Hi, and welcome everyone to our talk about practical challenges with port security admission. I'm Christian, I'm an engineer at VMware. I'm P, I'm a PM at VMware. I had a lot of questions about whether there would be like any time travel dinosaurs, etc in this talk, but I'm sorry, it's just a talk. So we're going to talk about, you know, like Christian said, practical challenges with port security admission. My clicker just stopped working one moment. It's DNS, never mind. So before we start, I just want to get the TLDR because then you know what to pay attention to and what's interesting to you in what we're going to discuss. So we're going to talk about port security admission. It's kind of new, but not really, it's extremely new. It's a security feature that is meant to kind of replace port security policies. We're going to talk about how it works. The main thing that we wanted to discuss though is that port security admission is quite simple to use. It's a very elegantly designed feature. The problem you're going to encounter with port security admission is everything, every workload and their dog needs privileges of some sort in order to work, like host privileges, network privileges, I don't know, privileges. And if you enable privileges to everything, thereby by passing port security admission, then that defeats the point of the feature. So if you put privileges to everything or how breaks lose, we're going to try to discuss how to and how break lose if I your setup so that you can enjoy the advantages of this great functionality. So before we start, let's take a look at what we have. So we will do first a recap about the whole PSA thing, then enter two main challenges and pitfalls, get into some action and finally cover some guidelines which help you and at the day to day base. Yeah, so let's do a quick recap of what port security admission is and how it works. Basically, you are going to have three distinct security profiles, restricted baseline and privilege, they restrict certain capabilities that we're going to discuss. And another axis of control that you have is how you, what do you do about the security profile? So we have audit mode, warn mode, and enforce mode. So when we talk about the security profiles, we need to see what is it that we are restricting or allowing in the first place? Yeah, so there's there are lots of capabilities at the pot spec. You could take a look at to secure your containers. It's settings about ab armor, host namespaces, host path volumes, capabilities or privileges. Yeah, so one thing that's funny, and I totally miss forgot the joke here, there's a capability called capabilities. I didn't know this and I found it was hilarious. So I'm certain there's like two of you with the same kind of humor as me. Isn't this funny? Another funny thing that is not so funny because it's confusing is we have the word, the keyword privilege being used in two different settings that mean two different things and you're going to work them together and that's not confusing at all.  So you have privileged as a pod security profile, you have privileged as a setting in your pod spec and that relates to like the Linux configurations. So when you're talking to your developers in your team, do you need this to be privileged? Make sure you know what kind of privilege you're talking about. Because as Christian can tell sometimes they're having that conversation, you think you're getting along and you're talking about two completely different things. Yeah, because if you just use one single host path, you enter already the privilege profile and you are not using the privilege Boolean here. Yeah, so the Boolean that we're looking at is one thing, the security profile, another thing, just wanted to make that very clear. Okay, so Christian, I kind of looked at the capabilities. I know like which like, okay, I need this capability. So I need a baseline profile, etc. Once I decide that, what do I do? Yeah, let's look at the last confusing names. There are the three modes, the audit mode, which as it says, creates audit log messages. There's also the warn mode, which returns warnings about the configured policy. When you use kubectl or any other client to apply things, they basically cover the same information but through different channels of information. So you get the same message in a different place? Yeah, exactly. And last but not least, if the force is with you, you can start doing enforcement and block pods from getting run or created, which do not comply to your wanted security profile. Yeah, so we have two modes that show you information but don't really do or limit or restrict anything. And then you have a mode that actually stops things from happening, which is security admission as it says on the tin. So in the end, we're dealing with three settings and three settings.  And you can apply one of those three and one of those three, two. Yeah, either on a pre-namespace space or you can also set it cluster-widely. But be aware, the namespace-based setting has more priority than the cluster-wide. But this allows you to enforce cluster-wide a less restrictive setting and have a single namespace, which runs your single privilege workload. Yeah, so the TLDR, I guess, is that it's a very broad configuration. It's not very detailed at all. It's not meant to be. It's meant to be simple. When you need extremely specific control over very specific things, then you're going to want to use one of those other tools, gatekeeper and pod security admission. They complement each other, for example, they work great together. So that's something you might want to do. So here's an example. When you're applying pod security admission to a namespace, you simply apply the labels as they're there. And when enforcing cluster-wide, you have this configuration file used at a Kubernetes API server where you can set the very same settings. There's always two settings per mode. The first one is the profiles we use for the mode, like here, enforce privileged. And the second one would be the version to define. Yeah. And you're the engineer here. Is this quite right? Yeah, I think there might be something wrong. Folks, take a look. Maybe you guess what it is. We'll come back later. Yeah, we're going to show you. If you guess right, what's wrong here, you get free coffee at the end of the talk at the free coffee booths. We're happy to join. We're happy to join, exactly. All right. So now we got an overview of what the feature does. So let's talk a bit. And at this point, you need to think, if you're implementing this from scratch, from a new thing that you're developing right now, you're free to take an app. We're not going to be offended, just a little bit sad. But you're free to take an app and wake up at the last section of the talk. And then we're just going to tell you the guidelines to develop stuff from scratch using PSA. That's not necessarily a problem. The problem is most of us are not working on brand new applications. We have a ton of stuff running, a billion services here and there, et cetera.  So we're going to talk about the main challenges and pitfalls for that. So to adopt security admission, you can basically go through three steps. The first step would be pick the right profile for the workload you're currently running and afterwards start optimizing and reducing the security profile to a better one or improving it to a better one. And the third step would be add continuity by taking care that you don't run into security issues in the future with regards to the settings. So let's start with the theory first. Step one, pick the right profile. So there's a rule of thumb where you can say if you have host name spaces in use, if your workload requires privilege or any administrative capabilities, host path volumes or any other things capability capabilities. Yeah, the lots of capabilities. Then you probably need the privilege profile for now for this workload. Yeah, so in the beginning, when we are starting to implement pod security, we're going to have a lot of stuff with a lot of privileges because we want to get everything up and running. And as we're going to discuss in a minute, if you try to make something run with less privileges than it needs, you're going to end up in bigger problems than if you give it broader privileges at first, you get it running. And then you can start curtailing those privileges so that they are not just everything can do whatever they want. So privilege profile basically means this workload can do whatever it wants. There are no restrictions. Baseline is a set of settings that is generally considered by the community to be like, okay, these are the things that cause problems. So these are a good baseline to restrict those. And then restricted setting is a different thing. The thing is that to apply baseline, you need to be conformant already with this entire list of settings, which when you're just trying to get the whole system to work, you don't want to do that. You first want to get things to run and then you start to optimize. And I think this is what it just said. Okay. All right. So what happens? Why did we say give privileges first and then remove them? Because if you don't give privileges to a thing that does need privileges, a lot of weird stuff is going to happen. Yeah, like if we just start enforcing the restricted profile, there will be for sure parts which don't get even created anymore. So that's a good thing because the admission works and actually blocks our workload and we get notified because it doesn't get run. Yeah. So the admission controller is, you know, controlling admission. So that's a good thing. But that's only when it works as intended. Yeah. So there's another case like there are things, we removed capabilities, but the workload may need them and the pod just starts to crash loop. But the good thing here is we hopefully have monitoring to also cover that and get notified there too. And that's the last scenario where the pod may even get running and yeah, okay, it doesn't get ready and doesn't get served any traffic. So others may hopefully cover that. But the very last thing is the pod gets running. It also gets ready. So should be good, right? Yeah, I think everybody knows this guy at work. You look, you look at them and it's like, looks like they're working. They tell you they're ready. Everything's fine. Zero work gets done at all. That's our employee of the month. And that's the type of pod or situation here that you need to be concerned with because this one's going to be hard to track. Yeah, maybe that one joins us for coffee later. So these are the must set settings which you need to set that at the pod specification because the default settings may be insecure or not when you set nothing, it will default to insecure defaults. So to get down to the restricted or baseline profile, we have to take a look at them, which were the list we had in a screenshot before, for example, and set the more secure settings there to comply with the better profile. Yeah. So just to get back to the larger structure we're discussing in the beginning, you give things more privileges so that they can run. Then you start to address the settings to optimize things. So there's a bunch of settings in your, in your spec that you need to, basically the defaults are not secure enough. So they're not going to be compliant with more advanced security. So you need to remove capabilities explicitly because the defaults are just not secure enough. So here are some of those settings. Yeah, that's for example, the run as non-root Boolean, which says, or which does the Kubler to block any pod process to getting run, which is running as root. Be aware if you just set that Boolean, your pod may not start because the user ID in the Docker file may still be the root user. So the Kubler will check that and block it from getting run. Yeah. Another setting that's pretty straightforward is second profile. This is a requirement by the, the more strict pod security admission profiles. So it's something you need to set as well. And yeah, finally, there's the allow privilege escalation Boolean, for example, at a container security context. And again, the capability to drop capabilities. So we have less capabilities in your pod. Yeah, exactly. Now we just talked about removing privileges and generally that's great because generally things have more privileges than they should. And you want to remove them as much as possible. So what do you do if a workload actually does need privileges to work as is the case for any host things or file things or, you know, sys calls, et cetera. You set the whole thing to privilege. I have an idea. We could just set it a privilege and I can go home now, right? Okay, perfect. Now, here's what you do. Let's say you have a service and application, whatever it is. You know it needs privileges to work because it requires some of those capabilities we described. The first instinct is going to be PSA work by namespace. I'm going to set the whole namespace to privileged. That will work. That's what I just told you. You should do that at first so that things run, but you should not stop there. Here's an example of what you can do. You can break the application into two. You have one namespace with privileges, one namespace without privilege, you reduce the surface area of things that can go terribly wrong by a good chunk. You don't have to stop here either. So if you're okay from PSA side, there may be still containers in a pod which requires privileges for one container, but the single container there, for example, could still get reduced in privileges and run more secure. Yeah, so when we come to this point where we're triaging things inside the namespace, we're not talking about pod security admission anymore. We're talking about those settings that we discussed before where you explicitly set things so that containers can do them or not. So this is not about pod security admission, but this is something you should do because pod security admission, like we said, is not granular. When you want granularity, you need to do that yourself. You can do it manually, like we're describing here. You can use other tools like gatekeeper and et cetera. What I just said. And now let's go to some practical examples. We discussed before the capabilities that we are trying to restrict or not. So Christian, what types of applications are going to use those capabilities? Yeah, there's some workload I think every one of us requires when running stateful stuff like CSI to actually get some volumes for your pods, which requires host paths are also the privileged Boolean to format disk or mount disk and at your notes. There's also monitoring like the node exporter, which needs to read the information from the file system or lock shippers, which of course needs to read the locks. And lastly, there's also the CNIs which for sure need the host network setting to do its work. Yeah, now we discussed before in theory that if you try to restrict privileges for a thing that does need privileges, bad things probably will happen. Some of them are easier to find. Some of them are not. How do you identify what's wrong with your workload? So the good thing is PSA helps us with that. We can use the audit and warning modes to show or to highlight us what's wrong with our workloads if we want to run in a specific profile. Like here, there's an audit log message which shows us that our pod violates a certain policy because we didn't set the allow privilege escalation Boolean, for example. Yeah, and like we discussed before, warn mode shows you the same thing just in a different way. So here you get a warning not on the audit log, but on your command line when you try to apply the manifest. And the cool thing here is this namespace is not yet scoped down. We can use kubectl apply a kubectl label with dry-run mode to see how it would look like or if there are pods currently violating that profile if we start enforcing. Yeah, and if you apply any new pods or new workload, you also get messages, for example, in kubectl or any other client talking to the API server. Yeah, and I think Christian alluded to this earlier, but the cool thing to do is you set the whole cluster to warn mode when you kind of don't know what's up and just want to see everything that you need to fix. And then you can start applying restricted policies to specific namespaces as you fix them and adjust those settings and partition things, etc, etc. Yeah, and to not forget, if the force is with us, it blocks also pods from getting created. Like here, a replica set which doesn't get created, it's pod because the admission blocks it from that. So once you kind of got the point and you don't get a mountain of errors anymore, then you set enforce and that's actually going to, you know, just boot out. It's going to not allow things to run if they're not compliant as opposed to warn mode, it just throws a warning, but it runs anyway. And now we're back to talking about our favorite colleague. Yeah, so to also find out what's wrong with him or to identify that something's wrong with him, we should start going into. Yeah, wait, wait, wait, sorry. No, so I just, I just wanted to highlight one thing, but to create admission has it's great in terms of showing you what's wrong, but it can only show you what it can see and it can see everything because you have these applications where like for Kubernetes purposes, it looks like the whole thing is working just fine, but it's not performing the function you expected it to. So you can trust PSA up to a point, but you still need to test everything if it works after you restrict it down to something like if you, for example, take a look here, there's a poor request and we did run all necessary tests to check that everything is still working again here at cluster API. Yeah, because for some things, for Kubernetes is going to look fine, but it's not actually going to work. So you do need tests in place. Yeah, so if the test part, if the test pass, it's great. But what to do if they don't pass? Yeah, so you're going to have two different scenarios here. So like you think you adjusted your privileges right and you got the right profile or permissions, etc. You ran your tests, it doesn't work. First thing you're going to think, oh, this just needs more privileges. But that's not necessarily true because sometimes the functionality, like let's say the actual code, the thing your program does, needs less things to work than what your config thinks it needs. So it's very common to find configs that are more permissive than what the application actually needs. And that's basically, it's going to be a very easy fix for you. So don't overlook that, for example. Yeah, for example, here, upstream is also aware of the change or the introduction of port security admission. And there's work done like, for example, for a third manager to comply with the least profile possible, which is in this case restricted, by just adding the capabilities drop with the capability thing, you know. But yeah. Yeah, so as you can see here, if we don't look at the config file, if we just look at the actual thing that the thing is doing, let's say, it never needed privileges in the first place. We just had to apply privileges because we forgot to be explicit and say this thing doesn't need privileges. Now that we said it doesn't need privileges, it complies with the security policy. So this is like a, this is a politics issue. It's not a functionality issue. So it's something to keep in mind. And like we said, this is all you needed to do to get the thing running. So it's the easy fix. What I just said. Okay, now, sometimes you're, you're trying to do this thing of removing privileges, reducing the surface area of privileges in your, in your cluster. Do we get paid for every time we say privileges? I hope not. Anyway, sometimes you actually need those capabilities because your application needs to work. It's going to need the sys calls, the host access, et cetera, et cetera. So in that case, let's go back to the, what we discussed before, what can we do? Yeah. So again, we can separate the workload by namespaces to get into different profiles and the additional thing to configure the containers and reduce the capabilities which are not needed for single containers too. Yeah. So what does this look like in practice? Let's talk about, he's fear CSI controller. It has a lot of components. Christian, how do you address this? Yeah. So we have a deployment and a demon said, and we know that a demon said needs to do stuff like mountain discs and formatting discs, but the deployment should be totally fine with the restricted profile. So what we can do is because it doesn't need any privileges, we can do the namespace separation thing, configure it to run as non-root and so on. And finally, we would be there and are secure for this deployment already. Yeah. So there's two things to think about here. One is how did you find that this is the case? Yeah. Like again, we did adjust, we did take a look into the code, doesn't need those privileges and we did for sure test that it works afterwards too. And you tested with foreign mode and with your own unit tests and yeah, exactly. So the whole thing, the thing must work afterwards. So, okay. And another thing we can do when we look specifically at the part that's left here, we know this is going to need privileges to some extent because it needs to access the hard disk, but there's a small container which basically exposes an HTTP service to the API server which could get reached. This one doesn't need any privileges like the other two containers. So we can also scope that down and reduce the privileges of this container and by that reduce the attacking surface. Yeah. So before when we started, let's say I just read about pod security admission for the first time today and I'm thinking, well, this is a CSI driver, so it's going to need privileges because it needs to read the disk. I'm just going to set the whole thing to privilege. You could do that, but that's going to give you like this whole list of things where things can go wrong. So there's a big surface area with privileges. What you can do instead is you break it down. This part doesn't need anything. I can just set it to restricted within the part that needs something. It's like, look, there's only one thing with an HTTP endpoint here, which like it's what I'm more worried about. It doesn't need any extra capabilities. So I'm going to restrict this one as well. And then we go from this whole thing being privileged in a more naive approach to only precisely two little bits of it being privileged in a more, let's say refined approach. Yeah. So there are other examples where this should work. Take a look at the Prometheus home chart, which is there. There's the node explorer in there which requires the privileges, but there's a lot of other stuff like Prometheus itself or its additional deployments, which should be fine with running restricted. So the same approach could be done here by separating the node exported to a separate namespace. Yeah. So we tested the CSI driver. This one we didn't, but we're just saying it's kind of the same concept. This concept is probably going to translate to a lot of the stuff you work with. So that's the general idea to keep in mind. So this is what I said. Some workload requires more privileges, but not every part of that workload does. And the smaller the surface area running on privileged mode, the better. So let's talk about some guidelines. Yeah. So we have to think of PSA preemptively, and we should make it support us through the whole development process. So there's some guidelines to take for that. Yeah.  You're going to get those errors. You're going to see what's going on. Start setting and force mode on a per namespace basis as you go to configuring things individually. After you're done with that, then you can enforce cluster wide defaults. And you should know that once you're enforcing cluster wide defaults, that's going to be good because you're not going to end up with regressions because things are just not going to run, but that's going to be bad because things are just not going to run. And sometimes you're going to forget that you set the setting. And that's going to be problematic. But you're going to be adhering to a very high security standard. Yeah. So we're not only transitioning. We're good. We also start creating new things. So for that, best would be to create a new namespace where we already set the enforce mode to the restricted profile, which we want. So this way we can work backwards. And when we know that this workload needs a certain privilege, we can go the way back up and know that, okay, it requires that we have to go to that privilege. So for sure, at the end of end to end test, that all works. Yeah. And for the things, like we said, the things that do need privilege, don't forget, compartmentalize, split the namespaces in the privilege namespaces, look at the individual pods, go fix their settings, don't just leave everything open up just because one part needs it. If you like to read, the internet has a lot of things to read, so you can do that. And couple more things. Yeah. In CLI, you can use Qverno, which has a CLI tool, and some pre-built YAMLs to apply or use Qverno as linter during your development process when you adjust some manifest. And see immediately that there's something wrong, there's something misconfigured to what we expect. And here's the thing that was wrong before. We set the version to latest. And so far, in the history of pod security admission, there have been no, like, big breaking changes. We're not expecting there to be. But we don't know what the world's going to look like one year or two from now. If you put latest on stuff that you reviewed today, it might break down the line. So just put this heading for the version that you're currently using, that you know it works. And if you want to review it at some point in the future, then you do that deliberately, but you don't want your... You don't want to be enforcing a policy that you don't know what it is because it just got updated and you didn't notice. That's a recipe for headache. Yeah. So at the end, we applied PSA to everything. So with Secure now, I can close my epic, right? Exactly. So now that we got to the end, you applied PSA, you're enforcing a restricted profile.  It's Friday afternoon now. We can go have a beer being 100% calm. There's just a couple of things you want to look at later. But you know, it's practically done at this point. Yeah, it's for Monday. Yeah. We're not on call, right? Okay. So thanks, everybody. I hope this was helpful. We wanted to make this a very practical thing with practical examples. Easy to understand, nothing fancy. When you are working on this in practice on your systems, we hope that this is going to be helpful to review so that you kind of have a light based on the work you already did. Thanks, everybody. Thanks.


1. Seating Arrangements in the English Language Classroom One important factor to consider when teaching English abroad is how you arrange the seating in the classroom. Space in a classroom can be limited at times so it's important to maximize what you have available. There are multiple ways to arrange a classroom and knowing which ones will provide the most benefit is important. To ensure the best environment for the students and teacher it is essential to have an understanding of the options, as well as when and how to use them. The basics of classroom layout As a rule a classroom will generally consist of at least four walls, an entrance, a surface to write on and desks for the students. Even with only these resources it is necessary to be aware of a room's limitations. As an example, the classroom s desks should be arranged to provide all students a clear and unobstructed view of the board. Otherwise, some students may have trouble comprehending the material because they cannot see what is written. However, trying to create optimum advantage for each student in the available floor space can cause other problems. As an example, students need to be able to get in and out of their desks comfortably. Putting all the desks in the front row might allow everyone to see the board, but could also mean that students aren't able to quickly or easily take their seats for class. The four most common classroom arrangements are rows, stadium, horseshoe, and groups. However, there are advantages and disadvantages to each configuration that have to be considered when selecting one. The pros and cons of the row layout are rows, where each student s desk is aligned in a grid-based pattern facing the board may seem like the obvious first choice. This arrangement allows for larger classes to view the board and the teacher, while using less floor space. Students can collaborate with neighbors for pair work within their rows with no need to move. It also allows the teacher to move among the desks if needed. However, the teacher may find that it becomes tougher to manage group exercises this way. This arrangement could also create blind spots for teachers where some students receive less direct interaction with the teacher. This is an important consideration to think about. The student s ability to communicate with one another and the teacher is key to learning a language and conversation will constitute much of the course. The pros and cons of the stadium layout Stadium, sometimes called columns, is an arrangement where desks are divided evenly down the center of the room and to row groups angled towards the front and center of the class. This style is not used as often as the others, but it does have certain benefits. With this style all students can focus on the front of the classroom, whether it s the board, the teacher or someone presenting to the class. Because the desks are divided into group students can quickly transition to group work while allowing the teacher to check on individual groups as the need arises. This configuration can also help encourage students to engage as smaller groups are less intimidating for newer students. A negative point to this configuration is that students can become reliant or too familiar with their own groups and not engage with the rest of the class. The stadium configuration also requires more space for the same amount of students than other arrangements and depends on the location of the board. The pros and cons of the horse shoe layout The horse shoe or semi-circle form requires the student s desks be aligned in the shape of a u or a half circle facing the front of the room. This arrangement can offer distinct advantages for the purpose of class discussion, an essential part of language learning. It also has the benefit of focusing the class s attention in one spot while also allowing the teacher to easily see and call on each individual student. It can create a space or stage for activities and presentations. The horse shoe configuration isn t without issues, it requires a larger classroom and a smaller number of students. It can also increase the noise level significantly and can hinder the ability of the class to conduct small group work or pair work. The pros and cons of the group layout The last of the four most commonly used styles is groups. In this configuration the desks are divided into smaller groups or pods, generally of around four students. This format is generally more suited to older students. These students tend to work in groups on a regular basis throughout the course of the class. This configuration has the advantage of allowing for quickly dispensing work to the pods and allowing for movement between groups to help. This style is more useful to older classes as younger students tend to get distracted more easily. The group configuration has limited application for lecturing as typically half the students will have difficulty seeing the teacher and board. Each of these four classroom arrangements offers unique advantages. A best case scenario would allow a teacher the ability to switch between them based on which is best for the goals of the lesson. It s also a good idea to get a consensus from the class and confirm how they best learn and in what arrangement. Are you ready to teach English abroad? Speak with an ITTT advisor today to put together your personal plan for teaching English abroad. Send us an email or call us toll free at 1-800-490-0531 to speak with an ITTT advisor today.


Good morning, Hank. It's Tuesday. Last night I dreamt that there were two Ligars walking through my backyard, a Liger being the offspring of a male lion and a female tiger. This struck me as pretty unusual and conceivably impossible, so I began to investigate the situation within my dream. I considered, for instance, that there is often wildlife in my backyard, deer, coyotes, foxes. One time I saw a beaver. It did seem unlikely that there would be two Ligars, given their rarity, but I reassured myself that they were probably brother and sister. Also, Ligars are not, uh, native to Indianapolis, so they had probably escaped captivity. And if you were an escaped Liger in Central Indiana, my backyard is one of the places you might seek out, because it is wooded and contains lots of potential food, mostly in the form of four million chipmunks. All in all, it seemed perfectly possible to me that sibling Ligars had escaped their cages to dine in my backyard. The problem, of course, is that my investigation of the Liger situation began with the conclusion there are Ligars in my backyard. And then I worked my way back to the story of how they came to be there, rather than pausing to consider that the Ligars I thought I saw might have been, for instance, deer, or that I might have been, say, dreaming. My friend Amy Cross Rosenthal once said correctly that nothing is less interesting than other people's dreams, and I apologize for introducing you to my subconscious, but I mention all of this because it seems to me that the Liger delusion is at the heart of a lot of contemporary discourse, especially around politics. You start with what you already know to be incontrovertibly true, that Republicans are crooks who only want to line the pockets of their wealthy donors, or that Democrats are crooks who want the government to control every aspect of human life, and then you look for the how and why. I mean, these days it can be difficult to even know when you believe in a conspiracy theory, in part because conspiracy theories are sometimes true, and in part because no matter the subject, the closer you look, the more you see. Put another way, the more you consider Ligars might be roaming Indianapolis, the more explanations you'll find for why. Take, for instance, the following conspiracy theory, which may, of course, prove to be true. Republican donor Elliot Broidy paid a woman over a million dollars not to discuss their alleged affair. That's known, but the conspiracy theory holds that the actual affair was between that woman and Donald Trump. And then Broidy stepped in to cover up that affair and make the payment. Now, if you look for explanations of why Broidy might have done this, you will find them. Broidy has profited tremendously from the Trump presidency. He also has a history of covering up affairs for his friends. And no, stop, because none of that means he covered up an affair for Trump. Of course, the same happens on the right, where conspiracy theories from Benghazi to Pizzagate are presumed true by many. But my worry is that many of us are falling into the trap of believing that we, however we define that, we are the ones alive to the real reality, while those who disagree with us are mere sheeple, a term that literally dehumanizes others. You see this all the time with people saying, Wake up, or keep dreaming, as if only those we disagree with can fall prey to the Lager delusion. What I have found while looking for Lagers is this. I am far more likely to believe in allegation to be true or to be important if it confirms my pre-existing worldview. And if it would challenge my worldview, I am likely to believe it to be false or else irrelevant. Sometimes on TV news or political radio or podcasts, you'll hear the phrase, We don't yet know all the facts, but, and then after the but comes some speculation or a statement of implication. Like, we don't yet know all the facts, but someone saw two Lagers in the backyard. We know that. Hank, I have to stop beginning with the conclusion. I have to stop speculating ahead of the story and instead wait for the facts to come out. And I have to stop saying but after we don't yet know all the facts. But I don't know how. This is the part of the video where I turn it around and find reasons to be hopeful and make a call to action. But I don't know how. I do think being aware of our conspiratorial instincts can be helpful, but I don't know how to escape the Lager delusion. Hank, I'll see you on Friday.


Good morning, John. It is the 11th annual Project for Awesome, and that means that I'm here to tell you about why solving hard problems is so hard. There's a bit of a universal law in logistics that the last little bit of transport that an item has to do to get to its destination is by far the most difficult leg of the journey. This is true in telecommunications. It's also true in, like, your circulatory system. It's called the last mile problem. Weirdly enough, it takes almost as much energy and work to get, like, something that I ordered off Amazon, say this, from, like, China, where it's manufactured all the way to, like, the distribution warehouse in Missoula, Montana, as it does to get it from the distribution warehouse in Missoula to my house. This is a very squeaky prop. So what's going on here? The moment this thing is manufactured in China, it has, like, one place to go to. It goes to its port. And then from there, from that port, it can go to, like, maybe a dozen or so other ports in the world. Then when it arrives at whatever port it gets to, it has maybe a few thousand different warehouses or stores that it could end up in. If it ends up in a store, it has to wait for a person to go there and buy it. But if it's being shipped directly to the person, directly to me, then it ends up in this centralized local warehouse with tens of thousands of other products. And those tens of thousands of products have to go to potentially hundreds of thousands of different individual places. For 99% of this thing's travels, it could have gone to, like, one of a few thousand different places. And that last 1%, it's gonna go to one of literally hundreds of millions of places. The last problem is kind of why, oftentimes when we have really big ideas about how to fix things, those ideas don't work. Because when you get to the last mile, your one overarching solution to all problems becomes tens of thousands or hundreds of thousands of different solutions. That are all hard to work out. And that's all work, like hard work. And when it comes to delivering healthcare or water or food in parts of the world where those things aren't available, it used to be work that just didn't get done. But now people are doing it. Organizations like Save the Children and Last Mile Health. And they solve the last mile problem for healthcare the only way you can solve it, with problem solvers. They work with and train and employ people from those communities to become community healthcare workers. Those people then help to grow the economy, to educate other people, and to keep their communities, and thus the entire global community more healthy. So this cost money, but let me venture that maybe this is one of the best things we could possibly be spending money on as a society. But what if, in addition to helping fund that very cool work of solving that very hard problem, you also get cool stuff? Well that's why you should go to projectforawesome.com slash donate, where for the first part of the project for awesome, all of the money up to $700,000 will be matched. And all that money raised in the first half will be split between Last Mile Health and Save the Children. Stuff you can get, smash pennies, commemorative coin, digital download bundle with a bunch of different really cool stuff, and including outtake scenes from Turtles All the Way Down.  Lots of stuff, some of it's already sold out, some of it is well on its way to selling out, including the project for awesome charity calendar, which I just happened to have on the floor right here. Which includes this photo of me being splashed in the face by champagne. No, it is not photoshopped, and yes, I do know what it's like to have champagne on the inside of your sinuses. During the second half of the project for awesome, all of the money raised will be split among charities voted on by the community. And the way this works is people will make videos promoting their favorite charities, and if you like those videos and you like those charities, you can vote on them at projectforawesome.com. The charities that get the most votes will get a portion of the money that we raised in the second half of the project for awesome. Also, the 48 hour charity livestream is going on right now. You can check it out at projectforawesome.com slash live. You can also probably just find it on vlogbrothers channel. We will be having a lot of fun and doing a lot of weird stuff, and I really want you to join us. And if you want to make yourself happy, both with cool things that you can have access to or have shipped to your house, and with the knowledge that you are helping solve some of the hardest problems that humanity has left to solve, you can go to projectforawesome.com slash donate. John, I will see you in the live stream.


Hello people of the internet, my name is Johnny, welcome back to yet another FNAF movie news video. Today we're going to be dissecting and analyzing the final trailer for the film. According to Daco, who got sent the trailer early from Scott and Blumhouse, this is the final trailer. So I guess this is the last we're going to see of footage before the film releases probably besides a few clips that are going to appear on TV, you know, TV spots stuff like that. As for full trailers, it seems like this is the final one, so we got a lot to dissect. If you're excited for the FNAF movie, don't forget to scroll down, tickle that subscribe button to stay up to date with everything going on with the film. We got yet another FNAF movie news video coming out tomorrow, and also if you missed my reaction to this brand new trailer, I'm going to leave that link down below. But now let's not waste any more time, we will be watching an upscaled 4K Ultra HD upload of the trailer just to give you guys a bit more detail. And like I said, I've already seen this trailer, I've already reacted to it, I'm going to be pausing in between the trailer if you've not yet seen it. I highly recommend watching the trailer coming back here to see the analysis. And now, here we go. So it starts off with Mike driving up to what appears to be his house. Hi, this is Mike. I was just calling to see if that job that you offered was still available. Yes. So we got Mike Schmidt on the call with William Afton, or as he's called in this scene. Steve Raglan. Most likely this is just an identity hiding name, you know, he's trying to create a disguise for himself.  So just like in the trilogy novels where he was called Dave Miller, he now in this film has a brand new disguise name Steve Raglan. But going back a bit, we get our first look at Abby in this trailer, looks like she's playing on the floor. You got Mike in the background. I'm just going to see if that job... Once again, calling William. And from character descriptions, we do know that Mike is the sole guardian for Abby. Seems like he's the one having to take care of her. And we get more evidence for that in the form of this notice letter right here. This is a notice of delinquency. A lot of people have been pointing out this may be a notice for not paying his bills, not paying his mortgage, not doing a proper job looking after Abby, who is still a child. It would also be when he's beating up some dude in a fountain at his job later on. That would make a lot of sense as well. But clearly he is not in a good financial and, you know, work situation going on here. He's in trouble. Which is why he tells William, I will take anything, I will take anything, any job you have. I need it right now. And also look at how surprised and shocked William is. He's like, wait, someone's actually calling about this place? Who in their right mind would take this job?  He's like, yes, it's still available. So it looks like we got Mike getting ready for his first day on the job. Peek, the sister location sun clock in the background as well. Neat Easter egg there. Brumblum house. This was huge in the 80s with the kids. This was huge in the 80s with the kids. I would know, Mike. We get a shot of, of course, the taken down sign. The closed sign with all of the art taking off. The letters falling down. All of the vines and shrubs growing around it.  The owner's just not ready to let it go yet. They shut it down years ago, but the owner is just not ready to let it go yet. That's definitely William saying that. That is definitely, you know, Matthew Lillard's voice. The owner's just not ready to let it go yet. A lot of people are kind of split halfway down the middle of who the owner is. A lot of people are thinking, it's just William. So there are definitely some people who are curious about Mary Stuart Masterson, because we also know that she is an unnamed villain in this film, and we still have yet to see her in any official media for this film. So I also think it might be likely that she is kind of the mastermind behind everything. She's the one keeping the pizzeria open. She's the one not letting it be fully destroyed and shut down just yet. I will work and you will sleep. I understand. So he brings Abby along. I know a lot of people are questioning this decision. Definitely not the best idea from Mike, but again, keep in mind, he's the only one looking after her. Most likely just didn't want to leave her home alone. So he brings her along for the ride, she goes, I understand, even though it's quite the opposite way around. We're going to see later on in the trailer because he's the one that falls asleep. But she brings along those stuffed teddy bear possible foreshadowing Freddy Fez bear plushie. Them walking in, peep, the Honda, such a cool shot. The outside, the facade of the pizzeria looks so so good. Oh my gosh. They're unlocking the gate. This is our first look at the inside of the restaurant. This is of course the entrance. Got some gumball machines, got some posters to your left and also to your right. Just picturing some children, probably like, you know, same vein as my fun day at Freddy Fez Bear's Pizza. I love Freddy Fez Bear's Pizza. Oh, look at the dining room. It's all destroyed, right? There's so much debris everywhere. Chairs knocked over, party hats in places, probably shouldn't be. Coin counter knocked over as well. They're walking in. Give me your hand. They take each other's hand and they explore the pizzeria. Another poster over here as well. And they go into the employees only office. We can tell this is the office because this looks to be, you know, still the dining area with the checkerboard pattern, the purple, the blue, the bricks. And then you go down the hallway into the office right here. You can even see a bit of the window right here. You've got an exit out this side, which is interesting. You've got a fire alarm, security camera. This is most likely the supply closet, the janitorial office. We're going to see later on. Another wide shot of Mike coming out from the opposite end, it seems, of the office hallways. We do know that the office is down this hallway. Docko confirmed it and we've already seen the shot. So there's not too, too much to talk about. Besides, again, the dining room looks insane. The stained glasses of the characters. Chica, the cupcake Bonnie looks like this is Freddie. Mike in front of all the drawings. We get a better shot of the drawings later on. So we're going to move past that right now. Again, the Freddie stained glass again. Oh, the set design is just so, so, so cool. Shout out to everyone working on this film. Creepy shot of Foxy's shadow on a door. Again, we've seen this in the teaser trailer. Producer of Megan, Rats in the vents, just to symbolize how old and abandoned this place is. We do see later on in the trailer, a shot of a vent opening. So I was curious to know if any of the animatronics could go into the vents. If only there was a small enough animatronic that could fit in the vents though. Let's remember that. We get a shot of Mike in the office and of course the main thing everyone's been talking about with this shot, the employees of the month. If you've not seen just yet, that employees of the month poster featuring a whole bunch of faces is home to a whole bunch of Easter eggs and cameos. You've got Docko, you've got Ape It Ryan, you've got Baz, you've got DJ Sturff, you've got Fusion Z Gamer, you've got Rez Bowsky. So, so, so many FNAF content creators on that employee of the month board and that's just so cool to see.  I was especially pleasantly surprised by DJ and Fusion. They weren't flown out to the FNAF set like Docko, Raz, Baz and Ryan. But again, I'm very happy that they could still get a cameo in the film because those guys are fantastic. I fricking love both those guys and all the guys on the board. Anyways, going back to the office, we've got Mike. Looks like he's just turning on the light switches. Nothing too big. You've got the phone, you've got the fan, you've got the help wanted, you know, soda cup. You've got the office chair back here. This board actually has an it's me Easter egg, fun fact. But the main thing I want to bring up is the lack of security doors and I guess window as well. Maybe I was tripping when I was like, hey, there's a window over there. If you remember back when Razbowski got back from going to the FNAF set, he made a video and he talked about the office a bit and how one major aspect of the office changed. And it turns out that was the security doors because now they're just basic doors which, you know, makes sense realistically in this context. It also, it seems like throughout all the spots we've gotten for the movie, a lot of it takes place outside of the office, you know? Like there are so many shots of Mike and Vanessa and Abby out in the dining room, crawling through the vents, you know? Just in other rooms where they're chit-chatting about the backstory. So it seems that the office might play a little bit of a small role in this film which honestly, I'm all there for it. I think the film would be very, very boring if it was just Mike in the office the whole time. So yeah, honestly, a change I'm not too, too upset about because I just want to see more of them walking around the pizzeria. Like that is such a cool environment. Of course they're going to use that to their fullest potential. All you have to do is keep your eyes on the monitor. All you have to do is keep your eyes on the monitor. Get a shot of him turning on the monitors. And look at how retro this setup is. Looks like we've got, what, seven monitors as well. Pirate Cove, Pirate Cove gets lit up. We can see that for the first time. The Celebrate poster as well. The classic Celebrate poster from FNAF one. I was kind of hoping they would do a, sorry, hit the mic. I was kind of hoping they would do a remastered version of the Celebrate poster with the FNAF movie characters but I guess not. I guess they wanted it more as an Easter egg for fans. The help wanted paper crumple is there as well. Again, the soda can, I already pointed that out. But again, look at how retro all these cameras are. And I talked about it earlier. Mike can see so many different cameras at the same time. Like he can see the hallway. The dining room, Pirate Cove. You can see four other rooms as well. I really hope they play into that aspect because, you know, as we all know, in the original FNAF games, you can only look at one camera at a time because we don't have a full monitor display like it does in the movie. So I'm very curious to see how they play into that mechanic for the film. Again, even though it doesn't seem like they're gonna be in the office for very long, I hope they get at least some decent scrim time of Mike, you know, being a classic security guard watching the camera. I was like, wait, did I just see someone move? He goes to turn on a VHS tape and lo and behold, it is Kim. This is the training tape. It looks like we saw in the original teaser video. Freddy Fazbear's We're Fantasy and Fun Come to Life. Okay. And you got Mike just going, okay, I guess this is a little weird, but you know, anything for money, I got to get that money. And then we've got Vanessa showing up. Look at how, look at, dude, I, okay. Huge shout out to the actors as well. I've been praising Jim Henson's and the set designers. Huge shout out to the actors cause they're all doing an amazing job from the trailers alone. Specifically Josh Hutcherson. I love his portrayal of Mike. It reminds me a lot of how Mike was depicted in the log book. You know, very sarcastic, very like, whatever, let's just like get this over with. It's amazing. I love, I love his portrayal of Mike so, so much. We got, hi. Let me in, please. This Halloween. We must be new security guards. We got Vanessa showing up. Vanessa is a cop in this version of the film. And again, massive shout out, Elizabeth Lail kills it as Vanessa. Can I help you, officer? Have you met them yet? Have you met them yet? Yeah, look at this. This is not the office. This is like some break room it seems like. You've got a dart board up at the top left. Yeah, it seems like just some break room, some lockers here as well. Got a drawing of in someone's house, by the way. Freddie, Bonnie, Chica, Foxy, as well as three kids. I've seen some people point out this could be Vanessa herself, cause it looks like a typical officer uniform, you know, blue with a yellow badge. It does make it a question how Vanessa knows so much about these missing kids and Freddy's and the security guards, you know, is she showing up to see, all right, well what actually happens when there's a security guard here? Cause all the other ones have gone missing. I've seen other people speculate that she was friends with the children who got killed. And that's why she is still, you know, so dead set on coming back to this location, trying to figure out what happened. That's why she knows so much. Also interesting, it says B-Day right here. So someone's birthday happened pretty recently. More shots of Mike first finding the animatronics on the main stage, pulling back the curtain. Med-Hoo. Med-Hoo? Them. Them. So, so awesome. These shots are insane. Just look at, I still can't get over Freddy's endoskeleton. The endos in this film are insane. You can see Chica just in the darkness there. And then he does the one thing he told Abby to do, not himself, he's got a job to do. He takes a little bit of a meep, meep, meep, meep. Also, notice this is a different shot. He's also got some pills there, maybe some sleeping pills and a journal. Notice this is a different shot of him sleeping. He's got no headphones on in this one, but he's got headphones on in this one. It could be, this is when he first falls asleep. You know, he puts on some relaxing music, he dozes off, falls into the desk, and then I guess they could have fallen off as he hit the desk, but we don't see them anywhere. So I'm guessing this dude might fall asleep two times. And then everything goes crazy. We can see a bit more of the office during these kooky shots, all the monitors glitch out. You can see a Visit Nebraska poster, I guess. The Celebrate poster is still there, you can see it's been edited slightly because Bonnie's guitar, his original guitar was actually copyrighted, fun fact. So they've had to change it up. You can see a Bonnie plushie right here. So music starts blasting everywhere, the power comes on, everyone activates, the curtains open. Look at that, Mike is freaking out. He's like, I gotta stop this. He turns off the power, even though it looks like he turns it on in this scene, maybe a bit of splicing trickery. Let's go back because that was a very chaotic sequence and we missed quite a bit. So we've got the arcade turning on. We can see more posters, whole bunch of, seems like generic arcades, I guess. You got Ski Ball over here. Yo, shout out Ski Ball. The ball pit is over here as well. There's a sign here, can't quite make out what it says though. You got the cafeteria over here, you've got the prize counter right here, the let's eat sign, all of the officially licensed FNAF merchandise as well. These are the Sanchi plushies. I think these masks were made by Bio World or maybe these are Sanchi as well. I can't quite remember, but you've got officially licensed merchandise. You can also see a bit of the movie specific merchandise here with the cups. The stage opens up with all the animatronics. I also love how Bonnie's ears go sideways so much. They're performing on the stage. They look so good, man. Freddie, Bonnie, Chica. The cupcake is singing along as well. Look at them go. And look at how accurate the stage is. You've got the bricks on the background. You've even got the clouds as well for decor. Here's a shot without all the blinding lights for a couple of frames. Oh my gosh, man. I cannot get over these guys. Yeah, the clouds you can see, all the lights around the stage. It's just, it's so incredible, man. So, Bonnie blows up. He's dead. I still don't know what's going on with this scene. I do not know if this is a result of Mike quickly shutting down the power and it, I don't know, I guess gets confusing and it's like, all right, turn everything off and that causes some electrical spork in Bonnie. Or maybe this just happens and all the power goes out because again, he's turning it on here. Like it seems like this is when he first puts on all the power. So it could be, he turns on the power, he gets himself situated in the office, the pizzeria, puts on music, falls asleep, everything goes all crazy, I guess. Again, it could be trickery with all the arcades turning on because that could just be him turning on power for the first time and then lights, you know, not lights. Music starts blasting, the animatronics come alive, too much power, power outage. I don't know. I think there's some scene trickery going on in here. That's what I'm trying to get at. We got Mike switching between all the cameras. We can see the arcade, a hallway here right behind my face cam, the dining room, the main stage as well. Classic shot of all the characters on the main stage. It looks so, so good. I think I missed one earlier. Just another arcade. Cool. In the 80s, kids went missing. Got a bit of backstory with Vanessa. It seems like she's going to be our lower dump, I guess. It seems like she's really just there to fill in exposition. Close-up shot of Foxy though. Interesting to note, he's got actual pants on. Like you can see the button and everything. These aren't real pants. Seems like they put on the character. Endo hand, the hook, all of the scratches and missing pieces of his chest arms. He's completely missing his legs. He looks so good. A shot of someone being dragged away. My best guess right now is probably the night guard before Mike that we saw in the teaser trailer who got killed at the exit. That's really all I can think of right now. It looks like it takes place in maybe the same area. Maybe this right here, this door is the exit that he's trying to get to. And now he's being dragged away. I don't know. Who do you think this is? The police search Freddy's top to bottom. Police search Freddy's top to bottom. They have not found anything. We've got Foxy right here. You can't really see him. There we go. Foxy stained glass right there. Let's go back and another shot of Vanessa. Looks like she's in a different outfit as well that we saw her in earlier. Looks like she's in more of a jumper sweater. Earlier she was in her full uniform, which by the way, Shelly seems like they might've done a bit of a name change here. Originally we got reports that Vanessa's full name was Vanessa Monroe, which was already different from Vanessa in security breach whose last name starts with an A. But it looks like either that report was false or maybe they changed it. Not entirely sure. But yeah, her full name is Vanessa Shelly. We've got Abby exploring a little bit. We can see it. Looks like these are the steps up to the arcade room. Over here we've got the main stage. Over here we've got Pirates Cove. Something I love is how they've kind of, looks like they've brought the stages closer together. So it looks a little bit more identical to what, you know, those three stages looked like in showbiz pizza place with the Rockfire Explosion. How you had all of the main guys who usually traditionally were the singers, the actual band members, no disrespect to Rolf DeWolf and Billy Bob, but they were more like for comedic purposes. So they had their own like full stages off to the side. So it looks like they've kind of done a similar thing with that here. Got Abby exploring around. That is going to be a very bad idea. Abby, you can hear children giggling. Could be the spirits inside the animatronics, but it looks like the curtains do open up. No, actually, I guess they were already opened a bit. Hello? So she's probably looking through that gap. Seize Freddy. They never found him. She's like, what?  Freddy Fazbear's Pizza Place. Yeah, look at how old and decrepit the sign is. Oh my gosh. We got our first look at Joseph Polyquin as Carl. We've got Christian Stokes as Hank or Uncle Hank as sometimes he's referred to, mainly in its Twitter description actually. Then we've got Cat Carter Sterling as Max. These are brand new characters. And fun fact about these brand new characters. Another Easter egg in the scene. If you look at Carl's shirt, you can see it is midnight motorist. How cool is that? Not entirely sure who this is right here. Looks like they're breaking into this place. Looks like this could be a crowbar. He's got a baseball bat. So seems like they're probably breaking into Freddy's. Probably do some vandalizing. I don't know. They're pulling up in their Chevy. Like, hey, let's go break into that old building. But it's not gonna end well for them. As we're gonna see as, you know, Hank goes into the janitorial closet.  This is probably Bonnie's first kill, I'd imagine. What does Hank got here? What is this? Oh, he's turned on the light. Okay. So he's turned on the light. It's swinging back and forth. He turns around and he, well. It's seemingly he's dead, bro.  So there's gonna be blood in the film, which is already a positive. Bonnie gets a kill, which is a positive. It's his own independent kill, because he's the only character that goes into the closet. The only negative to this is that Hank's freaking dead, man. That's why the place shut down. Rip and chat, Hank. So we've got the forest scene. We've got scribbles of spring Bonnie, it seems, or just Bonnie, but most likely spring Bonnie. Ghost children possessing giant robots. Ghost children possessing giant robots. We get a shot of, I don't remember your name. I apologize, but the child who possesses Foxy, we can tell, red clothing, hook. Even to reiterate the point, it flashes Foxy's hook, like those dead kids possessing the animatronics. We get a shot of Mike in the woods. Seeing giant robots. Shot of all the dead kids. Bonnie, Foxy, Freddy, Golden Freddy, Chica. They all run away. A lot of people, including me, think that's just simply a, you know, when he's dreaming, when he goes to sleep, he has this dream, this nightmare. And like I said, this is just a casual shot of them hanging out in the dining room. So most likely, relatively early on in the night, when Vanessa's still giving him the exposition. And it's like, thanks for the heads up. Thanks for the heads up.  Their dynamic is gonna be so good, man. Then we get the shot again of Freddy behind Mike. Technically they're animatronics. Nerd emoji, Vanessa. You know, technically they're animatronics because they are performing for entertainment. Freaking nerd emoji. When the night shift starts. Shot of Foxy. Look at him. Oh my gosh. This looks to be outside the security office. We can see it says security. Looks like it says security. This is where you clock in with your, with your car and he's just vibing out there. Not running as well. Seems like he was just kind of lurking there. Which isn't something Foxy traditionally does. So I do hope at some point we get a big chase scene. You know, as creepy as this is, it's pretty uncharacteristic for Foxy. So. Oh no. I hope he does more, but this is the entrance to the pizzeria. Another security camera. Check first, you must be any height to have fun. Whoa, that's so cool. I can have fun no matter what height I am. More posters of kids enjoying their time at Freddy's. You got, again, welcome sign. Abby, going into the restaurant. Interesting thing, all the lights are on right now. This is either another night, if they go back another night, a lot of people just assumed it was gonna be across one night, because why would you go back? But it's interesting. Cause this is her going in to the pizzeria through the entrance, which we saw here where she was with Mike. But in this shot, she's not with Mike. Jean jacket, red pants, blue backpack. Yeah, this is a completely different scene. So maybe it does take place across a couple of nights. A lot of people just assumed logically, why would you go back? But it seems like maybe nothing that interesting happens the first night. So they do end up going back a couple more nights, but it's gonna be interesting, you know? What do they want? We get a good shot of Bonnie here. Oh my gosh. Again, the endoskeleton, the characters. They look so good. A lot of people are pointing out the yellow eyes as well. There was a severe lack of bright red eyes in this trailer that we saw in the last teaser trailer. And I've seen a lot of people say, oh, they listened to the fans. They've changed the eye color. I don't think that's the case. It seems like these characters have different eye colors depending on what exactly is happening. Like yellow seems like they're searching for someone. Red seems like they found someone and they're getting aggressive.  Like most people made it sound like they were gonna have red eyes the entire time. No, they've got red, they've got yellow, they've got orange, I guess as well. And sometimes they just got regular eyes. They're gonna have a whole spectrum of colors on their eyes, you know? So I don't think it's that big of a deal that they have, again, I think the whole eye debate alone has just been blown out of proportion, but you know. Whatever. I think they look good. I think these yellow eyes look a lot better than the bright red eyes. And again, I doubt the bright red eyes is gonna happen a whole lot throughout the film, but whatever. You can stop, you know, getting upset about the eyes now. Jesus. Better shot of all the drawings. We've got Abby here checking them all out with the giant spotlight on them actually. Whole bunch of characters. Freddie seems like Chica as well. Balloon boy up here.  The cupcake, Bonnie. Chica, cupcake, Freddie. And of course, right in the middle, you've got Pizza Steve. Now, you've got Spring Bonnie with five children. Where have I seen that before? What do they want? They want to make her like them. So we got Mike saying, what do they want? Vanessa saying, they want to make her like them. Clearly referencing Abby here.  They want to make her. So she's checking out the drawing. She's like, what? Like this is weird. What does all this mean? Like them. And then it looks like Foxy finds her. Good shot of Foxy, by the way. Look at how creepy he is. Now what's interesting about Foxy here in this shot, he looks kind of friendly, right? But then when he turns, look at his eyebrows. They go down. Notice that they go down. And he gets all mad. So it seems like they're gonna be friendly towards Abby. Look at the eyebrows, look at the eyebrows. Seems like they're gonna be friendly towards Abby, but everyone else who's an adult, much like in FNAF 2, they're gonna get upset. They're gonna rage. They're gonna stuff you in a suit. And then we got Mike. I'm trying to think back to the orientation of the pizzeria. This might be, he might be seeing the scene, where he's like, Abby, like what are you doing? Why are you talking to that guy? That's a robot. Well, technically he's doing electronics. But what are you doing to that guy? We get Coral. Oh, I was so, so happy that Coral. It seems like he's got a pretty big role in this film, which is awesome. But he looks great. He's an actual animatronic. He gets upset. His eyes light up. Oh, he's fantastic. The nightmare begins. When the night shift starts, the nightmare begins. We've got Mike running through the mall. Notice his outfit as well as all the people around. And speaking of outfits, when he asks, tell me how do we stop them? He's got a different outfit on. So maybe this is, you know, later on in the night. Looks like he's pretty sweaty. Maybe a bit beat up in some areas. So again, possibly changing outfits throughout the night or just coming back for a couple of nights. Stop. Then we get a shot of Max. Again, Cat Corner Sterling plays Max. And she does not have a good fate. It seems like this might be another death from the group of Coral, Max, and Hank. So she's looking at Freddie. A hand comes out. Who the hell's hand is this? Some people are saying this is the spirit possessing Freddie, who's like reaching out for it. Just a simple jumpscare, but also notice this. So she screams, this is that same scene. Right, she's standing up on the chair. This is Freddie's foot. She's looking inside Freddie's mouth. And then she gets pulled up presumably into Freddie's suit. A spirit can't do that. There's gotta be someone inside that suit doing that. It's a bit of a weird scene. And again, I'm still very confused on what these characters' role is in the film. Like, are they here when Mike's here? Or are they just like, I don't know, man. Like, this doesn't look like, Freddie's not on the main stage here.  Foxy crushing the ball pit ball. It's too late. Abby hiding behind an arcade machine. Very similar to, this is probably a reference to, Charlie and the original Silver Eyes when she's hiding behind all the arcade machines as Foxy's like smashing them all up, trying to look for her. We got Freddie on the main stage, Bonnie over here as well. You can see him move a little bit. Looks like he's shaking a bit. Probably because of all the movement Freddie's doing, it's just, you know, making Bonnie react a little bit. But Freddie's mean. He's got his, you know, his eyebrows are down. Looks like he's got a bit of a unibrow, which is kind of funny. I can't tell if Chica's just out of frame or if she's already moved in this shot. But yeah, it looks like this might be early on in the night. This might be, again, Mike reacting to that scene of Freddie. He's like, oh, or this might be him reacting to Spring Bonnie, Springtrap. Who? We didn't talk about it a bit later on when we get a better shot of him. So let's move on for a little bit. We got Abby screaming, I think she's trying to say Mike, but it sounds a little weird. I'm not trying to bash on Piper, but it sounds pretty funny. And you got Mike screaming back, Abby run, or Abby go. And what's interesting here, take a look at the main stage. What happened to Freddie? He's knocked over. He's lying on the floor. What happened? And then you got Abby like, it's kind of, got a car driving off with, I forget your name. I don't remember any of the names of the child actors. I'm so sorry. Most likely, again, hallucination, nightmare, dream, what have you, of Mike seeing this poor boy being kidnapped because it's in the same woods. So it's most likely a dream. Notice how distraught he is compared to when he saw all the missing kids, right? It looks like here's a bit more confused. Dressing giant robots. He's like, what, who are you kids? But when we get a shot of this boy being taken away, he's more upset. Like he's, he's really, really sad. So a lot of people are thinking this is his younger brother that might have gone kidnapped or might have even been bit by Fredbear. So he's seeing his dead, you know, brother being taken away in this nightmare sequence. And he's all upset about it, rightfully so. Got a shot of Bonnie and Chica. This is most likely a camera shot because it's all black and white. Probably in the final film, it's going to be a bit staticky because it's on the camera. But this is what, this is what I said about the vent opening. You can see it's right here. And Carl is missing from Chica's plate. Carl can fit in the vent, right? These are small enough animatronic. So that's what I'm thinking happened here. I think Chica's like, you know, go get him. Like go crawl in this vent towards him. And I think Carl was like hopping along in the vent, which is a funny sight to picture. But yeah, oh my God, these characters look amazing. A little goofy in the, in the pose and kind of how they turn towards the camera. A little goofy, but they just look so spot on, man. Jim Henson's creature shop. My God. Round of applause to you guys. What the heck? How did you do this? We got a shot of presumably some woman who's collapsed inside of a house. And it doesn't look like it's, doesn't look like it's good. It seems like this is probably a flashback just based on the structure of the house, all of the old and timey furniture in the house. So this could be Michael's mom. And this is why he's the one looking after Abby because maybe there was some accident with his mom. This could be, again, Mary Stewart Masterson. We don't know much about her. So I kind of doubt this is her because if she's the one of the villains, I don't know. It doesn't seem like they would have a shot like this for the villain character, you know? So my best guess right now, this is Mike's mom. Then we're gonna shot of Vanessa in the hospital. Maybe she's been attacked by an animatronic, by Afton, speaking of Afton. There he is. Okay, I kind of got trolled. There was a bit more shots in between what I said speaking of Afton. We got Mike beating up someone in the mall. Everyone's speculating and has kind of agreed that this is the job he had before getting the job at Freddy's.  Hey, I need a job. Is the offer for the security guard still available? Stuff like that. And then he gets out of a vent from underneath the stage it looks like. So I guess at some point, Mike's gonna go into the vents. And again, don't know why he's beating up this guy. Some people thought it's cause he recognized him as William.  And I guess if, you know, William is using a new name to hide his identity, I guess maybe that could still happen but I feel like he would recognize the voice. So I feel like he doesn't know who William is. But then why would he need this? It's very confusing. I'd love to know your theories. But then we got Spring Bonnie. Springtrap, maybe. I don't know. A lot of people are split halfway if this is Springtrap or Spring Bonnie. Seems like it's most likely just Spring Bonnie but a bit withered away cause the suit is old. Cause by definition, Springtrap would be, you know the Spring Bonnie suit after William has been spring locked and he's dead inside the suit. But clearly William is still alive. You know, he's right here. He's still alive. So yeah, he's also got a bow tie. You can just barely make out the bow tie. So it's definitely the Spring Bonnie suit. My best guess this is just like a halfway version in between Spring Bonnie and Springtrap.  Cause you can see allegedly a bit of his chin right here. So he's still using the suit, obviously. But then you've got Mike running away. It looks like he's either been stabbed or maybe some claw marks or something. He's definitely gotten attacked. He's running away trying to get to the exit. It is locked and he is probably not dead. And it looks like he gets taken to this contraption. We've talked a fair bit about this in the past, in a past video. I still think this is some old suit that Afton uses to torture people. And then the logo, which looks so, so awesome. And then we got Corey, Corey X Kenshin, legend himself as the taxi driver in his cameo role. Where to? Where to? Just his mirror. Boom, Golden Freddy. Wow, so many new films, guys. Always get the weirdos. Why do I always get the weirdos? Then you get a shot of Golden Freddy, allegedly, with Abby as well. Look at how happy she is, man. It's still a pretty big debate if this is Golden Freddy or if this is regular Freddy, if it is regular Freddy, beat him down while he's out for the count. Seems like a smart decision. Yeah, it's probably Golden Freddy. The issue is that he's not that golden compared to regular Freddy. It's a bit of a lighter color, but it's not, you know, strikingly gold. Like Golden Freddy usually is. I think that's why there's a pretty big debate. He also has a blue eye, which Freddy has.  But all in all, it's just a very confusing depiction of Golden Freddy. Also, this guy is way too massive to be inside this taxi like what is going on? But that was my analysis of the final FNAF movie trailer. I'm so unbelievably hyped. This trailer offered so, so much and it just, it looks so good, man. The characters look good. All the actors are fantastic. The set design, costume design is spot on. It really looks incredible. I cannot wait for the film. Releasing in four months from yesterday. Exactly four months from yesterday, October 27th. Like I said, tomorrow we've got yet another major FNAF movie news video coming out. So definitely subscribe so you don't miss out on that. Thank you so much for watching this analysis video and I'll catch you all on the flip side. Goodbye.


This one's gonna be a little different than any other top secret we've ever done before. Yeah, and I'll tell you why Because we're debuting maybe a segment coming up soon because I've been thinking about mistakes lately And no, I just like mistakes in general. It's like what's what's the feedback that? people who do electronics or because I think about like Desk of Ladiator or Scott's deep dive what are what are the things that people say and we're like, oh, yeah, that's a good point They say wow, I really like it when you show mistakes Yeah, and there's something that's happened recently where no one can make a mistake You have to be perfect. I don't know anyone perfect if I did I'd build like a church and go see you know I'd like worship it like I don't know anyone in my People can do perfect things, but it we're all flawed. Yeah, everything I like is kind of flawed and kind of broken I think that's that's human and so what we're thinking of and we're just working out the naming because like, you know It's hard. There's like root and root cause analysis There's lessons learned and then we're like well, maybe we could say mistakes were made I think it's a funny phrase and and this is We might change it. We might change it. We're thinking like maybe less maybe this name is a mistake Mistakes were made lessons were learned and the idea is we would talk about on our show a Mistake that was made and then how we fixed it and then how you know lessons that were learned Yeah, could be a component we used it could be something we ordered could be oh We decided to take back orders or something and then like the world ran out of chips You know who knows but we're thinking that could be it and then there's some really famous ones and computer science and technology We're engineers you told me when you're in MIT people look at certain stories through Engineering history that they're like make sure we don't do that again Yeah, and there's just like computer science stuff that it all makes sense when you know about it Yeah, if you know it about so we thought it might be neat to normalize making mistakes and People learning from them because I think right now the stakes are really high You have to be perfect all the time and you're never gonna be perfect So what if we had a currency of showing our work even when there's a mistake and then sharing it with people and making them feel Good about doing this because if people can't make mistakes, you're never gonna make anything and you it's all about mistakes Yeah, okay Okay


Hey, I'm Diane Betts, fitness coordinator over here at Drew Wellness Center. This is Kirsten. She's our wellness instructor. We're here to talk to you about the upcoming health fair on January 30, and welcome to City Talk. At the health fair, we're going to have a ton of vendors, different things, anything from health, wellness, nutrition, you name it. We're going to be doing some fitness demos, some 30-minute classes. We'll have a whole activity center, so you'll get a little workout. You'll get some great information. Everything's free. We'll invite friends, invite anybody. We're going to open those doors. We're going to give out prizes, just random drawing prizes for anybody that shows up. We'll probably be doing those every 30 to an hour, and then we'll have a final drawing at the end for a grand prize. We'll be running classes midday, at least from 11.30 to probably 1 p.m., little 30-minute blurbs of the different classes that we offer here, so you can get a feel of the classes you might like without having to go into an entire class. We have some great instructors here. We're all certified, nationally certified instructors, personal training. We're here to help you this year. We would love for you to follow us on Instagram, Facebook, Twitter. We're posting a lot of stuff. What's going on with our closings, classes, different health tips, nutrition tips. It's a really good source for you to follow and see what we're doing here along with get some really good tips. Hope to see you all January 30th for some free giveaways, health screenings, activity zone. It's going to be a great turnout, 11 a.m. to 2 p.m. Hope to see you there January 30th.


Well, in honor of Native American History Month, Central Lakes College in Brainerd invited activist Winona LaDuke to campus. Our Taylor Archer went to her presentation and spoke with LaDuke earlier today. About 200 people filled the auditorium at Central Lakes to listen to the American activist, environmentalist, economist, and writer to hear about her recent work and stance on today's issues. Incredible excitement from students, from our employees, and from the region. Students have been asking for probably four or five years to bring Winona LaDuke to our campus. Today's information presentation, there are a lot of people, you know, I've been working both here in Northern Minnesota and on the Standing Rock Reservation in North Dakota. LaDuke's presentation covered a variety of current topics and also served as a history lesson for students. Better understanding of American Indian history and the struggle and the fight. It's 2016 and that struggle isn't over, the fight for sovereignty, the fight to protect land. And with all the attention on the Dakota Access Pipeline as of recently, LaDuke stressed the simple yet necessary importance of protecting our water. This is our land, and I'm going to stand for it. All those people are trying to do is to protect the water, and that's what this is about is their right to protect the water. One of Central Lakes goals is to educate students and the community on all current issues and they believe that hosting LaDuke today allowed them to do just that. Helps us meet one of those goals to honestly inform students about what's happening in this country historically and currently. I am hoping that students will be informed and inspired as well as the general public. And perhaps the community gained more insight from her presentation today. Inbrainer Taylor Archer, Lakeland News. LaDuke also encouraged the CLC community to get involved to help protect and defend the natural land. If you've enjoyed this segment of Lakeland News, please consider making a tax-deductible contribution to Lakeland Public Television.


Bath houses are a 5,000 year old business. You can find them in every ancient culture. You'll find references to bath houses. It's an essential human experience. Jason Goodman wanted to recreate the life-changing experiences he underwent in New York's traditional Russian bath houses. I just moved to New York, going through a little bit of a rough time. I went to the Russian baths on Tenth Street, and I left there feeling better than I had in years. Something about being in the sauna, being in a 190-degree room. You're very present in the experience. You're right there, no matter what's going on in your noise machine. And so I just got really into sauna, cold plunge, not a spa, but more of the traditional bath house. So he started his own, in an old soda factory in Williamsburg, Brooklyn. We built this place for the hardcore sauna heads, for people who are trying to optimize their performance, their longevity, their overall health. But while the bath house is designed to evoke ancient tradition, what's going on behind the scenes is cutting edge. Step behind the old school facade, pass the dryers in the back-of-house staff, and you'll find the pump room, where the waters piped into the baths are heated up to 104 degrees. But you'll also find something extraordinary. Computers submerged in fluid, serving dual purposes, heating the water, and mining Bitcoin. It kind of clicked in my mind. Bitcoin mining produces heat as a byproduct. I buy energy to create heat. He found YouTube videos of hobbyists using Bitcoin to heat their pools and hot tubs. Instead of cooling the computers with fans, they're submerged in a specially engineered biodegradable fluid that doesn't conduct the electric current, but does absorb the heat, which a heat exchanger transfers into hot water that moves directly into the pools. I was able to make hot water really easily. So then it became very apparent that this was gonna work. Bitcoin mining is really important. Let's design a system and scale it up. And it was very easy to do. Of course, Bitcoin mining wasn't designed for heating hot tubs. It was designed to facilitate a new type of digital money with a supply that no single entity can alter or control. There will only ever be 21 million Bitcoin, and a central bank doesn't create new ones. Computers scattered around the world running the Bitcoin protocol do. They compete to solve a cryptographic puzzle that the protocol makes just hard enough to ensure it's solved roughly every 10 minutes. Solve the puzzle, unlock a block of transactions to be validated and added to the blockchain, earn Bitcoin. As the Bitcoiners say, tick tock, next block. The more computing power you have, the better your chances of earning. And more computing power means using more energy. Bitcoin miners are in a relentless, unquenchable search across the globe for the cheapest possible energy.  Any excess energy bubbling up past the cost level, a bubbling to the point where it becomes cheap enough for them, they will soak it up. That profit-seeking drive for energy efficiency has caused Bitcoin miners to pop up in unexpected places like Goodman's Bath House, where he says the cost of heating the pools is about the same as it was before he plugged in the Bitcoin miners, but now with the added bonus of earning Bitcoin. A dream scenario would be that every hotel, every major residential building, every major office building, starts converting their boiler system or their heating system or their hot water system over to a system that we're using and you have a massively distributed, hard to control mining network. For Bitcoiners, keeping the process distributed and hard to control is the whole point. Bitcoin has many purposes, but to me the simplest is the most basic, which is it's an honest ledger. Why do people save? They want a store of value that's honest and cannot be manipulated. With no central bank, there's no way for indebted governments to print more Bitcoin and devalue its worth like they have with countless currencies worldwide. Bitcoin is truly the transformation of energy into monetary value in a way that cannot be corrupted because Bitcoin is not controlled by any human organization. Mining ties the world's first decentralized digital currency to the physical world. But Bitcoin remains borderless, seeking to exploit inefficiency wherever it can. Whether that's a Brooklyn bath house and 87,000 square foot facility on the outskirts of Atlanta, an unmarked warehouse in an industrial area of Venezuela or the small rural town of Washington, Georgia. Friendly community, probably as many cows as there are people. Mayor Bill DeGolien welcomed CleanSpark, one of America's largest Bitcoin miners to Washington because it allowed this town of 4,000 to buy energy at a bulk discount. They're buying a lot of power from the city and that helps the city. With what we're selling to CleanSpark, the amount of power they buy per month from us is more than all of our other commercial and residential customers combined. One of the great things about Bitcoin mining is you can be anywhere in the world. You could be in a small town in Georgia where the power we're using used to power a factory that those jobs left and moved overseas. So now you have a small community that doesn't have good opportunities. We've come in and we're using age and underused infrastructure and we're putting it back to use. It's the same thing that used to be used. It's just now being used for Bitcoin mining. Zach Bradford, the CEO and co-founder of CleanSpark, used to work in the clean energy sector. We actually selected Georgia for a couple reasons. One, business-friendly state, of course, is always a good thing, but also they're one of the few places in the US that's currently still building nuclear power plants. He says that the company gravitated to a state that relies on nuclear power, not only in search of profit, but to fulfill the company's ESG mandate to be carbon neutral. CleanSpark has five mining facilities in Georgia plus one in upstate New York powered by a hydroelectric dam. Here in its Norcross facility, CleanSpark is using a similar immersion cooling technique to what Goodman does in his bath house to cool its 4,300 Bitcoin miners. Here, the mineral oil absorbing the heat means that CleanSpark doesn't have to spend as much money powering a seat air-cooled the giant rooms where the computers are running. In the middle of the day in the summer, here in Georgia, right, 90 degrees, high humidity, air-cooled environments don't love that. We're removing that environmental factor where ambient temperature goes up and down and immersion is very much a flat line as compared to air-cooled that has the fluctuations which are primarily tied to hot temperatures. Bitcoin mining's steady energy appetite could even solve solar power's biggest problem. Solar power generates the most power when the sun's up in the middle of the day. Well, it's also the same time most of us are at work or school or not at home. As a result, there's a lot of power coming onto the grid that actually isn't getting used or consumed. So you have a couple of choices. You have to find a place to store it. You have to find a place to consume it or you actually end up wasting the power. There's a huge amount of power that goes to waste. Solar farms often shut off panels to avoid overheating the grid, but Bitcoin mines can absorb that energy. Companies are building large solar mines around the country. So you've heard about the Green New Deal, right? So the government's gonna like basically monetize debt, create a bunch of new money to pay for like renewable infrastructure around the nation, right? And maybe other countries will do this. I guess what I would say is that Bitcoin's the real Green New Deal, okay? So Bitcoin subsidizes renewable energy because the projects are made profitable upon inception by the ability to monetize that energy right away and this acts as a bootstrap. So both foreign investors, donors, local investors, communities, the government, now it makes more economic sense for them to set up these renewable plants. So rather than monetizing debt, we can have the market kind of power this process. Bitcoin mining operations have located on oil fields to capture energy from natural gas byproducts that are unprofitable to transport through pipes and would otherwise be burned off on site. And energy companies putting miners in landfills to convert wasted methane gas into Bitcoin. But Bitcoin's critics still consider the energy that's going to mining to be a complete waste. Cryptocurrencies basically have no value and they don't produce anything. Environmentally wasteful cryptocurrencies. It's completely unnecessary online play money. It's a delusion, basically. It's like somebody else is trading turds and you decide I can't be left out. Some countries have banned Bitcoin mining. The Biden administration wants to tax it heavily. Goodman felt the backlash in Williamsburg when he announced that he was heating bath house with Bitcoin mining. Bath house in New York is under a lot of scrutiny from its customers right now. The Brooklyn spa is facing backlash after revealing their pools are heated by Bitcoin mining. I think that never left that social media world. It didn't spill over into the real world. Oh, we got a lot more support than we got negativity. Going through the comments myself, what I found is that the negativity seemed less educated than the positivity. Maybe that's my own bias. Bitcoin's energy consumption earned a New York Times front page story this April proclaiming that Bitcoin miners are energy hogs that cause immense pollution. The Times accused miners of exploiting Texas utility companies by selling their own energy back to them at high prices when demand spikes. But miners say the ability to sponge up and then release energy at a moment's notice makes the grid more reliable, which is why utilities partner with them. Texas Bitcoin miner Marshall Long explained how miners' partnerships with Texas's grid manager helped divert a summer blackout in a recent livestream. What makes miners particularly good is because I'm not only a large user, I'm a granular user, so I don't have to turn off my entire load at once. I can just turn off one miner or 200 miners or 2,000 miners in order to respond to certain things that are going on in the grid throughout the day. In September 2023, Texas grid managers recalled energy from local miners during an unexpected surge in demand. The miners shut down and the lights stayed on. Bitcoin miners are actually helping and not hurting. There's very few processes that can actually be a true flexible load. You have a factory and, hey, there's grid congestion and, you know, power's needed somewhere else. You don't shut the factory off midstream in the line or you risk ruining a product or a material so we can go away very quickly. We can act like a battery at times where there's risk to the grid. We can respond to that. Miners aren't shutting down during peak hours out of altruism, but because of market incentives. CleanSpark monitors energy prices on a minute-by-minute basis and shuts down the moment its operation starts to become unprofitable, freeing up power for the rest of the grid. What happens when there is no legal market? Welcome to Venezuela, where Bitcoin mining boomed thanks to the government subsidizing energy to near zero cost. Miners sponge up the free energy while widespread outages have become part of everyday life. Mining has survived here in a legal gray zone, which is why this major Venezuelan Bitcoin miner who fled to Miami asked us to keep him anonymous. But even in this gray market, Bitcoin forces energy innovation. This miner says he has taken responsibility for fixing power lines that the government failed to maintain. He says the government crackdown has intensified so much, and the bribes grown so expensive, that he's unwinding his operation. But Bitcoin is so decentralized and lucrative, it's nearly impossible to stop. China was home to three quarters of the world's Bitcoin mining industry until the Chinese government banned it for environmental and economic security reasons in June 2021. When the Chinese miners dropped out, there was more money left for those that remained. More profit drew more miners to participate, and within five months, the computing power backing Bitcoin was higher than ever. The US now leads the world in Bitcoin mining. In second place, still China. Bitcoin miners are servers. So who decides Instagram servers or the New York Times servers that are using those servers to make negative stories about Bitcoin? Who decides that that is immoral use and Bitcoin is immoral use? People hate Bitcoin for a variety of reasons. I think it mainly comes from a combination they don't understand its social value, so they think it's a waste and therefore they view it as a destructive environmental force. But once you understand it has immense social value and it's having a transformative effect on the way we use energy and on how much energy we use in terms of money, then you're forced to have a new set of facts and then you can make additional decisions. The choice America faces isn't whether to allow mining to exist or not, but whether to welcome it here in a vibrant market economy where it can bootstrap new energy sources and its byproducts can create economic value. Either way, TikTok, next block.