Hey folks, in the last several episodes, I've been stepping through the development of an animated climate spiral diagram trying to recreate the figure that Ed Hawkins created a number of years ago. That climate spiral was just amazingly popular on social media, I think it got picked up and was shown at the Olympics and in other different venues. Well, fast forward to the last couple of months, the folks at GISS at NASA, the place that we're getting her data from, they released their own version of the climate spiral. What I would like to do in today's episode is to help you think through the logic of how we can go from the Ed Hawkins' version to the NASA version. And so what I want to do is take a little bit of time to step through these two different animations and to think about what are the differences that we can see. I think I've got maybe a half dozen different differences, and then we'll work through those to get our current version from Ed Hawkins' version looking like the NASA version. So the first thing I notice is that my much-beloved background gray with the black field for the plotting window is gone in the NASA version. It is all black, and there is no title. So that's the first thing, thinking about the basic styling. The next thing I notice is that the month labels in the NASA version are all parallel to the x-axis. They're all horizontal, right? They're not tangential like they were in the Ed Hawkins' version. Also, I notice that January is at the 12 o'clock position, not at the 1 o'clock position in the NASA version. Also, I notice that the labels for the months are in all caps, and they have a yellow color to them. Also, I notice that they're on top of the data. They're not behind the data, okay? And so they're a little bit closer to the data than what we saw with Ed Hawkins' version. Next, I notice that the color scheme is a bit different. So in the Ed Hawkins' version, the color is by year, going from 1880 all the way up to 2022. As you go through time, we went through this geomeridus or color veridus color gradient. In the NASA version, on the other hand, it goes from blue to red, and it goes through white in the middle. And instead of incrementing that by year, it's incrementing it by the temperature difference. The other thing with that that I notice is that the year label in the center of the diagram isn't white for the entire animation. It's actually changing color to reflect the temperature. The next thing I notice is that the grid line that we put in in Ed Hawkins' version, we have these red concentric circles for one and one and a half degree difference. They are now yellow for minus one and plus one. And there's a green line for the zero temperature difference. Also, these lines are on top of the spiral. So they're not being obscured by the lines being traced on top of them. Finally, one thing I notice is that the spiral itself, the line seems a bit thicker than what we've been working with. It also seems to have a little bit of a texture on it to make it look more like a rope. So it has a little bit of 3D dimensionality to it. I don't know that I can do anything about that. The other thing I notice that's really cool is that in the NASA version, when you look at the end of the line, even if it's in a region that's red, the end of the line is white. And as you allow it to move forward, that line turns red. So there's a bit of a transition in the color of the line. Again, I don't think I can do anything about the texture or this gradient coloring that's got an animated effect itself. But it's interesting to think about. And I think that's pretty cool. And it overall gives it a pretty cool feel to the visual. So my plan is to step through these different elements. And as we step through each element, what I want you to do is to think about where in the code would I make these changes? Okay. And so if you want to get the code that I am working with, please, please, please go down below in the description. You'll find a link to a blog post that'll take you to GitHub. And then you can get the data and you can look through it with me in real time. And you can say, huh, I think we're going to remove the titles. And so this is where I would look to remove that title, right? So I want you to make some hypotheses, so to speak, about what you would change and where. And I'm going to be doing the same thing as we go through this video. I'm here in our studio.  It's the same script that we ended with at the last episode. I've copied it over and changed the name. Normally, if I was working on a project, I would probably be working in the same script and using version control to keep track of different versions. But I think people would like to have the project at the very end, so they can see all the files and all the figures next to each other. So I'm copying even though this isn't exactly how I would do it in the real world. So one thing I'm going to do is I'm going to come back down to the bottom of my code. And for now, I'm going to go ahead and turn off the animations. I'll also get rid of the transition so that we're working with a static version of the image. And I will save this with gg save kind of the dimensions that I'm going to be working in. And I'll call this figures. And I'll call it climate spiral NASA dot png. This needs to be in quotes, because that's the name of the file, of course. And then I'm going to grab these widths and heights and units and probably the resolution or not. And so again, this is what I'm going to use to keep track of a static version of the figure rendering these gifts just takes a very long time. And so I'm going to make everything as a static image. And in the end, we'll make sure it works as a gift. So with all this, I'm going to go ahead and load it and generate that figure. And I noticed I got an error message about res. And what I really meant was DPI. So I'll go ahead and do DPI. So again, this is the final screen grab from the climate spiral that I made to match Ed Hawkins is. And so the first thing I want to do is to make the whole visual black. And so again, think to yourself, where might we want to change everything to make everything black? Well, if you said the theme function, you're right. And so up here in the theme function, we have panel background and plot background. And we currently have it set to this gray, I'm going to put in black in place of the fill and the color. I don't know why I have that size. So I'll go ahead and remove that. One thing also to keep in mind is that I put in a object to have the background be a circle black with a gray background, right? And so I had done that way up here in my geome rect. So I'm going to go ahead and comment this out. The other thing that I had done was that I had a label for my text to flash up the year, right? And so I had this label padding of unit 50. I'm going to go ahead and remove that padding because we made the big padding because when I took the geome rect and put into polar coordinates, I made a donut, right? And so by making the padding bigger, we could plug the whole of that donut. Well, if everything's black now, I don't need to really worry about that. But I still want to leave that fill equals black, because this is going to be on a black background. And so if I remove that, then I would have a white fill and I'd have this white thing with white text. And that's not what I want, right? Alternatively, we could go back to geome text, but geome text doesn't give you a solid background. And so what you would then see would be the labels or the numbers writing on top of each other. And it just looked like a big jumbled mess. So let's run this and see what we get. So we now have that black background, we can't really see the difference from the geome label. But we know it's there, right? Good. So the next thing I want to do is get rid of that title. And so where do you think we're going to get rid of the title? If you said the labs function, you're right. So let's come back up here. And we're going to again, look here in the labs function, and see that we have title equals all that. So I'm going to replace that with null. The other thing that we could do would be to say plot dot title, right in here, right? And so we could replace this with element blank. To go ahead and get rid of that, we could actually leave the title in the labs function and say plot title equals element blank. And that would get rid of it for us. We could actually do the same thing for axis title. So even though we don't have any axes, we could say element blank there as well. And we don't have to worry about anything showing up. And then we could get rid of axis title y here, because that's redundant. So now we've gotten rid of the title, we have that black background. What we now want to do is work on the styling of our different months. And so the first thing I want to do is to make our months horizontal. And so where do you think we'll do that? Well, yeah, I mentioned we have a geome text or a geom label, where we are plotting the months. And so you can see here that we have a data frame called months labels. And so that tells me this is where we're making that modification. We also have this angle argument. And what I'll do is go ahead and comment out the angle, remove that comma at the end. And let's see what it looks like when we just do that. So that gives us our months being horizontal. I noticed the September and March are getting trimmed a little bit. I'm going to hold off on worrying about that for just a minute, just because we're going to be fiddling around with the inner dimensions. And so I don't want to worry about the positioning of the months until I've got everything else sorted. So the next thing I want to do is make those months all caps. And I want to make them yellow. And so we'll come back up here. And so we again use that data month labels. And so I'm going to come back up to month labels here. So I'll take this month dot ABB vector, which is ours built in vector with those three character abbreviations for each month. And I can use it as the argument to two upper. So if I do two upper on month ABB, then we're going to get all caps for our 12 months. I'll go ahead and load month labels. And then that will get propagated down into here, right? And so I currently have the color as white. Let's make it yellow. Our month labels are now all uppercase and yellow. The next thing I want to change about the labels is the NASA version starts with January at 12 o'clock and December at 11 o'clock. And so if you recall, when we were talking about cord polar, there's a special argument that we were able to give cord polar to get things shifted by that, you know, five minutes effectively. And that's back up here in cord polar we have start equals two pi divided by 12, right? And so that's basically five minutes on a clock face. And so the start argument takes a value in radians to tilt or adjust the coordinates. And so I'm going to go ahead and turn that to zero. We see that January is now at 12 o'clock, as we expected from removing that start argument from cord polar. Of course, our lines to indicate kind of the grid lines of the different temperatures is a little bit out of whack. We'll worry about that here in a few moments. But one thing I want to do before we move on from modifying those month labels is I want them to be on top of the data. And so we can do that by running the GM label after the GM text rather after our GM line. And so if we come back up here to where we're modifying this GM text, and again, I want it to be GM text rather than GM label, because GM label has a background, whereas GM text has no background, right? And so if I if I made this GM label, then when a line went behind it, we wouldn't see the line. So I still want to be able to see the line. And so that's why I'm going to use GM text. And because I want the text the month to be on top of the line, it needs to go after. This is also a point for why I want to modify it using GM text rather than scale X continuous like I have here. And that's because scale X continuous would move things back. And while I could perhaps move in the scale the months, it's just going to get a lot funkier. And I already have all these great tools. So I'm not going to worry about that. I think I can also probably comment out for later removal, the scale X continuous. And so we don't really see much of a difference. And I wouldn't have expected to at this point anyway. The next thing I want to take on is our color scheme. So the color scheme uses a Veritas gradient. And so it's a continuous gradient. And it's being incremented by time, right? And so the more yellow, the more recent, the more purple darker color is further back in history. And so I want to change that instead of being indexed or incremented by time by year, I want it to be incremented by the temperature difference. I also want the number in the middle of the figure to be changed by the temperature difference as well, instead of staying white. So let's worry about the spiral first. So what are we going to change to get the color to represent the temperature difference rather than the year? Okay, you have an idea? We're going to go into ggplot back up at the beginning of this pipeline. And what you'll notice is that we have color being by year. Let's change that to be T diff instead. So let's run this and see what it looks like even though it'll still have the Veritas package color scheme. And so what we can kind of see is that there are bands more by temperature, which is kind of the position on the radius rather than by time. I notice a little bit of pixelation in the lines. And that's probably because we're trying to assign a line segment to be a single color. And it's maybe not so happy about that. Anyway, let's now change our color scheme. And we can do that in what function? Well, we're probably looking for something that starts like scale color, right? So if we come up here, we see scale color Veritas, we want scale color gradient two. So remember, a scale color gradient goes from like one number to another number or one color to another color scale color gradient two goes from a minimum number to a middle number to a higher number. And so we'll then replace this, the argument will be low. And so that will be the color will make that red, high will be blue, and then mid will be white. And I believe that is the and that's the default. The other thing we want to add is midpoint to be zero. So that white occurs at zero. And I clearly messed up because I have the lower temperatures being red and the higher temperatures being blue, I meant to switch that. So we'll come back up here. And this will be blue, and the high will be red. The next thing I want to modify is the year to be the same color. And so again, we can come back to GM text. And we've currently got the GM label here, right? And so that's where we're modifying the label by year. But we are replacing the AES the aesthetic from way back up in GG plot with color equals white. So if we go ahead and remove that, then our color should be set by the AES way back up here in GG plot, right? To be color equals t depth. So let's try this. And so now we see our year 2022 is the same red as right over here. And when we animate it, we'll just have to double check that the year is the same color as the line around it. Now we want to take on the grid line around the plot. And so again, where did we change that? Well, we created that in GM H line. And so we had intercept at one and a half and two. And so we want intercepts at one, zero, and negative one. And then our color, let's make it yellow for now. And so we can kind of see those yellow lines, but they're behind our spiral, right? So let's go ahead and bring them to the front. And so that means running GM H line after GM line. We also want those labels for the the temperatures to be on top of those lines as well. And so we'll go ahead and grab that GM label there and put it after our GM H line. So it sits on top of that. And our color here is red, but let's make that yellow. And again, that was with the temp lines. And so if we come back up to temp lines, our exposition should be one. So it's at the top. That's January. And then our Y should be, as we saw, one, zero, and negative one. And then our temperature should be, I think it was plus one degree C minus one degree C. And then in the middle was zero degrees C. So that's backslash you zero zero B zero C. And I'm missing a comma here. So that doesn't look great. What I'm noticing is that we have a GM label with a black background. And that black background allowed us to interrupt the segment going or the grid line going around the plot. I think what I want to do instead of GM H line is to use a GM segment instead and turn off that black background on and actually maybe just get it to be GM text. And so where I had GM label, let's go ahead and make this GM text. And we then want the fill and label size to go away because those are not attributes or arguments for GM text. And so again, now we see our temperature on top of the lines. And I think if we use a GM segment instead of H line, then we can set the start and end position. And we'll effectively get that break in the line anyway. Because if I I can't make the back, I mean, the background of this is transparent, right? That's what I'm seeing. But I can't make it like opaque for the for the grid line, but transparent for the rest of the data, right? So let's see if we can use GM segment instead. So we'll come back up here to where we had GM H line, GM segment. And I'm going to make a new data frame for my grid lines, right? And so we'll call these grid lines. And it'll be a tidal. And we'll have an x being three values, an x and being three values, a y being three values, and then y and being three values. And I'm going to grab those three values from these intercepts, right? And that's going to be the y. And the y end is actually going to be the same as y. So that and then my x, I'm going to be again, January is one. And so if we start at maybe one and a half, for all the x values, and then for the x end, we want it to end at maybe 12 and a half, right? And so now down in GM segment, we're going to give data be the grid lines. And then our AES will have x equals x, y equals y, x and equals x and you get the idea. Y and color yellow. And then we'll do inherit AES equals false. So I think that strategy will work. Obviously, these settings aren't quite right. So something I want to do before we move on though, is to set those lines to be yellow, green and yellow. And so we can do that here with the color aesthetic. So we'll do yellow for plus one, green for zero, and yellow for the negative one. And I'm going to copy this line down actually for also the text label. Very good. We now have our two colored lines. And again, like I said, once we move things around, we'll fiddle some more. So we're going to now change the limits. Previously, we went from negative two to 2.7. We don't need that. We also don't need the secondary access, right? So I'll go ahead and get rid of that. And so our limits, let's have it go from minus 1.5 to 1.5. I don't think we need these breaks. And let's see what this looks like. So I'm getting a warning message that removed 12 rows from geome text. And sure enough, those are my 12 months. So coming back again, our limits were from negative 1.5 to 1.5. Let's go ahead then and put our text for those months. Let's put that at 1.5. So now we're like really zoomed in. I think we want to turn off that expand. So let's go ahead and do that. So it looks better. I think I'm going to come back and maybe put back in the expand. So let's make that maybe negative 0.3. And I'm going to decrease the lower limit to 2.0. So I think that scale looks pretty good. We need to bring down the year a little bit. So let's bring it down to maybe negative 1.7. And I think that looks pretty well centered. Now I want to turn our attention to the gaps. I think these numbers need to be a little bit smaller. They're currently the same size as the month. If I look at the original, the temperatures are quite a bit smaller than the month. So this is the geome label for the temperature. And this is for the month. And again, they're being set to the same size. I always forget the size of these things. So that's on the temperature lines. Let's do size equals 3. See what that looks like. So it could probably go down a little bit. One other thing I noticed, the little thing, there's a space between the degree and the C. So let's maybe reduce that 3 down to 2. And then for our temp lines, we could go ahead and put it in a space between the Unicode and the C. So I think that looks pretty good. It wouldn't be nice to have that text be bolded for those temperatures. So I promise I'll stop messing with this here. But let's come up here to geome text. And we can do font face equals bold. And I think that looks better. So now what we want to do is modify the start and end position of our segments, right? And so for that, the inner circle, I think it looks pretty good. Maybe we could just open it up a little bit of a smidge. So again, we can do that back up here in our grid lines. And so we're going to give three values for x and xn. And so we had been doing one and a half, one and a half, and one and a half. And then same here for xn was 12 and a half, 12 and a half and 12 and a half. And so now we want to modify these things. And so I want to open it up a little bit. So let's do 1.6 and 12.4 for the the inner circle for the out of the middle circle, we can bring it in a bit more actually. And so instead of 1.5, let's make that 1.3 and 12.7. And then we can bring it in more for the outer circle, right? And so let's do like 1.1 and 12.9. Again, we're just gonna have to try and try on there. So I think we did a pretty good job for the inner circle in the middle circle, the outer circle needs to be opened up just a smidge. I think that's pretty good. So again, for that, we'll do let's do 1.2 and 12.8. I think that looks pretty nice. This is what the original looked like, right? I can see that theirs is quite a bit smoother than ours. That just kind of annoys me a bit. But in general, you know, I think we're doing pretty well.   I think in general, again, we are using the same data here, the data from the other visualization that we started with that that original visualization that we're trying to mimic was a different data set than what we've got here.  So I'm not totally thrilled about that. That's something that I might go back and play with later. But I think that looks pretty good. So let's now turn this into an animation. So to do that, we can turn back on our transition manual. Let's go ahead and uncomment this and get rid of that extra comma. And I'm going to go ahead and add climate spiral underscore NASA dot gif. So I think this looks pretty good. I'm pretty happy with the way this turned out. There's a couple of limitations that I think we have because of our tooling in R that because I can't help myself, I'm probably going to dig into a little bit more so that I can figure this out. I hope you can kind of see my logic in working through the challenge of taking existing code and modifying it to look like something else. Let me know down below in the comments which version you prefer, NASA or Ed Hawkins's version. Also, if you have ideas for how to solve these problems that I've run into, let me know down below in the comments too and I'll try to highlight those in a future episode. All right, keep practicing with all this. We will keep marching on, looking at different ways of visualizing these data and please tell your friends what we're doing here and I'll see you next time for another episode of Code Club.


All right, it's time for another of my little unboxing videos here. I Spotted these at the dollar store. I You know, I've taken to calling this series the cheap stuff But these things aren't exactly cheap I got five of them I Was thinking you know, they'd be these are little things. They'd be two dollars apiece. Maybe 250 Four dollars four dollars each the twenty dollars for these five and you know what I Didn't notice until I sat down just now These are Funko These are from Funko as in Funko Pop. Yeah, I totally did not notice that I Hate Funko Well, they caught my eye at the store because of course I'm a Steven Universe fan and I have plenty of friends who are as well, so let's Let's open these up. Let's see what we got number one. Okay, here's a Collect them all of course and fairly all are the lion. Yeah, there's two Stevens So another Steven onion Watermelon Steven, huh? Is that all of them? Yeah, that's it But the display case I saw had Had a transparent lapis in it, so I guess there are specials Anyway, let's see what I got here. Ah I've got a Parodot, let's just open them up real quick Don't waste any more time Okay, there's a Greg universe. Oh another Parodot. Oh boy duplicates. Ah, here's something different. Ah It's a Connie. I'd really like to get one of those special transparent ones. This is my last chance. No, it's a it's another Greg universe Five random bags two duplicates $4 each Not worth it


Hello everybody, it's Iwa from Bohemian Crafting and I will try to share with you this journal I made I'm trying it probably for four times I think my camera or my memory card are just struggling somehow so I'm not sure which one is wrong but I tried to take this video before and it was failed all the time so I'm gonna try it again I made this beautiful small journal it's small but it's very thick and I had this idea in my head for a very long time we are using coffee or tea-dried papers in our journal and as I am coffee lover I drink coffee all day long I wanted to try to make some coffee and friends theme journal so this is what I made it's coffee theme, coffee and friends I know that name of the journal, it's not showing up but I like this name, I like that sign so I had to place it just on that cover as you can see I used again leather but this is not proper leather, this is faux leather I used this time for closure I used this chain it's huge ring here on the front same, it's on the backside and for closing I'm using this this clips I used few charms on this chain to make it pretty and inside of my cover I used this beautiful lace which my mommy sent me it's really vintage so I use it here on all, all that cover it's covering with this beautiful lace and here on the front side and also on the backside of that cover I made like a pen spot stencil, pencil spot you can slide your pen or your stencils, pencils what is it, pencil behind this piece of leather and it will holding inside I used coffee dyed papers in this journal and I used few ephemeras and vintage pictures about coffee team in this journal I used lots of them and also I used coffees I include coffees in this journal because it's coffee team so they deserve to be there it's thick exactly just before all those coffees I believe it will be a little bit more comfortable without those coffees when they coffees will be take out so this is my first page of this journal I used Martha Stewart border punch for this journal not for all pages but for many of them here paper dolly, coffee dyed paper dolly this is my first tax pot I used some coffee postcard and this is type of images I used in this journal of a lot those are that modern vintage pictures which I really like they've got that beautiful beautiful power that you can see that that vintage feeling so I use them in this journal as well here that other half of my tax pot and some pack I used lots of stamps in this journal paper dolly here I made small envelope it's nothing inside yet but I hope I will have access to my computer to my printer today hopefully we had huge damage in our house from leaking pipes so I couldn't be able to get to my computer to my room my room it's still a huge mess behind me so I will have to make some reorganization when I will be done I will probably make some small tour again because I start to building my own shelves for my craft supplies because I've got empty places between wall and my storage shelves where if I will have to buy some other shelves it will be difficult because it has just measurement different measurement so I will build it myself this is that crease which I include in this journal it's for fun you know when we having coffee we would like to have some relaxing time and this is brilliant with coffee here another tax pot a tack again coffee team this is a vintage Eiffel Tower Epimeras which I include because I've been in Paris it's long time ago and I had their coffee and it was brilliant so I included there this is another piece of paper I include some extra space for journaling and here coffee and friends again paper doily extended pages it's huge space for journaling in this journal here I used those CD covers in this journal and this washi tape it's from my lovely friend Elena she sent me with her Christmas gift so I saved this washi tape because it's beautiful and I've got it in this journal here first sign I found I've got many more in my computer but I had no access to my printer so maybe hopefully I will print it out today here I use that Tim Holtz Tim Holtz dies for this love sign I use this piece of acetate like embellishment and I make small tack it's like it can be used like bookmark and here another that modern vintage picture this beautiful camera here I've got ladies on coffee time and here I found this coffee many coffee many sign and there is many different styles of coffee and also how to make them here Tim Holtz coffee stencil this is Tim Holtz stamp some tack and here is my first coffee I include in this journal this is latte this is latte coffee some tack with stamps here small postcard and here is another sign about coffee and friends make the perfect blend yes that's totally true here is a coffee died hard doily and I used for this sign I used Parisian style stencils stencil I've got this is book a page from book I found jokes book with many jokes so I include on page here and it's really gorgeous and it's so fun to read so I include it in this journal here is another beautiful modern vintage style picture and this is my spoon thread spool I made for my stuff as I said I will try to organize my craft supplies so I'm making those spools and I include one here maybe I will put around some coffee died ribbon or coffee died lace maybe I think here is another sign from this Parisian stencil I purchased and here is another coffee I include in this journal it's nescafe 3 in one and it's really yummy yummy this beautiful vintage ephemera again pages with stumps here I made a kind of tag or tag tag booklet or what is it it can be used again like bookmark just put your pages in it and it can be used like bookmark here is a book page with coffee sign and I would like to think eyelet or my camera again I let dry my papers on those heating radiators and all heating radiators have this pattern on the top from those ribs and the coffee take that pattern and now it is like coffee so I have to place this page right next to that wall I make pocket behind and I include this beautiful picture with family they probably having tea but I included here because we are using tea and coffee for dyeing all papers another stumps here I include few ephemeras this one this one and also picture of our capital city from my country of Prague it's beautiful city Prague is really very romantic and very old and I made very small notepad and because I am living in England I had to include those this is proper English this is proper English keep calm and put the kettle on I love that and this picture it's totally amazing look at that cup look at that cup I wish to have double I wish to have one I need my morning cup of coffee it's totally me so I included here again some stumps coffee stand sale and here I've got another coffee that one is latte this one is mocha mocha coffee which I include in this journal here I use that curgurate cardboard like a basic of my pocket here is another spoon my handmade spoon with espresso sign and with this beautiful picture here those ladies on coffee break some tack and this ephemera stump images here caramel spice coffee including ingredients which you need for making this coffee stumps here I made it's kind of like tack spot behind this vintage advert so you can slide something behind those beautiful ladies picture here in the CD cover I made it like a pocket and I include those ephemeras I really enjoyed to do this this journal it was so fun here is another piece of that beautiful washi tape from Elena thank you so much Elena it's beautiful washi tape and here I would like to show you I kind of upgraded that kind of pouring paperclip I made it like magnetic I will show you I made it like magnetic paperclip it's holding so strong I think I use very strong magnets so if you will want to know how to make those and I made it in a little bit different style as well in kind of shabby chic I just wanted to show you that it is possible to make it like shabby chic so if you will want to know how to make those it's really strong just let me know I can make some small tutorial how to make them it's not too hard to make it here another beautiful image some extra space for journaling and from other side I would like to show you what I found I found those Valentine's postcards it's not with coffee team but that postcard it's really beautiful it's so and all those postcards had this it's like protection so I included here oops I've got my paper paperclip here another beautiful beautiful sign from that Parisian stand sale Tim Holt's stamp and here another images this is that modern vintage and this I really love look at them look at those ladies they look like coffee mafia so I have to included here in this pocket those beautiful ladies on coffee break and here is another extra tag or pocket with this beautiful modern vintage picture and also with this picture I know it's not coffee there but it's in kitchen and I really love this picture look at that dog this reminds me or some I don't know why maybe because that's there so I have to include it here because it's amazing another coffee dyed papers those beautiful ladies and coffee dyed postcard behind and here another images this stamp this girl having coffee and another beautiful modern vintage we are nearly on the end this is from that Parisian stand sale it's really amazing and here I've got that another one another paper clip as you can see this is this is that can pouring and I decorate it with the ball and with the heart and with this bead and it's magnetic as well from other side I've got this filigree the same bead from both sides so this is my another paper clip with the stack with this ephemera and with this beautiful picture and we are nearly on the end here is another piece from this beautiful washi tape this extension and this is totally last pocket in this journal again this coffee in one beautiful picture and in this pocket I've got last two pictures this beautiful coffee coffee and those girls I know they didn't have coffee they've got probability but they are so cute so I included them so this is my sharing for today I really hope this video will be uploaded if not I don't know I really don't know I will have to describe it on my blog I hope you like my journal I really hope you found some inspiration thank you so much for watching if you will want to know how to make those paper clips just let me know and I will try to do small tutorial thank you so much for all your amazing comments and have a lovely day have a lovely Sunday and see you soon bye


What's good chargeable Ross back at it again with another video. So I'm back once again with another preview and predictions for crown jewel 2022 this year, man. I'm looking forward to this event this PoE as they call them this premium live event. It should be a good one. There's some matches on this card I'm actually looking forward to so we're gonna get right into it I'm gonna give my predictions on who will win and why and you know, potentially where they take things going forward So we're gonna start with the women's tag team championship match Alexa Bliss and Oscar versus damage control So apparently they're going to have a a match Alexa and Oscar just won the women's tag match This on Monday night raw, which I was not expecting so apparently they're going to have a rematch at crown jewel. Um Honestly, here's the thing Here's the thing. I think what they're gonna do here Since they lost the titles, which was kind of kind of a shocking situation I think Alexa and Oscar is gonna retain it doesn't make sense for them to drop the titles just seven days later I don't like the the you know back and forth for titles They need to have some type of look, you know rain if you're gonna put the titles on someone It shouldn't be for seven days. That's just my opinion. It just kind of devalues it So I think they're going to retain. Will it be a good match? I think it will be okay I don't think it's gonna be I did for the most part. I was enjoying the match They had on Monday night raw. I think it's gonna be more or less the same there But Oscar and Alexa bliss will most likely Retain the titles but I think it's gonna be a set up for something later on in the show between Bailey and Bailey and Bianca Bella, I think there's there's more to be said about that so I think they do Just retain the titles here We got the undisputed tag team champions the who so's versus the brawling Brutes I think this is gonna be a fun match. They just gonna be great. I'm gonna go with the who so's obviously Retaining here. They're not losing any I won't say anytime soon, but they're not gonna lose here This match will be fun. This match could steal the show. I hope it does They really work well together with the brawling Brutes So I think this match will be a good one But I'm just going with the who so's to retain it just makes sense doesn't make sense to take it off them Brawling Brutes are great, but it doesn't make sense to take it off them yet next we have The OC versus the judgment day now this I'm I'm I'm really Really really kind of like I'm gonna focus in on this man If you know if you know me, you know First and foremost, I hope at some way somehow Rear catch the beats. That's that's all I care about rear catching the beats Dominic he's gonna catch the beats by default. So I'm gonna always be happy with that But you know what I would pull us pull a swerve. I think a lot of people going in thinking judgment is able to win I think I'm gonna go with the OC Winning you just brought these guys back to health AJ Styles in my opinion doesn't make sense for them to come into the mix And they just lose together. You want to build up another credible faction? I think it would be perfect for the OC to win now Here's the thing what I think would be cool is if we have some interference Of course, we have edge comes into the mix and then I would love and I pray this happened Please trouble age make this happen. I would love to see Beth Phoenix Get her wanna get her run back run her fade with With Rhea Ripley man, I think that would be a nice little comeback I I hope they do that and because of that it causes the OC it causes He causes are the OC to get the victory off of the edge and in Beth Phoenix return so I'm going with that one OC winning in this match, man. All right, so we have Match I'm not really looking for it too And I think a lot of people are kind of just like whatever about it Braun Strowman versus Omos Look Anytime Omos even hops upon the scene like anytime he's on camera. I instantly don't care This I don't care. I'm glad Braun Strowman is back. I don't care about Omos.  I just Omos is not it. He's he's he's the great colleague pretty much Omos is not it. He's just very tall At least Braun Strowman easy. It's okay. He's serviceable in the ring. He definitely has the look I'm going Braun Strowman winning this match It should if anything the only thing I can say they can do is Caught some carnage and chaos, you know before the bell rings or something like that as the only thing I can think of But I'm going Braun Strowman winning over Omos So we can be done with this feud and potentially maybe have Braun Strowman move Towards maybe Roman Reigns in the future. Who knows, you know, they can definitely build a feud off of Braun Strowman Trying to get his trying to run the fade with Romans and they do have history So maybe they go there next but I do not want to see a rematch of this have Braun Strowman win And we move on with our day now match. I'm looking forward to next Drew McIntyre versus Karen crosses steel cage match Now I've been really thinking about this for days since they announced this Drew needs a win Drew needs a win here Karen cross I feel like can take a loss here and I know some even all you can have them lose You want to extend the fuse because outside of that You don't really have anyone else for carrying across the face because if he beats Drew again this time Then what's the point?  I mean, maybe you can do something with carrying across in Braun Strowman But I think you save that way later because you're trying to build up as carrying across as a Credible threat the same thing with Braun. So I have drew winning this I have drew winning the steel cage, but the fuse not over. I think this will be a fun match I think they're gonna have a good showing And I'm looking forward to it. So I have drew overcoming the odds Winning this match and they can and Karen cross cannot let that go and they continue The feud at some point they continue to feud You know, maybe at the next pay-per-view. So that's just my take on it I'm gonna go with Drew McIntyre winning this match because he needs it and just to extend a few to maybe one more match Another potentially interesting one Bobby Lashley versus Brock Lesnar. Now Who do I really want to win here? I really want Brock. I mean Bobby Lashley's to win Do I think they're gonna give Bobby Lashley the rub? I hope they do. I Hope they do because it in my opinion even though Bobby Lashley did win their last outing It was obviously because of interference That's why he won his last outing. It was cousin if it wasn't because Bobby beat him. I think They're probably gonna get a winner Brock. I Just don't see them paying Brock good money for him to lose since he already lost to Bobby on paper Already credit once again sister Roman Reigns. You already lost to him. I think they're gonna give the win to Brock here I would love for Bobby to beat him clean with no help But they're gonna give the win to Brock Lesnar here. Dub is not gonna be happy about it Sorry, but I just feel like that's what's gonna happen. So Brock will win I don't want him to win but Brock will win this match. I think it will be a serviceable match Hopefully they really give them some time and over. It's just not a whole bunch of suplexes all day I hope Bobby Lashley was able to get some real offense because I feel like their first match If Bobby had a little bit office at the beginning then he pretty much was just getting squashed throughout the match I did not like that. I hope they really have Bobby show like yo I'd deserve to be in a ring with you at least do that for him Make it so Brock is I really have to fight to get this win. That's all I'm saying We got the Raw Women's Championship Bianca Belair versus Bayley in a last women's standing match Honestly I'm thinking If you're gonna have in my opinion, I think damage control is not gonna win the titles back They're obviously gonna get involved in this match. We're gonna do everything they can to make sure Bayley wins I think Bailey's winning this she has to win this match She has to there's no room for her to not win if she does not win this match damage control They're not they're not doing any damage to anybody. I'm just keeping it on keep it to stack with you She needs to win this at least she can be old She can be the one to have the women's championship and damage control half her back even if they don't have the titles That's why I said earlier. I think this is gonna stem into something where Damage control will not regain the titles, but they will be the reason Ultimately Bailey wins this last women's standing match. I think this is gonna be fun I can't wait to check it out. I think they're gonna put on a good show and I do believe Bailey will come out here Victorious as the new Raw Women's Champion Which I'm okay with because Bianca's had a pretty good run her run has been quite enjoyable I have enjoyed it, but I think it's time for Bailey to Get the get the title back It just makes sense It's time for her to be a champ and to heal and to have this faction and we can go from there So I'm going with Bailey to win the last women's standing match for the Raw Women's Championship and finally the main event of course Don't just be a WWE Universal Championship Roman Reigns versus Logan Paul I don't even I don't even have to say anything Roman Reigns is retained. It's as simple as that Triple H is not about to have Roman Reigns Drop the titles to Logan Paul. This was only Set up to build up some hyping and in and build up some hype for crown jewel. That's it That's it Literally that is it. There's there's no other reason this match is happening This will be his third wrestling match What there's no what there is a zero and I say zero percent chance Logan Paul wins you want to know why because it just doesn't make sense Logan Paul winning in his very third match ever against Roman Reigns who's almost He's he's in God mode right now. What are we talking about? What are we talking about? And I see people doing the clip bake thumbnails of Logan Paul holding up both the championships And they edited it, you know like that in Photoshop.  I'm not believing in that I don't think anyone's believing in that Roman Reigns will walk out once again As your undisputed WWE Universal Champion and that's it Do I think the match will be good? I think the match will be great Logan Paul has gotten some type of rhythm on how to you know, approach these matches It's gonna be different with someone as a veteran like Roman Reigns So it's gonna be really different, but I do think Logan Paul is going to show out I think it's gonna be some moments where they tease he may do it but I think ultimately the bloodline is too strong Logan Paul loses his match and Yeah, Roman Reigns will retain and continue to Be the head of the table man. So that is my preview and predictions for crown jewel. That's maybe like There's really only one match. I'm not really looking forward to is the blonde strongman versus Omos match That's the only match. I'm really not looking forward to everything else. There's there's some intrigue and interest in so Not a bad card, you know, and I feel like they're gonna be doing some continuations of Storylines one thing I can appreciate is about this card is it doesn't it's not filled with you know, like I guess you can say like part-timers or or legends act like some of the other crown jewel cards were filled with sometimes You know, because you know, they wanted to make it this grandiose so event I like there a lot of these matches are viewed Continuation matches and I'm looking forward to seeing where things happen and where things play out So comment down below. Let me know you guys looking forward to a crown jewel this Saturday also, who do you think will win? Who do you think will lose? But I appreciate all the love and support you guys have shown on the channel. We're so close to an okay I appreciate y'all giggling me. See you on this


Hi there, my name is Don Boudreau. I'm a professor of economics at George Mason University and a senior fellow at George Mason's Mercatus Center and I'm here today to talk about Adam Smith and his views on trade and the economy. So let's get started. Trade policy is always somewhere near the top of policy discussions. So 40 years ago when I was in college people talked about trade, 20 years ago they talked about trade. Never in my lifetime has trade policy been quite as prominent in public policy discussions as it is today as it really has been since just before President Trump won election in November of 2016.  Until about five years ago mercantilist beliefs, this notion that imports are bad, exports are good. What we want to do is increase the amount of money we get from foreigners. For whatever reason people at least in the United States were embarrassed to express this view. So you had these mercantilist notions motivating people but a lot of people are clever enough to sort of hide them behind a veneer of reasonable sounding economic explanations. President Trump has led the way or maybe opened the floodgates to a whole raft of people who are now embracing mercantilism and protectionism in an overt way. And a species of protectionism, sort of more virulent species of it is what's called industrial policy. It comes in different flavors in different varieties, different sizes, shapes and odors. But what industrial policy, they all share no matter what version you're considering, is the vigorous and discretionary use of import tariffs and export subsidies to pick winners at home, pick industrial winners in the home economy in an attempt to defeat foreign governments. One of the chief views of mercantilists is that there's a fixed amount of wealth in the world or at least the amount of wealth in the world is largely independent of human institutions and human behavior. And if that were true then no nation could grow wealthier unless another nation or other nations themselves grew poorer. So it was a very zero sum view of the world. And Donald Trump and a lot of the conservatives today who are chiming in with their own schemes and plans for protectionism and industrial policy, they have a very zero sum view of the world. They want America to grow rich and if it's true that the amount of wealth in society is fixed then indeed America can grow rich only by making other countries poorer. Then mercantilists describe the beggar thy neighbor thesis. You can't get rich unless you turn your neighbor into a beggar. Among the many things that Adam Smith shows, this is a nonsense view. The amount of wealth in the world is a fixed amount of wealth in the world grows. It grows as the division of labor expands. We know now it grows as innovation occurs. Occurs, including the amount of real material wealth in our world today of 2020 is unbelievably larger than it was during Adam Smith's day of 1776. And it was larger than what had been a few centuries before that. But Mr. Trump and his conservative allies, they don't understand this. Let me quickly say it's not just conservatives. I mean, there are industrial policy advocates on the left. You listen to Bernie Sanders and Elizabeth Warren on trade and industrial policy and immigration. They don't sound very different than Trump. The style of their language is a bit different, but they're basically endorsing the same policies. We're going to have fortress America. We're not going to let Americans buy as they choose from abroad. We are going to appoint wise and intelligent people to powerful positions in Washington and give them the power to dispense these protections and to dispense subsidies. And somehow that will make us great because if we don't do it, then other countries will be doing it. And so the only way we can compete with other countries is to have our own industrial policy. Adam Smith would have just waved this away as nonsense. Nothing can find very little in Adam Smith, even as an intellectual mention that would support this notion that we need industrial policy. And industrial policy is beneficial or can possibly be beneficial for the country. But if you don't understand how trade works, if you believe that trade is zero sum, if you believe that imports are bad and exports are good, if you don't like economic change, if you are afraid of the future brought about by an open-ended entrepreneurial driven process in which people are free to invest as they peacefully choose and people are free to spend as they peacefully choose. If you're afraid of the future that emerges in this entrepreneurial way, then naturally you want to clamp it down. One way to clamp it down is with industrial policy. But making a mistake to the extent that we use industrial policy, we will make the economy less dynamic. We will make the economies grow less quickly. And we will make the people in the economy less prosperous than they would otherwise be. And if industrial policy is used too extensively, you can actually reverse that. You can actually make us poorer than we are today.


Hello. Okay, I'm going to give everybody a few more minutes to get dialed in before we get started. Make sure that you are putting yourself on the attendance list and either no update next to your name if you don't have any updates or if you do just a quick 1 or 2 words about what it is and we'll get you added into the agenda. Just a reminder, I do still need scribes. It's Mark, I'll try to scribe today. It's about my turn. Thanks, Ray. Thanks, Mark. I'm going to give folks about 1 more minutes. All right, let's go ahead and get started. If you go ahead and please add yourself to the attendance. If you are just joining us, I've linked the meeting stock in the chat. If you're a new member and you have an update or if you have an update, please provide your name in the document and a parentheses next to your name. If there's no update or if you do have one, just a brief 1 or 2 words about what it is. If you're part of a working group, please make sure that you provide your update at the time that we do the round robin check in. If there are any specific issues or tickets, put them next to your name in the attendance list and we'll go through them all. So I've got two facilitators, Mark and Ray today. Thank you both for volunteering. We appreciate it. So I'm going to go through the attendance list and start calling on folks. Mark, go ahead. Hey everybody. This is going to be a really quick thing. We had an interesting scenario involving GitHub and wondered if folks had any corporate enterprise rules around the use of GitHub in either direction, you know, taking content from there and using it in local repos or uploading content and that would include documents, not just code snips. How do you mean like general contributions or use of free and open source products. Yep, all of the above. So, you know, the concern is leakage of intellectual property or code snips or accidental release of pipeline artifacts that might have credentials in them. So, you know, the usual approach to this is some kind of DLP policy lockdown, but GitHub is kind of special in this respect. Yeah, I mean, from what I know, I think many organizations have gone through this and some have formed their own policies and GitHub actions, like post hooks to scrape through either the source code or the documentation that's getting checked in to figure out if there is any confidential information. As far as I'm aware of there isn't any push from GitHub itself to say like, okay, this is this is a quote unquote a compliant repository that I'll basically make sure that it checks because obviously the cost of providing that is going to be huge. There is, and so even we use that there is a scanning tool. So this this is as far as like passwords getting checked in everything as far as the scanning for any open source libraries for vulnerabilities and stuff there is there are tools that do that that you can possibly incorporate in your build chain when you pull the content in that is as much as GitHub consumption that I know that exists and the rest is all like still a work in progress. Right, thanks. Thanks. We are less concerned about vulnerability scanning because we can always do that in the local repose it's more, you know, accidental leakage of code that reveals something about apis that is proprietary or involves content that we are under third party legal agreements not to disclose but the developers don't know about it. And then there's also kind of design information that might be tied to covenants for intellectual property and you know it's sort of developers being grown up stuff to some extent but it became clear when we looked into this that you can't just write a DLP policy for it and and call it done. Well, Mark, you know, a couple things. So, you know, a couple instances where where I encountered this and, you know, still trying to triangulate, you know, the problem of it. So, you're working with a major tax prep company, you know, help them set up a release pipeline and one of the ways that they chose to control anything going out of the house to GitHub to public GitHub is, you know, basically, you know, systems or it is the sole holder of the keys to publish on behalf of the corporation to the public GitHub individuals contribute but you know there's, you know, control step before things go out the door. Is that the problem set or is it data location and, you know, validating, you know, kind of the opposite of what Black Duck does in terms of code identification and, you know, locating those assets on, you know, the public and I guess eventually the dark web. Yeah, right. Yeah, I think it's mostly the former I hadn't thought of having a fewer number of logins that's, that's certainly an option we could look at I'm not sure how we could control that exactly but they're my idea to do that. So that's, yeah, that's pretty good with so Black Duck, you know, it's the more we thought about this. The concern is, you know, developers that are just out of school want to use this. This is a something that's integrated into their kind of ethos about how to do development right so we kind of don't want to discourage that but on the other hand, some of the best work there even when we voluntarily want to contribute to get hub we kind of need to know about that from an enterprise. I'm saying we hear about I'm trying to, you know, paint this in the broadest stroke possible because, you know, thinking about this as potential contributors to cloud native content, or consumers of it or trying to build new products that either leverage intellectual property that's kind of revealed in the public space. And that's an important line you always want to continue to kind of draw. But then there's just sort of the management of the pipeline right which is probably needs to be including documents not just the code pipeline. Right, right. My opinion, not my corporate experience is that, you know, corporate leadership doesn't fully understand what it has to govern so therefore you can't control it. Right.  You know, a friend of mine went to work with a major construction company that was, you know, in charge of large scale, you know, private and public buildouts and they, for example, leveraged box to basically bag and tag all the assets and through, you know, box as the cloud network, they were able to say, All right, these assets with this signature are, are, you know, tagged as secret.  But you need, you know, control of the system, like you would have in a deployed, you know, cloud infrastructure, like box would provide to be able to architect that.  You know, I haven't seen it yet. It's probably technically possible.  Yeah. I would, this is a really good and fascinating problem set that I think a lot of organizations have. I would like you to actually create a thread and the channel that way we can open it up to more folks to provide comments and feedback on because I don't believe that this is unique to one organization. There's a lot of different ways that you can resolve this problem or at least buy down the risk a little bit. So definitely I create a thread in the Slack channel to get some more feedback. Sure. And, you know, just to round this out, the sort of bottom up what evidence management that one encounters here is the high end tools that some enterprises acquire will scour these repos for will just say items of concern keys references to the brand. Certain things like metadata that might be a local to the build process and so these things that get escalated as alerts through the security teams who have very limited insight generally to the developer stack that couldn't be involved in it so it's something that Scott both and I don't know that thinking about the developer chain is top down exactly but the learning system is definitely bottom up and the top down part of it is really managing through process as well as the organization probably so okay yeah I'll see I'll try to open a thread to cover this as a general topic because we we kind of want to encourage this right the code sharing and contribution process but there's what their boundary conditions that we want developers to be aware of developers in in commenters to probably this is one of the big existential challenges that we have in terms of security.  Yeah, yeah. Great JJ. Thanks again Mark and thanks again Dan so if you're following along with that conversation Mark is going to drop a thread in the Slack channel to help open up the dialogue about that. So JJ you're up next. Emily thanks. So I just want to give this is JJ I just want to give an update on all the all the effort that people have done on white paper so far and bring bring some attention to that from all of you folks. Emily has been shepherding a lot of weight. We are in the process of like breaking down the white paper into into consumable chunk that should happen in the next three weeks. So right now we have somewhat of a reference. We call it reference architecture but it's more of a more of a frame to think through in terms of cloud native security infographics that's been done as well. I would, if you do have time I think it's there is a channel for six security white paper. If you want to join there and there is conversation happening there that you can follow along and leave comments feedbacks as we go through this process. Thank you for joining me. All right, thanks JJ. Dan you're up next. Awesome. Well, you know, today actually tomorrow. Officially ends my term as chair. It's been a long journey. We started, I think at this point, nearly three years ago with what was at the time the safe working group secure access for everyone is the acronym there. Then the safe working group became the sort of guinea pig in first. SIG in the CNCF. So fantastic to work with JJ and Sarah to take that sort of seed idea and bring that into the CNCF and really begin to define how we do special interest groups here in the CNCF with all the other groups that were affiliated and partner with bringing that up to the level of the CNCF was fantastic. It's been a year. This last year has been brutal for all of us with the pandemic, but also, you know, particularly challenging for our small team of chairs.   We're still, you know, in the process of ratifying that. So, you know, kind of hold that for next week and we'll share that out officially. I'm just, I will be moving into emeritus status as chair. I still plan on staying active and being involved in the working group, though I will, you know, take this opportunity to sort of ratchet down the amount of time that I'm spending on the SIG.  You know, real quick, you know, what I'll be doing there. So, with the new startup effort, you know, I've, I come more from the application space than, you know, kind of cloud and infrastructure space decade of bringing no jazz into the ecosystem and, you know, commercializing that.  And we'll be starting with identity as a service. So, you know, lots of fun, sort of heads down time in the next few months. And, you know, getting that out. You know, we expect to have initial sass in Q1 2021. And if you know anyone who is in, you know, kind of mature stage series B to C company that needs, you know, technical leadership, my co founder and I are both experienced CTOs and we're helping folks sort of, you know, land that maturity stage CTO oversight and involvement and while we're continuing to build out that infrastructure. So exciting times ahead. New leaders coming and, you know, I see such a bright future for this group and, you know, I'm happy and honored by everything that we've accomplished so far and look forward to, you know, everything that the leaders and all of you all will be producing in the years to come. Yeah, I mean, I want to take a moment to thank and express. And I think we all should express our gratitude to what Dan has done for this group. And I think he hasn't done enough justice to say how impactful he was to having this group bootstrapped and kickstarted. So it was way back like what Dan said. Three years back, there wasn't, there was just me, Dan, and then Sarah, and this group wasn't, wasn't the thing and safe working group we went and we had some core values and philosophies with which we wanted to form this group and then we all carried forward that as a value in terms of trying to make it more neutral more informational, more educated for the entire of the ecosystem. And all the values that Dan carries from his prior experience of trying running an open community and then having people collaborate in a constructive way has shaped the culture of this group significantly, as you can see, in terms of like how this group's run. So I do want to take the time or all of us to take time to basically appreciate and I don't think appreciate is enough of a thing for what Dan has done, but I'm not good in like good in my own way that express how much of a, how much of an impact Dan had in this whole group so thank you Dan. Thank you today. Yeah, go ahead. Who else wants to lead to this we're going to pilot on here. Yeah, let's do it. There's no better way to do this. So Dan, you've been really fantastic to work with in this sake, and I cannot express to you enough, how awesome it is to see you enter and JJ working together to make the sake what it is today. I remember when I first heard about the CNC have sick security. It was at a presentation at cube con probably about three years ago at this point. I had no idea what I was getting involved in at the time, but I do have been with like my first issue and my very first PR was with this group, so I especially want to thank you and Sarah and JJ for putting in all the hard work all the love and all the time to make this what it is today and I would feel comfortable speaking on behalf of all of the attendees to any of the security day events that would not have been possible, had this group not existed in the first place in the culture that you all have instilled within this group. So thank you. Thank you. One add Dan is this, one of the things I say a lot to the folks in the day job is that security is both broad and deep. It's becoming hyper specialized. One person that's going to know all the tools, everything from cryptography to code vulnerabilities to how to handle incidents in real time. It's too much and yet at the same time, wind the clock a little bit back and you've got Kubernetes wasn't even on the landscape, you know, and now it's a, it's a threat vector right. So that's the horizontal space that continues to move out at the same pace and what I thought your leadership really brought to this is an ability to see a big picture and the minutiae of important details at the same time. And that's what tech leadership has to do because coding and building systems that work involves both kinds of vision and, you know, I've really appreciated that kind of leadership and this kind of group. Thank you, Mark. Anyone else want to gosh over Dan. Gosh. I could keep going. I'm going to start crying. That's okay. This is a safe space. So we have a new member to SIG it's a it's a I apologize if I mispronounce. It's fine. Thank you. It happens all the time. My name is it I actually let me turn on my webcam just a sec. Hi, everyone. So I just wanted to introduce myself, because this is the first time I'm joining the call actually have been listening to the recordings for for a while so I don't feel that this is my first time but the first time I'm not joining live and I do intend to start joining live going forward so just a quick introduction. My name is it I I work in the Aqua security on open source security stuff. Maybe you've heard about the cube hunter cube bench trivia Tracy so on so this project comes up to my team. And I've also been involved with the CNCS security related stuff like the CKS exam now and keep going I've been a culture of the security track so I've been involved with CNCS security related stuff. I never really involved with security so I want to fix that. And so I am looking for ways that I can contribute and be involved more with this group. So, just saying hi, showing my face here. And nice to get to know everyone face to face. Welcome, welcome. I can make a suggestion we actually cube bench came up on this morning's policy work group discussion so if you will put I'll post the link to that discussion but that might be a natural subgroup for you to join into as well we tie. Welcome. Yeah, I actually have been working on the WG policy group as well so feel free to put me into any discussion. I appreciate it. Fantastic. All right, are there any more updates from anyone. This is Robert I'll just put up the weekly call for volunteers on the cloud custodian assessment. We still would like to get a few more reviewers on the Google Doc that to fill in team have provided. So either just add to add yourself to the GHI and I'll reach out or add yourself to the slack channel for the assessment. It's a sec assessment sec dash assessment that's custodian. And there's lots of details posted there. But would love to get a few more eyes on the drive on the Google Drive document that could fill provided. I can have that. Can you just elaborate what kind of assessments are you requiring. Yeah, definitely. And the documentation of our assessment processes is in the GitHub repo, but just in brief, you know, projects for sure those who are in sandbox or beyond submit a document describing their security posture, a risk assessment and controls that they may have implemented. And then this volunteer group will review that documentation and then make suggestions recommendations, or in specific cases, you know, maybe concrete recommendations for improvements and then review that. We will review that first with this group. And I think Emily mentioned that there's a presentation next week for key cloak. Is that correct. Yes, there is. I actually just dropped the link to the assessments in the chat. But it's also in our repos anything that you would like to know about the assessments how they work roles and responsibilities kind of expected timeframe and time commitment. That's all there. And next week we do have the security assessment for click key cloak being presented. So if you're interested and learning what the outcomes of them look like, I definitely dial into that one. Okay, cool. I'll reach out over slack just the person who just answered me I only see your phone number so if you could just give you give me your name so I can reach out. Yes, this is, this is Robert for Calia, and I'm on the SEC assessment custodian. Unfortunately, I lost my zoom internet. So I have to dial back. Okay, Robert. Okay, great. Thanks. I'm like before you move on. You know, I'd like to jump in. It's I'd love to get your, your feedback on what we call our security assessment process given your background. This is much more lightweight and less technical than, you know, the traditional assessment process that you're going to go run something through technically it's a bit closer to a peer review and a sort of community, you know, gathering and assimilation of context. It's, you know, the mechanism in which, you know, here in the CNCF we have all these sort of member companies and member projects, and you know, they're going through their, you know, incubation and graduation process, you know, and it's our responsibility as the SIG responsible for security to have awareness and help them succeed in the CNCF process. So, you know, we call it an assessment.   I think that would be, you know, helpful in the long term, but absent a better suggestion, you know, were, you know, that's what it's called today. Yeah. Um, so that was one of the questions I had. Hi, this is Michelle Traberca and I've contributed to the cloud custodian assessment, but I feel a little, I've done assessments in the past and application security assessments. I mean, that's been my role in the past. And I'm a little uncomfortable with it being referred to as a security assessment. Because it the criteria isn't clear. And that's fine. I mean, you know, given the CNCF's role, but it's not really, I think it could be misinterpreted by being called a security assessment in that. I mean, that's a special thing. It has specific criteria. I don't want to be pissy about it, but No, it's a thing. My absolute. We've, we've constantly had the course correct and sort of You know, correct misunderstandings that folks have it because of the moniker. And, you know, it ultimately if we land on a better name.   We open you on this particular thing that way we can incorporate more folks in the discussion. There's not very many people on the call today. And I know that there are several individuals who are really involved in the existing assessment process that we have that would love this kind of feedback and a chance to engage in the conversation. So I don't know if Michelle that's you or someone else to start that issue, we can bring it up at maybe another meeting and highlight it as well as have the dialogue through the comments. Does that work for everyone. Plus one that yeah, create, create them as a GitHub issues that commenting on them, not on a slack channel so that the trail stays and then we'll be able to see the discussion. Yeah, and once the tickets created just drop a link to the ticket and the channel and that way everyone's aware of it. That would be great. So Michelle. Do you take the AI for creating that Wait, I work in finance. Does that put me on the hook for this is everybody going to be mad at me now.  No, we do. I mean, like, we argued about several of these things before. And it is a, it's one of the traits of this group that Nothing's personal. Yeah, my goodness. I understand that like the CNC upset, you know that groups hesitation and and I mean I totally get it but I think it can be misleading because you know having like participated in one. I mean I was a little bit I had a little bit of I was frozen. I'm like, Well, wait a second. Do you want me to security assessment because I can do that but that's not what this is reading like, I mean so Yeah, I, I don't even know how to. Okay, I'll try to come up with a coherent sentence about this. We actually have another ticket, kind of related to this because this was brought up in the past if you're not the only one to bring it up. To talk about how we could potentially take what it is that we're doing, and actually turn it into more of a lightweight friendlier actual assessment. We're going to track down what that issue number is, and what the status of that is and link them together, but you're not alone this is something that's been brought up in the past and something that we've talked about so I thank you for bringing it up. And I'm really happy that we're going to actually create an issue on it so that we can formalize the dialogue around it. Yeah, you know, just add a little bit additional context there we're right at the point. You know when we created this workflow and the processes around it. We set a goal to have five assessments complete before we sort of ratified it. We've completed that now and we're at the point of ratification. So now is the perfect time to go in and sort of tease out. All right, like what are we going to call this and how do we make this, you know, approachable to everybody. I think the thing that bothered me. And I don't see Kapil here but so I won't keep it a secret like I work at Capital One right and Cloud custodian came from Capital One and it I felt a little uncomfortable the separation of duties part of me felt really insincere and inauthentic in, you know, sort of self assessing, you know, and not being a third party and then I because I'm a big fan of the committees, a trail of bits work. I mean I like, like, I worship those guys I'm like, it's such a good body of work. And, you know, I'm like, so where that seems like a really radically different level of rigor, and, you know, I'm not calling out specifically as a custodian but I'm wondering, is there going to be a set of criteria is there like a level of, are there levels established based on, you know, criticality or something of the project, you know, I don't know but some I just feel like the process person I mean wants to see more specific criteria to sort of create a path of process flow for this, it just, it just felt a little informal to me and considering that people might see that and go, Oh, well it had a security assessment. You know, I'm sorry it's, it's a little, I don't mean to be Michelle you're fantastic. I'm sorry. In building open community that's, you know, entirely volunteer base.  While at the same time balancing, you know, formalization and processes when you have every expectation that, you know, folks may not be available and, you know, may completely go away.  And those need to be accommodating enough that, you know, the community members that are responsible for doing it feel accommodated and comfortable. So, you know, part of that is also formalizing. So, I think we're, we're at that point where we need to formalize it and, you know, someone with your expertise is going to be, you know, really important for us to be able to define that. Thank you, Michelle. Okay, I didn't want to come off blasé or overly critical. It is, but I think the second you go from an open source project to one that's sort of backed by an organization like this then the level of rigor, the requirements change. In my opinion but Yeah, Michelle mark here. One of the things that would be useful in the thread that that is referenced here in the chat is if you can talk about I'm not going to call them assessments I'm going to call it the opposite like interviews or, you know, a peer review kind of stuff that is, you know, about as far away from red teaming kind of black box testing that you might have, you know, some sharing about experiences like that that are more lightweight would be helpful in the past in the same context I've discussed the interview process that we do, which is a sort of a triage thing for projects that are in early stages. That's a pretty maybe too lightweight thing. So the other another approach is embedding knowledgeable people in the in the standups and in some relevant scrums or you can do it when there's certain checkpoints and releases so there's a big continuum there I think it's useful for us to all hear about some of the other lightweight approaches that are being taken, even if we don't pick one of those. So Zilla rapid risk assessment. That, that's one that I remember we utilize that as a framework when we didn't want to do a full threat model at another financial institution where it worked. And we translated that into an RTA rapid threat assessment but I'm, I'm sure people are. Is everyone familiar with that. The Mozilla are a casually.  You know, I'm an advocate for that but there's always going to be what boundary conditions around which you kind of want to have other informalities. You know, as security itself becomes more of an SDLC as we automate stuff. We're now authoring scripts whether they're chef scripts or test engineering scripts in the CI CD pipeline. These are now, it's not like we can stand off at a distance and just do black box testing and throw packets at software and really do a very good job at it so the landscape is shifting underneath us and this problem of finding an appropriate place on the continuum is, is a real challenge and doing it in open source kind of adds yet another wrinkle to this right. I don't know if Ash is on but when we went through the OPA assessment I will say they didn't have trailer bids but they had had that cure 53 do an assessment. But yet we still found an identified process and other issues in that in the SIG assessment so I think they're complimentary, but I agree the nomenclature is perhaps incorrect for what it is. Yeah, I'm sure Michelle knows this more deeply probably than I do but there's a real dangerous precedent set by the people who think of security as vulnerability scanning. It really does a disservice to the breadth of what needs to be done in any kind of assessment whether it's lightweight or, or red team depth and the frameworks are helpful for that so you're at least going through checklist like you this is shown in the efficacy of checklist in operating rooms for example. So I, although we've debated in this venue, the value of checklist I think there is a reason to do that in opposition to the vulnerability scanning approach that's generally taken in this space. So I think a lot of this is going to be more theoretical work and more sort of soft work, if you will, relating to maybe more like threat modeling because it's outside of an operational environment right so you can't. So we are going to be focused in my opinion on business logic. You know, the implementation approach, not so much in an environment where you might utilize techniques like that. Yeah, try to get this into thread Emily. Yeah, definitely. Like, as everyone can tell this is a, this is a good topic and it's something that we've been discussing in the past and is especially relevant like Dan said as we as we come up on that time frame where we really need to start formalizing these processes. So, Michelle, if you could go ahead and create that issue, and definitely tag a few of us in it if you think that we've said something here that you would need. So if you could go ahead and create that issue, feel free to go ahead and tag us. I've linked the other issue about a hands on assessment within within the chat here it's issue number 394. I'll cross link that once you post what the new issue is. Anybody have anything else to add. Okay, um, I didn't see anything else on the agenda for the day and I think everybody's given their updates. Any last words. Don't go away Dan. I get to escape. Last words we love Dan. Thanks everyone. It's been great and I look forward to sharing some of the sort of unique takes the, you know, the last decade have, you know, taught me in terms of bringing things forward to standardization and where we are collectively as organizations looking for, you know, standards and sort of the right middle grounds. I'm going to, you know, be taking some passes that you know changing some of the dynamics around that. And hopefully it's interesting. Well, thanks everybody for joining today. Thank you Dan for serving as co chair. As always, check out this slack channels and Mark's going to drop that thread about the GitHub security question that he posted earlier. Michelle is going to work on that new issue for changing what we're calling our assessments to be more accurate and reflective of what the actual process is. And if I missed anything, check out the notes, which are linked through our repo. That's everything. Have a wonderful day everyone. Thanks everybody. Thank you.