Okay, new day, new project, time to write some code. I think I'm gonna connect my local tooling to my development cluster, and then I can get started. I'm gonna do kubectl apply my usual tooling. Let's see what, oh, wait, what? Node part, part something, let me do this by hand. Fail to create node parts, the parts are already allocated. Okay, so someone's playing with my cluster parts. I told everyone 31337, that's me, don't mess around with it. Gosh darn it, okay, who did this? Let's see who's around. Okay, there's a lot of people here. What are they doing? I don't know, I can't look at it. Can I look at them one by one? No, I can't. Okay, so maybe there's some security in place here, and I can't see what everyone else is doing. Okay, you know what, I'm not calling the security people, they are not fun, I'll do this on my own. Let me check something out here. I remember seeing something funny in the onboarding documents. So I was looking around the docs, and I found this dev database controller. So the controller creates new database instances, pre-populated with fake data for using dev environments. It hangs often. You can exact into the pod, and if it's really wedged, you can restart the process by deleting and recreating the pod. And someone said something here about fixing RBAC privileges. Okay, so we're using RBAC, and RBAC is that thing where I have some permissions, there's some things I can do in the cluster, and there's some things I can't. Apparently I can't look at what my friends are doing to figure out who's messing with my stuff, but if they set RBAC incorrectly, which is very easy to do, because it's convenient to set it incorrectly, then maybe I can use that cascading effect where I am allowed to do some things, I'm not allowed to do others, but through the things I am allowed to do, I can go around and manage to do the things I'm not allowed to do just in a very roundabout way. So let's try that. So we're looking at a Dev database controller. Let's see if we can find that. What can I do normally? Let's see. Cube, Cuddle, Off, Can I? So I can do whatever I want in my own namespace, but when I try to look at someone else's, so let's see what Catherine's doing here. When I try to look at someone else's namespace, the stuff that I can do is very little, almost nothing. Let's check something out. So let's look at what's going on again, and I have this Dev environment controller. I should be able to create pods in it. Yeah, the documentation was right. So for pods, I get a star, which means I can do whatever I want with pods, and I can EXAC into pods as well. So let's try and make use of that and see what happens. Let's see, let me do Cube, Cuddle, Get Pods, and here's one. So let's try and execute something in here. So Cube, Cuddle, Execute on that namespace in this pod, and give me a shell. Okay, I got a shell inside the controller, and that means that I can probably now make use of whatever permissions the controller has. So do I have tooling here? Yes, I do. Thank you. When you leave tooling around, attackers become very happy, and speaking of attackers. So what can I do? Let's see what I can do from within this controller. Let's say again, what can I do? Would you look at that? Stars, stars, more stars. Like a weird philosophy everyone said, we're made of stars, but your RBAC shouldn't be. And oh boy, they were right. So I can do whatever I want here, which means I can probably see what my friends are doing. Yeah, I can see what everyone's doing now. So let me filter through this. A lot of people are doing a lot of things. Let's see who's using my gosh darn part. Ingress pointing here, and that's Joey. Oh, Joey, I told you to stay out of my turf, Joey. Yeah, you're getting grounded. That's enough, Joey. So Cube, Cuddle, Edit on Joey's. And here we're going to replace Joey using my port, with Joey using 420, because I know the kind of stuff Joey likes to do. So get out of here, Joey. There you go. And now I can probably get out of here and run my stuff finally. And there you go, now everything works. And now I tilt up, and my application's working. So now I can go write some code and be productive, and Joey's going to have a bad surprise on Monday, and that's his own thought. Well, here's what we might want to do. First, we want to become a cluster admin. This could happen by either compromising the cluster and becoming a cluster admin, or maybe you are a malicious admin. Hello, this is Tabitha DevSecOps enforcement. Joey, Joey, Joey, calm down. Calm down, I'm going to help you, but you've got to explain it to me. You've got to tell me calmly what's going on. Okay, so you can't get into your Dev environment. Well, let me have a look. Okay, so I'm going to look at your service first, because that's always been a problem. Oh, Joey, of course it's not going to work for you on port 31337, it says here you changed it to 3420. Joey, is this some kind of joke? Oh, you didn't change it? Oh, let me check on the Devend controller. Maybe something bad happened to it. Devend controller looks okay. Joey, I'm going to put you on hold for a moment while I do some more investigation of this. I'll be right back. If this was changed, and Joey says he didn't change it, I'm going to have to go and look in our log management system to see if the API server audit logs can tell me what's going on. Okay, so I'm going to have to first look for our Kubernetes audit logs, and let's do in the namespace Joseph Pardella. Okay, there's a lot of logs here, so let's look at what has been done inside his namespace. Okay, patch, that's going to be the ones where things were edited. Let's have a look at these. Here's one that says Devend controller recently modified Joey's Ingress. Okay, that's interesting. Why would the Devend controller have done that inappropriately? Let's see whether anything strange has gone on in the Devend controller. Okay, so here's some typical kinds of changes. Let's see who's doing them by looking at the username. A lot of service accounts, and then Ellen. What has Ellen done in the Devend controller recently? Okay, so it looks like for Dev maintenance, Ellen was allowed to execute a shell in the Devend controller. And then right afterward, the Devend controller service account modified Joey's service. Yeah, that's suspicious. Girl, I think you just got yourself in trouble. Okay, better get back to Joey and make this right for him. Hey, Joseph, thank you so much for holding. I've done some investigation and I see a simple misconfiguration. I am gonna fix that for you and then you should be well on your way. Yeah, hey, what's up? That's exactly what I was expecting. What up, yeah. Hello, Ellen. It's David, you'll recall I'm director of DevSecOps Enforcement. I have some questions I need to ask you as part of an ongoing security investigation. Do you have a moment for that? Yeah, I mean, I'm in the middle of a game, but yeah, sure, what's up? Great, thank you so much for taking the time to meet with me here. What can you tell me about Kubernetes API server audit logs? Really, you need to ask me that? Yeah, yeah, tell me about it, Ellen. Sure, yeah, so all that logs is like when you do stuff to the API server, it logs that stuff. Yeah, all of the activities taken on the API server. So like, do you know how one might enable API server audit logs? I think it's on by default on the managed stuff, but you see out there, if you're rolling around, you need to enable it by yourself, but I don't think we are. I mean, once it's enabled, like, should you just leave the logs sitting around on the server? Lots of friends of mine would say so, but I would advise you to put them somewhere. Yeah, like where could we send them? If you're doing elastic stuff, log stash, I think here we use Datadog, so you don't keep them in the cluster because that would be hard. Shift them in the Datadog, yeah, that's right. So like, what do you think I can see if I go into Datadog and I view our API server audit logs? Sure, yeah, you can see the when resources are created or modified or deleted. That activity? Yeah, like what kind of resources are we talking about here? Oh, you know, stuff like pods, deployments, jobs. Node ports? Yeah, yeah, yeah, node ports. So like, do you have any idea where I may have gotten these logs that show you modifying Joey Bardella's dev environment to point at port 3420? Do you think you'd like to take a moment to explain yourself?   You're supposed to be a professional and this ain't it. You gotta get it together. You know, if security people would listen to developers, maybe I would be writing code the past hour instead of browsing Twitter. Ah, what is this? Look it up, baby. Yeah, that was a fun one. I wonder what is this exploit that they're talking about here? CVE 11253, even rhymes, that's cute. So apparently the CVE is improper input validation on some versions of Kubernetes and causes the API server to consume excessive CPU or memory, possibly crashing. Okay, so this is a DOS. And you know, if the development cluster would be out of commission for a day, I would get the rest of the day off. Are we vulnerable to this? Cubicuttle version, we are 16.1. And what we have here is 16.2, yeah. You should be vulnerable. Where's the POC? All right, this is cool. Apparently we're dealing with a Kubernetes vulnerability here and they don't come around very often but when they do, they can ruin your day. And if we're vulnerable to this, it means the security people in our team haven't been doing their job because they should be signed up to the mailing list, the security, getting the security announcements. They should have patching and upgrading and all that stuff as part of our software lifecycle management. And if they're not doing that, then I suppose they're gonna need to learn their lesson. Yeah, they are. Okay, and we have this exploit set up. Well, I think it's time to sending a billion hunts using a flock of 400 flying geese. And is this working? Our server does not reply any more.  DevSecOps enforcement, this is temp. Can you please hold? DevSecOps enforcement, this is temp. Can you please hold? Oh my gosh, what is happening? Thank you so much for that great demo, Ms. Libby. Having a principal engineer like you on the staff is a huge inspiration to the entire rest of the engineering division. Now, for the last part of our monthly all-hands, I'm going to give an update about security initiatives. Let's see, how do I share my? Can everybody see my screen? Unfortunately. So, all right. Today, I need to talk to you because of some activities of a questionable nature that have been happening in our environment. We're going to need to enact certain new security policies company-wide. Ms. Seville, why just now are you saying, how long have we been without security in the company? These are meant to protect you from each other and in some cases, to protect the company from your childishness. And what were you doing the past couple years here? We're going to talk about three things today. Admission control, network policy, and container vulnerability scanning in our CI pipeline. We'll start with admission control. So admission control is what you need to be able to enforce policy about what settings are allowed to be put on a pod, such as privileged or host namespaces. So we're going to be deploying new admission control policies that are in line with the Kubernetes project pod security standards document. The one that's about to be deprecated, right? Thank you, Ellen. No, the pod security standards document describes best practices for running pods in Kubernetes. I think you're thinking of pod security policy, which is a feature that was deprecated in 1.21, but will be replaced soon with a new admission controller. And that's irrelevant to us anyway, because we're going to be using gatekeeper. But thank you for your concern. So getting back to the presentation, the importance of admission control is because our back works at the level of Kubernetes objects, like can you read or write this pod or service? But it doesn't have any opinion at all about whether a pod is a harmless web server or a privileged command shell that exposes all of the node's data. So to enable that kind of control, we need to have admission controller. And admission control then gives the API server opinions about what should be allowed and what shouldn't. Shouldn't you be doing that? Yes, and I'm enforcing my opinions using an admission controller. Thank you, Ellen. So this will help us to not develop using dangerous pod features that could help an attacker if they got shipped to prod. And it will help to isolate our dev environments from each other. The next thing that I'd like to share about is network policy. As those of you who are involved in our attempted proof of concept years ago, no, microsegmentation has been a dream of mine for years, but it was way too hard in our bare metal data center. So you know you love to dream? Yes. So in our Kubernetes environment, we already need to precisely define which services our services talk to for use by our service discovery system. So we're going to be adding. Can I get you to stop talking? I wish you'd stop talking to all of us, Ellen. As I was saying, our service discovery system will be integrated with the network policy engine. So most of the work of writing policies will be taken care of for you. And after you've added the last few touches, then Kubernetes will enforce what can talk to what within the cluster in order to reduce attack surface. The last thing that I'd like to share is that we're going to be rolling out container image vulnerability scanning as part of our CI pipeline. Now that we're Web 2.0 scale, our developers have been struggling to keep up with the over 12 containers that are deployed in production. So with this scanning, the scanner will run every time a new container is built by CI and it will send an email to the developer about any findings there. We're not going to be blocking deploys right now because of these results. This is only for your information. But if we find that these results are getting worse over time, there may need to be further follow up. So thank you all. I want to leave with one last bit of information or perhaps a warning for some of you. We will now carefully audit all logs, especially the Kubernetes API server audit logs in order to detect any malicious behavior or shenanigans that might be occurring. So thank you all so much for your time this afternoon. We will now carefully audit all logs.  I don't like working in a Panopticon and this is way too much of a dystopia. No one's auditing anything. I'm going to get in there and see what they're trying to do and if they're trying to make me uncomfortable, I'll just take some drastic measures. Now to do that, I'm going to need root access to the development environment server. And they talked about admission control but they didn't mention that it was deployed yet and if it's not deployed, it's not so hard to run a pod that gives me a root shell. So I'm going to try my favorite incantation here and let's see if it works. Let's go back to Duffy. This is such a classic and I love this forever. Is this going to work? No, it doesn't. Okay, what else can I do? What if I can mount a host path so that I can access stuff that's on the node from a pod? Would that work? Let's see, I have the script here. Let's try and run it and see if it gets true. So I'm going to apply and denied admission. Okay, so can I do something else? What if I can mount a pod onto the host network? Is that going to run? And to test this, all I need to do is run any old pod and it can be anything. It doesn't matter what it does. So long as I have this option here and yeah, it went through. This pod's probably going to crash but the point is the admission controller didn't catch it and if I have access to the host network, I can interact with the host and so far I don't know what that's going to get me but let's do some research. Aha, I found something. CV 2020 15257, container D 1.4, abstract UNIX domain socket. This will do just fine and there's even a nice write up here about ways to use this. So this is perfect. I'm going to set up my attack and then we're go. Okay, we're all set. This is going to be a two-stage attack. First, I need to set up a reverse shell so that when my exploit calls home, I can pick up the call and second, this is what I need to run. What this is going to do is I'm going to interact with the host network directly and because of this container D vulnerability, I don't have to talk to Kubernetes. I can tell container D itself to run whatever container I want. So this means I can run that host path container that Kubernetes wouldn't like me because even if Kubernetes security is set up 100% correctly, if I can exploit the vulnerability and something that Kubernetes is running on top of, I can bypass all of Kubernetes completely and then it doesn't matter. I'm in. So let's see if this works and it's running. Is this working? Yes, it phoned home. Now final stage. Did this work? Yes, I'm in. Okay, now let's see what those security folk are up to. Oh, right. I'm not using Docker, I'm using container D. This here is CTL PS. Cube API server, let's see what they're logging here. I'm gonna do CRICTL logs here and let's see what they got on me. Oh boy, they got everything. Look, the task host not stuff that I was running, it's all here. This will not stand, but wait a second. I think I didn't just see something strange. What is this? This isn't familiar and I don't like unfamiliar things. What is this pod? It's running on cube system. I don't remember seeing this on cube system before. Let's check out, let's look at the container. And oh boy, this, I don't know what this is, but it looks highly unusual. And what this is running is, wait, Natcat, no, no, no, no, no, no. I'm the one running Natcat, I'm the hacker here. Why would anyone else be running Natcat unless fascinating, a hacker. So what should I do? I mean, if there's another hacker here and they cause real trouble, I got a record. People are gonna try to pin it on me. So I think the only way forward for me is, I need to play Goody T-Shoes and at least get my re-rend out of the fire. Yeah, we need to call Tabby. You keep bothering me, what do you want now, Ellen? Help Tabitha, when I was a child, he speaks as a child, understood as a child, thought as a child when I became an adult. I put away childish things. Cute, but really, why are you interrupting me? We've been playing games where we're supposed to be on the same side, okay? Yeah, and? Are you familiar with an admission of controller on the cube system namespace, executing Natcat? I mean, no? Yeah. Why would that, why would that be that we should really start the security incident response procedure? Let me create the incident record and page, page of the forensics team for us. We can start filling out the forms together. I can take your initial report right now while we're on the call, what? Nothing, I'm impressed, okay. Okay, so here's the first question. All right, that's the last of them. Okay. Thank you so much for bringing this to our attention, Ellen. Sure. Maybe I was wrong about you.


We'll talk about it though. After we get our man, Mr. Basil Chapman up as we do, each and every Tuesday at 20 past the hour. And don't forget, folks, Basil has an outstanding show here every trading day. 10 to 11 Eastern Standard Time. Also a great newsletter, the opening call. Now it's very easy to get the opening call, folks. Come over to our website at TFNN. You go into newsletters. You're gonna see it right in the left-hand side of the opening call. You can get the opening call for one month for $149. You get it for six months for $695, which is a savings of $199 or 22%. And you get it for one full year for $1195, which is a savings of $593 or 33%. Now they all come with a 30-day money-back guarantee, folks. Basil has approximately 12 different archives out there. So once you sign up, you get all the archives. You understand how the Chapman wave moves through these markets each in every trading day. Check it out right in the front page of TFNN. Basil Chapman, what's going on? Hi, Tom, how are you? I'm doing great, man, yourself. Good, very interesting, because this week's got a lot of challenges up and down, and we'll have the next one coming up tomorrow with a Fed. Yes. And we've got advanced micro devices coming out this afternoon, so I'll show you what I'm looking at here. Cool. So from the Dow high of the first of August at $35,679, one of our techniques is using on-balance volume, we went short that day. We remain short. We've had trading positions three times long, three times short, just small positions, trying to use the Chapman wave methodology. What I was looking for was, and what I've said during my show on Thursday, going into Friday, that if Friday was very weak and Sunday night, the futures were very weak and we came in with all the news channels talking about how bad the market is, and the market dropped very sharply on Monday. That was yesterday. Then we could get that V-shaped turnaround, and that would be very important. I didn't see how it could happen because there are some areas that look to me like they need a little more time before we make any kind of a major low. So I said, we could have A low, but not V low. So instead, what happened, the futures were pretty not bad on Sunday night, and then early in Monday morning the futures were up and we had that big move to the upside. So this follow through is kind of to be expected. So what I did for subscribers is we added one of the Magnificent Seven that we've liked for a long time. We've been waiting to put money aside that we could start to look at some of these positions that have held and show some kind of tenacity and they'll be able to hold. So we'll still keep a fairly short stop on the position. So we've started to look at long positions and what already have been core market participants. Now here's the other thing, the volatility index. There we go. The volatility VIX, I've been typing in so many numbers today, I forgot the symbol. So the volatility index I said should scream to the high 20s, the low 30s, and that would give us the signal. And look, the volatility went to 23.08, about eight sessions ago, and it's down again. So that's not really working the way it usually does. Even here at 18, the market actually should be much weaker. So all those, I mentioned in my show earlier today, and the time conditions are, that all those icos, all those things that used to work with dollar up, the yields coming down helped the market. Oil, if the dollar was up, then oil would pull back. None of those are really working the way they used to. Even when gold was up and the dollar down, that was the normal thing, but now you've got something very different. So all those historical icons that I used to look at have different meanings. So within that context, one of the things that has not changed for me is that the SMHs, the semiconductors, even now they're up a dollar. They are really struggling. I mean, look at this chart. Look at that cup formation, 159, back in November, 2021, plunges down to 83.49. That was in, I think it was March of 2022, rallies up to 161.17, all-time high, and then comes back down. So you've got this beautiful symmetry between the cup formation and the plum line, the middle that I used as a price-time match, goes to you, just barely makes new recovery high, then pulls back. So using the same technique that I used for the Dow on the 2nd of August, we went short the semiconductors via the SMH. 161.17 was the all-time high. We're short from just over 159. But look at this symmetry. Look at the way the price moved down. You see this daily chart, and then it moves up, and then that exact measurement of the blue line to the downside, the same angle. I love this. This uses the channel wave inside wedge and the arch formation to get to the same symmetry from the inside track repellent zone to the support line. And it holds right at this little dash, this little, sorry, narrow inside track propellant zone. Then it runs up and it goes to the resistance. The green line matches almost to the penny, and now the blue line is coming down, and we've almost matched to the penny today's low. So the symmetry of this says to me that yes, you might get a little bit of a balance in the SMHs, but that's telling me that this market isn't yet quite ready to have the big move to the upside. So I consider that important. We are still holding that UEC. I mentioned to you quite a few weeks ago, Uranium Energy Corporation. We entered about 364. It's trading now at 592. It's about, I talked about this inside track repellent zone. See it's just bumping up against it here. So the things that have been working seem to continue working and what is starting to struggle, what has been struggling continues. So we're gonna be watching, for instance, the TLTs trying desperately to do the bonds and desperately trying to form some kind of a base to balance. Haven't done it yet. Basil, what is the overall feeling that you get out of Metro Boston as to what's happening in the economy? So in the economy, people that I speak to, people just say, wow, whenever we talk about prices of anything, people just shake their head and they say, prices are out of sight. And the big thing is especially people in my age group have kids who have moved out. Now they're free to do anything. They want the parents. And what are you gonna sell your lovely house and move to a two bedroom or something that you're gonna pay the same price for? They're gonna get 5%, which they've never been getting 5% for. Well, that's the other thing. This is only the first time that they've started talking about the 5%. So that is important. Absolutely, yes. Interesting. Yeah. It's so intriguing because there's no doubt the high prices for all of us is a big deal. And then when you look at the growth factor in the economy, it's 5%. I say, okay, where is it? You know, it's really intriguing, right? In general. Yeah, it's the government trick, yeah. Listen, folks, you're over to our website at TFNN. Check out the opening call. But I also have a great one. It's a safe one. We look forward to the show tomorrow. Thank you, John. Thank you. Bye-bye. Driving the volatility in...


To the tank truck, actually the hike by having it really get on the boats, that's the first time the boat's been on a good time on the boats. My original MOS is 3531 slash 3536, it's the same thing, just operator and then a record for it. Humvees, EVSRs, 7 times 36 which is the record for the 7 times and 15 is the record and also operate some trailers, PLST, other water bowls, some of the small trailers in the motor pool. I enjoyed a lot. In the Amaside, I got put into the Amaside a little early, based off whenever I joined the unit. I got a line in CO, just going over all the vehicles and record jackets and then my superior and performance upgraded to truck master once I was land and I started working at GCS. These kind of events happened because if we get put in the real world, we actually load off boats or I have AVs roll up in tracks or hiking with 240s. Those are kind of to get familiar with these kinds of exercises. I joined because it's kind of personal reasons and I kind of looked into it, my cousins joined and I kind of didn't have a way leaving high school so I kind of looked into joining the service and see what was my best option for me.


An aquarium in Berlin that was home to around 1500 exotic fish burst early on Friday, December 16, prompting around 100 emergency responders to rush to the scene at an inner-city leisure complex, emergency services said. Eyewitness videos depicting the incident and its aftermath have been shared around social networks. In addition to the unbelievable maritime damage, two people were injured by glass splinters, Berlin police said on Twitter. It was the world's largest freestanding cylindrical aquarium at 14 meters, 46 feet in height, according to the website of the Dom Aquarium Complex, which houses a radicent hotel, a museum, shops and restaurants. Emergency services shot a major road next to the complex that leads from Alexandraplatz towards the Brandenburg Gate in Berlin due to the large volume of water that had flooded out of the building. The road as well as the sidewalks outside of the complex were littered with debris. Buses were sent to complex to provide shelter for hotel guests, leaving the building, police said on Twitter, as outside temperatures in Berlin stood around minus 7 degrees Celsius.


Carrier Air Wing 5, the embarked air wing of the U.S. Navy's four-deployed aircraft carrier USS George Washington, completed their fly-off to signify the end of its 2013 patrol. It was good. It was good. Everybody played their part, everybody played their roles, and we got all the birds off. The fly-off signified the culmination of the George Washington Carrier Air Wing 5 team's hard work over the past six months at sea. Us working together and just being a team, everyone's motivated to get home, and I think a lot of that was key in us making this fly-off successful. The team completed numerous exercises with regional partners and allies, four Goodwill port visits, and a humanitarian relief mission in the Republic of the Philippines. For USS George Washington, I'm seen in Spencer Road.


This poem is called Blessing. Lord, get a bless us tonight. Everything's going to be all right. Cried the toothless lady in the sequined hat, silvery cane, wearing flip flops in the rain. Hey, mama, she called to me. I ain't my cane. May God bless you in your pain and help you to use it for spiritual gain. She prayed for me. I silently smiled. Haven't been blessed like this in a long, long while. Lord, bless this vessel for your use. May it be pleasing to you. Imagine that, I quietly thought. This poor lady praying for me with all that I've got. This sequined, flip-flopped angel, prophetess, sinner-saint, speaking truth to life on a rainy night. Lord, get a bless us tonight. Everything's going to be all right. Thank you. Thank you.


Three Russian aircraft intercepted over the Baltic Sea. British and German warplanes have intercepted two Russian jets and a spy plane caught flying without transponder signals over the Baltic Sea. The German Air Force shared pictures of the encounter with several images capturing the two Sukhoi Su-27 fighter aircraft and one Ilyushin 11-20 aircraft in flight. According to the independent newspaper, two NATO members were alerted and Eurofighter jets were sent to identify the military aircraft. Reconnaissance flights intercepted. German and British Eurofighters were alerted to identify three military aircraft. The German Luftwaffe wrote on Twitter. The two Su-27 flankers and an Il-20 from Russia were flying again without transponder signals in international airspace over the Baltic Sea. It comes amid heightened tensions between Moscow and the West over Russia's invasion of Ukraine. Russian military aircraft regularly fly from mainland Russia to Kalingrad and back, meaning that such encounters are fairly routine in the region. Germany handed over responsibility for NATO's Baltic Air Policing Mission to the UK earlier this month. NATO Allies pitch in to protect the airspace there because Lithuania, Latvia and Estonia do not have their own fighter jets. The Norwegian Air Force said it had similarly identified a group of Russian military aircraft in international airspace over the Barents Sea to the north of the country.


Hey guys, we just saw Pitch Perfect 3, Sydney Premier, I'm Drass and I'm Trent and we're from Movie Nerds and this is our review on Pitch Perfect 3. So Pitch Perfect 3, where do I begin? They get together after a three year of hiatus, they've won the championship, they're off doing their own jobs so after Emily invites them for a reunion, it doesn't turn out the way all the other girls expected it because Emily's singing with her new group, but then anyway this idea comes up from Aubrey, Audrey, Audrey and they decide to take up this challenge and perform in a small little competition and the winner gets to perform for DJ Khaled. A small competition, it's the USO show, the USO is the biggest show that the Army can put on they go on tour in the Army, International, the Bellas go International and yeah, that's the basic premise, a whole bunch of wacky, crazy, zany stuff happens that I actually wasn't expecting at all. You know what I find funny is, like you said to me after the movie, who's DJ Khaled? DJ Khaled, we're the best! I've got to show this guy all of Khaled's stuff, he kills it and that's a great little cameo because that sets up for the whole movie, they're just trying to fight for that spot they're trying to be the opener and it turns out, well we're not going to spoil any fear stand out moments, I'll let you go first with this one. My stand out was actually John Lithgow. Lithgow, yes, we have to touch on him. Yeah we didn't know he was going to, I didn't know he was going to be in it and it turns out he plays a really big role and it's part of the, kind of part of the sub plot involving Fat Amy and that was really a lot of fun, it was unexpected, it added some much needed oomph to the movie like it kind of, the movie at one point started to get a little bit slow and stay on maybe going over and then boom, here comes Johnny. Johnny with an Australian accent and after seeing him in Daddy, where's Daddy's home? Daddy's home too. After seeing him in Daddy's home too, his voice cracked sometimes, you could see that he lost that Australian accent but believable to give it a good crack anyway. It doesn't matter because it's all in good fun, the whole tone of the movie is just that absurd comedy it's not meant to be taken seriously and I think his voice breaking isn't that big of an issue for me it's much more, there was a movie where people's voices get break up, Murder on the Iron Express and that was more serious and people's voices get breaking in that and it kind of took you out Lithgow's voice kind of added to the elements of humour that he was displaying so I liked it, it was a good sub plot, it gave depth to the movie I'm just thinking about it, Abe's man like, this movie was a great, like this fills out the whole trilogy I loved how there was more Chloe in this, she really, Britney Snow stood out from the rest and they pushed her out there, which was fantastic, I loved her singing voice and everything We've got Ruby Rose stepping in, she's in the villainous Evermoist Evermoist She's got a fantastic amazing voice, I was really surprised I guess because she's dating Jess from the Veronica so they're probably working together and figuring all that but she's got a great sound to her so I love that aspect of it But Becca, what a shining star, Anna Kendrick, well, amazing Every time I see her I just think, I want you to be squirrel girl, please be squirrel girl that was going through my head the whole time but she was good, it looks like she has genuinely a lot of fun in this role I reckon she ad-libs a fair bit of the line, she has great chemistry with all the cast especially Rebel Wilson Rebel Wilson, are we going to touch on that? We certainly are Yes we are Fat Amy friggin unbelievable This actually, we say Fat Amy, the whole cast actually shone They each got their own individual moments to shine It was much less Becca centric this time Yeah And it kind of explored, Fat Amy was essentially the main actor She was Actress, actor, actor Which she deserves because I think she really, them as a collective makes the movie but for Rebel to stand out that's another shining point Yes I said Britney Snow before but you're right, Rebel and then Anna comes in They all had their time to shine and it made the movie flow really well It was fantastic It didn't slow down that much because everyone got their own little niches She had her, had a subplot of her father never attending a show Oh my God, the sadness And she did vomit She didn't vomit on stage Even though she admitted she wanted to every time she went up and sang So it's good, as you said it's coming full circle and alluding to the other movies it was a great send off to the trilogy I think And yeah, it was, obviously the plot not plot's minuscule Don't go in expecting any plot or at least a deep plot It's a fun movie It's what it's essentially designed to be It's a fun movie, enjoyable movie I think So we got Gail and John, Elizabeth Baines And John Michael Higgins Yeah, I had to look down for that I looked down before And they're back in their sort of chronicling Chronicling, what am I talking about? They're chronicling the events of the Of the Bellas, after their previous After the three-year hiatus They're showing, here are these acapella goddesses that have fallen from grace And they're detailing their lives So they give us a good commentary Oh, that was great I also found that At the start, when they started singing I got goosebumps and throughout the film I kept getting goosebumps every time they were singing It's something about these movies that Give me ultimate goosebumps What can I say, I can't really delve more into that It's just, I love the vocals From everyone, I love the music Did you get that as well? No, see I don't like the vocals Look at that whole wave of stuff over me The thing that got me in the movie Was the actual auto-tune The auto-tune? There was too much auto-tune Did they need to keep it natural? That was the problem with Glee The problem with Glee, and it was the problem With all these type of music things They don't keep it as natural as it could be And I get that they need to harmonise And a lot of the actresses may not have the vocal ability Use it, make it show through It makes it much more relatable But the other thing, and that's the minor gripe They didn't sync up the lids properly I didn't even pick up on that I didn't pick up on that at all They did not sync the lids overly well There were times when the country singers were on And that was when it was most evident In terms of lip-syncing But minor gripe, absolute minor gripe That's just the music perfection that's coming out of me Metal singer, not metal singer Metal fan for God's sake, not this acapella song That's just a minor gripe That's a great pickup, I didn't notice that at all But as I said, that was the only thing I didn't like about the movie The music, believe it or not Overall, I've got to say that if there is a fourth pitch perfect I'll be there, I'll watch it, I loved it I love music, I love these type of films It was great man, look, are you getting a thumbs up for me? What do you reckon?  Yes, Jessica and Ashley They're pretty much thrown to the walls every chance they get Especially by Fat Amy It was good They know that they're the jokes of the group And it shows through 100% So guys, we saw Pitch Perfect 3 It was amazing We won a fourth movie We can't get enough Maybe even a fifth movie Keep them coming Yep Sorry, here you go No, no, both thumbs up for us We love this Remember to subscribe below We're movie nerds And there's plenty more reviews There's movie nerds live And there's all these other cool stuff Remember to check us out I'm Dres And I'm Trent And we'll see you next time at the movies


Can he get close to this mark? We're not expecting him to finish the season at 400, but he's got power too.  It's paying off for him. You know, he said the home runs, he's getting hits. He's got a lot of confidence right now. I can see this guy easily finished between 3-40, 3-50 this year. Oh, okay, that's good. But I don't see a full 100 anytime soon. Just too many at best. Well, and plus, you know, he's playing at Dodger Stadium. And again, he's got off to an unbelievable start, but I'm thinking probably, you know, 3-20, 3-30. That's a great year. I mean, he's never hit 300 at any level, whether minor league or big league. But yes, the swing has changed. He's made adjustments. He's not swinging at pitches outside of the strike zone. He's been awesome. And you like that he's the left hander? He runs well. So that helps to get everything. That's a lot.  He's got the advantage. So I like this guy a lot. So I wouldn't be surprised if he'd hit 3-70. The swing he's got right now. But I'm looking at him to finish between 7 and 3-40. Yeah, 20 points in two seconds. Well, that's right. You know, when home runs and RB eyes, I think these guys, he's got it all. And he's got to work in, but the confidence is key for him right there. The only place anybody, if they ever do hit 400, is going to be tours. No, honest to goodness, just because of the expansiveness of the field, the way the ball carries, not happening at Dodger Stadium. I was going to keep the conversation going so you'd say you'd hit 450 or something. No, no, no, no, not at all. Check back later in the show. Check back later. Just check back later, June. Listen to that. Yankees keep winning, despite all of the injuries. When we look at the American League East, Yankees still the team to be. And did you feel that way at the start of the year? I liked the Yankees at the beginning of the year. Obviously, with all the injuries, I said, uh-oh, maybe in a little bit of trouble. But the way that those guys have come in and played, given the opportunity, it's going to come back to help them later on in the season.  But when called upon, at least they can draw upon their early experience. I like the Yankees because of the bullpen.  That's why I like that. Yankees, right? I like the Yankees too, to start the season. And now I like them even more, because of all the interchangeable parts. These young kids have grown up fast, shown they belong in the big leagues. And they're starring, all four of them, Urshala. Urshala, Grimey Turwars, has proved he can carry the team, and Sanchez is back, swinging the bat like he's capable.  When the big stars come back, it's going to be interesting. Because if they're not swinging that well, I mean, how much rope do you give them to not do well when you got young kids that are on fire? And I prove they can win right now. And you know the guy that's going to be interesting? I think everybody goes to the bench. But Frazier, does he get an outfield spot? Do you keep him out there? I mean, because you're going to have Hicks out there, you've got Gardner, you've got Judge. Is Stanton, is he going to play in the outfield?  Aaron Judge so far has done an amazing job with all of that, having to handle that. And I'm sure he'll handle it well as they remain in first place.


Today I'll talk about how free software affects your fundamental rights Yeah, so Let's quickly go over what the agenda we have for this talk today So first of all, I will deal with some definitions. What are human rights? You know what what is human rights law? We'll also take a look at the categories of human rights that we all enjoy and Yeah, we'll explore whether there are human rights relating to free software And finally, we'll also talk briefly about how free software can Effect or enable the enjoyment of our fundamental rights So what are human rights?  You don't have to do anything to earn them And They cannot be taken away from you except in certain exceptions that are provided for by the law So this is the basic concept behind human rights that everybody is born with them that they are available to you intrinsically And this concept is the basic foundation on which all human rights law is built upon I mean, of course, you know, things get complicated down the line when we have to talk about Things like how to balance one right against another because you know, people have different values people put different values on different rights And that's where all the disagreements And how to govern with human rights comes about So human rights are universal Yeah, as I said, that means every person is equally entitled to enjoy these rights and they're also Inalienable that means that they cannot be taken away from you or given away So under human rights law, that means that they should not be taken away from you unless in accordance with certain acceptable procedures or Situations, you know, for example, let's say you have the human right to liberty of movement or Liberty and security of your person But let's say you commit a crime and you're put in prison in accordance with the law You've had a fair trial and you've been put in prison So what happens now is your human right to liberty is being restricted But that restricted that restriction itself is not a violation of human rights law because it's been done in accordance with certain procedures Yes, as mentioned before, it's very difficult to balance these rights how people choose to justify restricting a human right is always difficult And so the exceptions under which your rights can be restricted It's the basis of like I said every argument in human rights law. So what kind of rights do we have? It's it's a very complicated List and it's a very long list and I'm sure a lot of you have an idea already of what kind of rights you have under law so to simplify things I will just kind of categorize them into the two popular Or two mainly understood categories of human rights law Basically, these are your civil and your civil and political rights as well as your economic social and cultural rights Yes, so civil and political rights are basically the rights that ensure your ability to participate in civil society Yeah, without any discrimination or repression So for your civil rights, you would have your things like your right to vote your right to freedom of association Your right to be free from discrimination And also things like free free speech Freedom of religion and thought etc etc and for political rights These would be things like rights to a fair trial rights to participation in civil society and political life The other main category of rights would be your economic social and cultural rights. So Yeah, these deal with rights that you you need in order to Enjoy a fulfilling life or enjoy or to be able to participate meaningfully in society and economically So these would deal with things like, you know, your right to housing your right to Education your right to health your right to be Your right to adequate standard of living food and water things like that Right. So, you know when we talk about human rights, it tends to concern itself a lot with very fundamental issues that go to the core of Human beings being able to live a fulfilling life. So many of these rights and laws They were drafted in times when, you know, the most Technologically advanced thing that people had in their houses was a radio A lot of these human rights treaties were drafted after the Second World War. So the most important ones especially were drafted in 1962 So I would say, you know, when these rights were kind of conceptualized They were done in a time where, you know, we had no idea or humanity had no idea of the influence that, you know The internet digital technology software would have on our lives Yeah, but I think that, you know, even as the world changes the core principles of what we as human beings Are entitled to enjoy in order to have a fulfilling life They remain the same and we just have to figure out how to protect these core principles while we deal with the new challenges that Digital technology brings with it Yeah, and I say this because, you know, a lot of modern life these days across the world depend on software. I mean, I think gone are the days where we can say that Just participation in digital, in the digital space Access to internet that these are a privilege enjoyed by the developed world I mean, even today we see now that, you know, these are essential things the internet and software These are essential things even in the even in the developing world and Because so much of our lives depend on, you know The functioning of software it is vital that we are guaranteed some kind of freedom over software and rights over software Over these tools that we see can essentially run aspects of our lives Yeah, you know these days and individuals rights can be affected by how software Operates even if that individual chooses not to use software. So how can free software support our human rights?  We use it to work. We use it for entertainment We use it even in our homes for everyday chores You have software in your microwave your software in your washing machine these days, you know and If you do not have some kind of control or transparency over any particular piece of software Your rights can and in most cases will be affected in some way And I think the biggest human right that you know people always think about when we think of Digital technology is the right to privacy. That's a very big topic these days Yeah, we are all affected by the services of big tech these days, you know It's almost impossible to avoid its influence when you use the internet And we live in economic systems where it's very profitable for a lot of these big companies to harvest and sell off your data and and of course these actions violate your your rights to privacy in the process and So when you use proprietary software, you always run the risk that your rights are Being four feet in some way, especially the right to privacy So if you use free software, how does that help with privacy then? So one major factor of free software is community management community motivation and dedication to ensure privacy So we can see this happening in many free software communities. I mean one one example is in the early 2010s you had the release of Ubuntu 12 12.10 which started establishing certain internet connections for local searches to the Amazon to display Amazon ads and also to share data with Facebook and Twitter just by virtue of using that operating system and the backlash from the community was immense because they could see these connections being made through the code and It was such a massive backlash that Canonical which is the company that Develops Ubuntu they had to respond and they ended up removing online searches and the Amazon web app You know more recently the free software Audio editor and recording app audacity they also received loads of backlash because They proposed adopting telemetry via the implementation of Google Analytics and Yandex to its software so yeah the outcry from the community was immense and It eventually caused them to to renounce their plans to do so So why is this relevant? You know so if you have the freedom to use the scope to study and to use the source code and the freedom to improve on it It means that the source code is decentralized and you do away with single points of failure Or massive data breaches and you also have a larger community Acting as kind of a watchdog over the software over what the code can and cannot do To its users to violate their their rights to privacy And yeah from these examples that I've raised you know what you what we can see is that real privacy solutions Must start with free software So another example, you know think of your right to vote Imagine if your country switches over from paper paper voting to Voting machines. Yeah, I mean we just had we just saw an election in the United States where a lot of states used Voting machines to record votes from voters so Would you be comfortable if you if you had the knowledge that these voting machines were being run on proprietary software that you have? No access to the source code and you can't see exactly what the code is doing to your vote. I mean you have no kind of ability to confirm whether or not the machine is Intentionally or accidentally through badly programmed code, you know, if it's actually changing your vote if it's not recording your vote properly Or if it's not communicating your vote, you know to a server where it's being counted or etc You know what happens if it's something is written into into the code to Discount your vote in that case your right to be heard as a Private citizen voting is being taken away So we need this transparency to preserve our trust in democratic processes And if we don't get transparency in the software that prepares And that prepares and processes these procedures in voting Then this can have negative social Effects and it can also reduce the trust that the public has in the democratic process And if you think about something more broad in general, you know, you're right to be free from discrimination so imagine if you live in Germany as I do and You are applying for a job. So you start sending out your CV to lots and lots of companies Some big companies they receive hundreds of CVs a day for various job openings. So what they do is they They use software to sort through their CVs if They're using a proprietary software to do so There's no way that you can be sure that they are discarding CVs that for example, don't have a traditionally German sounding name or you know it this this Creates uncertainty in your mind about whether you are being rejected from the job because you are legitimately not qualified or because you know, there is some Discrimination against you going on So yeah with without free software, there's no way that you can know for sure And there's no way that you can know if it's violating a fundamental right with free software if this is actually happening You can hold them accountable for their actions and say look my rights are being violated And I would like to have this violation be rectified So I'm coming to the end of my talk now. I'm running out of time I'll go with the session is basically for you to think about how software affects your fundamental rights and how Control of a technology can help you to enjoy your rights as a whole. I mean we can go through every single human right That's provided for by the laws in the various treaties That's adopted in the European Union these days and I'm sure for Pretty much all of them. You can find a way in which software Affects it in a real and practical manner And if software is such a widespread and compulsory tool in how we live our lives then openness and transparency Really is essential to having positive outcomes to how it affects society and in how we enjoy our human rights And yeah, so on this note as we go through this legal education track I would like to ask all of you after today to think about your use of software think about Free software and yeah, basically how it supports your rights and maintain Democratic and open society. Yeah, thank you very much