Personal Finance PowerPoint Presentation Dental Insurance Shopping Prepare to get financially fit by practicing personal finance. Remember that insurance is part of our long-term risk mitigation strategy using the adage of measure twice cut once, putting a formal plan in place, looking something like setting up our goals, setting up a plan to meet those goals, putting the plan in action, reviewing the result, repeating the process periodically. We're looking at the dental insurance. Most of this information can be found at Investopedia. Dental insurance plans find the best deal for you, which you can find online. Take a look at the references, the resources. Continue your research from there. This is by Ronnie Sandroff, updated March 31, 2021. In prior presentations, we've been talking about insurance in general, then focusing on the health insurance, noting that health insurance can be more complicated due to the health insurance industry complexity, as well as the laws and regulations around health insurance industry and health insurance itself, noting that it's a little bit different than when we think about the other kinds of insurance like liability insurance and the property insurance and the life insurance, for example, where we're often safeguarding against some future event that might be not likely to happen, but if did happen, would be financially devastating, thereby making it worthwhile to buy the insurance to safeguard against an event we hope doesn't happen, but if it did, it would be financially devastating. Similar thing can be thought of for the medical insurance in that we could have a medical problem that is financially devastating, that just pops up out of nowhere, that we hope doesn't happen, but if it does, we want to be insured against it. But we also have all those other kind of things that there's pressure for the insurance to kind of cover the maintenance kind of stuff, like the day-to-day kind of things, and that's where the deductibles and the copays and so on get a little bit confusing. The dental insurance, you'll remember, is similar in many ways to the medical insurance, can be easier in some ways because the dental insurance, it's kind of easier to categorize the types of things that are going to be covered under normal wear and tear kind of dentist procedures as to the whole medical field, can be much more complex. But it's also kind of confusing that the dental insurance seems to be more focused on whether or not you can buy the insurance to mitigate the day-to-day or routine costs because when you look at the caps on the insurance, it's a little bit different structure. On the medical insurance, we've got that out-of-pocket maximum, which is the ultimate, you know, the maximum that you might want to see if you could self-insure up to in the event that there'd be a problem, have a savings account to cover it, whereas the dental insurance has a fairly low cap, which caps the amount that the insurance company will actually pay, which might not be enough to cover, you would think, even fairly modest, but significant, you know, dental bills. So it's a little bit different structure on the dental insurance we want to keep in mind. Okay, buying affordable dental insurance may not be top of mind for most people, but it probably should be. In 2016, about 74 million Americans had no dental insurance. Most health insurance plans do not cover everyday dental needs, such as checkups, fillings, and root canals. So notice these kind of normal kind of day-to-day or routine over a life kind of things can be categorized a little bit more clearly when you're thinking about simply the insurance then when you're talking about more cosmetic type of stuff, possibly, which could also be in the dental, right? So you got this kind of crossover in terms of what's going to be categorized that would be covered in the dental insurance versus possibly medical insurance, for example. And then, of course, we've got the categories we've got to think of with regards to preventative versus non-preventative and so on. So and although health insurance does not cover some extreme oral surgery, such as jaw restoration after an auto accident, once again, although health insurance does cover some extreme oral surgery, such as jaw restoration after an auto accident, routine dental work is usually not covered. So again, you got kind of like that overlap, and when you're thinking about the big catastrophic event, then you might have some overlap which you would be covered for on the medical kind of thing, which of course would be would you have reconstructive surgery or something like that as opposed to normal wear and tear or maintenance on the teeth. So dental benefits plans are designed to fill the gap, whether offered by an employer or through a private insurer. Most plans have monthly premiums deductibles of $25 to $100 co-pays and an annual maximum benefit that the median is $1,500. One good argument for buying dental coverage is that many plans focus on preventative care. So obviously this is one of the arguments that's involved in the medical field in general. They're trying to get more focus on the preventative care if you can get people that are insured. If you were insured, then you might be saying, I'm going to try to maximize the benefit I'm getting from the insurance by doing all the preventative care because that's the stuff covered by the insurance company. So if cleaning and check-ups are free under the plan, you may be more likely to make and keep an appointment. And that could be an incentive. It can feel a little manipulative to me sometimes, but if you're buying the insurance yourself and you're saying, I'm going to buy the insurance because I think that might help and motivate me to take advantage of the free things that are under the insurance, the things that the insurance covers, the preventative stuff, and maybe that'll be an incentive for me to do that, then that could be a positive incentive. But I think it should be something that you yourself are trying to self-motivate as a tool. Otherwise, you might feel that that is a little bit coercive or something like that.  So what are your dental insurance needs? Here are some things to consider when estimating your family's dental insurance needs for the next few years and what they might cost. Do you have a dentist or a hygienist you like? So clearly you might start by saying, okay, am I going to someone I like? Similar with a doctor.  If you're not going to a dentist, then you might look for a dentist and then tailor the policy around the dentist, or you might look for a policy and then find a dentist within the network of the policy. Do you have a dentist or hygienist you like? If so, the best place to start looking for a dental benefits plan may be a conversation with your dentist or their staff. So you can start talking to the dentist about what kind of plans they might be a participant in. So find out which plans, if any, the practice accepts and whether it is part of any networks. Also inquire if the dentist participates in any discount programs or has an in-office plan. Are you willing to choose a dentist from a network list? So the other way you might look at it is if you've got the list set up for the network, then you have the plan set up, then pick the dentist that's within the network. You may be able to save money by choosing a dentist from a network list of a dental insurer. However, the least expensive plans offered by private insurers may have small networks. So check that there are dentists in your area who take any plan you are considering. So when you're looking at the actual plan first and you're just going to say, I'm just going to pick a dentist from the network whatever, you want to realize that the network might not be the most expansive network. So you might want to make sure that you do your research in terms of having a dentist that you think is appropriate within the network if you're going to start from that point. What type of care do you need? Most plans generally cover preventative care such as cleanings and checkups to estimate what the cost for the dental care in your zip code will be without insurance. Visit Fair Health or Healthcare Blue Book. So you can go to those websites and get an idea of the healthcare costs, which can help you to measure the pros and cons and the breakeven point possibly of the health insurance. So if you've been getting regular care, your dentist can help you anticipate what you might need in the next few years so they might be able to project forward. Well, this is the standard for people in your situation. Expensive dental care such as braces for a child or an adult can cost from $3,000 all the way up to $10,000 for complex cases. Dentures can cost thousands of dollars and implants even more. If you expect these kinds of expenses, it's worthwhile to investigate what kind of dental benefits can help the most. Can you wait 6 to 12 months for full coverage to kick in? Plans often have waiting periods up to 12 months before you are eligible for some expensive benefits such as the braces or dentures. So remember that that in my opinion is their way to try to handle the preventative situation for pre-existing conditions. So in other words, if you bring up the term pre-existing conditions, insurance companies go, no, we're not going to because it's a big political kind of thing. But obviously from an insurance standpoint, if someone has a pre-existing condition for dental condition, then buying insurance one day and then maxing out the policy the next day would not be beneficial to the policyholder. So they're going to try to screen for that by having that waiting period in place so that you can't basically do that strategy. But you got to know that, got to take that into consideration if you're putting together a realistic plan for risk management for the dentistry. So if you can wait, this kind of policy could save you money. If you can't wait, more expensive plans are available in which benefits start immediately. So you might be able to look at a plan and say, is there a plan I could get that doesn't have kind of that waiting period? But again, you would think the plan would be skeptical to do that because obviously you'd be buying the insurance to cover some pre-existing. But anyway, do you want cosmetic procedures? Cosmetic dentistry includes teeth whitening, veneers, gum lifts, and restrictive fillings or crowns. So most that's restorative fillings or crowns. Most dental insurance plans do not cover cosmetic procedures and plans that do may have a limited network and pay only a small percentage such as 20% of the cost. Dental discount cards which provide discounted services from a network of dental providers may be used for cosmetic procedures. You can see more below under dental servings plans in that case. Dental benefit options. Your location and where you get your health insurance often determine the dental plans available to you. Monthly premiums for individual coverage range from $20 to $80 on average. Both private and employer sponsored plans also have annual deductibles and annual maximum benefits of $1,000 to $2,000. So again, those are fairly low kind of maximum benefits because we just talked about the fact that the big procedures that could come into play could clear the $2,000 by a significant margin, you would think. And again, you might be able to self-insure up to a reasonable range around $2,000, although, you know, the plans will differ and those might roll over from year to year two. So if the plan's maximum benefit is not enough to cover your expenses, look for a plan with a higher maximum. So keep in mind that pre-existing conditions are not generally covered by dental benefits. If you had a tooth missing before the effective date of your coverage, for example, you may not be entitled to benefits. Here are the main sources for dental benefits plans. So one, employer-based dental plans. Most Americans, 77 percent in 2016, get dental insurance through their employer. So similar to the health insurance, you might have those plans or the group plans and so on through the employer. This is often the most economical choice because the employer pays for part of the premiums. So you might be able to get a benefit that would have tax implications and incentives like with the health insurance, which can make it beneficial to get the insurance through the employer. So it's important to check the policy before you enroll so you're not surprised by out-of-pocket costs. If a flexible spending account is available, consider using it for your share of the expense. Two, flexible spending accounts. Those are the FSAs. Any dental visit or procedure that treats or prevents a disease is eligible for FSA coverage, sometimes offered by employers along with insurance. Cleaning, x-rays, crowns, tooth extractions, dentures, gum treatment and more are included. However, cosmetic procedures such as teeth whitening, veneers or cosmetic orthodontia are not. Your dental office should be willing to help make sure services are covered under your FSA plan. So we've got number three, we've got the Medicare Advantage plans. Most people on traditional Medicare do not have dental coverage. Almost half of them have not been to the dentist in the past year and nearly 20% spent more than $1,000 out-of-pocket on dental care. Traditional Medicare does not cover dental bills except those associated with severe conditions that require hospitalization. Most Medicare Advantage plans, however, offer at least some dental coverage. Some plans pay only for preventative care while others have more extensive coverage. Some Medicare Advantage plans charge an additional premium for dental coverage. Several on AARP's best Medicare Advantage plans include dental coverage. Number four, we've got healthcare.gov and Medicaid under the Affordable Care Act. Dental coverage for people under 18 years of age considered as essential benefit and must be available for your child. But dental coverage is not considered an essential benefit for adults. So in that kind of makes sense, obviously, when your teeth are changing, it might be more of a requirement at that point. Some participants' plans for adults include dental benefits. In some cases, the insurer offers separate standalone plans for a separate additional premium for children covered by the Medicaid or the Children's Health Insurance Program, that's the CHIP, CHIP. Dental benefits are provided by the state. Some states also provide dental benefits to adults covered by Medicaid. Privately purchased dental insurance then insurance companies sell a variety of individual and family dental benefit policies online. You can choose a plan that covers only preventative care or a more comprehensive plan that also pays a percentage of costly procedures such as root canals, bridges and implements. In choosing a plan, check whether there are dental practices in your area that are part of the network. Number five, we've got the dental savings plans, often called discount savings or referred plans. This is a membership club for reducing dental bills. The discount company contracts with dentists who agree to reduce their fees to members. The discount usually applies to all services including cosmetic procedures, which is nice. To join a savings plan, you pay an annual fee that entitles you to discounted rates from network dentists with no annual maximum. So that's interesting. Some dental offices offer their own in-house discount plan with lower prices on services for patients who use that practice. People who require little dental work say just cleaning an occasional x-rays may save money using a discount plan rather than paying for dental insurance. People who have medical conditions that affect their teeth and gums or need extensive work may save more with insurance if they can stay under the plan's annual limit. The best way to decide is to compare the cost of a discount plan versus a dental insurance policy for your individual situation. What's the bottom line you might ask? That's a horizontal mark that goes under the last point of a discussion or math calculation, often time. We call it the bottom line because it's at the bottom. Any case, make sure you don't leave money on the table. If you enroll in dental insurance or use an FSA, it's a good idea to keep tabs on key dates for using your benefits. Only two to six percent of those covered by dental benefit plans reach their annual maximums according to the National Association of Dental Plans to get the most out of your policy plan and schedule dental appointments in advance throughout the year to help ensure the work is done before the benefit runs out.


All right, welcome to the Jenkins Essentials Open Planning meeting. I apologize for my lack of video and the noise Unfortunately, there's no better place for me to do a meeting right now So Batiste, I'm gonna ask you to drive this a little bit and I'll type in Yes So welcome everybody, so I'm gonna just share my screen right away so that we have The place to look at By the way, welcome Mandy. So it's she's showing up by Amanda on the left She is working going to work with us and as a back-end service developer And so right away switching to what I was working on and I will Give the mic to Mandy slightly later on I think so last week Was mostly at the Eclipse conference where I gave a talk about essentials, so I hope the recording will be posted soon Because I think it's kind of a product vision Higher-level talk not really technical so it kind of summarizes the intent of the project and so on so It would be valuable for for people to wanting to discover what that product project is about That video is posted. I think it would be great. I can do it or you can do it But to write a blog post with an update on our status. Yeah, sure And I actually pinged Through Twitter yesterday the eclipse con foundation and eclipse foundation and so on for now and no answer yet I hope it will be posted soon so that I can then indeed find something of luck and tree and reference it from there, right? So what I've switched to Since mostly and also trying to help Amanda Why should call Mandy on the project is the LWS support So it's kind of the sibling issue of the docker Cloud flavor we support since roughly two weeks So now we are trying to see you how we are going to set up a class Agents right away from LWS so The status about that is that it's just getting started for tomorrow morning. I'm going to have a Work with someone who knows ECS much more than me so that we optimize the timing and See if we're able to spawn agents from there and see then what are the possible caveats Basically, we were just discussing that earlier with Tyler. There are likely two three maybe four possibilities Which would be so the legacy original EC to plug in Then ECS, which I thought might be slightly better for the cluster aspect and the I think out of the box of the scaling and those kind of things, you know providing Docker containers, I never tried it, but I suspect it should be providing Provisioning agents quicker than you know, proving a brand a full-blown VM on EC to and so as Taylor was saying There's also EKS solution, which I think for now is probably Too much. So yeah, that's bottom line tomorrow. We're trying ECS and see how it behaves Then even if I separated it from that ticket We are going to very soon just once it's done to look at auto configuring or so when it's using the AWS flavor of Essentials, you know auto configuring to use the external artifact storage to store things in F3 as was developed some weeks ago by the by the architecture team. So Oleg, JC and Carlos And I guess that's it for me for for the last week and it was a problem Some background for for Mandy and for anybody else that watches the video One of the reasons that we're looking at doing this work on AWS Well, there's two reasons for the work on AWS. One is we want to take advantage of the stuff But Jesse and the rest of them have built but we also want to configure Jenkins out of the box a bit more opinionated and that includes disabling all executors on the master instance, which means we have to provide some means of doing Doing work on the Jenkins instance. So we have to configure something to provision agent Ciber as containers or vms And that's not something that Jenkins has really done out of the box before So this is a little bit Uncharted territory as far as starting up the Jenkins with The very very beginning with zero masters and automatically having some other agent provider configured So I think it's gonna be cool work Yeah, so There's a system built into Jenkins core that allows you to define a cloud which is sort of at this point I would consider a kind of the legacy support for Actual clouds, but basically it says if you're if you're please go ahead and start allocating some new agents out of Some pool that you have available. I think in the longer term We would like to take advantage of stuff that Nikola for example is experimenting with whereby we can Directly make a connection To a fresh cloud machine using whatever service we have available In the course of a build without it having to go through the Jenkins queue, but that's all the plugins that Patissas for the services in the plugins that are supporting those services that Matisse are using are using that cloud API Exactly, so I'm using for the Docker cloud what we call flavor the Docker plugin Which basically indeed it laments the cloud API for Docker and I'm using kind of the same for ECS and there's another plug-in called easy to plug-in Which is doing exactly the same for provisioning From easy to and so yes, and so Jesse just maybe for others and so for myself I think the main issue as I understand what you were saying about the cloud API for instance is that It's necessarily because of the fact it's going through the queue and then waits for it when it goes to fast and so on some kind of Latency which we can really reduce, you know to zero Before some some agents starts being provisioned, right? That would be kind of the original design issues with this Yeah, I mean the the cloud API was sort of transitional system that sort of took the existing model of static agents and tried to Make it work with an elastic system But basically a response to increasing pressure by allocating more agents and then after a while it can The cloud implement case the implementation can drop some of them but I mean what we really want to be moving towards is that You know, there's no There's no general pool of agents attached to Jenkins floating there. We you know, we want a particular build to Go and as part of the build process Attached to a fresh machine do whatever build steps it needs to do and then throw out that machine The moment that build completes or even in the case of pipeline the moment that node block completes really Yeah, and I suppose have some ways of pre-provisioning things so that the business starts right away and so on Perhaps I mean that there is some work done. I know by Google to Create a warmed up jar cache so that you can start up a Remoting agent with all of the plug-in jars that needs already present Statically in the image before it launches. You don't have to transfer code In the normal case over the channel. So there's various optimizations you can make Okay, I did I did want to mention one thing that's pretty critical for adding AWS agents, which is that you need to think about I am roles or whatever your security scheme is so in the case of the S3 plug-in we made a decision that We expect the the master to have Some sort of AWS credentials that could those could be implicitly via I am Or we're also working on a GUI that would let you configure particular credentials and Jenkins if you prefer But either way what's important is that whatever agent computers you provision should not have any Special permissions at least S3 Yeah, okay, they should be considered untrusted Yeah, I remember the JEP about that Yeah, so it's it was supposed to be pushed from the master so that it just have some some temporary Thing I remember something I used to download and maybe not to upload or something and go through the master Yeah, I remember something about that in the in the JEP about artifact storage, right? Yeah, so it's using pre-signed URLs So the master is solely responsible the master has the only keys to actually access S3 The agent is just given a Provisional lease to push a particular artifact or download a particular artifact. Okay Yeah, indeed the IAM is going to be slightly more tricky than than just using An access an access key and its password as I already somehow discovered a bit earlier today, but Anyway, so let's just go on Enough speaking already more than 10 minutes and let's switch to others So let's keep the better for the end. I guess so let's reach to Tyler and will Have switched to Mandy. I think afterwards. So Tyler. What's the status today? You want to hear your voice again with the noise behind? the This poor advice is killing me The The work that I've been doing is just getting the computed update manifest to the clients and As far as I can tell at this point This morning everything looks correct from a system standpoint, but the smoke tests are still failing Though I'm very happy Patisse that he did the work to put those smoke tests into place Well, it takes me forever to run those Actually quite helpful Integration of client server and Jenkins running So this this before request that's related to this computing update manifest It's gotten way too long, but there's no way that I can use this apart and it includes Generation of ingest.json, and that's just sort of the Puted list from an essential.yaml of all of the versions of plugins that we would need in their dependencies That's enough to get us moving right now. There's some hard-coded overrides for Stuff that's in the incremental repository But we'll need to find it at all later points some way to say get this in the essentials.yaml and Incrementals repository out, you know a little bit closer together to generate that ingest.yaml But from that the server is only giving the client what updates it needs so what that means from a Dataflow standpoint is every time we create a new update level and this is defined in the JEP 307 All of the dependencies are listed there every single You know artifact that's part of that update level is listed But when the client contacts us We're going to have the latest versions of software on that client And then we do a signature comparison and we only give the client what it needs So we're not redownloading the entire world every time we have an update level so I I'm reluctant to say that this works because the tests are still filling but it looks like it's working And I'm not sure why the tests are going right now Which is why we've been sort of locked up on getting that that production environment under Evergreen dot Jenkins IO Deployed it's because this needs I need to land this first and at least like that at least you made a huge step like 30 minutes ago or less Because now that we can see on the logs of that our client in DCI that Jenkins does start So now there's something wrong with the client handling which is receiving non-json response from the update service as it says But we can see that Jenkins now starts when it wasn't before. That's something I've got to figure out a better way to handle this when We're turning a 304 not modified Either express or feathers is not allowing you to define the body And I think it's just inserting its own body So it's the client is requesting a constant type of application JSON and the center is saying Now I'm going to give you an error message instead And then the client just turns to parse that So I reduced that to a warning because it's it's non-fatal And it's it's something that doesn't need to be fixed, but it's not preventing the client Correctly Yeah, that's that's the Once that is done, then then I'm on to deploying Evergreen Yeah, let's table that for later. I had a question about that, but let's just do that later So groups that's great So, yeah, I will have a look and so I'm not sure by the way, I can really help on that part But seems like now what Jenkins is starting So great Let's just keep that for the chat and later discussions that now switch to Mandy And I'm not forgetting anyone else. So as I was saying keeping the better for the end So Mandy welcome and thanks So we discussed a bit earlier that you were going to Got getting started on that ticket, which is about aligning the code about The JEP 308 making sure things are aligned with the spec. So how are things are going for you, Mandy? I'm digging my way to the code base right now and I've already got a test written that is currently failing So I am looking at fixing the code to make sure it actually returns the 413 Great and don't hesitate by the way I mean, we generally try to push PR that are ready, but you can definitely or so in that very case I guess push, you know work in progress PR so that we can provide feedback and get a get you more, you know help even more in a synchronous way sometimes I mean pushing things in a in a explicitly Tagged label as such PR so that we can you know provide what we think are failing and you know, you can use the Yourself the github Comments feature to say, okay, it's failing at that line and I was and why and so and so forth. So yeah Great and so I was saying for others I just told earlier Mandy that it would I think it would be easier and anyway That's kind of what we're trying to do in general to just file a specific PR for only the first case About you know making sure when we're setting too large data It's which is that it's to be something instead of just you know making a big PR addressing everything with regard to aligning to the CHEP It would be making the review easier and overall anyway. I mean it makes sense. It's not it's those things are convenient or merged separately Yeah, don't don't make four requests like me Somehow Every time I turn over a new rock whenever I'm working on a full request. There's more stuff that's sort of deeply related This um, you'll find this on the back of Mandy that there's a lot of There's a lot of stuff that was kind of stubbed out originally and Unstubbing some of those things out once you get out of error telemetry Becomes a little bit more involved than this small little ticket that it might look like But that's what I that's kind of what I expect from a new ish system anyways Yes, so you have a template to to put that that line on each of your PR, right? This this poor request got a big bigger than what you did too, but Anyway, kidding. So I think we are most I mean, I think we are that's a good thing I think we're all aligned to the fact that we should keep PRs easier and smaller Because we all know that it makes reviews and everything Orders of magnitude easier and quicker But we also know that sometimes it's just impossible. So that's that's right. I mean So I think we are mostly done anyone Has anything to add I think Yeah, we don't have roll Jesse. I'm kind of curious We had that issue with with incrementals the publisher last week that I recall fixing Has incrementals started to get more broadly adopted across the plug-in base Being used a bit more from pipeline code. I also Seen that it's being used some from the Java 10 hackathon so that people can Have a I think all I was working on setting up Docker images using incremental builds of plugins that we could have a Ready-to-run image containing a complete snapshot of stuff That had various known fixes in it So I have certain changes I need to make the most important one is that I want to change the calculation of the integer At the front of the number But that's I think that should be a Barely limited technical change. So I'll propose it as soon as I get a moment Now I they would say probably the reverse if there's Yeah, I don't have time to work full-time on anything related to the what do you call it the Ingest manifest or something But if I can advise or help out on How that could be formatted or how that could process Inputs and tie-in can tie-in to incrementals or there's some other Technical stuff with maven and it's over. I've just reached out. I honestly think I might be able to just give them the model That I've got in this pull request right now I'm just grabbing the update center as the latest source of truth, and I'm not actually caring about any versions I can see a very clear Sorry Yes We can hear you or maybe lower the Quality or I don't know so that's it. It reduces depend with available needed anyway, I think Tyler you were saying that what you already put in the PR is already reflecting Reflecting what you think should be done something like this Pretty big picture of what you think should be should be done Parsing the update center and so on. Anyway, let's just stop guessing Yeah, so I think it's writing so it's Okay, exactly. So thanks everybody. I think we are done and we're in time five minutes left That's also awesome So, thank you everybody and so see you next week same time and If you need anything or you're interested to join the project, so I just remind that it's happening Mostly this could most discussions are happening here on on Gitter so associated to the repo and That's it Thank you everybody and see you later. Bye. Bye


Hey, what's up coach this is coach Ben from build my sports biz calm And if you are brand new here to our YouTube channel Make sure to click the thumbs up button on the video if you like it and click the subscribe button This way you can stay updated with all of our newest videos I'm pretty much here because I like helping sports coaches build off their business. I specialize in soccer That's the company I built here in San Antonio, Texas. You can Google us. It's called neighbors soccer Academy That is my business. I started out in 2009 and the purpose of this channel is to help more coaches Build and scale their sports training business and we have a great track record now of helping coaches in in every industry Who have either watched our or other YouTube videos that watch the listener our podcast our newsletter? we have a lot of stuff for coaches that is that's free and available and Today really what I want to do though in this video is I want to talk about the two key metrics That you need to really understand in order to drive your business forward So I'm talking about if you want to make more money in your business This is going to come down to the clients that you have so here are the two key metrics You've got to understand and I'm gonna be serious with you. I did not understand what these were Until maybe around four or five years ago and I've been in business for pretty much ten years now, right? So what I'm about what I'm about to share with you is gonna be very valuable. So number one I know this sounds simple not a lot of people think about this is you need to understand how many parents are Being introduced to what you are doing on a weekly basis and a monthly basis So here's what I'm talking about. How many parents are coming to your website? How many parents are watching a YouTube video? How many parents are getting on the phone with you the metric I care about is the phone call if I create YouTube video or Facebook video and I get a thousand people to watch it, but nobody calls me on the phone to talk to me about my program That's not really driving my business Of course like having that that social presence and being in front of you all the time that is important But how are we taking those people and getting them on the phone?  So the number one metric I care about is how many phone calls Are you driving on a weekly basis and a monthly basis and we're gonna keep this simple Let's just say you drive ten Phone calls on a weekly basis. All right, if you do that my math is not very good But if you do that Four weeks out of every month. That's 40 phone calls Out of the month that you are driving whether it be your website. It could be a Facebook video could be YouTube video It could be a YMCA. I it could be any youth organization within the sport You're in but that is my number one metric How many people can we drive to the phone? Okay, and when you start to document that and you start to understand How many people who you are getting on the phone? That is one thing now the next metric We need to understand is how many of these people over here are Converting into actual clients, right and the easiest way to track this. It's very simple You just need to create a spreadsheet that has two columns It says a amount of people I contact or contacted me that or I contacted this month And then you break that into a weekly, right? So you you put the total amount for the month you break it into on a weekly basis How many people that was right and then on the other column you put how many of those people came into a free trial or or came into your program that are now monthly Customers right now when you have those two Pieces of data, right? How many people you talk to over the phone? And I'm not talking about people who email you like that is those are not phone calls Those are people that are just going back and forth on email. Those people are not gonna be committed You need to get on the phone, right? So how many people did you get on the phone? How many people did you convert into a client? Now this is gonna come down to simple math, right? Let's just say on average 30% of the time this person comes in they become a client 30% of time. Okay, if you just do simple math That means three out of ten people are going to commit to your program Every week, right that would be amazing. That would be great I feel like 30% is not a very good number though That means that seven people are going somewhere else seven people are saying not do it like if we can start to raise that number That'd be great, but if you just keep it simple if you're horrible sales Even if you just get one out of ten Every week that means every month you're adding four new clients to your business Right, you do that over the course of 12 months You're gonna be adding almost 50 new clients to your business And if you have your business set up the way I do where where kids are committing to six months or 12 months of your program Like you are set only just having one kid Every single week or sorry. Yeah, basically one kid every week So if you think about this, this is gonna come down to being organized, right? You need to have a marketing system to get these leads over here, right? But you need to be very solid and committed to knowing all right if I have this many leads I know that this many people are going to convert in a client and if you're improving this side Every single month then you're going to be more and more profitable every single month every single week really and Here's the reality most coaches don't think that way. They are thinking all right I just need to show up to the field do a good session and then people will hear about what I'm doing, right? Word of mouth is awesome. I've I've built a lot of my business through word of mouth But you always need to be marketing yourself, right? You always need to be reaching out to parents So like this side over here that I talked about how many people are hearing about you How many people are getting on the phone? This needs to increase every month and I would just set a goal I would say how many phone calls do I want to generate this week or this month this way you can break that down All right, I just need like three phone calls a week or I need ten phone calls a week How am I gonna do that? Well, you got to put yourself out there, but that's one piece of it It's how can you close these people into your program because you could drive Thousands of leads over the phone if you're not getting any one of your program then there's a problem and here's where I said I'm always in the middle between Helping people get leads and helping them close them into long-term clients that are happy that are consistent They're coming every single month. They're there for years, right? That's how I built my business I don't have kids who come training my program where they just come and check it out and See if they like it and they come whenever they want their parents drop them off and it's babysitting I don't do that. I work with very committed parents very committed kids That doesn't mean they have to be the best in my sport I coach was a soccer that just means they need to be committed They need to be following my rules and this is what I do I help coaches set those expectations with parents early on this way They are going to be the right fit for the program or not And if they're not they're not gonna enter the program and if they are they're gonna be there for a long period of time, right? So guys, I really want you to think about that going forward if you're organized with those two metrics How many people you are getting on the phone with so these are parents influencers people who have influence over kids, right? How many of those people are converting into clients when you have that now you have a predictable way of Running your business because you know if you're if your ratio is Horrible or if it's great, you're gonna know how many people you need to talk to now To convert into actual clients and this way you can plan out the entire year's worth of I would say marketing as far as how many players you want to get in your program and What type of programs you should be running, but if you don't know those two things I promise you you're gonna be lost right and I did not understand what those were when I first started I was just hoping people would go to my website I was hoping that they would like my Facebook Videos that I did and I was hoping they'd direct message me on Facebook I was just playing the hoping game which does not work You have to be very aggressive With how you get your message out there and do it your way, right? But the more people who know about you over here the more phone calls are getting right the better This is gonna be as far as closing those people and the better chance you have Actually talking to people to close in your program. So I hope this helps out guys And here's what I want you to do if you enjoyed this video and you want more business advice With your sport and you want to take your your coaching to the next level You want to take your business to the next level? Maybe you haven't started your business yet or maybe you have Started and you're stuck and you want some personal help I've already helped hundreds of coaches in every sport imaginable and I would love to help you out, right? So here's what I have set up right now if you go to the link in the description.  You click on that big blue button It says call coach been it's like super simple Click on that there's an application that you fill out it takes about two seconds to fill out You go fill that out. I will get that in my email today and once you do that I will get on the phone with you I will chat with you about your business and I see how I can help you out so guys. Thank you so much for watching this video I really appreciate your time But go take action on those two things like those are going to help know how many people that you're calling Know how many of those people that are actually committing your program now You have a predictable way of running your sports business. So I hope that helps out I'll see you soon. Like I said, let's get on the phone. I would love to chat with you this week Just go to my website build my sports biz comm click on the big blue button fill out the application and we're gonna get on the phone So that's it. I'll catch you later


Now troops of the Air Tax Force operation had in Cai have killed another notorious commander of Boko Haram, Al-Haji Mordu also known as Bembem and 27 fighters in Borno, the notorious commander and his fighters were killed on August the 3rd by military airstrikes around the Mandara Mountains in the Gaza local government area of Borno State. So since within the military high command confirmed that the operation followed credible intelligence reports indicating that Islamic State of West African province fighters were converged in large numbers with intention to conduct attacks. Now the deceased terrorist fighter Mordu was a popular drug baron who went into armed robbery before joining the Boko Haram sect. Bembem commanded the displacement of Bama town in 2014 and the killing of hundreds of persons before declaring it a Boko Haram caliphate. Before his death he was working under the supervision of a top leader of the Boko Haram terrorist Ali Ngoche and they were hiding inside caves in Mandara mountain from where they coordinated attacks in Nigeria, Cameroon and the Republic of Niger.


Hello, everyone. Thank you so much for having me here today at Open Source Summit Europe. I'm Nell Shamrell Harrington. I'm a Principal Engineer at Microsoft in the Azure Office of the CTO. I'm also a board member of the Rust Foundation and a long-time open source contributor. If you'd like to reach out to me at any time, I'm at Nell Shamrell on Twitter, and it's wonderful to be here with you today. I'd like to start this talk off with a few questions. Do you build software?  All right. For those of you with your hands up, do you build a lot of software? Even though I'm pre-recording this talk, I'm guessing that a lot of hands just went up, both in-person and in our remote audiences. Nearly, if not all of us, build a lot of software. Let's now consider a scenario. What would you do if one morning, after you poured your coffee or if you prefer poured your tea, or in my case, I like to pour both a cup of coffee and a cup of tea? Let's say you sat down at your computer and received a new CVE alert. I know the first question I would ask as soon as I saw this was, am I vulnerable? Is my company or organization vulnerable to this CVE? Where would you start to answer this question? I would likely start by pouring another cup of coffee and another cup of tea, and then start the process of gathering evidence. This evidence I gather is meant to answer key questions. What dependencies am I using in my software? What parts of those dependencies am I using? Sometimes one part of a piece of software is vulnerable to a CVE while other parts are not. What dependencies, the dependencies of dependencies, etc. Am I using at all levels of my software builds? It's often not just the first level of dependencies that I need to worry about. It's all the levels. Where am I using all these dependencies? If I build a lot of software, I need to isolate what pieces I need to update and what pieces I do not need to update. A solution that helps provide this evidence, that helps you gather it, is Gitbom. But before we go into what Gitbom is, it's useful to cover what Gitbom is not. Gitbom is not itself an Sbom. It is designed to complement Sbom, such as SPDX and Cyclone DX. In fact, Gitbom is included in SPDX 2.3, which at the time I'm recording this was just released. Additionally, Gitbom is not Git or any version control system. It is inspired by Git but is not dependent on it or tied to it. Now that we've covered what Gitbom is not, let's transition into what Gitbom actually is. Gitbom is first and foremost an open source project and community. This community is creating a minimalistic scheme for build tools that provides a programmatically generated record of every artifact used to construct a piece of software. At every level of the build chain, and we're talking all levels of dependencies here, not just one or two, it follows the dependency chain all the way down. Let's take a visual look at how Gitbom works. When a build tool uses the Gitbom scheme, it creates an artifact dependency graph, tracking every input or generated artifact throughout the build process. For each artifact, it hashes that artifact and uses the hash to create a unique Git object ID, which we call a GitOid for that artifact. It then writes that GitOid to a Gitbom document. When the build is nearly completed, it calculates a GitOid for the Gitbom document itself that it's been writing to, and embeds that GitOid into the final artifact or artifacts that the build tool produces. That's a big overall view. Let's zoom in on each step in this workflow, starting with the build tool itself. When I say build tool, I mean any tool that reads one or more input artifacts and writes one or more derived artifacts as output. Some examples of build tools include a compiler that takes source code files and produces a compiled object file, or a linker that takes object files and produces an executable, or a dynamic linker that takes an executable and a system library and produces a running executable. It can also be something like the bytecode compiler, which takes a .py source file as input and produces a compiled bytecode Python file as output, or something like the Java compiler, which can take a .java file and produce a Java class file. And these are only a few of many different types of build tools. What all these types of build tools have in common is the ability to take input artifacts and generate derived output artifacts. And when I say artifact in this context, I mean any software object of interest. This includes source code files, object files, executables, container images, and more. There are so many different types of artifacts that can be created, transformed, and consumed by software. What they all have in common is that they are all arrays of bytes. And in Gitbom's view, two artifacts are only equivalent if and only if those arrays of bytes are equivalent. Additionally, every artifact should be identified in a way that is canonical, that is unique, and that is immutable. We'll talk more about what that artifact identification looks like a little later in this talk. But going back to our workflow, the build tool will generate an artifact dependency graph throughout the build process. This artifact dependency graph of an artifact is the recursive, directed, a cyclic graph of all input artifacts that are transformed by a build tool into an output artifact or artifacts. This includes direct input artifacts, things like source code files, and recursive sets of artifacts to each input artifact all the way down the graph. Let's look at some examples of artifact dependency graphs. In the case of C, dot C and dot H files are compiled into dot O object files. Those object files are then linked into an executable. In the case of Java, dot Java source code files are compiled into dot class files, which are then combined into a running executable. Something we like to refer to in the GitPhone bomb project is the artifact singularity. An artifact should have precisely one artifact dependency graph. And all equivalent artifacts should have the same artifact dependency graph. As the build tool generates this graph, it computes a GitOid or a Git object ID for each artifact. A GitOid is how GitBomb identifies an artifact. It is canonical, which means independent parties presented with equivalent artifacts will derive the same identity. A GitOid is also unique, which means non-equivalent artifacts have distinct identities. And a GitOid is immutable, which means an identified artifact cannot be modified without also changing its identity. The word GitOid stands for Git object ID. GitBomb follows nearly the same process as Git uses to generate object IDs, but GitBomb adds to it. We're about to go more in depth, but now is a good time for a reminder. GitBomb is inspired by Git, but GitBomb is not Git and GitBomb is not dependent on Git. With that said, let's first consider how Git creates an object ID. As Scott Chacon and Ben Stroud put it in their book ProGit, Git is at its core, a simple key value data store. You as the developer insert content into a Git repo and Git hands you back a unique key that you can use to retrieve that content. This key is the object ID. When you want your content back, you provide that unique key to Git and Git hands you back your content. This key is the Git object ID, which is composed of a header that header includes the object type, such as a blob or a tree, followed by the content byte size and a null byte. This header is then concatenated to the content, such as the contents of a file. Git then calculates the SHA-1 checksum of the header plus its contents and gets the object ID as a result. And if you are about to jump out of your seats from hearing SHA-1, yes, Git does now use a hardened version of SHA-1 and yes, it is still controversial. We will address that in just a bit. After Git calculates this ID, it persists it to the file system using a .git directory, which contains an objects directory. And within that directory, it creates a subfolder named after the first two characters in the generated hash and then writes to a file named after the remaining characters of that hash. All right, about the use of SHA-1. As many of you likely know, there are security flaws in SHA-1, notably the shattered attack. Git version 2.13.0 and later use a hardened SHA-1 implementation by default. This hardened version is not vulnerable to the shattered attack, but there are still other potential vulnerabilities that may be discovered in the future. There is an effort to migrate Git to using SHA-256 rather than SHA-1, but it is slow going. So Git Bomb is inspired by Git. And in early designs, Git Bomb also used the hardened SHA-1, but we received a very strong negative response to that. This is understandable. Git Bomb is intended to allow you to know exactly what goes into your software and that is not something we want to be vulnerable. So rather than using only one hashing algorithm for all Git Oids, Git Bomb creates parallel trees of Git Oids. For every artifact, Git Bomb currently calculates one Git Oid using SHA-1 and one Git Oid using SHA-256. This is something that can be changed in the future as hashing algorithms and our understanding of them continue to evolve. In the future, we could easily add additional algorithms or stop using certain algorithms as appropriate. A Git Oid is very similar to what Git uses to identify objects, but we add a couple of things to that. Git Oids first consists of the word Git Oid, followed by the object type, such as a blob, followed by the hash algorithm, SHA-1 or SHA-256 at the moment, followed by the hash value calculated using that algorithm. Here's an example of a Git Oid using the SHA-256 hash. We have the word Git Oid, followed by the object type, which in this case is a blob, followed by the hashing algorithm used to create the hash value, followed by the hash value itself. Git Bomb then persists this Git Oid to the file system in a dot-bomb directory. And within that dot-bomb directory, there is an objects directory, like with Git, and then a sub-directory named after the first two characters in the hash, followed by a file named after the rest of the characters in the hash. After generating each Git Oid, the build tool will write them to a Git Bomb document, or to be more accurate, two Git Bomb documents. The SHA-1 Git Oid goes into the SHA-1 Git Bomb document, and the SHA-256 Git Oid goes in the SHA-256 Git Bomb document. And this continues for each artifact throughout the build process. When all the Git Oids have been calculated and written to their respective documents, the build tool then generates another Git Oid for each of the two documents themselves. And then embeds those Git Oids into the final artifact or artifacts. As for how that Git Oid is embedded, we are still figuring that out, but we do have some ideas. And it varies based on the type of artifact. For L files, we are considering embedding the Git Oids into an L section called dot-bomb. For things like tar or gzip files, into an archive entry also named dot-bomb. And for Java class files, into an annotation named at-bomb in the class file. For container images, we could see embedding the Git Oids as an annotation in the image manifest. And as for the generated source code, we could embed the Git Oid into the file itself as a comment. It is important to note that none of these are set in stone yet. There will be many more discussions and experiments to come. Our vision for Git-bomb is that if you are using it in your build tools and you hear about a new vulnerability and have to answer the question, am I vulnerable? You will have additional evidence to determine whether you are vulnerable anywhere in your build chain and at any level of your build chain. This means that rather than it taking all of the coffee and all of the tea to answer the question, am I vulnerable? It might only take one cup of coffee or cup of tea before you know the answer and can act accordingly. Is this sounds good to you and you're wondering where you can get Git-bomb? The project is still in its very early days, but we have an active community from across the open source ecosystem. We are creating this project through open discussion and consensus. So far, we have drafted parts of the spec on GitHub with much more to come. Please feel free to check it out. We have submitted GitOid as a URI scheme to IANA where it has been provisionally accepted. You can check it out at that URL. And as mentioned at the beginning of this talk, GitOid has been added to SPDX version 2.3.  Git-bomb is a compliment to SPDX. And is now a part of it. We have also been creating prototype implementations of Git-bomb, including integrating Git-bomb into LLVM, implementing Git-bomb in Go, implementing it in Rust. That's the one that I've been working on in Bash. And there will be many more prototypes and much more experimentation to come. We would love if you would join us in this project. We have a website where you can find more information at gitbomb.dev, including the white paper, which lays out the idea of Git-bomb. You can also find information about our weekly community meetings. We would love if you would join us there in our Zoom meetings. And you will also find links to our Slack channel. Our Slack channel, the Git-bomb Slack channel, is in the open SSF Slack instance. And links to our GitHub org. We would love to have you join us on this journey. Thank you. Again, I'm Atnel Shamrel. Feel free to reach out to me here in the conference or reach out to me on Twitter at Atnel Shamrel. It is so good to be here. Thank you again.


Hello again everyone and yes we are here and I'm Jack Currie and today I'm joined by a familiar face to anyone who was a New York baseball fan or a major league baseball fan at that. Robin Ventura spent 16 years in the major leagues. He played with the Mets and the Yankees. He has that rare distinction. He played 10 years with the White Sox and Robin first of all thank you for joining us. Second of all and much more importantly how is everything going with your family during this pandemic? We're fine you know I think everybody's just laying low and trying to ride this out. I mean it's obviously very surreal and and and all that but everybody's doing fine. I'm happy to hear that and I love this aspect of your story even though the pandemic has short circuited it for now.   You had a 58 game hitting streak at Oklahoma State. You decided to go back to school to complete your degree which is phenomenal. That is a great role model right there. You also were going to be a student assistant coach so before everything stalled and the season was canceled how was that going for you? It was going great. It was going I mean it's really fun. I think the kids are fine. I'm at a place that I really enjoy and the people that I'm working with are all people that I've known for years so it was just a fun group to be a part of as far as a coaching staff and everything and and I was getting A's Jack too. I just want you to know I'm still finished my school. It is online but I do have A's so I'm bringing up the the team GPA. I need to know a class or two. What courses? Give me an idea of what Rob... I have a microbiology class. I have a diversity class. A couple of independent study ones but yeah the micro microbiology class is really interesting. I think that's fun. It also happens to show how to how to make beer, how to brew your own beer at home so it's it's it's pretty important. I'm going online as soon as we're done. I'm signing up for that for next semester. What compelled you Robin to want to do this? You've accomplished a ton in your life. You could have been very content a very happy guy and said I got as far as I wanted to get in college and still did pretty well in my career. What was the motivation I want to go back and finish up? I do enjoy coaching and I'd come back for a couple football games and run into Josh holiday and he was just explained to Matt just came on as an assistant and you know I've known both of them since they were probably 10 years old so you know I'm very familiar group the Pitch and Cubs Rob Walton who I played with at Oklahoma State and you know we just kept talking every time I come back to a game and you know some of it was about what are you doing? I don't know you know nothing right now and it just kind of was an idea floated out there and I just kept thinking about it and thinking you know this would actually be really fun and then we came down to that I would have to be a student coach so I'd have to go back to school and you know the more I thought about it I said you know what it sounds like a lot of fun. It is really interesting being on a campus and just being around younger kids and everything it's been a real fun time I mean it really has. I'm going to go out on a limb and say that you're the first former major league manager whoever returned as a student assistant college coach I'm sure there probably is somebody who helped out at the college level so I think that says a lot about you and your willingness to just want to help kids and help make them better baseball players. I know how humble a guy you are Robin from having covered you but I want to throw a couple of numbers out here 16 year career you hit almost 300 home runs yet an OPS of over 800 six gold gloves almost 2000 hits a couple of all star appearances what are you most proud of from your career? You know I don't know I mean I just think I you know hopefully guys I played with you know say I was a good teammate you know I think you know that's always important but you know hopefully they they felt like me being on a team made us a better team I mean I people are going to make their own decisions about you know anything that happened in your career but it's it's always about what the people that you played with. In December of 2001 you were involved in a rare transaction a Mets Yankees trade the Mets traded you to the Yankees for David Justice he never ended up playing with the Mets he then got flipped to the Oakland days but you had accomplished a lot with the Mets you had played against the Yankees in the 2000 World Series and we're going to get to that but when you got the news that you're being traded to the Yankees I remember you being heartened by that I remember you saying I feel I've got something left in the tank here. Yeah I think at that time I know the year before was I had a rough one and you know you just you sit there and kind of see where you're at and we're going I you know when Steve called me and said I got traded you know I'm you know your mind immediately goes to okay I gotta pick everything up and go somewhere else and basically I was just traded 20 minutes closer to my house so it was you know it was kind of a weird at first you're like wait a minute I'm traded but I don't really have to go anywhere so you know I was pretty fortunate that I ended up there it was obviously a great team but it was just nice that you know you weren't totally upended like you're not going all the way across the country. Then you made an all-star team with the Yankees in 2002 one of your two all-star appearances in your career. Talked to a lot of Yankees about the 2000 World Series and just the whole city just being mesmerized by New York versus New York. Owlider has said that if the Mets win game one which if not for a base running gaff by Team O'Parez maybe you do Owlider thinks you win that World Series the Yankees ended up winning in five games. What's your take on that if game one had tilted in the other direction? You know it's anything's possible I think you know it obviously would have given us a lot more momentum going into the next day and we were kind of streaky that way in series of getting that first one and being able to go on from there but I don't know I mean it would have definitely been a difference maker for us I don't know if we would have won it or not but it definitely would have changed some things in the next couple games. That was a five game series but to me it felt so much closer because their first three wins in that series all one run games and then even the final game it ends with a piazza almost the game tying home run. As you reflect on that series and the experience of it I know it stinks to lose but what do you take away from going up against the Yankees that year? Well I think just the atmosphere because it was a subway series that just made it so different than any other series they had you were never traveling you know you show up here stadium and bus over so it was just you know kind of a different kind of series and I think everywhere you were in town you know somebody's taken a side it wasn't you know it wasn't like you just had your own fans but you had the other side telling you weren't going to do it so it was I think that's what made it really unique. We go a year later Robin and unfortunately with everything that our country and our world is enduring right now there have been comparisons made between what is going on in 2020 and what we all had to endure with 9-11. I remember you being amongst the players who were very out front and being very supportive of everyone who had lost so much after 9-11. What do you remember about that time and what do you remember about how baseball coming back and you played in the first game in New York 11 days later maybe allowed people a little bit of a respite from all of the grief that they were dealing with? Yeah I'd say it has a I mean the beginnings of this what we're going through right now was similar to that feeling that we had you know those first few days because you're at home you're not doing anything you're just trying to watch the news get as much information as you can but you know it had a similar feel of just you don't really know what to do and you know especially for us they were using Shea as a kind of a hub for all the materials and support stuff that were coming in from across the country and so we're getting a pretty good dose of it when you go to the stadium and you got firefighters sleeping in locker rooms and it was just a trying time you know it was sad definitely but you know you see these people that are they're trying to help and recovery and then once we started playing again you just felt like people needed something and I think that Homer that Mike hit is you know goes down really as one of the kind of touching moments really for baseball at that time. I remember covering that game being at that game was a two-run Homer off Atlanta's Steve Carse and you just sort of had the feeling that this had been scripted or this had been destined. I remember Bobby Valentine calling it a small miracle after the game and I don't know about you but I thought that that captured perfectly that New York needed that jolt that night even if it was only for a few hours. Yeah really I mean especially because it was the Braves we haven't played well against the Braves they seem to have our number and to come back that night an important night you know and I think everybody was still nervous a little scared of what was going on and if you could gather and have a game and you know it was just emotional I think every game we played from there on out was pretty emotional with the people that were there but I think with Mike doing that it was it was really important I think for everybody just to kind of let loose and to be able to cheer and scream it just all came out at once. Robin you managed the White Sox for five years your first year there you win 85 games you actually come within three games of a playoff spot the Tigers beat you out they finished first never climbed over 500 in the next four years what went right in the first year what didn't go is right in those subsequent years. Well I think you know when I first got there we were kind of an older team and you know I don't know if they overachieved but they played well I mean it was a team that was you know you had older guys that performed and played better and it just seemed to work with that group and I think in the in the subsequent years we probably weren't as strong as that that team was but you know I think every year is a little bit different of who you get and I think at that time when I got there the minor league system wasn't very good so we weren't really you know you weren't infused with a lot of you know top flight players coming up after that so we really had to build up that minor league system and I think they've done a great job doing that by the way I think that's part of you know going through periods of time like that as you do end up with some good draft picks and I think they they haven't missed on them. I know you've talked about finding a comfort level with the holidays at Oklahoma State. Do you harbor any aspirations of getting back into Major League Baseball? You know I think at some point but you know I right now this is just really fun and I'm enjoying it but you know again it might not be at the Major League level but I think it's it's the impact that you're having with people that you're dealing with is for me this has just been a fun ride. I want to end this on a fun note I hope you think this is fun because you're such a humble guy you're such a chill guy that you had a moment in your career that to me seemed out of your personality and that was when you charged the mound against Nolan Ryan and I know you've been asked this probably a thousand times in your career what compelled you to do that and at what point did you say all right maybe I should have probably stayed in the box. No I you know at that time we kind of had some you know pitches go back and forth between teams and I think I think they had hit a few guys and we hit a few guys and it was if it was going to happen again somebody's going to go I'm the one that ends up getting hit not necessarily my personality but you know I think at that time with what was going on you just kind of got to go and I think you're halfway out there and you're thinking oh this is probably not the best idea but you still got to keep going. Robin we really appreciate you giving us some time today thank you so much all the best to you and your family please stay safe during all that we're enduring right now. All right thanks Jack you too.


Hey everybody, Matt here for Layton Sports Cards ripping one box of 2021-22 Panini Impeccable Soccer This is for HPC Good luck and full disclosure. I'm not a soccer guy. I will mispronounce the names the metal card. That is Romelu Lukaku Stainless Stars that is 34 of 65. All right. This is Mason Mount to 55 Aaron Ramstahl to 55 Jersey to 25 Tomas Suchek Sochek Otto to 99 Michael Owen all-time legends Grab your spots for Sunday fun day breaks tomorrow. This is Otto to a five Jordan Pickford illustrious ink and Otto to 99 Gilberto Silva all-time legends redemption That is impeccable club history autographs Harry Kane impeccable club history autographs That Kane was a big one. Nice and On the back to 20 That is Yves Bissouma. All right, that'll do it for your box. Thank you HP appreciate it We'll get those right out to you


Okay, our two o'clock session is titled, How Can We Encourage More Hackers to Engage with Policy Makers? And we have two speakers. Peter Stevens is an experienced policy lead in the UK and abroad. From 2018 to 2021, he led the IOT Security Policy Division across the United Kingdom government, responding to the Mariah Attack delivering the Product Security and Telecommunications Infrastructure Bill. He is an experienced public servant, well versed in delivering through government. He has advised ministers and prime ministers on the creation and running of delivery units in government, while not technical by background, he brings a rebellious streak. As a student, Peter hitchhiked from Buenos Aires to New York City, and he also spent two years teaching in an inner city school in South London. Experiences like this have left him with a staunch optimism about people and he is a passionate advocate for partnerships between policy makers and hackers. To make better informed policies that can support policy makers and citizens around the world, he's currently a policy advisor at the OECD, supporting member states to navigate the range of challenges economically. Thomas Krantz is an award winning cybersecurity consultant, a senior security and technology leader within and an author with more than 30 years of experience in IT and cybersecurity. Starting his hacking career in the 80s in the United Kingdom, Thomas has also spent the decade since then involved in lobbying United Kingdom and European Union policy makers and contributed to various government consultants around hacking and cybersecurity. He's written two books, his award-winning Making Sense of Cybersecurity and How Is AI Transforming Cybersecurity for NVIDIA. And this session is on the record, which means that it's okay to photograph slides and share slides on social media that the same photography policy applies in terms of permissions required for photographs of people. So thank you. Thank you very much and thank you everyone for coming and thank you, Defconn, for hosting this event. It's a great pleasure to be here and yeah, thank you all very much for coming and I'm really excited for the conversation and listening to your perspectives. Please note that this is not going to be the two of us talking for 50 minutes. We will be really grateful and appreciative of your insights as well and comments. So yeah, hopefully we can set that up. But I'll pass over to Thomas. Thank you. I'm gonna steal that instead. Sorry, the acoustics aren't great. Hi everyone, thank you for coming along. Peter and I have very, very different backgrounds but as Peter said, we're not gonna be here talking about us or talking about our perspectives.  So one of the reasons that we wanted to hold this session is that there's several things happening so far. So there seems to be a critical mass across governments and supporting organizations globally for people trying to put together laws, policies, frameworks about not just cybersecurity but also other emerging technologies like AI, like quantum cryptography and all of the impacts that those have on society and technologists in general. So one of the things, yeah, is that easier? There we go, thank you. It's very difficult to hear from here whether you guys can hear. So what we're looking for is to essentially have some open conversations about what has worked well, what hasn't worked well, which areas people think there needs to be more work on. One of the things that I'm very keen on is that hackers and security researchers should be more involved in supporting policy creation, supporting governments, not necessarily in terms of let's hire 50 or 60 hackers and get them to work full-time in government but more in terms of where are the areas of expertise? We're in the middle of DEFCON, we're seeing a lot of really great research, we're seeing a lot of good people coming out and saying, look at this cool stuff we found, how do we get those people engaged with policymakers to make sure that policymakers, decision makers, politicians as well, have the best information they need to make informed decisions and also how can we engage hackers and security researchers more in some of the sort of NGOs and the lobbyist organizations to make sure that when there is legislation that happens that perhaps is not as good as it could be, then we can tackle that and we can deal with that in a constructive way and make sure that we fix some of the problems that we say. Thanks, Tom. And I think just to share back on that, so from my experience working, so I used to be the IOT product security division lead, so heading up the Product Security and Telecommunication Infrastructure Act and basically the UK's government response to MIRAI. So I think that in about four years we went from sort of an attack which encouraged a bit of a response to delivery not only of a technical standard but also of actually the first international legislation for that to take place in the world. And I think that the reason we did that was because we had a really great relationship and we managed to find some fantastic people who were able and generous to support us. And I really cannot testify enough just how much it meant to us and also enabled us as a division to engage with security researchers but also then to engage effectively with industry and civil society and academics. And I think it really kind of gained critical mass momentum. So I'm a huge advocate for this to happen more and for there to be more opportunities for these kinds of partnerships. As well as that, I think there's a bit of learning that we took over that period of time about how can we adapt what we're doing to make it more accessible, to make it something which can be engaged with easily. I appreciate lots of members of the security community are very busy of course and don't necessarily fit into the confines of civil society or industry associations which exist and have gone for decades. So how can we do that? And I think also just something that I've learned a huge amount is the importance of transparency, the importance of engaging with one another and being prepared to iterate and sort of have an approach and talk about it but be prepared to get feedback on that and be prepared to maybe like and not like some of that feedback. So I'm really grateful for the feedback that we can get from this experience. But what I'd love to also hear from everyone in this room is actually a bit of a show of hands to see like what kinds of backgrounds are here. So would I be able to ask if anyone is from like a government administration, could I ask to put their hands up? Okay. One, cool. And from members of the security research community, so I guess people would define as hackers. Okay. And curious as to what other organizations or categories people would say what they're hoping to get out of this session. University academics, okay. Cool, okay, great. Super, thank you. All right, cool. So do you want to add a bit more of a perspective? Yes. Yeah, yeah. So I'm going to make some comments about engaging with governments and policy makers from the hacker security research side of things. Now, one of the difficulties that I face trying to get more hackers involved and trying to get more security researchers involved is the length of time for the feedback loop, right? If I'm trying to break into a system, it's very, very quick feedback in terms of am I successful, am I failing? If I'm defending against an attack, it's very, very quick feedback loop. Am I successful, am I failing? If you're trying to put together a legal framework or a policy, especially one I live in the EU, right? There's 27 countries there. There's a ridiculous amount of languages. Trying to get anything to happen there is a miracle. And the fact that it does is a testament to hard work from people involved. But normally hacker security researchers do not have the patience to sit there and see through four, five years of conversations. So, where can we meaningfully engage those people? Where can we get their input, where it has the most impact? Where can we make sensible use of their skills and where is it important for them to share their knowledge and educate rather than physically get involved as well? Anything you want to add? Great, okay. So, I think what I'd love to do is, I think we need to do is, guess my ideas of what kinds of questions people are thinking about and the kind of questions that we put together of think how can we improve the relationships between security researchers and also with governments directly is understanding what have been the experience that people have had of working directly with governments, you know, good and bad, the ugly, you know, what I've prevented you from engaging with policymakers in the past, but also what you are looking for from security communities and how you can bring that into the way you develop your policy. I think that something that I am also really interested in is the effectiveness of some of these additional initiatives such as Hackers on the Hill or Hack the Capital or global forums that take place which, you know, have the stated objective to sort of bring together people from different, and even, you know, DEF CON policy, you know, bringing together these kinds of communities. You know, what kinds of events specifically work? Have you seen actually be productive, you know, introductions or sandboxes or what kinds of things can people be doing to help engage that process? That's something that I really want to learn and to understand because, you know, I think from my experience, you know, I think it's very, there's a big spectrum across government, some are more adaptive and some have a very strict series of processes and if you don't know how to access it or don't know who to access in particular, you're gonna really struggle. So that's something that I'd love to hear from people in this room. So I think what I would love to perhaps do is if we maybe split into smaller groups, I think there's more people on this side than on this side. So some people want to move over to here and then perhaps we can spend 15, 20 minutes in front of one of these whiteboards just understanding what kind of ideas to go get together a bit of an idea answering some of these questions and then gathering some of your insight because I think that's really where the purpose of the session on this one. Should we start there? Yeah. Okay, great. So should we move on this side and I'll take over here. Okay, thank you very much for those conversations. Really grateful for those conversations and appreciative of time and we've got about five minutes of scheduled allocator time left. So I'm just gonna quickly summarize the conversation which we had over here. We came across a number of different themes, really came into challenging perceptions of hackers within community, within organizations that can have quite antiquated views and I can totally assess, I can totally see that something that it's come across and we also talked about basically the need for translations, the need for a translation between an organization which has potentially an old fashioned view of this type of work and this type of skill set but also how can we make it easier for that community to understand the way it works and that was the thing we talked about the need for potential structure where there could be a third party organization or safe space chance to bring that up and say these are the sort of challenges that we face and how we can really translate those challenges. I think we talked about the importance of communications and the importance of making sort of how can we support security researchers to get the top level of the key point so that it's coming across to ministers who perhaps don't have the time investment to be able to engage with it. So that was what we really came through. Excellent, so we've covered two pages. We got through a lot. So I'm gonna pick out some key points that really stood out. So one of the things was getting the right experts involved and the difficulty in that in that the Donald Rumsfeld thing, right, known unknowns. If you don't know technology, you don't know who you need to get in as an expert and therefore you can't get expert advice and you can't engage in the right people. And so therefore by default, you're falling back on the usual government contractors and the usual industry lobbying organisations who are technology companies who may not necessarily be giving you the right advice you need to support society as opposed to industry. We also covered some talking about barriers, barriers to engagement, specifically around motive and consequences. So there's been lots of instances that people cited and that we've seen in the history of DEF CON hacking as well, where people will have reported a security incident or will have uncovered some research and they will have been punished for it. And that has a chilling effect on people wanting to share stuff, especially when we look at things like critical national infrastructure, when we look at IoT solutions, when we talk about core bits of stuff that keep our society going. And it is a, to use your phrase, you know, trying to find a safe space where you can engage and say, we have found these issues, we have found these problems, we are reporting them and talking about them in good faith. So having that, you know, the usual law enforcement mechanism of react and then deal with the fallout later on, consider motive after the action has been taken, you know, having a safe space where you can consider motive upfront, especially is because, you know, the security researchers who are coming forwards with some of these vulnerabilities on key systems that may impact national security, they're not the only people who are finding this stuff. There are lots of other people who are adversarial, who are not telling you about this. So how do we get past that and have, as you say, a safe space where people engage? We also spoke about the difficulty and the barriers of talking to the right people. So, you know, not just educating legislators, but finding people who actually want to do stuff and are empowered to do stuff and are willing to do stuff, but also setting expectations correctly. You know, it's putting something from this as a problem through to this as a law takes a long time and it takes a huge amount of effort and commitment and expecting security research and hackers to be involved in that entire process is just not gonna happen. So where can we get them involved in key stages to help define, to help steer, to help give input, but actually have people whose focus is on creating this legislative framework, have them focus on what they're good at and have them use hackers and security researchers on what they're good at. And there's a bunch of other useful stuff and we'll be typing this up and sharing it later on, but one of the things that's very close to my heart, being self-employed and a couple of people who touch on it as well is cash, right? Security expertise is not cheap. And we found this in industry that the organizations in industry who tend to have the best security are the ones who've said, this is a business resilience issue. This poses a threat to our continued business function and therefore it's acceptable to spend X amount of our profit on getting the best security people, testing that, utilizing it. There is a unfair distribution of funds, shall we say, across governments and you only need to walk down the street and look at the mess of the roads outside in Las Vegas to understand that money is not being spent on maintaining basic transport and yet defense budgets and policing budgets are through the roof. So there does need to be a shift in terms of everyone says this is a real problem.  Start showing that you're taking it seriously by allocating budget, empowering people to spend money, bring the best people to the table as well. Thank you. I'm afraid that's all the time we have for this session, but thank you all very, very much. And that was, you know, very provocative and very interesting parts, interesting chats here. As Tom said, we will need to be writing this up. We'll have a conversation after this. Please do feel free if you'd like to get in touch with me directly. I'm happy to give up your business cards with me and more than happy to try and signpost the right kind of policy makers to help demystify this a bit more and looking forward to more future discussions. So thank you very much. Yeah, thank you. Thank you very much.