Welcome to the NTN Nightly. I'm Nisha Charles. This edition stops stories. Increased support is being given to the nation's young entrepreneurs. The National Conservation Authority makes headway in tackling the sargass and seaweed. St. Lucia's nurses are recognized for their dedication. All that plus the latest in youth development, sports and the NTN Nouvelle-Arcouillon. Increased support is being given to the nation's young entrepreneurs. Minister for Commerce, Industry, Investment, Enterprise Development and Consumer Affairs Hon. Bradley Felix says government is ensuring that assistance during all phases of a start-up is afforded. This, he noted, would have significant impact on the already declining youth unemployment rate. More from Janelle Nouvelle. The Ministry of Commerce, Industry, Investment, Enterprise Development and Consumer Affairs and by extension the Government of St. Lucia has pledged its commitment to set the foundation for youth entrepreneurship. According to Minister for Commerce, Industry, Investment, Enterprise Development and Consumer Affairs Hon. Bradley Felix, one of the biggest challenges for the youth seeking to start their own businesses is financing. The challenge, he said, has become even more apparent given global trends. At Ministry's standpoint, we continue to look at ways to assist entrepreneurs, young entrepreneurs, small entrepreneurs, our start-ups. We are looking at areas to be able to get grant funding for them because you know that's where the challenges lie. I mean the whole world now is under, well I should say we're more or less keeping a very close eye on what's happening with the trade war between China and the USA because there could be some repercussions to us down the line in small island developing states. The Minister also highlighted that there are several advantages to boosting youth entrepreneurship. One such benefit is the potential reduction in St. Lucia's unemployment rate. Overall, youth unemployment decreased from 38.5% in 2017 to 36.3% in 2018. From a country's perspective, my ministry is looking to ensure that we can build up our young business people because we truly believe that the way we can grow the country is to have more private business men and women involving their own affairs to take off the load from government as it relates to employment. So as long as we continue to help these areas, we believe we will see good results. The minister reiterated his confidence that the government's plans will yield positive results not only for the youth but for the country as a whole. For the Government Information Service, I am General Norville. Meantime, Export St Lucia is continuing to assist in the penetration of markets. Young entrepreneur and owner of Mangal Trading, Naila Mangal, has received assistance from Export St Lucia with exporting fresh produce. Here's a look at her experience. My name is Naila Mangal and I'm the owner of Mangal Trading. At Mangal Trading, we sought out fresh local produce to export it to international and regional countries. As a young person growing up in the agriculture field, there are many challenges that people face, especially with agriculture. Farmers normally plant so many local produce and they have no markets for them. With the help of Export St Lucia, we go to farmers, we purchase the produce and we have that market to send it overseas in a way that helps the majority of farmers. Every shipment, we normally work with about 50-60 farmers because we get to purchase soursop from that one, purchase cucumber, purchase plantain. Different produce, different farmers. You'll never go to one farmer and get all the produce. Export St Lucia helped me to export in the UK. And now we're working in trying to get a market in Antigua as well as America. The relationship I have built with them is that they helped me get the market one. Secondly, my business, I should say, is more profitable compared to before. The National Conservation Authority, NCA, is reporting success with its efforts at tackling the Sargassum Seaweed along the island's east coast. The undertaking is also providing employment opportunities for residents in communities affected by the seaweed influx. More from Chevroy Marios. The National Conservation Authority, NCA, has embarked upon an initiative to remove the troublesome Sargassum Seaweed from St Lucia's coastlines. Their exercise involved the handling and recycling of the seaweed from the densely covered seashores. To accomplish this mammoth task, the NCA, in collaboration with the Ministry of Agriculture and the Office of the Prime Minister, hosted a two-day training workshop at Viewfort, Dennery and Praline from May 31st to June 3rd, 2019. Manager of the National Conservation Authority, Ms. Jessinta Lee, emphasized the need to keep our beaches clean. There's the need to clean the beaches.  This is a Sargassum project. And the first part of it is the training. And the second part is the implementation. And there are a number of agencies and entities involved. And one is the National Apprenticeship Program. Now there's also the Office of the Prime Minister, the Ministry of Agriculture. The program employs individuals from the various communities who are the entrain in the handling and disposal of the Sargassum Seaweed. You are going to get paid to clean up your own community. And those persons who have the interest in using the Sargassum for other uses, as Mr. Phil just explained, are also going to benefit. All right. And so in the course of the meeting, we'll discuss what is involved in employment for you. The things that you're going to expect, what we ourselves as the project leaders are expecting from you as well. Reported from the Ministry of Equity, Social Justice, Local Government and Empowerment, I am Shevre Marius. The Ambassador of Diaspora Affairs, her Excellency Dr. Joyce Lynn Clark Fletcher, will be travelling to the UK to meet with Diaspora in London, Birmingham and Manchester. The visits are due to commence from the 19th of June 2019. In attendance will be Prime Minister the Honourable Alan Shasne and his Excellency Guy Meyers, St. Lucia's High Commissioner to the UK. The meeting will discuss the Diaspora policy, listen to Diaspora concerns and the way forward. Still in Diaspora Affairs, the St. Lucia Toronto Association Action Group, STAG, will be celebrating its 7th anniversary this month. The group advocates early awareness and detection of breast and prostate cancer. The group seeks supplies and consumables in Canada and ships them to the St. Jude's and Sufra hospitals as well as various polyclinics in St. Lucia. STAG has also partnered with Sick Kids Hospitals to forge avenues to assist St. Lucia. The skills and hard work of nurses around the island was recognised as the St. Lucia Nurses Association recently celebrated Nurses Week with a number of activities, more from Finnell Neptune. The St. Lucia Nurses Association recently celebrated Nurses Week with an educational conference at the Finance Administrative Building. In St. Lucia, Nurses Week was celebrated under the theme, Safe Staffing Saves Lives. President of the St. Lucia Nurses Association, Alicia Baptiste, spoke on the importance of safe staffing as to ensure the delivery of quality patient care. Nurses have an integral role in the healthcare system. State mandated, safe staffing ratios are necessary to ensure the safety of patients and nurses. Adequate nurse staffing is key to patient care and nurse retention. While inadequate staffing endangers patients and drives nurses from their profession. Minister for Health and Wellness, Senator the Honourable Mary Isa, commended the nurses for their dedication and hard work towards the career and patients. Even if you have the aptitude to do the sciences, it does not translate into safe nursing. It does not translate even into nursing. Nursing may not necessarily be the thing for you because the profession is an extremely important profession. You are taking care of people's lives and that is what makes it so important. Senator the Honourable Mary Isa also appealed to the nurses to continue providing the great service to St. Lucia. Reporting from the Communications Unit of the Ministry of Health and Wellness, I am Fennel Neptune. And this is the NTN Nightly. Ryan O'Brien is up next. I was in my neighborhood. It was a very dark night. I decided to go for a drink by a bar. On my way from the bar, I felt distinct to my right leg. When I looked back, I knew it was a footless snake. You happen to be in an area where there are snakes and you are bitten by a snake. This is what you do. You call for help and try to reach the Victoria Hospital within one or three hours. You will be seen immediately. My uncle at the time was a police officer called the Victoria Hospital and told them that we are coming down for a snake bite. It is the only facility on the island which has a protocol and a treatment plan where you can be treated adequately. We call them before you go there so they can prepare for you. Rest assured that there are adequate supplies of antivenom with doctors who have been trained in the treatment protocols of the snake bite. Welcome back. We join Ryan O'Brien for the latest happenings in youth development and sports. Thanks, Nisha. I'm Ryan O'Brien. Welcome to your weekend update on youth development and sports on the NTN Nightly News. More on the upcoming Inter-Primary and Secondary School Swim Championships said to be held at the Rodney Heights Aquatic Center June 21. The swimmers will swim in age groups as per FINA rules. Age as of December 31, 2018 will determine the age group in which swimmers participate. June 12 is a deadline for registration. Each school will enter no more than four swimmers per age group and six in individual events. However, only two swimmers per team will be allowed to score. Each school may enter up to two relay teams in the relay event. There shall be neither substitutes nor alternatives in individual events. Swimmers may enter a maximum of three events. Medals will be awarded for the first three places per event. Trophies for age group winners and the overall meat winner will be awarded at the annual school sports award ceremony put on by the Ministry of Youth Development and Sports. The relays will not count towards points and are fun events only. Coring will be All events are time-finals and seated according to entry times or no time if none is available. The pool will be open one hour before the meet or warm-up. Lane assignments will be given upon arrival at the pool. Swimmers must wear uniforms in the March pass of the opening ceremony. Semi-final action in the schools and the 15-40-hours competition played Friday. Leon Hess assured themselves a place in the final of their competition, defeating Souffre Comprehensive by eight wickets at the Wendt playing field. Souffre Comprehensive batting first were bowled for 73 in 21.1 overs with Kevin Gassy hitting 33 and Caleb Jones 10. Lee John allowed standing figures of 5 for 26 and Captain Sean and Edward 3 for 14. In reply, Leon Hess achieved their target, finishing on 74 for 2 in 13.1 overs. Kan Elcock struck 30 and Lee John was 16 undefeated. Kevin Gassy picked up both wickets to fall for 25 runs. And as of news time, at the Gosele playing field, the Mary's College batting first again through their secondary got to 282 for 6 of their lotted overs. In their semi-final engagement, the final is set to be played on Wednesday, June 12. That's your update this week from your development and sports. I'm Ryan O'Brien. Thanks Ryan. The OECS commission has signed an agreement with Facebook Caribbean that will allow access to Facebook's disaster maps in an effort to improve emergency response for OECS member states during times of disaster. Facebook's disaster maps are dynamic mapping resources with information about where populations are located, how they are moving, and where they are checking in safe during a natural disaster. Using this de-identified and aggregate information, relief agencies will be able to more efficiently respond to the needs of affected communities with appropriate services and supplies. The OECS commission is one such user seeking to use the technology to improve its disaster management strategy. Dr. Dedecos Jules is the director general of the OECS commission. Facebook is one of the most ubiquitous social media platforms globally. They are almost a trillion people I believe in on Facebook right now. And so it is in the Caribbean, it is also one of the most widely used social media. The agreement that we have signed with Facebook gives us a working partnership with them that will help us in terms of tremendously boosting our social media outreach. It would also give us access to some of the analytics and data that are made available through their platform. For example, with Signature today, we immediately have access to disaster maps for the OECS member states. This is going to be shared with the national disaster agencies and all of the OECS member states. And we will be an invaluable tool in any disaster response that needs to take place in the event of a hurricane. Facebook's public policy manager for the Caribbean, Claudia Girardo, says the disaster maps are aimed at providing disaster relief institutions and organizations with information that is critical to dealing with disasters efficiently. This will provide the OECS visibility as to the information that our users share with us voluntarily and like to share with other people with relation to their location and their location history. It tells these organizations where communities are and where they're moving to in moments of a disaster and it tells as well if they have access, for example, to electricity or to internet networks. This enables institutions to be able to provide services and support to communities live when they need it in moments where time counts. The agreement was signed on June 4, 2019. In other OECS-related news, the Global Green Growth Initiative, the GGGI, opened a new office in Castries to strengthen support for its work to further promote green growth in the Caribbean region and expand its partnership with the Organization of Eastern Caribbean States, the OECS. The GGGI and OECS joint program will accelerate the flow of climate finance to support energy sector resilience in OECS countries as well as support expansion and achievement of their nationally determined contributions, NDC goals under the Paris Agreement. The GGGI also plans to work with individual OECS countries to facilitate country-level implementation of OECS policy recommendations, especially in the areas of energy, sustainability, and climate adaptation. The new GGGI office is located at the OECS headquarters at Monfortune. And stay with the NTN Nightly. Up next, Primers Hutchinson is here with the NTN Nouvelle Arquéon. The point is that all of this is done to save water. The water in the room is filled with a single pack of water. Also, the water in the pack is taken out of the water.  The toilet bowl will be wet if the toilet bowl is wet before the flush. The toilet bowl will be wet if the toilet bowl is wet before the flush. The toilet bowl will be wet if the toilet bowl is wet before the flush. The toilet bowl will be wet if the toilet bowl is wet when a bucket of water is wet. The toilet bowl will work as well as to exchange all the water and electricity. This is the Haudenosaunce Commission. Welcome back. We join Primers Hutchinson for the NTN Nouvelle Arquéon. Mr. Mdm, Department of West Coastal Ability and for information, the Government of G.I.S. and the National TV, M.T.N. and Prime Minister Hutchinson. I would like to ask the International Human Order to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV to give me $115 million which I have started. I would like to ask the National TV to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million which I have started. I would like to ask the National TV, M.T.N. to give me $115 million


Soldiers with 2nd Battalion, 2nd Aviation Regiment trained with Marine Wing Support Squadron 172 on Okinawa. Flying in on a Black Hawk helicopter, the soldiers from the 2-2 took to the skies from Kadeena Air Base and landed at a simulated forward refueling point. The refueling point on Camp Schwab had Marines standing by, waiting to get the helicopters, the fuel they needed. Put a farp out here, what that does is gives us rapid ability to refuel and be able to do continuous operations without having to fly back to Kadeena. It's about a 2-hour turnaround for gas down there where this is about a 15-minute turnaround so it really maximizes our ability to train. The bolt fuel specialist from Marine Wing Support Squadron 172 quickly attached the fueling lines to the Black Hawks to get the helicopters ready for their next flight. It's not just for them, it's also for us Marines. Junior Marines making sure we get the experience needed so if we're ever called out for deployment we know what we need to do, we know how to work the system just to get that experience out there. Continuing the joint operation, soldiers from the 2-2 picked up infantry Marines to transport them to the next part of the exercise. I'm Lance Corporal Eric Waddell, Camp Schwab, Japan.


This is Classics of Liberty from Libertarianism.org and the Cato Institute, narrated by Caleb Brown. Today we have two selections by Adam Smith, the man of system and labor and commerce. Adam Smith's The Theory of Moral Sentiments included this passage, The Man of System, on two distinct ways of seeing the world, spontaneous order versus planned economy. The man whose public spirit is prompted altogether by humanity and benevolence will respect the established powers and privileges even of individuals and still more those of the great orders and societies into which the state is divided. Though he should consider some of them as in some measure abusive, he will content himself with moderating what he often cannot annihilate without great violence. When he cannot conquer the rooted prejudices of the people by reason and persuasion, he will not attempt to subdue them by force. But we'll religiously observe what, by Cicero, is justly called the divine maxim of Plato, never to use violence to his country no more than to his parents. He will accommodate, as well as he can, his public arrangements to the confirmed habits and prejudices of the people and will remedy them as well as he can, the inconveniences which may flow from the want of those regulations which the people are averse to submit to. When he cannot establish the right, he will not disdain to ameliorate the wrong. But like Solon, when he cannot establish the best system of laws, he will endeavor to establish the best that the people can bear. The man of system, on the contrary, is apt to be very wise in his own conceit and is often so enamored with the supposed beauty of his own ideal plan of government that he cannot suffer the smallest deviation from any part of it. He goes on to establish it completely and in all its parts, without any regard either to the great interests or to the strong prejudices which may oppose it. He seems to imagine that he can arrange the different members of a great society with as much ease as the hand arranges the different pieces upon a chessboard. He does not consider that the pieces upon the chessboard have no other principle of motion besides that which the hand impresses upon them. But that, in the great chessboard of human society, every single piece has a principle of motion of its own, altogether different from what the legislature might choose to impress upon it. If those two principles coincide and act in the same direction, the game of human society will go on easily and harmoniously and is very likely to be happy and successful. If they are opposite or different, the game will go on miserably and the society must be at all times in the highest degree of disorder. In this next selection, this time from The Wealth of Nations, Adam Smith discusses prices in terms of labor and happiness. As it is the power of exchanging that gives occasion to the division of labor, so the extent of this division must always be limited by the extent of that power or in other words by the extent of the market. When the market is very small, no person can have any encouragement to dedicate himself entirely to one employment for want of the power to exchange all that surplus part of the produce of his own labor which is over and above his own consumption for such parts of the produce of other men's labor as he has occasion for.  But after the division of labor has once thoroughly taken place, it is but a very small part of these with which a man's own labor can supply him. The far greater part of them he must derive from the labor of other people and he must be rich or poor according to the quantity of that labor which he can command or which he can afford to purchase. The value of any commodity therefore to the person who possesses it and who means not to use or consume it himself but to exchange it for other commodities is equal to the quantity of labor which it enables him to purchase or command. Labor therefore is the real measure of the exchangeable value of all commodities. The real price of everything, what everything really costs to the man who wants to acquire it, is the toil and trouble of acquiring it. What everything is really worth to the man who has acquired it and who wants to dispose of it or exchange it for something else is the toil and trouble which it can save to himself. People of the same trade seldom meet together, even for merriment and diversion, but the conversation ends in a conspiracy against the public or in some contrivance to raise prices. It is impossible indeed to prevent such meetings by any law which either could be executed or would be consistent with liberty and justice. But though the law cannot hinder people of the same trade from sometimes assembling together, it ought to do nothing to facilitate such assemblies, much less to render them necessary. Those were two selections by Adam Smith, the man of system from the theory of moral sentiments and labor and commerce from the wealth of nations. Find more classics of liberty at libertarianism.org.


Well records are meant to be broken and now one local couple is trying to make it into the record books. Haiti Clotter shows us how they are hoping to write themselves into history. When Roy and Cynthia Booth aren't operating Roy's comics and games in Bemidji they are attempting to break records. The couple has an opportunity to be a part of the Guinness World Record books by surpassing the current record of more than 50 existing contributing writers in an anthology of short stories. I took a a chapter from a novel I've been working on and just converted that into a short story. It's a YA novel, a fantasy novel about a young man who was a third-generation privateer. A writer from South Africa challenged a current record holder saying he could have 100 writers participate in the series and publish a book. They wanted certain field like turn stories in a certain period of time and since we worked together on the other side of things he thought I would be a perfect fit for it. Roy says some of his writing comes from his nightmares he uses a dark fiction part of it to create stories. For Cynthia writing dark fiction in poetry is usually her style but she wanted to do something different this time. That's great that's a part of history which makes it absolutely incredible and unique. Roy says this is a big deal to him because it's something that can go in his obituary. This achievement can also give Bemidji bragging rights. We always have to explain to people where is Bemidji they've never heard of it so it's it kind of does put this area on the map in a way. The booths have worked on several projects together but this is one special project they can enjoy as individuals. Usually it's it's it's it's Roy and Cynthia, Cynthia and Roy but we're separate authors on this one and I really get a kick out of that. Yeah that was nice. The collection of stories titled CEA Greatest Anthology Written is available to pre-order now in Bemidji, Haiti, Clowder, Lakeland News. The record of more than 100 stories will be verified after 1000 paperback copies are printed and sold. Roy's piece took him about six hours to complete and he's written 130 books and 50 under a pseudonym. Wow pretty impressive. If you've enjoyed this segment of Lakeland News please consider making a tax deductible contribution to Lakeland Public Television.


Alright guys, so today I want to talk a little bit about the Apple Lightning to digital AV HDMI adapter. Now I'm going to showcase to you how to use it and also what to use it for, so let's dive in. So you have a HDMI port there but you also have a lightning port to use it. You can't just use the HDMI port, it needs to have a power coming into the actual adapter using the lightning port cable as well. So let me go ahead and showcase to you guys why I would use this and how to set it up. So now that I've connected the HDMI cable and a 2 meter lightning to USB cable there, I can just connect it to my iPhone. There is a compatibility list so I'll leave a link down below where you can buy this so you can check out the compatibility list. All I have to do is connect it, the HDMI cable is connected to that little monitor back there. You can see it's now started to mirror the screen. So you can see I'm just scrolling through. It's pretty responsive, it's almost instantaneous. Now let's go ahead and see what I would specifically use it for. But before I do that, just to showcase to you guys, you can actually orientate it both ways as well. So you can view things in landscape if you want to browse around. And I'll showcase some other apps on how you would use this on a bigger monitor or even your TV. So let me showcase to you guys how to do that. Right so one other use case is I've mounted my phone onto this overhead rig and I use this for my unboxing videos. So I have a box on the table and I'd like to record the video on top of it whilst also recording the main footage from a distance while the main camera is on a tripod at the back. Now this would make it much easier for me post editing so that I can switch between both footage rather than having to switch my camera and move it manually. Mount it on top of the overhead rig and then mount it back on top of my tripod when I want to record different parts of the footage. So this makes things a lot easier. The key thing to remember is with this camera and the adapter, the camera opens in a single orientation so on the monitor I'm only able to see it in vertical view like that. But I can zoom in with my fingers on the actual phone just to adjust the view on the screen. Now this will save me a lot of time so that I can just start recording two things at the exact same time and I can just switch between them both. So that's one use case that I will really use this adapter for. So let's see what other use cases we have for it. Alright guys so I've now connected this to my LG monitor. Let's see what else we can do. I'm going to open up Netflix because I think this will be really great to take with you if you go to someone's house and you want to play something on a larger screen, another TV or anywhere you go. If you just open up a video so let's say for example I'll play Queen's Gambit. Now this is where you can change the orientation so it will play full screen. This then becomes a remote control on your iPhone whereas the screen itself would be the actual video. And you can see it's playing very well. The speakers and the audio would then start to be outputted from the source that you've connected it to so you need to make sure that there is inbuilt audio to wherever it's connected whether it's a TV or an external monitor. And you can control this by skipping forward like so. And it works flawlessly and the picture quality is absolutely amazing. It's pretty much as if you was going to open up Netflix on your laptop connected to the monitor or directly on your TV. It's almost as good as that. That's another use case. You can also use this to browse YouTube and play videos there. Again with all of the other streaming services like Amazon Prime and Disney Plus and all that kind of stuff it should work exactly the same way. If I go into YouTube for example let's go into one of my videos. So let's play this one. Automatically I don't need to change the orientation of my phone. By default YouTube will play in a full screen landscape mode. So for me that is a quick instant connection. So wherever I go all I need to do is just take this tiny little adapter with me and I will be able to connect it and play it with any TV in my friends house my other family members house or even when I go to an office it's very convenient to do. So even if you have presentations on here for work purposes you can connect to a monitor at work with this very easily. Although you do need to make sure you take your lightning cable with you as well because this adapter would need power going into it. So that's it guys. It's pretty straightforward. I'm very happy with this. It works out of the box. I did have no problems connecting it straight away. I do have the iPhone 12 Pro so make sure you check the compatibility list down below. Other than that if you have any other questions about this adapter let me know. I hope you subscribe. I've got tons more really cool videos coming out like this in the very near future. Hope you like this video and I'll catch you guys next time. Take care.


I have not slept at all. When I sleep, I sleep. Like dead. Yes, somebody wanted to measure the gamma waves in my brain. It's like one of my sheets is saying you're dead. So I can ask you a question about awareness. For example, when I sleep, I'm not aware of that. Or when I dream, I'm not aware that I'm dreaming. I think it's real. So I wanted to ask you what happens to you when you sleep. Can you go back to your room? I told you I sleep. I don't know. I don't know. I thought every human being has to sleep. Or what can we do about that? To be more aware of it and why I sleep. One thing is, unfortunately, there's no entertainment in my sleep. I don't dream. I have not slept at all for a long time. There's simply no dream. When I sleep, I'm like... I sleep like everything is dead. That's why I sleep very few hours, because I sleep like I'm totally on and breathing on. So you're aware that you sleep?  Mental alertness is different. Awareness is different.  But that's not right. It's not true. A wild animal is far more aware than you are. Is that so? That's not true.    Awareness is not different from aliveness. Your aliveness is awareness. You know that you're alive only because you're aware, isn't it? Isn't it so? That is how would you know you're alive?  When we talk about awareness, we're not saying you're not at all aware. If you're not at all aware, you would know that you're here. You're aware. It is just that you are not aware of the whole scope of what this is. You're only aware of a certain part of what this is. If we want to look at this as a mechanism, this is a kind of mechanism, an incredible mechanism, but it's still a mechanism. Only in parts you're aware. You're not aware of the whole mechanism and the possibility of what it is. It's in that context we're talking about awareness.  Awareness cannot be switched on and switched off. It's just on. Life is awareness, please see. There's no other way. What you call as life is a certain level of awareness, isn't it? So are you aware? Yes, I am alive. Am I mentally alert? Not at all. Yes. There's no mind in me. When I sleep, I sleep. Like dead. This happened to me about 13 years ago or so. Usually I never subject myself to these things. I think it's an indignity. But I was caught up in an obligation where I had to give in to this and somebody wanted to measure the gamma waves in my brain. And they said, you want to measure? So I gave it to this and they wired me up all over. If I knew how many wires they went in the last moment, I would have said, no, but one by one by one they fixed it all over. Then they said, you meditate. I said, I don't know any meditation. You teach meditation. That's different for people who do not know how to be. I teach meditation but I don't know any meditation. I never meditate. I said, say, if you want, I can simply sit still. Is that okay?  So I simply sat. Then after some time, I feel somebody doing this, this, this. I thought, okay, they're putting one more wire or something. They started poking me more and like this. They were looking at me like this. You know what? Either something has happened, my eyeballs have popped out. I don't know how I look like an alien. What have I done? What happened? I didn't change shape or something. They said, machines are saying you're dead. At least you could be brain dead because all of them are running flat. I said, that's a great diagnosis you can't. So, about the brain being alive, I can't vouch for it, but I'm alive, you can see that. The rest of it, it's up to you.  That's why you have not given that kind of ears you can have.  Just a little. You don't have to sleep like that. In your bedroom, it's not an issue of survival. It's not an issue.  Now, if I go sleep in the wild, I sleep in a different way. When I go out on camp, I don't pitch a tent, I just sleep on the tree. So, then I sleep in a different way. I'm constantly alert because I'm on a tree branch. Either I could drop myself like the apple that fell long time ago or an elephant could pluck me down or a snake could get me. So, now I'm alert mentally. But when you're sleeping in your bed and if you're not married, you can switch off your survival process. There's no danger for you. So, mental alertness is necessary for survival. It's not awareness. Awareness is anywhere, man. Nothing to do about it. If you take away the distractions, it's fully on. It's always fully on.  So, whatever you're trying to do, whatever form of meditation you're doing, all you're trying to do is take away your involvement with the distractions so that this aliveness becomes a reality for you.


Fatima Al-Aleela, the young daughter of Aba Abdullah Al-Hussain, her heart is with her father. She wants to be in Karbala awaiting the news. Yet of course, when they all return, many are missing.


Okay, let's get started. Thank you very much everyone for joining us today. Welcome to today's CNCF webinar, how to run Kubernetes securely and efficiently. I'm Jerry Fallon and I'll be moderating today's webinar. We'd like to welcome our presenters today, Joe Pelletier, VP of Products at Fairwinds, and Robert Brennan, Director of Open Source at Fairwinds. Just a few housekeeping items before we get started. During the webinar, we're not able to talk as an attendee. There's a Q&A box at the bottom of your screen. Please feel free to drop in your questions in there and we'll get to as many as we can at the end. This is an official webinar of the CNCF and as such is subject to the CNCF Code of Conduct. Please do not add anything to the chat or questions that would be in violation of the Code of Conduct. Be respectful of your fellow participants and presenters. Please also note that the recording and slides will be posted later today to the CNCF webinar page at cncf.io slash webinars. And with that, I'll hand it off to our presenters for today's webinar. Take it away. Thanks a lot. Hello, everyone. Thanks for joining today's webinar. My name is Joe Pelletier. I head up the product side of things at Fairwinds. And we're really excited today to give you an overview of how to run Kubernetes securely and efficiently. We will spend a little bit of time today to talk about some of the reasons why organizations choose Kubernetes as well as some of the challenges they experience and some of the technical implications for the security and efficiency angle here. We'll also share a little bit more about configuration validation solutions and how they can help you with this challenge. So let's take a quick step back and just look at containers. And we all know that containers have really changed how software is developed. And at its core, container technology allows applications to be packaged and distributed across a number of different platforms. And a lot of this software packaging is shifting left into the development process. Developers are taking a lot more responsibility for containerizing their applications. And as they embrace container orchestration platforms like Kubernetes, they may also be exposed to the configuration of how those containers run in production. The second major trend that we're seeing is that container adoption is growing quickly. And according to Gartner, by 2023, 70% of enterprises will be running at least two or more containerized applications. Finally, Kubernetes has become the de facto standard for container orchestration and it's entering the mainstream. And in many cases, new projects or new development teams might be embracing Kubernetes as their platform of choice for running containers in production. And some of the reasons why organizations choose containers in Kubernetes is really at its core to enable teams to ship faster. At the end of the day, there has to be a business ROI. And that ROI is often measured in terms of code deployment frequency, the mean time to repair for applying security patches or updating a bad image, as well as the ability to provision and create new resources. And so when you combine containers in Kubernetes technology with cloud and infrastructure as a service, you can find that teams are able to get to production with their application a lot quicker, giving these businesses an order of magnitude and improvement in terms of their development process. But despite a lot of these innovations with containers and CUBE and a lot of the great business benefits that can come with it, there are still challenges. And there was actually a CNCF survey from 2019 that really helped unpack what some of those key challenges might be in using and deploying containers. And what they discovered was there's actually, the first challenges around that cultural shift, moving from containers to Kubernetes is really a change for a lot of development teams. And with that change comes new best practices, new concepts to learn and really new tooling. And so we'll talk about that today at a core. The second is really the security angle. With all that change, there's new security paradigms that need to be considered. And that also leads into the third challenge which is complexity. And complexity from our experience at Farowinds goes beyond just the technical complexity of containers and CUBE, but it's also the organizational complexity. And we'll speak to that in just a bit. So let's kind of poke at first the cultural shift and what's changing as part of the development process as development DevOps teams and security teams come together to embrace container and Kubernetes technologies. And depending on the organization, the development team might actually be the team responsible for building those container images. But we're also noticing that the responsibility around configuration, so the configuration for how those containers run into Kubernetes infrastructure, that is sometimes shared between development and DevOps. And finally, the DevOps teams and the SRE teams, they're responsible for maintaining the base core platform of CUBE. And that might mean selecting the right add-ons, configuring those add-ons and keeping all those configurations and software up to date. And finally, security. The security team definitely has a view and a set of requirements across the whole SDLC. And as it applies to containers and Kubernetes, there's new ramifications there as well. So here are some specific examples though of what needs to be considered from a technical perspective as organizations leverage containers in CUBE. At the container level, really understanding what your known vulnerability exposure might be and whether or not you're using trusted images becomes a key part of the changes that take place as you leverage container technology. And similarly on the configuration side, there's a number of different configurations that either can create security challenges or introduce reliability or efficiency challenges. On a security perspective, that you might over-permission a container. You might accidentally introduce privilege escalation or you might be missing readiness probes, liveness probes or the resource requests and limits that specify to Kubernetes how to scale up and down your app. And we're gonna cover some of these very specific examples later in the presentation to give you a sense of how these changes to the development process introduce new requirements that need to be considered. That other area that we talked about was really the complexity. And as organizations leverage containers in Kubernetes, different teams need to come up to speed on what this means for them. So with the developer, a lot of times the developers just really trying to focus on writing their application code and getting their applications shipped to production as quickly as possible. They're paid to execute on a roadmap and develop new features. And sometimes for the developer, the fastest way to get something shipped might be over-provisioning resources of saying, I just need to get this to run so I'm gonna allocate a lot of CPU and memory or it might be creating permissions that allow the application to run potentially insecurely. And it's just because they wanna get to production as quickly as possible. And a lot of that has to do with these new technical complexities that come into place with containers in Kubernetes. On the other end of the spectrum, you might have the SRE or the operations team and they're trying to ensure availability and reliability of the apps. And so as these teams receive applications and configuration from development, they're going to be looking for a specific set of best practices being followed. Like they wanna, for example, make sure that the health checks are implemented. So Kubernetes knows how to restart that application and scale that application accordingly. And finally, the security team and the leadership team, they wanna make sure everything that is running in production is secure. And that's where ensuring that you have your security requirements set as well as your checking for those things like known vulnerabilities and containers become really important for securing the infrastructure. So at this point, I'm gonna actually ask my colleague, Robert, who heads up our open source here at Fairwings to share a little bit more around the technical aspects of where security and efficiency challenges may emerge in cloud-based infrastructure. Thanks, Joe. So there's really three layers of this stack you wanna be thinking about as you develop a strategy around Kubernetes. At the lowest layer, you have the container level. This is where you wanna be thinking about the operating system you're running on top of and thinking about any CVEs that might exist inside of those container images, either at the operating system level or in the libraries that are being installed on top of that operating system. And you also wanna think about how those containers are being pulled as they get deployed into your cluster. One layer up from that, we have the deployment configuration. So this is basically how Kubernetes is running your container inside of the cluster. And here you wanna be thinking about how this configuration is set up. Are the containers being given excessive permissions to have too much access to the host? Are they being configured in an efficient way? Do they have health checks set? Are the memory and CPU limits and requests being set appropriately? All that kind of configuration.  So here you're thinking about what add-ons are installed? Are those add-ons up to date? Is role-based access controlling in place? And is the principle of least privilege being applied? How are the cubelets being configured? Are my node sizes being chosen appropriately? Those sorts of things. So today we're really gonna focus on those first two layers. So namely the container layer and the Kubernetes configuration layer. And the difference here is that at the container layer, we're really thinking about the underlying operating system and the libraries that are being installed on top of it. Whereas at the Kubernetes configuration layer, we're thinking about how that container runs on a host node. What permissions does it have? So at the container level, really what we wanna be focused on are known vulnerabilities. So these might be vulnerabilities that affect the base operating system or might affect libraries that you've installed on top of that operating system. And these vulnerabilities could be exploited in really any number of different ways. They could allow the user to gain root access to the container itself, to the host that's running the container. They could allow the user to, the attacker to exfiltrate data, to trigger a denial of service. Really any kind of vulnerability could crop up in these libraries. One big issue that we see frequently is as teams will scan their containers once, say at build time or at deploy time, and think that they're safe as long as those scans passed. But as new CVEs get announced, your images that pass the first time could become vulnerable. So it's important to be continuously scanning these images over time. Another issue we see moves up to the Kubernetes configuration level, which is where you specify how those containers are going to be running inside your cluster. Kubernetes provides a lot of configuration that allows you to say give your containers a little bit more access to the host nodes. Typically your applications don't need this access, but if an application isn't running, often the easiest way to get it working is to just start adding new permissions here. Developers are often not certain exactly which permissions their application should need in order to run. If you have these permissions set, overly permissively, it could allow an attacker to gain access to basically spread their access if they attack this one application, spread that access throughout the cluster. So say if your container is running as root, that could allow the attacker to gain access to the host node. Another common misconfiguration issue is not setting health pros on your workloads. This is technically an optional part of the workload configuration, but it's highly recommended for all production deployments. This is really how Kubernetes can tell if your workload is healthy or not. It will repeatedly call the liveness and readiness pros to see whether your workload is responding appropriately. This is really important just to make sure that if your application does crash or become unresponsive, Kubernetes can tell that, kill it and start a new pod, and to make sure that as you release new deployments, Kubernetes can scale the old deployment down and scale the new one up appropriately so you don't experience any downtime during that process. Finally, another issue we frequently see is inappropriately set resource requests and limits. The big issue here is that it's hard to know ahead of time exactly how much CPU and memory your application needs in production in order to run appropriately. So often developers will either completely neglect to set these settings or they'll over provision. They'll ask for an excessive amount of CPU and memory, far more than they actually need just to know that their application isn't going to crash in production. And this can lead to huge cost overruns. You may be spending a lot more money than you actually need because developers have requested twice as much memory than they actually need. It can also lead to Kubernetes not being able to detect legitimate problems with your application. Say if there's a memory leak inside your application and you've got 10 times the memory you actually need requested, that memory leak is going to continue on for a lot longer without Kubernetes detecting it. So to recap, you can see security issues from both the container level where known CVEs are running inside your containers or at the deployment configuration level where a container has permissions to say run as root on the host. You can also see efficiency issues with missing health probes and with resource requests and limits not being set appropriately. That's great. Thanks, Robert, for sharing some of those technical details. It sounds like a lot of these issues come into play once organizations leverage Kubernetes and containers at scale and then need to have a way to monitor these configurations and stay ahead of these problems before they occur. Absolutely, yeah. That's actually kind of gives way into a new category of open source and software tooling that we're seeing in the Kubernetes space called configuration validation. So a lot of times, when it comes to ensuring that the containers are being tested for known vulnerabilities and that the configuration is also being inspected for the things that Robert went through, you need to leverage these configuration validation solutions so that DevOps teams can maintain those consistent configurations for the containers, the deployments and the overall cluster infrastructure as more and more teams end up leveraging and deploying into Kube. A lot of these configuration validation solutions are providing organizations with the findings as well as the fixed recommendations usually in the context of a YAML snippet or YAML code as well as controls for policy-driven enforcement that allow you to prevent these problems from being introduced into the cluster. And so ultimately, the business value of these configuration validation solutions is a way to reduce risk, save money and just avoid wasting a lot of manual effort that the ops team would ultimately have to take on. So we wanted to kind of give some recommendations for any organization that's looking to implement configuration validation solutions, sort of what are the key steps that you'll need to take in order to move in this direction. And really the first step is sort of the discovery step where you need to get the data around where you have potential misconfigurations around security or efficiency or even reliability challenges. Fortunately, with the Kubernetes ecosystem, there's a prolific number of open source tools and options out there. And a lot of them are really great for getting a grip on specific challenges or specific issues. Best place to start is going out and researching to find the right tools for the right specific area, whether it's scanning your containers for known bones or checking your deployment configurations or inspecting your cluster. Once you find those tools, you have to script them so that they can run on a regular basis. And then you'll have to do some work around analyzing the data. So that might mean deduplicating findings, ensuring that they have the right severity on them so that you can prioritize which of the issues that you wanna fix first. And then make sure you have the reporting and the integrations into dashboards and into downstream systems like Slack that may allow you to notify the end users at the right time of when they might, there might be a configuration challenge. Once you get the data though, the next step is really to assign ownership, right? You wanna make sure that there are owners to these things and that you're getting the information to the right end user. For example, like a CDE might be something that a development team has to take on, whereas an out of date add-on in the Kubernetes infrastructure or a misconfigured deployment might be something that a DevOps team or an SRE team may have to take on. And so depending on what you're finding as issues, you're gonna have to assign it to the right owners. And ultimately, we talked about how containers in Kube are new. They're changing the development process. The best solutions will provide you with some amount of remediation guidance so that you know how to fix these issues as you go along.  And fortunately, there's three different ways or three different paths you can choose. We do see some organizations building their own tooling so that they're taking their best practices and forcing that as their own auditing standards. And that's definitely one path. The second one is leveraging some open source and we'll share with you today some recommended open source solutions. And the third is leveraging a purpose-built platform that focuses on configuration validation as its core feature set. So the first one is around building your own tools. Obviously, the advantages of this approach is that it's gonna be fully customized to your needs and it might give your team some room to even learn about Kubernetes in the process of building these tools so that you're defining the best practices that meet your organization specifically. But as with any effort like this, it's gonna require some amount of time outside of normal business as usual activities. You're gonna have to plan for this. You're gonna have to allocate some engineering resource and then you're going to have to maintain the tools that you do build. Some organizations go down this path and it works really well for them. But there is an overhead associated with that mostly around the long tail of maintaining these tools as the Kubernetes ecosystem evolves. The next one is really focused on leveraging open source tools. And as we mentioned earlier, the Kubernetes ecosystem has many, many different open source options. We have a link here to a great GitHub page that provides a list of awesome open source tools. And because it's open source, they're free. You can download and start using them right away. And many of the solutions too are very powerful. They're more than just small little tools. They are powerful solutions that enable you to inspect and audit your Kubernetes environment. The challenge though with some of these tools is that they are usually focused on just one doing one thing really well, which means that you might need to use multiple tools in order to get a well-rounded view at your security challenges or your efficiency challenges. There's definitely different, each tool comes with its own way of running it and using the data. So it can be hard to operationalize them when you have to consume the data in multiple formats, which means that you might also have some challenges in getting support if it's just an open source project and there's no vendor that offers support, it might be a challenge to get the help you need to interpret the data and use these tools at scale. Which really leads, those two different options really lead into a third option, which is leveraging a purpose-built platform. And Fairwinds does have software in this space called Fairwinds Insights. There is a use case around being able to aggregate the findings and leverage the tools that are best-of-breed in the Kubernetes ecosystem. So you have one platform that can audit your Kubernetes infrastructure for security, as well as efficiency and reliability challenges. The great thing about this is that it is ongoing support, it integrates the best-of-breed open source so that you still get to leverage those same great tools. But the value is really on adding, organizing the data, helping you prioritize it, and ultimately implement policies so that you can enforce the rules specific to your organization around what's allowed and what may not be allowed. Obviously the downside of solutions like this is it generally requires some amount of budget in order to pay for these tools. And some of the solutions may not be fully open, open source, they might contain some open source components and then have a certain amount of commercial components to it as well. So if you're interested in purpose-built platforms, the best ones that we've seen have the opportunity to prioritize findings from multiple open source tools. So having that framework where the vendor is adding more and more tools over time and making it easy for you to integrate data from third parties into a single pane of glass, that is one of the key components of a configuration validation solution. You'll also wanna be able to integrate the data into downstream systems that you use. So that might mean CICD systems, Slack or chat ops systems, as well as monitoring tools like Datadog or Grafana. The other key consideration here is run these configuration validation platforms. They really need to run in multiple locations. You wanna think about it as a way to check these configurations in the CIE process, as well as right before deployment so that you can have a validating webhook that allows you to validate whether or not the deployment's meeting your best practices, as well as in production. So you can understand what's already gotten into production that may or may not be in compliance with your standards. Finally, any of these solutions should also be able to address containers, configuration and cluster level type of risks. So here's a brief kind of illustration that shows the ideal integration points, being able to integrate into a CICD context. Some of these tools are great for running earlier in the process like scanning your containers for known vulnerabilities.  That's also something that can operate on the file that comes from your Git repo. At the pre-deployment stages, as well as in the cluster, you might have an opportunity to do a lot more security scanning as well as resource efficiency and optimizations. So one example is Fairwinds has an open source tool that is called Goldilocks, which helps you with optimizing your workloads to be resource efficient. So that means we're going to give you recommendations for setting your CPU and memory requests and limits so that you can keep your workloads right sized and avoid them from being starved in production in the sense of some workloads not receiving enough compute or resources, as well as not spending too much money and over allocating those back compute.  You know, when you can configure, when you can validate your Kubernetes configurations, you're putting your business in a position where you can improve the overall security posture of your containers that are running, as well as the configuration that describes how those containers should run in Kubernetes. With configuration validation, you do have the opportunity to prioritize so that you're not just addressing all the problems. It will help you understand which are the most important. The second business benefit is going to be really focused on cost and efficiency. Just, you know, security is very important, but so is also making sure that your workloads are running efficiently and reliably so that you're not overspending and you're not also starving some of your most important applications. And finally, any of these platforms really need to demonstrate not only a financial ROI from a cost or security perspective, but also a time savings perspective. How can you ensure that your ops team is not manually inspecting these configurations on an ongoing basis? And how can you provide a platform that allows you to bridge that gap between developers, SRE teams, and security teams so that they all have a single pane of glass to collaborate from? So with that, we wanted to make sure that you were all aware of a great open source guide or a great guide that we have on thefairwings.com around helping you understand the best ways to manage Kubernetes configuration for security, efficiency, and reliability. Or if you're interested in trying out some of the tools that we had discussed today, feel free to check out fairwings.com for a free trial of our insights offering. And with that, I'll turn it over to Jerry for opening up any sort of Q&A that we may have at this stage. Okay, well thank you both for a wonderful presentation. We have plenty of time for a question, so if anyone has any questions, please feel free to leave them in the Q&A box and we'll get to as many as we can. So there's a question we have here. What is the best way to get started? Yeah, that's a great question and I'll go and take that first.  But another great way to get started is just by going back to the open source community, the Kubernetes open source community and looking at the individual tools that may exist. Give you an example, we at Fairwings have developed a open source solution called Fairwings Polaris, which you can run very quickly to understand where you might have certain configuration issues with the workloads running in your cluster. That's a solution that we see a lot of folks gravitating towards in order to get a quick view in terms of where their risks might be today. Similarly, there's also a variety of great container scanning open source out there. Trivif, which is maintained by Aqua Security is a fantastic container scanning open source tool that many organizations use to understand the risk of their containers. And finally, we mentioned about Fairwings Goldilocks and other open source offering that focuses on resource optimization. So there are great open source starting points. I think that is a way to get started if you're focused on a very particular problem. If you realize that you find value in all these tools and you wanna run them on a consistent basis, that's a great point to then graduate to a configuration validation platform like Fairwings Insights. Robert, I don't know if you have anything else you wanted to suggest though as well. No, I totally agree. I think in terms of getting started, the open source community is, that's where you're gonna get the quickest bang for your buck in terms of just being able to get a quick overview of what's going on inside your cluster and maybe where the biggest issues lie. And then as you mature along your journey, I think a larger platform like Fairwings Insights is very helpful. Do any of these open source tools confirm to security benchmark standards? Yeah, that's a great question. So there are some standards out there like a popular one is the CIS Kubernetes benchmark. That is a Kubernetes security benchmark that's published by the Computer Information Systems Consortium. I may have gotten that wrong, but it's a very common one for understanding from an automated perspective and a baseline perspective is my cluster aligned with security best practices. There are some great open source implementations for that benchmark. I believe we leverage one called CUBE Bench which is also I think managed by Aqua Security. It's an open source tool so anyone can use it. And it gives you a quick view in terms of where do I line up right now in terms of my cluster as it's designed and running? Am I violating any sort of obvious compliance in security issues? And so that's a great one to start with. We do hear about standards like PCI and HIPAA and SOC2 and depending on the specific requirement there, there are some Kubernetes aspects to that, but that's where you probably need to look at more commercial type offerings. Does Fairwinds Insight also take care of application level misconfigurations or vulnerabilities that could be present due to bad programming? Good question. I think that's, I see they're referring to injection as an example. So Fairwinds Insight does not focus on the actual application code. There are a variety of application security type solutions out in the market that are open source and some commercial, but we focus more at the container, the Kubernetes configuration layer and what's running in the cluster. So we're focusing kind of on the layer just below that. If you are interested in application security solutions, there are definitely some open source ones out there. And in general, those are great complimentary solutions to what we're doing here as well. When you think about the need to validate your Kube configurations and test your containers, that is something that you should do in conjunction with testing your application code as well. Any more questions at all? Are there other pen test tools for Kubernetes besides Aqua Security? Yeah, that's another great question. I think there's probably several dozen different auditing tools I would say in general for Kubernetes. We actually shared a link earlier in the presentation to a number of those tools. I'll actually just put it here on the screen for a second. There's great lists on GitHub that share lists of auditing tools. Some of them might be penetration testing specific as well. What Farowinds has found is that you actually wanna take kind of a comprehensive perspective. So while you do wanna do pen testing tools, you also wanna make sure you're implementing checks on your containers, on your configuration, as well as what's running in the cluster itself. And so that will give you more of a comprehensive view at the configuration and security posture of your infrastructure. But a great starting point might be going to this GitHub page and looking at some of the auditing tools that they have available. Okay, anyone else? If anyone does have questions, please leave them into the Q&A box. It'll be easier for us to spot if you can. Thank you. Anyone at all? All right, well, no one else has any other questions and we'll wrap this up a little early today. I wanted to thank both Robert and Joe for their presentation today. Thank you to everyone for joining us. Have a wonderful rest of your day. Thanks folks. Thank you.