Come on back here this Tuesday post trader stock edition here. And great to see everybody actually this go around. Let me get the webcam up inside the live trading room at least. There we go. Great to see Leda, great to see Grant, Norman, all of us rejoining us perhaps inside the cyber trading room. Great to see all of you there. Great to see all of us back on social media, Facebook live and YouTube.  I ended up just finishing up my home office here. So I ended up doing trader stock earlier this morning. Now keep in mind, I had made mention of this from yesterday. That was conducted on YouTube exclusively. So if you had missed out on our trader stock workshop this morning, if you're not a part of our trading room, go right to our YouTube channel, youtube.com forward slash cyber trading you and you'll find that recording right there at the top. Probably like most recent recording. Traders talk recording right there. So with that in mind, great to see all of us rejoining us inside the live trading room here. Ron, Lewis and Kathleen included. Pretty interesting, right? The first test of a major resistance, especially for as much as Fubo ran up. False break. That's exactly what we talked about. In traders talk what, three hours ago? So that's where I say more often than not for as much as a stock like Fubo or anything, Bed Bath Beyond obviously we'll get to. You know, for any stock that makes this big of a squeeze, this big of a run and Fubo up already 66 plus percent from the morning. The first test of resistance at eight. That was it. Complete false breakout. It's actually a shortable stock on trade stations today.  So right now either way is a long or short, whether we get the higher low or the lower low later on. We're gonna put this Fubo trade just on our watch list here to begin. Now with that in mind, there's a bunch of other things moving right now folks. So let's hop right to it. A couple of trades that I am currently locked in on right now, Bed Bath Beyond. We just talked about that extensively in traders talk earlier this morning. So again, if you'd missed out, even if you're inside the live trading room, that will be on the student portal later on just in a couple of hours. We'll pull that recording right from YouTube as well. And again, you can just otherwise go right to our YouTube channel. I believe that's already up there. But Bed Bath Beyond, the star of the day, it's only Tuesday, but this will be the star of the week, probably perhaps even the star of the month by the end of August. So obviously this thing's been on such a tear lately. I am in on this trade right now from price 2586. It was close to getting stopped out break even off this last little shake back down. So I'm very happy to see it squeeze back up one more time. Listen, it's more of a, not to say gamble, but more of a hope that this will look to continue to push up and break above that big top at 28. For as much as it ran up, it wouldn't shock me to see this slam right back down. My stop is set on this trade. I'm also not doing this on a thousand shares. It's on a half size position here for this Bed Bath Beyond. So, you know, needless to be said, we'll definitely follow this here for the afternoon. My stop is right at my entry price and like five cents under it. You have the stop and the limit on the stop limit order. All right, so Bed Bath Beyond, big mover from today. A stock that ended up moving up really well heading into the early afternoon. Listen, if you're here and you're at your desk, then you should always be scanning, right? And then you're joking around like ABC, always be closing, ABS, always be scanning. So with that, after Bed Bath Beyond finished up its run, I'm just looking around on my level four, my book map and this couldn't have been better times. Again, we talked about this to an extent in traders talk this morning.  You're watching your level four screen. You could see it pretty clearly. So if the stars could align, it could lead to a fantastic move. Keyword is always if, but right here, I saw the AMC trade literally at the point before it exploded. It was squeezing back above a level right off of 24.85. So at the time I jumped in, it's a half-sized position. Up, Bed Bath Beyond. Uh-oh, I just saw that happen right away. We'll get to Bed Bath Beyond in just one moment folks, but obviously with that in mind, AMC made a pretty good move here. I may as well just jump out at this stage on AMC. If Bed Bath Beyond is shaken down as nasty as that is, I just jumped out at market, got the hell out. I don't know what's happening here altogether, but Bed Bath Beyond like right now completely just got crushed. You never know what's gonna happen during these meetings folks. I'm always transparent with you, I cut it straight. So unfortunately I got stopped out break even on Bed Bath right here, but with that I'm expecting AMC and other meme stock to make a similar type of move. So that's why I jumped ship on my AMC live right now in front of you. Listen, they're both volatile enough to keep an eye on here for this afternoon. If you're looking for one more run, we have plenty of time. We got like less than an hour and a half, but just about an hour and a half to go, like 85 minutes before the close. That is more than enough time to see a higher low from this point and then another run back up. So just given the volatility, I don't mind slipping the AMC trade on our watch list. We're gonna keep Bed Bath Beyond on our list even though both are dropping off right now. Better to fold the deck before the deck folds you. So with that in mind, oh my God, Bed Bath is getting clobbered. Are you kidding me? Let me just check the news right now. Let me check Benzinga Pro. It could just be mass distribution of shares. Maybe the meme run is over for today just naturally. Is it news related though? We got our good old buddy Jim Cramer saying it's a well-orchestrated short squeeze which obviously is the case just looking at the parabolic run. Karen says no news, just hype. Lewis says a great retrace. Yeah, that's for sure. Holy smokes. This thing just got halted. This Bed Bath Beyond trade just got halted right now. I'm so happy I got out. Woo, all right folks. That turned some hairs gray. That puts some hairs on the chest. With that in mind, let's see what we could put on our main watch list alongside these stocks. Hey, we're gonna keep these on our list. They're obviously better shorts. It seems like at this stage. So don't look to try and catch the following knife. Is all I'll say there. A stock that unfortunately I missed out on greatly. The Capital G, G-Box ended up making this pop right over my level at 185. And I was there. I just tried being too much of a perfectionist and I tried getting filled right at the perfect price. From there it ended up moving up without me. So I ended up missing this giant run on the G-Box trade. Now what goes up comes back down. We can't short this thing. So this one's done for here at this stage. Another stock that I guess we were late for. This one popped up quite fast. But the BBIG trade, I was really hopeful to see this break above resistance off of 137. And then from there for it to make its real run up higher, perhaps even up close towards two. Well, that was heading into the mid afternoon here. It was so close. So close. And I was about it. I wanted it so bad, but just didn't give me the opportunity for the run up. And at that point ended up pulling back. So maybe later today, maybe tomorrow, I'm not a fan of Mabies. So I'm gonna pass on this stock for right now. Fubo, geez. Yeah, this took quite the hit. Right around the same time as AMC Bed Bath Beyond there. Again, that's already on our list. We're not gonna take it off now at this point, but see what else we could add. See if there's anything that didn't tank or drop off just yet. ARTL not looking too appetizing. Spy for as much as the markets have pushed up today. Once again, we are getting a bit of a pullback here collectively. See if that could be a good short afternoon folks. Kirk Kirklands. We ended up seeing this make a big squeeze earlier today too. I told you to keep your eyes out on this stock. I didn't know when it would be, but just given how much this stock ended up dropping over the last year at this point, we saw a lot of volume get traded on this thing. I think it was back from Thursday or Friday last week. I think it was Thursday here. I was just saying keep it on your side list maybe for some time this week. And obviously this thing flew right away after the market opened up. Ended up running up from four upwards towards 650. It is shortable. It is shortable, easy to borrow on my platform. Hopefully it's shortable if you're not on trade station because making lower highs looks like it just broke down below a dip point here, little lower low, at least compared to what we had at two o'clock. So Kirklands, I don't mind slipping on our main list here either more as a short at this stage at the IONQ. This one hasn't tanked yet. This one's holding pretty damn strong now near the highs. So yeah, I mean easy to say we're gonna put this on our watch list. This will be featured near the top of our list here given everything else is kind of tanked although they're tradable. This thing is holding strong. So yeah, we'll focus on this IONQ stock, not really much of an iceberg order on the ask acting as resistance.  I doubt I can go back on the tape that far. I can't. All right, let's hop over to level three here, the matrix just to see where that volume got filled. It's even tough to tell from this point, 8.10 maybe, 8.15 maybe, definitely not near the highs right now. So it doesn't seem as if there's like a real iceberg resistance showing. I would assume 8.50 to be your next major resistance as it just held right under there a moment ago. Oops, there we go. Let me zoom out on this daily chart. Looks like this thing bottomed out back in October last year off of like seven. So it popped above seven earlier today and then ran. So that's what allowed this to make such a good move. Perhaps the last dip point here, right around like nine bucks, probably a little bit higher than nine. So should it break above 8.50 here? Wouldn't shock me to see nine or nine and change, maybe like 9.15-ish as your next major daily chart level. So IONQ we'll put on our list here, looks good. Just looking at my other screen right now with like Bed Bath Beyond and AMC. Like Bed Bath is still halted on the way down. That's ugly. Sky Tea Trade, little choppy ran up earlier but not a whole lot to adhere. Let me keep it going. We'll skim through here pretty quickly folks. Current time right now at 2.41. We're making good use of time. Blue Apron, another short squeeze candidate. You could say a meme stock to a small degree not to the extent of AMC or Bed Bath or GameStop for that matter. Blue Apron had a nice little move today. Big shake just now off the highs. So seemingly timed alongside the AMC and Bed Bath drops. And you could say collectively with the market perhaps but let's see what else we could find. NU, this was pretty strong throughout the majority of the day. It hasn't technically broken lower yet, right? I mean lower highs, it's more likely to have a lower low looking at this but it hasn't broken lower truly yet. So NU still is pretty tradable in my eye. I don't mind putting this on our main list at all and especially if it holds here and runs back up. So it looks good. Just moved to Florida, right? So I don't have like a Brita filter in my fridge yet. Obviously you see a little water here, my famous water bottle. But yeah, Florida water doesn't taste too nice. I learned that the hard way. So with that, we had to run out to Walmart midday. Get me a nice 35 pack. So with that, let's see what else we could find. Express, another meme stock. It was like slow, not a whole lot to that at least there. OSTK, this had a pretty good push earlier this morning. This was I guess one of the meme stocks back in the beginning of 20 with the others. It made a nice little pop earlier today. It's just got a thin book so I'm not as particular about that if we don't have a great need to put this on our watch list. Unless if this was at the high still, I'm not gonna be as keen to follow it. Same with Rev. All right folks, let's hop on over to the loser's list here. See if there's anything looking just as good, if not better. And with that, let's start off with Hall. Down 38%, it is flat. That's dead, move on. SMFR, same deal.   Unless if it's down enough like BTCM is 41%, it's like a cheapie below a dollar anyway. I'm not gonna be as particular. Maybe I'll look at SFVD, flat, dead. All right, folks, not a whole lot from the loser's side here. Here's Bloom. And actually I skipped over Bloom when I was doing the morning meeting for In-Replace of Fausto. I said I was gonna get to it and I just didn't. So this actually dropped off quite nicely after the market opened up, led to a nice retracement up, but then it held 28 right back down. It's tradable. This is a tradable stock and it's squeezing back up to a degree now. So I'm not as, I would rather hold near the lows here at this stage, but it's tradable. I don't mind slipping this just on the bottom of our watch list for right now here in case if it holds 27 as resistance and then the drop off later on. All right, folks, let me know if there's anything else up down left right more than 5%. We're gonna start off with Leda on SFIX Stitch Fix. It's up over 21%. I guess I missed this. Ended up dropping off at the same time as the others here just when we started the meeting. So it's hard to not follow this, right? I mean, I hope I don't say that for every other stock we look at, we're gonna have like a 20 stock watch list, but Stitch Fix, very tradable, meaning great liquidity. It's right within our price range and it's pretty damn close to the highs. So yeah, it looks good. SIGA from Andre. This has been a very good stock for us to follow. Mainly as a day trade. Last week or so is a swing trade. It's been choppy as a day trade of late, but I love what Andre's calling out here because this is right at the lows. It's shortable. It's not squeezing up like that bloom is so far. Yeah, as a day trade, as I short here into the afternoon, SIGA. Nice, Andre, it looks good. Really nice one. Ron saying, bed-bath beyond open. So I appreciate him shouting that out much earlier. That was at 242 Eastern, but if the beth already on our watch list, I would only assume for that to drop off a little bit more before it maybe potentially squeezes back up, you know what I mean? So I would be very mindful of support off of not even at 22 for bed-bath beyond, which that is the next level technically, but, and as I literally say that, it just crashed below 22. I would be more keen to watch 20. Watch 20 is a major support level first on bed-bath beyond. And then from there, if it breaks that, we might come back to 18 full circle. 18 was a major historical resistance that we were watching yesterday and into this morning. So I'm looking for 20 first on this as support. If it breaks that, go as low as 18. All right, folks. I think that just about wraps it up for any one of us on social media, if you spoke live YouTube, definitely let me know if there's anything that I'd missed. Again, for those of us on YouTube, go right to our YouTube channel, forward slash cyber trading you, if you're not already there. And we just conducted our weekly trader stock workshop. We normally do that inside our live trading room. We'd normally have to pay to be a member there to watch that recording, but otherwise we post that on our YouTube channel just a moment ago. So make sure you go there if you haven't watched that video just yet. For those that attended live, I appreciate you guys, you folks attending and participating. We'll try and do that in like a few more months from now, maybe at the end of the year. All right, but otherwise for all of us inside the live trading room, again, Rich will be on the mic from three to four. I'm gonna be on a coaching call with one of our students up until 3.30. You might catch me from 3.30 to the close, but if not, it's been a pretty good day today. So I have no need to trade. I'm gonna pack it in otherwise after 3.30, I believe.  And I look forward to seeing everyone back at the top of tomorrow morning at nine o'clock. Talk to you soon, folks, take care. Come a cyber group member today. Just click the link below and receive all these amazing products and a world of knowledge for just $9. Do it today.


All right, as you guys know, I was totally not ready to give this talk today. You saw me running make to actually prepare my slides out here on the podium. I miscounted. I am going to talk about the current state of SELINX as released in H. I'm going to talk about the different SELINX policies that there are. And I was going to stop there, but we released H in better shape than I had hoped for when I first gave this abstract for the talk. And there's very little for me to say here. So I'm going to change the scope of the talk and talk about what we ought to be doing for Leni and beyond. Okay, let's see if I've got this thing compiled right, in which case. We shipped H with SELINX installed by default in the base, but not enabled. So if somebody wanted to take a base H machine and convert it into a force thing mode SELINX box, it is very easy to do so. In fact, Russell Coker gave a talk about SELINX on edge in five minutes or less, and he demonstrated on the podium how easy it was to do so. I am not daring enough to try that. There is a wiki page, and somewhere in the next few slides, I think, I've got the URL. It's wiki.win.org slash SELINX setup, which leads you through the steps required to turn on SELINX H installed. Okay, before I go on, I don't think this is the way it is supposed to work. Okay, so the first thing that I'm going to talk about is what are the types of SELINX policies? In the beginning, they were just the example policy. This is what the NSA supplied us. It was supposed to be just an example that the rest of us were supposed to modify and enhance and bring to the distributions. But as is usual in the case of free software projects, everybody just kind of fed back patches and nobody took up the task of forking the SELINX policy and taking it away from the NSA. The policy, however, was strict in the sense that NSA shipped a stuff that said everything is denied by default. You don't provide a policy. The machine doesn't even boot up because in it is not authorized to do the kinds of things that in it tries to do when you invoke it. Red Hat when they tried to ship SELINX found that their customers, the most frequently asked question to date for Fedora is how does one turn off SELINX? So they started off and said that okay, we are going to have a policy that doesn't try to control everything but only controls targeted servers. What are the most vulnerable points on any machine? It's the software that faces the internet. Any software that faces the internet or has to get input from untrusted users in order to operate. So they said that okay, we will constrain those targeted servers and let everything else go free. So we got targeted policy. The NSA was not very happy with this because everything was still based on the example policy and they have better things to do than to participate in the flame wars that are part and parcel of any free software project. Hey, just look at us or look at policy or private in the last few months and you'll know what I mean. So the next thing that came up was and what we are working on now is reference policy. This again comes in the strict and targeted flavors, but it is totally different from the NSA policy and it was designed to be the testing grounds of innovation and changes in which security policies implemented. The first thing that people did for reference policy was make it modular. Think of it like as a Linux policy somewhat like the Linux kernel. There is a core set of operations that you need to control and then there are optional modules that you may or may not want to plug in depending on what your machine does. The reason you don't want to have one giant policy that you load all the time is well, first of all, it's not that flexible. It's not easy to replace parts of policy with something you have written locally. And secondly, it takes up a lot of kernel memory. I mean, the SELinux policy essentially creates a bunch of two-dimensional tables and the more instructions that, the more rules you have in the policy, the larger the size of in-memory kernel tables. And well, now that we've got modular policy, more or less where we want it to be as far as features that is concerned. It's not complete in coverage. They basically, I think, we only cover well the packages that you get with Red Hat Enterprise Linux, which is a far cry short of the 10,000 or so source packages that we ship now. I haven't been keeping up. It was 9,000 or so about a year ago. Anyone know what it is now? The source packages that we have in Lening? Hey, come on, guys. There should just be one quick Google or app cache search. Well, while we are waiting for people to come up with the answer, if you have two different policies and only one of which is being used, inevitably there's going to be drift. So the policy that is used less, the strict policy, is liable to fall into disrepair. And actually, that is the policy that we want to push in the long term. I'm not going to go into this talk why we should be running strict policy. I talked about it last year and I'll be happy to convince anybody who dares come up with me at offline about why this shouldn't be running a wide open machine. Why is there so little audience participation right now? Oh, I forgot. Lunch. Ah, yes. We don't want the policies to diverge. So what the current move is to create one policy, which will effectively be the strict policy, and create one loadable module called unconstrained, which goes back and changes the strict policy into targeted policy. So anybody who feels like running just the targeted policy requires to load one extra module and conversely just unload that module to go back to running strict. Given that, I would like to move us in learning closer to being able to go to a salient by default. So what is it that constrains users who want to run a salient next? There are a few prerequisites. RazorFS, for example, doesn't fully support atomic rights of attributes, which means we cannot run a salient next on a machine that's using RazorFS because we can't label the objects on the file system. Nobody that runs a salient next that I know about runs XM as well. Me, I still run Sendmail. I learned Sendmail.cf back in the 80s. I spent a lot of blood, sweat, and tears learning Sendmail.cf. I'm not going to give it up anytime soon. Hey, I still know 8086 assembly. None of the new fangled ones yet. So if you want to use XM, you would either have to find somebody who knows SELinux policies and writes one for you, or you need to figure it out yourself, or go post-fix. Limont is out here in the audience. I'm sure he'll be happy to help any site transition to post-fix. So I mentioned that there are some tweaks that are required to enable SELinux. And those fall into three major segments. One is authentication. Sure, SELinux is available and installed and ready to go, but it's still got to tell things like login and SSH and XDM and WDM and so on, that when somebody logs in a new session is started, that session gets the proper security ID that will be used by SELinux from that point on. The way SELinux policies are constructed is like there is a subject, which is usually a process, and gets a security domain based on who the person is, who is logged in, or in special targeted cases like Apache. Apache always starts running in the Apache security domain. And then there is an object, which is usually some kind of structure like a file directly socket. And then there are actions that you can do. Subject can do stuff to object. In order for the subject to be properly classified, you need to tell it who you are when you're logged in. There are a bunch of cron jobs that do things that are not exactly security conscious. For example, we back up shadow and gshadow, which means cron needs to be able to read and write shadow files, which is not really what I want to do. So we can handle this by putting the backup job in its own security domain and giving the read security files, shadow files, capability only to that one executable. Nobody has done that yet, so the advice is to just not back it up or back it up manually or live dangerously and not worry about shadow files. There is also locate, which runs fine all over the fine file system, which means the locate binary needs to be able to read every single file on your system, which gives security people the nightmares. Again, that is a suggestive to disable that. There are other miscellaneous things like slash ETC, MOTD is regenerated at boot up. I guess we could write a special binary and security policy to allow you to do that. Frankly, I don't really have that much new going on every time I boot up, so I just replace it with a static file, which can be labeled. Devs.static is a nightmare again because nobody has written policy for it and you need to recreate everything for slash dev in there. Then there are also, I'm sorry, I'm getting lots of mail while static PTYs. If your PTY remains persistently, it changes ownership, so it has to be labeled every time it does so, which is a pain, and Debian has supported dynamic PTY since Lord knows when. So your advice to remove all the static PTYs so the system doesn't use it by mistake. The URL at the bottom is a pointer to a shell script that uses a dev bootstrap to create a local file system for you and makes all the changes that are mentioned on the Wiki page. So if you just wanted to create a new file system for a new Zen or UML virtual machine or for a Chirrut jail running a Selenax, you can just use that script and all the five minutes of TDM hacking around configuration files using VI. This is, once you've made those changes, I'm not going to re-throw all of this. This is on the Wiki. This is the sequence of steps you need to do to get Selenax running. After installing the packages, you re-label your file system so it has the proper security labels. You edit grub.conf. I just added an other option so I have, for every kernel I install, I have three lines in grub. One is the normal, one is recovery, and the third is the Selenax option that allows me to boot in Selenax mode. Re-labeling is one of the most expensive parts, and this is what takes up most of your five minutes trying to get Selenax running. Are there any questions or should I just gallop through this so that we can get out to lunch as fast as we can? Okay. All this that we have been doing has been targeted policy because it was too difficult, still it's too difficult to get things running in strict policy because, really, apart from a few Selenax developers, I don't think anybody anywhere ever runs strict policy so far. Even the red hat stuff is just targeted. The good news is, after you make a few mods about Cron trying to back up shadow and stuff which will be disallowed even by targeted policy, target with policy essentially runs out the box with Edge. There have been lots of reports about people running servers on Edge with targeted policy in forcing mode and I really see no reason why anybody should be running any server and not run at least the targeted policy. It doesn't cost you... It might cost you 2% to 3% slowdown as compared to something which is not running Selenax but the kind of security, the kind of... The ability to sleep at night is probably what the 3% hit. If you are really that close to your performance requirements, I strongly suggest you update the hardware because by now every six months you get more than what a Selenax hit is going to be. Okay, so if you want to run strict policy you should run with auditing turn on. Recently some kind of soul packaged and uploaded the audit package into SID which saved me the trouble of having to go out and package it and I've been meaning to do so for a couple of years now. And then the minute we start running strict policy you boot up, you'll get a gazillion error messages and essentially you just run something called audit to allow which grabs all the error messages that you have been getting and spits out a local module, a policy module that you can load into your running policy. It's usually a good idea to take a look at what it has spit out because some of those things that allow you really don't want to allow in that case you just tell it that don't allow it but stop yelling at me about why you are not allowing it. So just silently drop this request. And this is all it takes. There are essentially four command line commands that you have to run to take any Selenax system run it on strict policy, grab all the error messages that has generated and make them go away one way or the other. So at this point I think I'm done with the original premise for the talk. So how much time do I have left? I'm sorry my eyes aren't what they used to be. Oh my, I've got lots of time. Okay, so future plans. What do we need to do to support stable? I have acquired a login on the back port service machine and I intend to back port the current tool chain for Selenax and the reference policies back to edge. And I also am committing to do all the security updates as required for the Selenax packages. I'm hoping that I will inspire loads and loads of you to immediately jump out and go and grab a Selenax and start running it but I can see about five people in the audience who are fast asleep so maybe I'm not getting the message across as well as I thought I would. We do need help with people running the strict policy even if they don't run it in enforcing mode if you send me back the errors for your configuration I'll be able to create policy patches that will make a Selenax strict work on your machines. So as long as people tell me send me all the AVC denied messages out of war log messages or wherever I promise to put in the work to make a Selenax work on your box. Is that incentive or what? Now this is where I am going to run into a bit of pushback probably from the installer and the release teams. I'm trying to make it a personal release goal a personal release goal to have a Selenax better integrated into learning to make it possible for somebody to start from the get go tell the installer that I want a Selenax box and have it happen. As I said the most expensive part of getting a Selenax run on your box is really labeling the entire file system so that every single file has the proper security labels. The reason is that right now the installer does not label your file system as it is being installed. So you have got to go through that expensive step. If however we can make minute changes to the installer without compromising the ability to install Debian on any machine then it would be far easier to just have people optionally start off the Selenax machine in either targeted or sick policy in enforcing mode. What do we need to do for that? First of all from the Selenax side we need to be able to update a machine's security policy somewhat similar to how we already update the software packages. Something which is aware of the mapping between Debian package names and a Selenax policy module name. Something which is aware of not only the software package dependencies but also about policy dependencies. For the most part you don't have to worry about it because the policy dependencies more or less follow the package dependencies but there are a couple of exceptions and we need to make sure that when you say update my Selenax policy it should be able to look at the packages you installed figure out what policy modules you need in order to have those packages actually work figure out what the dependent policy modules are and then go out and load those policy modules into your running policy. We currently do this only during the post-inst of the Selenax policies. Next we need to have the policy for a particular package say Apache. You want to have the policy for Apache loaded before you tell the package to install the package because when the package is being unpacked the system needs to know what the security label, the initial security label of that file has to be. Ian Jackson has created a whole bunch of triggers for the package. He specifically left out the pre-inst trigger which is exactly what you would need for this to happen. So I guess one of the things that has to be done is after Ian's trigger code gets into the package somebody has to go in and hack the package to add the pre-inst trigger if for nothing else for the security policy to do. Yes. A pre-inst trigger in the way that Manoj is suggesting is fundamentally incompatible with the point of triggers which is to delay processing. So I think maybe Manoj and I should talk about this outside the session. Right. Technically and conceptually there is no reason why we can't have pre-inst triggers. Yes, there is. All right, maybe we should take this off but it might be incompatible with the way that the triggers have currently been coded so maybe I should call it something else. All I need is the deep package consult a list of something or the other that says that before this package is loaded you've got to run that one particular load policy for the package command. And the reason I say that this is not impossible is because I do have a hack deep package that does that for me. So faced with a running example of a deep package it's kind of hard for me to stomach the claim that what I'm doing is not possible to do. My way is hackish. I would like to improve the way it is done but there shouldn't be any technical obstacles to this. One of the reasons to do this is right now all SLNX policy is one package even though we don't install all the policy modules into the running kernel we don't load all the modules we do ship them along with the reference policy package and I think this is the way it should be at this point because both SLNX and the reference policy are rapidly moving. For example we have just included the ability to label network nodes and to have end-to-end security so not only can you say that I want my application to only talk to clients coming from such and such a security domain so I can say that my server on this machine should only talk to clients coming from nodes that have been labelled or company confidential high nodes that means they are not... I'm not talking to the internet and on those nodes I should only be talking to a process that is in the accounting domain so you then set up your company so that your finance service oriented architecture is only accessible for people in the accounting department running on their official machines and from nowhere else. These kind of changes coming so fast and furious it is not reasonable to expect every maintainer out there to keep track of what the policy syntax du jour is so it still makes sense to have one common policy package but post-LENI I'm hoping that SLNX would stabilize to the point where all these well everybody would be running SLNX by then of course you would be shipping SLNX by default post-LENI and therefore it would be reasonable I see France giving me the dirty look and it would be reasonable to ship policy off to the maintainers themselves too so you have a new... you change the behaviour of the package you modify the SLNX policy that ships with it and somehow we manage to get deep packets to install the policy before the package is installed hey I've got three years to think about that I'm sure I'll come up with something next I would like to have the WN installer label the base file system so this isn't really very expensive but you should be able to do this without compromising the rest of the WN installer and it would save a lot of effort on the part of people trying to run a SLNX system along with that if you can add an optional question early in the install process asking... I'm hoping before task cell asking whether you want a SLNX machine or not and based on that you load the policy before you load any other packages we ship the policy anyway if the file system is labeled loading the SLNX reference policy will be fast and finally we modify the grub configuration file to add a SLNX option like I showed in a few slides back and I think I'm ready and waiting for the audience participation now nobody wants to talk about it could you grab the mic please you said yourself that in Fedora most of the desktop users switch SLNX off because they have also lots of problems do you think it makes sense for Debian to enable it also for desktop computers or only for servers? Do you think the targeted policy is suitable for a desktop? They are Fedora, we are Debian we do things better and yes? I mean the problem is if the users the not so knowledgeable users have all sorts of subtle problems that don't know where they come from most people will trim it off Debian should never ship in a form that ordinary users have problems running the released software so no I don't think we are going to be shipping Debian in a form that users have to ask how to shut SLNX off again I said we are not Fedora so you think it can be made fool I absolutely think it is feasible to run a targeted policy on a desktop system we are not there yet but Lenny is two years off and if I can get enough of you guys to help me with just sending me what doesn't work on your desktop machine it doesn't take much to fix the policy so things don't blow up in your face I think we can do it So I have rather a dissenting view as Manoj already knows and probably now there isn't really there is enough time to go into this but I've worked in the computer security field for probably a couple of decades now and I'm very much unconvinced that SLNX is the proper solution to any real security problem the main difficulty with it as has been demonstrated by Manoj's presentation is that it is extremely complex and complexity is pretty much always the enemy of security and the effort that we're putting into making SLNX work properly and not break might very well be better spent in some other way almost any other way so I just wanted to make that point I'm sure Manoj and I can discuss this in the bar later I would like to remind people that way back when even before my time back in the 1920s electric motors were up front and in your face there were all kinds of there were torque equations there was number of coils and you took a squirrel cage motor and you had four or five knobs you tweaked in order to get your electric motor running at the optimal torque load levels now you turn on the microwave there are three electric motors in there and you don't even know how many there are or how they work until now running SLNX has been like tweaking the five or six knobs in order to get the motor going right what I'm looking for is in the next two years we take the electric motor from a squirrel cage motor with six knobs to that motor in the back of your SLNX of your Debian box and you never even think about until it tells you that somebody tried to hack into your system and it was prevented I didn't mean to shut off the conversation I think I can probably speak for a lot of us we're pretty ignorant about SLNX we hear these terms policy and we don't know exactly what it means when you say a policy on a file does that mean an executable file and the policy says that it can do what? okay firstly I think I've got two minutes left and there are people who are hungry I don't think I can go into this right now secondly I'm out of time secondly is there any talk after this? I think we're breaking for lunch so even though the video feed might be shut off I'm willing to stand around for questions the next thing is I gave a little talk on SLNX and tried to cover what SLNX is and the policies and what it does I'll be happy to regurgitate this over lunch or well that's probably not a good choice of words I am here through the week so just grab me anytime and maybe we can grab an empty box time frame and I'll be happy to talk about SLNX what it means how much effort it would be for the Joe's sys admin to run on their machine Steve? yeah my question was you mentioned that you wanted to have the SLNX policy installed prior to doing any of the package configuration and I was wondering why that's a speed advantage in terms of why it's preferable to do that before the package is there a speed advantage to doing that before the packages are installed or is it a security issue where you want to make sure your full installation is done under the SLNX context? there's a security issue and that has to do with labeling the file system the reason we need to label the file system as I said there is a subject that does stuff to object what the subject is the security domain of the subject depends on two things either the person who is running the process or the security label attached to the process for example if you run an HTTP server we don't want it to be running under the security domain of the sys admin we want it to be running at the HTTP server domain in order to apply the security domain to user bin Apache 2 deep package has to know that user bin Apache 2 needs to get a security label that says it is an HTTP domain that is there mentioned there in the Apache policy module deep package knows already how to read the policy in order to label the files correctly as it is being unpacked but if it is a policy that is not in the running policy deep package won't know how to label it so that's why we want to have the policy installed before we unpack we could even I could hack around this by having a run say in aptitude or whatever the front end is you look at the packages that are going to be installed you run this one script giving it all the package name that is going to be installed it will do the policy load even before deep package starts loading anything which is one way of implementing my PLEANS trigger which doesn't even touch deep package code so there is a amazing amount of really interesting things that package post install scripts in particular and package maintainer scripts in general do and well the answer to most of that to like 80% of that is well don't do that a lot of it is there for weird reasons and that my understanding is that's posed a bit of an issue for figuring out how to write policies for letting packages get installed because the post in proceeds to go off and do various things that the policy may not expect it to be even looking at I know it's a very vague question but I've heard that as a rumor floating around so maybe you can either debunk that or address that alright two things firstly when you're installing packages we are running in our own security domain we are running in apt underscore T or deep package underscore T domains so the kinds of things that these domains already do is extensive so if somebody has managed to corrupt or replace your aptitude or deep package by a Trojan you are in a boatload of trouble anyway I think that so far I haven't encountered anything which is fundamentally unsurmountable there are some packages which do stuff for which I have to write more security policy but if these are things that we decide the package needs to do the security policy is what needs to be changed not the package itself if we find that this is stuff that the package shouldn't be doing whether or not you're running a C Linux then that's the security hole and which is presumably a release critical bug so I don't think that a C Linux introduces anything new or different in that domain I hope nobody is susceptible to epilepsy in here anything else alright I guess we break for food


This is St. Tech, Hawaii. Community matters here. My name is Ray Tsuchiyama, your host for another rate show business in Hawaii. In the mood for the holiday season, I'm wearing my Christmas shirt that has a date here, 1987. That was the year I got married. And I feel good that I can still fit in there. Our guest today is in the business of managing, leading, running the state of Hawaii in a statewide role as lieutenant governor. His name is Josh Green, and for years he represented West Hawaii in the Kona area. And now, after a long and active campaign season, he has been elected and inaugurated as the 14th lieutenant governor in the history of the state of Hawaii. And the first one, Jimmy Kealoha became lieutenant governor in 1959, which is probably before you were born. I was born in the 70s. So welcome to the show, lieutenant governor. I appreciate it. Now, you were also a host on St. Tech, Hawaii in the past. Yes. I had a two-year stint, and I absolutely loved it. I ran a program called Healthcare in Hawaii, which was very gratifying. I spoke to all the health leaders I could find in the state, and some of them were also social scientists and leaders in that way. So that was very informative for me, and it was a way for me to kind of keep in touch with people who had other leadership perspectives on healthcare.  Yes. You were a doctor, and you were in the ER area. Yes.  That means that what? Well, I'll always be a doctor. So I expect that most of the medical work I do now will be more of the pro bono variety, where I work at shelters, we're starting some homeless shelters that have a heavy dose of healthcare associated with them. I think we'll talk about that. Yes. It's going to be a priority for me. There's a lot of volunteerism that I like to do, and I might peek into an ER from time to time. But it's really important to me to be able to use that perspective, which I've had all along. When I first came to Hawaii many years ago, I came with the National Health Corps, and I was responsible right out of the gate for 8,000 individuals to be their doctor. And it was that perspective that helped me to fall in love with Hawaii and also to get a glimpse into the challenges that we have. And I've used that window or that perspective all these years to inform how I participate as a legislator and now as a lieutenant governor. Now talking about Hawaii to state, you have gone from representing a local area on the island of Hawaii. And during the campaign, you visited a lot of people from Hanalei to Hilo and beyond, all that. And of course, you've come into the role with a neighbor island perspective. Any of the lieutenant governors in the past did not have that. Now coming in, what those being from the neighbor islands and bringing those perspectives and of course, talking to all those people, not only Oahu, what does that bring to your strategy or priorities in the lieutenant governor's role? That's actually a very good question and an excellent thing to discuss. For one, I'm a team member now and I'm a team member of Governor Ige who I'm very fond of and who has been very kind to me and my family. Governor is an Oahu-based leader and we serve for six years together as senators. But it's always the perspective of where you come from, which often matters most. So all those years in the trenches on the big island and spend a lot of time on Maui help me to better understand the more rural challenges that we have. Healthcare access is twice worse on the neighbor islands. We often don't have any services whatsoever in certain areas, whether they're some social services that aren't in a region or drug treatment, which isn't in a region, or access to trauma services like we have here on Oahu. So I'm very familiar with the additional needs we have. And then we have some interesting one-offs, for instance, the volcano, which when it went off and Madame Pele kind of showed us all what she's about, that impacted us tremendously and dramatically on big islands. So I hope that I can really compliment the governor as a neighbor island lieutenant governor. I hope that I can continue to go back. I'm actually scheduled to go back four or five times in the first six weeks just by sheer happenstance. I'm going to speak at the graduation in Hilo on this Saturday, and I'm going to speak at some conferences on Maui coming up. I'm going to attend a funeral for a dear friend's mom and spend time with the community that I grew to love in Hilo, which is where my in-laws are. So I'm going to keep going back just very routinely, because I don't want to lose touch, number one, with the priorities. And two, I think it's good to have that perspective in one of the two executives. Well, that's terrific. And I think we were talking before that Jimmy K. O'Loha, the first lieutenant governor, came from the island of Hawaii. And also Nelson Doi was born on the big island also. So there are connections. But the rest were all waffle-centric in this way. And so I think you bring a tremendous compliment to Governor Ike, who to me is a person of the new suburbs, the new democratic demographic center of Oahu in Pro City. And so it is a symbol of where Oahu is also going in many ways. Coming back to your campaign, who would you say really you went too often for advice and that person gave you really good insights about connecting with the community, with people, and strategy? Well, I had a great team, actually. I took a lot of friendly advice from some of the allies of Senator Schatz, who Brian appropriately needed to stay neutral in the election. But he recruited me to run for the state house back in the day when I first ran and helped me be successful then. So he's always been excellent with me. And he's a former leader of the company himself. Exactly. And so he and others were able to provide a lot of good advice. I have friends from my youth that participated in my campaign. And I had a lot of family input, too. I have a know-it-all dad and mom who are great. And I've got a son and daughter, Maya and Sam, who like to give me instructions, too. But my campaign, I had an advisor in Dr. Miskovich, who's a physician colleague, and we share a lot of same ideas. The way I approach campaigns, however, is I spend an incredible amount of time in direct personal contact on foot with people. I know a lot of people saw our ads with the family and me working in some homeless centers of Hawaii and doing that kind of work. But I spent, well, I spent eight months or so walking door to door. And I went over 25,000 pounds individually.  There's no question. They have very, very little impact on me because I treated 50,000 people in the big island over the years. And the margin of the election was one there. I went to 25,000 homes on Oahu. I met people in person. People were very gracious. I'm sure many of them didn't vote for me because I had great opponents. But they got to know me. And it's those kind of things that I rely on in campaigns. But I didn't campaign for more than a couple days on the neighbor islands. And I did well there because I actually worked there. And I actually cared for people there. And I think that goes a lot further than the campaign methods of today. That's terrific. And going back to what you just mentioned, and I think it's a tremendous highlight in the Chinatown community, the clinic. And we have a friend, a mutual friend in Anthony, Monathong Di, who also grew up in Kalihi, like myself, with a refugee background, as we know, a tremendous guy. Tell me how that kind of evolved as a concept and execution and where it's going. Well, I just love that. And in many ways, that's been a signature part of my life. Had I not ended up prevailing in the election, I would have helped them run those clinics. And I still will as a volunteer. What happened with the Chinatown Clinic, which is a free clinic for anyone to go to but is predominantly people by homeless individuals and patients is we started a concept called the H4, and it's growing terrifically. H4 stands for hygiene, acute health care, medical respite, which is another health care, and then housing. And the goal is, whether it's in one building, which we ultimately hope to do on Kuhili Street, or in separate segments and then have housing elsewhere, to provide services so that individuals who normally would get thick in conflicts who are homeless and normally have to use ambulance for $1,050 and 1,600 bucks to the ER and so on. And that raises insurance for everybody. It does. The average spend is $4,350 for an encounter if you're homeless in health care, you go to the hospital. We decided that we would raise money from the private sector, very generous donors like Islands Hospice and HMSA and Queens and friends. They fund this program and it hires Andy and we paint rooms with this money and buy medical beds and such and free medicines. We see somebody cost 20 bucks, 25 bucks maybe, which we don't worry about billing. We worry about caring for someone, we save thousands. And so in the run up to starting the larger facility, which we hope will start this year, we had an opportunity because the fire fighters, the guys that take care of a lot of individuals in our streets. And the police said, we have this space here, we'd love to actually start delivering some care. Within 17 days, we opened up that clinic. And now we save over $105,000 every week of Medicaid money for our taxpayers because instead of those $4,000 days in the system and 30% of all patients going to Queens were homeless, we now are decreasing that dramatically, we're taking care of people in a different setting. So that's a great ratio of cutting down costs through the number of visits to ER. That's the killer right there. We had a guy who won 241 times last year and he spent over $1.2 million. So it's hard. But can this be a template for very localized clinics in other places? Yes, I hope to do six as Lieutenant Governor and provide services all across the state. I would guess we'll do at least three on Oahu and probably one in three other locales. I think there'll certainly be need on Big Island, Hawaii seems to have need in Maui. And wherever there's any population center at all, if we can offer services, we will. Sometimes we'll just kind of airlift services in and help a couple days a week. Maybe in a mobile way, maybe through our volunteers. We do pay people quite well when we have professionals. A lot of social work support so that people can get from their healthcare need to housing if at all possible, or from their healthcare need to drug treatment. These are the challenges that we have. And it's actually, my Lieutenant Governor's initiative is going to be very focused on this nexus between the economic component of homelessness, the mental healthcare component, and the addiction component. And when you find that center circle in the middle where they all overlap, that's where you'll see me. We'll get back to the looming priorities of the Lieutenant Governor's role after this break. This is Think Tech Hawaii, raising public awareness.  I love music. That's how we do it. If you're not in control of how you see yourself, then who is? Live above the influence. I'm Jay Fidel of Think Tech. Come around every Tuesday at 2 p.m. With John, David, Ann and me, we're talking about history, history lens, right, John? Exactly. Seeing current events through the lens of the past. Absolutely. See you next time. Okay, Jay, thanks. Welcome back to this holiday edition of Business in Hawaii. We have Lieutenant Governor Josh Green on my left. And we're talking about his initiatives. The focused one in Chinatown, and now we're going to be going in a larger scope. What would be some of the big priorities for the state through the Lieutenant Governor's office? Or what is their opportunities for partnerships with the private sector? Opportunities really to lay the foundation for a longer term. You just can't solve problems tomorrow in one day. But there could be a foundation, a strategy. What would the top three be? Well, thank you for that question. I'll preface it by saying this. People have thought that Lieutenant Governorship can't be useful. Well, that is not true at all. We know that each of the Lieutenant Governors has picked something to do. But I do intend to make this an extremely dynamic position. And I'll use my medical background to inform what I do. Governor Egan, I've spoken several times. He's really been very generous with me. The first one is to address chronic homelessness. And I don't mean that specifically because homelessness, when it's an individual that flies in, 11% of our homeless come and go from other states, is not the greatest challenge that we face. It's those who have, at the same instance, addiction, mental illness, and homelessness, where they're very high utilizations of services, they're suffering greatly, they're family suffering greatly, we need to help them. So as a physician, Lieutenant Governor, I will be in the streets taking care of our individuals. I'm carving out my Wednesdays to specifically be hands-on with patients and people to find out what's their greatest challenge, to help them directly, which I think will be something that has never been seen before here in Hawaii. So that's one. So the chronic homeless challenge. But there has to be a pathway to legislation or programs and so forth. Correct. Not one-on-one. Of course, one-on-one is great. Yes. I'm larger, I guess, dealing with the problem. Yes. And to that end, and we mentioned this just a little bit before the break, I hope to open six clinics in public-private partnerships. We have the Ohana Zones designation, which the legislature, which I was a part of last year, designated $30 million to work on this problem. And that, combined with the private sector individuals that I work with and the excellent partners we already have at IHS, Connie Mitchell, Heather Lusk at Chow Project and all the other individuals who are terrific, the police and fire leadership. These are my partners, though everyone we welcome as partners, because a lot of people, for instance, a lot of nurses and doctors have asked to volunteer already. A lot of individuals who suffered drug addiction and were homeless themselves are asking to come as volunteers or even be hired to work on these projects. So I'll be using my H4 nonprofit model, which I'm now separated from as Lieutenant Governor, and those allies to help, plus the clout that I hope to bring as Lieutenant Governor. So it has to right, have legs, it has to be a 20-year plan, which is what it will be. I'm already in discussions with some of the leadership at Ohana, it will be very worthwhile. The council members have been excellent. All of them have brought something to the table, each in their own way and each... So it's a broad-based initiative, that's what you're telling me. And it's a broad society-based challenge. You know, one point, sorry, 3.6% of our Medicaid dollars, which is a $2 billion budget, are spent on, 3.6% of our people spend 61% of the budget. So that's about 13,000 to 14,000 people are consuming $1.2 billion. And that means it's a problem for all of us economically. That's correct. And it's a big problem. It's tax dollars. It's tax dollars. People who work and have to take care of the families and pay taxes. Those 13 individuals who are suffering and not doing well are consuming the better part of 15% of our entire state budget. So this is a place that's valuable for me to work on. It will be a job training program as well, which should help a lot of people get prepared to actually be in society. And so that's my primary initiative. Governor and I also spoke about the Medicare and Medicaid problems that we have and providing healthcare to those who are in that space and all of us, the physician shortage or the healthcare provider shortage, I will lead on that as well. Interestingly that's not quite as hard as the homeless crisis because that's a matter of putting the right enticements into place, the right landscape to bring nurse practitioners, physician assistants, doctors, psychologists, nurses' aides, community care workers, community health workers. All these individuals to Hawaii, which you can do through loan repayment incentives like I did, which brought me to Hawaii to work in Kau. So there are ways to attract them, you just have to execute very well on them. A question, John A. Burns Medical School at UH, how is that part of the puzzle? It's critically important and Jaros Hedges is a great dean and a great leader. His challenge is that the size of it is constrained. Size of the class? Of the school? Of the school? Of the school? Of the school? Of the school? Of the school? Of the school? We train about 66 people per year and there may be some capacity increase slightly, okay, but four year programs that are very expensive and to attract people based on the infrastructure you have is very hard at the med school. We could also expand the residency program some, but that is just small increments of increase. We have to actually attract doctors and nurses or expand our scope of practice for people like we did when I was a legislator. We let nurse practitioners become full tilt primary care providers. For the good, provide prescriptions for example. Prescriptions, mammograms, order advanced tests, usually in partnership with physicians sometimes independently. We'll need to do something similar for physician assistants, much easier to attract individuals who only had to have two years of training rather than essentially seven, four years of medical school. We'll expand responsibilities and scope of work. That's the world and that's what's happening and people are becoming more savvy consumers. There's a lot more people on the internet. Millennials don't want to see a doctor. They want to see their iPhone, right? They get all the medical advice through Google, which is not good. Not ideal, not good. But in the future they will be able to see someone in a telehealth capacity very quickly. Senator Schatz is a great leader on that issue for instance and I tried to follow. So leveraging technology, VR, AR, all kinds of applications. Absolutely. We could do a program where myself and perhaps a medical colleague could spend a half hour addressing all diabetics in the state of Hawaii and they could tune in. We could bring patients in. You could get your health care essentially through that kind of thing and you could have tens of thousands of people getting health care in a half hour. I mean, this is the kind of innovation that could occur. You still need some testing. You might need some physical exam, but a lot of it is education. So the world's changing. I like to tell people and I think you, because you're interested in politics, will find this interesting. The first campaign when I was on foot in 2004, it took me seven months to see the 7,000 voters. Okay? 7,000. That's not a large figure. No, it's not. Now. Cali is 43,000 people. Exactly. And that's how many people voted in the primary, right? So seven months to pursue that office, state house. Now flash forward 14 years. In 2018, it took me seven seconds to reach 700,000 people and across the entire state through social media and advertising and so on. I mean, things have changed that much and so a lot of things will change in health care and hopefully strategies for homelessness, which I'm becoming an expert at. I will also be working a great deal on the opioid crisis. That's another one. What bad is it? Bad. Compared to... It's not as bad at all as it is in regions like West Virginia and Pennsylvania. That's really bad. There's ground zero. That's where some whole communities are being wiped out. We have the lowest rate of prescriptions for opioids per physician to patients, lower than any other state in the country, which is great. This is good. It's great. But if you flip it and you look at it through a different lens, we also have, like most states, more individuals that died from opioid overdose than died in car accidents. And so it's quite tragic per year. So when you look at it in those terms, these are preventable deaths. We've done a lot. We passed legislation where people can get the naloxone, the reversal of the opioid medicine. We got other things going. For instance, we passed legislation to observe and have every healthcare provider check whether their patient got prescribed a lot of opioids in the previous weeks, months and days. So that decreases by about 50% of use. But there's a lot more to do. So that's the patient monitoring, right? Yeah, the patient PDMP, the patient drug monitoring program. And so it's bad enough because every time it's a teenager that we lose, it's a heartbreak for everyone, for a generation. And we noticed that, for instance, we found that half of all pills that are prescribed are consumed by someone other than the recipient of the prescription, 50%. So that tells me that we have at least 50% too many pills in circulation. Not rocket science, after all, I'm a legislator formally. You can't expect a lot of extra cerebral activity from me, right? So I think that there are things that we can do and that I'll do, but it takes work one by one. It takes, that's why I'm emphasizing that to lead by example a little bit on Wednesdays. Is it isolated or is it, you talk about the whole community, but are these opioid challenged people all over the place in many, many communities? They are. It crosses all socioeconomic boundaries. There is about a three-fold higher incidence in people who are extremely poor. A lot of that time, though, that's because they've been in a life of physical labor and so they have broken bones and bad knees and shoulders and backs. So it's hard. So it's hard for me to characterize one group versus another, but it's everywhere. Sometimes it's particularly bad in isolated communities like Kauai, where there at one point was a pill mill or a doctor that prescribed way too much. To me, it's kind of a rural area, but of course, West Virginia is very rural. Rural areas often are hard to take. It's in parallel, yes. Because what happens is if people who are addicted to pills, it goes both ways, and they can't get the prescription, then they take heroin and then they have a much harder core addiction and then they might take methamphetamine, which is very rural often, and it's created synthetically. It's created by poor communities, and it's very bad. So these problems, churn, is why I got involved in politics in the first place. I saw some traumas of individuals, little babies, two little babies that one died and one survived after trauma, both because they were neglected and weren't cared for by their parents who were in drugs. And so I thought maybe we better have a focus on drug treatment. Drugs have impact on families and in literature who are innocent to all this. And entire communities in turn, because that child who was one year old probably had 300 people at his first birthday party. And so you can imagine what that means when we lose that child. So the issues of drug addiction, trauma, and suffering in my mind are the bellwether issues for a society. If we can do better, I can't solve those problems, but if we can do a lot better, our society then knows that we've done better. And when I'm speaking to my more conservative friends, it really pays dividends. In other ways, it pays economic dividends, tourism improves, our healthcare system isn't as burdened, our families aren't tragically struck, which we all, Democrat or Republican or whatever, conservative, liberal, black, white, we all feel the same way about our loved ones. So it's very important that I focus on that issue and that I use my medical background to help with partners. And it's important that people understand that that's the perspective I come from. I will be happy to talk politics with anybody and all of those things that they bring up from time to time. But I became a physician lieutenant governor probably the day I graduated from medical school, because I knew I wanted to have a larger impact. It was unlikely it was gonna be in Hawaii. It was unlikely it would be this specific office, but it was gonna be something that focused on the social needs of society. So what I'm getting is that you're continuing passion. You're continuing passion that has propelled you in your career, into this role of the governor. And I think that's fantastic, you're hitting the ground running. That's another metaphor. Anything you'll miss from the legislature as we close down on the shop today? No, not just yet. There's some good people there, a lot of good people, and I still see them. So my door is open to everybody in the community from the legislature, from the governor's office across the hall. And I'm enjoying an increased capacity. Already a group from when I reached out to me, they were about to lose all their capacity to provide home care. I'm solving that problem with them in the real time. When drug treatment programs may or may not have enough funding, I'll find them funds and I'll fight for them. And then we'll start these initiatives. So hopefully I'll have a good impact and hopefully I'll stay focused on these tasks at hand because it's going to take a consistent focus. A lot of legs on the ground, boots on the ground and so forth. But I would love to have you in one year and in December of 2019. And we can go over what happened, what didn't happen, and kind of see where the next year will go. Can you promise me that? Of course. Okay. Thank you so much. Lieutenant Governor Josh Green on business in Hawaii. This is Ray Tuchilla. Thank you, Ray.