Thank you for joining us today In this session We will talk about spire My name is Augustine Martinifascio. I am part of the HP security engineering team and I am maintainer of the spire project. I'm here with Marcos Okay. Hello. I'm Marcos. I am Working on HP security engineering team, too, and I am another of the maintainer of a spire Okay, so we will be providing an introduction of a spire and Also, we will be doing a deep dive into the the new windows support that we just released So We will do an introduction to a spire in order to do that We will first talk about spifi. We will do a quick overview of a spifi Then we will look into the basic components of the spire architecture We will talk a little bit about the adoption of spire and Then we will start talking about the new windows support We will see what are the difference between running spire on windows and on linux We will see how the development experience looks like And finally, we will see a demo of Spire running on windows This is the first time that We will see spire running on windows in a conference. So looking forward to that Okay, so let's start talking about the spifi Spifi is a set of open-source standards That they all share The same common goal That is to able to be able to securely identify workloads no matter where they are running In order to do that We need To represent an ID or to provide IDs and for that we have the spifi ID That is a representation of an identity we can see that This is how a spifi ID looks like it is a URI That has the spifi scheme The authority component is what we call a trust domain a Trust domain in spifi defines security boundaries So if one trust domain is compromised that shouldn't affect a different trust domain and you may run a Trust domain for development, for example and a different trust domain for production that will Set the boundaries there and finally The path part of a spifi ID of this URI Identifies a specific workload within a trust domain so But the spifi is not only about spifi IDs We also need Some kind of document or place where we can actually put that ID And be able to verify it and for that the spifi standards define What we call a spifi verifiable identity document or SBIT We can think of an SBIT like a passport In the same way that in a passport you have your identity there and there is a way that you The identity can be verified in an SBIT You have the the spifi ID that is the identity and also you can It is cryptographically verifiable So that's good. We have a way to represent an identity We also have a document that can hold that identity, but we also need a way To retrieve that identity And for that we have the workload API The workload API is the API that spifi defines for the workloads To be able to fetch their identities And finally We have what we call the spifi trust bundle and the spifi trust bundle will allow us To verify those identities within a Trust domain because they what they are they are a set of public keys of that trust domain so Let's look into a little bit more about the workload API The workload API Has an important attribute That is that it is not authenticated So workloads Don't need to have any kind of secret or password in order to call it They will get an identity based on a workload attestation mechanism So the workload just Call the workflow API and they will get their sbit The sbit can be in two format There is one format that is the x509 sbit that is basically an x509 certificate There is also a took base sbit that is the job sbit So those are the two formats that we have for sbit Okay, now that we Know at least a little bit about the spifi we can start talking about the spire The spire is a production ready Implementation of the spifi standards and it is open source also With the spire I would say that the main goal is to be able to issue sbit to to the workloads as in many places as We can In order to do that it implements Two kind of attestation mechanism the node attestation and the workload attestation And it has two main components that is the server and the agent So Let's look a little bit deeper into this architecture We can see here the spire the spire asian That has plug-ins both the asian and the server are made of plug-ins and That provides spire An architecture that is pretty flexible that allows you to grow depending on the needs Like for example, there is a new platform or vendor that you want to park A new specific plug-in can be written for that platform And the asian is the one that implements the workload API That the workloads call in order to get their sbits Through a workload attestation mechanism and we also have the server that also implements plug-ins and had the server APIs that allows the to manage the server and The asians call the server In order to get their identities also and they go through a node attestation mechanism And I wanted to include here in this architecture also the data store The server obviously needs to store some some data What is important to know For for this presentation is that in the data store Is started what we call their registration entries? And the registration entries are the entries that really describes the workloads and they have The attributes of what we call the selectors that describes the workloads and that will allow us to Issue the identity depending on the discovered selectors And that information is stored in the data store Okay, so at this point you may wonder if Adoptive inspire is a good idea for you or for your Organizational company let's try to see what are the problems that spider solves and try to figure that out so If you're maybe struggling with issuing workload identities to workloads Because maybe because they are running in different platforms or you have workers running on-prem and in the cloud Looks like it's very good fit for that because it can issue platform agnostic identities in an automated way Also, if you are implementing a system where you need maybe mutual to LS KLS and establish trust between different software system Inspire is also designed for that And we saw that it Manages both both the the platform and the workload the station And it coordinates the issuance of the certificates and rotation. So spirally inspire is is designed to Renew the certificates even if they are short-lived Typically certificates inspire may expire in one hour and Inspire can can handle that and if you Maybe want to compare or want to see what? other organizations Have been doing with this with the spire. How how they have been adopting spire You can look at the adopters MD document that we have in the spire repo You will see there are many different examples of the adoption of spire with different use cases and how spire is being used right, so Let's get into the new windows support The windows support is being introduced as an experimental feature What that really means is that we do expect that we will be learning How spire is operated and deployed? So we expect to make changes along the way That may impact the the user experience and the functionality that you you've seen the first release You will be able to run both the server and the asian on windows We did work to adapt existing plugins and also Created a new plug-in that is the windows workload attester that is able to attest Windows workload based on windows specific attributes or selectors And the the plugin that we have updated is the doc at workload attester We will see how that works in the demo So one of the guiding principles that we have in spire is to try to make it as easy as operate and configure as possible With that in mind We didn't introduce a lot of changes in the way that you can run spire on windows Only some minimal Configuration changes are needed That are very like platform specific related For example Instead of using Unix domain sockets you will be using name and pipes on windows Okay, so let's see a little bit about what's the development experience On windows we have been using the mc2 building platform and it has been working pretty well Again building inspire on windows has pretty much the same experience as with these in linux The same makes file is you said so if you are already familiar with the make file targets you can run them and Get the same experience And now we have the demo. Okay. It's already. Okay my turn Is it working? Okay In this demo today, I want to demonstrate how we can use spire to provide identities in a windows environment Here is DRM. We have all the Sorry services, we will be using and starting we have an espire server and agent that are running in a window host together with the products API that will talk a request stitch To the spire agent using the world of API This product API will have an entry that is configured to work with the windows attestor in another side We will have two services running in different containers the web app and the customer API Each of them will communicate with this violation through the world of API and fetches bits using entries that have dockers attestor selectors Okay Before that the web app will connect with the product API using meter tillers using the certificates they got Let's move to see some configuration files Hmm Here is the configuration file for our windows for our server as you can see there are no difference with the version of you know We use on linux except for the experimental flag for name it by Here the server We'll be connecting to we'll be listening till TLS connection on port 8081 It's configured to use the transomain example the org that means that all the speeds we created for From this server will have that transomain Here we have the mentioned Experimental flag to set a different name it by that name a pad will be used it for local calls to the server API or for in case we use from the admin entries and Here I am I choose to use as no selector the x599 pop This one is the one that will validate the identity of the agent and we provide a CA that is used to validate the certificate that the Asian will provide us to verify its identity identity Let me move to the Asian config file The config file is connecting with the spire server in port 81 Has the same trans domain and set a name it by name for the world API as Here again, we are using x599 pop with the configurates Certificates that it will present As I mentioned it will be using the for at station of the world of the docker and the windows attestors before I'm starting running things I will Display you the configuration of the docker compose this part We have two Containers services story the customer API That use animation call it customer API And it's mounting the name it by that will be used it to talk with the world of API The image the web app is almost the same you have an image that it's called a web app and it's connected There is mounting the name it by and is listening in port 88 That is enough about configuration Sorry, I will Start our agent and know our server For this demo I created some scripts that will Will be used for writing to create entries to a star server all these scripts are online in my repo They will be displayed after we finish it, but you can take it take it and verify So I will start server And our agent Here we see that the server is started successfully It is listening in port 881 for TLS connections Is is listening in the name it by we provide for local calls And here we see that our agent was able to test And it provides an SPF ID That is PFI de is important because it's the parent of all the entries we will create in today because the server will provide a speech to the Asians that have the specters a SPF ID Here in the Asian side with we say that it is was able to test got this bit And the SPF ID is displayed above And it's listening in the name it by we configure To make all these services to be able to attest we need we need is entries So I will create them for this demo in total. We have three entries One is for our web app That has aspiring ID the SPF ID of the Asian which has started It have a TTL of 60 seconds. It is unreal It's not useful to have a speech with this amount of time But it's just for a demo to make things rotate faster The selectors are both of for Docker attester in this case. It is expecting than The process that is calling the world of API have the image ID web app That is our first case and the label docker compose service web app In case of our customer API is almost the same the same pattern same TTL But the difference here is that it is Expecting for customer API for Docker compose service customer API The difference here in is the next one that is a product API That is this one as you see here. It is running in the window host So we are not able to use the docker attester there and we are using the windows attester In this case The process that are running for the user name administrator would get this speed For this demo I choose a simple Selectors but if you move to the documentation on inspire you can see the complete list of Selectors with we are able to use In case of docker we have the label and we are using environment variables and image ID In case of windows we are supporting user security ID username and different selectors related with groups It is possible to add new selectors if we want is depending on Requirements for now we choose these ones Now we have our server and nation running and our entries. I will start our services I will start the docker compose and The products API You can make some time But here we can see that the process their products API was able to communicate with the agent And fetch and it's beat which the speedy ID is products API In the case of customer it was able to communicate to And get unspeak the ID that is customer API The same thing happens in web app. It was able to communicate and get that in the speed with speedy web app now that we have all created I will move to browser and Loving the web app. I spend a lot of time writing the CCS. It was stressful However for us is enough We are getting the product say the products and the customers That means that the web app was able to do a successful mutual connection with products and with customers for this demo I Am not only validating the speech, but I am validating the speedy ID That for example web app is getting from the products API If you go to the code, you will see that we are expecting the speedy product's API So to demonstrate how spire is propagating Sweet I created another scripts That I will be I will use to update the speedy of products API I will show that and you and run that that script So it is updated here and as soon as it's updated and I reload the page I See that our connection between web app and product start failing because it has a new speed That is unsupported for this web app That is because there are two ways to Where the Asian and get a new the bit in case of the entry have our steps on changes For example, I updated a bit or in cases it is about a spare a spire So in this case, I use the update one. I Will be a little more aggressive now and instead of instead of updating and speedy ID I Will update a selector for our web app Another you so as soon as it is updated and I move to locks I will start seeing that The communication between not communication The Asian is not longer able to provide its bits to the web app And there are is permission denied no identity issued. You will ask me why it's happening in the process of attestation When the process is calling our agent we calculate using different queries to Kernel API's we calculate Info we get information about that process. For example, who is running it in case of the username In case of docker the image ID the different information we want and without all that information we compare it in addition process with the all the entries and That that entry have a all the selectors We want in the case because I updated the label to another one. That is not long. It is not longer possible And it start failing If I move to the server, so sorry to the web app and if it's past time Remember it I put a special time of just 60 seconds So in the time I was a talking the species space pirate and we start getting the error in the connection If we go to the error, we will see that is because the species space period in it is not possible to use a mutated SDR to make It works again. I can just Get the selector to its previous state So we have it again And if we go to logs and wait for some seconds because there are a retry here We see that the connection is working again So it was able again to fetch its bits So that is that we demo out running on Windows Out in you want the next one? Yeah, okay That was good well if you are interesting maybe in contributing to Inspire You can join our community We are always Available at the slack Marcos and myself and the other fire maintainers You can visit the spiffy.io website obviously the the spiffy and spire repo where you can browse through the code base and Right now the demo that you Just saw it is in Marcos fork We will work to to get that work also upstream And you can download the spiffy book there You will find a lot more information about how to operate and deploy and spire That's it No errors. So that is what was successful I think we may have some time for a couple of questions Sure Hey, so I missed the beginning of the talk story for the potentially stupid question You mentioned that there was some extra work needed for the docker workload the tester on Windows I work on container the on Windows and would like to know if there's anything we could do to help you in that I think that at this point. Yeah, it was a little bit challenging to to get The information like the same kind of information that we we got like running containers only on Windows Marcos was the one that implemented the the docker Workload tester. Maybe you yes basically if you take a look to how The tester works on Linux we depends of these groups In case of we know that's it does not exist but exist a replacement that is the object shops That's what she shops has as name this container ID So what basically we're doing now is verifying Between the list of shops if the process we are getting the call is running with that shop It has charged successful and we are able to come with that ID. We are able to communicate with the docker API and get all the information we need But the process there is the challenge is there was how to get the is the Docker if you the docker ID that is running the process Maybe I if I remember correctly the most challenging part was that we didn't have like a Single API call that we could call to like yeah from a process ID to get this the job Yeah, yes We need to do several calls to several places to be able to get just the shop and with the shop then we there are there is a kernel function that is is Processing shop. I can remember there anymore right now, but we use that to validate but the hard part is Getting the all the shop to verify that That is if there if there would a way To simplify that process, maybe that that would be a great a great improvement Yes, if you look at the if you look at the code, you will see that there are a lot of different calls there loop and this different things that We would it maybe there is a simple way to do that The container windows expose ID Okay In the case of container ID, I need to verify I need to run things there But that is one of the next steps Container because there are people that are asking for container D on Linux So we want that one on Windows 2 So that's something we will be working for sure So yes, just told me and we can we're together there that you know issues Okay Any limit on the host operating system, I mean Windows 10 Pro will be sufficient to run this demo Sorry When the host operating system is a Windows server with the server but I run it on Windows On Windows 11 and work too, okay But in Mike in this demo was using Windows servers 2022 I think that is the last one Because the image I built was there You can take a look to the image and you can change the image because the code to create the image is in the demo So you can change the version if you want any results and I mean performance results to put how quick you are Did you do any measurements? We haven't done yet But interesting Yes, yes, one of the next step to is making it work on Kubernetes then it will be more challenging because there are some several limitations there But that is the next step Make name it back to work in different language because right now is supporting only on for JPC on Windows and in dotnet


Good morning today should be the 101st edition of the anxious morning here on YouTube, but as you can see it is not So I just wanted to let you know that just due to raw time constraints I'm not gonna put them on YouTube going forward at least for now Maybe down the road. We'll pick it back up again But I just don't have the time to produce these into videos every week and get them up here So if you have been watching the anxious morning every weekday morning here on YouTube since the beginning of the year Thank you. I really appreciate that if you've been commenting and interacting with me here I appreciate that too, but unfortunately the audience is smallest on YouTube Most people consume it via email because it is an email newsletter They subscribe to the email and get it every morning when they wake up or they listen to the podcast version of it So it will continue to exist in those two forms if you'd like to continue to access the anxious morning Go over to the anxious morning comm with the anxious morning dot email and all the ways to get it are there I will put links in this video description All my usual content the weekly podcast the anxious truth that will still be here on Wednesdays My live streams on Mondays will still be here the videos I do with Lauren Rosen and other random stuff here and there It's all gonna stay here and the original hundred editions of the anxious morning will continue to stay up here in this playlist So you can come back and watch them as often as you want So again, thank you for support here for supporting the project here on YouTube Hopefully we'll be able to pick it up at some point one day But if you want to continue to access the anxious morning, yeah, you'll have to read the emails or listen to the podcast version Thanks a bunch. I appreciate it and I'll see you guys in the next video


What do you see and why don't you start by taking us through sort of take us back to the acquisition, what's happened what happened there and what's happened since and then we'll get into the Hadoop angle. Yes absolutely so the acquisition was a great thing for us what happened was that we had you know Aster was kind of the leader in this emerging technology space of big data for the enterprise. There was obviously the leader in you know data warehousing, enterprise data warehousing, and so the merger of the two I think created a leader in the big data space so the great thing about us being part of TerraData is that we have a lot of we have great amount of resources we've been able to increase the amount of R&D investment that we're doing we also have access to resources that we didn't have before for instance one of the things we did after the acquisition is that we came out with a hardware appliance that fully packages our software on the hardware packaging that's fully supported by TerraData and that something would be very hard for us to do frankly as an independent company so we're very actively exploiting synergies between TerraData and Aster in terms of marketing, just technology and the amount of resources and support we have is great. Now what is it, did you plan on dropping Hadoop into that appliance? Is it already there? No so what is that that's Aster software on an appliance so it's our software on an appliance packaging and it also includes management software from TerraData and includes an Aster TerraData connector so if you have a TerraData at the warehouse you can just drop this box plug it in and very quickly get up and running and do ingest new types of data and move them over to your


Hi everyone, Joe for jaspyscasebrakes.com. Happy Saturday coming at you with this fun break right here 2021 Tops tribute baseball six box pick your team at number nine from jaspyscasebrakes.com There's the case right there. I think this is our last case of tribute too. Thanks everyone for getting in on the action It's only a handful of people bought their spots straight up Jonathan Arnaudy ended up with the last spot Nojo getting his cubs You can see a lot of people going with the number block option So that's what the R&B stands for random number block So that means we pull those teams out from the pick your team and we turn them into a serial number break right here There you go. So it works just like a number block break Only for that set of teams right here and only for that break pick your team number nine There's everyone there and we did the randomizers in a separate video if you want to see how all that went down Keep this I guess maybe right here. All right. There was a second one with the different set of teams that set of teams right there There are the numbers and only applies to that pick your team So it's a serial number break inside a it's like a hybrid break inside a pick a team break now for those these two number blocks There are gonna be non numbered cards So we're gonna collect those into one lot and then give it away to One person in each of those number blocks right there so you can get a nice a decent stack of base cards to which Which look pretty sharp. I think there's 2021 That's the configuration there and a lot a lot of nice stuff in this tribute baseball We got tier one baseball on the site to boys and girls We just loaded up that fresh case not too long ago just a few hours ago So there should still be a decent amount of teams left If you've missed out on previous times Usually there's a base card on the bottom and a base card right on top each hack has some kind of hit either a rally or an autograph Let's buy the base cards off the bottom here You can still see the packs on the top camera, right? So they're not going anywhere And if i'm not mistaken, there's only one rookie card per box So that kind of gives a little extra boost in value To some of the rookie cards. So pretty good looking set nice two with maryfields each row The babe ruth one out of 99 Yankees are a number block team. So that'll go to yankees one That'll be for the x-line It's pretty cool. We'll do that. We'll do that big randomizer at the end. All right now the hits First one is going to be erin nola nice 31 out of 50 one of the One of the nicest autographs in the hobby. Maybe the nicest autographs in baseball two-color patch and on-card auto going out to The fillies which are a number block team. So that'll go to philadelphia one Is it on? No, that's on the top list here. That'll be for the x-line. There you go now josh As you know, you can go to mlb.com slash authentication and punch in those letters and numbers right there And see where that jersey came from. Maybe you made a start that day jc seven four three five one two So if you look that up you can then you can look up his You know his game log. Maybe he made a start that day. All right behind mike trout Is going to be a dual relic Marcus simian and matt chapman 95 out of 159 It's a nice dual relic card going to oakland I think most of these are new. This is almost like a This is almost like a random number block rate. All right, there we go So oakland five Is part of this bottom one here oakland five is going to be for chris Aaron knows pretty good I think he owns a lot of teams They're a stamp of approval matt chapman So that's a's two Oakland two that'll be for daniel So the number blocks we go by that first digit right there directly to the left of the slash hard to see in the sliding, but There you go. And that is jc 762 314 If you felt like looking that up behind jackie robinson is Brooks robinson nice 107 out of 199 orials So orials seven Is part of that top page right there orials seven the x-line. There you go From the best third baseman in the game Now remember everyone because of the global top loader shortage We have to use larger top loaders for thinner cards from putting a blue painters tape right there to make sure they don't rattle around during shipping but If you choose to take off the tape put in a different top loader or for whatever reason it's not there Just be careful with the cards when you take them out of the packaging. All right next autograph is nate pierce and 84 out of 99 Blue jays picked up straight up by steve right With the blue jays the hit that I placed up there There's Lou Gehrig And it's just a triple relic freddy freeman 13 out of 25 three colored triple relic For the reigning mvp Braves are a number block team braves three Atlanta three is going to be for shane Set of packs. Good luck. If you want more baseball tier one in the store Look at diamond kings too Run through some diamond kings as well There's austin meadows five out of 50 for jeremy And the rays all right chris brine having a great season there he is And he reveals a jim tome and brice harper 18 out of 150 philadelphia eight will be for the x-line there you go josh philly eight There's yazz And there is louis patino double o four out of 199 Padres four is on this side here. That'll be for roy And padres four is there and judge? Aaron judge reveals a maddles One color triple relic that is 29 out of 99 oakland nine Will be for mark Show you a tiny right there could have a really nice season this year mvp season maybe Shohei reveals an illoy hymen as two out of 99 poor illoy hymen as That nice vintage design Tor like some sort of pectoral tendon or muscle or something like that There you go. Nice. Yeah that 1952 design Classic white socks are a number block team. So white socks, too Is on this list that's the x-line there you go one of his last bot mojos Right there last bot mojo strikes again mariano Rivera reveals A stamp of approval relic yordon alvarez three out of 50 For the astros john picked up the straws straight up So mlb.com slash authentication jc 750 520 numbers are kind of small and the last one here is matt Chapman And old oaklander Dennis accuracy 79 out of 150 So oakland nine that'll be for mark with the x Next box a lot of baseball hymen after being no hit last night Indians are up six one on the regs Wade miley That did not expect if you told me That john means and wade miley would have no hitters in the same week I don't know I think I would have paid a lot of money to say no that's not gonna happen We're already at like what Four no hitters and an extra bass card there four no hitters. Maybe muskrow rodon muskrow against the rangers carlos rodon against the indians i think John means against seattle and then wade miley against the indians again So that feels like a lot At this stage of the season We're not even in mid-may now usually there I think what the most How much what's the most In a season four or five maybe Thanks roger maris 82 out of 99 So yankees two Will be for the x-line Right here. We got another dual relic right here. Javi and arizo 23 out of 50 cubs jonathan wait, steven who has a irons Including 100 Wade miley have 105 million dollar contract Is that what you're saying? The autograph is nate pierce and again 10 out of 99 for steve right in the bluebirds I think we'll see another no-hitter Petalanzo he reveals a yoan mancada Two-color triple relic 117 out of 150 Oh incoming you're saying Oh, that's how they did homer bailey, right? Homer bailey throws a couple no-hitters and then just gets overpaid Um white socks seven That'll be for josh There's urney banks and there is there's ryan mount castle the rookie card going to the o's So someone's going to get a randomized this non numbered card right here And the hit down here is andris hymenet 64 out of 199 Mets four Is over here. Yeah. Mets four is ferroi. That was the petalanzo Reggie jackson Reveals. Oh a nice patch here It's the piece of the baseball where the elephant stands three out of ten.  Maybe he was on the mound that day Check the game log All right, joey vato, louis patino 79 out of 150 Ancestral indoor Getting on base getting a steal forcing some errors Padres padres nine 79 out of padres nine will be for mark We're gonna walk All right halfway through this break this break is actually kind of sneaky long There's a lot of good stuff in here. All right I hope those stamp those stamp of approval cards with those mlb hologram stickers Hopefully will be a feature of of more and more products In uh in years to come I'd like to see that more Onwards next box chain beaver max kepler. Nolan ryan Strasburg four out of 99 kershaw and aeronado uh nationals Jeremy with the gnats I realized that it's been all al teams that have been no hit The nl. Padres no hit the al rangers in that game The indians twice and then the mariners Is there gonna be another no hitter will it be an nl team? And maybe they're just that unpredictable you could be like Yeah, walker buehler probably a good shot at getting a no hitter, but he might not have one for for years And there'll be some random pitcher 42 out of 150 michael confordo. I mean i'm not saying that that the uh That wade miley is bad carl's are going certainly not bad nor is john means john means a solid too But they're just not the guys I think of When you're when you say oh yeah, that guy's gonna get a no hitter. Yeah, that doesn't surprise me 42 out of 150 Mets two will be daniel behind blad Is andy young 98 out of 150 arizona 8 Is on this list here arizona 8 is andria Bonnie gwen reveals a ramon loriano two-color triple relic 18 Out of 50 No check that sorry 10 out of 50 A little bit of a shadow there 10 out of 50 shane With oakland zero there's francisco andore indian's edition Revealing a seven out of 10 Elohim is a nice little cool red border right there That's gonna go to the x-line. Did you get both elos? I think you might might have white socks seven The x-line Nice congrats He'll be back. He'll be back. Hopefully better than ever. All right behind alberpuhl's Or does he end up anywhere? josh bell 25 out of 99 josh bell stamp of approval pirates edition here And pirates five will be for chris So again, if you go to mlb.com slash authentication jc seven four three 281 Wait, he did the pools get signed by a team tj La rusa base. Oh, you think you'll end up back back with the cardinals I think you'll end up with a dh-ing team. I guess unless maybe the cardinals the dh is around in uh Next year they might bring uh Puhl's back try to get some milestones And there's blake snel 65 out of 99 Oh, you're saying x-line did get both autos. Okay, okay I get I see I see x-line would love to see him back with his cardinals or 65 out of 99 blake snel Jeremy picking up the raise straight up. That's still raise edition And that was a dillon carlson rookie card, which is not numbered. It'll be randomized to someone in that group two left I thought the early speculation Um was white socks. No eloid.  That's true Yeah, and then rotate someone else in there I mean how far is poo holes away from the milestones? He's already got 3 000 hits I mean, I'm sure he wants 700 home runs is the big one 700 minus 667 He has 33 home runs to get to 700. He does he get that? There's yellich And there's yachty. He just activated today 54 to 99 dual relic Cardinal st louis 4 Is going to be for shane behind willy stargel is jim rice 33 out of 199 Red Sox jonathan kent picked up the red sock straight up behind johnny bench Is cool whit maryfield 002 out of 150 Triple relic for the royals chair me picked up the royals straight up Soft sleep here. All right. Oh, that's the redemption. Let's do that last any guesses on that redemption There's one soto The autograph behind him is the wizard ozzy smith 14 out of 50 That'll be for st louis 4 on that top list. Shane white st louis 4 He would definitely be maybe a keynote speaker at jaspy's autograph camp to tell all the young kids how to How to improve their penmanship Hey for my dodgers max munzi 46 out of 150 stamp of approval Dodgers are a number block team. Dodgers are on that top number block. That's for Dodgers six jose So jose if you go to mlb.com slash authentication and Punch in jc 769 162 We can see what what date that jersey came from looks like the road graze and you can look up max munzi on baseballreference.com go to his game log for whatever year that was And then see if he did anything that day. All right, you were due to receive an autograph green parallel of Now they have the city name city and team names here, which I really like tops. What's happening here ja Atlanta, arizona. Oh just team name angels joe adel All right angels are a number block team angels zero Rob flores.  Has joe adel seen the uh Has he started his minor league season? I think all the minor league teams have started, right? Has he played yet? He should have No, maybe not No, he has He's at triple a played a couple games already. He's three for nine with a home run a couple rbi's stolen base a couple doubles Good start to his his minor league season That'd be hashtag good for the hobby If we see him get called it. I'm sure you will get called out at some point this year maybe Maybe after I don't know How long do you think maybe a month? Maybe by the end of may we'll start seeing These guys keep raking like wander fronkos hidden hidden pretty well First couple games of the minor league season might see some of those guys get called out later in the month Oh, yeah, tj needs some marlins here Specifically he wants to he wants to see a little jazz. I'd like to see some sort of uh Train whistle hit would be great out something out of five and under Even if it's a base car, that'd be cool All right baseball fans. We've got tier one baseball On jaspys case breaks dot com and we've got diamond kings baseball So if you want to run back some more baseball tonight, we definitely can do that jaspys case breaks dot com Don't have any more tribute not that I saw anyway There's max scherzer 41 out of 99 going to jeremy and there's steven strasburg right there's teammate Poor max scherzer went seven and a third innings had 14 strikeouts National ended up losing to the yankees and extras today. All right. Good luck everybody got austin meadows revealing a Nice duo here showy otani and mike trout 20 out of 25 They're hosting my Dodgers tonight my my slumping Dodgers. What time is that game? Seven o'clock game, maybe no six oh six oh seven game less close time Switch over to that top the hour Um angels are a number block team angels zero is also for rob Randy johnson reveals a diamond back Randy revealing an andy 18 out of 25 For this number block here. Andrea with number eight. All right. There was garret coal And here is kyle seager 17 out of 99 seattle picked up straight up by greg Two-color triple relic that javier baez And zander bogart's nice six out of 25. I think we've looked this up That is actually a piece of the green monster, which is pretty cool Maybe zander Hit one off that very spot right there. I don't know if it's that specific but Six out of 25 red socks picked up straight up by jonathan kent.  All right the big hurt. Trust me. She'll like it too He says in his commercials. I'll take his word for it. Jose al tuve 44 out of 150 piece of his jersey going to john and the stroves There's the number there jc 734040 And last but not least behind the man of steel ricky henerson we have louise garcia 41 out of 1 at 99 Nationals jeremy razor picked up the gnats straight up Thanks, everybody. That was a nice break tribute baseball. Pick your team number nine Let's do some randomizers for the non numbered base cards and then we uh, then we'll do i'll show you a quick recap All right, so let's go back to the uh, the list Let's grab that angels yankees number block first And we'll use one dice roll for both of those lists Let's roll and randomize both lists four and a four hard four Two and a two to make four one two Three and four the hard way It's the x-line. So josh, you'll get all the non numbered base cards that are there Including that dylan carlson rookie card. I think All right, let's grab the other set of names from the padres giants blah blah blah number block shane down to mark And once again, we're going to go two and a two for the hard way name on top gets it one two three And four After four there you go chris last spot mojo You will get all of those non numbered base cards for Uh for that group of those group of teams right there. All right So here There's a quick little recap Really nice stuff Tribute is fantastic Great design nice on-card autographs Hologram stickers are always cool This was part of that angels yankees, atlanta, philadelphia, blah blah blah group Ozzie smiths There's the dylan carlson Roger merris got a couple eloy hymen as is there, which was nice Brooke robinson arinola And for this other group right here a couple andy young's The ec a lot of a's in this group right here, too There you go. There you have it. I'm joe for jazby's case breaks.com. That was six box pick your team number nine I'll see you next time for the next baseball break. Bye. Bye


Welcome to Toffy TV, well the World Cup is nearly finished, the plays are back in pre-season, but we haven't got any new serenades bars and people are starting to get a little bit twitchy about it, they're starting to get a little bit worried about it, really you. I must admit, I am a little bit, I am a little bit, I expect it to be maybe some kind of movement, some kind of activity, just what they've happened by now, obviously the last week or so there's been the teeny talk and now this talk of us walking away from that and forget about that, I just thought there might have been something, there might have just been a little bit of movement and I can understand why people are getting a little bit worried now. Yeah, yeah it's hard isn't it, because I suppose we all are, I suppose we all want, I suppose we all want the face wanting through the door, I think once that happens you kind of go right, yeah, you've got to handle on this, I think, I think one thing we have to bear in mind is that the manager and Marcel Brands will have who they want in their minds, there's lots of negotiation tactics going on, you know, with players they want, there's obviously the assessments are going on with players we currently have and one of those conversations I guess will be, can we get more out of what we've got, okay, we didn't perform last year, we were way off it last year but with a bit of instruction and with a bit of guidance and with a bit of an identity, can we get a little bit more out of that and also of course who can we actually get out the door, it's easy for us to sit here and go get it, but clubs don't want them, they're not moving, are they? All that being said I still feel as though we need to bring someone in quickly even if the next, you know, the rest of what he wants take a couple more weeks whatever, because I think when it's a new project, so to speak, I think you want to get it off on the right, I think the fans, a lot of the fans want to believe in what Brands and Silver will do, there'll be an element who don't trust it because they don't and that's fine, for some reason will be justified or there's just like negativity and mourning, so that's fine, everyone's to their own, but I think it helps with the whole process if we could get our first one in through the door. I think communication's a big thing, we spoke about this in the past I think when Marcel Brands came in and he didn't into, you know, basically on the first day, I think that really helped to understand the philosophy and I think, you know, with Marco Silver as well, I thought the interviews they conducted really well, it could just be that, another sit down with Marcel Brands, so you've been here a few weeks, not focused on anything particularly just being here a few weeks and the pre-season's here the manager's in now, how are you settling in and not just to rest a few fears because I sometimes feel like that these things snowball, you know, it's a couple of people, a couple of people start saying a few things and then, you know, especially with social media and other people like, oh, you know what, I feel a little bit the same, but you don't want to show that negativity so early on, you want to be positive about things, but it all snowballs and like this time last summer, listen, we'd bought a few players and we were all happy and we're looking at a few other teams at the moment and we're seeing they're buying players and actually the kind of players that you'd go, you know, I wouldn't have minded him, you know, there's some that you're like, oh, I'm glad we know we're near them, but there's some where you're like, I wouldn't mind him or, you know, I think that just, it doesn't really help and we know because I understand what you've just said there about assessing everyone, but we do know though that we need players and we need certain players to make us better, regardless of who we've got now, there are positions there where we look at it and go, you know what, we need bannies and something like that.  There was nothing for a few weeks and then it was gone and it kicked off, didn't it? And that was the same kind of thing he was coming in, assessing what have we got. But you're right, you know, we know that we need a left-back flag and say, that's what we know, you know, I love Leighton Baines and I still feel as though Leighton Baines has got a lot to offer us, but we do need another one while we wait for Anthony Robinson probably to progress a little bit, so therefore for me, the care and say anything, I would like Evan to tie up, you know, there will be games and shape it, transfer negotiations and unless you're prepared to just go £40 million, you're alright. Right, but at what point do we, at what point do we start looking at value of players because I don't think we did last year. Well, we didn't and I think the big, I think Marcel Brands has reamed it, so to speak, is to get more bang for our book, so to speak, and to come in and go, you want us to run as a viable business, you want me to develop this club so that we spend them well. I don't know whether that means that you, after when you're negotiating with teams say, listen, we're not prepared to pay more than that. If you want more than that, then we look elsewhere. I don't want to hear that as a fan because care and say anything for argument's sake is someone who I think would really do well at everything with a good opportunity, you know, good sell on value if you want to look at it like you're done like that, but first and foremost, he looks the perfect replacement for Leighton Baines. I think he'd do well, I think he'd enhance our team, whether that's to get more out of Baines or whatever, whether, you know, there's lots of things. So he, for me, would be one I would call a priority. But if Marcel Brands thinks, well, he's, they're asking for 30 million, so there's a chairman left back there for 25 years, 18 million, and I've got Anthony Robinson, who Marco Silvers looked at and gone, he looks all like this kid. Maybe it's not worth paying 30 million for Caden Taney if you don't know whether he can do it in the Premier League. I don't know, maybe they look and go, well, you know what, Danny Roses, 40 million, he's an international for England. So there will be that. And I think, to be honest with you, Pet, that's the way our club has to go because let's look past an open checkbook and look at how we sustain ourselves, how we look and go. Right. Yes, we want money every year. Farad Mishie, he was spoken January and said, well, he'll never be a problem and I may buy what we want. And as far as we're aware, transfer fees for players aren't a problem. But people are starting to get worried about that, don't they? You know, I've seen comments again. I know it's only social media, but I don't like seeing it only social media. That's where you've seen. They are the opinions of Everton fans and people are starting to now fall into the same, you know, we haven't got any money. Is the stadium taking all our money? You know, it's all, there's no, there's been no more, there's no more news on the stadium. What's going on? You know, and it's all, it all just plays into this paranoia that as Evertonians, we seem to thrive in, I think, this paranoia, paranoia of, because no one's fill in the space. Yeah, this paranoia of what's going on, where's the money gone? We're getting blood dry, blah, blah, blah. You know, and I, this and I fully understand that. I fully, fully understand that. What are we getting blood dry from? We have massive debts that we don't have. No, I know, we're going after the stadium that we had no chance.  The transfer, the wage bill, as compared to spares is ridiculous. Oh, no, and we don't perform anywhere nearer as well.  Because that's why brands are here, right? I don't believe and it might just be me, But what I've heard and what I've read and other things like that, and my own common sense doesn't make me think that Marcel Brands, in his job at PSV, tearing it up, progressing well, champions three times out of four the last four years, really developed that club, loved it there, big vent to get him out of there, difficult to get him out of there, it took us two years to get him out of there. I don't believe he walks out of that job into a club that hasn't really got any money to spend, that doesn't really... Well, he's not an auditor, is he? You know what I mean? No, but... That's what I'm saying. He didn't come in to... No. To balance the bit. Oh, because he came in to do a job? To do a job, so he's not going to leave one job. That's... You don't leave a job, or you shouldn't leave a job on the premise of, well, this is what's happening, this is what's happening in this other job, without you doing some homework and going, what am I guaranteed though, and that, it took him two years to do that, okay? So, he's not going to do that, and why would Marco Silva wait and wait and wait and wait for evidence if it was to come in to go, yeah, you've actually got to... We don't have money. We've got these big dreams where we haven't got money when he was offered all kinds of jobs. So, they've come in, know them, they've full well what the picture is. I choose to believe that the negotiating at the moment with a few players, which is what we're led to believe, all of those things could, the stars could all align on the same day, and we could go bang, bang, bang on that day in the streaming science. But it would be nice, wouldn't it, to have, because, I mean, one of the fears of this summer is, of course, is that it's a short and transfer window, you know, the season starts a little bit earlier, it's a short and transfer window, because it shuts the night before the season kicks off. So there's all that as well, you want to play as in for pre-season, that's almost like the golden rule. Going back to what you said about Cooman and his face summer, that didn't work, you know, those players didn't work. I'm not, sorry. No, no, yeah, I know. I wasn't saying, just to fight, I was just saying, we've seen this a couple of years ago with Cooman. It didn't work though, because we brought in players, although we did last summer certainly. But we brought in players that summer that we paid well over the odds for, and, you know, a different level. I'm sitting in this one. Yeah. But you want to get players in, you want to get them integrated, you want to shut, especially with a new manager, with a new style of play. But if you're buying players, you play that style of play. Yeah, it doesn't really matter, does it? No, but if you're buying players, you don't know the other style of play. It doesn't really matter, does it? Yeah. So, I'm not sitting here going, listen, everything's great. No, no, you know, I am the same. I'm kind of going, I just need one, I just need one to just settle any little lingering worries, because listen, I defy anyone, any evertonian, to not have a little bit of like, oh, come on, let's get, let's, let's start. Because we all will be like that, because you'd always want new players. OK, we might need eight. Yeah, of course we might need. But I think if you get one in, you kind of look and go. And I think if that happens to be care and say any, I think a lot of everton fans would go, that's the exact type of sign and we need this regime. No, I think it will be because if you look at. You look at the balance of the team, this let's not forget, we bought Towson and we bought Walcott in January. Yeah, and then you play it. They made a good impact.  Yeah, he's just too busy showing off his wonderful body. He's hanging around with wild boars and things like that last night, didn't he? Congratulations, Guilfee, I know you're watching. Of course. So we've got those players. Now you've got Luchman, for now. Yeah, yeah, yeah. For now? He's under contract. Yeah. I'll see. That's why she left for now. No, no. So it is about, but it's about showing off those other positions, isn't it? It is about showing off those other positions. We've got obviously Seamus from the beginning of the season, which is a big thing as well. But it's about getting those other positions about. We've got a good left back. What are you for? I think it's for we need and I think it's for for the team. I think it's quality. I think it's quality and if we bring 304 in a left back, a centre back and a centre midfielder, I think they can. What about the trap end? Yeah, I think, I think we need something, but I don't think it's as agent as those positions and I don't think we'll get the quality to trap end. Simple as that. I think it's on him. I don't think so. But again. I don't think it's on him. I just don't think we... But again, even with him, I like the look of him and all that. He's a flip of a coin, isn't he? Because Adam all of Luchman might be miles, might be miles better than him in that situation. I don't think we're going to get that on him. I just don't say it. I just don't say it. Yeah. But we might. Yeah. I just don't say it. So it's fine by me, isn't it? I think the priority is those three players or certainly a left back and a centre midfielder.  If actually Williams is out the door and Funes Molly's gone already, then you need another centre back. You need another centre back. A centre forward. Yes. But with Toten and Neas. And Calvin Lewin. And Calvin Lewin. What you're saying is if you're going to... The need is a massive need. What you're saying is if you're buying one, you're buying top end. And if you're buying top end, then you're buying that first. I would have thought. Okay. Because it isn't a bottomless pot of money. It isn't. No, no. It isn't. We know that. So you're paying wages, you're paying top money for the top... Yeah, yeah. You know... And I'm very... I really believe that Jank will... Will it... 20... Between 15 and 20 goals... I'm hoping I mean... I think we'll better serve us. I think he will. I think we've seen... I think even we've seen when he went to take the take. The game's end of the season. Sharp. You know, he's sharp, scoring goals.  Different type of goals. Finisher. It's about using... And Dominic Alville. I mean, for all we know, Dominic Alville might... Well, he probably will. Every year he's gone up a level, hasn't he? So if he goes up another level and just adds a little bit of finishing to his game... He's a kid who just needs to finish. Exactly. He can start scoring.  So I understand what you're saying. I'd like another centre forward, but I'd only like one. Who's going to be a difference breaker? I don't want a stockpile one, but I think definitely left-back, centre-back, centre-mid. And I feel as though we need another wide player. I think you're right about Taney. I think Taney would set it off in the right tone. I think he would set it off if we... It's a regime thing as well, a new regime. Yeah. That's what it is. But it's set off in a different way. It's saying, yeah, we're going after young hungry players that all the top teams are looking at as well, and that's what we're going for. It's a... I think it's a... I think it's a... It's a difficult area at the moment to interface everywhere, because I think, of course, you've got your powerhouses that are going to... you know, hoover up all the top talents. Of course, they are the best of the best. I think it... I think though... things have changed in other teams. Now, I see the likes of Fulham. I see the likes of Wolves. And where it's before, we may have said, ah, they won't get it. If we go in for a player, and they go in for a player, we'll get them. I don't think that's too anymore. And I think that's because we're starting to see the emergence, and this obviously starts... this was at Wolves last season. It's happened before at other clubs. Now, they did it for a while. Agents are aligning with clubs, and they're saying, they're looking at players, and they're saying, go there for a year. Prove yourself.  You'll be the best looked after player at this club. And within a year or two, you will move you to one of the big clubs, you know. Well, aren't we supposed to be doing that? Well, we are. But that's not the point. The point is, if everyone's doing it, then it makes the playing feel very different. So I think that's going to start happening a lot. I think a lot of players are going to go, you're going to be shocked by transfers happening. I think it's going to start happening more and more, because why wouldn't you put a player somewhere that you know is controlled in the right way because you're having a big stake in it, and you're surrounded by people that you know you're comfortable with. I mean, Wolves, it's worked really well. You know, and that'll be as long as that agent works with that club, there'll be a conveyor belt. They know they'll lose those players, the bigger teams. But that's fine as long as the next one's coming on and the next one's coming on. And they're getting the turn over. And they're getting the turn over. And it's suited everybody. It absolutely will suit everybody. But I don't think that helps us. That's fine. And it'll help them. It'll be good for the big clubs. Big clubs will not go. You played in the Premier League last season. Thank you very much. I'll take in. Thank you. But for us, we fall in the middle. What do we do at the moment? We've got to try and build to that next level. Well, of course. But at the moment, at the moment, Gary. At the moment. You're right, yeah. It can be a little bit of, you know, shark-infested waters at times. We're going for plays. But I think if we could just get this tainty thing done. Or an old tainty. I think that is the area. If we can go and get tainty, or rows, or pattern hard, or hector from Germany, then that kind of sends out the right message. Listen, as long as they know who they're going after, and they're working on the deal, and it's not just like, you know, one, two, three, four, five, then that's fine. But because it is, that's the time of the year. And it's the start of a regime. You don't show over there. That's all it is. Whereas you're absolutely right. We've got Walcott and Towson, and only in January. And we shouldn't go, well, yeah. But they will ask you to forget that now, because there's two big signings. They are Walcott. I said this to you yesterday off the camera. Probably our biggest signing for a while. It kind of, people just went, oh, yeah, Walcott's coming. But if you actually stop and go, play for Arsenal forever, and play in Champions League, the squad, winners and football fans. Big season for them. You know, big, easy name.  You know, he's got a big season ahead, and I think he could be great forever. He's fit, lad. He's quick, strong, dynamic, and I'm playing with the right manager. I think this time next week... Yeah, if we're still scratching it. No, but I think this time next week, with a couple of games, you know, under our belt, you know, next week, when we've had a few games under our belt and everyone's backing it, and they see the team play and stuff, and maybe there's a few names circling, or we've already got one. I think the world could be a much different place. It's just that the minute.  Every day it's almost like looking at your phone, looking at your phone, looking at your phone, or day, because you just want something to happen. I'm just saying it's sweet. I'm going out for my lunch or something, and let me know if there's any of that news.  What do you expect?  And obviously with what happened last season... No, I know, but with what happened last season, and everyone's a little bit like... Yeah, yeah. We were all in the mindset a couple of years ago, that was like, yeah, we're top seven. Doesn't matter. We're only going one way, even if we... And that might be the case still, but we don't know, do we? No. We're not going to know until we start doing it. Yeah, it would be nice to get one in. It would be nice, maybe, if Mr Silver and Mr Brand sat down with someone at Everton and did a little chat, not... Just an update. Just an update on how everything's going. But just say we've got our targets. Well, that's all you need. I say fill and spit. A little update on the stadium. Be nice soon. Just...  I think, as I say, it's all about just filling the... Don't ever say that. Don't ever say that, Baz, because someone will hold you to that. It's not down to me. I'm saying that's when they need to do it. You said it. I'm saying... Because we're going into the start of the season, then. So what that does, then it catches that first day enthusiasm. It's like we're moving forward. So they've got... I know we know they've got a couple of weeks to get the announcement ready. To update us all and say, even if they just said, it's still all going the way it is, and we're waiting for the next stage of the process. At least we know, don't we? Are you worried? I was going to say, ring this number. Don't ring that number. There's no ring number. There's the case. There's no number. Listen, it could be worse. The club call could be out there. £47 a minute, please. Losing talks with... Never tell me that. Let us know your thoughts in the comments if you're worried. If you're not worried, there's nothing to worry about. If you haven't already subscribed, please do. Click the bell for a later. You know when there's a video coming out. And if you want more videos, join us over on Patreon. We'll see you later.