Welcome to Access a Trader, the number one community for those who are committed to taking control of their trading in order to achieve success, profitability, and longevity. Thank you for joining us. Here's Dan Shapiro to help you find your edge, master your process, and own your future. Hey guys, good evening everybody. Welcome to another edition of the AccessaTrader.com Nightly Wrap Up Show. Hope everybody is doing well. So indexes continue to slide back. Again, the big deal kind of over the weekend obviously was the digestion of the reality that we got rejected off the 50 day moving average on Friday. Yesterday, if you watched last night's video, we talked about the first close below the five and the 20 day moving average, which basically led the 10 day, which again is the birth of the trade, kind of the last line of defense. Before we get literally to the last line of defense. And if you watched last night's video, we said, look, if we could confirm the 10 day moving average, we should get a slide into that 284 level. And that's exactly what happened today. You saw the 10 day moving average break that 288 line. It traded into the 284. And again, if you're a bull, again, like I said last night, I wish I could paint you a better picture. But you know, if we get a close tomorrow below 284 on the Qs, you can see it for yourself. I mean, if you have eyes, you can see it for yourself where your next measure potential is is all the way to the bottom of this chart here. So the bulls did a great job last week. They got there and they're right when they're about to cross the finish line. They just literally dropped. It's like you ever see those bloopers when the receiver is running into the end zone. He starts celebrating and he puts the bull, the bull down right before he crosses the end zone. That's exactly what the bulls did. Again, it kind of reassures us once again, we are still in this bear market until we reclaim the 50 day moving average is going to do so. Of course, you're going to see some days that are strong. You're going to see several days that are strong. But the moral of the story is technical analysis has given you a pretty clear picture of what should happen next. And the next day, what you're doing is just waiting for that confirmation. That's what we did today here. We had some pivots. Tesla continues to be really, really good. Today, we saw some pretty aggressive put buying early in the morning in Amazon, a lot of weakness in Amazon. NLW really set the tone today. Usually, it's not a name that I cover or even talk about, but it really left a pretty big dent in the software space. And you looked around like 10, 11 o'clock and you're like, wait a minute. Is Microsoft really down? You turn around and you're like, is Microsoft really down seven, eight, nine points? Yeah, absolutely. I mean, it really is an incredible ripple of what happens when there is softness and weakness in the sector. And even a maybe a less known name like NLW might not be part of your everyday vocabulary. But all these stocks and all these companies are swimming in the same pool. And when you look at Microsoft for tomorrow, man, this thing is literally right at the bottom of the road. Right at the bottom of the range here. If this thing gets, you know, if this thing gaps up tomorrow and gets rejected and starts building below this channel here. Man, look at that. Man, there's like another $12, $13 worth of room to the downside. A lot of room. Tesla, we talked about last night on the video. Again, first close below that 10 day moving average, really engulfed two days worth of buying. And today, it established a pretty decent range. Nicely, you know, the pretty good pivot in the morning.  It's literally sitting here right above like hanging on to support. If this thing starts confirming down again, which room you have, you have put 60 points of downsides. Same thing with Amazon, although not as aggressive as maybe some of the point totals that you could possibly get in some other names. Just because again, it's 20 times less expensive with 20 times more shares. The point is you're seeing the same amount, the same kind of, you know, the same kind of pattern. I don't want to call it pattern, but kind of the same kind of scenario play out here. And you're seeing that pretty much all through tech, no matter what it is. The highlight today, and if it wasn't for Boeing today, Boeing was up 10 points today, then the Dow was down what? 200 today. If it wasn't for Boeing being up 10, you know, where would the Dow be? Right? I mean, you know, Boeing has a pretty heavy weight on the Dow. So if it wasn't for Boeing being up 10, the Dow wouldn't have been down, you know, down only 200. It would have been down 500. Now, obviously the NASDAQ would have been intensified as well. So that's kind of where we are. And going into tomorrow, you're just following this organic kind of piece by piece of the puzzle and see where we have next. And like I said a few minutes ago, this is going to be it. I mean, this is for the bulls. This is it. 284, either sink or swim. I mean, we either hold that 284 and start rallying back reclaiming today's highs or we close below 284. And you know, here's your future, right? The 270 area, which was basically the low from June the 16th. And that's going to be pretty, pretty clean because there's no other support in between 284 and 270. So that's it.  Again, like we've been saying just in the last several days, know your levels, right? You know, again, if you're buying stocks as the NASDAQ is confirming below 284 tomorrow, just say it's not the market makers. It's not, you know, it's not algorithms. You're buying stock as the market is technically about to incur damage. Again, there is no man, you know, with the vell behind the vell velvet curtain pulling ropes. It's understanding, basically technical analysis. And that's why it was the same thing. It's like somebody going out and screaming. That was the bottom. That was the bottom. That was the bottom as they were buying stock into the 50 day moving average getting rejected on the queue. So again, technical analysis works. It's not there to guide you. It's not there to trick you.  It's there to guide you. So you have an opinion that you could live with financially based on information, not based on emotion that we talk about constantly day in and day out and going into tomorrow's session. Yeah. I mean, you know, again, how can you not like names coming down? I like Microsoft. It confirms. I like Tesla. If it confirms NLW, if there's any type of gap up, it's going to get stuffed into supply for a second day move back to the downside. Names, for example, like Amazon, they were coming in short term 105 puts.  So there's, you know, some pretty good value for tomorrow. Meta had an inside day. If you guys remember yesterday, I had a pretty big move down. There was a big buyer that came today. A buyer came in today with 2000 of the August 145 puts with $1.5 million worth of premium. It's going to be probably tagged into cover earnings. But you know, this thing put in an inside day. This thing confirms the bottom of this channel here for tomorrow. I mean, why can't this thing, you know, go down six, seven, eight, nine points to the bottom of the area here? So we're set up. You know, we're set up here. Look, is it possible we rally and every day was possibly rally. Again, keep this in mind. Stocks moving up is not the same thing as stocks moving higher for the market to go higher. We need to at least forget about the 50 day. Okay. That's three days ago. We need at least to get above today's highs. Can we do that? Right. If we can't do that, we're going to continue to bleed. You're going to see continuation of the downside action. And if the leaders start popping, you know, getting losing their bids like, you know, Amazon, excuse me, not Amazon, like Apple today was pretty strong. So if the Apple starts losing, you know, starts losing its area of strength and all these stocks continue, they're selling pressure from the previous days ranges. You're just going to have more bleeding. And again, tomorrow, guys, just keep that number in mind. 284 over, we're okay. 284 under, not so much. Guys, have a great night. God bless everybody. Sometimes again, you got to keep it short and sweet. Let me just go through the pivots today really, really quickly. I just forgot to do that. Tesla, you know, Tesla, I forgot about today's pivots. Tesla, again, I gave a pretty good, you know, pretty good look on Tesla's game plan. They came in for the 680, 70, 680 and 670 weekly puts. 700 was yesterday's low. 696 was July 7th's low. Big areas need to confirm. 690, you know, is the pre-market low held three times. You know, it broke below, traded all the way down to 685. Definitely the move of the day. This one I lost like 40, like 43 cents shop. Weekly, 30 weeklies came in yesterday. 32 of the builds below can flush. Only went down like 25 cents, nothing there. On the video, 150, 38, if it builds below can flush. Here is the video. Right, so it took out that 50, 38. I traded down into the 148. It's not a big move, right? Not a big move, but again, square I still like. Didn't confirm today. And I said, hey, just in case if we rally, it came close, but didn't rally into that level there. NVIDIA next stop. Tesla 680, 670 weekly puts. Listen, what do you say? It's such a great stock. Really, really good every single day. And I believe that is it, right? I believe everybody, that's it. So that's it, right? Also, Q's lost 288 and traded all the way down to 284 today, which we talked about in last night's video. And now we're talking about 284, big, big level going all the way down for a potential 270 push for the bears. That's it. That's it, guys. Have a great night. God bless. Stay happy. Stay smiling. Stay healthy. And I'll see you all tomorrow. Take care.


Thank you for the introduction. It's good to see all of you here. I'm right before the lunch break So I'll try to be as quick as possible How many of you here use a database server? Okay, that's pretty much all of you. Okay. That's good. How many use my esquial of MariaDB? Okay postgres MongoDB Something else well I can't hear anyway Good to see all of you here I currently work at Pricona for the I've been there for almost two years and before that I was on the founding team of MariaDB server which is fairly popular it's got over 12 million users now and before that I was at this company called MySQL and We we made MySQL and we sold the company to Sun and I've also been involved with other open-source projects and if you're wondering where I come from I come from Malaysia and Today of all days. I'm extremely proud to be in Malaysia because we love you government These slides will be released under creative commons So you can get them. Also, it should be Quite verbose that if you download them later, you can try pretty much everything fairly easily by copying and pasting in theory So Let's talk a little bit about attack vectors and what we're what the focus of today's talk really is about I'm gonna focus a lot about external attack vectors where you know, you may have trust based authentication turned on People grab your passwords or your authentication method gets broken into things like network snooping and or spoofing theft of a physical server I put physical in italics largely because maybe a lot of you use the cloud as well But you know, you could also get stuff stolen from cloud server And also how we protect yourself against administrators. So, you know earlier we've heard examples of admins that leave who get annoyed maybe you fire your sys admin or Or if you come from the internet from a long time ago, the famous term is the bofh So maybe you've got an admin that's a bofh and I can't probably say that out loud But I'm sure you know how to find out what it means What we won't focus so much about today is permissions, right? So permissions in the mysql world is like brands That it's very hard to master grants, but I highly recommend you to master it So you don't grant all on everything to everybody Obviously can't cover SQL injection. There are plenty of frameworks out there that you could use to Figure out why you shouldn't have SQL injections in your code Your application itself might be vulnerable So, you know, not to pick on WordPress, but you know, it powers nearly 30% of the internet If you don't update WordPress, you may get broken into sometimes and it may happen at the most inconvenient times like, you know Right after Christmas right before New Year's So turn on automatic updates, maybe now, of course operating system vulnerabilities where possible you should always obviously update your OS Naturally this talk is also very Linux centric because I don't know anyone around the production database on Microsoft Windows Probably you don't either So let's let's give you attack vectors from a much higher level before we go down into the weeds So trust base security Postgres calls this trust authentication and you can enable this for local connections as well as external connections in theory and this actually happens via socket authentication and you can find this fairly easily when you When you start up the server and you can configure this in your PG HBA con MariaDB server also provides this by default authentication via unique socket and MySQL called the socket peer credential authentication now In MariaDB server, it's turned on by default Why do you think this is probably not a good thing? Largely, this also means that if your operating system user Manages to get broken into so let's say you've created a database user and the password for that The Linux password for that has been leaked somehow and that person manages to log in that but now that person also Manages to access your database So trust base security is probably not a good thing to have as a default Actually, it's easy to get started. So when you install MariaDB server, it's awesome You don't have to enter a password, but it's not something you want to run in production When it comes to password snooping In Postgres, you know, it's stored basically is MD5 But you've also got the ability to have these scrams char256 now Which will actually avoid the risk of duplicate solves being replayed It's highly recommended that you use scrams char256 If you're not already doing that and if you're following the development around Postgres 11 You'll realize that they've also got channel channel binding coming Which will allow your authentication to be very similar to certificate-based authentication going forward In MySQL today, you want to use the caching char256 password So I'm very proudly wearing a MySQL 8 t-shirt today Would have thought that I'd actually put on something with an orca logo on it But MySQL 8 got released maybe two weeks ago as a generally available release It's it's got a lot of security features baked in it's highly recommended you you try it and I'm gonna talk quite extensively about how it's made security better And in MariaDB server, there's this thing called added25519 Which is similar but not the same Created by Daniel J. Bernstein and it's not turned on by default, but it's highly recommended you do And we'll talk about why MySQL native password is Not secure anymore because it basically uses Sha one double Sha ones When it comes to password attacks, this could be a weak password like test123 or ABCDEFG I'm sure you know many of you have got users that do this The other one is reusing old passwords. So many Many compliance, I don't know what it's like in India for compliance But overseas you have things like HIPAA and so forth that you know force you to have compliance and I think the biggest deal now maybe is the EU GDPR and One way to protect against Compliance is they tell you to change your password every 90 days or something. I personally hate that If I have already got a good password fire password manager, but it turns out that you know many to follow compliance you have to reuse old passwords and People tend to well you don't want to use old passwords You have to change passwords and then people tend to reuse old passwords So you need to track changes of passwords that have been changed And then of course this brute force password attacks So you can actually have the ability to increase the time before someone logs it logs in So if you get a failed authentication three times, maybe you time it out by say a minute and another three times five minutes another three times you lock that down and by far the best in terms of Preventing password attacks is mysql8. It's really got a lot beyond weak passwords as well as reusing old passwords Three DB server can definitely help you against weak passwords postgres itself. It doesn't have anything Built-in so far, but you can use external authentication like LDAP SSPI SSPI is another nice way of saying active directory and or Kerberos right GSS API and MongoDB also has external authentication By LDAP but only available either in the MongoDB Enterprise Edition Which you pay some money for or persona server for MongoDB, which you get free as persona makes all the software open source network operations When you connect to your database server You want to connect in you know Plain text or you want to make sure you're doing it over as a cell You definitely want to do it over as a cell if you're replicating you definitely want to do it over as a cell A lot of people tend to say oh Every time I make it a connection with SSL. It's it gets really expensive Not true. The overheads are definitely not as bad as you think You never ever want to replicate in plain text in the cloud now replication by default tends to be in plain text So you definitely want to turn SSL on you don't only want to prefer or require SSL, right? You want to also make sure that you're verifying the certificate of that Authority to make sure that this is so we actually talking to I've got a bunch of references here, and I also talked a little bit about using a proxy called the proxy SQL so bunch of references where you can get some pretty graphs now Basically in 2017 You will actually notice that there is Yazzle as well as open SSL So Yazzle is a is a SL library now also commonly known as Wolf SSL Previously it was known Something else to keeps on renaming itself every few years There's also open SSL with the fairly famous library In fact, most modern my SQLs you get today are fully based on Against open SSL and you realize that the connection time is actually not not very high the latency with having Cell is not bad, especially once it gets cash Also, if you end up using something like a proxy Like proxy SQL to manage your large amounts of servers You can really leverage the time reduction to complete say 10,000 connections even So it's a huge boost So most large-scale deployments tend to always have a proxy between the application servers and the database It comes to data theft You can obviously encrypt your entire disk which makes a lot of sense Postgres has column encryption, which is kind of nice. A lot of people ask for this inside of my SQL as well So you could you know, you wanted to saw credit card detail you could in theory and that column and Both MariaDB server as well as my SQL have at rest table encryption Which means you can encrypt everything and you can use an entire you can use an external key server for this Now data theft is kind of interesting right because it's such that if it's encrypted If someone got access to your server, but not your keys and you did a minus QL dump for example You can't you get encrypted data, which is useless to most people now I can think of many examples of of how this is it's been bad So, you know, we've had many breakings like the Philippine voter data of 55 million people You know end up being released. We've seen Every time a patreon gets broken into and that involves people's credit card numbers getting stolen That's this website for cheating on your partner that you know That also got broken into and all the data gets put on the internet now if they only had encryption it turns out that Well, you you have a nice big dump of data that you can't do much much with unless you have the key to decrypt the data Now we can focus a little bit more on on my SQL is something I've spent an access of a decade working on So I'm not going to cover all the older my SQLs. I mean maybe some of you are still using my SQL 50 or 51 I'd be surprised if anyone said they were still using 323 In fact with my SQL 8 being released 5756 get supported and 55 is like really on the really on the end of life I'm not going to talk about my skill enterprise edition because you got to pay money for that There's of course Bacona server for my SQL which is a drop-in replacement for my SQL This MariaDB server which is a branch or well now a fork of my SQL And we'll cover basically 55 right up to the 10-3 I'm going to talk to you a little bit about synchronous replication solutions like Galera group replication The X protocol is extremely new which allows you to query my SQL with a new port But you can replace instead of querying my SQL with SQL you can query it with Python Or you can query it with a JavaScript like language So if you were thinking hey I'd like no SQL query methods that's that's the X protocol I won't cover NDB cluster because not many people use it So SQL is a standard but extremely difficult for you to get the standards document for free But you can find it on various FTP sites When you use my SQL or MariaDB or Bacona server very interchangeable Unless I specify it's only for one server You can do something like select added global SQL mode And you will actually find that as my SQL progresses it becomes stricter So all the things you managed to do before because my SQL wasn't SQL standards compliant May stop working when you start upgrading my SQL so it's extremely important to read upgrading guides My SQL keeps on getting better in terms of security And you can see how long it has taken to actually get better So it's actually been an over 15 year journey to get better And I joined the journey around the time when we were able to get drop user and show privileges Before that before 323 you couldn't grant users certain you couldn't grant users privileges Things like show create user which allows you to see what privileges the user has It's actually useful because if you did grant all you can now change it Roles extremely handy because pretty much every database server out there has SQL standard roles But they only came to my SQL officially two weeks ago and in MariaDB I considered useful when default role came out So you could actually assign a default role to users Otherwise you'd have to create roles every time My SQL user table has changed So if you've written scripts that basically select against the host user password You realize that since 5.7 it was removed However it is still present in MariaDB So that's where things start to diverge So if you're a very large user of my SQL where you also play around with MariaDB and my SQL So your scripts now have to become much smarter to do if depth If I detect my SQL I have a different query pattern If I detect MariaDB I have a different query pattern And there's a document that compares server 10.2 and 5.7 So password for example replaced by authentication string and you note which is down here Whereas authentication string also did exist here So that's how it's updated These are pretty normal Also new When was your password last changed? Kind of handy What's the lifetime of the password in this case? It's null but you can set it to say 90 days By when 5.7 first came out the default lifetime was six months Of course you create a default role Things like max statement time will allow you to time out a statement And if the account is locked or not And of course in 8.0 this becomes even longer So it's well worth noting that you could study this And how things progress When it comes to security features by version It was McAfee that first came up with an audit plugin And audit is extremely important Now you want to definitely always be able to know what your users are doing Including your administrators MySQL 5.5 which has been around for an extremely long time Now it came out in 2009 As plugable authentication And MariaDB 5.2 back-forced with it as well It allowed you to have the ability to have a proxy user So it happened to use things like open stack So a lot of people nowadays either deploy their own cloud Say via something like open stack Or they use cloud services And having proxy users is handy Because it allows the ability for you to do administrative tasks But at the same time not have access to the user schema Things like audit and PAM authentication plugins arrive 5.6 actually gives you things like encrypted client credentials That you can save inside your home directory The SHA-26 password finally arrived which is very useful Things like password expiry Also having a random password upon startup Very useful 5.7 made things a little harder upon installation Because you'd have to actually grep for the root password inside the log files You can also of course do things like expiry of passwords You can also lock and unlock user accounts If someone leaves the company You can just lock the account You'd have to delete the user 8.0 brought things like roles Further MySQL user table changes MariaDB of course at that point in time has already diverged as a fork So you still have a different set of roles in 10.0 You can also have at rest table and or table space encryption Highly recommended the table space One very unique thing is the AWS Key Management plugin Which we'll talk about a little later You can also have user limits User limits are present already in MySQL beforehand Dona server brings on the utility user Again tied very closely to the proxy user The super read-only option Which allows you to perform automatic failovers Without allowing the super user also to write the database by accident So when it comes to installation 3.5.7 no passwords 5.7 would give you an expired random password And eventually even the ability for an anonymous user to exist Was removed from the MySQL default installation Now what it means is there's no password It means when you type MySQL you can log in automatically And most people don't like to change their defaults This is why you'll see occasional news reports saying N MySQL servers hacked But you don't see them so often nowadays You see more like N MongoDB servers hacked Because the MongoDB defaults are also meant to be easy But you know upon progression things will get better So how are passwords stored inside of MySQL? Well here for one notice that the plugins Plugin column is not actually displaying anything However in 5.6 you'll actually notice that something called MySQL native password is specified And also now of course the authoring is still not now 5.7 changes this by the fact that you don't even select the password field anymore So here I did select host user password Here I'm doing select host user plugin authoring And passwords replaced by authentication strings And it turns out that you can actually see it here And in 8.0 you'll notice that the plugin has changed From MySQL native password to caching SHA2 password Caching SHA2 password is now the default in MySQL 8 MySQL 5.7 also provides the ability for you to have a minimum password policy So you can set it to low, medium or high And then if you give a fairly easy password it will tell you that you can't use it It also allows you to check So if you wanted to validate if a user's got a good password You could validate a password like for example in this case I use Protona Which gives you 25 and Protona 123 is 100 It ranges from 0 right up to 100 And again Protona 123 works when the validate password policy is set to low You should probably not set it to low, you could set it to medium, you could set it to high MySQL native password format which is deprecated in 5.7 and removed in 8.0 Is definitely not some form of encryption because it's just a checksum using the SHA1 function So contrary to the MySQL manual which will tell you that encryption performed by password is one way not reversible This is not true, MySQL passwords do not use a salt So a generated password on one MySQL server using MySQL native password will match that on another So this is why you definitely don't want to do things like select password as password So things get better over time but this has been the way it's been for many many years So you obviously want to make sure that the root user always has a password You don't want anonymous users and I'll tell you why anonymous users are bad probably on the next slide You never ever want to have the test database And the best part is MySQL made it super easy now So you run MySQL secure installation when you have 8.0 It will actually make sure that even the valid password plugin is turned on by default So by default things get better and it hardens it by just running a one line command So why anonymous users are bad? If I can log in as an anonymous user and I can access the test table I can keep on doing inserts and basically fill your disk So I can just be an annoying destructive person This is just one example of why anonymous users on the test database are bad So 5.6 starts improving password policy And it's important to start around 5.6 because many of you may be using MariaDB And missing out on what MySQL has been improving in 5.6, 5.7 and then 8 Because many of these things only exist in MySQL now For one, password expiry works this way You could also have a password validation plugin which is turned on The configuration editor is great if you're going to be doing scripting And of course having a random root password on install Password expiration will allow you to change passwords back to historical value And this is basically what you'd get in 5.6 But you can track password changes in 8.0 now So you can't actually change it back to historical password value And the bonus is you can in configuration say I'd like to track the last two passwords I'd like to track the last n passwords 5.7 definitely improves the password expiry Because you have an automatic password lifetime that can be set You can also require one to change password every n days You can also have extended SQL around expiration As well as the account locking and unlocking In terms of MariaDB, MariaDB allows you to chain load password plugins You definitely want to turn on the simple password check plugin Which will allow you to enforce a minimum password length Which will basically allow you to ensure that a password is good If it's A, B, C, 1, 2, 3, 4, 5, hash, capital B But that is not a good password So you probably want to also load the cracklib password check validation plugin Which will ensure that even if it passes the simple password check So you got 8 characters, uppercase, lowercase It'll also run it against cracklib Which is provided on pretty much every Linux system out there Because it's via PAM cracklib And if cracklib can crack it, we'll say this is a weak password Authentication So alt socket will basically authenticate against the Unix socket This is a nice way to start But it's also extremely not secure way going forward Definitely want to use the SHA256 password The SHA256 password is kind of expensive Because every time you make a connection it has to validate this long password Whereas the caching SHA256 password makes it much quicker Which is why it's now turned on by default Add a 25519 While not SHA256 Follows the elliptical curve digital signature algorithm That OpenState uses There's a Kerberos plugin as well Which will allow you to log in against Active Directory Or Kerberos There's an Active Directory Enterprise only plugin That exists as well Today when you install MySQL 8 You'll actually notice that it tells you By default it recommends you to use strong password encryption It tells you not to use the legacy authentication system Especially if you install it in Ubuntu And this is largely because You want to be secure out of the box Now, if you say I am a web hosting company And I have thousands of users with the old passwords For example, some people will then say Like MariaDB for example supports the old password format And the native password format The old password format is extremely insecure You can break into a password in a couple hundred tries even Native password Still kind of probably useful But you've probably also read that SHA1 can't have collisions nowadays So double SHA1 Can probably also have collisions Which is again why SHA266 is the recommended method today And going forward we'll see if MariaDB103 also strengthens this To make you use add25519 by default Secure communication is extremely important MySQL of course gives you the capability to have secure as-to-sell connections And you definitely want this turned on You definitely want to start by connecting via an IPS And then you can do select statements So I'm going to give you a few examples so we can go quicker through this as well I use a utility called ngrep I don't know how many of you use this But it basically can do network traffic rep And by default If you notice Yes, you'll notice that Select unencrypted is actually showing you the traffic going through in plain text This is kind of awful because everything goes through in plain text Now with 5.7 When I do select unencrypted You'll notice that I can't actually decrypt it Because basically the client traffic is encrypted already So 5.7 and greater encrypted You decide to for some absurd reason turn it off Like say SSL equals zero Then again it becomes something you can see So not very useful So I highly recommend not turning off SSL And leaving it on Use SSL it makes sense In fact large large scale websites today That are powered by mySQL And that's probably 19 of the 20 websites out there They all use SSL Of course it's well worth noting that things get more complex So with 5.6 and 5.7 These are your SSL server variables And as you can see with 5.7 Things get a bit more interesting Because they actually tell you where your certificate files are by default And then with 8.0 It becomes a little longer because of this thing called the X protocol So this allows you to access mySQL using Not port <IP_ADDRESS> But <IP_ADDRESS>.0 Secure communication is extremely easy to turn on You put this in your mySQLD You basically need to then after that look and see What SSL version and SSL server you could be using If you are using an app Any app will make it fairly easy for you In this case I picked Python And this is all you need to do In addition to having a user password and host Now you may think that setting up SSL is a bit complex Using the open SSL command Because it involves a manual process Maybe it takes like 5 minutes of your life And if you assist admin you want to save that time You could definitely try this thing called mySQL RSA setup You could actually do it for you Basically one liner And it will be set up in less than 10 seconds even How many people here use the cloud? Google cloud, Rackspace cloud, Amazon cloud Okay so quite a lot of you Now if you are using the cloud and you are not using SSL You are asking for trouble So Rackspace They of course have a grant modifier A grant modifier and they actually require you to have SSL turned on When you do things like select, insert, update, delete and so forth Amazon has this option for SSL verify Server cert So it will verify your database instance endpoint against the endpoint in the SSL cert Again useful Google also has this available And they allow you to have up to a maximum of 10 certificates per instance Now Because MariaDB calls itself MySQL And MySQL calls itself MySQL You may be using client libraries that don't match each other Because when you install MySQL And not MySQL server you may be getting a MySQL client library that comes from Maybe MariaDB For one There were clients pre 573 that would consider SSL just as advice So it would actually fall back And you would think you would be using SSL but you are actually not using it for connections This is not good So this is of course changed And then of course There have been some deprecations So now SSL mode equals required is preferred And make sure that your client matches your server And also make sure that the SSL libraries are using also kind of match Now There was a scenario where MySQL enterprise did link statically against open SSL In the 56 I think it was 5618 Or 17 And when open SSL had that hard bleed bug You actually have to basically recompile the server because it statically linked against open SSL And make a new release Pretty much everything nowadays that you download today is dynamic And also linked against open SSL So this is an example of using stronger passwords Either the shower 56 or caching shower 56 password You'll notice that you get this nice long authentication string This is exactly what you want to aim for going forward Now external authentication via something like PAM Is kind of interesting because Not only does Purcona provide a PAM authentication plugin So does MariaDB And you can fairly easily configure PAM Some of course support the ability to have PAM groups And some don't Now installing the PAM plugin is fairly straightforward And If you want What you could do is You could go on a test server Install Google Authenticator So preferably you've got You know WNL Ubuntu And you can actually even have A PAM true factor authentication With the Google Auth app on your phone Which actually does work We talked a little bit about MariaDB Auth plugins as well And This is a good example of how you'd use Edit25519 Auth And again If you notice The password is A lot more complex Than you'd expect from my escalated password And Edit25519 should also in theory Not allow you to get broken into easily Because if it was Then H would be a problem as well Unix Socket Auth is As I said turned on by default Inside of MariaDB when you install it On Linux nowadays And you want to obviously Turn that off because this trustless authentication mechanism Is not necessarily good For production use cases Audit plugin How many of you here use Twitter? Not many, okay Well for the ones of you that did use Twitter Or follow the news I think last week Twitter did say something like Hey Reset your passwords Largely because We have a system That may have saved your passwords in plain text But everything else is stored nicely encrypted And when I read that I thought I wonder if they were using an audit plugin Because you know some early versions Of say the MariaDB audit plugin Actually recorded the passwords In plain text as well Which was actually later Realized to be kind of a bug Because it's kind of two for both So now the passwords are hashed Of course we don't know If that's the reason Or they had something else But it's kind of interesting to note That You can audit An audit plugin can audit Everything Including what the root user does So It's highly recommended You turn on an audit plugin Because It's extremely useful From a compliance standpoint As well to know If a user touched Someone else's data I think also last week You might have realized That Facebook said They fired someone For accessing A profile of A girl he met on Tinder maybe Or something to that effect Accessing someone's User database is extremely bad And again An audit plugin could help you Because it'll ensure You know exactly What someone's doing Including an admin There's several formats For the audit log You know the Basically XML Or JSON Or CSV And here are examples Of what What formats The old and the new format In XML look like And the JSON CSV format So you could actually Take the audit logs And give it to someone Who doesn't know any SQL And they could also Do audits Now You notice suddenly That the MariaDB audit log format Is actually different From the MySQL one And this actually Becomes a problem Because if you want to Rep the audit log MySQL actually provides A utility called MySQL audit grep That allows you to Grep the audit log By say user Or command And you can't actually Run this utility This utility is part Of MySQL utility's package And you can't run it Against the MariaDB audit Log format Now MariaDB server itself Extended the audit API To allow you to Have user level filtering So you can filter By user Of course If you have The query cache enabled You get No table records Because it doesn't Actually touch a table It's the query cache Now the correct size For the query cache Is zero Because the query cache Is not very useful In fact MySQL 8 Has completely removed The query cache Because it's been Zero for a long time Pracona's audit plugin Supports multiple formats All new JSON CSV You can also filter By user Without extending The audit API You can also filter By a scale command type Database and so forth And Pracona Because we're a company Focused largely On performance We wanted to make sure That we also allowed you To have multiple variants In terms of auditing So you could have The ability to have Asynchronous audit logs Or semi-synchronous Or fully-synchronous audit logs And you'll decide When it's time to use Memory buffers Or drop messages If the buffer is full And when to sync to disk Yes, auditing Can take a hit But you want to make sure That you're getting The most performant Variants available McCarthy Being the first one Great You also degenerate Offsets against the server Which they provide a tool for It's nowadays Probably really deprecated By the MariaDB Of the Pracona audit plugins And if you happen to use Amazon, RDS You'll realize That they also As in the option group Allow you to use An audit plugin Against both MySQL As well as MariaDB, RDS So now we'll talk A little bit about Secure storage You want to encrypt The data at rest This could include Your tables, Table spaces Your binary logs And other logs And e-management Is extremely important As well So MariaDB servers Overhead is typically Less than 1% You can Of course encrypt Also temporary files Which are extremely useful Encryption is extremely Easy to turn on You basically Have to have All those options there Now You want to make things easy For you You don't want to have All those options Because if you miss one Problems occur So use a preset Also plug in For the Amazon Key management server Because key management solutions Tend to be Kind of expensive MySQL 5.7 Also includes encryption You have the ability To encrypt InnoDB table spaces There is also Similar to MariaDB The ability to Store the Key files On your hard disk Now this is of course Good for testing But extremely Poor for implementation Because if I Break in And I do a MySQL dump You have to use InnoDB file per table But that's been the default Since 5.5 So if you're not using InnoDB file per table It's time to change And then you have to Alter the table So you can't actually Just enter data encrypted You have to first alter it It has an external Key management solution Via Oracle Key Vault But I'll talk to you A little bit about how You can not spend Money on Oracle Key Vault So Various releases Came up with Various things So Including inside MySQL 5.7.19 There's also an AWS Key Management Service Plugin Again, it's only available In the Enterprise version So Basically At Precona We want to make everything Nice and open for you So we also decided To include Vault encryption So if you use HashiCops Vault And you already Have a Vault server Set up You can just use The Vault plug-in For both MySQL Or Precona server And you can Store your credentials There as well And this became Generally available Also Two weeks ago It's been Available for a while But Two weeks ago We had this big MySQL conference So Make sense of We announced these things So MySQL Enterprise Transparent data encryption Does have Data address encryption For Encrypting Even the physical files Of the database You can of course Use other things Like locks and so forth Even Basically The DNS Algorithms Precona service Keyring Vault Is something You definitely Want to try today Failing which Of course look at The KMS solution That MariaDB has Against The Amazon Solution Now I don't know How many of you Here use Something like ExtraDB cluster Or Galera cluster Where you Want to have Fully synchronous Replication And Precona spent Some time Making it Easy by default So for one We Write fairly good documentation To ensure You follow it But also We want to make sure It's such that You could roll it out easily So we can't Change your IP tables Rules Or when you do An installation Will tell you These are the Suggested IP tables Rules you have You're probably Also encrypt the traffic When it comes To things like Generating keys Enabling encryption All this Can be done Basically Automatically also Just State snapshot Transfer Basically referring To the full Data transfer that occurs When a new node A joiner node Joins the cluster And receives data From a donor node And you want All that To be encrypted As well Of course We talked about Table space encryption Earlier And you can use Something like Vault As well For external key management So a good Quick how to So that You don't have to Worry Follow Industry standards Then you can Become a security Expert And you know You can have A bunch of things Against a checkbox And that's That's the aim In terms of Writing documentation First I talked about SQL standard roles But there's not Really much I can talk to you About roles Because it's Standard in pretty Much every Database out There Except MariaDB And MySQL Which only Group users into roles So More or less In conclusion You want to Definitely have things Like an audit The ability to have Audit You want to have Log reduction Because you don't Want everything Showing up In your audit logs So you want to Be able to Configure how You can redact stuff You want to Have external Authentication As well Maybe because You don't Want to trust The authentication System Or it's easier To have Authentually Now I promised to talk A little bit about MongoDB And you know For MongoDB includes Things like audit, Log reduction And external auth Amongst other things Also fully Open source And drop in replacement Definitely today I want to have SSL turned on The excuse that It's Heavy on the CPU Is not a good Excuser any longer The CPU time Is much cheaper Than you think You want to turn on Encryption Having a dump On your database And walking away With everything In plain text And embarrassing you And your users In public And I think The other really Really important thing Is you want to Have external Key management And either You use Vault Or use Some other solution That costs money It can Tally up to you And most Importantly Upgrade your Software Because It turns out That It's better And we Make it better Because we want to Make it more secure By default We want to give you More features So upgrading Should not be Something you are Averse to Read the Upgrading guides Run it on Test servers And even though You're running databases It makes sense To Upgrade I guess With that I'm More or less Open to Questions As well And you have So yeah I'm open to questions Questions Any questions Yeah Hi So I have A couple of questions So We see a lot of Software You know Being deployed Inside containers today And So the first Question is What is your Thought of Thoughts about You know Deploying Databases inside Containers Databases inside containers So That's the first question I'll answer it Then we can have A conversation sort of Yeah So databases inside containers So as long So If you want to do Trust-based authentication You can do it Within the container But never outside of the Container And If you think of it As a container Being secure By default As long as the Container itself Doesn't get broken into All should be well You should probably Also be running Things like SC Linux or App Armor But at the same time You know Perfectly okay As long as The similar principles Apply All that said I guess If you're Familiar with Kubernetes Stateful set is probably The only way to have Sort of Stateful applications At the moment And it's not Like super Full proof And yes You can run MySQL with Kubernetes But not many people Do yet Or even Postgres with Now In terms of Best practices Of using Stateful set There's not much Around security Beyond the fact That you should Make sure your containers Are also You know Well secure But At the same time From a Postgres standpoint The Chaps at Zolando Actually Made a very Good presentation About a year ago About how They handle Containers And deployment The DIN DNS service Have also made A good presentation Around how You could handle MySQL Inside of something Like Kubernetes But from a Security standpoint There's nothing Additional beyond Like if you're Going to use trust based You make sure it's In your local Instance Not exported Hope that answers Your question You have Another question Right So What was the second question I kind of Answered it already Okay The databases Another question right there And Hi Hi Charles So We're talking about The audit plug-ins right So what's the overhead On the MySQL server When you're like You know Enable the audit On the plug-in base So the overhead Yeah So that's a very good Question about What the overhead Is like Around the Audit plug-in And Yeah So if you have A very Busy server Worst case scenario So like Actually hit A 10% Hit Now Production use case It probably is never Going to be that way So if you're running Sysbench Maybe you want to do You want to do Asynchronous Or turn on Performance mode If you're using Protonous audit plug-in Whereas if you're using The others which Don't have that option Then Yeah It's going to Write to this All the time So You know If you know Linux You know By up to 10% But Generally speaking Real-life use cases This should not be the case And at the same time You can switch modes Which should also In theory help you Is that your Only question? Yes Okay Yeah, hi So actually One of my Questions was Same as He asked Another question was Like If we can Make the MySQL connections Over a Private network only Is it still So the question is If you have The MySQL only On a private network Should you still be Using SSL? And the answer is Probably yes Yes Because You don't know who Else will Attach traffic To your private network Somehow If you're using The cloud This can leak quite easily If it's Your own Private network Like it's In this room A bad actor Could still come in Like say If I was the bad Actor Using on a cell Probably makes sense And You know All the SSL performance Gains that you've seen Actually come a lot From the work That's been done And improvements In MySQL By companies Like Google and Facebook Because they Published their Cell improvements And You know And actually That's why Google even Wrote the encryption For MariaDB Because they You know They need it So yeah You don't want The equivalent here is But If there's An intelligence agency And they somehow Managed to attach To your network Then everything's still In plain text So you want to protect against Any kind of Data exfiltration So yes You should probably run SSL Even if it's In this room More questions Yep At the back What is log reduction? What is log reduction? Yeah Okay Log reduction means I'll give you an example Of a log Maybe I want to Redact some things Like I want to redact For example Passwords I don't want to Store passwords In the log file I'd like to redact that That's probably useful As an example Maybe I want to Filter You know I want to redact things Like I don't want to know What Something user does That's removing stuff From the log That it won't be Written to a permanent record So You want to definitely Redact By default Passwords And You know most people by When they install something They don't maybe Don't change the default So if the default was to Log passwords And it's a It's a poor default So that needs to change So that's log reduction We had another question here Somebody from this side raised Your hand No longer So one of the issues As an application developer That you generally You know Encounter Is How do you configure The connection to a database From an application Right So typically The easiest way to You know Do that is to hardcore Your username and password Inside the application code Or Externalize it into a You know plain text Configuration file Of course Some of the languages Do support You know Encryption That is supported as Maybe Native In that program Or An external library So my question is Does MySQL or MariaDB Have something out of box That The application developers can use Yes The application doesn't Want to store In this case The user and password Right And yes That's the question You don't want to Store your User credentials inside The application And the answer is Actually yes You can use The mylogin.cnf Inside the Applications User Account And That actually Works That's been available since MySQL 5.6 and greater Not MariaDB though At the moment So I suggest Looking at the documentation Around the MySQL Config editor Another question Yeah More questions You were Showing about Pam and all right How you could Connect using Pam with your MySQL 5.6 How you could Connect using Pam With your MySQL server So can you Actually have multiple Clients Using different Authentication Mechanisms at the same time Multiple kind of Clients Can you Repeat the Question About Pam Yeah So you were Showing about How you could Use Pam As an Authenticator With MySQL and all So can you Actually have Multiple kinds of Authentication Applications and Like Can I have Different Authentication Mechanisms at the Same time Right So can a user Authenticate against Pam and maybe Also authenticate Against Kerberos is Your question Multiple Authentication And yes of course Because So once you Configured Pam It turns out That you Actually Basically Set The Pam Per user I can have Another user Created Authenticating Against Kerberos I can have Another user Authenticating Against Any other plug-in That happens to exist So the answer is Yes It is On a user Basis You can have Multiple Authentication Backends If that was A requirement Of yours Hi So In your Talk you mentioned About Complaints Data Regulations So I have a question It may be May not be related to MySQL In near future Can we expect The databases With MySQL Oracle Postgres SQL Natively support Or At least Through plugins Help the developers Achieve the Complaints In any way At least Masking Or some kind of Attributes Just like Constraints Database Constraints Can we specify some Attributes For specific Fields Or columns Where I can Mask the Data Yeah So Question around Masking Data So Postgres Actually For example You can Mask data via Column Encryption Right And that's A very common Will we make it easier For you to maybe Remove a user For And all phases of the data Now That's actually kind of Hard for us to make One kind of tool Like that Because let's say We remove the user On Say database On your master server But you have a time Delayed replica That Is maybe Delayed by a day In another data center Then Then the data Is still stored there For example Because we don't actually Know What your backup policy Is You may be having Logical backups You may be making A point-in-time recovery Snapshots And we don't know What your backup policy Is So the person of Can we make it much Easier for you Is Very I think Very much depends On how you have Set up your Policies as well But can we Make it easier From a data Masking standpoint Yes Of course So I think A very good Talk Again Might be checking out How proxy SQL can help With data masking Was presented At FOSSTEM earlier this year So we do have Examples where you could Actually do something Like that with proxy SQL So again Still using middleware Not quite Getting it done In the database itself Because the database Will still be The source of truth Hope that Kind of answers Your question


There are any number of fantastic stories in India, how women became mystics, simply being dedicated to their husbands because they did not see him as a man. In India, this has been a practice, it's now gone, of course, where they refer to the husband as Swami and he also lived up to it. It needs a corroboration. So, when this was so, initial hormones are there, will act up and do certain things, emotions are there, they will act up and do certain things. After that, you're looking at him, looking at him as a doorway to the beyond. And because everybody had some kind of spiritual training at one time, naturally they became guides for each other to grow and largely, largely from this kind of arrangement, it is thousands of women who became mystics, men did not become because they were just doorways. Those who pass through the doorway get somewhere, the doorway doesn't get anywhere. The doorway is there only, people come and go, isn't it? There are so many fantastic examples in India how women became mystics, simply because of unidirectional emotion, simply one, did not even, you know, alter for a moment. See, because of this nature of this education that you've been through, you believe you can focus your mind on something, but you cannot, isn't it? Hello?  Or even on your business or money, can you keep your mind totally focused for twenty-four hours? Hello? No. So, this is the nature of your intellect right now. So, if you want to train this intellect that it can stay like this for long, long periods of time, that's fantastic, that will need lots of work. But your emotion is capable of like that. There have been times in your life when you're emotionally very strong with somebody, twenty-four hours, only that, isn't it so? Has it happened or not? So, you're more emotionally competent than intellectually competent. I'm just trying to put it gently across to you. Hello? Is it okay? Ladies will say, okay, it's easy for them. Men are struggling, but whether you're a man or a woman, this is true for you. Look at it and see. Maybe your love is not focused, but your anger at least is focused. That is an emotion. If you look at the temperature or the intensity, how many moments of your life have you known that kind of thought, which is burning hot intensity. But you've seen such emotions, isn't it? Hello? Easier to crank up the intensity of your emotion than to crank up the intensity of your intellect because that takes a lot of work. Maintaining intensity of intellect takes enormous amount of work. The problem in the spiritual path is just this.  Then it starts dismantling itself. Every one of you who have come to Inner Engineering Program have experienced this at some moment that when you came to the program, suddenly it looked like your life was on a trajectory, boom. But then you slowly distracted yourself, it dismantles itself. You need to understand when you set a trajectory, you should stay if you want to fly. If you do this, this, this, anyway this way all of us are going. Hello? No, everybody thinks they're going like this. There's no proof for that. For this there is proof. Yes or no? Do you have proof that you're going up? No.  No, no, the planet needs you. Even if you're not useful when you're alive, when you're dead, planet likes you. Yes, really, Mother Earth wants to get you back. Please don't deny her that. When we talk about devotion being the way, people think devotion means going to the temple, going to church or mosque, people think devotion means religion. No, no, no. Devotion means you're organizing your emotion in such a way that it works for you, absolutely. Because it is only an emotion. It is only in moments of emotion.  Isn't it so? Hello? Have you intellectually touched that? Very few in the world, believe me. Very few in the world intellectually touch a sweet spot. Most of you have touched the sweet spot of your life only in emotion, isn't it? Huh? Most beautiful moments of your life or moments of emotion, isn't it? Well, it might not have lasted, that's another problem. That may be lack of management.  And I want you to understand nobody in this world ever manages their objective world absolutely. We can manage it to some extent. Sometimes it works for us, sometimes it doesn't work for us. Isn't it so? Hello? Sometimes it works for us. We want it to work for us, but not always it works for us. But our subjectivity should work for us always because this is ours. These people may work for you sometimes, sometimes they'll turn against you, sometimes they'll ignore you. Is this so? Even if you are having a grand love affair? Hello?  Yes or no?  For this you need to hitch it there and leave it. Destiny is fixed. I must have told you this story. An old yogi came to Vellangiri Hills. Vellangiri Hills means it's at the foothills of Vellangiri that Isha Yoga Center is. It's a hard climb about 5,800 feet, but steep climb. Over eighty years of age, slowly he was wanting to climb the hill to go up because there is a sacred space up there.  So they are selling this and that, some eatables and BD, you know, tobacco and this kind of stuff. Sitting there smoking, they look at this yogi and say, hey, old man, do you know how high this hill is? Even we have not gone there. You think you old koot can go up this mountain? The yogi looked at them and said and smiled and said, say, I have already put my heart up there. The rest of the body anyway will follow, you don't worry about me. My heart is up there already. I will anyway go. Where your heart is, anyway you will go there, isn't it? Huh? So this is what using your emotion to handle your subjectivity means that you fix your heart there, no change about it, it's already there. If you look this way, if you look that way, do whatever, this just keeps pulling you in the same direction.


Hi, I'm Rose with Food Unfolded here to present Family Recipes Unfolded. In this series, we cook our favorite family recipes together with our loved ones, even though we're apart. We explore the origins of our most beloved family foods. We hope that it inspires you to connect with your own families over food. Hi! Hi, Dad! How are you? Oh, nice. Nice to meet you, ladies. Nice that you called me. Okay. What can I do for you? Yes. We want to cook today Himmel und Erde, and I wanted to show my friend Rose this German dish, but she doesn't have a clue about it. We're talking about two persons. So, potatoes, 500, 600 grams, not 500 potatoes, apple puree, 500 grams, onions, as you like it, 6 to 8, medium size, sunflower oil, butter, or margarine, just a spoonful, salt, pepper, nutmeg, very important. Okay. Action! Peel the onions, cut them into tiny slices, fry onions in oil with butter or margarine, you put salt and pepper in it. Okay. Peel the potatoes. Cook them until they are well done. Turn off the water, mash the potatoes, knock with a machine. With an asher. Yes! Add nutmeg to the puree. A lot! Mix the potatoes and apple puree, you mix it, and that's it, the plate's ready. And if you like it, you put a sausage, a German sausage with it. Why does it have this name, Himmel und Erde? Good question. That's easy. Himmel, heaven, sky, and the apples fall down. Potatoes. We also call them earth apples. The French say pomme de terre. The apples will come out of the earth. That's the explanation. Yeah, pretty good. Thank you so much. Okay, thank you. Bye-bye. How is it? Pretty good. You don't get a bite. No!


This study investigated the effects of two types of mid-task interventions, rest-break and moderate-intensity exercise break, on the dynamic reorganization of functional connectivity, FC, during the execution of psychomotor vigilance test, PVT. Temporal brain networks were estimated before and immediately after the intervention, and towards the end of the task to investigate the immediate and delayed effects respectively during post-break task re-engagement. Behaviorally, similar beneficial effects of exercise and rest-break on performance were observed, manifested by the immediate improvements after both interventions and a long-lasting influence towards the end of tasks. Moreover, temporal brain networks assessment showed significant immediate decreases of flexibility, which was followed by an increase of flexibility towards the end of intervention tasks. Furthermore, the temporal nodal measure revealed the channels with significant differences across tasks were mainly resided in the frontal parietal areas that exhibited interesting frequency-dependent distribution. These observations extend previous fatigue-related intervention and static FC studies, and provide new insight into the dynamic characteristics of FC during post-break task re-engagement. This article was authored by Ling Yun Gao, Jin Yu, Li Zhu, and others. We are article.tv, links in the description below.


Novak Djokovic vs. Hubert Hercatch is the final group stage match for the ATB finals for 2023. And both guys are coming in under very different circumstances. Hercatch comes into the ATB finals as an alternate after Sidney Pass pulled out and after finishing number nine in the world just missing out on qualifying in the final weeks of the season. His best result here was a round robin appearance two years ago, but was unable to win a match in that attempt. This year he's got 45 wins and 21 losses, but the more impressive stat is that he's won all the finals he's played in. Three wins out of the three finals including a win at the Shanghai Masters to get his second 1,000 title. His best win was against Stephanos Sidney Pass in Cincinnati just before the US Open and his worst loss actually coming at the US Open against Jack Draper in a bit of an upset in straight sets. His form however has been great having won that Shanghai Masters and also making the final a Basel and he's only lost a handful of matches since that US Open loss. Novak Djokovic comes into the ATB finals as the number one in the world and only needs one win to wrap up the year end number one ranking for another time. His ATB finals record, his best results here have been winning the title on multiple occasions in 2008, 2012, 2013, 2014, 2015 and be coming in as the defending champion from last year's event winning it back in 2022. His record 51 wins five losses of course not playing that much due to not being allowed to play in America and also taking some time off after the US Open and his record has been six titles in one final with the only loss that he's had in a final being at Wimbledon to Elkaraz. His best win was beating Elkaraz in Cincinnati and of course beating Elkaraz at the French Open and his worst loss was against Lyovic who was 70 in the world at the time in Bosnia during the Claycourt Swing but he's got the best form of anybody coming in with no losses in his last 10 matches. In fact his last loss came at Wimbledon back in July. These guys have played six times before with Djokovic leading the head to head 6-0 but the last time they played at Wimbledon her catch did push Djokovic very close the way her catch has been playing lately as well could be real danger for Djokovic if he's not back on point. If her catch is going to win this one he's going to have to use that big serve and also use his freshness because he's coming in here with no matches. He is the only guy playing in this tournament at this stage with no matches so he'll be really fresh. Djokovic has played two three hour matches so he's going to have to try and use that to his advantage as well. If Djokovic is going to win this one he needs to get up to a good start. He can't go down a set here and play another three set epic because when he gets to the semifinals against guys like Mevadev if that's the case it's going to be really really tough to keep playing these three hour epics all the way through the tournament so you're going to have to get up to a good start. Such an interesting match. This was supposed to be Sidney Pass vs Djokovic. I got to think this is much better than what that could have been. I'm going to go with Djokovic to win this one in straights. I think a close straight sets maybe a couple of tie breaks. Her catch coming with no matches might hurt him in the end but I think Djokovic is going to get this one and qualify to get to the semis but let me know down in the comments below who's going to win this match.


This video is called Practice Problems 2. This problem is really quite simple if you know what you need to do. It says, if two sides of a triangle are 6 and 14, so that means the lengths of them are 6 and 14 units long, then the third side must be bigger or greater than blank, but less than blank. So this is actually a range problem. And we learned in previous videos to find the range of what the third side could be. You simply take the two sides you're given and add them together. So 6 plus 14 equals 20. And then you take the two sides and subtract them. And always subtract them in a way that gives you a positive answer. So do your bigger number minus your smaller number. So to fill in the blanks here, the third side must be bigger than 8, but less than 20. If you have something below 8 or more than 20, it won't make a triangle. The three sides will not be able to meet up correctly to make a triangle shape.


horse with a speed of light, a cloud of dust, and a hearty high old silver, the Lone Ranger. The engineers who built roads and bridges in the western United States before the coming of the railroad faced many dangers. The forces of nature, outlaws, and hostile Indians combined to make the work almost impossible. And if it had not been for the strength and courage of the masked rider of the planes, the winning of the West might never have been accomplished. Return with us now to those thrilling days of yesteryear. From out of the past come the thundering hoof-beach of the great horse, Silver. The Lone Ranger rides again. Come on, Silver! We're heading for the canyon trail. Knife wound canyon was so named because of its formation. A long deep gash in the earth's surface, the canyon made it necessary for both horsemen and stage coaches to spend an extra day in crossing the state. One of the greatest engineering projects of the age was a bridge under construction across the gap. The Lone Ranger and Tonto rode to the night along the canyon's rim. Far ahead they could see the flickering light of a campfire. And when the railroad comes this way, Tonto, the tracks can be run across the bridge. It's one of the greatest things that has been done in this state. Sam Barton's name will go into history as one of the builders of the West. Soon railroad come this way, huh? That's right, Kimosavi. Look, the way over there on the other side of the canyon, you can see the workman's camp. Ah, Tonto Fium. I wonder who's camped on this side. Certainly not any of the workmen. They're all working from the other side. That's right. Seems to me there are some men around that campfire. Tonto, see four men there. Not Indians. No, not Indian. There are Indians around here. We saw signs of them before sunset. Mm-hmm. Tellers at fire, not Indian. Well, we'll soon see who they are. It doesn't matter, but it's an odd place for men to make camp. One of them has heard our horses. He's standing, listening. Huh? Rain up. Is that you, Barton? Barton. Sam Barton. Why would he be on this side? We heard your horse. Come on in. We're waiting for you. Stay here, Tonto. Wait while I go on.  Answer up, Barton. Is that you or ain't it? Come on. What's the matter? We don't want to stay here waiting all night. Where you been? Well, that's my business. Hey, where'd you get the white horse? Come on, close to the fire. It must be sort of cold riding tonight. I'm all right. Hold on. Are you masked? Yes. What of it? What's the idea of being masked? Maybe it wouldn't be wise to be recognized if I was seen. Well, maybe not. Did you fetch the cash? For what? For what? For us. You promised to have some cash for us tonight. We've got to get it so as we can get firewater and have the Redskins re-aroused up. Suppose I didn't bring the cash. Well, you better had. You promised it, Barton, and we figured on it. The chances are that bids will be done tomorrow. Once it's done, then the matter paid off. We won't have a chance to stage in the massacre. Hold on there, Roy. Let me have a look at this arm, Ray. What's the matter? Don't sound like Barton speaking. I'm not Sam Barton. Just what I thought. Reach! It was risky for Barton himself to come here. If one of the men knew that he was paying you to get the Indians on the murder trail, he'd be finished. So Barton sent you, huh? How much cash did he promise you? How much did he send? Look here. I don't know you men. How do I know you're the right ones? Right or wrong, we're the ones that's been promised hard cash. And either we get it or we call the whole deal off. Now shell out, stranger, and be fast. I got it. I got it, Roy Hyde. This here arm, Ray. The horse, the mask. That horse is Silver. This is a lone ranger. What? Shoot! Shoot the critter! Why, you! Drill him! Shoot again! Get him, boys! He's blowed my gun out of my hand. This way. Hit him. I'm scouting. They're waiting for Sam Barton's out of the builder of the Bricks and they're planning to kill the man to steal their money. What do now? Down into the canyon. You know what, Ray? What do? We arrived at that camp. First of all, I want to know Sam Barton is really crooked. I can't believe he is. Come on, Silver! Later that same night, after a dangerous ride to the canyon, the lone ranger moves silently through the bridge builder's camp. When he reached Sam Barton's shack, he opened the door and stepped inside. Barton, wake up. What's wrong? Wake up, Barton, and listen to me. It ain't morning yet. What's it? Say, who are you? Someone who calls himself Sam Barton is meeting plotters on the other side of the canyon. Did you know that? Well, who is it? I don't know. But I do know there's a plan to have the Indians attack your men as soon as the bridge is finished. You sure of that? Who are you? As long as the bridge is not finished, the Indians can't get here. That bridge is done tomorrow. They'll be ready to massacre all of you. Oh, and what's your suggestion? I think I can bring help. There's an army post with a commandant's friend of mine. It'll take two days to get the troops. Postpone completing the bridge until two days more. So that's it. Postpone it and spoil our records so the contract will be forfeited. Will you forfeit the contract? I see through the scheme. We were promised a bonus that we'd got finished ahead of time. You're sent here to slow us so we won't be paid that bonus. Nothing of the sort. You get. But Barton... Get, I say. Clear out. I'll have the whole camp on you. Scheming to do us out of the bonus, huh? Why you... The next morning before the men started work, Sam Barton called them all together and then... Get close, boys, so you can hear what I say. Today is the big day. We got a few hours' work and then the bridge is done. The planks will cross the canyon.  Proud of the courage and loyalty you showed. The whole state's proud of you. We're going to finish ahead of schedule and then you'll get your pay. Where's our pay come, boys? The pay is here. You'll get it as soon as you step from the bridge to the far side of Knife Wound Canyon. Pay in full plus a bonus. Then you'll have two days off before we make the finish and touches. A bonus! I'll meet you with a cash on the far side of the canyon. Now get going. Hey, Barton, what's that coming? I know that voice. A masked man. I'll kill him. You hear what you knock my gun up for? The masked man is an outlaw. I don't call for shooting him. Hold on there. I want to speak to you. Let me tell him. Barton, last night I spoke to you in your shack. I didn't know then that you wore a mask. I told you it would mean death to every man here to complete that bridge and cross the canyon inside of two days. It's local. Why should it mean death? I'll tell you why. Indians are gathering on the other side.  That's a lot of lies, boys. All he wants to do is to keep it from finishing the bridge so we don't get a bonus. Frag tears. Maybe Barton's hired him to do that. How about it, Barton? Yes. That ain't so, Joe. You know better than that. I don't know, Barton. The saviour here but cares if you don't have to pay that bonus. Why didn't you think of that before? Boys, are we finishing the bridge today? You're wrong. You're not going to finish it today. You're not going to finish it until the army sends troops here to drive away the Indians if they attack them. You think you'll stop it? Joe, I'll handle this. Stranger, I don't know what your idea is but you're not going to stop our work. We've thought through on this job against every handicap that nature and man could conceive. We're not going to stop because the Indians are drinking whiskey if they are. Go on, boys! One minute, Barton.  He's bluffing. Yes, I think he is. If you insist on going ahead with that job then you'll find that you'll have more work to do. I've blasting powder planted where it'll tear away part of the bridge. Don't make me signal for that powder to be fired. That's bluff. Nothing but bluff. No, it isn't, Barton. It's bluff and I'm calling you. Go on, boys! Cross over and go to work. I'll give the signal when the first man puts a foot on the bridge. I don't know who I should believe. Blow that bridge and you won't live long. Go to work, man. That's an order. You're calling me, Barton. You're called. Very well. There's the signal. Boys, there's extra work for us now. Doggone? Dad read it, old boss. Now what? That mask man wasn't bluffing. There ain't much damage there, Barton. It can be fixed and we still can finish the job. There's a lot more than three hours work there. Sure, but we'll work all night if need be. Well, wait, man. That mask man said he wanted to ride for troops to help us against the savages. Look, Barton, I'll tell you what. You get the boys working double time and I'll ride over to the other side and scout around. Can you get over there, Joe? Sure thing. We'll take the best horse and find a trail somehow. I'll see if there's redskins there. You get the boys going. If I don't bring back wood or coldway from the other side of the canyon, you'll know there's no sign of redskins. Good. Come on, boys. We've got twice as much to do now. Sooner we get started, the better. Joe rode into the canyon as the men went to work. The blast and the Lone Ranger's warning had sobered them, but they evade Barton's orders without hesitation. In the meantime, the Lone Ranger had reached open country. Come on, Silver! The Great Horse Silver raced across the plains. Heading for the distant army post. A mile after a mile flashed by until finally... Halt! Who goes there? I've come to see Captain Grimes. Take this silver bullet to him. Captain Grimes has gone to Fort McHenry. Colonel Martin is now in charge. Who are you with that mask? Captain Grimes would have known me. Let me speak to you, Colonel. Who is this? Colonel Martin? I am the Colonel. Who are you? Colonel, if Captain Grimes were here, he would know who I am because of the silver bullet I've just handed your guard. Well, I'm not Captain Grimes. The need remains the same. The engineers at Knifewound Canyon are in need of help. Indians? Yes. How long has the fight been going on? It hasn't started yet. It's started. And why should it start? It's certain to... crooks of inside of the Indians. Remove that mask. I can't do that. Colonel Martin, over 50 men will be massacred if you don't send troops to help them. There are new regulations out of Washington. Captain Grimes has been removed because he seemed to antagonize the Indians. My orders are rigid. Until there is a fight, I cannot send out the cavalry. But Colonel, they will attack as soon as the bridge is across the canyon. I'm sorry, sir. But you yourself have admitted that the Indians have not yet attacked. Until they do, I can make no move. By that time, it'll be too late. I have my instructions. And as a soldier, I must obey them. The life of every one of those men depends on your raid. I'm sorry. Colonel Martin, I've ridden hard to get here. I thought a good count on your help. You can, unless it's in violation of my instructions from Washington. Instructions must sometimes be changed to meet conditions here in the West. I'm a soldier, sir. I cannot assume that authority. Then, Colonel, I will. Your men will follow you. Let me down, sir. What does this mean? I'm sorry, Colonel. Help! Sergeant of the God, Corporal! Help! Help! Help! Help! The curtain falls on the first act of tonight's Lone Ranger drama. Before the next exciting scenes, please permit us to pause for just a few moments. How to continue our story. As a construction crew near the completion of their work, Sam Barton's assistant met the outlaws on the far side of the canyon. I come here to check on things, Rohard. Barton, we don't need no checking on.  We got the liquor for the Redskins. Look, we may as well clear a few things up. In the first place, that masked man you told me about already knows that Barton ain't the man that come here. What? I ain't Barton. I'm Joe Horner. Hmm, trying to fool me. Now relax, Rohard.  That's why I'm telling you the truth. I let you think my name was Barton at first, just in case you figured I'm not sighting up to my idea. Savvy? Ah, I reckon so. That masked man that Kaji called the Lone Ranger is rid for the army troops. Army troops? That's right. He tried to get us to hold up work on the bridge until he could get back here with the cavalry. Then what? Well, between me and Barton, we get the boys willing to go ahead. Then he fired a blast to destroy part of the bridge, but not too much. Barton's got the men going double time over there, and they'll have it done before the troops can get here. How soon will the span be completed? We can get the Redskins to attack from this side of the canyon, but they'd never cross over there. They're working along. I reckon it'll be done by daybreak, maybe. Good. We'll manage to keep the Redskins all looking up till then without no trouble. I told Barton I'd come over here and look around. If I see any sign of Redskins, I'm to signal them. Well, I reckon he won't be getting no signal. You better head back and tell the real Barton everything's all right. You got plenty liquor for them Redskins? Plenty. Be able to keep them going? Do you see the bridge is done? They'll be set to attack. Roh, I'd sure steam up a plenty, Bart. I mean, Joe or whatever your name is. I told them that when the bridge was done, the trains would be next to come, and the steam and engines would chase all the game away from this part of the country. That fetched them. Then Redskins are just spoiling to get at the men that built that bridge. The engines don't know about the money? The engines will do their part just to keep the choo-choo trains from coming west. Good enough. Well, I reckon everything's set. I'll go back and help along with the work. The more men workin', the sooner the bridge is done. Joe returned to the camp and reported to Sam Barton. You didn't see Redskins, eh, Joe? No, that masked man was just scheming against us like we figured, Barton. I sooner take time on this job than have any of our men kill. You needn't worry about that, Barton. There'd been savages on the warpath. I'd have seen signs if it was good enough. Later on, boys! I hear, Steve. I'll give you a hand with that car. That's it, Barton. Work them hard. The sooner you cross, the sooner me and my friends will get some cake. In a safe hiding place where he could see without being seen, Tonto watched the workman, his horse scout beside him. Them fellow work plenty fast, scout. Maybe soon them get bridge done, and he plenty trouble come. Tonto better get signal ready. He gets smoke signal ready. That tell mass, friend. Hurry, plenty fast. Them engines. War dance. Bad engines. You will not like a dance, scout.  Matt, plenty bad. We're all hired and these men had told the Indians that as soon as the bridge was completed, the trains would not only drive all the game away, but that white men would steal their horses and children. They promised the Redskins untold riches if the construction crew was massacred. You sure got them braves all head up, Rohide. They're raring to go. Look at the darn fools hop around there. But do you think they swallowed a parcel of Mexican jumping bees? They've been doing like that ever since yesterday. I'm scared that the men on the bridge will hear them and get wise. Well, them get their selves worked up. They can't hear them on the bridge with all the noise they're making building it. Say, uh, Rohide, me and the boys been sort of hankering for the feel of a little cash. When you got to divvy up our share of what Joe paid you to rig up this scheme, you'll get what's yours when Joe comes through with the rest of the dough. I, uh, I've been sort of figuring something out in my head, Rohide, but I ain't said nothing about it. Well, he's strange coming from you, Kaji. Most times your tongue does all you're thinking.  Well, I ain't good at figuring, but I reckon Joe will have a lot of hard cash after the men get killed and Martin don't have to pay him off. That's Joe's idea, ain't it? You're talking sense so far. Go on. Well, these engines will only have dealings with us, so we're the only ones they'll take orders from. They don't know Joe hired us through this form. Ain't that right? Yeah. Now, if the engines were to kill Joe and Martin too, you and me and the other two men could split all the dough. Kaji, you and me have been riding the same horse. I worked that same little idea into my plan. Good. The story that Joe had me fix up to cover the killing of the men can cover up his killing, too.  You never miss a trick, do you? Not when there's money in it. Nobody's going to stop us, neither. The engines will feed to that. Just listen to them hooper up. Meanwhile, Silver with his double burden of the Lone Ranger and Colonel Martin were racing toward the canyon. See you shot for the firing squad for this. It was the only way I could get your men to follow me. Follow you. Follow you. The entire detachment is chasing you. If you've been riding an ordinary horse that have cut you long before this. The soldiers will be needed when the Indians attack. You'll pay for this abduction. Lives are at stake. You have no proof. The workmen need your protection. My men will overtake you. I want them to. After we climb the wall of the canyon. Climb up the center of the canyon. It's shorter than going around. Man, you can never make it. No horse alive can carry two men up the precipice. Silver will, won't you, boy? Tato signal. There's not a moment to lose. Signal. A smoke signal. Come on, Silver. Hurry, boy. That's those great legs. You've got to carry us up. Climb, Silver. Climb. We've got to save those men. Even as the puffs of smoke gifted lazily toward the sky, an alone ranger called on Silver for his greatest speed, the last few ties and beams are being set in place. We'll get through four night, I reckon. You've got to get through four since that boy's, you've got to do it. Wait. Everybody keep quiet a minute. What's wrong, Mr. Barton? I thought I heard something. There ain't nothing. Listen, Joe, do you hear Indians? There ain't no Indians to hear. That's just canyon noise. Come on, man. Let's get to work. Get those timbers in place now. Give it everything you've got. You'll soon be through. Yeah, all through. Joe, urge the men on. But Barton, concerned for the safety of his crew, watch closely for any sign of Indians. Most done now, boys. Keep going. Will you finish or no? Then for the pay and the bonus. Then a night in town. Hustle it up, boys. Keep it moving. Wait a minute. Wait, not to let him go, Barton. I heard Indians again. That's just your imagination. I hear them, I tell you. Don't stop, man. Keep it working. Mr.  It isn't that. It's what that mask man said. He spoke the truth. I hear Indians. Stop work. Stop work on bridge. There's the red skin, the red corn of our bridge. He's all you've been hearing, Barton. It's all part of their game. Shoot the credit. Oh, you're not shooting. Ingenuate. On this side, canyon. When you come, then kill. Men, stop working. We can't risk our lives. We're taking matters out of your hands, Barton. Keep on working, boys. Nothing can stop us now. Take care of that, Ingen. I'll take care of them. Soon as we're finished. I'd Ingenuate this side. Kill men.  We ain't waiting for nothing. Keep on there, boys. That's the ticket. Keep it going. Men, stop. I'm in charge. I order you to stop working. We're aiming to get that bonus, boys. We ain't stopping. You aren't it, boys. Don't let him do your out of it. Ingenuate. Make attack. Red skin another word out of you, and I'll start shooting. Man, man, this Indian is right. Stop working and see if you don't hear red skin. We ain't stopping till we got that bonus in our pockets. Men, I'll pay you the bonus if you stop. Keep going, boys. Keep going. The bridge is at the other side of the canyon. Now get out of the Motherfiends' place. We made it. Men, can't you hear those Indians? Stop work. The war cries of the Indians grew louder as the last beings were spiked in place. The men were so absorbed in their work that they didn't hear them. Finally, the last ties anchored the bridge and the whole crew surged forward to the other side of the canyon. Rohide, Kaji, and the other two outlaws watched them. Here they come. And there's our Indians. Get them red skins. Get them right now. They're amazing. Back across the bridge before it's too late. Oh, you don't. Don't know when you try to get back. Joe, what does this mean? Have you double crossed them? It's all going right, I have. Rohide, Kaji, give me a hand. They're trying to get back to the bridge. Come on, men. We'll stop them. No! What's this mean? Joe's double crossed us. He knew them Indians were waiting for us. They're men with the Indians have cut us off. We're surrounded. I see, Uskeam Joe. You betrayed us to the Indians so that after we were all wiped out, you'd have the whole payroll for yourself. Get up and get forward. Fight them as long as you can, men. Fight them as long as you can. Masked man, him come now. The small band of workmen were trapped between the outlaws and the Indians. Then suddenly a great white horse thundered toward them. Close behind rode the soldiers of the fort, their rifles pouring a withering fire to the frenzied ranks of the savages. That masked man again. The soldiers have come with him. Now we'll lick him. I've been at him, boy. Where's Joe? He's the one I'm aiming to get. He's hoping to have him on the critters. We can get back to the bridge now. We're not going back. We're staying here and fighting. The soldiers made quick work of the Indians. The lone rangers stopped only long enough to lure Colonel Martin from his horse. Then charging up to Joe, he covered the surprised outlaws with his guns. You're all covered. Don't anyone move. Joe, I know your voice. You should.  If I could get another chance to shoot you, I wouldn't miss. You're the one to shot away my gun. I'll get you first yet. Well, you're going. You'll get nobody. Martin, you already know that your assistant was the ringleader of this attempt. You can't prove that. There's 50 men to prove it. First of all, you reported there were no Indians. Then you fought against us when you thought the odds were on your side. We've got you all right. All right, you got me. But tell me one thing. How'd that army get here so quick? I'll answer that. My men were following the lone ranger. He showed them the shortcuts. But heaven forbid that I should ever have to ride that train again. Come on, tell us. I never in my life saw a riding like that mass man's. And that horse carrying a double load. Thank you, Colonel. You arrived just in time.  You needn't thank me, Martin. Men, rope those prisoners. We'll turn them over to the law and we'll wait back to the fort. Hold on. Wait. The mass man, Colonel Martin, he's escaping. Who is? I'll drop him. He won't get away with what he's done to you. Put down your rifle. But sir, I... Give it to me. I'll take a shot at him. Yes, sir. Can't let him escape without trying to get him. Tried today. Oh, Colonel Martin, you missed him a mile. For sure I missed in 20 years. Missed the lone ranger. You have just heard as a copyrighted feature of the Lone Ranger Incorporated.