is read by the config server and returned to my client. The second one is not returned so far because I did not have stored it in Walt already. So it's not inside Walt. But we can change that quite quickly. If we just write that into that namespace involved of my application which is called config client in that case. How was it named? I'll just name it test for example. So if I refresh it's not displayed so far. If you use the spring cloud config server you know that you can have an automatic refresh. If you post to some special address. I just post to that local host 8080 refresh endpoint. And then it should automatically be refreshed without restarting the server. That's always the thing with the should always write it the correct way then it should work. You have to refresh again. I think it's late today. Finally I got it right. So as you can see it now decrypted automatically from the vault in spring cloud config server. So you can have both worlds into one. You can have the non-sensitive data in the git repositories and store the sensitive data in Walt by using the same spring cloud config server. The last slide I wanted to show was that you can also have it inside cloud foundry with the vault stuff. There's a vault service broker official one by hashy corp you can use and there's also a new project spring cloud vault connector. That does that auto configuration with spring boot stuff. I did not bring a demo because that's just in milestone status and I have expected it to be finished this week. But the spring guys are a bit late this week. So spring boot has some delays came out just today I think. And also that spring vault stuff was a bit delayed. So unfortunately I could not show a real demo of that stuff. So we are at the end of the session. Some question for the spring cloud config server or for your own application that wants to use a wall template. In a real world scenario would you have to give some token so that the vault server knows which ACL to apply. Yes you have to give a token to authenticate your application to Walt. Where is this token then stored? That token is stored in the bootstrap. But as I mentioned before just giving a token is a bad example for doing it in production. There are several other ways to authenticate with Walt. There's a pretty good documentation that documents all that lots of authentication possibilities. You have mutual TLS you have AWS possibilities to authenticate. So there's no need to put the clear text token inside your property. With spring five and web flux on the doorstep. So encryption and decryption and transition is a blocking operation. Is there also plans to have a reactive driver for the world? I think so because spring security also is just in the way implementing reactive support for all that security stuff. So I think according to that also spring vault will have some in place. They're also developing currently the spring vault two versions which are in milestone three. So it's quite early stage so I cannot say how far they are with reactive stuff. Thanks. Oh the last row. So I have used spring cloud config server a lot recently and a lot of the encryption and decryption of the properties can be done out of the box using spring cloud config server itself. If you have a symmetric or symmetric encryption you can do that with the config server itself and it can do properties encryption and decryption on the fly. So I'm just failing to bit understand where should I use vault in this case because if you know there are encrypt and decrypt URIs available out of the box from config server. Yes. If you provide the asymmetric and symmetric keys within the server you could make sure if the encryption or decryption would be handled by the server or by the client itself. So I just want to know why should I go for vault and in which particular case then I would have to go because right now the config server solves most of the problems. That's a good question. The main advantage of using vaults with spring cloud config is that you with spring cloud config you have also to administer your keys for encryption decryption. So then you have the next problem with chicken egg problem you have to put the key somewhere in clear text. You also have to decrypt that key again. The advantage of vault is that it never exports some kind of key so you never get hand on the encryption key. And you have the possibility to authenticate with several methods and you also have the possibility to have an audit log and have ACL. All that you don't have with the spring config server out of the box so you have more control. So it's a bit more secure than the spring cloud config server. So if you want to to hide mostly 100 percent secure then you have to use hardware modules for security but they are quite expensive sometimes. Thank you. One last question then we run out of time. You were talking about this in the context of GDPR but there's more to GDPR than just protecting data. There's also storing the consent and the permission to do with a piece of data which also has to be stored in a protected way.  I'm not sure if I got your question right. Well there's more to GDPR than just encrypting the data. You're right. It's just only a small part small part that I just prefer to hear. And I wanted other bits of it will probably involve encryption like storing the consent that is given for the use of data and storing the purpose. Yes. So the first step is to do not start them at all. So that's the best approach to start at the least amount of data that is required. But that small amount of data that is required should be stored as secure as possible. Yes encrypted. So I wondered whether you were doing a higher level GDPR solution in addition to just covering the encryption side of it. There's lots of organizational stuff in addition to the technical stuff so far. But that rules in that protection regulation is also as always very unclear formulated as I name it. So privacy by design can be anything. Okay so if there are any further questions I round for by until the end of the day so thank you.


Present wishes. Present wishes indicate something that is contrary to fact. That is, wishes are something that is untrue but desired. For example, I wish that I had a sports car. The truth is, I don't have a sports car. I wish that I were a doctor. I'm really not a doctor. For present wishes, the past tense is used in the that clause because it indicates a situation that is only imagined. Sometimes the word that is omitted. She wishes she had a diamond ring. He wishes he were rich. To express possibility, can, and future intention, will, use the modals could and would, respectively. She wishes that she could sing. They wish that she would stop. When a B verb is required, the word were is used regardless of the subject. We wish you were here. I wish that I were taller.


Politico released a new article that is Infuriating because this article is about Bill Clinton and Tony Blair to Neoliberal goals that I wish would just go away forever don't want to hear anything about what they have to say But you know this article stood out to me because they're going to very Patronizing Lee and condescending Lee offer advice to leftists in the UK and America because obviously we failed Corbett's movement failed Bernie's movement failed We don't have power we're out of power so from two individuals to former leaders who had power They're gonna tell us lefties what we need to do to stop losing as John F. Harris writes Bill Clinton and Tony Blair no longer have power, but they still have advice They perceive plenty of people in need of it The needy include progressives in the United Kingdom where the Labor Party has not had power in a long while and The United States where the Democratic Party has power for now But looks likely to lose lots of it in midterm elections this fall Together they offered a fitness program of sorts for members of their own parties that they fear are getting badly out of shape Clinton urges progressives to rebuild atrophied muscles of persuasion I think one of the ways you win elections is by talking straight with people and giving them permission to vote against you He explains in the most recent edition of his podcast in other words Don't hector and moralize as though the merits of your position should be self-evident to any decent person Assume a position of modesty that argues if you really disagree with this then you will go out and take another choice But here's why I think it's better for you Blair urges progressives to rebuild atrophied muscles of self-discipline for much of the left of Blair said on Clinton's program It's not clear that their main goal is really to win power or wield it It's primary purpose is to make itself feel good about itself, right to convince itself that it's principled, right? But that is in the end something that leads you to self-indulgence unless progressives commit to reclaiming the center in culture wars Blair added they'll remain vulnerable to some loose remark by someone being exploited by the right and will be hammered Day in and day out. That's just not competent politics. Okay So when it comes to Bill Clinton's advice, it's hollow and vapid because progressives have already won I can't speak for the UK, but here in the United States. We've already persuaded Americans Most of them support Medicare for all tuition free public colleges and universities $15 an hour minimum wage Student debt cancellation.  I mean just watch this 2018 clip from C-SPAN where there's a little bit of a message at the end That Bill Clinton had for Tom Perez when he became the new DNC chair in 2017 The DNC is unpopular with its own base There half of the Democratic Party or roughly half the Democratic Party felt like the DNC was unfairly tipping the scales in the last Presidential election trying to get Hillary Clinton nominated trying to hurt Bernie Sanders So you start with that bad blood and really there's just been a clash between these two sides that has resumed the hostilities that had Been put aside at the Democratic Convention in 2016 resumed the minute that Donald Trump was elected this huge battle for the soul of the Democratic Party between the Clinton type folks and the Sanders folks and Tom Perez is in the middle of that and he's gotten very explicit instructions from President Clinton as we write in the in the paperback extension of the original book He's gotten instructions for Bill Clinton not to let the party go to the Bernie Sanders folks Interesting so the DNC uses its institutional advantages to crush progressives and then Bill Clinton says You should just persuade people better How do we persuade people specifically politicians in power when they're bought and paid for by the industries who we want to go after? How do you convince a corporate Democrat? That Medicare for all is the way to go when they've been bought and paid for by the health insurance industry back in 2019 there was a Vox article that explained how the health insurance industry was betting on Joe Biden as their savior because Bernie Sanders Was gaining too much momentum and he wanted Medicare for all how do you compete with this much money now as vapid as Bill Clinton's So-called advice was Tony Blair was much more patronizing and sure It's true that you could find some lefties on Twitter who you know They try to purify themselves into oblivion and say well, I'm the real leftist You're not lefty enough, but I mean that's really a small minority of even the online left I think that most lefties don't really care about that they want to Build coalitions. They want to make sure that they expand the number of people who support them But really if you read the subtext there what Tony Blair is saying especially when he talks about how you know The left is getting clowned on because of culture war issues. He's basically saying you should become terfs I mean, he's from Turf Island. So he wants you to abandon trans people Just ignore LGBTQ plus issues basically become not even a class reductionist But just appeal to the right more and that's how you win But yet he says this while also we learned that the Labor Party was trying to crush People who supported Jeremy Corbyn when Jeremy Corbyn was party leader We learned that internally they're trying to sabotage him at every step of the way So it's just it's astonishing to me that you have these former leaders who they try to crush progressives And then they pretend as if you know, oh, well You just haven't persuaded them enough and you're not marketing yourself enough Meanwhile, they work against progressives at the behest of conservatives and really this whole Radical centrism that they're proposing is why we're in this current state, right? Let me remind you that Bill Clinton Decided to bring up third-way politics, which means Democrats embraced neoliberalism now Neoliberalism was basically a Republican thing mostly, right? There were some neoliberal Democrats before the the Clinton era, but Ronald Reagan made free market politics Hyper capitalism neoliberalism so popular that the only way the Democrats felt that they could win elections again Was if they just appealed to the right now they marketed themselves as centrists But in actuality when they governed Bill Clinton, he just did what the right wing wanted He signed the defense of marriage act into law which banned gay marriages federally And that was the compromise because the right wanted a constitutional amendment to marriage equality to ban it to be clear And Clinton was like, well, what if we just ban it federally? Oh, well, what a great compromise throwing gay people under the bus He signed don't ask don't tell him to law. He signed welfare reform into law that Fucked over people who were poor my family at the time needed that and we were fucked over because of bill Clinton I remember my parents complaining about this new law and them hating bill Clinton at that point after previously supporting him Bill Clinton signed NAFTA into law. So this whole third-way politics Has led to the situation where neoliberalism is the default position of both parties where instead of offering public solutions To public problems. Well, we offer private solutions rather than just increasing funding for education Well, why don't we outsource that to corporations?  Okay, you're being too right wing And sure it is the case that labor Has shifted to the right over the years like the democratic party in some respects But the democratic party compared to the conservative party in canada australia New zealand the uk even I mean, they're kind of ideologically similar to them We don't really have a left-wing party in the united states And that's because tony blair and bill clinton crushed the left so they can gain power and They didn't govern from the center.  I should ask why haven't you turned yourself in yet for crimes against humanity?   They're both right-wingers more than they are centrists


Hello and welcome we're picking right off where we left in the last video again. This is a series check out the playlist there should be a link in the description of this video and We have so far created this little this little room with some start positions for our co-op game We created a little invitation in the wall there a little closet there and a little shelf here Let's go ahead and play with this a little bit more. Let's play with our textures a bit Actually, no, let's let's work with things. Let's add some things besides our players to this room So I'm going to tab to get out of our 3d preview mode and then tee on the keyboard to bring up things You can also go down to mode and choose things you have your list of things here and You can also go into different categories. So let's say I wanted to add a shotgun Super shotgun, which is double barrel shotgun. I come down to weapons here And it might be hard to tell the difference between the shotguns here But it's this one that says SGN 2 is the super shotgun So what I'm going to do to add that is I'm gonna come over here right now I have snap on so we'll snap to our grid I can also turn that off by hitting F to go to free mode But I'll go ahead and leave that on and I will hit spacebar and by default It's going to add the last thing you have selected since I didn't have anything selected We'll just add a little health bonus, but now that I've added that I can click on the shotgun here And it's add the shotgun. You have some other options over here It tells you the number everything has a type number and a description name And then it has the coordinates of where it's placed Angle, we're not going to worry about when it comes to the shotgun That's when it comes to enemies and players that's going to be an issue So now you're going to choose option flags So you have different things will it show up in deathmatch mode DM will it show up in co-op mode COOP and I don't know what SP stands for I should I'm sure if I thought about it. I can figure it out. Anyway, the main thing when I create levels because I'm I'm create I Want to have different difficulty levels So if you don't ever change this when it comes to doom you have obviously I believe it's five difficulty levels all the way up to nightmare mode and Those different levels affect the game in two different ways Obviously the heart of the game gets the quicker The bad guys are gonna get instead of seeing you think about it and shooting which it might do an easy mode and hard mode They're just gonna see you and shoot you they might also move a little bit faster But you could also have options on having things show up in certain modes So let's say I want to give you the shotgun here on this level if it's on easier medium But if you're on hard, I'm not giving you that shotgun just yet. I can uncheck that now This will only show up in easy and medium modes So it won't show up in like nightmare mode if I was to add another thing So I'm gonna come over here and hit spacebar to add this and now I'm gonna go to web or monsters And I have these different monsters. I can add in a shotgun guy here now see this way the arrow is pointing That's the way he's facing So if I want him looking in this corner I can do that and when the game starts he wouldn't see me because he's looking that way So he won't turn till I get in his view or make a sound for him to hear me and I do want him to show up in hard mode now that I have him selected. I can come over here and hit spacebar It's gonna add an identical Monster so the same shotgun guys now this guy is going to see me as soon as the level loads This guy is gonna see me I can add another one over here and I can point him so he sees me But you know what I don't want this too hard on easy mode So I'll uncheck that so in easy mode this guy won't show up. I can add another guy over here And point in this way and say he's only gonna show up in hard mode Now if I control S and control T to start this it's gonna start it I believe whatever the medium mode is so when I start this with control T to test it I should not see This guy I should see the other three. I believe let's see So I see that guy and these two guys behind me that are already shooting me I can get my shotgun here boom and He heard me now and I can shoot him Now if I was to go here and start a new game You can see there's only two guys because I picked easy and if I was to come in here and pick nightmare mode Yes All four of them are here and they are shooting me already and I don't have that shotgun because I'm in the harder mode So that's what these options are for over here, and I have no clue. I'm assuming this is short for ambush I need to look up what that means. I've never used it So and you can have you can type in an angle here, but for the most part you're gonna use these arrows I want this guy either facing this way this way this way this way this way this way this way I mean, I can't think of any time where you want in between those two, but you can I guess manually type in a number here So that's adding things there's other options again We can go in here and I can go up here to all and scroll through all of these So I can go here and I can change that guy to a barrel I didn't mean to change into a barrel if you have things like it's like if I was to select all of these and Click click barrel now. They're all barrels And if I click this now, they're all Not Hell Knights, but Baron of Hells Let's go ahead and change them all back to shotgun guys Although they are saving their difficulty levels so certain things will show up in other cases So I hit spacebar again. It's gonna add the last one that I had selected Let's go ahead and say all for this and I'm going to change him to a barrel and Now I can add three barrels around that guy and again I'm snapping to the grid right now if I want to put another barrel in between this guy I'm gonna hit five on my number pad to lower make a smaller grid here And now I can add another one here or if I hit F to turn off freeze mode I can just put them wherever I want and Let's go ahead. I'm gonna click right here on top of player one and I'm gonna go to weapons I'm gonna double barrel shotgun now when I start this level I'm gonna be standing on that double barrel shotgun and I'm gonna get it right away So I'm gonna hit control S control T and right away Soon as I move a little bit Boom that guy's dead And of course I picked up his shotgun boom Perfect and again another thing that you might want to think about is adding things like health packs So I'm spacebar over here, and I come up here to Health and armor and when you spacebar make sure that you have these flags checked because you might have last select something it's only on hard only a difficulty hard difficulty and You might miss that I've done that before where I add a bunch of things and I realized I had it turned off for a thing that I didn't want so we're gonna have this health pack here and You know what I have that health pack there But I want to give on hard. I'm not gonna give you this large health pack I'm gonna just gonna hit spacebar and change that to this smaller health pack and Give that on hard. So on easy and medium. You're gonna get the big health pack there and on hard You're gonna get the small so again if I was to control S to save it control T to test it. I Can fight these guys. Oh, I should get my double barrel shotgun out.   Yes let's pick this up and They killed me before I was ready to go boom, but you can see it's a smaller health pack now Which only gives me I think 10 health points So We've added some items other type of items that you might want to add I can again hit spacebar here You know different categories. You can go to bonus things So like pack here. I can also add decor so like I can come over here Let's turn snap back on so I'm gonna hit f to turn off free mode I'm gonna snap to the grid gonna put that there and you have things like decor which can be You know, I can put a little Podium here or if we're outside I can put a tree I guess I could put a tree inside a little podium with a beating heart on it And then there's also gore if you want to add some gore so I can let's just put Oh by the way, I'm dragging this map around by clicking down my mouse wheel Which I usually call center clicking so I'm gonna add this little podium here And I am going to add in you know a dead monster there or a guy on a spike And now notice I did what I was talking about earlier both with this guy and this podium I'm gonna select both those I only had them set to hard because that was the last item I had selected. Let's make sure we have those things show up on all difficulty levels control s control t and There is our guy we're going around on a spike And a little podium with our beating heart And that is how you add things to your level and give it different different difficulty levels different options for when they show up And again things like co-op mode or SP single-player mode That's what it is. So you can have things show up in single-player mode Which we're playing now, but if you only want them to show up in co-op mode You can do that. For example, maybe co-op mode Since this shotgun here is on me I'm gonna get it if I wanted to add a shot, you know three more for the other players I can do that where you may not want three of them showing up in co-op mode or in single-player mode and deathmatch mode You know again, you might want to have different elements in deathmatch mode You might not want to have any of the bad guys show up in deathmatch mode. Maybe you do Just things to think about. Anyway, thanks for watching again There's gonna be any other video check out the link in the description for the full playlist If you aren't already watching it and as always please visit filmsbychrist.com. That's Chris Decay There's a link in the description, and I hope that you have a great day


Every great organization must have an effective leader. The DAV is privileged to have the best of the best in National Adjutant, Mark Burgess. Since his appointment as National Adjutant in 2013, his dynamic leadership and commitment to the organization's ideals are continued, the direction to remain the premier and most capable and effective disabled veterans service organization. Ladies and gentlemen, please welcome our National Adjutant, Mark Burgess. Thank you, Teresa. Good morning. I'm pleased to come together with all of you at the greatest demonstration of strength in the realm of veterans advocacy. Our annual midwinter conference in the Commander's and Adjutants Association meeting. Your presence here is always one of the most important ways we can put a face on these issues and show lawmakers their actions affect real people, real veterans, and their families each and every day. That personalization is extremely powerful, and you've always carried that message to the Hill and your local communities with passion and with dedication. For that, DAV and your fellow veterans are profoundly grateful. If there's one thing I know about this crowd and about the base of DAV's membership, it's that we stand up for the rights and benefits we've earned when they're threatened. It's been extremely difficult to ignore the swell of interest surrounding veterans issues over the past three years. If you've watched the news, picked up a DAV magazine, or received an alert or newsletter for the national organization, you know we stand at a critical juncture when it comes to the future of our healthcare system. The 2014 access to care crisis and its aftermath highlighted the need for significant budget and policy reforms at the VA healthcare system. Many of you are aware the current veterans' choice program is set to expire this summer as the Secretary just indicated. We have a new president, a new Congress, and a new VA secretary. So the time for debating what's next for VA is over. We must move from talk to action. National Legislative Director Joy Eland will go over this issue in greater detail during the benefits protection and legislative workshop later today. She will also be going over DAV's other legislative priorities for your visits to the Hill on Tuesday and debuting a new video, DAV's communications team produced to help facilitate your conversations with lawmakers. I highly encourage everyone to attend in order to get up to speed and make the most of your time with your elected representatives. But here's the bottom line. I want everyone to remember this week, and when you go back home, we need to work together. If we don't speak up collectively, if we don't voice our opinions together on what's working and what isn't, others will not hesitate to make the decision for us, and we may not like the outcome. It's not enough to stand by and listen. Together, we must remain active in the conversation. Everyone here today has one thing in common. We've been at risk or have seen a brother or sister who fell through the cracks. One of the greatest horrors facing those who've been in battle is the fear of being left behind. This is the concern that unites and bonds us. It's the moral obligation that we feel in our hearts to fight injustice. We can probably all agree that we don't want to be left to fend for ourselves in the private sector that lacks the expertise to care for our unique needs, especially after what we sacrifice together to earn those benefits. Now, in addition to the issue of veterans' health care reform, you know we're bringing to Congress this week a few more agenda items of great importance. Women veterans, family caregiver and support services, appeals reform, and the VA budget for fiscal year 2018. In 2014, DAB's special report, Women Veterans, The Long Journey Home, Identified Gaps and Benefits and Services, across the federal landscape for female service members and veterans, and offered 27 specific recommendations regarding health care, transition services, disability compensation, employment, and housing. The report resulted in more than a dozen bills being introduced into the 114th Congress, one of the most significant being the Female Veterans Suicide Prevention Act, which was signed into law by President Obama last June. The passage and signing of this law was a step forward in addressing the unique transition needs of women veterans. This was clearly a victory, but there's still more work to be done. While VA has made notable progress in improving services for women, there are still a number of issues that need to be addressed. First and foremost, we must ensure all women veterans have access to high quality comprehensive health care services throughout the VA health care system. To do so, VA must have the resources to attract and retain qualified providers with expertise in women's health and meet the increasing demand for care. Identified issues surrounding privacy, safety, and environment of care standards for women veterans must be resolved. Our sisters in arms deserve our full support, and it's up to us together to ensure they are treated with dignity and respect and that their contributions in military service are recognized. Another inequity that must be addressed, as you know, concerns our nation's veteran caregivers. Studies show caregivers improve our veteran patient's health, reduce hospital re-admissions, and delay institutionalization, decreasing overall health care costs. However, by serving in this role, caregivers often make personal sacrifices in terms of their own health and well-being. A study from the National Alliance for Caregiving found the vast majority of caregivers for disabled veterans reported increased stress or anxiety and sleep deprivation. The report also shows declines in healthy behaviors of caregivers, such as exercising, eating habits, and keeping their own medical appointments. Over half of the caregivers in the study had to cut back their own work hours and almost half stopped working all together or took early retirement, resulting in financial hardship. While DAV was instrumental in ensuring caregivers receive support services, like caregiver education and training, respite care, mental health services, and a monthly stipend through the passage of the Caregivers and Veterans Omnibus Health Services Act of 2010, Congress limited the law's applicability to veterans injured owner after September 11th 2001 due to cost concerns. This means countless caregivers do not receive these services due to an arbitrary date. Last Congress, DAV continued working on this issue. While our efforts resulted in measurable progress to expand the eligibility for comprehensive caregiver support to veterans of all eras, legislation was not enacted to correct this inequity. Together, we will renew our efforts in the 115th Congress to ensure veterans of all eras and their caregivers have access to these extremely important services. In March, 2013, the claims backlog at the Veterans Benefits Administration peaked at 611,000 claims. Today, it stands close to 96,000. That's a significant transformation, but we won't rest until that number moves towards zero. Appeals, on the other hand, are a different story. Today, there are over 450,000 appeals pending. Roughly 370,000 of those are within VBA's jurisdiction, while the other 80,000 are awaiting action at the Board of Veterans' Appeals. On average, a single appeal can take upward of three years or more to be completed. Currently, veterans who choose to appeal VBA decisions must follow a process that begins at the local VA regional office where most of the delays take place. Further resolution can be pursued before the Board when a local VA regional office decision remains unfavorable. However, the Board also faces serious processing delays due to its workload and resource mismatch. DAV believes the 115th Congress must quickly enact legislation to create a new framework that would reform the way VA processes claims and appeals. Within this framework, claimants should have the opportunity to select one of several options, including supplemental filings, seeking higher level review, and filing formal appeals directly to the Board. Congress must also ensure any legislative reforms enacted preserve effective dates, as well as current due process and duty to assist rights. Adequate resources must also be provided to address the backlog of appeals with regular oversight to monitor and measure VA's progress so these reforms achieve their intended purpose. Veterans should not face barriers in accessing their earned care and benefits due to lengthy and unnecessary delays. DAV will continue focusing on this issue in 2017 and together we will press Congress to enact legislation to reform the appeals process. Because of decisions made in the 114th Congress, VA began the current fiscal year with a number of congressional mandates without the required funds to implement them. This left VA's advanced funding for fiscal year 2018 woefully inadequate. When visiting the Hill on Tuesday, I ask you all to bring the 30th edition of the independent budget to the attention of your elected representatives. DAV and two of our fellow VSO partners, the VFW and PVA, released the collaborative report last month outlining legislative and policy issues for the veterans community that must be addressed in 115th Congress. I've already discussed four of our critical issues facing the new Congress. The need to strengthen reform and sustain the VA healthcare system, reforming the claims and appeals process, improving caregiver assistance, and ensuring that VA provides high quality, effective programs and services to meet the unique needs of women veterans. It's imperative though, that while you're in your meetings, you also mentioned the remaining critical issues from the independent budget. This includes resolving budget constraints that negatively impact veterans programs and realigning and modernizing VA's capital infrastructure. I cannot underscore these points enough as these financial pitfalls are often what keeps Congress from enacting legislation. Together, we can ensure VA receives a sufficient budget to meet the needs of ill and injured veterans, their families and survivors. One more point I'd like to address is that of our upcoming 100th anniversary in 2020. While we are currently working on a number of ways to mark this tremendous occasion, we would like to ask for your help here at Midwinter Conference in achieving just one piece of that plan. We're going to undertake a letter writing campaign requesting the Citizen Stamp Advisory Committee issue a commemorative stamp in honor of DAV's centennial anniversary. The committee receives thousands of requests every year, so we need your help to call their attention to the need to make this happen. Outside the room here, there'll be a table set up for you to write your letter. We have a pre-written introduction and salutation. We just need you to fill in your own explanation of what DAV means to you as a disabled veteran and why it's so important to mark this date in our history, and then we'll be happy to mail the letter for you. I strongly urge everyone to participate in this campaign. If all of us here at Midwinter Conference submits a letter, we will hopefully make a notable impression on the committee and get one step closer to making the DAV 100th anniversary stamp a reality. I cannot thank you enough for the support you've always readily shown when our commander calls on you and the continued dedication both to our organization and to veterans. Midwinter would simply not be what it is without all of you in this room, and we could not be a strong organization without your leadership and without your enthusiasm. I appreciate the opportunity to speak to you this morning and, of course, for allowing me to work alongside you. No doubt we are facing a busy and challenging year, but I've seen the tremendous strides you've put forth in years past. 2017 has the potential to be one of the most decisive, pivotal years in our history and one of the most important for the future of veterans' healthcare. You're all doing critical work. There's something unique about our community that should remind us of the importance and value of our mission. Nearly everyone in this room has personally faced or intimately been involved in a situation where we or someone we love faced daunting odds for mere survival. Whether it was a comrade on the battlefield or a conversation with a doctor that involved words like malignant or terminal, our community knows the value of time. The most inspiring thing to me about DAV members is the passion that I see throughout our ranks every single day. Volunteering and standing up for your fellow veterans, family members, and survivors is a particularly sincere commitment when you know that time is our most valuable commodity. It's one thing we spend without ever knowing how much of it that we have by making the most of your time here this week, you honor the service and sacrifices made by veterans and their families past and present.  Before I close, I wanted to share some very sad news. We learned yesterday that army veteran and battalion death march survivor Lester Tenney died Friday at age 96. He was a proud DAV member and his story of survival and eventual renewal reminds us of the very best qualities inherent among members of our unique community, the community of disabled American veterans. I want to leave you with a brief conversation we had with him a couple of years ago to remind us of the tenacity within each of us and the spirit of renewal we represent. He also reminds us of the valuable work we are here to accomplish and the legacy of which we've been entrusted as inheritors and stewards. It was called a death march not because of how many died. Of the 12,000 Americans, only about 1700 lived to come home, but they called it a death march because of the way they died. If you stopped on the road, you were killed.   If you just couldn't take another step, they killed you. And how did they kill you?  They did not give us water. They gave us no food. The temperature was about 108 degrees. The Americans that were captured, a good 80% of them had malaria. Another 50% had dysentery. So we were gunshot wounds, malaria, dysentery, and we had to walk this distance that they wanted us to. Under these conditions, it was unbearable. I think that what kept me going is about the second day. I made the decision that the only way I was gonna survive was if I started to set goals for myself. And I would walk and I would see a herd of caribou in the distance. And I would say to myself, I must get to that herd of caribou. I didn't know where they were, I didn't know how far they were, I didn't know how many days it was gonna take me or how many hours, but I made every effort to get to that herd of caribou. No matter what happened, the Japanese told me to smile, I did, they told me to sit, I sat, they told me to march, I marched. They hit me, it was okay. They broke my nose, they broke my, knocked my teeth out, they split my head open, but I still had to go to reach those herd of caribou. Then when I got to the herd of caribou, then I'd find another goal, and another goal, and another goal, every day was another goal. From that day on, I lived my whole life that way. And those people who hold on to a grudge, I think, have a very different philosophy of life, and that's how they live. By not holding on to a grudge, by being able to roll with the punch, I think it's a lot easier to live. My life is a lot happier, because I've learned how to adjust to adversities and how to deal with it. The Disabled American Veterans, I'm a lifetime member. I believe that they are an organization that spells out clearly what their goals are. You know, Disabled American Veterans doesn't mean that you have to be disabled with the loss of a limb, you could be disabled other ways. And I do believe that every man that came back from baton are disabled in some manner, either mentally, emotionally, through physical attributes. And I think we're all a member of the DAV in one way or the other. If we're not, if we're not, we certainly should be. But the DAV was very kind to me in many ways, and I'm very appreciative of that. May he rest in peace. Thank you from the bottom of my heart for all that you do. May God bless you, God bless America, and may we make the most out of this week. Thank you.


The Manage of Women Affairs in Collaboration with the Fischler Foundation and Support from the United Nations Population Fund UNFPA has rehabilitated and empowered no fewer than 50 Fischler survivors in the state. Their survivors were also given starter parks, including sewing machines, grinding machines and cash during a ceremony to mark the end of their full-moon intensive training in various locations. Speaking at the ceremony in Yola, wife of the state governor, Lami Finteri, thanked all development partners for the wonderful contributions in addressing the plight of the survivors. Now Director Fischler Foundation is appreciated and supported by the government and matched for more. According to him, during the previous exercise, the Foundation intended to provide free surgery for 50 and were provided with only 30 bed spaces in which over 70 patients came to access the service. Aisha Omar, who spoke on behalf of the beneficiaries, thanked and appreciated the UNFPA and other partners for the free surgery, fitting, transport, training and the provision of the starter parks. She promised to use the skills required and the starter parks to empower themselves and the families. I would like to give appreciation to the Fischler Foundation and Junior for committing free Fischler Republic and people that offer free treatments because of Fischler women and rehabilitation in the non-state. However, I would like to extend my full gratitude to his ex-SNS pride, who will remember the moment of 50 years. The reason of no mind-boggling, no need to talk about this to love, the deal of love and either the U.S. that's where the baby then came into the U.S. But sometimes, also, through the eyes, through the mediation of urine or feces, and this comes as a result of more prolonged labor, complicated labor, like this prolonged mediation, the mediation that goes through obstructive labor. And part of our, as I made mention, part of our activities is to ensure they are integrated work of society. So that is why we're here. We're going to choose skills that can succeed in their affected communities. We train them intensively for a complete full month. Now you can see they are receiving the item. Those that learn tailoring, they are seeing a sewing machine as we can see. Those who prepare to get oil extraction, they have a grandeur machine. Those who prepare to do the heat treatment, they have cash of money to buy some items there.