What's going on guys real is the game here today. We are on this what donald's massacre It's supposed to be like a McDonald's massacre But I guess it's what donald's for copyright intentions, and let's go ahead and begin with this. Oh my god Okay, you can see Ronald right there. It's kind of chubby Peter at my chicken restaurant a do August 2022 211 p.m. I think that man like 11 a.m. I don't know Okay, I just have to clean the place and get out of here. Okay objective clean the restroom Okay, where the heck is the restroom? I think this is the restroom here What the heck? Okay.    Oh, there's poop in the toilet as well. No, they didn't flush. What is wrong with these people?  My god.  Hey, hello. Sorry, sir. We're closed No, sir, it is not That's not what dawn sir anyways, we're closed Sir, I said it's not work Hey, what do you mean? What do you mean by that? Weirdo, it's kind of stuff bro, right I clean the kitchen Alright, I guess that guy has like some sort of fantasies with boys and happy meals, right I clean the kitchen Yeah, we got these cans Pepsi Sprite Okay, let me just finish clean this up. Hey, dude, it's so dark Wait, there's like another door here. I think Sam dropped the key inside of one of the toilets What the frick Sam? Are you dropping the key in the toilets brother?  That's the weirdo who talked to me on the phone. Oh man It's a scene like we might be in danger and that weirdos on to us Hey, he said something about dropping the key in the toilets. Hey, there's no another was I didn't see anything but poop Inside of the toilets, bro Hey, maybe it's the last one. Oh Right. Oh, that is NASA.  Okay, it's here a light flashing over here. That has to be the flashlight Sweet all right My god, that's kind of creepy just the empty parking like Hello, was anybody out there? Let's go up to the basement and turn the power on hey This has to be the door to the basement and down we go. Oh, not the spiral stairs.  They get me dizzy Hey, just obviously dark down here. So where am I going?  Where are you at man? I know it's gonna be somewhere down here. Just look oh Hey, no man. I don't need to go there. Okay. That is locked. Hey, why is it so okay? Nice? We found the generator Objective clean the kitchen. I thought I really finished cleaning the kitchen bro. What I don't know But I'm gonna keep my flashlight on I do not trust this basement down here Especially with the freaking clown laughing that we just heard Buddy Dude, we're gonna we're gonna freaking die here. I just know it Ronald's gonna pop out and he's gonna murder us and that is it happy ending And let's turn this power back on once again like we just didn't power it on.   And it's in the power on again I'm gonna try it. Okay. The power is on. Okay.   Oh my god. He's right behind us Bro, why does he look like that? What the heck? And the sensitivity in this game is too crazy. Oh great is locked. Okay. We have to go through that other door Where is he at bro? I'm flying. What the? Okay, this game is totally broken. I did pay a dollar for it by the way, so that explains Okay, this dude right such a clown. He didn't know where he's running. Okay, you key. Did we grab it?  Come on.   Yeah, we're let's get out of here. All right, whatever.  Oh great. There's another door Wait, what? Did I just glitch through the wall at my chicken restaurant? August 3rd 2022 12 14 p.m Peter Man, where are you? He said now we're outside the parking lot Objective look for Peter Man screw Peter, bro. Let's just go home.  The middle of the night. Oh wait, we're at the McDonald's Peter It wouldn't happen here. Hey Peter has to be over here.   It was so loud we just died of fat Ronald Peter at question mark August 3rd 2022 My god, what the heck?  We're like dazed and confused Like we just woke up from being knocked out My god, come on bro. If you want to escape you gotta move faster than this It's just kind of weird That wasn't even Ronald anymore Just another random clown Okay I'm not gonna lie.  You can do this. I believe in myself I was wearing wearing some clown shoes. I would have made it worse Come on. Just turn the corner. We're probably out of here. Wait, there's a box Oh, nice. Hey, cool. We actually got health and we can actually sprint Bray dislodged. Oh My god, there's a bear trap be careful Hey, there has to be like a key or something. What the heck? What the frick is that like of some big bozo or something? No, dude, you're gonna be kidding me, right? It was locked. Where was that door at? No, it was right here. Hey, I think we're safe Right here the gate open. There's a ladder here What's up with all these bear traps? Dude, I keep hearing the gate open where we came from.   We're trapped. What do you mean, bro? The psychopath kidnapped me when we were when I was looking for you. Don't worry, man I'll get us out of here Not too sure about that, but I'll try. He swallowed the key. No frickin way, man. Wait, there's something there. Is that a bomb? What the heck? Take this key for the generator room. You have to turn on the generator and explode the exit door Bro, there's like C4 all over this place Fine six tape What the heck? Okay Fine six tapes.  I mean you're right.  You can't afford to die Okay, we need to find six tapes Okay, what is this? I have to turn on generator to explode the door Bro, what? Okay, let's be careful with our the way we walk because There's traps all over this area. Okay, where the heck are these tapes, bro? I'm like not even finding one Come on Bro, what? It opened the wrong opposite door Okay, there's a dead body There is no tape though Wait, is that tape? Like does it mean like tape? Oh? Okay, it means like actual duct tape. I thought I meant like VHS tapes or something More you know, okay? Gotta be a tape in here, right? All right, at least I assume there would be Why do we need to find duct tape though? That is so random Yeah, there's nothing here great In my flashlight just died came all rooms, but I'm not finding any duct tape anymore.  Okay, there's another tape. Hey, we got two tapes so far Okay, guess we're just gonna keep going door-to-door So we find all the tapes ain't nothing here Come on.  Let me just close the door man. See you later fatso What is this fine-to-mask? Oh? That is creepy Yo, what is this game bro in my dollar back? It was 75 cents, but you could have checked out at 75 cents, so they kind of tricked us there Okay, there's you That's the creepy mask. Hey, thank you. Hey, bro. I thought I was going insane. What was that? What the? Dude, those are the from dark deception. Okay, I don't think there's gonna be duck duct tape in here Hey, this is freaky man. How do I get out of here? Excuse me part of me? Bunch of clowns man.  Oh, no, actually we need one more Dude, I thought I was gonna be done after this come on. I Haven't really we're gonna get jumpscared again. Was I here already? The door was open. Wait, I came from this way. Okay. It took the wrong turn great. Wait, it's a dead end Okay, so we're missing a tape actually. Oh That's not good the last tape, but I couldn't find it. Okay. We lost him nice But I do know there was a barricaded door Or maybe it's no that's where Sam is About to chase me again. Okay, there was a barricaded door somewhere around here I just can't find it and we do have a crowbar. Okay, there it is Gotta be in here. No doubt Not a doubt dude. Stop opening the opposite door. Thank you. My god. I will take that when I have all the tapes Bro, what? Okay, the last tape Grab it. Okay, we have six tapes. We grab the gas canteen and where the heck can we put this though? Do we light Sam on fire? Oh, okay, this is open Which is odd because it was closed We place this here maybe Okay, we use the tape Okay, what do we burnt or it exploded? What the heck? That was so booleh Did we just die? I think we died Sam at the same time Out before the time ends.   In this way. Oh heck not man, bro. He's chasing me. Oh Oh go go. Oh, this is terrible. This is terrible. I Just burned This burned me alive.  I'm getting chased by fat Ronald and he's right on us Hurry we have 80s 90 seconds. I think we're gonna die actually Maybe not Let's keep just keep oh My goodness Why does he burn? He's just walking through the fire Bro, you can't spray it nothing. Oh my god the freaking dead body just fell down Hey, go go go Dude, I don't think we're actually gonna make it this tunnel seems like it's endless and I don't see an end to it I think I see something though. Okay, Ronald is still on us We're freaking crippled. We're trying to escape And it's not looking very good for us. Come on dude 50 seconds on the clock My we got this. I believe in you Sam Run Wait, so the other two sacrificed himself blew up the place that is messed. That's a real friend right there, man Okay, I think we made it. Oh Great left to right. I Think left. What just happened? I died. Hey, let's go.  I think this is the end for the vaulted door He's still behind us Hey, we made it Damn escape Peter fate and now That's it Bro, what? Game by Talon. Okay, I guess that is the end We have it what Donald's massacre. I'm gonna lie. It was a dollar. It was pretty bootleg It was like a good bootleg game, you know like Like that good bootleg stuff because sometimes some games are just straight up cheap But I don't know I kind of had fun playing this even though it was kind of horrible Where's it guys? Well, I'll leave a link if you want to check it out a cost 75 cents if you want to buy it I'm not forcing you to buy it or anything. Just if you want to check it out for yourself You've seen the horrible gameplay And yeah, thank you for watching. I'll see you guys in the next one


Hi, I'm Bess van Woerden and thank you for watching this video. I'm going to talk about our analysis of the iterative slicer algorithm to solve the closest factor problem. This is joint work with LeoDegas and Dijslaarhoven. Let's start with the basic objects and problems we will be considering in this video.  In our case, restrict yourself to full dimensional real let'ss. An equivalent definition is that let's is generated by all inter-combinations of some basis vectors. In this example, such a basis could consist of the vectors p1 and p2. The shortest vector problem is probably the most famous hard let's problem. Given a basis, it asks for a shortest non-zero let's point. This minimal length is called the first minimum of the let'ss and is often denoted by lambda1. A related problem and the aim of our work is the closest vector problem. Given a target t, the goal is to find a close let's point to this target. In this example, the closest let's point is to spot. But in higher dimensions, this also becomes a hard problem.  This is repeated for each target separately. However, if there are many targets, it might be beneficial to do some pre-processing first. The pre-processing phase receives the let'ss and outputs some data that the CFPB solver can use. In this way, the time complexity per target can hopefully be reduced. This comes often as a trade-off between the size of the pre-processed data and the time complexity per target. Such a CFP algorithm with pre-processing has numerous use cases. Concrete examples are ideal SVP, enumeration hybrids for SVP, or even computing class group actions in a relation lettuce. Also important to note is that the pre-processing can be started before any target is known. As in cryptography, the let's often already known in the form of a public key, a long offline computation can already be done to speed up the online part of an attack. One particular simple SVP algorithm is the iterative slicer. For the pre-processing, we obtain a list of preferably short lettuce factors. In this example, we have these six vectors in our list. Using a target, we then try to move it close to zero by reducing it with vectors from the list, until this is no longer possible. After this reduction, we hopefully found the shortest coset representative of the target, which results in finding the closest lettuce point. This algorithm always succeeds if and only if the list contains all so-called foreigner relevant vectors. However, the problem is that most D-dimensional lettuce have in the order of 2 to the D relevant vectors, which makes this algorithm worse than other known SVP algorithms without pre-processing, in terms of both storage and time complexity. Therefore a good question is what happens if we pick a smaller list? In this example, we only have plus minus B1 and B2 in our list. If we now reduce the target, it might not actually lead to the closest lettuce point. Note that this seems to depend on the location of the target. So one idea would be to re-randomize the target by translating it by some random lettuce vectors. Now we see that the reduction actually succeeds. Heuristically, one could say that there is some success probability P, depending on the list, that the target is properly reduced after each randomization. Then the naive time complexity would be proportional to the list size divided by the success probability. And the main aim of this work is to analyze the success probability. Before we start with this analysis, we first need to get more concrete about our pre-process list. From further analysis, it quickly becomes clear that we preferably want short factors in this list. So let's fix some size parameter alpha, and let our list contain all alpha to the shortest non-zero lettuce vectors. Then the widely used Gaussian heuristic is a somewhat equivalent to saying that the list contains all lettuce vectors up to length alpha times the first minimum. So they are all included in this ball. More importantly, under this heuristic we can assume that the factors are uniformly distributed over this d-dimensional ball. This distribution allows us to actually analyze the success probability. So what's actually known about the success probability? Well we have two lower bounds from previous works. Notice note that a parent list of the size 2 to the half d is already enough to almost always succeed, already improving the list size by square root compared to the iterative slicer. Furthermore, as expected, we see a trade-off between the list size and the success probability. But these two lower bounds have some problems. First one of them has some asymptote and is even undefined in the low memory regime. And secondly, given the crossover point, the union of these two bounds is unlikely to be tight with the actual success probability. With our improved and tight analysis, we show that the success probability actually has the following trade-off curve. Note that it is the same as one of the old lower bounds in the high memory regime and strictly better than both in the low memory regime. In the bounded distance decoding regime, where we get the guarantee that the target lies unusually close to the lattice, the situation is even more strange. Firstly, this guarantee could not be incorporated into one of the two lower bounds. Secondly, we still have these asymptotes. And thirdly, this lower bound seems to imply that BDD is actually harder for the iterative slicer than CVP for our smallest sizes. But generally BDD is supposed to be easier. Our new analysis resolves all of this and shows that the success probabilities have the following curves. This also shows that BDD is indeed easier for that algorithm than CVP, even though they converge in the low memory regime. So why do these lower bounds fail to be tight everywhere? The main problem seems to be that they only look at a single event. One of them looks at the so-called approximate four-nose cell that is induced by the vectors in the list. After a target is reduced, it lies inside this approximate four-nose cell. However, it's only successfully reduced if it lies in the real four-nose cell. So you would expect success probability to be somewhat equal to the volume ratio between the real and approximate four-nose cell. However, as the iterative slicer prefers a reduction to shorter representatives, one could argue why this ratio in effect only gives a lower bound on success probability. The other lower bound follows what in our model we would call a one-step analysis. First one can show that it's always easy to reduce the target to some length at most beta, where beta only depends on the list size parameter alpha. Now one can compute the small probability that after reaching beta, the target is reduced to the gold norm of Kappa in a single step. And the total success probability is at least the probability that this particular event happens. This also explains the asymptotes from before. As for small list sizes, this beta is too large to actually reach Kappa in a single reduction step. When we phrase the letter lower bound like this, it seems clear that what we need to do. For tight analysis, we have to model all possible events, which gives us a model that's like a random walk. Like before, it's easy to reach beta, so ignore that part. But after that, we allow the reduction to take multiple steps to cross the hard part. Say it first reduces to some norm at most x1, then to at most x2, x3, and finally to at most Kappa. Actually, we can simplify things significantly by only looking at the norms of the target while this being reduced. Now suppose we have a partially reduced target that has norm x2 in the worst case. Then we can compute the probability that it is reduced by the list in a single step to norm at most x3. And we call this the transition probability from x2 to x3. Taking the product of these transition probabilities gives us the probability that the iterative slicer reaches Kappa via this specific path. And of course, this would give a lower bound on the total success probability. So in short, each path gives us a lower bound on the success probability. Asymptotically, these transition probabilities from norm y to z are just single exponentially small in the dimension. An important fact is that this constant in the exponent only depends on the list size parameter alpha and the norms of y and z. Because we take the product of these transition probabilities, the asymptotic success probability of the path is fully determined by the sum of these constants. So to find the asymptotic optimal path, we only need to find the path that maximizes, minimizes the sum of these constants. Hence, turning this into an optimization problem. Although this is only a lower bound, one can show that it is tight up to polynomial factors by a more formal analysis using densities. So we reduce our problem to an optimization problem of finding the best path. And we're lucky, because the function cx is actually a strictly convex function, when we only consider paths of a fixed number of steps. This implies a unique local and global minimum if it exists. And this makes it easy to optimize numerically. Actually, this was already enough to plot the new success probability curve that we have shown before. However, we went even further and surprisingly found a closed form analytic solution for the asymptotic optimal path, depending only on the input parameters. So how do we do this? We first try to construct a local optimal path of exactly s steps. For this, we could use analytical strains, such as the partial derivatives and the known starting and ending point of a path. Then we use symbolic algebra to express the solution in terms of a alpha and kappa. After having found each optimal s step path, we showed what the optimal number of steps is. This analysis led to the following non-trivial explicit solution for all parameters involved. I don't expect you to fully read this, but there are two nice things to observe. First note that the number of steps is somewhat proportional to beta squared. As beta grows when the list size decreases, the number of steps also increases when the list size decreases. Secondly, the squared norms of the optimal path actually follow a quadratic equation. So what we have shown is that for large dimensions, almost all successful reductions follow this specific path. And of course, one can compute the eventual success probability of this optimal path. So now we have improved the success probability, but we still need to iterate over all our list factors in each reduction step, leading to a cost proportional to the list size. However, using nearest neighbor searching data structures, this can be reduced, but this comes at a cost of a higher memory cost. If included is nearest neighbor search techniques, we obtain the following new time memory trade-off for CFTP. You can see that we didn't improve in the high memory regime, which makes sense as the success probability didn't improve there. However, in the low memory regime, we strictly improve on the previous optimal trade-off curves. Next to the nearest neighbor data structures, there are also what we call memory-less nearest neighbor techniques, reducing the time complexity significantly without any extra memory overhead. However, the catch is that this can only be used if reduced many targets at the same time, to be precise in a batch of at least our list size. Note, however, that each CFTP target already gives us one over the success probability of re-randomized targets. Therefore, the necessary number of targets to apply this technique can be much lower, even as low as one. This leads to the following time memory trade-off curve for batch CFTP. Using our observation, it significantly lowers the required batch size, even all the way down to regular CFTP with a single target in the low memory regime. To conclude, I come back to our title. Our analysis is sharper because we now have a full understanding of the asymptotic behavior of the iterative slicer, leading to a tight bound on the success probability. It's faster because you obtain better time memory trade-offs for CFTP. It's smaller because you decrease the memory requirement for nearest neighbor searching, even when we only have a single target. And it's better because we show how to significantly improve on the per-target time complexity for batch CFTP and reduce the size of these targets, these batches. Thank you for your attention.


What's up guys? Take down here with a product review. I don't do these often here on my channel, but when I do, it's a product that I really like and I use likely daily. So today's product, I'm reviewing my book. It is an external hard drive. This is three terabytes and I actually got this last summer. Like I said, I want to use it for some time before I recommend it to people and I highly recommend this product. I use this for my PS4. Basically I was running out of space. I always liked making videos. At the time I was only making gaming videos. I wasn't making videos like this back then. So I needed space in order to save my games. So I had more space for clips on my PS4 and I actually have this half full now. It's at 1.5 terabytes full I believe. That's quite a bit, but I have all my games loaded onto it. I have no games saved on my PS4 and that's why that's 500 gigs right there. I use this daily. I have it hooked up to my PS4, but you can use it for much more than just your PS4. You can use it for your desktop, your laptop, literally any device that has a 3.0 USB cable and that's what it uses. So I do see a lot of people, especially for gaming, that go out and buy an internal one. What happens whenever that system is no more or you need to use it for something else? You can't. So this is for the type of people that need an alternative and they don't want to open up their system and put something else in it. This literally sits right next to your system.  That's it. That's all you have to do and it actually works really well. I've never had a problem with it. They do recommend however in thunderstorms or if you know the power is going to be out on such and such day just to unplug it just so it doesn't get shorted out. I've left it in two thunderstorms now by accidents. I usually unplug it, but I left it in two thunderstorms now and it did nothing to it, but I do recommend if you're going to try to at least unhook it. But great product, three year warranty. That's the best part for me. Three terabytes. They do make bigger ones now. Like I said, I got this last summer about and I actually had a friend recently buy the same one except the four terabyte one. Since he lived in the States, it's cheaper here in Canada. This ran me about 150, but he got his four terabyte one for about 120. So kudos to him. I'm happy he got that. But if you guys see and you guys look up external hard drives, you might not have heard this one and it doesn't say anywhere on it. That is used for gaming systems because all it says is desktop on it. So a lot of people won't realize it, but PS4 uses the 3.0 USB cable. And that's what this has. You guys got to watch that. Some don't have that cable. So you guys got to be really leery of what you purchase because a lot of it's non-returnable. As long as it has that cable, it will work. And I have never had a problem with it. That's my best thing. The one thing that makes me so happy is I've used it for so long. It's never failed. But you guys probably see that Xbox has their own version. I think it's a two terabyte. I think they have a one terabyte and a two terabyte external hard drive.  This is a lot bigger. Not by much. It's not bigger than your PS4 by any means. It's about a quarter of the size, maybe a third of the size. But I just never felt comfortable with a Xbox item hooked up to my PS4. I never wanted that. I never liked the idea of it. So when I seen this at Walmart, I actually looked it up a little bit. And it was the item for me. Also, it's three terabytes as opposed to Xbox two terabytes. And the Xbox one was quite a bit. This actually cost about $20 to $30 more than the Xbox one. And you get one terabyte extra. So I do recommend this over the Xbox one. But let me show you really quick in my entertainment system where I have it set up. Okay, so here you see right next to my PS4. This is my book here. So reasonably smaller than your PS4. It is bigger than the Xbox version. All it is is one cord. It plugs into your device. And then it plugs into your PS4 or desktop or whatever you're using it on. And then there's another cord. You plug it into the device. And then you plug it into a wall outlet. So it's a really easy setup from what I've seen. This is the cord here. So it is easy. Normally you stand it up. Mine was getting tippy. And it was it was always tipping over whenever I went to pull out a game. So I just put it on its side and actually is way better because the vents are right on the back anyways. So it is way better to have it on its side than it won't even tip over damage or anything like that. But give you guys a close-up. It is a great product. You can use it on your PS3, PS4, desktop, laptop, any device you guys have. So the reason I am recommending it is because it's not just for a gamer, somebody that's going to hook it up to their gaming system. It can be used for anything. So if you make YouTube videos and you want to get something to save your videos on so you never run out of space, that's what you can use it for. If you do any kind of projects or anything you want to save it on, you can save anything on this. Family pictures, anything like that. It's cheap for what you get. I mean three terabytes seems in a way like it's a lot but 150 is what it cost me. Like I said it's cheaper in the States and you get an extra gigabyte from what my friend got. Easy to hook up. Once you hook it up, all you got to do is render it. I believe that's the right word. And it literally took me about 10 minutes to have it all set up and then automatically everything gets saved onto it. Sometimes you will have to change the setting because your original device is what it's going to be automatically saving everything to. So it's just a matter of switching the settings but I do recommend this. It's worth a shot. I went out on a limb. I didn't know if it was going to work because nobody said anything about PS4 but it works really well for the PS4. It works for desktops and anything like that like I've already mentioned. But I'll give you guys a back view. This is the one I got. I always save the boxes. Now I was going to make a review on this months ago before I even had the means to make videos like this and I decided to save it but after having it for months that's why I really wanted to recommend it and make a product review video because it's something I've used for quite some time and I do know it and I do know it works and I think anybody that watches my videos it's mostly other YouTubers or gamers. This is a product they could use so that's why I'm just making this video. So I will leave this video here. Hope you guys did enjoy. Purchase this if you guys want. This is not a sponsored video. I'm just recommending a product I really live behind and I really do recommend it to anybody but I'll leave this video here. Hope you guys did enjoy. Please leave a thumbs up if you did. I will see you guys in the next one. Please take care. Peace.


What is up you guys, welcome back to another one. If you're new to the channel, I am Gold Pony. I do new car truck SUV reviews on YouTube. And today we are in the brand new, the all new 2022 Volvo C40 courtesy of younger Volvo cars, Hagerstown in Hagerstown, Marilyn for more information on their inventory. Please feel free to check out the link in the description box below. So obviously we're in this one today because this is an all new model from Volvo for the 2022 model year. It's got dual motors, it's got a brilliant design. So essentially in this video, we will be testing out and going over everything about this one from acceleration to braking, steering feel, ride quality, sound system, cargo space, all that fun stuff. So having said all of that, what do you guys say? Let's just go ahead and jump right into it. And as always, let's start with pricing. And so MSRP for the C40 will start at $59,845. And again, power is sent to the ground through dual electric motors, one in the front, one in the back, 402 horsepower, 487 pound-feet of torque sent to all four wheels. This is an all-wheel drive vehicle, zero to 60 time coming in at approximately 4.3 seconds with a range coming in at 225 miles. As far as the warranty goes, of course to get Volvo's four year, 50,000 mile bumper to bumper and powertrain warranties. But when it comes to the battery components, that is warrantied actually for eight years or 100,000 miles, so substantially more. So that's definitely very nice. And you actually get complimentary maintenance for three years or 36,000 miles as well. So a little bit more icing on the cake there for you. Anyways, now having got all of that out of the way, what do you guys say? I'm gonna find a straightaway. Let's put this acceleration here to the test first and let's see how quickly we can get our new 2022 Volvo C40 here up to speed. All right you guys, since we are at a red light, this is going to be perfect. Here we go.  Good grief. Wow. That was like zero to 60 and like nothing. That was incredible. I love electric cars, man. Zero to 60 feels so much quicker in all the electric cars that I test compared to their internal combustion engine counterparts. The thing is ridiculously quick. I absolutely love it. In a regular car that is not electric, you're gonna get a little bit of spinning if you do that quick of an acceleration. But in this thing, there's none of that. So that was amazing. But anyways, to go along with that is always braking is equally important. So as expected, you will find four wheel ventilated disc brakes. As far as that braking feel goes, it is wonderful. You cannot say that about all electric cars out there. I love the braking feel on this thing. I'm not sure what the 60-zero stopping distance goes, but I would imagine it's in the kind of mid 100. So like 105, 106, I would imagine. That's what it kind of feels like. This thing immediately brings you to a stop. So braking feel is wonderful on this.  Hydraulic shock absorbers as well. And as far as ride quality goes, it's been perfectly fine. Definitely not having any issues in my short test drive here today. Becker Stunt's got some very nice roads though, but having said that, ride quality has been perfectly fine. As far as cabin noise goes, maybe get a little bit of road noise, but it's really not all that bad. I got the air on too, but road noise is just so-so. Definitely no wind noise though, so that is definitely on point. As far as steering feel goes, I would say it leans on the heavier side of things. I like the steering feel. It's not quite as heavy as the Tesla Model Y. I think I definitely prefer that, but having said that, steering feel is perfectly fine. Touching of visibility, that is definitely not a C40 strong suit. You gotta think of the design. This is essentially an XC40, but in fast back form, so there isn't a whole lot of rear visibility whatsoever if I'm being completely honest. But it will say rain sensing, which of wipers do you come standard to? That's gonna assist with visibility a little bit, but anyways, that about rounds on the performance segment of this review, you guys. So now go ahead and take a look at the exterior of our brand new 2022 Volvo C40.  Fajord Blue, it's a $695 paint option if you wanted to go that route. But let's go ahead and start up front on the C40 here. Body colored front grille, of course, if you wouldn't even consider that a front grille, because obviously with electric cars, you don't need a front grille. To the sides, LED headlights do come standard, of course, with high pressure cleaning. I love that. This is such a cool feature. Check this out. The nozzles actually pop out of the front bumper. That's what that little cutout is, just below the headlight. That's gonna be your headlight cleaners. That's pretty cool. It's high pressure cleaning. Anyway, LED Thor's Hammer daytime running lights coming standard in typical Volvo fashion, of course, automatic feature as well, along with automatic high beams, meaning when you got your high beams on and senses a vehicle coming in the opposite direction, it's gonna automatically dim them back to low beams and then when that vehicle is gone, it's gonna bump them right back up to high beams for you. So just one last thing you gotta worry about there. And just below, you do have fog lights, but with the cornering function as well, meaning when you're going around the bend at night, those fog lights will swivel based on the direction of your steering angle, better help illuminating when it's around that bend. So that is pretty cool as well, but definitely a very Volvo-ish looking front end without a doubt, but it looks like the XC40. From the front end, it looks exactly like an XC40, but anyways, pretty much rounds out the front. Let's go ahead and make our way to the side of this one. All right, so now since we are around to the side of this one, black window surrounds do come standard, and there is a black or gloss black roof, essentially, you guys can see that. Even the A-pillar continuing all the way back through the C-pillar there. It's all gloss black, so definitely a cool look there. Rear privacy glass, of course, does come standard as well. When it comes to the side mirrors, again, they are gloss black, they are power adjustable, they are heated, and they do get LED integrated turd signals then as well, which is pretty cool. Now, as far as that little sticker goes above the charging port there, that is obviously going to come off, unless I guess the owner wants to keep it on there, but the dealership, of course, just put it on there to let you know this is all electric vehicle. Take a look down at the wheel setup, 20-inch five-spot graphite diamond cut alloys come standard, and they look dang good, so I do like that. Anyways, pretty much rounds out the side of this one. Let's now go ahead and make our way to the back. All right, so now since we are around to the back of the C-40, gloss black, upper and lower rear spoilers, you guys can see that. There's actually two sets of rear spoilers. I think it's pretty cool. You got the gloss black shark fin intent all the way to the top, of course. Volvo lettering spelled out horizontally. You got the recharge badging on the back end, as Volvo calls all of their electric vehicles, as they put it under the recharge badging, I guess you could say. When it comes to those tail lights, there are LED C-shaped tail lights, so LED is definitely a nice design to them as well. And typically at this point I do an exhaust clip, but so since there is no exhaust clip to be had, what do you guys say? Let's just go ahead and make our way to the inside of the C-40. All right, so now since we are around to the back of the C-40, when it comes to opening that rear tailgate, it is a power tailgate that does come standard. Of course, there's a button on the key fob, there's a button on the tailgate itself, and it's actually hands-free as well. You just simply kick your left foot underneath the back of it, or I guess you kick your right foot as well, but it is on the left side there that you want to kick underneath, and then it's going to automatically open up for you. Once opened up, cargo capacity comes in at 14.6 cubic feet behind that second row. If that was not enough space, of course that rear seat does fall down, bumping it up to 42.6 cubic feet. There is a stainless steel tailgate scuff plate back there, which is pretty cool. There's cargo lighting, of course. There's a removable floor with grocery bag holders, and so essentially the cargo floor kind of just folds up, and then you can hang your grocery bags there. There's also grocery bag hooks on the sides as well, I wanted to mention. There's some tie-down anchors, little bit of in-floor storage for the charging hardware, I guess you could say. So, someone also mentioned there is a rear cargo cover that comes standard back there then as well, but then making our way to the rear legroom, that is going to come in at 36.1 inches. So for reference, I mean even six feet tall. This is how much space I had in the back seats there. Rear ventilation does come standard. There is a rear center armrest with cup holders. There's a couple phone charging ports back there, and heated rear seats actually come standard as well, which I absolutely love seeing. Then making our way to the front seats, power adjustable front seats with power lumbar coming standard. Manual cushion extensions for both driver and passenger. I absolutely love that. That definitely made things more comfortable.  And by the way, everything is renewable wool fibers. There's actually no leather inside the C40 whatsoever. Which is kind of cool, and I'll get more into that when we get to interior quality. Also, one of course mentioned in typical Volvo fashion, you got the flag of Sweden found on the passenger side seat there as well. But overall, seating was actually plenty comfortable. The lumbar adjustment worked good, so definitely no issues there. Then take a look at the steering wheel. It is tilt and telescoping. It is non-leather wraps. Some kind of synthetic material. Kind of feels like leather to be honest. It's definitely not a urethane feel. So it feels like leather, but it's not leather. I'll just put it that way. And the 10 and two grips are definitely on the beefier side, which I personally appreciate as well. Then make our way to the startup. Let me start by showing you guys the key here. You do have your Volvo logo on the one side. And then all of your buttons are actually on the side of the key. You got lock, unlock, and the button at the top, the rear tailgate. But it is all keyless entry with a push button start. And there's actually a Volvo cars app for remote start and heating and cooling the vehicle before you actually get inside if you wanted to go that route. But so essentially it is all keyless entry. There's actually no push button start. This is one of those where you simply just sit down with the key in your presence and then it's gonna automatically turn on for you, essentially. Someone also mentioned there is a Volvo cars app for a remote start and heating and cooling before you actually get inside then as well. But once started up, there is a 12 inch digital gauge cluster that comes standard speedometer to your left tachometer is on your right. And it is definitely a very clean look without a doubt. It also has the speed limit indicator, how much charge you have left at any given time. Of course, trip A, trip B, outside temperature. The list goes on. When gauges are digital, you really can customize them however you want. So it's definitely a nice look to it. Then touching on overall interior quality, this is where it really gets good. You do have this tinted panoramic moon roof that goes all the way into the back. And it's one piece. It's not a dual pane panoramic roof or anything like that, which I actually love. It gives it that higher end feel to it. You also have this synthetic material on the headliner. And I love this as well. It's a different feel to it. It doesn't feel like any other headliner that I'm typically used to feeling, but I will say Volvo has done this before I think. And I like it. I personally like it. I like the design just above the passenger side glove box as well. Another texture eyes finished. I'm not sure what the story is behind it, but I do like it. And that continues on to the doors as well. But one of the coolest features about the new C40 is there's actually a folding bag hook that pops out of the glove box. If you were to open up this glove box, there's actually a folding bag hook. You just simply fold it out and then you close the glove box again and then you have this hook there. If you wanted to use that to hang something up there, let's say you're driving and you didn't want something in that bag sliding around on the floor or on the seat, you got that hook there if you needed it. I absolutely love that idea. I've never seen that before in the last 600 plus cars I've checked out. And I think that's brilliant.   So I really liked that. And of course the center arm rest is right behind that.  That's brilliant, especially in SUVs, especially when you got kids in the back. That's an absolutely wonderful idea. Looking down at the door cells, you do have recharge aluminum door cells, which is pretty cool. There's a wireless phone charger just in front of the shifter surrounding that, some rubberized storage. To the right of the shifter, you got dual cup holders, of course. You do also have a frameless rear view mirror with homely control. So up the three different garage doors. But I think my favorite part of the interior, obviously, is not just the little indentation storage by the driver's side right knee here. I didn't even see that. But the blue interior, this is a throwback. This is something Volvo has done for quite a while and something they've done, 80s or 90s or whatever. And I think I actually saw a Volvo on the lot with this. So I'll show it to you guys. I actually have the shot here, but the blue interior is so stinking cool. I absolutely love it. You guys got to agree with me. Let me know in the comments section if you're into it. So I was personally definitely a big fan. But now let's go ahead and make our way to the infotainment screen. Nine inch color touchscreen display does come standard and of course is powered by Google. So you just say, hey Google, and then it does whatever you want it to do basically. See, I'm telling you. Bluetooth and audio streaming does come standard Android Auto Apple CarPlay as well. You can adjust your climate control settings up there. You can adjust your heated seats up there as well. And of course you got your radio information as well. And by the way, when it comes to the sound system, we do have a Harman Kardon sound system that comes standard. So having said that, what do you guys say? Let's go ahead and turn on the radio and see what we got playing today. And let's test out the clarity of this one. It's not bad, plenty of bass, plenty of clarity. That was just a good sound system for the C40 without a doubt. Last thing I want to mention to you guys on the infotainment screen is when you do put the C40 in reverse, you will find an extremely high definition rear view camera letting you know who or what is behind you, which is always is going to lead us into safety. And so I will say to start, the C40 is not yet tested by IHS, but having said that, every single other Volvo and Volvo's lineup right now is an IHS top safety pick plus, which if I were to put money on it, I would definitely say this is going to be the exact same thing for that reason alone. Front side, side carrying airbags do come standard. Drivers need airbag as well. In the back you're going to have latch, AKA lower, increase in tethers to children for the rear car seats. Rear child door locks, top pressure monitoring system, but also coming standard lane keep assist, oncoming lane mitigation, road sign information, park assist, a blind spot monitoring system with rear cross traffic alert, adaptive cruise control, and pilot assist then as well. So overall when it comes to my final thoughts here of the brand new C40, this thing is insanely quick. It has a great design. The digital gauges are absolutely wonderful. I love the blue interior and the overall interior quality really in general. As far as room for improvement goes, obviously the visibility simply due to its shape, you're not going to have the very best visibility out there. If you want a better visibility, go with the XC40 maybe or the XC40 recharge perhaps. Then as far as the lecture cars go, the driver range is just kind of average or par for the course. Multicolor ambient lighting I think would be pretty darn cool in this thing then as well. But overall let me know what you guys think of the new C40 in the comment section below. That is about it for this one you guys. Thank you so much for watching. Feel free to follow me on social media at the bottom of the screen if you wanted to see what's coming next on the channel before it actually gets to YouTube. Be sure to hit the subscribe and the bell notification button if you're into new car reviews. That is what we do here on this channel after all. Do appreciate you guys watching more than you know when I will see you guys all in the next video. Stay gold.


Welcome to Toffy TV, it is the Everton News daily. Everton ladies are no more, but before you start feeling sorry for them, they have changed their name, they will be known just as Everton from now on, or in the circumstances not to be confused with the men's team, Everton women, but they will be called Everton throughout the women's game. Which is an exciting thing for them and for the ladies game which is on a upward trajectory. Everton will be getting a new home as well in October when they get a, they convert a stadium that is at Walton Hall Park into their home stadium, they're still playing the game up at Southport, but they will be known as just Everton from now on, not Everton ladies. Denise Badder-Bachs and the other CEO of Everton has said, Everton has played a significant role in the development of women's game, as well as winning silverware. Everton has produced a number of players that have represented not just the club of distinction, but gone on to represent the country, the identity change is an important and progressive step and part of our desire to bring our men's and women's teams closer in identity and location is a clear symbol of togetherness and unity and part of our one club vision. There you go. So there you go. The CEO, Denise Badder-Bachs and the other professor, Denise Badder-Bachs and the other, giving you the reasons why Everton have made this step. The one club vision, that is what they are looking at as they go forward and hopefully when they move to Walton Hall Park they will hopefully start attracting some bigger crowds as people have a better chance to get to them and maybe don't have to make long journeys, whether it's been to witness or not. Hopefully people will go on down and watch them as the women's game gets bigger and bigger and bigger. In other news, Marcus Roho has explained his situation on Deadline Day. Everton were trying to sign the player on a loan, Manchester United wouldn't let him go or they would only sell to one of their rivals as they see Everton. Marcus Roho, as I just said, said, I talked to Skoloni, he told me that he was happy because in pre-season I played many games, that it looked good and that's why he's called me up to the international team but that I had to play. I'm sure that to play for the national team you have to play for your club, you always be there and when you're here show why. It's difficult to leave when you're such a big club. I had the possibility of Everton but by decisions of the club or the manager it wasn't possible. I have been fine for two years that I did not do the pre-season with the team. I feel very physically, very well physically, the most important thing for me is the coach's decision to play or not. Now I have to fight until December and if it doesn't work out I will try and leave. There you go, Marcus Roho just basically said he needs to play and that would be interesting to see with the last bit he said there whether Everton go back for him in January, whether they think that the squad just needs that little bit of a top-up certainly in the centre back. We've only got a position where we've only got really Jeremy and Michael King. We've got obviously Hallgate there as well who can come in but you'd want one more, you'd want more an international player than obviously Marcus Roho, obviously an international player to play for Manchester United that would be really good back up and push those players. There's been a position where we've got a chance of getting in that top six. Maybe that would stop Manchester United possibly letting them come to Everton but we'll wait and see but it does seem by that that the players surely wanted to come and he was stopped by Manchester United so there you have it. The deal we were linked to very closely on Deadline Day was the Chelsea centre back to Moray. Apparently there was a deal agreed in principle for a loan and because of David Louise going to Arsenal that was scrapped. I mean that's not really anything we didn't know but that's been put out there today so two centre backs that we could have certainly done with on Transfer Deadline Day. Sheamus Coleman played for Ireland last night in their 1-1 draw with Switzerland they scored late on to equalise. They are unbeaten in their group and remain top of their group as well so really good night for Sheamus Coleman and I made Paul who does the Sunday supplement for us over on Irish Football Fan TV. He spoke to him after the game so if you want to see that interview head over to his channel just search Irish Fan Football TV on YouTube or any of the social networks. He's on all of them. Anthony Gordon he also played for England under 19s as they beat Greece 3-1. He was the star man he got an assist. Very unlucky not to score when he hit the post and apparently he had a door round really good game and he started the season brilliantly for the under 23s and for England under 19s as well. I can only see his career going in one direction at the moment so he's looking very very promising and he could be one of those players from the under 23s who breaks through to the first team squad in the next year so hopefully that happens especially as he's a fellow ginger as well. That's it for today. Obviously it's a little bit quiet with it being the international weekend. There are obviously games you can watch now whether you want to or not. A few everton players involved. Alison will be playing for Brazil tomorrow against Columbia's. Columbia with Yeri Mina that is getting played in Miami so I imagine that will probably be like a two o'clock in the morning job if you want to stay up for that. Pickford and Michael Keane for England and Guilfee Sigarton for Iceland, Lucadine for France. We've got all the shits up here just to remind you as well. So there you go if you want to catch those plays make sure you do. Try and find out what time those games are kicking off in there. There you have it. Let me know your thoughts on anything we spoke about in the comments. Give this video a like it really helps the channel. If you haven't subscribed please do it again it really helps. If you want more great videos including live videos during the week get over to Peyton where there's been loads of videos this week including the footy show, the Premier League show, the Tuesday topic. Baz will be on next week with Andy during the stats show and we do live shows basically every day as well except for Friday so head over there if you want that. Thanks for watching toffy TV I'll see you later.


It's just in one ear and out the other to them. It's all they hear is, you think what I like sucks?  You think I have bad taste.   I don't foresee any of these people saying the stuff they say online to my face, like, hey, you suck. This movie was amazing. And then they walk away. There's probably some that do. But for the most part, it's a lot more civil.


Hello everybody. I'd like to welcome to our next session, FineGrain API authorization is in three scale and authorization system. My name is Sergio Canales, and it's my pleasure to introduce our speaker for today's session, and I'll have it solid. Feel logistic before we get started. If you have any questions during the session, please submit it in the chat, and we will try to cover at the end of the session. Or we will make a point to follow up after the event and the presentations. For the recording, all the sessions today will be available in the event hosted on YouTube. So you can have the opportunity to check after. Also, I encourage you to use the live chat during the break in the main stage. You always have the opportunity in the main stage to retake and have some exchange. And with that, let me turn things over to Abdel Hamid. Yeah, so welcome everyone. It's great to be here, and thank you for joining us today in the definition event. So my name is Abdel Hamid Shulaiman. I am a solution architect in Red Hat. I work in a media team as a specialist in ABI management and Red Hat integration. We have an exciting talk for you today on fine-grained ABI authorizations with a series-scale ABI management. So I will talk about the centralized authorization systems. Basically, we have two authorization systems. I will talk about the first one is key clock authorization service. So I will describe how to integrate it with a series-scale ABI management using a custom policy. And the second one is OBA or Open Policy Agents. So I will describe how to integrate OBA with a series-scale ABI gateway using a custom policy. So by the end, we will have a demo and the questions and answer. So by the end of this talk, you will know how to use and configure these policies in a series-scale ABI gateway. So let's begin by looking at O was the top 10 ABI security. So if you are not familiar with what this top 10 is, the Open Web Application Security Project is a non-profit community that produces best practice for web application security. So the whole idea is to improve the security for web applications and the area of ABI's. They do the same. So they have analyzed number of security incidents related to ABI's and they come up with a head of top 10. So starting from number one being the most widely seen vulnerability. As you can see here, four of them are related to authorization which are in getting caught up. So which need to be mitigated by organizations. So I will not go into details of those vulnerabilities, but I will discuss how to solve it in terms of authorization. So to prevent the authorization of vulnerabilities, you of course need to implement authorization logic. But before that, I want to take a little story. So 20 years ago, everyone was building their own authentication system. So I remember that everyone thought it's easy. So we need just a stable user name and password and we will build our authentication system. But what ended up, it requires more sophisticated requirements like email verification, like for example two-factor authentication, like hashing algorithm. So which at the end it lead up to challenges with consistency, a challenge with security and a challenge with scalability. So that's why most of modern applications use centralized authentication component like identity management solution or key clock. So all of these reasons apply also to the authorization and challenge. So in the left side here in the source code, we have a quite simple condition, if it's just if condition, to check the rule-based access control. We have only users granted a manager role can access the protected resource. So what would happen if your requirement changes and you need to access the same resource to a specific user name or even you want to include admin role to access the resource. Or perhaps you want to leverage another access control strategy like AVEC or attribute-based access control. For example, check the time, check the user context to allow access to the resource. So you need to change your code. You need to deploy your code. Because here the code is, the authorization logic is tightly coupled inside your code. So in the right side, we don't have any reference to a specific access control mechanism. So access control is based on the resource you are protecting and your application is only concerned with the donations granted by an external authorization service. So this is a concept of centralized authorization which allows you to externalize the access management and decisions from your application using an external authorization component. Alright, so, but what are the benefits of using centralized authorization component? So in a distributed systems and the micro-surface architecture, we will have many ABI's, many service which become hard to manage and to operate. So using centralized authorization, the administrators can easily define and enforce access rules from a central location which will simplify the access management. With also a centralized component, of course, you will have simplified admin operations where the administrator can efficiently manage the user access and permissions from a web console, like a key clock web console for example. Also from the security team perspective, it becomes easier to do security review for permissions. So they can review access what are their responsibilities for, so they can check for compliance, for example. They can make sure, for example, this organization doesn't give access to credit card data unless the user is secured or has two-factor authentication. So it becomes an easier for also auditing and compliance. And from developer perspective, they can build the application faster as the application code is decoupled from the authorization rules. Which is make the code changes can use, they can push, it changes quickly without even checking security. Alright, so let's hear, have a look about city scale high-level architecture. We, city scale has basically two components. The first one is the ABI manager which is a control billing and configuration management component. So ABI provider can use as admin portal to create an ABI product to configure policies to view analytics, to monetize ABI's and to manage content of the developer portal. And the ABI gateway is a runtime component that is deployed between the consumer application and the ABI backend to act as a reverse proxy so it can protect the ABI's backend. And the goal here for the ABI gateway is to enforce policies. So policies like reclimiting, authentication, authorization, content caching, dynamic routing and the others. Also it can have some sort of cross-cutting concern like logging and auditing. Besides that we have the developer portal which is used to socialize the ABI to ABI consumers and do a self-service like registration, documentation, half of all the ABI's. So they can easily discover the ABI's. All right. So 3D scale ABI gateway which we named ABI test has a policy framework. This policy framework allows the developer to have a custom logic to deploy the custom policy in order to extend the capability of the ABI gateway using custom policies. So policies can be written in Lua and deployed to ABI gateway. Also the ABI gateway has built-in set of more than 40 policies as ready for only configurations without any coding. It's out of the box capability inside the ABI gateway. All right. So but in terms of the authorization capability in the ABI gateway, the ABI gateway itself has a policy to manage the authorization in the OpenID Connect which is GWT, a clinical check policy. And this policy uses the token-based authorization concept which is based on a validating token and using information stored in the token to decide if the access should be allowed or denied on a particular HTTP resource. So in this example, if the user is administrator or has in the token cream has a role called admin, he will allow you to access the resource. But we want our objective here is to decouple policy decisions from the ABI gateway as it strives issues in the micro-service. So as pushing all the authorization decisions to ABI gateway can quickly become harder to manage in complex ecosystems with many roles and with many access control roles. So from design pattern perspective and best practice, the ABI gateway should be a policy enforcement point where the authorization system should be a policy decision point. So that we need to have an integration between the ABI gateway and the authorization system which I will describe in the next section. All right. So in the next section, I will go through the key clock authorization service. So if you are not familiar with key clock, key clock is a popular open source identity and access measurement solution. It's designed for modern applications like single-page applications and for APIs and the micro-service. It's also designed to be nice and easy for developers to use. It has support of many standards, protocol like OpenID Connect and SAML to secure and authenticate micro-service and APIs. It also can read users' data from different sources like database or LEDAM and others. It has also capability to do identity brokering to delegate authentication to external identity providers like logging with a social network like Google and Facebook. And it has also more features. But one interesting feature here is the authorization service. So key clock provides a module or a feature to allow you to define fine-grained authorization routes. All right. So key clock authorization service are built on well-known standards protocol like OSU2 and user-managed access specifications. Key clock provides fine-grained authorization service in order to define access control. So here it consists of different objects. So the first one is the resource. You basically need to create the resources. So the resource here is the object being protected. So in case of risk area, it might be in the point. And after you define the resources, you need also to create a scope. So the scope is what can be done with a resource. So you have, for example, a REST endpoint or a REST resource. So you can, for example, have a scope for view, for HTTP method view or for delete method to delete resource or for update methods in order to edit the resource. After you create the scope, you need to define the policy. So the policy here is a condition that must be satisfied to grant access to a resource. So policy might be based on rabbit or road-based access control or it might be based on a context or it might be based on attribute-based access control. So you can have a condition like the user time or the time allowed to access the resource or also you can have flexibility to create a JavaScript to define a policy based on JavaScript. So after creating a scope and the resource and the policies, you need to correlate those objects together which inside the permission, so you create a permission and you associate the resource with the scope and one or more policies. And the authorization service also provides a REST EBI so you can integrate with it using the REST EBI. So in the REST EBI you identify, for example, the resource and the scope and the token and the particular authorization service will provide you with a decision either to allow or deny the request. So in the course management use case and this use case which we will use through the demo and other slides, we basically have to actor the student and the teacher. So teachers only will be allowed to delete a course and both the student and the teacher will be allowed to view courses. So when designing REST EBI of this use case, you will have a course resource with two HD methods. The first one is the get to actually review the courses and the second one is delete method to delete the course. So as we are talking about series scale and we want to integrate series scale with key block authorization service, so we have a community policy which is existed in this GitHub repo which is written in Lua. So after cloning this label and installing this policy into the EBI gateway, you can have this kind of architecture. So let's begin with the end user. So we have here the teacher, the end user, is trying to use mobile application or web-based application and the application which uses series scale EBI gateway which is configured here EBI product to secure the course surface by end using OpenID Connect. So key block here acts as OpenID Connect provider or also two provider and also it acts as an authorization module. So once the teacher provided his username and password or authenticated through the application and the key block, he will have here a token, GWT token. Then the application will use this token for each request to the EBI gateway. So if the user tried to delete the course, then the token will be attached to this HTTP call to series scale EBI gateway and the series scale EBI gateway will have deployed the policy of key block authorization policy. This policy will check the HTTP resource against the configuration for defining a key block resource and the key block scope in order to send an authentication request to key block authorization service. So it will send a key block authorization request attaching the resource and the scope. Then key block will respond with either true or false. So based on that the EBI gateway will allow or deny the request based on a decision determined from the key block authorization service. So in this architecture, key block acts as a policy decision. On the other hand, EBI gateway acts as a policy enforcement. All right. So as I described before, in order to configure key block authorization service, we can use the admin console of key block in order to create artifacts inside key block authorization service. So in our use case, you need to create the course resource and you need to create two scopes, one for delete, other for get. And you need also to define two policies, one for students and second for teacher based on rule-based access control. And after that you will create a permission. So you will create a delete permission in order to attach each resource and scope and policy. All right. So also you need to configure this policy inside series scale. So you need to correlate your HTTP maybe in rule to key block resource and scope in order to allow the policy to call the rest EBI of key block to check the authorization. So here are the configurations based on the course management use case. All right. So in the next segment, I will describe another authorization component which is an open policy agent. So OPA or open policy agent is an open source general policy engine. It actually has a concept of policy as quote where policies are written in declarative language called repo. So OPA also evaluate the policies against input data to check if this user is allowed or denied. So the decision of the OPA might be based on definition of a policy and also definition of an input data. So in order to integrate series scale EBI v2a with OPA we need a policy. So this policy also existed in this GitHub repo. So here is the flow of OPA. It's similar to key block flow. So we have here the end user. End user wants to authenticate first into the application where the authentication will be through key block. So key block here act as an open ID connect provider. After the authentication the user will have a token into the application then we will attach this token for each EBI request to the EBI gateway. And the EBI gateway will be configured with OPA policy to integrate with OPA through HTTP call. In order to get the decisions from OPA. But this policy need to send some data from the request to OPA to OPA policy. So this input data are based on it sends all the message body and all headers attributes, all query strings and it sends also the pass or URL, URI which is input. And based on the decision it will either allow the request to the policy surface or it will send for Zim3 or unauthorized HTTP response to the client. So again in this architecture OPA engine act as a policy decision. On the other hand the EBI gateway act as a policy enforcement. All right so to configure this policy in series scale it's very easy to configure so you need to provide the URL of the OPA policy EBI and optional you can have an error message to return to the user. All right so here is an example of a RICO policy. So as our use case we want to allow only the teacher to delete a course. So in this policy you need to check if the HTTP message is deleted and if the input resource code is course and then you need to check the GWT claim. GWT claim has a role called a teacher. If that is allowed so the request if that is true the request would be allowed and the OPA would attempt as a decision to do the EBI gateway. All right so now we have two policies in GitHub Reboot so we need to install it to our EBI Cast. So as the Reboot describes the steps but here I am just describing quickly. So of course you need to install an EBI Cast on OpenShift using the operator so you need to install the operator from the operator hub. Then you need to create to connect the gateway to the EBI manager using access token. So you create an access token in the admin console then you create an OpenShift secret in order to allow the EBI gateway to access the EBI manager. Then you create a secret for the policy so in order to store the source code or the loophiles into the EBI Cast. So you create a secret that contains only the loophiles and the policy code. After that you create an EBI Cast CR where you create an example for an EBI Cast and optionally you create a custom policy definition CR in the EBI Manager in order to view the policy in the admin portal. You also order to allow the admin portal to render the policy configurations. Alright so in the last segments I will go through the demo. So the first step I will show here is the key clock. So I will show here the configurations of key clock authorization service. Here I have inside my clients I have inside the client I have the authorization option. Inside the authorization tab I will have all the resources which I described. So I create a resource called course then I create two scopes one for get and other for delete. Then I created policies one for students and second for teacher and both are from type role. Then I attach the policies with the scope and the resource into the permission. So here the permission is just kind of attachment. So here is for example the delete permission where I attach the course resource with the scope delete with the teacher. And also key clock authorization service has a nice feature to evaluate your artifacts and your definition for your authorization rules. So for example I created two users one for students and second for teacher. Let's check here the students. So here is a user called the students and the scope the resource of course is the course and the scope I want to check is a delete and get also. So this evaluation will it's just for testing. So after you develop your rules you can use this evaluation in order to test the decision. So you see here I have here I am allowed to as a student to get the process and I'm not allowed to delete the process. So this concludes key clock configurations. For series scale here is the admin board for series scale. I have here product called course management. Inside this I brought it protects a back end called course management. These ABIs are the URL of the back end which is the ABI between products and the ABI product is configured to authenticate the user using open ID connect protocol with retouching sign on or key clock provider. In terms of policies here I added as a key clock policy with the configurations of the key clock resource name and the key clock scope for each URL mapping. So we need to have a relationship between a resource, HTTP resource or HTTP URL mapping with HTTP verb and with key clock resource and method. So these configurations describe it. And in terms of mapping rule I have here the course you are also with two verbs get and delete. So I can from deploy to my ABI course and test it in software. So let's use a testing tool to order to send a request to a series scale ABI gateway. So I use here a tool called bus demand. Bus demand a very famous tool in the ABI. So in the authorization here I need to have a token to get a token in order to access the ABI. So let's get an access token. So I need to authenticate. Let's try to authenticate with the user of a student. After authentication I will have a token. This token, bus demand will attach it to the header for the request to the ABI gateway. Let's test the get courses. So get courses return successful with just some response as I am allowed to get a course. So let's try delete a course as a student. So here is the delete. As a student I shouldn't be allowed. So here the ABI gateway then falls usually with an error message in support. So here we are able to test the policy using bus demand. So in the last segment I will receive your questions and if you have any questions please let me know. All right, no questions. So at the end we learned the concept of centralized authorization systems and we learned how to integrate key glob authorization servers and OBAO is a city-scale ABI gateway using community policies. And I would like to thank you very much for attending this session and I am happy to receive your feedback about the policies and if people have any questions. Thank you very much Abdel Hamid. We were looking at the chat quite for now. We don't have questions so we are pretty much closing. We are on time for these last moments. Maybe a question from my side that I work on consulting. Any tips or any recommendation by people who is starting with this because this is like a new way to work. A lot of people need to integrate with this. So maybe from your experience like any good things or maybe things to avoid. Yeah, so I totally recommend starting by looking into the authorization code into your microservice and to start using the key glob authorization service with assemble rules like rule-based access control or any simplified approach. So you start defining your roles across applications. You start also with designing your authorization solo application. Then you can apply this idea of centralized authorization. So you can apply it if you are using Quarkus or if you are using Spring Boot. So Quarkus provides plugins and libraries to integrate it with the authorization service. Also I talked about integration with the API gateway like CDScan. So others also the API gateway can be also integrated with the Quarkus authorization service. Good. Wonderful. Thank you very much Abdel Hamid. So we're pretty much done here. I want to thank you. It was a wonderful presentation. Thank you everyone for joining us today. We hope that you enjoyed the session. You can reach us anytime for further questions. You will have the recordings on YouTube. So anything new you can always reach out by email or maybe any social contact. That is Abdel. A reminder that the other session will be available soon. Be sure to stay for the next presentation. And hope over in the many stages to see all the session that is starting right now at the same time. So thank you very much for your time and see you next time. Bye-bye.


Ghosting includes a sense of feeling rejected, definitely. I don't think all rejection is ghosting. I think rejection is a different subject. I think rejection with reason and explanation is cool. I don't mind being rejected if you tell me why you rejected me. And I think if I explain to you why I rejected you, it's all we can do. But I don't think that's the same as ghosting because people can reject you in one area and still have you in their lives in other areas. But I think ghosting is this blanket removal of you from their lives like you never existed that also is a rejection of you. Yeah. But I think rejection is a component part, I suppose, of relationships. What I feel ghosting is this blanket way of getting rid of someone that you don't want in your life anymore.


The attributes of what we understand as God is fitting reality. No, it doesn't. You asserted that in there. You asserted during your opening a number of things which are simply false and not true to reality. You said that reality has the attributes of God, that reality is infinite. You don't know that, that reality knows your thoughts. You haven't justified that. How can you show that reality knows my thoughts? Are you part of reality? Yeah, but part of reality is not reality. Just like my fingernail doesn't know my thoughts. A part of something isn't the whole. That's a logical fallacy. It is the fallacy of composition.


It's my last day in Tunisia. Today I want to take you with me around the old Medina of Tunis and I want to show you some of my favorite spots because though I've been here for a while and I spend a good amount of time just strolling around the old Medina, this is the first time where I really grab my camera and film inside the Medina so I'm going to show you some of my favorite spots whether it's coffee shops, terraces or really just places of interest that I think you'll enjoy when you are in Tunis. Let's go. This right here is one of my favorite streets in the Medina. It's right around the corner from the hostel where I'm staying. This is I think the only youth hostel in the Medina. It's called Hostel La Medina and right around the corner is actually this street with two of my favorite cafes in the Medina. There's Cafe Hamouda Basha and Cafe Driba and what I really like about these two cafes is that one of them it's full of young people. It's always the case which I find very interesting about the old Medina. I'm used to old Medina as being like more conservative like older people but it's not the case here in the old Medina of Tunis so one of them there are always young people just gathering towards the end of the night playing music together which is always fun to see and then the other cafe next to it used to be actually a printing house here in the old Medina so every business in the Medina if they need anything printed like business cards or posters they would go right there. All of the business is really cool because you can still see all of the tools that were used for printing right there and one of my favorite things to get there when I go and sit down is some mint tea with the nuts because here in Tunisia when they serve their mint tea they add either pine nuts or almonds and it really adds to the flavor so this is the main street here. On this next street this is one of the beautiful mosques here in the Medina. This one is called the Hamouda Basha is the name of this mosque and then all the way behind it is Mesjid Zaituna which is much more popular here. Also this indoor walkway where there are a bunch of cafes or places to grab breakfast in the morning it's pretty neat but I actually just met a gentleman who offered to show me another neat spot this is the place I actually have been here but I forgot the location so I'm so glad that the gentleman helped me to to get here Sultan Palace okay so this place called Sultan Palace they do sell a lot of things but what's interesting about this part is that you can make your way all the way up to the top okay okay so they have some photos all the way up there with some of the presidents who visited the area and he just pointed to Muhammad said he's the king of Morocco and what's interesting about this place is that they have a really nice terrace with a wonderful view and it's actually the case in many stores here in Tunija and actually all around the country you just don't know you walk into a store maybe they sell carpets just like they do here but when you are in the terrace it's just an impeccable view so let's check it out oh nice nice very nice okay you have seven most yeah yeah the view from up here is impeccable especially if you make your way up here during sunset or for the summer it's just beautiful and this place it's there isn't really a cafe for you to sit down and enjoy the view but right next to it there are a few cafes actually i've been to that one all the way there and it's really awesome yeah oh wow it's beautiful and the carpets wow all of them nice well in Tunis They put them together and then they turn them into oil and oil. Then they are put in the safe. Then Tunis is 70% of the price. This product is from Europe, in France. In the south of France, they have a place called Grasse. Grasse is the place for Europe. It is the city with the pure foam in Europe. Then they mix it with alcohol, and they make it with the oil. This is why in Tunis, there is a lot of pure foam. This is the essential oil made with alcohol. Yes, with dates. Look, without alcohol, without chemical product. Pure natural essential oil. This one right here is Jasmine. It's the national flower in Tunisia, right? Oh my gosh, this is so good. This is the green lemon. The green lemon is made with pure foam. So strong. Very lovely. I got myself a roll of Jasmine essential oil, because I actually needed some perfume. I've been thinking about it for a while. But also because the guy was super helpful and kind. So I was like, why not? Anyway, so I walked to make my way back to Mesjid Zeytuna. This is the mosque of Zeytuna. It's the most popular mosque here, one of the oldest. It's got a lot of history. And it's actually open for visitors. It's open for Muslims and non-Muslims. If you're not Muslim, you are allowed into the courtyard, headscarf for women, and appropriate wear for men, usually not shorts. There's a street further out that I want to go check out to show you guys. I made my way back to one of my favorite streets. I usually would walk this way, facing Mesjid Zeytuna. And then here they do sell a lot of Shashi'a. This is Tunisian Shashi'a. More Shashi'as are right there. And then they do have this place right here called the Jawajim. It's actually a Tunisian dessert. It's always very busy. I haven't tried it before, but it looks more like, I don't know how to explain it. Like maybe a milkshake or yogurt with a lot of nuts and dates. And it looks pretty interesting, but it's just so thick. Beautiful handmade carpets. So this is a super common dessert. It's a very popular dessert. So this is a super common thing here in the Old Medina of Tunis. All of these are baskets or gifts for bridal gifts.  And you see like it's nice bridal colors. And then they would have trays like this with some sweets, maybe dates, nuts. And it's so beautiful. This is one of many shops around here specifically for that. So these are the baskets. They would have baskets like this and you would fill them with sweets, candies, nuts. These are usually the options. Some of them are fancier than others. Common in the culture in the Middle East, North Africa even for proposals if you want to propose to the person you love or to the bride, you have to go to their home and bring something with you. They would usually be in the form of a basket like this. I actually just read on the sign that it's not just bridal. Some of them are even gifts for kids.  There's usually some celebration going on so you can take a basket as a gift. And back to the mosque of Zaituna. I'm going to skip. I'm not going to go in right now. It's just not well equipped for that. I really like these t-shirts with the sheshia glasses and moustache. Very, very Tunisian. There's a sign right there for a place called the Dar Belhej if you make a left.  And it used to be a house of the bays, I think, or the governors and they do have a nice teaching area. It's a really nice place if you want to go and have some dinner. And they also have this lunch special for three course meals 35 Tunisian dinars, which is really nice. This street is so busy. It also doesn't help that it's a Saturday today. But there's this corner right here in the Medina where they sell a lot of sweets. You can see some of them right here behind me. And the one that I like the most is the Makrut. I apologize for the light on the camera. It's not so good. But usually if you want to buy some, they're really nice so they hand you a piece or two just to try, if you really like it. Just handing pieces of sweets to everyone to sample is really cute. Just got myself a piece. So good. When it's warm, it's 100% better. It's so good because I've tried it cold. I've tried it warm. And oh my gosh. The flavor when it's warm, it's just so good. Tunisia and Algeria. Algeria, Tunisia and France. Tunisia and Morocco. This is a restaurant El Ali. This is a restaurant that I was recommended by somebody actually from Instagram who's Tunisian. And I went there for lunch one day. Service was good. It was nice and quiet. I also like the street with old umbrellas. This is the exit. This is the main square as you leave the Medina. Let me just scooch a little bit further. There's a hotel right there. The fountain.  There's so much going on, it's pretty busy. Like I said, this is Saturday and they're selling bread. This is the famous fennel snack where they just clean up some fennel, adding some salt. It's actually really good and healthy. And out here they're selling pineapple, coconut. And then, I want to show you this spot that I really liked for some bambalouni. Bambalouni is a Tunisian donut. It's very soft, especially when you eat it warm. And then they just add sugar on top of it. Sometimes nutella. But the original one is just sugar. And this is my favorite place. Right there. Bambalouni. And you can see that it's so busy. The trick when I'm traveling is if I see a lot of locals that's a good sign. And it's always busy. It's probably one dinar for just the original one. Flowerman. There it is. When you leave the Medina, this is called this arch right here. It's called the Bab Le Bahar. The gate of the ocean. This big arch right here. There's always a... Oh, actually, no. I shouldn't go this far because there are usually some police forces right in front of it. So it's pretty safe out here. The police is really doing their job. But I was going to say this is the start of the main street Shari Al Habib Bur Giba. So if you want to make your way, let's say for example like to Khartaj or Sidi Buseid, you will want to walk all the way down on the main street to make your way to the train station. But yeah this is the old Medina of Tunisia. I'm just going to make my way back to the hostel to pack up and get ready to leave and if I see anything interesting on the way I will be sure to share that with you as well. And I'm trying to make my way to find a very special house that I've been to. I'm trying to show that to you guys. And it will be pretty interesting especially for those of you who learned or speak Arabic and are quite familiar with the Arabic culture and literature. I'm very excited for this one. And we are right here. Okay this looks like a simple normal house but this is actually the house where Ibn Khaldun grew up. He's one of the greatest social scientists in the Middle Ages. He was a philosopher, an Arab philosopher, writer, sociologist and he was very well respected and known in the Arab world and actually all around the world some of these principles were used widely and globally. This is the house where he grew up here in Tunija and he went to school because that was in the Middle Ages. So he went to school and he started school at the Masjid Zaytuna, the mosque of Zaytuna, the one that I showed you earlier. But yeah it is right here. There's actually a library or librarian with a small library, tiny little library right next to the house of Ibn Khaldun. I actually came last time and I wanted to grab a book but I didn't have time. So I'm glad I did it right now. I bought this book from him and it's not written by Ibn Khaldun but it's got a collection of memoirs from his life and also his experience traveling to Morocco, living in Tunija and also traveling to Andalusia and also right here just to explain this to you. This is also a Masjid in this Masjid, the teacher of the teacher, Abdulrahman Khaldun he didn't go straight to Masjid Zaytuna to go to school. So usually he would start in Kutab, smaller community mosque per se, which was right next to his house and then he thought there he was a teacher in the Kutab and then after that he graduated then went to Masjid Zaytuna, which is not too far from here but I'm really excited to read this on my way today because I have a flight later in the day but I think I will end up my adventure right here at the house of Ibn Khaldun, one of my favorites Arab sociologist and I will see you guys in the next one. Bye!