We have just finished the first inning program and we got some good packs to open. Yo, what's going on, Leaf finishers? Leaf are back again and welcome back to the channel. Today we are back with some more MLB The Show 21 and we finished the first inning program today, so we have some pretty good packs to be open right now. So quickly going over to the shop and my unopened packs right here, we have 20 of the show packs, two of these silver player packs. We get a silver player better.  We will start with the silver pack. It is impossible to get a diamond out of $1,399 which is crazy. So Tyler Glass now, okay, sure. And Brian Reynolds. Okay, so now we are onto the show packs. I'm excited for the live series pack. I'm still hunting for that trout. If we get trout boys, we have the 99 Ortiz as video pretty much. So let's see what we can get here. Hopefully we get a diamond in these 20 show packs, but you just never know in all honesty. Again, with these free agents, if I have them already, we're quick selling them because we just don't need them. Simple as that. We get a gold, okay, nothing else going here. We have them. All right, 18 of these left. Last pack opening wasn't the greatest. We're hoping for something better. We get a gold player. Okay, not too bad. He's going for a thousand. I need them already have them so I could sell them right away, which is nice. And that is that. But yeah, last pack opening wasn't great. We did not pull a diamond for the first time in a while. Today, we get a guaranteed diamond, which is nice. So, you know, we'll have some luck there. But in terms of these packs, we haven't pulled a diamond in a little bit. And I said it was going to happen, especially with all the unreal diamonds I've pulled. We get a gold player here. Will Myers not too bad going for a thousand already have them so we can sell them right away. So we're making some stubs here at least. That's one way to look at it. 14 left here.  No bronzes. We get the free agent. So we're just going to sell for five stubs. Anything else here? No, no, no. All right, 12 more. We're almost halfway through these packs. And we've pulled two gold players in a diamond. I love seeing that, man. I love seeing that. So we're going to go one by one here. We get glass shattering. Taylor walls. All right, here we go. Scott Moss. Who was this diamond going to be? My trail, baby. No, it's a purple. It looks like a pitcher. Might be, I'm going to take a shot in the dark. It might be you, Darvish. I think it's you, Darvish. It is you, Darvish. That is the last diamond I needed for the Padres collection. And we get them. You, Darvish. And I called it too. Let's go. That is a, that's a W for me. I needed him for the Padres. I already have Tautis and Machado. And now we pulled you Darvish. So we will definitely take that first diamond of the video. Heals for 13K. So we're saving stubs there. We will take you Darvish though. Beautiful. Now we're officially at the halfway point of these packs. And we won diamond a chauffeur, which is just great. So good stuff. Definitely worth the grind for the first inning program to say the least. I'll take my 25 stubs there. And we have, I think, eight of these left. If we could pull one more out of these, that'd be great. But I don't know what are the odds of that happening. We had a goal. David Fletcher already had them so we can sell them again. We're just making stubs here, which is just great. That's what we need. Because again, if we can't pull Trout, the plan is to eventually buy him because I definitely do need him to get the Angel's Collection done. Just plain and simple. So I think we got five of these left after this. We'll sell these guys. We already have them. So just give me the stubs for it. Five of these left here. Anything in here? Negative. Okay. Four more. What else do we have? Just chilling here. Nothing. Again, quick selling those free agents because we already have them and we already collected 200 of them so we don't really need them out of its bone. And that is about it. Two of these left. One more diamond question mark. A gold. Will Myers again. So again, making stubs off of him. We will take that. And a last of these show packs here that we got. And that is it for that. So now we are on to the space pack. We have a one of five chance to get in at 90 overall here. Looking at who we can get. Wanda Franco, Felix Hernandez. So we got some pretty good cards. Let's see what our odds here. 87, 87, 86, 87, 86. So not the greatest. We're just going to take the guy who is the most expensive because at the end of the day I'm probably going to sell this. And I think 10-5 is the most. So we will take Kenley Jansen, not too bad. And then one of these jerseys. I really like the Chicago White Sox one. So we'll take that one. So not a bad pack. 10k stubs. We'll take it. But now we have a guaranteed live series diamond player. Please be my trout. Okay, Rendon, I do need. We already have Darvish.  I kind of want to take Kershaw, but I do need Anthony Rendon for the Angels collection. So that would save me 11k stubs. Just Clayton Kershaw. If he goes up to a 91, then do I take the chance on Clayton? I think I'm going to go with the guaranteed and Anthony Rendon. So we will take Rendon. Not too bad. So now looking at the Angels collection, because that is the last one we need to do. We have Rendon. We just need to get Mike Trout, who's only 356,000 stubs. So that's something. Anyways, guys, that is it for today's pack opening video. Hopefully I took the right choice for Rendon. I feel like I probably should have taken Kershaw, but I'm trying to get the Angels collection done. Any stubs that can save is worth it for me right now. So I won with that Rendon. But anyways, guys, that is going to be it for today's pack opening video. If you guys did enjoy it, be sure to drop a like on it. If you guys are new around here, make sure to hit the subscribe button down below. We're in the road to 4,000 subscribers. But guys, that is it for today's video. Thank you guys very much for watching, and I'll talk to you guys later. Peace!


85 cows died, doctors say they had not been fed for quite some time now. The beef brigade has taken law in its own hands in this country. Cow menace is giving a tough time to farmers across Uttar Pradesh. It is common to find herds of bulls and cows grazing in the farmlands or orchards. Newsclick reporters travelled across three cities in UP, Aligarh, Mathura and Agra, to speak with the locals and gain a better understanding of the cow phenomenon. This feature is the first segment of our two-part series in which we will be speaking with villagers of Aligarh and Mathura to gain a better understanding of the heightening cow menace. This is the first segment of our two-part series in which we will be speaking with the locals of Aligarh and Mathura to gain a better understanding of the heightening cow menace. If you don't want to sell cows, you need to sell them. If you don't want to sell your cows, you need to sell your cows, that is why we are here. Why? Because we will sell our cows to the people of Uttar Pradesh. We will sell our cows to the people of Gaurakshak. The cow business has also been destroyed. There is no one to buy cows from my village. My house is closed. There is no one to buy cows from my village. They will take them and kill us on the way to Gaurakshak. Gaurakshak is spreading terror in the name of Gaurakshak. The price of the cow is 300-400 rupees. The cow is coming, they are calling it a cow. That is why people are leaving this matter. That is why people are leaving this matter because of the price. The cow is not even feeding the cows to the people of Uttar Pradesh. The cow is running the farm. The cow is not feeding the cows to the people of Uttar Pradesh. The people of Mahasacharya, the DMB, the SSP have come here. They have come here to see what has happened. What did you talk to them about? What did they believe? They did not give any explanation. They did not say anything about it. They did not say anything about it. They did not say anything about it. They did not say anything about it. Do you have any government funding? I used to get the same government funding from Nagar Nagam. They also closed it after getting Rs. 2.6 lakhs from Nagar Nagam. Stray cows, most of them unproductive, have been abandoned by their owners as maintaining them costs a bomb and is unaffordable in times of acute agrarian distress. Hazzled by the influx of stray cattle, villagers have been forced to pool in money to construct temporary sheds in order to save their crop. I do not know what is coming from the government. It means Pradhan Subda is doing it. Yes, Subda is doing it. Pradhan Chara is bringing it and Pradhani is feeding it. There have been huge losses since the last 5 months. For the past 5 months, we have been farming for a year. We have not been farming for a year. We have not been making anything. We have been working for 3 years. We have not done anything. We are doing everything we can. We are doing everything we can. The government claims that we are opening the cowshed. We are acquiring land. We are asking for land from the people. The government claims that we are giving the fund. We have started giving it. Is there any truth on the land or is it just so that everyone can go to the register? There is no truth in this. No fund has come yet. There is no money that can be financed by the government. I think it is all about politics. It is all about politics. Even though farmers have been driven to the wall due to widespread damage to their crops, the chief ministers, doggedness in furthering the cause of Gorakshah, that is cow protection, without making adequate arrangements, is escalating into a major row in UP. In the last 2-3 days, we have been spending Rs.1200 in the last 2-3 days. We give Rs.1200 to the cowherd. We give Rs.4-5 days to the cowherd. If it is cold, then it is not good for the skin. So, Rs.3,000 is spent in the last 2-3 days. We have been spending Rs.9000-9000 per month. We have been spending Rs.1,000 more in the last 2-3 days because the cow is growing day by day. How did the cost of Rs.3,000-9,000-27,000 per month come from? From the village. The government... We have not given any money. Not a single penny has been given to the government. They have put the cow in good condition. They say that it is not a cow. There are farmers. There are no cows or cows. But, they have not paid attention to the fact that they will destroy the farmers in the future. If the farmers are destroyed, then the farmers are poor and poor. What will the farmers do if they are eaten? All these things are unbelievable. They have put the farmers in good condition. They have spent the money. In the name of the government, the government has said that the government will open the government. They will not be able to do that. Predictably, U.P. Chief Minister Yogi Adityanath's wishes and farmers' livelihood needs do not match, which are leading to escalating tensions over the dealing of stray cows in the state, aggravated by a growing cow vigilantism. The farmers say that once their crop is harvested, they will free the stray cattle as they are not getting any funds from the government for the management and smooth functioning of the Gorshalas. When the farmers give the cows, the government will close the government. What will happen then? All the BJP and RSS workers in my village will not be able to find a single cow on their doorstep. They will give them the slogan of cow vigilance. They are doing this in the name of cow vigilance. And this is one more thing. If a person takes a cow and takes it to his house, I will take the cow to my relatives, they will kill me. I am taking the cow to cut it. They have created so much fear in the public that no one is ready to sell or buy a cow. They have no idea what the government is doing. They just want to make a vote in the name of cows and the government. Mr. Pashu, why did you suddenly face this problem? In the past two to three years, they used to sell milk, they didn't even sell milk, they didn't even buy it. They have been stopped from buying it. If the party is removed, will this problem be solved? This problem will be solved. They have been stopped from buying it. They are still doing it. What is the problem? The government has said that it will be solved two years ago. What are they doing two years ago? They are saying that the slaughter should be banned. People who do gunda karthi in the name of cows should be punished for their actions. People should be punished for their actions in the name of cows and cows.  This encounter resulted in the death of one 14-year-old Deepu. On the 9th, Deepu was killed and he was released on time. CO Mahabana, Aso Baldevai, Hdm Mahabana and Naib Tehsildar Mahaban were also released. They gave complete assurance, but no one is showing anything to us yet. I was going to the bazaar, and I saw that the truck was on top of me. I was just walking around, standing on the very side of the road. Do you want to say anything to the government? The government doesn't help, it just treats the people. After seeing the BJP, this is the farmer's brother. This is the government of the Punjabi husbandies. The government won't allow farmers to grow their own farm.


Hello, my name is Anna and I'm presenting you Secrets of Plants. In general, my project about plants and the main idea was to find a way how to teach people how to take care about plants. And I find the way, I would say, to show the kids that plants are actually like ours. They have senses, they have feelings. And I just wanted to show kids that plants can be their plants. I'm an illustrator, I love printed things, I love books that we can touch, these pages, papers. I love pop-ups, things, and I think that it's the best way how to show, to explain something to kids. Check our projects, I hope you will like it.


Ladies and gentlemen, fellow countrymen and women, we are here to challenge the police station in Osaka.  Mr. Chirufetayari is said to have been apprehended from Livingston yesterday and he was transported here in the evening. On a charge that is yet to be specified by the police. We approached the police and we were attended to by the police intelligence officer to change the police station, Detective Inspector Kikawa. And he told us that we are not allowed to visit Mr. Chirufetayari because of the instructions that they have from police service headquarters, specifically crime one at service headquarters. And they told us that they are just a hot station. And they told us also that they are under very specific instructions not to allow anyone to visit Mr. Chirufetayari. Now this is an issue that bothers on human rights. This is an issue that bothers on harassment of political leaders. We are not saying that a political leader cannot commit an offence. But when a political leader is suspected of committing an offence, they need to be treated in a fair and equitable manner. They need to be treated just like any other ordinary citizen. They need to be allowed visitation by the world wishers. They need to be allowed people to bring them food and water. And they need to be treated as an examined citizen, basically, a citizen of this republic who is entitled to the protections under the constitution. Now, you must note that Mr. Chirufetayari was apprehended yesterday, which was against them, and today is a Friday. And we are told that even his lawyers were not allowed to see him. So clearly, you can see that there is a direct and deliberate ploy from the European administration in general and the president of the HLMA in particular to ensure that Mr. Chirufetayari spends the weekend in detention. This is evident. And at the end of the day, from our standpoint, he amounts to extrajudicial punishment of Mr. Chirufetayari even before he is found guilty of any criminal offence. And these are the things, these are the things countrymen and women that we complain about as opposition on a daily basis. That the law enforcement agencies must enforce the law in a fair and equitable manner. If Mr. Chirufetayari committed an offence, why didn't they charge him yesterday? And why are they not charging him today? Why do they want to insist that he should be held until the weekend passes? Until such a time that President Agai in the HLMA begins to adhere to the law of law, Zambia will continue to be under a dictatorship. And this is not what the 2.8 million citizens that voted for Mr. Agai in the HLMA and his new donor administration actually voted for. The 2.8 million citizens voted for a better Zambia, a fair and equitable Zambia, where law enforcement is going to be applied in a fair manner regardless of whether someone is in the opposition or they are in a rolling party. Indeed, countrymen and women, today is another sad day under the new donor administration. Thank you.


Thank you for attending this talk about the Kubernetes Command Configuration Scoring System, or KCCSS, in short. I'll start with the brief introduction. So my name is Julien Sobriar. I am now part of VMware since a week ago. I was in a company called Octane that just got acquired by VMware. If you want to talk to me or send me a question, don't hesitate to email me directly at jsobriar.vmware.com. I'll show you a couple of other ways to contact me later on. So a quick word about Kubernetes before we talk about security for Kubernetes. So the short definition of Kubernetes is that it's a container orchestrator that basically sits between your servers and your containerized application. The definition doesn't do justice to the extent of what Kubernetes does. So Kubernetes really is an abstraction layer for a lot of things. It abstracts your entire infrastructure. That's you define your storage provisioning. In Kubernetes, you define how you expose services to the other outsides, road balancers, or ingress controller, etc. It abstracts your entire network layer. It gives access to the containers where you can log into the containers directly. It defines what kind of privileges and access each container has. It redefines how users but also workload permissions are defined, how to manage your secrets. So it's really a wide area that Kubernetes redefines through its abstraction layer. And today we'll talk specifically about the runtime configuration of workloads. There are over 30 different types of configuration settings for your running containerized applications. Now, some have to do with isolations. Now, can our container actually isolated from each other or can they share the same P and not share the same IPC to communicate with each other? Maybe they share some of the file or system. Maybe they get some capabilities that allow them to do man in the middle so they can actually see traffic coming from other containers or even network sniffing. It's also, you know, some of the security settings or infrastructure security define how and what services are being exposed knows for load balancer, Kubernetes load balancer, but also, you know, using share host network binding the workload IP to the node IP using tube CTL command to basically poke a hole in your Kubernetes cluster and expose a container port directly to the outside. You know, all of that then can be, you know, managed for interest or agress policy from Kubernetes that you may or may not have set up. Integrity, you know, can the workload make changes to the hoses itself, through the file systems, through privileges, can workload even talk to Kubernetes. Maybe some workload are able to create their own part, their own workload or delete workload because they have the right API access rights and they have access to secrets and all the capabilities, your policies like second PC Linux that, you know, might try to prevent container escape. And if you add other things such as a service mesh, you know, you get a lot more settings that, you know, dictate the security posture of all of your containers. And with over 30 security settings, that means you have over a billion combinations. So how do you know, you know, out of these 30 settings, which one, which combination are more risky than others and how many of them are okay because, you know, some of these settings are cancelling each other. So for example, this, you know, a combination of having a load balancer that exposes services that also has privilege access, can create other other ports, you know, it is more dangerous. It's pretty easy to tell, but others, for example, you know, having, yes, being the ability to do network in the middle or network sniffing, but having a service mesh that do encryption will actually renegade some of it. But if you ask many of the dev apps or developers, you know, which one of your workloads are the more risky or why, you know, the answer will often be, you know, I don't know. I can tell you which one are running privilege, I can tell you which one are running as routes, but really doing these comprehensive security assessments is very hard. So that's why, you know, at OctoRyn, we wanted to give away for our users to be able to tell exactly which one of their workloads are more risky, where there is come from and help them remediate or mitigate these security issues. So we wanted to come up with the framework that will address that. And the first thing that we did is look around and see what were the existing security framework and whether we could apply them to these specific issues with Kubernetes runtime configuration. So you're probably familiar with a CVSS framework, the common vulnerabilities current system. If you do image scanning for Kubernetes, now the vulnerabilities are related with this framework. So it's a very good framework for describing the risk. You know, it shows what is the impact on availability, confidentiality, integrity, what's the scope of the validity, how easy it is to explore it. So a very good way to describe it. And you can already tell from the name of KCCSS, CVSS, that a lot of the inspiration came from this framework. And that's why we have a single name. And there are the same umbrella as CVSS. There was actually an attempt to apply CVSS to configuration files. And there was a framework called the common configuration scoring system, CCSS, that was an adaptation of CVSS for configuration. Unfortunately, this project is pretty old. It's based on the older version of CVSS version 2.0 right now, similar version 3.1. And it did not take off. But it showed the potential for being able to apply this CVSS framework to configuration and not to vulnerabilities. And finally, the last framework that we looked at that was very inspiring for us is the CC, the common configuration animation. And here's the difference is it's actually a checklist that a DevOps person can go through to make sure a software on OS is configured securely. So it's a list of checks that should go through one by one and make sure that all your configuration file settings are secured properly. So we basically took the best of these frameworks. Now, we created a list of rules inside KCCSS for each of the security settings. So just like CC, we describe this rule, this phrase the same way as CVSS. And I'll go into more details very soon. And obviously, they apply to configuration settings, not turn it up. So just like CCSS. So we took a combination of the existing framework. And what we did is we made it specific to Kubernetes. And also, we created a way to aggregate this individual risk for each rule to be able to compute a risk for the entire workload. Because in the end, what we want to show is what is the most risky workload. So I'll get into more details about the framework and the different rules. So we have two types of rules. The first one is a risk. So every configuration setting that can introduce a risk is described the same way as the CVSS. So we show what is the impact to integrity, confidentiality, availability, from non-low, high, with a good description that should really help anybody who is not a security expert to really understand what are the actual risks that they are potentially running or exploiting themselves to in their Kubernetes cluster. Then just like CVSS, we show how easy it is or not easy to exploit that vulnerability. So we have a rating for the exploitability. Is it something very complex? Or is it something that anybody can do with tools that are available out there? The attack vector, is it a remotely exploitable risk? Or does it require local access? And what is the scope that we made specific to Kubernetes? So can you, with this potential risk, can you impact just the workload that's running? Or can you impact potentially the that's where the workload is running or the entire cluster? So along with the risk, we have a different type of rule that we created that does not exist in CVSS, which is a remediation. And that's a security setting that improve or remediate some of the existing risks and lower some type of existing risk. And we describe it in a similar way as to CVSS. So does it lower the risk on integrity, confidentiality, availability? How does it do it? Does it remediate remote or local attacks? Does it help remediate issues within the pod itself or maybe the entire cluster or the node? So very similar to the way we describe risk. So the first node, half of the framework is this list of rules which contain risk and remediation. Now the second part is the formula that will create this risk code for the entire workload. So how does this work? First, we start creating a risk code for individual risks. So we map a workload with no zero to 30 something, some series that may apply to the workload. We create a risk code from zero. That's the lowest risk to 10 highest risk. And it's very similar to the CVSS formula. We basically take the impact of the risk on one side. And on the other side, how likely it is to exploit it and what is a potential blast radius of exploiting this vulnerability. And we added two of them and that gave us a score from zero to 10. So first step, we create a risk code for each individual risk in the workload. And then from this list of individual risks, we came up with a new formula and it's not something that exists in CVSS, which only rates individual vulnerabilities and not the security of your overall software. So we look at similar risk. So for every risk that have the same attack vector and the same scope, we take the highest risk. We add them together, take the square root and that gives us a risk of from zero to 10. So that means with this formula, if you have many risks that impact different criteria like availability, integrity, and confidentiality, we have a higher score than maybe 10 risks that are all impacting only the availability of your cluster. So you may have noticed that I talked about risk, but I didn't mention remediation. And the way we use remediation is when we look at each of these individual risks for workload, we look for corresponding remediation. And we basically, if you have a matching remediation, we subtract the remediation from the risk. So quick example, we have a risk that has a high impact on both confidentiality, integrity, and availability. If we find a matching remediation, right now it means remediation that has the same attack vector and same scope, and has in this case a low impact on confidentiality, high on integrity, and none on availability. We subtract it and we get a new risk that's lowered by the remediation. And we actually use this lower risk in our formula. So the remediation impacts the individual risk, which then will have an impact on the overall risk. So KCCSS is a framework. So how do you actually use this framework? It's not very convenient to look at the different rules, try to map in yourself. So because we wanted as many people to be able to try KCCSS easily, we created an open source implementation of KCCSS. We call CubeScan. And CubeScan is an open source container that you install in your cluster. It has the KCCSS framework. It scan your running workloads and show you the results in a nice web UI. And what's important here, it's really looking at the runtime configuration of your workloads. So you may have workloads, no definition in your YAML file that you install in your cluster, but then you may have other types of API calls, operators, no manual changes in your cluster. Hopefully you don't do too many of them. But that may change how the workload actually configured. And because we are looking at the runtime configuration, we are really looking at the current state of your workloads. It doesn't matter if you have anything making changes. No, we will see the end results. So let me show you how the CubeScan output looks like. I'll show you a quick demo. Actually, before I show you CubeScan, I wanted to show the key repository for both KCCSS and CubeScan. If you do Google search for GitHub KCCSS, we'll find this repository, which has all the rules, risk and remediation, and also the formula, which is exactly how it's being completed. You also have a lot more information, a lot more details about the goals, about how it's different from KCCSS, from CVSS, sorry. So take a look at this page. Take a look at the at the Wiki as well. We have more information there. We can go into more details. Same thing for CubeScan, such GitHub CubeScan. And you will find this page that describes what CubeScan does, and more importantly, shows you how to install it. So you can, of course, compile everything from source. It's fully open source, but we have uploaded, we have, sorry, we have, yes, we have uploaded the Docker images into registry. So you can just copy and pass these two commands to be able to install it in your cluster. And there's two ways to install CubeScan, one, which is probably the safest way, which is to not make the web UI accessible to the outside, but do a CubeCtl port forward. Remember, I talked about this way of making a hole into your Kubernetes cluster to expose the series, so you can do that to make sure that nobody has access to it. Or if you want to share it, you can put your, the web UI behind a load ban series. Just choose whatever method of installation you want, and just copy and pass two commands, and you will see something like this. So this is the latest version of CubeScan. We did, we released a new version less than two weeks ago. You can see it's still the old octane. So what you see here is the risk assessments, no, from the KCCSS framework for all of the workloads that are running inside your cluster. So it works with one cluster only. So if you want to show the information on different clusters, you just have to install CubeScan. So you can already tell, no, that actually doesn't look too bad here. We have two high severity seven, so it's not too high either, and mostly medium otherwise. So we can already know, know which one are maybe of concern or not. And then you can drill down into where there is actually come from. And here you see that there are a couple of things that are interesting. So one, we see that this workload does high local privileges. So it might be running as road, and it is privileged. We also see that it is exposed through load balancer. So it is possible to get to this workload remotely. And now, you know, you can see that there is a combination of local risk, but also remote risk, change together. And once you get access to it, you can actually do a privileged relation. You can go into more details now by clicking and show more. And that's where you have the full information. So you can see that here, you know, that's obviously exposed to the outside of the communities now. So it's remotely exploitable. And it's changed with being privileged. That gives no biological access, but that you might change with a remote remote explorer. So you can get into, you know, read all the details, understand what is your actual risk, and understand what you want to do about it. We can see here that there's actually one remediation. And that's about encryption, because it's a light service mesh mock time that provides encryption. So this remediation will only impact remote risk that have something to do with being able to see traffic. And there's actually one here. Find it. I guess it's not here. Oh, yeah, it is here. So the file that can do that, this workload as network capability means it can create any kind of packets and might be able to do some kind of manual attack and see some of the traffic, but because of the encryption, that will actually do whether it's here. So you can see, you know, you can go through them one by one. I think it's very useful to do a quick round of CubeScan and see where you stand. You know, you might be surprised that you have some high severity workloads or, you know, might make you see better at night, saying that the risk is pretty low for your cluster. Go back to the slides. A few words to conclude. This is just in case of demo failures and screenshots to be able to show you. So what's coming next? So we are very excited about KCCSS. We use it in the product and we see that it resonates with people. Whenever you see a risk, the first question is how did you come up with that? Do I agree with the way you do the risk computation? So it's very good. That's why we want it to be open source and we hope more people are going to contribute to it. There are definitely improvements that we are already working on. So one of them is a better matching of remediation and risk. Now I mentioned that right now we're looking at the scope and the attack vector, but we've added more classifications of more granular classification of risk and remediation that allow us to do a better matching between risk and remediation. Now you can, again, go to the KCCSS GitHub repository, look at the rule and you will see this additional information there. We also are going to release a new formula for the overall workload risk. So again, that was a formula that we came up from scratch. We are going to change it a little bit. So we have a wider range of risk. We did add a lot of new rules recently, especially around our back and around workload having API access to Kubernetes to look at secrets, to create pods, etc. So now it's part of the framework. And one thing I'm personally most excited about is being able to use KCCSS as the way to understand how you can reduce your risk. I want to provide some tools so once you see your risk or you can say, okay, what will happen if I fix this one? That's maybe easy to do. Does it reduce my risk a lot? Or does it doesn't do any much change because I have some other similarities that I'm not addressing? But also, what are the mitigation that are available and that might be easier than just making a privilege, content or non-privilege, which might be, in some cases, not possible. So instead, what are the mitigation that are available to me that maybe I could use to reduce my risk? And finally, more references now. So we started to add references to the CIS benchmark. So you can see which one of the secure risk have a CIS benchmark for Kubernetes item. We also apply the Mitre attack framework. And by the way, this very interesting blog post for Microsoft that created a Mitre attack framework specific to Kubernetes. And that will show you remember, I showed at the beginning of the talk with the extent of the Kubernetes layer, the fact that you define so many things inside Kubernetes that the attack surface is huge. This attack framework, all Kubernetes shows that there are a lot of different attack vectors for Kubernetes that you may not have thought about and a lot of them actually about this security setting that I mentioned. So we are working on adding all of this to the framework. So make it richer, make it easier to get third-party references from CIS benchmark and other into it and really have it to be very powerful, not just to know what's going on, but how you can leverage that to reduce your overall risk. So why did we make it open source? First, the fact that we took inspiration from existing open source framework, now it's just natural that we wanted to make it open source as well. We also deliberately made it separate from CubeScan because I feel it's much easier for especially non-developer like me to be able to contribute to a framework and not be required to know how to code. We hope that other tools are going to use it. We're looking at a couple of open source policy agents that we could integrate with so that for each settings, for example, you have a policy to be able to catch it in remediates. We also hope that open source solution but also vendors will add their own list of rules and remediations. Now, if you have a part of Istio, for example, we added a couple of rules or how Istio remediates an issue, but you could add to it if you have a security solution or Kubernetes, now you could add rules there. So we're looking for more information. And finally, again, if you want more information, go to the GitHub, Octarin.sec repositories for KCCSS as CubeScan and actually take a look at other projects we have there that might be of interest to you, also open source. One of them, for example, is Mod Security for Envoy. But we have a few other things for Kubernetes that might be interesting to look at. And finally, if you want more information, now we haven't moved everything from Octarin to VMware yet, so just go to the Octarin.sec.com website. Now at the top, there is a tab about resources and you get this CubeScan page that gives you also a good overview of what CubeScan does and the KCCSS framework. Thank you. Again, don't hesitate to contact me if you have any questions. You feel free to contribute directly on GitHub if you have any questions, any comments, anything to add or anything. Thank you. Thank you everybody for attending the talk. So we'll go to Q&A. I don't see too many questions. There is one about the capabilities, asking why I only have two capabilities. I guess it's on one of the slides. Let me see if I can get to it. So yes, I mentioned two of the most used capabilities here. But yes, there are certainly other capabilities that have consequences about the security of your workloads. I didn't list all of the rules that we use in KCCSS and certainly others, but that are probably the two capabilities that we see used the most even when they are not really required. Another question about what would happen to CubeScan under VMware as an open source project. So VMware has a lot of open source projects, so we hope to move CubeScan under VMware and keep using it. KCCSS is very useful for us. It's a framework that we use and having a way to demonstrate it easily with CubeScan is very useful even under VMware. So we're working on moving that under VMware and keeping it open source and making updates to it. So if you have any questions, don't hesitate to add them to the list. I just want to remind everybody that you can also send me emails directly. If you try, for example, CubeScan and have any questions, you'll find references in the GitHub repository, but maybe this is your jsoprior at VMware.com. There's no other question. Yes, I just want to reiterate that installing CubeScan is very easy and just two comments to install the container in your cluster and then there's another comment to delete it when you're done. So let us know if you have an issue when it should be very easy. We know a lot of people who've tried it. It works in all kind of Kubernetes clusters, whether it's on on-premise, in the cloud, managed or not. So it's very easy to give the try. If there's no more question, thank you everybody for listening to the talk and don't hesitate to contact me if you have any questions or anything you want to do.


Everyone shape or 1,000 here We're gonna put some gas in this tractor this old simplicity and see if it'll start and if it does we may take a first spin Stick around Okay, guys, so I brought the John Deere around here To carry a battery and some jumpers We're gonna put some gas in this thing Still haven't put the Still haven't put the muffler on yet, but so hopefully That fuel pump will pump it up in here enough to Get it to fire But it always did fire right up pretty easy. Just we got contact Nope Hmm breaks on sound like something there didn't well See what's happening? Okay ceiling It seems to be like I've got a ground problem somewhere, which it didn't have the force All right, I'm gonna start the John Deere up that battery's not charged yet. It won't take a charge I couldn't get anything out of this battery Well, I could get a little bit, but I think that's full charge. So I don't know what's I don't know if the cables are bad or what but I Don't know we'll take it for another ride here in a minute. Let me put some more gas in it See there's full throttle and that's choke So I think what it did was went too far with it and choked it out So just the John Deere drag it or drive it around back yet for today. I got a project going on straight over there I might miss around with it today. I'm not sure but anyway garden still grown from last year Pick some vegetables off of yesterday some cherry tomatoes and peppers So that's pretty cool All right guys Well, I'm gonna get off here. Just thought I'd do an old start on that tractor. I Don't know what's wrong with the connections Could be in the could be in these jumper cables. They're not the greatest jumper cables They're just some cheap ones and it looks like They were her dad's looks like they were taped together there for some reason so anyway That's the hardest I've ever had getting that one started Like I said, mostly it was because I wasn't getting juice to it so Anyway, there it is so thought I'd do an old start for you haven't done one of them in a long time so All right guys, I got some projects. I got a big part project coming up and then I've got a couple other little things I'm gonna be doing around the house here Some some more shop shenanigans stuff. So stay tuned for those videos. Thanks for watching guys. Appreciate it Hope everyone had a great week great Easter weekend and Enjoy the rest of your week and y'all be safe. We'll see you guys soon. Bye. Bye and take care


What's going on, everyone? Sam here with late in sports cards. We've been dual-case MOB, 23, Bowman Chrome, baseball, hobby, and HDH choice number five. Pick your team style. Read off a list of our names and our teams. We've got Alexandros with the Braves, Alan R. Twins, Bradley S. Giants, Chris B. with the Pirates, Diamondbacks, Guardians, and Blue Jays, Duke F. White Sox, Eric D. with the Rangers, Gabriel C. Orioles, James J. Mariners, Jason T. Astros, Jeffrey H. Dodgers, Raze, and Phillies, Jim G. with the Brewers, Joe D. Mariners, John W. Tigers, Justin Redsox, Matthew B. Athletics, Matthew O. Nationals, Patrick C. Cardinals, Pengen C. Padres, Rich S. Reds, Ty W. Cubs, Tim D. Royals, Timothy M. with the Rockies, Tom C. Yankees, Tom B. Metz in, Yonzee with the Angels. So good luck here, everybody. Orioles picking up a 10-box Tuesday basketball spot. Hanoe with a Cosmic spot, and Mark L. with a Mosaic Bass Break spot. So thank you to the three of you. Appreciate that. Let's get pristine moving next, everybody. I'll drop you guys that link really quick, and then we'll get in 10 to go. All teams on sound. That's just a B. All right. Start with Hobby, and we'll go into choice after. Oh, God. I'm getting old, dude. I feel you. I'm getting old. I'm so washed, dude. It's unreal. You are very washed. I know. Trust me. I know. You know it's bad when I have to start, like, when I'm on big talk, and I have to start looking up the slang people are using an early dictionary, dude. It's really bad. I've had to do that a couple of times, and I'm like, man, I used to like, I used to know that. Yeah, right. I know, honestly. I'm like, damn, dude, that's rough. I'm just getting left behind. I'm old and in the way now, Kyle. It's not cool. It's old and in the way. It's not cool. No, it's not even in the slightest. All right. Good luck, everybody. Let's get started. Let's do Super Fracture. Why not? Why not us? Why not now? Why not? Nelson Cruz to 4.99 on the refractor. Goya Luis. Why not Ronja? Base auto, Joey Asteads. Nice one there for the A's hitting first. Royo, Carter Young. You know what's slept on that's still out there is the salad Super Auto. We just, we've been so consumed by the bounty that we forget that the biggest card in the product is still out there. Kaden Wallace. Well, yeah, until right now. So this back right there. I'm going to give us an extra auto. Kevin Eru for the Brew Crew to 125. Almeida, there's a Salas base. Is that a sign? Ethan Salas base card is giving us the sign. Pretty weird timing there, Roman. Yeah, I mean interesting. Very interesting. Very interesting. Spanning some people. Yeah. Don't know what he's got to do so far. Shimmer, Sebastian Walcott. Nice one there for the Rangers. Take that all day. Walcott action. It's a white speckle, Robert Moore to 2.99 and going to the Brew Crew on the auto. That's Milwaukee on the prospect auto. Mookie Betts refractor to 4.99, Billiers. There's another demon. There's another demon right there. Guero to 2.99 for the Pirates on the Magenta. Almost through our first box here. Well done, Francisca first. Oh, Lord. Who's that? Jonaheim. Ah, there we go. That's a little RV, I know. Oh, no. No, Jonaheim was not the hitter. Oh, never mind. I'm not just ruining my day. Who's that? You know? Who's that? I don't know. Yeah, happy playoff baseball, everybody. We got the Rays and Rangers on. Rays and Rangers. Rays and Rangers. Rainer Arias first, Shimmer. Nice one there for the Giants. Had a couple of nice firsts coming in now. Peyton Williams refractor, first auto to 4.99, going to the Blue Jays. Ewentry Vargas first and base. Refractor of Lazaro Montez to 4.99, Acunha and Lazaro Montez again. I'm going to tell you a story about Lazaro Montez later. Rainer Arias. You got to show that for the break room. Ah, it was a me and Jake story of that. Let's let you know anything right there. Tells me plenty. Tells me too much. Yeah, right, honestly. Say, Green, Shimmer, Spencer, Jones, the 99 for the Yankees. Chandler. Shibalee. Chandler grab. Chandler grab. Aluminium Cosmic. Mixer. Nice. Thanks, Chandler and a Sapphire. Rockander. Christian Serda first. Nice one there for the D-Becks. Luis Guanipa first. World's synchronized swimming is on. Michael Bush to 99. Might have to throw it up. Might have to throw a draft game plan. World's synchronized swimming. Who's the go? Give me some trends here. I'm giving you emojis. Oh man, Leighton Sports Cards is giving Leighton Sports Cards emojis. Can't throw away the explosive. Skips this whole section. All right, on to the next. Face Red, Drippy, Face Red, Drippy. Can't agree more. Well said. Luis Almeida to 250. If I try that. Say, White Speckle, Wilfredo and Tunez. Nice one there to 299 for the Guardians. Jason Churio. Purple Ethan Salas. There we go. That's got to be a sign right there. Congrats, Padres to 250. Working our way up. Very nice. Patrick C. Picking up a four. Four spots in Cosmic. Thank you, Patrick. That's great. Again, got to get our pristine sold out. That's breaking next. Not all teams yet. Most big teams are on sale. Definitely check that on out. Andy Acevedo. Say, Teal Rewave, Miguel Vargas to 199. There he is. Face Auto. Luke Gold for the Tigers. Congrats. Detroit. Fallen Celestyn. First base. That is an orange. Trishon Cosas. Iconics to 25. Nice one there for the Red Sox. Grats on that. Sarmiento. There's Wolcott as well. Getting there will be a Genaro Miller first. Nice call. You ready? Right here. Genaro Miller first. Go, Curtis. Curtis Mead. Need for Mead. Need for Mead, everybody. That is a Gold Shimmer. Jose Gerardo. First nice one there to 50 for the Marlins. Congrats, Miami. Base Auto. Daniel Mateo going to the Rangers. Grats. Texas. Valdes and Acevedo. Say, Refractor. Reese Hoskins to 499. Margell picking up a spot. Number 57. Thank you, buddy. Jack Williams. James Wood. And base. Canada Delgado as well. On to the next one. Drop you guys a link to Pristine. Breaks next. All teams on sale. What's up, Enrico? Going on, Enrico. Spartan 5-2 lineup. For sure. Many Margos. Might be in multiple Aspartan 5-2, because he's a cheap outfielder. That's why. Easy. Easy Homer here. That might be true, Enrico. Hey, it's nice. You won Drew Vargas to 125. Grats on that one. Very true for the offensive line. The phone in Celestonia. That was kind of a painful game to watch. Yeah. Strong was disgusting. Asus Bugarin to 499. Refractor, first auto. Four of the Rockies. One of the last teams taken. And a wall cut. I'm giving my boy much time there. No. They were not. No, that was a difficult game to watch. As completely neutral from both sides. That was still extremely painful to watch. True Blue. Adley Rutschman. Nice one there on the rookie to 150. Grats Orioles. Jason Churio. No, not good. I'm going to pull Prospect Process. Super number 4 today. Do you know that? I got another one, dude. I got another one on Knight of Clive. Yeah, I think I was in there. I think I walked right in and got it. Yes, you were there. I walked right in and pulled it. Oh, okay. I'll walk in for a super call. That is Junior Caminato to 199. A lot of money on that guy for the buyback bounty. Face Auto Ludwig Espinosa going to the Cubs. This one there, Chicago. It's an Orange. Edward Julian going to the Twins. Congrats, Minnesota. Very nice. He's in a K-Riz 94. What's up? He's in a K-Riz 94. Is he? He might be in an Espartan. Yeah, I will switch him because of the mirror field. There's Edward Julian again. That's got to be a sign for you right there, 199. And Luis Guanipa for a lot of wins. That's a good sign. Yeah, what's wrong with that? Brendan Maia first. Thank you. Appreciate that, Enrico. Yeah, like the stream, guys. You are enjoying it. Todd with the Braves in 29. Let's go, Todd. We are down to 9 to go. And Pristine, everybody. Pristine 4 Boxer. Last time I ripped a Pristine 4 Boxer, there was a Montsatofi Yoshida Super Fractuero. So, not too shabby. They're Brooks Lee to 499. I can see a Super. I can see a Super. Yeah, why not? See a Super in something, man. Purple Auto, Jesus Pugarin. Nice one for the Rockies in the Color Match. There's Matthew L picking up a spot in iMac Collegia and Cosmic. Thank you, Matthew. Appreciate you, buddy. Weldon Francisca. Chill. Guerrero, Alfredo Duna. He's still on claims. You know, he's 10 Gs. That's a big one. That is Miguel Blaze, too. It's 75 Orange, Yellow, Vapor. Vapor Wave, I believe. And more base. Oh, one of the next. This is my rollercoaster tycoon in the bottom there. This is my rollercoaster tycoon or something. Yeah, something going on. God, I know what you mean. Not damage. It's just the design. Design is definitely interesting. Design is definitely interesting. Let me drop you guys a link to Pristine again. Where is Pristine? Speaking of it. Nine to go. Single digits. Nine and, like, 12 to go on Pristine. So not bad. Appreciate you all there. Again, D-backs, Orioles, Tigers, Marlins, Pirates, Mariners, Cardinals, and Nationals all available as well. So some good squads still available. Again, all on sale. At least $20 off on all those big teams, which is good. So check it on out. Who is Anthony Rizzo? Two 150. What's this racket called? Alecine? Last World Series win. Oh, Last World Series win. Oh, yeah, besides the Yankees and Reds. Pretty much. Adley. That is a green. Javier Osario. Nice one for the Tigers. Congrats. Detroit to 99. On the true green. Oh, come on, Seeger. On Reggie Crawford. Two 150. Nice one there. I have a captain one on the Blue Jays game. We need Matt Chapman to go off. Garrett Cole to 499, as he is my well-been Franciscan. He's my captain. He earns 1.5 points. You got a lead in this one? Yeah. Take it.  And the pitchers are hella expensive. Let's keep moving here. Next box. Sure. Shimmer, Jackson Holiday. Collier and Spencer Jones. Base auto, Brendan Malone. Home Malone going through the ease. Take a look. Corbin Carroll to 199. Little ding on the corner of the holiday. We'll send an empty box and wrapper on that one. How many autos? I will say it is a lot. Enrico. Every player signs a lot of autos. Yeah, it's a hell of a lot of autos. Frackers at 499, so the base is more than that. Yeah. Aldo lentigua, come on. Cheville. And Luis Guanipa. Where'd your go to with the lentis today? Dave's double. Nice. Dave's double. I like it. Classic. I like it. Got to tell them to chill out on the condiment though, because they always make it. They do soak that thing down. They've got some sort of machine that stands on it. I like Mayo, but good Lord, man. Nice and nice. I have to go light on that. And Joyce. 499. Got to tell them to chill on that. I like lettuce too, but the whole head of lettuce may not. True. All right, we've got a redemption now. Come on. There's going to be a chrome autograph relic of Jordan Alvarez for the Astros. One of the last teams taken. Okay, all right. Not bad. Those are not easy to hit, man. Put one of those as a soda, obviously. That's pretty good. I've seen this before. Yeah. Those are cool, man. Those are going to be, that'll be numbered to 100. It'll be horizontal. The horizontal. I pulled two trouts of that randomly this year. And like back to back cases too, dude. It was like the hell. Henry Bolt, nice one there. He's the guy I've been going after a little bit. I like Henry Bolt. Atomic prospect process. Drew Jones, the 150. Or the old Arizona Diamondbacks.  Yeah, that wouldn't shock me, Timmy. I think I forgot who it was. Somebody posted the entire like some player posted it. Shimmer, Luis Juanipa. There you go. Braves. Base auto. Jordy Vargas going to the Rockies. Congrats. Colorado. Solano and Raymond Mola. Beautiful shot. Oh man. Alvarez, image variation. Grats on that one there. Mets. Space Mountain. Almeida is the Salas first. Hans Montero. And then an upside down. Jose Gerardo. First base auto. Congrats Marlins. Some extra auto in that box for us. Not too shabby. What's up, Joe? Joe Mariner. Hell yeah, man. See a cellist in for you. Joe D. Yes, sir. Joe Dizzle. Ferro Duno. Nice one there too. 499. Atomic auto. Eddie Beltray. Nice one there for the Padres to 100. I thought it was going to be the other guy. But still very nice. Congrats, San Diego. Another guy would be cool. Another guy would be massive. Another guy would have been cool. Going on, Joe. How you doing today? Yeah, what's up, Joe? Playing off of baseball today. Oh man. Yo, Andrew Vargas. Injects playoff baseball into my veins, dude. Ray's got the bases loaded down. One with three errors already. Okay. Atomic pitilanzo. Or iconic. Iconic atomic pitilanzo to 150. Glad that's not hit with a bit. Remind the leg. Guy can't feel good. No. Rainer Arias first. Doing well. No complaints. No complaints. Oh yeah, chilling. Got some good breaks tonight. Going to be fun. A lot of entertainment, for sure. All kinds of stuff. Got 10 bucks Tuesday. We've got some pristine. All kinds of fun stuff. Jacob Reimer's shimmer. There you go. Bassado is Kate Hunter. Let's go into the reds. It's a yellow of Joey Ortiz. Rookie for the Orioles, 275. Xavier Isaac. The key's unclaimed. I think either he is or he isn't. There's Felon and Celestin. Besides, can you black with the next release? Updates coming out soon, I think. Sebastian Walcott. It's like update tier one and one other thing. All come out on the same day for baseball. Weird. Huddles coming soon for prison. Prison WNBA. Yeah. In the University football. Yeah. Yeah. I think we're getting some of that. Select baseball. Yeah, select baseball. Update series. Hobby and Jumbo. Yep. Cold standard in a couple weeks. Oh, that's good. That'll be fun. Conflict UFC. Ooh. Leaf pickable from Eredition. Hell yeah. Arnoldo Lentigluck. Nice one there, too. Up 125. Brandon Maia. Bro, NetPro has the chokehold on Annali Waters, though. That's Ruben Santana to 299. Nice one there for the Donabex. One of them bought NetPro. Might have. Leaf might have, because Leaf's got Alcaraz, too. We'll find some pilanzos, Timmy. Oh yeah, absolutely. Kyle's here. Peter pilanzos on his way out here. My boy Peter. Cutter coffee. A base. Ah, it's football. Penny Black football. It's a really good set, actually. Kevin Aru to 299. The checklist is kind of loaded. Tony Gonzalez has a lot of those. Really? I think that was kind of cool. Yeah, I don't. Kind of in on that. The last one I saw was Tony Gonzalez. What I'm saying, right? I was looking at the checklist. I was like, the hell? That was one in Almanac, I remember. It was like a triple auto. It was like Broncos, all those things. Oh, that's cool. Like Whitton or somebody. An elite auto, yeah. Michael with a spot in. Cosmic. Thank you, Mike. That is a Breyler Guerrero. Magenta Shimmer. Nice one for the raise. The 150 or not 199. Go raise. Yeah, 199 on Guerrero. It's a base auto. Marcus Lee Sang. Nice one there for the Phillies. You know what Marcus Lee did? He sang. You don't answer. I'll just answer myself, Kyle. Yeah, I know. And you will. Yeah, Rhys Hoskins 499. I think that you can do it now. I would take that bet and run all the way the bank to it. If we have wines on that. Which bet's a better bet? You were the, that one or the over 100 Goldfish? 299 that verb is over 100 Goldfish. Over 100 Goldfish. We were, I was hammering Goldfish the other day. Hammering Goldfish. Check out Melton. Surely not. Two bucks, not 200. Gondry Varks and Ariel Castro. Besides, did you have like the paper bag or did you have the big box? No, I had the paper one. I just bought a little one at the store. Nine to go, all teams on sale in pristine. Nine to go, all teams are on sale. Thank you all again. Two, four boxes of pristine coming up after this. Last case of pristine we ripped was absolutely loaded, dude. Three Josh Young Autos. Had the Superfractor of Massa. Had another one-on-one for the Red Sox, Corey Kluber, Black 101 in there as well. Yeah, Red Sox legend. Blue Tetsuya Yamada. Raise the legend. That would be a random two all at the end right there. Legend. Yankee's legend. Yankee's no hitter and they dipped after that one. Got injured and that was it. Base auto, Trey Faltin. There you go for the Reds. Spencer Jones, Camp Collier, couple 23 Bowman guys there. Glad you're green. Luis Torres. No more offers for the Super. And it's Anthony Rizzo. Big Rizzo. 2199. That's true. Yeah, a case yesterday of Ginter was nuts, dude. Seven autos. We hit one of the top's employee SBs, Mike Mayhan, who's the CEO. Yeah, yeah. And then we hit a Wemby. And we hit another five autos. Two rip cards. Yeah, Wemby Auto. And then we hit a one-on-one mini wood of Seth Brown. Rookie hand numbered 101. It was the best case of Ginter I've opened by obviously. I think Seth Brown made a couple of carries on it. Samuel Munoz. Two, two, maybe. Oh, yeah. Luis Guanipa. That's awesome. They saw it out of Brett Wisely first. Maya first. That's quite a case. Yeah, it was a really good case of Ginter. Alvarez image variation again for the Mets. Crawford, Kettle. Cabrata, Yosue Gapala. And just nine to go on Pristine, everybody. Coming up next. Jefferson Quero and Face. Noir basketball on 20th. That's big. NT basketball's got to be relatively soon.  I think Noir was supposed to be the 11th. I must have been trying to push back. What's up, Jacob? Green, Anderson De Los Santos to 99 for the Orioles. NT basketball, one month from today. Ooh, nice. Take NT basketball. Take that all day long. Dario Barreiro to 499 for the White Sox. On the auto bench man with a spot in tier tonight. Joshua picking up a cosmic spot. Dawn with the Tigers in both. Halfcases in a 10 Box Tuesday spot. And then Joann picking up a spot in IMAG collegiate. So thank you all. Down to 8 to go. 8 and 11. 8 and 11 to go in our next two breaks. Cosmic solely, but surely making its way down as well. As is Sapphire. Diego Cartaya. IMAG divisions was at 4 when I got here. So thank you for knocking that down a little bit. 499 Bobby Witt. And 10 Box Tuesday is now on 10 to go. 8 teams to go and that is breaking next everybody. That is breaking next. Welcome you to the stream on this wonderful Tuesday afternoon. And sunny. Actually cloudy to pop the Florida. Oh, shocking. Thank you so much. And we're shocking. Shimmer, Marco Luciano. Salas first. Base auto is Christian Mina. Going to the White Sox. Scratch on that. First base auto, Hans Monteiro. White speckle, Miguel Blaze. 299 for the Red Sox. We've got an AFL fall relic. No, it's going to be 210. A Jordan Lawler. Game use base. Congrats Diamondbacks. That's kind of nasty, dude. Yeah, and that is 9 of, or no, 8 of 10. That is awesome. Game use base. Oh yeah. That's really cool, man. Congrats on that Arizona. And he of course made his debut toward the end of the season. See on the roster. Like it's Caminaro on the pro season roster. I don't know. I haven't seen him today. I don't know if he's starting. He's definitely not starting to have a look. Yeah. I think he made it in. That's a box of hobby. Then we'll be into choice. Knocked a choice out. And then we'll be into pristine after everybody. Let's go. Like I said, let's get that sold on out. They're ripping on it. Very shortly. Edwin Rodriguez, the 299. Mariners. Davidson Gutierrez. It's a white speckle auto. Hobby or Sinoja to the Marlins. Congrats Miami. 299, Jackson Churio. Gano Mejia. He's a Yanquil Fernandez. And Victor. Close though. Same Ilsevalo to 499. I pulled, I kid you not 30 of those. Same Ilsevalo. Refractors. Him, Meryl. And now I'm getting a ton of what's his face. Garrett Cole and a ton of Mookie Betts as well. So just very, very odd. Dean Dino with the Lions in Flawless BY team. Thank you buddy. What's up Dean? Again, if you are a YouTube member, there is a 10% off coupon that got sent to you. Use it by 11.59 tonight. Use it on breaks today. Use it on breaks tomorrow. They saw it off Daniel Mateo. Going to the Rangers. Cunha and Lazarol Montez. So thank you guys again. Appreciate it. Shimmer of Gutierrez. Yondri Vargas. Aerocastro. Yellow of Corey Seeger to 75 for the Rangers. Caminero, Rainer Arias first. Then just 8 teams remain in our next break. Kyle just dropped you the link to that. Thank you Kyle. That is Christine Baseball. Christine Baseball. All right. Case of choice. Good luck everybody. Bicron choice. 12 bucks. Books. Whist on the knife there. What's up Nicholas? How you doing buddy? Doing well man. An extra auto here. Brenny Malone. Nice one there. He is a Oakland Athletic on the Baseball Factory. It might not be an extra but no it is an extra. Okay so Clark Elliott again for the A's. Base auto. Nice one there. Congrats A's. Another base auto this time is a Luis Perales. Going to the Red Sox first. And then a Yellow to 75. Javier Valdez to 70 again to 75. Going to the Braves that's what I meant to say. Yes I did win both my fantasy. Killing everybody in my college league.  On an autographed team. Nonetheless I'm taking credit. I'm taking credit. I did make the first overall pick. I did make my first pick because it was Tuesday when I was breaking. IBM Watson gets credit for that one. Well IBM Watson does not get credit. Sam gets credit for that one. Spence Kaufman base auto. All I know is I took McCaffrey so. There. Watson would not have taken McCaffrey. Good pick. Jack Pineda to 99. Green Lava. Congrats on that there. Royals. And then Atomic. Going to the Rays to 100. Miguel Tamar is nice one there. Matthew picking up a bunch of teams tomorrow. Matthew using that discount. Now I'm going to do real quick. Here's what I'm going to do for you guys. Since we have that 10% off coupon. I'm going to go ahead and give five memberships. Right now. They think of sports cards. Now gift in five memberships. So if you are not, if you were not a member. You now are five of you. So that's Michael. Ron. There you guys go. Now I'll have five of you now have memberships. $15 later for the sports cards. Go in the car. Base auto. Davidson Gutierrez for the Mets. Again you now five of you now have access to that coupon. Justin Henry Maloy first base auto for the Braves. Nice one there. And then going to the Cardinals to 299. Luis Rodriguez. That's on that one there. Cardinals. I may do that again throughout the night potentially. I may give out some more memberships. We'll see. Oh then I'm going to. It's got to try to out nice nice me the other day. Yeah well you left the stream and I did. You want to drink Vargas? I came all the way back. Nice one there first base auto for the Dodgers. Congrats. I waited a few minutes to see if you were going to be gone. Christian Serda. Congrats on that Arizona. Nice one there. Hello William. Mr. French. I'll be a good Sean. There you go. Theria Laverde to 299. I'll give you guys the full Sean experience. God. Save everybody dude. Save everybody for that one. Good lord. I don't know if I can get out of here. True gold come up. Let's go. True gold. That is a first base auto of Yosie Galan. For the Rangers. That is a Luis Rodriguez. Nice one there again for the Cardinals. The time of base auto. And then a gold Joander Rivera. It's a 50 for the Nationals. Congrats Nationals. Nice one as well. All right keep it moving here. Our choice. We'll do a quick recap after as well. We got one random we got to do. And then we'll do a quick recap. Just our autos and such. Autos and hits. Jack Pineda first base auto for the Royals. It's a Demetrio Cressantes. First base auto for the Diamondbacks. And then a Refractor to 499 Clark Elliott. Let's go on to the A's. Cressantes. Demetrio Cressantes. Yeah I know it sounds good. I saw my buddy in college. It's like if you put the name chicken. If you put the word chicken in from any Italian last name. It sounds delicious. That's true. The Italian Chicken Marinelli. Yeah right. That is a Yanathan Enriquez. First base auto. This is nasty. Going to the Braves. That is a Gold Shimmer Luis Guanipa. Congrats Atlanta. That's a big one right there. We'll get that into a mag. Congrats Atlanta. The number 41 of 50. That's a very good box. Because followed by that it's going to be a 499. Demecindelo Santos. Going to the Diamondbacks. Congrats Arizona. Nice one there as well. I know we need to see Celestyn. Celestyn Orange. True Orange Celestyn right here for Joe. That'd be nasty. The first one of my followings that was in Italian was Yon Center. What? Chicken Center is not Yon Center. No. No it does not. Definitely does not. That is a Robert Moore. Nice one there base auto for the verse. Nice one here. Another Gold Shimmer. This time it's going to be Peyton Williams. The 50 for the Blue Jays. Congrats on that. And we've got to 250 Daniel Mateo. Let's get to Christine. Filled up just 18s remain. Some good deals to be had in there. Stuff is on sale. Here is your link again. Arizona, Baltimore, Boston, Miami, Pittsburgh, Seattle, Cardinals, and the Nets. That is going to be eight to go. Everything is on sale. I can't believe that happened once. I gifted you a membership. That was so pissed. So pissed. I think Boris gave me one too. Yeah he did once. See any old boy? Nice one there for the days. Appreciate it boys. God. That is a Connor Stain to 99. That's a good case man. And a 499. Go to the Guardians. Well been Francisco. Congrats on that Cleveland. We'll take that all day. Take that all day. Well been Francisco. Going to the Cleveland Guardians. It's very nice. Congrats Guardians. GQ model, Oxyoplas. Nice one there for the Pirates, first base auto. First base auto for the Dodgers is Junior Garcia. Oh it's nice to see Guardians. There you go George. Frederick from the Cosme. It's a 299 weight speckle auto for the Orioles. Congrats Baltimore. This one there as well. Two to go. That is Junsock Shim for the Pirates on the base auto. You've got a Gerudo Contetto. First base auto for the Braves. And nice one here for the Yanks. Atomic to 100. Hans Montero. Congrats Yankees. Nice one there. Very solid. Yankees super deep of course in this product. Yes. And last box of the... Great everybody. Good luck. Last card Mojo incoming. Starting off with a Kinder Delgado for the Yanks. First base auto. Got a... Cheese man. Hayden Dunhurst. Base auto for the Royals. How about going to the Yanks. Brandon Maella to 250 on the purple. What a case of choice man.  What a case of choice. Very nice. We'll get that into a mag for you again Tom as well. Let's do this random really quick everybody. For the Tetsudo Yamada. All right everybody. Going to roll the dice. Whatever team's on top after nine times. Get the card. One. Two. Three. Four. Five. Six. Seven. Eight. And nine. Going to the Cubs. Cubs going to get the Yamada. Grats on that. That was in fact nine times. Twas. Do a quick recap. We've got base relic of Jordan Waller to 10. Base autos. Kinder Delgado. Hayden Dunhurst. Gerardo Quintero. Junsoc Shim. Union Garcia. Oxy Oplaz. Yenny Oliboy. Yonatan Enriquez. Robert Moore. Jack Paneta. Dmitry Prasantez. Yosi Galan. Lurad. Kristin Cerida. Yoandry Vargas. Davidson Gutierrez. Justin Henry Malloy. Spence Kaufman. Clark Elliott. Luis Perales. Brennan Malone. Daniel Mateo. Christian Mena. Brett Wisely. Trey Faltin. Marcus Lee Seng. Kate Hunter. Jose Gerardo. Jordi Vargas. Jordan Alvarez. That's cool. Brennan Malone. Ludwig Espinosa. Daniel Mateo. Luke Gold. Christian Cerida. Joey Estes. Do you want a Magnus one, do you think? I would say just in case. Well done, Francesca. Get that one into a Magda 499. Debbie Zendilosanto. It's Clark Elliott. Dario Barrero. Jesus Bugar and Peyton Williams. 299. Frederick Ben Cosmay. Dario Laverde. Lurad. Javier Sinoja. Ruben Santana. Wilfridio Atunes. Robert Moore. 2250. Daniel Mateo. Jesus Bugaran. 75. Javier Valdez. 299. Jack Pineda. Connor Stain. Javier Osario. 2100. Eddie Veltre. Miguel Tomares. Hans Montero. 250. Peyton Williams. Joinda Rivera. We also had a Gold Luis Guanipa. 250. Gold Shimmer. And then a Purple Brandon Maia. 2250. That would do it for the brave guys. Thanks again for the film. Up next is...