Right excellent. So ready to start. We're going to be doing things a little differently today We're going to toggle back and forth between the slides and the handbook What we're trying to do is to have all the meaningful content and Information that we need to be successful at our roles here at GitLab Available in the handbook and have the handbook be that single source of truth So before we decided to try that for when we put these slides together I will love your feedback. This won't be the ideal situation because there will be toggling back and forth But ideally you'll find that as we're walking through the handbook It is helpful because you'll know exactly where you can go to reference this information After this training, so thank you very much for being here today because of that I won't be in presentation mode due to the toggling back and forth So here today we are to talk about peer feedback. It is going to be me doing a lot of talking right now I love your feedback. I'll open an issue. I should have done that in advance To get feedback on whether or not you want to do a follow-up to really ask more questions and even role-play But there's a lot of content here. So we're going to focus on the content in the next 50 minutes So I do believe that feedback is the foundation for a growth culture GitLab is growing very quickly And we're going to be hiring a lot of new teammates And they won't have the same history or the background or the experiences at GitLab that we have had and In order for them to successfully Integrate with GitLab to get to know the culture to become successful us giving them feedback is super important In addition, they might give us feedback and where we can continue to grow and become stronger That's just one example of why feedback is important in a growth culture But in the end we're all more successful if we know what we need to do to be successful and knowing how people are Proceeding what we're doing can be very helpful in that so first of all This isn't about process today. So stay calm. This really is just about us giving you some skills and Trying to motivate you to give each other feedback But we're not out. We're not laying out a complete process around this There will be six three sixty feedback, which will be a process But this is more about our everyday feedback that we do with our teammates here at GitLab and it can translate outside of GitLab to to be honest with you So how do stunning teammates make each other better? We make each other better by being Amazing examples of being a stunning colleague and also giving each other feedback about how we can also be a stunning colleague for you Right back and we do what our teammates to be amazing and we can help them be amazing And it actually really is a wonderful gift to give to the people that you work with I Also do fundamentally believe that a rising tide does lift all boats and That's true with who we hire into GitLab and that's true in helping us as teammates all be stronger and better together But feedback can be hard and we recognize it can be hard You don't always feel like someone wants to be told information. They don't want to hear It's a little easier when it's positive And so we're gonna we are going to focus more on the feedback That's hard to give today and I don't want it seem to be biased that I I think Constructive feedback is more valuable than reinforcing feedback. That's not the point here But it is more difficult. So we want to focus on making that easier for you I would also though encourage you to make sure if someone's doing something great You tell them that too and don't just tell them. It's great. Tell them why it was great So as we're going through this the detail the specificity it and it applies to positive feedback just as much Fear is a natural reaction to moving closer to the truth I don't know if any of you have ever had that experience where you're thinking to yourself. Oh, I just don't want to know But that doesn't help us grow and that doesn't help us know the things that we need to know So we're gonna talk a little bit more about that piece as we talk about the fear of holding back So you'll see that that's here in the handbook and it can be a scary process you can think that People are misconstruing the feedback you're giving them that they're being cruel to you Sometimes you want to avoid accountability sometimes there's a lack of commitment a fear of conflict an absence of trust All of these things can be feelings you have when you're giving and receiving feedback And so I think that it's good to acknowledge that that fear exists But it's also good not to let that fear hold us back And there's things that we can do and ways that we can think about feedback that can really help with that and we'll go into this the The absence of trust a little later on and There are reasons why we hold back there are there are questions around Will they believe that I have a good intent will they be angry at me for giving in this this this feedback Will they appreciate it? Will they become defensive? Will they lash out at me? Will they retaliate against me? All of these are our fears that you could have when you're giving feedback. It will damage the relationship We're great friends now, but if I tell them this maybe they'll get mad at me Those are fears that I want to impress upon everybody that I don't want us to have here at GitLab And that is just as much in the hands of the giver of the feedback as it is the receiver And we'll get later in the presentation about how to receive feedback well But for the person giving feedback, you really do have to give it with good intent If your intent going into a conversation with someone is to hurt their feelings, then you're doing it wrong Your intent should be to be helping them be more successful and to Giving them a leg up by giving them that the information they need to be be successful an example that I use in this is is when you have Salon show in your teeth and you've been hanging out with all your best friends and you get home from the restaurant Look in the mirror and you're beside yourself because you notice you have this big green mass in the middle of your middle teeth and you're a little bit annoyed that no one told you that Your friends sat across you and that entire meal and let you smile and let you laugh and never said hey Barbie you have something in your teeth I think most of us would appreciate someone telling us that and and Feedback really is a gift that way So I would encourage all of us when someone gives us feedback to Take it in the manner of they're trying to help and when you give the feedback give it in a manner of you're trying to help You don't know someone's intentions when they do something you don't know if if if the feedback that you're giving That someone intended to do the behavior that you observed So it's best not to assume bad intentions It's equally best not to assume bad intentions when the person giving you the feedback So if we can all go into it with this though the lack of assumption of bad intentions on both sides It's wonderful and you can give feedback in a better way don't assign feelings to someone just let someone know how you perceive the event or the action and Let them tell you the reason for doing it or not doing it So the consequences of withholding feedback There are consequences to withholding feedback and We follow that here. It's the same consequences quite often in your fear of giving feedback So the the consequences of withholding feedback is going to be potentially a weaker team potentially not achieving the results you need to achieve Potentially having a perception of you that you don't want to have exist there might be little things that we're doing in our jobs that We have the best of intent for and we don't realize that People are perceiving it in a much different way And so having someone be able to speak up and tell us that Before it becomes a reputation that we've formed is super helpful.  I'm sure she'll never do it again Don't assume that don't assume I will but maybe give me that piece of feedback to avoid the chances that I will again in the future Hopefully that makes some sense I'm really going quickly through this some questions to Prepare a way of thinking about this as you're going into the feedback conversation is what is the most powerful Feedback that I have for you, right? We don't want to get nitpicky We all have ways that we can be better, but we don't want someone, you know, necessarily Comments on every aspect of ourselves our work So really do think about through what is the powerful feedback? I have what is the feedback that I will make a difference What is the feedback that will make a difference for this person if they can receive it and actually do something actionable from it And then it's completely fine to say the reason I might be afraid to give you this feedback is That can sometimes disarm the conversation that can often help people to understand that this is hard for you, too So remember when you're getting feedback from someone it's hard feedback It's hard for them too often. They're putting themselves out to invest in you So don't assume it's easy and they just like to spew criticism around Hopefully the feedback is given in a way that doesn't feel like it's just criticism But understand that they're putting themselves out there for you as well And please be selfless enough to put yourself out there for others to give them that feedback So what comes first honesty or trust this is a hard one It is easier to give feedback to people that we trust. It's easier to be honest and vulnerable with people that we trust however Sometimes you do need to give feedback that requires trust before you've earned that trust and it's a little bit of a Absolutely what comes first the chicken or the egg for me if I was in a meeting with all of you and I was sitting here on this call with a you know, strawberry seed in my teeth and One person pinged me on the side and said hey Barbie I'm gonna inherently kind of trust that person more and know that in the next meeting I can rely on them to Give me the feedback that I needed to not bear it continue to embarrass myself and that does build trust but that's what we go into about Relationship trust versus task-based trust So it tends to be easier to give that feedback on task-based trust Then behavior-based feedback. Sorry task-based feedback So if someone has a typo in their presentation, it's not as scary to say hey Barbie you spelt trust wrong Then it is to say You know Barbie your speaking style in this presentation is very ineffective and it doesn't engage And if you did a little more of a we might want to listen more to what you have to say That can be a harder piece of feedback to give because it addresses me personally It may feel more personal for me then yes, there's a typo. It's pretty objective it's not subjective and We can easily go in there and fix that typo However, you will find that sometimes engaging in that task-based trust builds Task-based feedback builds the trust for more honesty in the more challenging pieces of feedback that will come But I encourage you to take the risk. I Think that the fear that people will be angry at you for providing feedback actually could quite often be the opposite If you are going into that piece of feedback with very good intent I find that most people appreciate it and we do have a link here at the bottom To an article is written about people actually want the negative feedback you hate to give this article is based more on managers But it applies to individuals and teammates and peers as well not just managers so So that is kind of a piece of advice of where you might start with if you're you haven't yet build that trust yet But you still want to start building on the honesty and being perceived as being honest and candid And then sometimes it's easier to start with that task-based feedback However, I would encourage you not to hold back on the behavior-based feedback the behavior-based Things that we do are often the most difficult things for us to change so Pretty obvious one of my issues is how fast I talk. It's really hard for me to change that It's something I have to focus on every day and try to get better at so that type of feedback is something that Having someone tell me when I'm doing better at it that they noticed is huge for me But also having someone kind of give me that peeing of hey Barbie, you're doing it again We can't understand you is also super useful and helpful to me And I would hope that nobody would feel they have to hold back on that but I understand that they do and So I think that as much as we can be strong and courageous here at GitLab and not hold out on each other I think it can help us all be a stronger and better team So how to give and receive feedback well, I'm really struggling with this toggling So I'm really sorry everybody and when I when I end up going to the Panbook I have lost where I'm at compared to the slides so Preparing to give feedback figure out what the root causes that's making you feel like there's a problem here that Needs to be addressed. So what are the behaviors you've experienced? What are the core issues? What would improve your relationship with you and that other person if there's something that's getting in the way But now are they are they not reliable when they said they'll work on a project it You know time and time goes by where they say yeah, it's gonna be done tomorrow. It doesn't get done And that makes you frustrated with them and that makes you not want to depend on them Is is that is that what's happening in the root cause of that? What is the root cause that? but again Talk about the behavior you experienced don't assume the intent So if you're experiencing me not getting back on something I said I would don't assume that means is not important to me Often if someone doesn't do something that they said they do you assume you're not prioritizing them and that you're not there Whatever they are asked for isn't important to you So don't assume it's not important to them when you get that feedback But ask the clarifying questions explain the impact to them explain the effect to explain what you're observing offer suggestions and hear back about what the problem might be if there's someone on my team who's Underdelivering or I had that perception. I want to seek to understand. What are they dealing with what are their conflicting priorities? Might they have how can I help them work through those fire? They're those those conflicting priorities, but if I just get angry don't give the feedback and walk away I never actually learn what could be the root cause and help them through that It's not different with peers. So I think that that identification of being able to explain What you're experiencing what the impact is Offering suggestions is a great way to be helpful I have a rule in my house with the children that if they don't like what we're doing what activity we're going to participate in They don't just get to complain. They have to suggest a different one. I don't want to hear no I don't want to go bowling. I want to hear I don't I would prefer going ice skating, right? I want to hear a suggestion not just a complaint and It's it's just a lot more helpful to the person that you're talking to Communication style is very important to and this one is harder Because we don't all communicate the same and we don't all respond the same to a particular communication style Some of us much prefer very very direct. Don't waste time. Just tell me how it is. Don't try to soften the blow other of us maybe are a type of culture that it's a little bit more high context and Super super super direct would make us to stop listening Because we it's just rude In the environment and the culture we come from so try to understand that because it's easy to say it's not my fault That's their problem. They should be able to take it But that doesn't mean you're being effective with communicating with them So understanding where they come from and understanding what's effective to them goes a long way to it being received and actionable and something that may actually help them be more successful because they heard the message So how we transmit affects reception as well So it's not to say that that's an excuse if someone says don't ever give me feedback and hurts my feelings I can never hear it that that's okay. That's not okay We all we only feedback we only need to hear feedback But just try your best to understand each other so you can do in a way that's effective And that goes both ways too if you're getting feedback from someone from a culture that is much more low context and much more direct then understand that too and try not to take it personal and So I've you some of you have heard me mention those who've been here before but it's mentioned again here because again new employees every day The culture map is a really good book tree That will help you understand other cultures better and help you understand how What how your styles affect other cultures and it's fun because you can take a quiz afterwards to figure out What culture you're most like and and it helps you understand yourself a little bit better too so again Consider how direct you need to be Consider how hierarchy affects direct feedback hierarchy should not affect direct feedback here at GitLab This is not a company that wants to be hierarchical and you would never give feedback to me if you work for Scott No, absolutely Anyone on Scott's team should absolutely feel free to provide feedback to me Not all cultures are as comfortable with that so we do need to help them. We need to help people Understand that that's not the way we do things at GitLab But we need to also be aware that it's a natural tendency for some regions of the world and some just You know the culture map is about the country you came from but the reality is we come from families, too They might start with the country, but it might then go down to family unit and Friend group that affects how we react, but just just be thoughtful about that Responding to feedback Say thank you and mean it and I'm serious about that really mean it really try to get yourself No matter how much you disagree with the feedback no matter How it's not what you wanted to hear You still need to be thankful that someone gave it to you. It doesn't mean you need to act on it It doesn't mean you need to agree on it, but someone invests a time in you say. Thank you Then ask clarifying questions Try not to do it in a defensive way Try to do it in a way of really seeking to understand really put yourself in a mindset of I am not being judged here I am being helped What questions should I ask in order to get the most Value out of this conversation Not to deflect it onto you not to say it's not it's not me It's you and but to really understand where that feedback is coming from and then take a moment to reflect on the feedback It doesn't need to be with the person sometimes. It's okay to say. Thank you for the feedback ask a few clarifying questions Go back turn off zoom and lick your wounds and then really try to reflect on that feedback and try to know what it means And then really think through what are the most impactful actions you can take and then prioritize those But don't over engineer or overdo it I have done that so many times in my career where I get a piece of feedback from one person I assume that everybody thinks that way I try to change my style with everybody else. I'm working with and then I come to realize oh wow I really over rotated on that one and then make I become much less effective in the other direction, so Don't over engineer it and then follow up Check in am I doing better? And As a giver also follow up. Wow, you're doing a lot better or you're not and here's some more things you can do I see the effort or I don't see the effort Did you not agree with my feedback and you don't think that you should do anything? Which is okay if you don't agree with the feedback and you reflected on it and you thought it through and you decided actually I think this is still most the effective way for me to do it. That's okay But explain that to the person so from Nadia. What if you feel flustered and it is visible? Say it I Think it's completely fine in these feedback discussions to make yourself honorable as the giver to So the person who is feeling flustered isn't always the person receiving so just be super super honest that this is hard for me to hear or this is hard for me to say and Wow, I really wasn't expecting that. I Need a moment to process and I'll come back to you. It's okay not to have the discussion happen in one city So if you are getting super flustered break away If you're the giver of the feedback and the person that you're giving feedback to get super angry and combative Also, okay to say I want to give you time to think about this. I didn't mean to offend you I was really trying to help but we can't continue the conversation into our better into our in a better mind frame It's okay to walk away from the conversation and then come back to it so a lot of the content that we're covering here Also applies to hard conversations in general. So here at the bottom. We've covered that a little bit and It is not unnatural to get angry and defensive. It's not unnatural to do silent fuming So just try to be open and honest and real it's it's the most Efficient and effective way of us interacting with each other if anybody on this training today thinks they're perfect surprise you're not and And and it's okay for us to know that we want to get better And it's a wonderful thing when you feel you can and it's a wonderful thing when you feel like people are able to help You do that. So let me actually in there in terms of the presentation piece I did go through very fast because I think it is better to get people sharing stories or asking questions So hopefully I can get some people on the call to either ask questions or To share an experience they had in which getting feedback was super super helpful to them Or in which they saw that someone that they gave feedback to actually became a lot more effective And they thought that they felt a little bit good about having a part to play in that And I kind of like to I guess ask a question or just share something with everybody about Sort of the how we receive feedback I think sometimes when because we communicate a lot with slack and lots of our communication is written And I think sometimes it's easy for people to misunderstand or get the wrong Idea and when things are written down, it's very off It's so common to get things from the wrong end of the stick as we say in the UK that can easily happen with with written communication and I'd like to think we all kind of take a step back before we reply to messages sometimes But I know it's very easy if you're sort of busy or whatever you may say the wrong thing and sometimes It's good to just follow up afterwards and just say hey That might have come across wrong what I've actually meant was this I didn't mean it like that and you know if we need to get on a call very happy to do so I just wanted to kind of share that anyone else has gone through a similar experience Yeah, I think I think you're right. I mean, I think we often Assign our own tone to written communication that may or may not be the tone that the person wrote it in And I think that whatever that happens in written communication. I'll be honest with you I know we're all in different countries and I know that time zones are an issue But I would do my best to take time to actually have an Actual call or zoom with that person to say hey I do want to clarify what you meant here because I took it like this and if that's how you meant it Please let me know if not, please correct it for me But I think that sometimes when it comes to feedback or difficult conversations. They should be conversations. I think that Again the written feedback I would hope would be more task-based of we need to get this thing done and this is my recommendation for how to do it but The the hard conversations are hard to have in writing and I think that there's a reason that and We use our voices as well had a quick question What do you do when? Or or how do you handle it when someone doesn't? Accept feedback Or doesn't you know or accepts it, you know, sometimes you can tell when people are this is not like specifically here related This is everywhere like you can see when someone is there. They're present. They're hearing it, but you know That you've got a brick wall. Yeah. Yeah, that's really hard and that's part of what I want to plead people with here is to Please hear the feedback you get and please Accept it even if you don't agree with it Yes, I agree with you Some people you give you back to and they they nod and they smile and you think okay They're not upset they get it and they walk away. They throw it out the door and they don't do a thing with it Other people will simply say to you you're wrong. I don't want to hear it and I think at some point and You have to give that feedback to like hey, I'm trying to invest time with you and I'm trying to help you out here feel like you're not appreciating it Can you tell me how I might be more effective with giving you feedback and In kind of sometimes just opening it up to the other person and saying I'm trying to help you here But clearly I'm not so help me help you if I'm if I'm trying to help you be more effective How can I do that? Eventually certain issues you will have to escalate if you if feedback doesn't work I always feel like the first thing you should ever do is to give feedback to the person you have it for So if I have feedback for Jacob, I should tell Jacob first and then it it still doesn't work Then maybe I might have to go to Jacob's manager at some point But when I do I will go to that manager with a lot more information. I've worked on it I've given him the feedback. This was the reaction. I now need your help Can we look in this together? It may need to happen eventually, but I think that the I mean we talked about honesty We talked about trust I think the easiest way to lose trust and not establish honesty is talking about someone instead of talking to them and While we don't like to hear feedback sometimes because it's hard I think we even dislike it more when we find out what's being said about us and not to us and So I think at some point that's an okay conversation to have as well with the person. He's not receiving the feedback Okay, I want to take this directly to you. I want this to be effective If you do think I'm wrong and this feedback is incorrect, let's talk about that, but don't just be a brick wall Let's make some progress here. Um, yes, very very true Dana they're really really one of the really great effects of going directly to people with feedback is they get that If they if it is systemic, they'll they'll get that feedback from multiple sources if we're all doing it Then they'll get that feedback multiple sources and they will no longer be able to to spend belief for as long that it's not them It's not it's not me. It's you when it's not me It's you and you and you and you and you and you I might need to actually start to figure out, okay It's me and that can really help a lot of times when it just comes from a one person Which is most often your manager you start to think it's more about you and your manager And when it comes to other sources, you realize it's it's bigger than that and and more important than that Passive aggressive feedback. How should we deal with avoid them? and Marsha, do you have an example of that you can feel free to speak up I can I can talk to it, but I Think this is another way that is You want to avoid assuming intent So if someone were to give you feedback and you was and you're assuming that they're being passive-aggressive examine why you think that Try to ask some probing questions to get at whether or not that's what's actually happening and And and don't just pretend you don't notice it, right? If you feel like someone's doing that call them on it But before you call on them ask some clarifying questions, so you're not just assuming something from them They go ahead and share an example. You might have Russia. Oh Yeah, cool. Thank you. Yeah, I mean sometimes instead of Trying to be direct to someone we we sometimes tend to speak as As if we're speaking in bulk. So hey guys, please don't do this do that So how should we kind of avoid doing that like being very alert with ourselves to not do that? and What should we do when we see this kind of feedback that it's quite not helpful because we're saying like hey guys This is wrong. So no one takes accountability for that So no one's tried to to to improve that thing on them And at the same time the one that is giving the feedback is trying to avoid conflict So, you know, how should we handle all this? I mean, that's hard and a lot of that goes back to different cultures. So Is anyone here on the call probably not with the time of day it is from Japan or a Country that has a little bit more of a communication style that you read between the lines No, okay, and so I would say Marsha Again, call it out. So if someone you know I have I I have this problem where I do this So I try to be nice and by being nice. I'm just not helpful And so I might say hey, it'd be great if we did a and Then you take that as optional and really I meant you must do a Then I think it is good to give me that feedback Barbie when You say to me it'd be nice if I did something I think it's my choice If it's not my choice, you need to be very clear on that with me because I'm not clear on this So I think it's I think it's the kind of just real direct feedback I need to give people and then ideally we can all try to do our best at being really direct with each other again It is most efficient Chin Ray said I'm here. So Chin Ray, would you like to? Talk a little bit about the Style of directness in your region Yeah, I just I just wanted to point out that culturally it's It's very difficult to either especially giving feedback like Marsha said where you're trying to avoid conflict and You you know, this is important that you have to say it but it's difficult and in most cases You know, you're thinking you're trying to think further ahead and you know one You're wondering what's what's giving this feedback going to what what result is it going to have? Is it's person going to be is a guy are they going to receive it? Are they not going to receive it and if they receive it then you're worried about what could happen to the relationship? So I think it's it's it's important that we were having this and It's all written down and people can always refer to it and if we have a It's sort of a system like you're saying Do this first do that first give this feedback in some cases Culturally you have to create a relationship then it makes it easier to give that feedback but a lot of times you'll find people from From Africa in general, I think in the Asia as well. We'll hold back on that feedback Just basically coming from from a cultural perspective for those reasons Yeah, so I think we can't expect everybody to be as comfortable with the same things that we personally are with But I'm hoping that some of the recommendations on this page Help in having those conversations and helping knowing what to think about when you are having those conversations And again being patient with each other. So sometimes People will try the Style of it. They're most comfortable with first until they see it's not effective and then they will escalate to a different style, but Sometimes it's a lot just to say to someone Who it does tend to try to soften everything look you can be completely direct with me. I can take it It's easier for me if you just tell me exactly what you're thinking But don't expect that they can change everything about themselves in terms of how they feel comfortable giving it But that's all just keep helping each other be more comfortable with it That will happen by demonstrating it what I've learned very easily is it became easier for me to give feedback After I had gotten some hard feedback and then I realized I became better for it Then I started believing more that feedback is important because feedback had helped me and now I should pay that forward and help others So sometimes modeling it is a great way to help us be stronger at it obviously Abby and I creating this this This page on the site is meant to help you at it It can be a conversation server if there's someone that you need to write feedback to Please look at this page change it add to it make it better So that if you're gonna have a hard conversation with something and I'm gonna sit down with Abby and have a conversation with her Maybe I first say hey, let's read through this together and let's try to let's try to practice some of these things because this Could be a hard conversation But it's out there for us both to use and us for us both to look at so I'm hoping that that can help too But please This is the start. This is GitLab. We iterate. We can make this better and we can do better with giving feedback as well The difficult conversations is another good, but we can add that to the well Abby. I think already says she's having it. Okay Yes, I do think consistently asking for feedback can make it easier to give that's true What I would recommend that you do if you're having a meeting with someone and you've never asked them to give you Feedback before maybe let them know before the meeting that you're gonna ask for that So I will tell you that when I go into a one-on-one with someone and I just ran I just surprised and was hey, what feedback do you have for me? I don't necessarily get as good a feedback because they haven't had a chance to think it through So if you have a regular one-on-one with someone you can make it very clear That's gonna be a regular topic for you Eric and Eric Johnson and I do this our One-on-one document starts at the top all the time with feedback for Eric feedback for Barbie We know going into our one-on-ones that we're gonna get you back to each other and we're prepared to do it So that's super super helpful with any more thoughtful feedback the spontaneous question can be good But sometimes doesn't get you as much information as you would if they had time to think about it So any other questions? Or tips I Just had a comment about Just in my experience with sort of high-context cultures sort of as a manager encouraging peer-to-peer feedback can sometimes help sort of Not alleviate the need for a direct feedback But it can help like sort of overcome that cultural barrier because the feedback that your peers their peers are giving is Often the same feedback that you would also be giving So it's it's sort of third-party, but also helps encourage just More feedback in general Yeah, it's more data points for the individual right and it helps everyone be more comfortable with it and it's more data points That's never a bad thing. I don't think I think Good data points are great. Thank you. Oh Anything else so can I let me I'm gonna stop Sharing because I'm still learning zoom 61 people are on the call right now These 61 people that are hearing right now what we're having to say Can we make a little commitment to ourselves that within the next week? We will find someone we can give feedback to that will be helpful to them and That we can ask for feedback from someone that will be helpful to us I will say right now. I'm officially asking you all for feedback and If it's through a slack if it's through an email or if it's through a zoom call, I will be thankful for it So don't hold back you feel like that's she It kind of it don't we all take it off the line too So hopefully we can all do that because we are the people who took the time to be on this call today And so we can maybe be the Beginning of a movement here at GitLab to start being a lot more candid with each other and our peers and And be the people who are the example that can be set for Some of the people that weren't able to make it on this call But hopefully we'll watch the video or read the handbook But I would love to see us getting better at this I really really would I and one of the best things to do to get better at this and I'll leave you with the parting words Next time anybody comes to you complaining about anybody else on this team asked this question What did they say when you told them and If the question is I have and they answer that as I haven't told them Then the next thing is is the only reason you should be telling me is if you need a conversation to help Tell them and you need me to help coach you through that Otherwise the person you should be telling is the person you have that feedback for and that's a hard one It happens all the time we're talking about each other. Let's talk to each other. Okay, great. And we'll do it Quiet count down in my head and if there's any other questions or the not we'll sign off Okay, have a great rest of your week and a wonderful weekend everybody Bye


Hello everyone. Thanks for joining. This is our monthly identity and security meetup that happens every month. This is our July edition. We are streaming in YouTube live and I have some housekeeping tasks to do before I introduce, get into the business. So thank you, Okta, for sponsoring this meetup. The platform, the YouTube channels is all sponsored by Okta and today I'm something about me. So I'm Pradipa. If you have regularly seen the meetup, you would have seen me in my past meetups. If you have to reach out to me, you would reach out to me via Twitter and LinkedIn. And today I'm joined by our amazing developer advocate from Japan, Dyson. Would you like to introduce yourself? Hi, thanks Pradipa. Hi everyone. It's good to be here. My name is Dyson. I'm a principal developer advocate at Okta, focusing on the CACMA identity cloud powered by Othero and I'm based in Tokyo, Japan. I wanted to join last time but I got a flu so this is my first time to join. So I'm pretty excited. Thanks, Dyson.  So thank you. Thank you. So code of contact. So if you are in subject of any violations of the code of contact or please contact me or reach out to me via the meetup event. And we have updated this slide with privacy policy. So please go through this and then see how your database is being used and what is being done with your, what is Okta's privacy policy. And as always, we are actually looking for speakers. We usually run two speakers every month. Anybody who is willing to give a shared experience on identity and security, be it Firebase, anything and identity and security like if you're interested, if you want to give up full on demo, just reach out to me, submit the CFP for this, reach out via this URL at the QR code and then we can schedule it for the subsequent meetups. I also wanted to introduce about an Othero ambassador program. This is like to empower developers to create a community. This is for the developers who are passionate about being contributing to the community. Like if you want to write a blog, if you are passionate about giving a talk or going to the conference, this is something that you do. And then this aligns with your identity and security. Do apply for the ambassador program and then share your passion and then you might get eligible for an ambassador. So ambassador has its own perks. You go to this website and then see what are the perks for it. You also have a developer newsletter. So what the DevRel team is doing every month and what are the conferences we are going. This gets published in our newsletter. So do subscribe to this newsletter to get the latest updates. Just housekeeping, please leave your comments in the YouTube live chat. We are monitoring the comments for any questions related to identity and security or regarding the talk. We will get to it at the end of the talk and at the end of the session. Without further ado, let's get into business. And this is our talk of first talk of the evening. Cyber security, protecting your business and protecting your code. This will be done by our amazing ambassador, Lax. He is a web developer and also an open social service guest. And he did a lot. So Lax, the floor is all yours. Hello. Hi, everyone. Thank you, Pradeepa, for the introduction. Thank you, Dyson, for keeping us live on YouTube and everywhere. Vanakkam. Namaste. And I don't know how you say in Singapore or wherever you are. Good morning, good afternoon, and good evening based on your time zone. I am Lax. I'm a web developer currently working as a backend engineer at Web Dev Studios. I'm more interested in cybersecurity. You can say I'm a student. I'm learning cybersecurity and through ambassador program, hot zero in Akta, I've got a chance to learn more. And I'd like to share some of my experiences and tips with other fellow developers. So for today's talk, I always feel like we have tools, we have experts around us, but there are certain details or certain topics are kind of overlooked. We don't have talk or we don't create awareness amongst cybersecurity. So that's why I always keep in my topics as just broad and simple instead of talking about maybe a specific tool or a specific software. I keep my talks around just giving an idea or interaction about things. In this talk, I'll be talking about how we can, I mean, we in the sense of business owners, or you are a key decision maker, or you want a business, or you are planning to start a business.  So first, a quick intro is like cybersecurity and intellectual property. So we all know cybersecurity related issues like vulnerability, threats, we got security issues or attacks and you found a bug fixing it. So all that stuff that we hear and we experience or see around us. But let's see what are the important data that needs to be like protected and what's your role as a business owner or as a developer? And how, let's see what are the stuff that's to be protected and how we can protect it. So I would like to start with internal documents in the sense it you can consider this as your company's assets.  Any document that you are using for your business is an intellectual property and that should be protected and should be accessible only to you or at least it should be protected by law. Otherwise, let's say you hire a vendor or you hire a freelancer and you share the document with them and they could easily make a copy of it and just replace their company name or their name and use it right. So that's where this kind of stuff comes into the intellectual property and also as a cybersecurity expert or as a business owner how you can take control over it. And another stuff is like your customer data or user data. Let's say five people are working for you. All of their details is your assets and then your customer data. You have a paying customer or somebody who's just giving it, taking the trials and someone who just signed up for the newsletter. So everything is your own data. You earned the data and you should keep it safe. And if you leak, if you have any like data got leaked or you know, there's any data being misused or something like you will be under trouble. And then another stuff is like a product. Whatever product or service you are doing like you might be having a further enhancements, features, even bug fixes or you might have some other services or planning to add or do something more in your business. Let's say you call that like a pipeline, you might have some plans down the road like in the next two years, we will be releasing this plan in the next five years, we'll be doing this one. All that stuff, you might be sharing this with your marketing guy or let's say a SEO expert or whoever you hire and work with, but they should not use your data. It's your business data, it's your asset. So let's see how we can prevent this from happening. So these are the data, some examples of data to be protected. Usually as in, I hope most of you who are watching this stream online now or who are going to watch the replay, I hope most of you are developers or business owners or persons who are interested in the cybersecurity. But we all understand or we all think like when we say data, we'll be like, oh maybe it's like my finance documents or I did a survey, I have a survey, the results of my surveys, I want to keep it protected, not just that, right? Even if you have email subscribers, that's still data that's bound for protection. And let's say you have your employees data and still it needs to be protected. So let's see how we can protect one by one.  So you might be saying like, I understand all this, but I don't understand the compilance or I don't understand certain stuff in the cybersecurity.  When you read their service document or how the product works and everything or their security level, you might find some tech jargon, right? But you should be able to understand it.  Basic stuff, you don't have to explain it or you don't have to understand all the like five types of encryption or like how to decrypt this one, not like that. But at least you should understand what is encryption, what is a decryption, what is a SSL or like things like that. Some basic stuff related to security. Then at least you will know, let's say you get a notification from your software and you'll know, okay, this is in a problem. Or if you see somebody else like your competitor site or competitor's app has a problem, then you will understand, oh, this company doesn't have this in place. When I have my product, I want this to be my top priority. I want to fix this stuff. I don't want my software to have this problem. So how you can understand the jargon? Like let's say if you are trying to learn finance or taxes, whatever it is, even medical terms, anything that's a jargon is like you may not able to understand it in the beginning. Even if you read, you may feel like, I get this stuff, but after reading, you might get lost. That's where you can use AI now. Your favorite free or premium AI tools come up with the option like explain me, for example, let's say a phishing attack. So you can say, explain me phishing like how you do for a five-year-old. So it's going to explain what is phishing in a simpler term or like explain phishing to my grandma, something like that. You can give that prompt and it's going to give you more details. You can start like that. It's a very basic or a silly example, but you can use that for any stuff that you want to learn. So this is how you can get started. Once you learn or familiarize with the jargon, then you will feel like, oh, I know how this works or I know what type of, at least you know how to search or how to get more information out of it. You should know at first what category or what type of attack or what type of infrastructure that you need or software or tool to use. And then you can start from there. And then you should restrict user access. Let's say you have a software and there will be like a few types of users are accessing stuff. You should restrict access. You can have access levels or you can like roles, capabilities or whatever that defines your purpose and the business goals. You can restrict them either by accessing the entire section of the software or the program or you can just restrict certain pages or certain actions like some users cannot delete this data, some users can just view this data. Certain people only can edit the data or even if they edit, you can save the edit history and things like that. So whatever software that you use, like for example with Auth0 or Octave in your login, you can see, you can set up user metadata or user roles. So that way you can restrict and it comes with other software too like whatever that you are using you can set. Another simple example is like Google Docs or Google Sheets or any Google product or even Microsoft as well. So whatever product that you are going to share with others, you may be sharing with their email or within your company and you can give them access like whether they can view, whether they can comment or edit. So that same restricting the access and this will avoid any potential leakage of data as well. Another thing to do is like you need to rotate access keys and tokens in the sense. So for example, you have API keys or anything that you need to ask users to regenerate, make it automated. So let's say maybe every 30 days is a good duration. You can based on the data, you can set it as either like one month, two months or whatever that works and then have some legal policies or processes involved. This is coming from my personal experience. I do some consulting or I did more even web development like kind of a freelancer in the past. Sometimes I do also consulting like people come and ask what type of software to use or either can be SEOs related stuff or whatever it is. So people come and just ask me get help and they get paid, but they don't have a proper non-disclosure agreement or something. It's just verbal. I assure them that I'm not going to tell anybody that I worked on this project or I offered my services for them, but it should not be the case. It should be like you should have a paperwork done earlier when you start the project. So if one party goes in the wrong direction, you will have some control over it. Sometimes you might be outsourcing your work to some other agency or some other person, some other professional. So there might be a breach of code of contact or like agreements. So you should have agreements so then only you know what is being violated or fix it and this applies to cybersecurity as well. Whatever data they should not be given to others, whatever data should be protected that you can own.  You should have alerts. Alerts in the sense I'm saying notification can be either emails, SMS or a dashboard message or if you are using Slack or Microsoft Teams or kind of any other collaboration software, you should be able to get a notification there as well. So this way your team or you will be informed like oh okay somebody is trying to log in or some service is down so or some other package or software that you are using is outdated so you will know this is something that needs immediate attention. You can go and fix it. And this is kind of a biggie because a lot of people miss this one, mostly small and medium enterprises because for them they don't have multiple departments, they cannot offer that much and some business owners especially who are starting out and they are the superheroes, they like to do many things at once like they are their CEO, chief everything officers, they do everything right from recruiting to, they might be working as a virtual assistant, they do all that stuff for their business. So there's a great chance that they may not be properly off-boarding a person. So for example you hire a person to do something and maybe you may not restricted their access like you may not for example you hire a guy to fix a bug and their person might be able to still log into the website because you didn't delete or remove that user access right. So that includes past employees or contractors and also third party vendors or any other service that you are using. So have a proper off-boarding system, make sure that your business data is safe. And let's move on to the next part or the last part of my talk. So this is about more on the business side and this is now we are going to talk about how developers, engineers or CTOs kind of people, how we can protect our code or our software. So there are incidents that people log sensitive data like you see like maybe Next.js or other frameworks as well, other mini software as well. We collect some data for analysis like how whether we to understand the user experience we collect data right. So but we should not collect any sensitive data. So you can collect the persons maybe a browser or what which version of the app they are using so that that's okay. Non-sensitive data is recommended but you don't have to collect any sensitive data and you may not have any malicious thing in your mind. For example you may be collecting their user's name or password just for maybe your security audit or let's say you are trying to understand how secure the passwords are, something like that. So you might be doing it for some other purpose a good purpose but if some attack or somebody is accessing those logs and maybe if their intention is wrong and then your business name or your reputation is at risk. So I can show you one example that happened in the recent time. So why you WordPress first because I'm sure some of you are who are watching you will be like oh WordPress I'm a Java developer or I'm a dotnet developer. I'm not into WordPress sorry that's not for me but it's like WordPress is being used to by 40% of the internet and whether you like it or not it's like it's kind of a powerful content management system in its open source. So with the size of the volume let's say 40 percentage of the internet so you can get you know more statistics or some other interesting stuff from the WordPress space. So let's say you can see a million of sites logged plain text passwords in their log and that's through a security plugin so that's you know it's like I think I have used to this plugin or at least hear it or watch the demo or something it's it's not a that kind of a poorly coded or something but somehow they had a log and that log stores plain text passwords that's kind of ridiculous or that should not happen right especially for a security plugin. So things like that so if we avoid this kind of sensitive data being logged or captured or you know being shared unnecessarily then we can avoid one kind of a security or data breach. And then we need to follow coding standards and protocols every framework every language every programming language comes with its own you know coding standards and recommendations. So if you follow that it gives you some idea like for example if you want to add a new feature or if you are fixing bugs bugs or anything that gives you like you know let's say you have a version 1.0 and you want to upgrade to like a newer version or you are using let's say 10 15 different dependencies and you want to upgrade it and if you don't follow any coding standards or if you don't follow the set of protocols you will be in trouble like your app cannot scale right it's not just for scaling or not just for adding new features it also applies to security stuff. For example let's say you are using R0's old or legacy code and then if they release a new SDK or a new version of the SDK and if your code base is totally like I don't want to call it like a spaghetti code but like or cowboy stuff that's that's more a common term right if you are doing the cowboy coding like you do whatever you want in just if you don't follow any standards at all not only you even your teammates or even your senior or engineering manager or a CTO cannot go and fix it because it's like it takes time to read and understand what your code does but if you have follow the standards it will be up to the standards everyone can go and easily read and help you and regularly update your credentials this is like API keys, access tokens like you might be installing packages that packages might have its own access tokens as well or whatever repo like either GitHub, GitLab or any other Git software that you use it might have their own access tokens right things like that so you should keep rotating it so just to avoid that way it's like your code base is secure and as a beginner sometimes I used to even just add my access tokens or something in the repo itself like it sounds silly or you know still it happens because beginners doesn't know like they learn through mistakes and that's how it works so you don't have to share your credentials anywhere on the internet it's like that's just for you and it should be like a server variable like you don't have to store it or add it to your repo like in the Git or anywhere and with AI and with the more power tools that we have we should automate more so what you can automate you can automate your scan your code and then like how GitHub dependable does you can check if your dependencies are up to date if anything has a vulnerability issues or if anything is out of date or any other stuff as well like you can go and automate it and now with the tools like AI tools like codium or other any other free tools available as well so you can write you know automated testing you can write unit tests and you can automate deployments testing and all any other stuff and it will save you more time and as well like it will help you to be more productive and this is something that I always say in most of my talks it's like you get help and help others so art zero has a community forum and it's related to art zero and it's and their products and it's also like you can ask questions about security and like whatever package or anything that you use you can go to their repo like if they have a GitHub or any public repo or a support forum feel free to go and ask question even in Stack Overflow or anywhere ask questions so others will know okay this is not just me like you know somebody might be already struggling that they experience the same bug or same issue they are running into and they will be like okay it's not me alone so you ask questions that's how everyone people will know okay this is a bug or this is a issue or you might be doing it wrong that's how you get help and once you get help please share it with others it can be a youtube video youtube shots it can be like instagram stories you can share it in linkedin or if you are just don't want to write more you can answer the questions in Stack Overflow or in your blog or anything whatever is easier for you or at least help your co-employees sorry colleagues help your colleagues and stuff so the more you get help and the more you help others so you will be you will be becoming an expert in that topic in that software on the framework so that's how everyone learn and grows and also go with a more open source approach like you can have always have your premium or paid version of your software have a separate package or a plan but as much as possible you can if you have time in the bandwidth try to be open source like you write a package for a software let's say you have an SDK or you come up with some other cool simple script it can be a very simple script or a package or anything just share it with others going open source will help you like more people will take a look at the code and they can see like hey this is this could be a security issue and that's how we can learn and improve and this experience will help you with your day job or you know whatever project that you are doing and I know it's like today you might be a developer I'm sure in future you're going to be a senior developer or manager or CTO or you know you can be starting your own business or your own company so all that stuff that's how start with you know getting help in helping others so these are some resources I think Pradeep is going to is going to share these documents along with the slides so these are some resources and that you can get some help about cyber security it's like a introduction or start and that should be good for both business owners and also how to protect your stuff how to protect your code or anything and thanks thanks for joining today and if you have any questions please add in the comments and I'll try to answer or I'll at least find you all within the you know in the right direction you can reach me at lax at laxmaryopen.com or on social media I am laxmaryopen everywhere like facebook instagram linkedin and twitter and everything see you thanks thank you lax thanks for the awesome talk on the cyber security yeah I whenever I see this cyber security we feel like you know it's a very small thing it's like oh I know all this stuff but like you mentioned like the developer committing the credentials like IAWS access keys and they are going to the github those are all very basic things to take care so yeah yeah anybody who is like starting to think about your own code not like you know this is not just for the business owners like be the developer be responsible and then make sure to rotate your credentials not share plain text passwords or store the password put don't put this password in a sticky note share it with your colleagues I'm sure you have done it or at least heard of it so that's that's also all the things that comes to my mind doesn't what do you remember when you say cyber security what's the first instance that you remember well actually you know my wife can't remember the password or cannot use the password manager so she has a long notebook with the whole idea and password so it reminds me you know that it's not best practice but uh some people do that you know don't start to have like IT skillset so the system needs to yeah need to enforce the security things you know and I do agree that you know that not many companies have the automation stuff so while the employees are off-boarding there's some sometimes we forget that those people you know still have access so it's one thing that we need to keep in mind you know on-boarding and off-boarding stuff so it's pretty much yeah yeah you have to use an IT provider that just like makes it very easy breeze in and breeze out of doing the on-boarding and off-boarding or just really invest on the tools or build your own tools uh security is not something that you have to compromise uh you have to pay a large price at the end thanks thanks for the enlightening talk uh yeah see you soon thanks thank you thank you thank you thanks for joining me thank you nice and it's time to introduce our next speaker uh so how to use simpas and uh digital id to authenticate i came across this talk in api day singapore i'm so excited so i invited sachin to present this talk in our makeup uh so i'm going to introduce sachin uh so he's our i'm so excited to have him as an auditor ambassador he's just joined as a ambassador this month uh he has around 17 plus years of experience in the IT industry currently is working on platform engineering so if you have any questions on platform engineering and uh singapore's digital id or use any other government's id uh not just uh the singpas it's going to be the same so you can ask the questions right away and without further ado i'll just pass on to sachin oh sachin i think you are a murid so please unmute yourself hi everyone sorry for this i was speaking but i believe nobody was able to use okay hi my name is sachin i've been working in IT industry for 17 years and today we will go through high singpas uh you can use to authenticate and work out there singpas uh before we get into it first disclaimer all this content is my personal learning while working on singpas and my company and their business have no linkage to it that's something which i always like to share okay singpas uh is a digital IT which every singapore citizen and residents gets it uh singpas have one more consultancy that is uh cop pass that is for if you want to have v2b where government manage your complete uh if you want to authenticate from one business to another where you want to do a digital process and you want a digital idea out there so cop pass is used when you're going for individual singpas is a service which you can do singpas is managed and governed by a government technology agency or gov tech which is one of the eight statutory national project driven by the Singapore smart nation vision okay which have more than 200 organization government and private which basically where uh you are providing a service to citizen or resident of Singapore and you want to have a digital identity or digital way of interacting in there singpas is uh used extensively out there so knowing singpas will definitely help you a lot so this is a fact sheet about singpas uh and this is a qr code you can scan this qr code and know about that uh still i will go through each of them so they are majorly for uh fact sheet about it it's mine for it's an individual user info whenever any user logs in it will be prompt to him to uh whether you want to share his information if he allowed that so you can avail my info and at the end we will have a demo where we will cover this part of my info how exactly it will happen out there second will be mine for business as I told in the previous session that singpas do have me to be options we call as cop pass so if you want to know a business information sand who is the entity which will be working on that that is done with mine for business third is sg uh sg verify which is a way of doing authentications there are multiple way by which you can do the authentications you can use face verification where uh if you have a face reader uh mostly it is used uh where you want to authenticate uh if you have a secure environment where you only want certain type of people to be allowed and so you can use uh face recommendations and only after that you want to allow that okay so you can do that second is qr code base where uh you will be shown a qr code and uh from mobile phone we have a singpas when you can scan and once you uh uh approved you can do the login out there so even in qr code there are two types of qr code static and dynamic static qr code does not change and it is not advisable to do that however dynamic qr code is used most of the cases in the business cases right now at least okay and if you don't want to go ahead and you want to go to the old way of having a username password way of that we call as password login you can use that as well and to work on it the fourth service which is provided by singpas is digital signature if you have a business case where you want to have a digital signature or signing of contract or you want to authorize that this specific person have done that specific activity you can use sign which is one of the features provided by singpas so singpas is mostly used for two cases we call a singpas process flow one is onboarding process and second is uh sg login what is onboarding process for example if you go to any bank when you want to open a bank account so what really bank means is it's need your identity but if you are doing digitally or if you are doing online then in this case you go to singpas and authorize that specific bank or any other digital service that okay take this informations of might to be shared with that specific business and you can do the processing out there second is just for the login purpose where you just give your credentials and login and after that you don't want to use that you want to have your own role base process where if that specific user is there and on the time of onboarding you decide okay which role you want to do and want to move ahead so that's a second process which you can do for it so if you want to do singpas the information which will be provided by singpas organizations versus the information which client have to provide singpas will give you the client ID and tls server authentication certificate which you can see out here the client ID and the tls certificate as a customer you have to provide what will be the origin what will be the redirect URL and what mode of communications you want to perform out there when you're working on sg verification in uat and production or we call a staging or production we have to provide authorization detail in the header okay in the request header while we will show the demo it will be we'll be using the environment and or it's also called a sandbox so in case of sandbox it is not required you don't need to provide this information out there so how exactly the onboarding happens so on the browser you go to the any partner applications okay it will you will be prompt to it you say it's okay you will be shown you want to verify it so you be redirected to the authorization server where authorization servers push you to the singpas where it will be prompting you which mode you want to authorize yourself whether you want to go with qr code or you want to enter your username password or if there is a place where there is a face recognition is possible so you can go with that so after you do the authorizations it will you give your concern saying that okay yes this information is I want to go it will go to the server it will generate the code the authentication code and the callback URL which will be given to the applications and the applications can use that token and pkce code wavefire and dot informations to get the token information and pass this token informations with that he can go to mine for collect uh users information which have been authorized by the business and give the information back out there so let's go to the demo part so uh for example uh take example of elizabeth first uh she is the user who came to the portal and she will log in so she will get a qr code out here and she will open his mobile phone you can consider this is there and scan this qr code on the mobile phone I think I have to refresh so again as you know right whenever you have to give a demo you will be getting some of the issues again let's try again let's take a case of elizabeth and we move ahead let's scan the code this time yep we pass the scanning and ask the applications uh so what is happening at the back end let's also go through that before we say yes so this is our base URL this is our callback URL I believe if I don't approve it we'll go back so let's say yes in the meantime let's go into detail out there okay so what we have done is uh this is the base URL which we have been there and this is our uh redirect URL this is the encoded format this is the client ID which we have discussed initially this is a noise which was there a you remember that when we talk about qr code there is two types static and dynamic so we have used dynamic signature method we use is rs 256 the state is one of the value which is used is demo kos 3 so this is the timestamps for start and the end out there okay so how exactly the URL will go when you are making the call okay as we discussed in one of the demo that we go for uh the header as it is a demo we don't add there the otherwise we have to provide the header at the same time so we provide this information it called for signatures and after that the callback URL and after the callback URL this is the informations which we got the status with the access code okay with the access code we make the call again with the access token we make the call again and got the user informations out here about the user and this is the informations which we are displaying out here so that's the verification part let's go for okay sg login sg login is where we just want to use sync pass only for authentication purpose not uh we don't want the user informations out there here what we want is just to get the token and after the token is done we want our our activity to get into it okay so how exactly this part will work is we'll go to the authorization part and it will redirect to user browser about you have to go to this specific site and get the token out there once we do the authorizations out there we come to the sync pass applications and we will be provided with options we perform that and once we uh pass the authentications it will be gone to the application and user can work out of that he will not uh here we are not taking uh mindful about the users we are not taking their details out there we are just proceeding further uh in a normal business application scenario what we really do once we take onboarding we don't want to uh next time the user's information we just take the authentications we have our key and we proceed further out there so for this let's go to various applications so what we do is let's take a login example out here where we're just logging out there where you will see uh login uh prompt out there where we enter the sync pass pop up of dynamic and i will connect i will scan this QR for a code from my mobile after i scan it will ask whether you want to authenticate this user i will say approve once i approve from my mobile phone it will just redirect out there it will not ask the business detail out there what happened okay let's try again so it brought to the side and as it is containing confidential information so i do that and back to the screen so all the references which i have taken out there are from these two sources which you can refer out there thank you for all the sessions thank you thank you sachin uh that was an awesome talk i'm was curious like uh how to use sync pass uh because that is like mostly used in singapore in most of the government site like in irs and stuff so uh so sync pass acts as a authorization server here is it like yes it acts as authorization okay looks cool the demo looks cool and as always the demo never works at the first time unless you offer prayers to the demo goddess there's what i really sometimes things goes fast sometimes it takes time yeah so we always pray to the demo goddess and then say okay that was fun that was good that was a good session yeah is it possible to integrate uh on an upstream to another identity server uh with us sync pass or is it uh that is yes you can do that uh but uh you that is where onboarding comes out there what normally people does is when they are doing the onboarding what they do is they take the user informations and go to a separate authentications where they are used if you go to the bank they don't use sync pass after you do onboarding out there so what they do in onboarding take your say previously for what we used to do we used to go to the bank we used to give our identity proof you have to give your address proof we used to give our earning proof so with the sync pass you don't have to provide all these informations this is already available in the government so you just uh when you do go for onboarding you do onboarding out there give all this information because it is shared by the government out there it is already verified and it is genuine so once you are done that you can use auto or any other custom authentications train your application and move ahead that's the reason we have two sections where it's onboarding where you don't uh take uh you don't take sync pass as for authentication purpose you just use sync pass one time gather users for ek yc purpose and once your ek yc is done you don't you go for your own authentications and work out there there are certain applications just like irs is using for sg login to authenticate and they don't go for onboarding because on the back end of the system they manage internally out there so they don't go they take it from the back end system i think maybe because irs is still linked to the governments on the back yeah it's already so they take it from the uh governments of his bus and they move ahead so they don't use onboarding so case to case differ where is your business case more suitable out there okay yeah that was a very good session thank you so much sachin please keep us uh like share us with more exciting things i'm saying pass whenever you yeah i i again i i thought i have much more time i have still 10 more minutes i could have i didn't more content to it and no the onboarding would be a very what you said is right we could have included a yeah no we can have our session only for the onboarding and then see definitely something which is a mistake itself it's yeah it starts with the client it become a four hour session for us it's actually difficult when we have to integrate with the sync pass stuff because those data is protected right yes protected but see there is one major thing is uh lots of time what we get is that when we go for mine for to get the user information and customer feel that this is confidential information they denied the moment they denied the process is all closed yeah okay so that then uh the customer comes back saying that my onboarding failed you are asking these details so there are times when we are doing onboarding we go for custom forms where after onboarding we have our own custom modules where we take certain informations where concerns are required we know client will deny certain information where lots of people are very reserved to share their annual learning out there so but if you're going for a credit card they require this information right yeah to give you a credit score and do on top of that so this part they don't take it in mine for they keep they take it separately oh okay so we can actually filter the information there is there is almost around around 32 fields out there which sync pass provide you uh or we call this attribute so there are 32 attributes which you can get from mine for in case both mine for and cop pass as well or my for business so you can take that information sand you can put it when you are asking for what are the informations you are you're giving the consent so when you're asking the consent you define what are the attributes which you want to give to the business to be allowed okay that makes sense because you have the power to of denying it yeah that's what I was saying like so once you deny it then we have to go through overriding process right like yeah so it will be off uh uh currently most of the business is doing is they are going for offline mode where they're sending a separate form uh where we build a separate form for the same customer because at times customer really feel hesitant to provide this information so we have a offline module where we send them that okay we'll fill this form uploaded and we will take it from there okay nice yeah this is exciting yeah thank you so much it's nice to go ahead with that yeah thank you so much uh yeah thank you Dyson do you have anything else to share before we wrap this up okay uh yeah so a couple of things I want to share with you guys so uh we're gonna have the Octane October and we are going to have the developer days at Octane so we're gonna have like the developer focus event alongside with the Octane so if you're planning to come to San Francisco or go to San Francisco yeah which I'm planning to please visit the the the day at Octane because we're gonna have a lot of the activities talks and the special things also um uh we're gonna have the event page so I'm gonna be sharing the some info so developer what day is coming to the Octane thing let me share link to the comments also uh we're gonna uh our developer advocates are going to a lot of events so if you are see if you want to see them uh you can find that events where they are going to next yeah so I think those two things on the party but you also have there some announcements right so let's go ahead yeah so cdjs Singapore is happening so if you are in Singapore and you want to meet me or you know you have uh say hi I'll be in uh I'll be running a free workshop in on odd zero uh on how to implement passwordless how to do the mfa and also i'm giving a talk uh so you can go to the cdjs uh conference website and then find the schedule and the venue or just drop me in uh ping me in twitter and then I can give you the details uh so I'll be there next week 26 and 27 and 28 uh yeah just come say hi if you're in Singapore and hope to meet you all yeah I will meet you at that cdjs thank you thanks for taking a photo and then show it everybody yeah that's all I have for the announcement okay so I think this is a wrap of the identity and the security meetup in July and thank you the thanks and thanks Sachin to joining the you know our events and thanks for deeper for posting this event and thanks for everybody who's watching the you know amazing in the meetup so please close the round see you all next month bye


How can you actually believe the Bible? I mean it was written over 1,500 years by 40 different authors in three different languages on three different continents. Wait a minute, say that again. Which part? You mean the part where it was written over 1,500 years by 40 different authors in three different languages on three different continents? And yet it has a cohesive narrative, an overarching message from beginning to end. God creating humanity, man rebelling, and yet God in His grace providing Jesus in fulfillment of specific prophecies.  You should really read it. Huh, yeah, I guess I will, but still some people might say...


Sun put up your Legos Hey, everybody, we're on our way to mid-Donald's our favorite place for breakfast here in Redosa, New Mexico Thank you so much Thank you Appreciate it. Thank you you too. What's up everybody? This is Giovanni from spy options trading today is Wednesday December 19 2018 we're winding down the year guys. We're winding down the year Unfortunately guys, I did trade today, but I didn't record it, but I'm gonna go over that trade Here with you here in just a moment There's a couple reasons why I didn't record it first of all. I wasn't expecting to day trade today I do have my son as you saw or having ourselves a great time right now But I wasn't expecting to day trade because I had him. He's at a school today We have a dentist appointment to go to today. There's there's lots of things going on in the markets about two o'clock I believe Eastern time, so I thought I figured the markets are gonna be really really slow Thankfully, there was a trade to be made. So let's go ahead and show you that day trade right now Already guys Here is the chart I traded Facebook today the trade that I placed today was on Facebook You're looking at the one minute here Five minute and then these are the puts that I traded trading a lot higher than I bought them But anyways So I traded it off the one minute chart guys I'm again, I'm doing a lot of back testing. I'm doing a lot of stuff in the background Where you don't see you don't get to see that in in the recordings that I do and whatnot So I apologize, but I'm working hard. I'm working diligent to Make this dream of mine come true So I saw Facebook and in fact I saw Facebook back here and I almost got into this one thankfully I did not get in I can't explain to you why I didn't buy this one. I think I was actually getting ready But I saw this move the woman chart and I got my signal I know that it moved drastically Big big to the upside and I actually got a signal. This is the five minute I got a signal and I am I wish I would have traded it, but I didn't anyways I traded the 142 puts that expire in two days Let's see here activity. Here we go Facebook bought two at 199 even and Sold the first one to 11 sold the second one at two ten About 20 20 bikes after commissions Not a big deal, but it was a trade. It was a trade nonetheless these small trades What a lot of these beginners don't understand is it's a slow and tedious process and But along the way you are creating habits good habits So, you know, 20 bikes here 20 bikes there three bikes there as long as I don't lose That's okay. That's okay guys Again, I want to show everybody and again, this is my trading accounts bought at 199 Two of them sold the first one to 11 sold the second one at 210 five percent gain there, but look I they actually went up to as far as 290 again, I just I couldn't Day trade the the way that I wanted to I in essence. I was forcing a trade Which I'm kind of you know contradicting myself on my last video, but I Solid just this good opportunity here and I just had to take it kind of spread the moment. I was only in there for Two minutes a little over two minutes here 843 and sold the second one at 845 so Before I Let you guys go. I wanted to show you Forks factory we have a lot of things brewing here starting at 2 o'clock FOMC just meetings up the wazoo. So that's that's you know, gonna be very important and We'll see where the markets go from there, but let's keep day trading these markets guys I'm putting together a strategy an actual trading plan Here in front of your eyes Along the way. This is a long tough road But it it's an awesome road that I want to take And it's awesome. I love this. I absolutely love the stock market. So made money today Can't complain and I probably won't be able to trade the rest of the week But comment down below what you thought about this video. I'm so sorry. I didn't actually record it live Also, comment down below what kind of tutorial videos you would like to see from me Do you need help with something in particular? Anything I can do to be of service to you guys Don't forget to hit that subscribe button down below Like and share my videos. I would greatly appreciate it. See you guys here next time


Hi everyone, Joe for jaspyscasebreaks.com coming at you with 2020 Bowman draft baseball sapphire edition 5 box pick your team number 9 All-card chip and every single card will be penny-sleeved and some of the main ones will I'll top load immediately like the sapphires And some of the top draft picks and whatnot and if you bought at least two teams you got a chance at the Tigers So let's sort by your first names right here So there's the Tigers down there if you bought at least two teams so Brent did So that's an entry David two teams an entry EA two teams entry Garrett same thing Joe John Joseph and Mark Bissette bought six teams. That's three entries Matthew Shearer two teams an entry Nick Kasberg two teams an entry Scott V two teams entry and And just one team for those folks down there Let's sort this let's get that in there name on top after Five and a five ten times. We'll get the Tigers one two three four five six seven eight nine And once more ten the hard way tenth and final time mark Bissette your names on top after ten congrats to you He did have the odds There you go Playing the odds and making the Tigers happen Now I know Mark's been in most of these breaks and he knows what I'm about to say next. He knows that there has not been Any color Spencer Torkelson cards out of here, so that's that's what we're looking for There's been some Torkelson cards here and there But no parallels as of yet King was asking what I thought about Alex would go into my rivals the the Giants Well far hands I 80 who runs the the Giants now has a familiarity with Alex, but I don't mind it I don't mind the move. I kind of wish we would have kept Alex would but I Think he deserves starting pitching options, and I don't think he's he's a good dude I don't think he was gonna get a starting job with the Dodgers I think he was always gonna kind of be like are you a pseudo reliever? Are you this or you that? So I think maybe with the Giants. He'll actually he'll actually be able to knock out like 25 plus starts a season Which which would be good for him and is and deserves it All right, thanks everybody here we go Noah is predicting a solar shrimp parallel Matt Arnold I do I Do live by El Cholo that has survived the pandemic Don't know if West Jane is still around But JP's I think is still there. I Don't know what the what they're what their situation is But yeah, J. P's is is a pretty fantastic Pretty fantastic place. I hope I hope it sticks around nice nice divey bar Pretty fun pretty pretty low-key. Actually, it brings that beach feeling back for Santa Monica and Santa Monica has gotten so I Mean, I love living there, but it's gotten pretty Pretty bougie over the years top loaders. Oh but yeah JP's is a good spot though. Yeah, I don't think yeah I don't think JP's had that restaurant designation. They had good bits and decent bar food for what it was But yeah, I don't think they could have gotten away with that But it's a it's a good spot.  What happened there? Oh that light fell over terrified me Back in the day we used to do pub crawls with my buddies and That would be definitely a stop There hang on. Let me fix this light. There's all sorts of technical difficulties I thought the light was collapsing this way. I know yeah, don't don't have the top loader for me There's Jason Dominguez getting back to the break and your parallels we got Orange Patrick Bailey to 25 for the Giants at 25 out of 25 Giants are make slowly making a making of the rebuild and then we've got another giant We got RJ Dabovich 14 out of 99 for my rivals going to mark the set and the Giants Cabo on 3rd Street's okay. I like the one next to that's not in Santa Monica But the one in next to cues if you remember that That's that's the Cabo Cantina that I that I like better and the one in Hollywood. That's that's a whole different vibe out there I think big you like big deans big deans. I think it's still around. I think they're still kicking Maybe I maybe I'll grab a burger from them this weekend Burgers and delicious waffle fries at big deans Yeah, it's kind of a hassle to get into you kind of have to plan it because you have to like You pretty much can't park the rest of the day if you're gonna Do like some day drinking or whatever so you'd have to like get a bike I guess with all the scooters around it's probably a lot easier now, but but but yeah, I think Big deans is a good spot. That's a great spot to watch like College basketball like March Madness you'd go to the back patio get burgers and fries and just pony up at a table To get pictures of beer and just watch Watch college basketball the entire time There's Riley Green 11 out of 50. I haven't been to Casa del Mar There's a I don't know if this place was around when you when you were there, but Near the Santa Monica library, there's the there's Esther's that wine bar that's there that's a pretty good spot too for For like date nights and so just chill chill whining there's Tink hence 21 out of 99 Cardinals EA with the Cardinals Riley Green goes to Mark and the Tigers No, Torkelson sightings yet. Here's the next one Yeah, there's a lot. There's a lot of great spots. That's I think that's the beauty of that's the beauty of LA I think everyone sees LA as like Whatever stereotype you have of LA in your head, but there's so many great places to where you can hang out and At like so many like great bars and great divey places and like locals restaurants that you can kind of go to and not do the touristy thing and And avoid the people who are there to try to be like actors and stuff like that There's a Zach vene I'm not familiar familiar with Del Frisco's or is that the is that the San Francisco bar on Pico? That's down the way. It's like on like a weird New York style corner like a flat iron kind of corn Zach vene goes to the Rockies Nick Casper sugarfish is still around They've got a few locations, but I think all of them are still kicking There's kept a Heston Kirk's dad We got Gerard and Carnation 10 out of 99 for the Marlins Mark. Oh, there you go. Narg actually had some sugarfish after dropping by it. Nice and back here is Jeff Chriswell green to 50 Yeah, Ethan save up make the move. It's a lot of fun here Hillstone is great the member. I don't know if you've been to Hillstone Matt Arnold the Hillstone Steakhouse Near the on the promenade got good steaks, but they also have a very underrated. I Like French dip sandwiches. They got a really underrated French dip sandwich. It's kind of different from like from like Like coals in downtown And the other one I'm more of a cold Philips more of a coals guy, but um But for like a slightly fancier sort of French dip sandwich Hillstone is a good spot a brand after after being Brandon's in Brendon's in a In Australia, but he's been to LA almost a dozen times nice. He's been to Venice the first time Venice is a trip That's a lot of fun there There's a peak row Armstrong for the Mets that'll be for Joseph. Oh, you're in New York. You're you're you live in an expensive place, too We've got Ronaldo Hernandez 70 out of 99 That's for the rays that'll be for Scott and there's Francisco Alvarez 49 out of 50 Yeah, I didn't realize how I thought Hillstone was just like a local like restaurant, but I Mean, I assumed it had to be owned by like a big but I didn't realize just how big that restaurant group was The Alvarez going to the Mets by the way at Joseph with that one and the last box I think Hillstone and like rustic Canyon. I want to say Which I live nearby too Is there I also love R&D kitchen on Montana It's a good spot for a drink or two some food Marmalade good brunch spot on Montana Love that spot There's our Spencer Torkelson for Mark the set Rustic Canyon still kicking. There's they're still grinding through the pandemic Bagelnash remember bagel. That's a great hangover food spot bagelnash still kicking There's the Spencer Torkelson mark and the last two so that purple I believe is out of ten So let's do the out of 99 or out of 50 first tink hens I've been there many a time seventh and seventh and grand for whiskey downtown seven grand Pretty delicious That's for EA and the Cardinals and behind Christian Robinson is Matt Libertura five out of ten Another Cardinal for EA like almost like a personal boxer. Yeah, there you go, man And there you have it everybody. I'm Joe for jasky's case breaks calm We've got more sapphire in the store and late night with Sean so make him do some more This is really good stuff. Check it out. I'm Joe. I'll see you next time for the next one. Bye. Bye


update. Good afternoon, folks. Steve Rhodes coming to you live from the shores of sunny Delray Beach, Florida. This is your 1 p.m. update and currently have all the U.S. indices that we track trading the upside. That was up 330. Just a little over 1%, 1.5% for the S&P. That's 61 points. 1.8% for the NASDAQ 100, 219 points, 2.5% for the Russell, 4% for the Semizer, up 117 points. You've got gold trading up 6 bucks, silver 17 pennies. She's trading at 2173. Lights we accrued as flat at 114 and 19 cents. Got natural gas up 28 cents. That's a nice big move there. 30 Treasury is down 1 point and 13 ticks. She's trading out at 138, 16. Let's go take a look at our nine panel market update chart. We begin with the upper left-hand side, the ES mini trading above closed above the center of its bowler structured daily profile. Did that yesterday? Did it on Friday? That says that price should be able to make its way all the way up to the top of that profile. That level is 4168. That is especially true now that we have that spot volatility below its 50-day exponential moving average. And if we do get a close lay below 2708, what that suggests is that we should see the spot volatility make its way for its lower Bulbinger band reading. That's out at 2122. That should give the energy for the S&P 500 to continue its rally. Got the NASDAQ kind of a weak link out here. It's trading into resistance. The resistance zone is between 126, 22, and 12995. US dollar index looks like it may be pulling back to the 102, 86 level. You've got gold, which yesterday confirmed a buy the D point pattern. It does have a new profile. Price should be able to make its way up to the 1861 level. Silver has a TD9 count bottom. Price should be able to make its way to 2276. Lights we accrued is targeting its prior high. Let's see, that is the July, yeah, so I've switched over to the July contract. So price should really target the 116.43 level. The natural gas contract should target its Rosemont Dementicator top. That was from May the 6th. That high out there is at the 899 level on the 30-year treasury. Just consolidating with inside its daily profile. It's testing support as we speak right now. And that's at 138 and 1330 seconds. Price trading at 138.17. Folks, stay tuned for the Trader Zed Show. But if you're off to start your Tuesday, have a terrific one. Thanks again for joining us. Take care. We'll see you soon.