All right. Good morning. Good afternoon. Good evening everyone wherever you are hailing from Welcome to the Red Hat OpenShift which I am very very very excited to be joined by not just John Willis the person but John Willis the friend John Willis the mentor and John Willis The guy used to work with and now we're coworkers again So, you know, I'm a technical marketing manager here at Red Hat and I will let John introduce himself Hey Chris, it's great. You know, I think you're talking about my you know My kids I was talking about twitch and I really didn't fully understand what it was But now I could just go back and brag to him and say hey, I've been on twitch guy. You've been on twitch. That's right You've got your own thing.  I go by the handle of botch a loop on Twitter I've been doing this mucky stuff that we call IT specifically around operations for 40 years I'm pretty old But I would say the last 10 years. I've been very focused on maybe 15 years on on really the what we've been calling so Precursor to DevOps DevOps cloud Distributed computing if you will and that's you know, I won't give you my boring history prior to that But mainframes and all sorts of crazy stuff, but you know about somewhere less than 15 years ago I got involved in open source projects that related to Systems management, you know, you know some of the original open source tooling. I got into infrastructures code stuff CF engine puppet chef Ran that mile cloud and then Yeah, just been deeply involved. I built I mean I've been done startups my whole life Mostly failed miserable failures. I mean like most startups If they talk about the whatever doesn't kill you make you stronger like that's me for startups But the last five years or six years have been really good to me I sold a company of Dell I sold the company of Docker and and so anyway It's just long story short last October a good friend of mine and other DevOps luminary if you will Andrew Clay Schaefer Said hey, what would you think about coming with me over the red hat and I can be perfectly honest I was like Andrew. Did you but I'm the wrong person? Yeah small company kind of guy You know, okay Andrew like if it was anybody other than you like we wouldn't have this conversation But and then he said he was forming a group with Kevin Barry and I've known Kevin ever and he's He's you know, he's amazing person. He's co-author of the Phoenix project.  Would you want to get on the call with Jim wire? Okay, that's pretty serious. Yeah. Yeah. And this was for frame of reference because Jim is president at IBM now This was back what October? Yeah, it was October last year the conversation.   He's taking an incident call. I mean, I I fell in love with him and you know, so the stars aligned and we We were brought in as this global transformation office And uh, you know, we're we're trying to find our way and see if we can't help You know, one of the things that we talked about is You know, we've done a great job in DevOps, right? Like 10 years 2020 all pat ourselves on the back It's you know, it's a solar giants.  Yeah. Well, I was there. Yeah Very early. I was the only American in in the original conversation, but Like don't ever let anybody's imply that it wasn't thousands and thousands of people exactly who helped build this But but here's the thing in 2020 Okay, we've done good, right? Like like everybody take a moment Pat yourself. Yeah. Yeah. Yeah, but but you know, like and and again, no disrespect to sort I use this as an example because I do think get ops and Are great things but if five years from now if we're still just ci cd and get ops Then we fail Yes time in 2020 and this is what gto What is all about is in 2020? Let's think about the story for the next 10 years And and that's what we've been trying to do and we're trying to meld the ideas of the existing red hat You know, you know me and I you know getting to work for you is always a blast We've got to do some really interesting projects together and yeah, your ace is in my book, bud. So Well, thank you, sir I appreciate that now just to give everybody context john and I worked for a startup together What two or three years ago now? It was a while ago. I was down on years, man. Yeah But yeah, we we worked together on some projects john was actually my boss for a little while and It was it was a lot of fun. Let me give you a heads up, right? At least one thing I'll tell you know, I'll go in and like, you know, again I I don't know how like I guess we don't have to be politically correct per se, but like I it kills me Be nice to our competitors and everything else But yeah, yeah But like one of the things is that like I go in environments and I see what they pay for spunk, right? And you know me and you but you did the heavy lifting You replace spunk in a lot and like a top 10 bank with uh without I mean that's That's a pretty impressive resume Thing, you know, like the idea was the the guy who championed it You know, I was able to get the deal in but You know, we put you in there and like you not you banged it out and that bank today is basically taking spunk off the balance sheet Yeah, no that they're they're saving a ton of money now and it it was just you know Having grown up in, you know, north Carolina and spent so much time working with linux and being in raleigh at the time You know when when we were working together. Well, actually, no, I was up here But you know having spent so much time around red hat and it being just kind of a red hat company Walking in the door. It was kind of like all right. This is what you want to do Well here, you know, move the objects out of my way first and we can get it done So, yeah, uh, it was funny one of the first projects that I worked on there to give me an idea of how like Far behind they were in their dev ops journey like they They had a it was a remote position and you know, I'd come on site every you know a few weeks or so But they literally had a problem Confirming whether or not the VMs they got from ops Were of the size they requested right like keep in mind This is put in via a ticket and the first piece of code They wanted me to write was an actual answerable playbook that they could run To verify that the system meets the requirements of the environment.  They were right like they didn't not only did it take weeks to order VMs But they would come in and be the wrong size or the wrong specs or whatever And yeah, like having to go through that I think was very eye-opening for me from a dev ops perspective Having gone through so many companies where like that was just table stakes, right? Like if if you wanted a VM, you just got it Well, you know, there's not that we do on talk about automatic governance But not to take too much of spin, you know as I go in and I do these sort of organizational forensics or what I did before I'm in red hat and you just interview thousands and thousands of people Not thousands hundreds and hundreds of people 400 500 people But um, it's that trust thing, right? Like I could see why somebody'd want that. It's not just that they made a mistake It's you know, it's the You know infrastructure doesn't trust the developers, right? So I go to the wall. There's a legit wall Yeah, the developers would say, you know, yeah, we always have a problem And you know, like I don't know why like if we ask for a You know 16 gig or we ask for this amount of this space like They just trust that we're running a billion dollar revenue service And and then you go to the infrastructure and people like we can't trust them We have to cut all their requests in half. Like yeah, they support a service that brings in a billion dollars worth of revenue a year Like and yeah, yeah now that's that's a very much a common like dev ops world is There's an instance like an edict on one side against The other kind of deal and it's it's sad but true. So So cool, man, you want to talk about I don't made a governance.  You know, like they're not fully developed But they but yeah, but they have some infrastructure So I'm really good at sort of finding the people who are are working on something They very very few people are sort of aware of And um, and then it just really, you know, if it hits sort of it Sort of mind melds with me So, you know, I I did that with with with chef, you know I came in very early at chef and like I fell in love with chef You know dev ops, of course and you know cloud, of course and then um But about three or four years ago, uh shannon leitz over it into it She defined this thing called dev sec ops Really didn't want crazy about the sort of morphing of the doubt But I got to know shannon and she's incredible And and you know like you start forgetting like who cares about the name. So I got I I dove all in on on dev you know dev sec ops, right in And and I you know, I've been sort of working through a lot of these like reference architecture discussions and What does it mean to bolt down security and the pipeline, you know, all that stuff What does shift left actually look like? Yeah less security and all this stuff But it was again like anything else. I guess it's my biggest problem is I get bored easy, right? And I was Explained the the whole like last 30 years of security In context of dev ops. I'm like, yeah, like I don't want to do that like identity Yes, it's a thing, but like it's not my thing, right? And um when I found is I was starting to get a little bit Jaded on dev sec ops Not because of the name but more of like it was so such a big discussion to have and And I didn't want to be one of those people that had to go research and lane. Anyway, I want to start short I ran into a couple of banks that were like discussing this new problem, which is you know, how do you start moving? You're you're if you think about what what why do we do a lot of the risk? It's for audit, right? Like we we want to sort of prove we have this governance risk compliance We have this you know this risk posture that's bounded with our legal It's our business like is protection of the brand all these things, right? And then how do we how do we evidence that? Well, the ultimate evidence is an audit Right, but but then um, there's this like Incredible gap between what like is in some like 500 column spreadsheet Bank and I'm not joking. I've seen one. No, I've seen it too. I've worked for those companies. Yeah And and what the auditors do right now? I started calling this uh security and compliance theater, right? Oh, it's total theater. Absolutely. It can see even worse I'm talking pre cloud data It was terrible. Yeah And and we'll talk about like how cloud native just like it just leaves the universe in terms of separation But but these a couple of like really really interesting people that I've gotten know through sort of gene kim's tribe Um, you know, you know people that we we work with devox enterprise Probably at the forum And we'd have these conversations at these events about like how does this have to change about and it all comes down to this, right? When you do an audit, you're basically showing evidence and those evidence can be just tightly called attestations and so the the most modern organizations the way they They produce evidence is to what I call subjective attestation models Which means that You know, basically, you know, this everybody knows this you just haven't heard it in these like fancy Terms which is you create a change record The change record describes some human description of how things are going to happen Which right off the bat Like if you have any understanding of complex systems and all that right? Yeah bike I just landed from mars and like really I don't know if that's going to work And then that human telephone game continues somebody on our advisory board says, you know what can you give me two more Sentences about that subjective Novel of what the change is going to do They go back they do that and then somebody in operations who has to approve getting into production Says, you know what? I want a really good backup plan and I need to know You know when does it look and all this discussion is A thousand miles away decoupled from any cognitive activity deployment strategy. I mean like all right, so And and like there are people that you know So both of us know that our industry leaders in the dev outs that work for financial organizations like this is terrible We spend 30 days a year doing audits Yeah, and when sometimes worse, but you have no continuing It's always this sort of event based. Oh, you know the next 30 days everybody be prepared Um, and it actually creates anti-patterns too because people start hiding stuff on purpose Exactly right like you stick things in the in the drawer under the corner Yeah Fully a new technology because don't tell them about that piece right because right that's too Reminds me of my story at duke that I'll have to tell later, but yeah, go ahead. You keep going and so So yeah, and so that you know The question then became like oh, I get this subjective evidence And then the auditors come in you have 30 days and you know, they watch screen prints to prove things and like Really that's like they actually want like screenshots on paper kind of thing. It's yeah Backwards to anything in tech And then and so and then the efficacy of these are just laughable right like I've had zero zero point zero Yeah, zero point zero no kidding You know, I could tell you this great start out this large bank of these people are building What amazon dynamo db on an application that was going on, you know, iPhones that was Crushing in revenue and they were scared to death to bring the auditors in Because they were just like they knew there was no connection To there are so that so when we can get back to that But the point is there were really three things that were sort of hovering one was audits are just a waste of time Every it's a vicious cycle of like I'm not going to tell you stuff because if I do it creates more work for me The second efficacy is like really in we'll talk about cloud native stuff zero point zero And then and then like how do we get rid of the cab? You know, I mean or how do we start having a better conversation? About what is the point of a cab and what is the evidence and if the evidence is Sue tells jane and jane tells bob and bob tells mike Of this like abstract Discussion of what really happens in a complex system. And so we we started mulling over this idea of what what I've sort of coined as objective attestation So what if we could like what if it was very specific about the policy now we make the policy people like, okay Now can you really tell me what you want?  It's immutable Um next no screen prints and so the idea and so we worked on a project last november It was the the participants were no, I'm sorry not in what last april 2019 it was capital one pnc bank marriott Nike sangu kohaira from uh from microsoft and mike nighard from saver Saver group and we put together this it's a creative commons. It's out there. I'll point to it We put a first crack at what a reference architecture could be It looked like where it was sort of a clean room No humans are creating the attestations. They're all digitally signed attestations And I I mean I I love what we did there and that paper's been out for about a year And then so that's sort of one thing and then one of the banks have taken it to a whole new level They they create policies code and I we can show you So one while we work on a paper We we were having these dinner conversations and we were like wouldn't be cool if we got this to work Where we could give policy people human readable constructs To drive this automated attestation engine And so one of the banks that I work with actually went out and built this over the last year Where now the policy people write yaml And that yaml becomes the driver for the attestations and they built an enforcement engine. So that's one thing That's nice. Isn't it awesome? And then the second is Because of that I got pulled into this large open network. He used a group. They had seen the paper And now they went a little different route, which was what we call automated cloud governance similar But in this case we were asking the cloud providers to create Their evidence so that we could use in this You know, um object attestation and I can talk a little more about like we finished the paper It's going to be another creative commons and should be out in a couple of weeks about like and ask for um for the cloud providers To for evidence for certain things they do that can secure our trust or a tenants trust All the things so the in in general I can go in more detail, but in general what we're saying is We need to be able to know if they're making changes that they don't think are of consequence to the consumers But in some ways they might change network routing. They make change a posture That gives adversaries ability to attack. So it's it's right all the most exciting stuff. I've worked on in my whole career Wow, okay So, yeah, let's get off this intro slide. Let's get into it This is the the red hat team I talked about the gto guys You know, I you know the battlefield is interesting. I mean, uh, you know, I think um, you know, if you look at You know, I've taken a lot of stuff to some from derrick weeks and other people. He's over at sonatite He does great presentations on the other. I mean, this actually one is the struts too That happened a couple years ago and just yeah, I remember seeing this when it first came out and I was just like Wow, like the the amount of time we had to potentially Go right was very very minimal, but it was there Yeah, no, the data is like some of the reports that that you know, sonatite continues the software supply chain stuff is You know, like only about three percent basically deal with a zero day Within the first day Three percent or post three months 60 percent of our industry Three months three months for a zero day like not just a zero day But I mean the struts too was like a like a like a heart bleed, right? Like that was if you were using it you were done Like I mean, I mean the the struts too I think some of their data is like 40 000 organizations typically download that that vulnerable library The year Today, right? Still. Yeah, they're still downloading that, you know, there's the node stuff. I mean if you heard like the Yeah Year early become a committer With the sole goal of knowing that there was a bitcoin operator used this library Yep, you know, just you know waited waited out the time got the permission embedded some malicious code into that library, you know, I mean Yeah, like, you know being in the kubernetes community. I worry about stuff like this, right? Like I'm welcoming people in and you never know who you're bringing in. Well, and that's that's another dangerous fact and the whole configuration, you know configuration in the cloud error or cloud native error is the new scary attack vector, right? Yeah, yeah, yeah This commas or an extra stanza that somebody to copy and paste from stack overflow and like it works. Hey, you know I don't know but it's why you know, and like oh that other stuff just created incredible permissive opportunities for adversaries. I mean that in fact, you know the echo fax thing has been told so many times But I love the you know, again, I've got a lot of presentations on this I won't overwrite to but the the capital one is like incredibly interesting, right? They're all sort of the same. They're at least sort of they're they're almost like if you look at any we talked about like the sort of aviation if you look at The forensic of aviation disasters like it's they're they're very systems thinking complex adaptive Um, you know forensics and and so if you look at capital one like capital one to be like, oh, yeah It was somebody who worked for amazon they had inside. It's baloney Like you know what it was it was based on what they call a server side request forgery And it was a team that basically Had to work outside of the process for whatever reason went out and grabbed their own open source WAF Didn't configure it properly like the defaults. Look get this um, they um, so they left bypass on in the WAF And this is doing no good Well worse than this and then took sort of their last known sort of Amazon credential stuff. So they actually were working on a sort of authorized vpc An instance and yeah, like this is the perfect storm of air.  It's authorized here. Let me tell you everything you miss to know about the security credentials I mean that's how and by the way, this is a common attack that happens because the metadata server as has some Has a lot of information that could be very useful for anybody trying to exploit things And you know one of the problems about sort of one of the you know, sort of the um You know the uh that the glass half full about amazon is They did a lot of things to make automation the prime Motivated right using it for all these days Which meant like metadata server was critical to be able to find out your ip address Right, you had this disconnected call now. I need to know stuff about you've given me a notification that the Instance is ready. I mean, but the glass is half empty is that These automation things, you know, if you if you get this sort of you know, um It's imitate somebody who's authorized That's almost every one of the major breaches that happen where you know people get into like the nsa But they got into top secret data on s3. They're always service side request forgers um Anyway, um So this is the DevOps automated governance, you know, I I tried to slap some slides together We're still, you know, working mostly off the paper is less presentation, but um, you know the idea of putting um digitally signed attestations no human kind of clean room with the objectives a short note of time increase audit efficacy and reduce cab activity And this is the guide it's out there actually under it revolution.com Foreign papers It's creative commons. Um, it really I I was literally getting, you know, sort of goose bumps When we were working on this we'd have sam guggenheim who's over at, you know, Microsoft He's like one of the the guys who's been there forever understands the all the backbone of everything they do from the security um, and then you got, you know Uh joined homes from maria You have the the the first fellow at capital one And you have pnc and they're all sitting at the whiteboard. Well, you know the way we show evidence, right? Like i'm like, oh my god Like I get to live this life to sit here and and and and so at the end it was 75 attestations No one company would do all 75. It was really an affirmation of what mariat did what pnc did what and uh, you know and Really proud of the book, um, you know, and you know, this we built a model What we did is we had to figure out like, um You know, it's been I always tell me well, this isn't like the the 101th way to show you what the pipeline looks like Have a thoughtful goal here the goal is we need to contextualize a discussion of how would you describe attestations in Breaking into stages, right like we need to be able to say like this is the checkboxes, right? Like this is the guide rails that you live in and and how do you contextualize? Uh, you know a discussion about attestations that have to be At least granular enough to be in defined in different stages Interestingly enough, you know all these experts, you know the hundreds of ways to describe pipelines in the dev ops, you know slide You know arena, you know side deck arena It took us a half a day out of a three-day discussion to really get this right Because it had to be work From like how could we? Bound attestations and you know you look at it. Oh john that seems pretty simple But like if you think about the people that are in that room, but we we we got it to Basically seven models and you notice dependency and artifact have their own cycle Yep, but you know you have your you know, you know development you build and the other thing we realized is I and we don't see a lot of sort of dev ops supply chains where they separate package And if you think about it from an attestation model, that's really important Yeah, whether it's our file or a container image, right? There is this uh mechanism of packaging and And we built the um, you know the the common actors, but really important what we call controls And uh, you know, I think this whole thing here. I thought it's subjective But I do want to get this one thing. So this is the guide again Um, did I yeah, here's this is something that's important So capital one in 2017 wrote this interesting article about called, you know Focusing on the dev ops pipeline and there was a section in there where they called creating better pipelines Okay, and and this is um, you know because capital one is a big part of gene's forum and all that and so You know and so I got to meet some of the I've been sort of asked not to mention names of capital one Sure. No, I totally understand very sensitive about you know, sort of You know the things that happened to him last year. So I'm being very, you know respectful there But these are public things here. So, um, and and this was an interesting article because it said, you know, hey You know, everybody's sort of new capital one is a poster on fact It's sort of really sad that that breach happened to wanted to probably the the poster trials of fin Yeah It's just that it is those complex Like all the things have to align in the worst way to happen and it could happen to anybody, right? But you know that breach but anyway, you know, they They wrote this um thing about how they put gates in the pipeline, right? And it really was um designed around if you wanted to have auto deploy, right? You know, sort of sort of dev ops authority, if you will You had to show evidence As the service owners the service developers That you could create evidence of the originally I think was 16 things Right that it came from source control. It was um, you had branching strategies or like, um, at least Optimum in terms of the banks, you know, architectural design You did static analysis 80 percent you get you can go through vulnerability all these things, right? And if you could show evidence of these things Then you were giving, you know more privileges about auto deploying and stuff like that But this started me thinking about well, if you're doing this anyway, why couldn't these be the actual evidence? As opposed to the change record And that's actually why I sort of created this working group Which was you know, let's you know, let's take this sort of a gating or control point model or gates and Let's build um, and the other thing that happened is Around the time I started thinking about a google open source to project called grapheus I vaguely remember that yeah Project that originally got a lot of hype and then just disappeared because nobody really understood How to use it. Yeah, and I sort as This is what they do automated governors Right, right like they're giving us this beautiful secret of and actually I found out the back history was I'm not sure This is perfect correct is um, the reason it was created was when they were creating the registry The container registry. Okay, that is a place. They had to have a lot of audit ref evidence, right? You've got you've got tags. You've got all your code right there. Everything's packaged up ready to roll So you better have that stuff So they open sourced that thing and I was like, whoa, wait a minute I think we have a great opportunity and really that was the sort of the genesis of that original project Which was you know start thinking about his grapheus and and we found there were a lot of deficiencies in grapheus I've been working with a couple of companies that just really take in this a lot further But you know as you can see like this is an example of this is right out of the creative commons book that I just talked about but at the source code repository stage the controls would be peer review unit test coverage clean dependency Right and we built everything in this sort of input output model Right because that's how it has to be right like Yeah, it's a change now build stage you'd have you know build source control immutable build You know these unit test and linting You have input output output becomes the artifacts and then you know again I won't like unless you want to stop me but the also where we found a lot of sort of really cool discussions around How do you actually manage dependency management artifact? Repositories right like there's a there's this like especially when you're talking about high consequence You know services, you know, you know customer facing top 10 bank Code right, you know the the the things that you have to start thinking about is You're not not just sort of you know Are you is it a trusted? So is it a sign trusted source? Right, is it what is their license checking built in is is the what is the age of the artifact right like having Approved version the same thing with package stage right all that stuff again I'll you know, I'll just tell people you read the book but And you know artifact stage Is it immutable right we get into at what point should everything at this at what stage should everything be mandatory immutable Right, and you know you get your prod and and and again here's sort of and the other thing we did which is really cool is We we tried to figure out like if there was going to be attestations, where would they come from? So we weren't right like one vendor over another, but we we literally walked through A matrix that sort of develop a level you might get You know at your clean dependencies from like, uh, you know a check mark for black dark or nexus, right? Or sonic cube or and you know say Anyway, um, I'll I'll sort of run through these real quick, but um, because I do and then and then um And then there was like after that one of the banks went back and said hey by the way, you know that whole thing We didn't reference guide Like we need we need a Kafka around it. Oh, of course we do. Of course you do. Of course you need How could we not um, how could we not have a production operation without Kafka? That like access station for auditors, right? I need secure. I need to secure that right And uh, and then you know, and then there's like um, one of the companies has gone a lot further And so what one of the things they're doing now not only have they gotten into policies code YAML files and all this stuff Um, they've actually now, you know, one of the things you realize we never talked about enforcement in the paper Right if you want to do this you got to do both right you got to have the Evidence and you're gonna like why not like have the and so it realizes you had to create sort of an enforcer model And and then what's really cool. Why not use opa and rego, right? So they're Using opa and right so all the stuff. This is what's so cool the stuff that I had in my head I got sort of you know, gene gives us this opportunity to go to portland every year and work on these papers I'm like, I got a good idea. You know, I quote like the we actually Like in three days built this really cool guide and then one of the banks was so energized by this They extended it to YAML files that policy people and today they have, you know, that built in as the final gate is Driven by opa You know, and he had great I mean that's opa open policy agent for everybody to edit into like it's a cncf project it is in Some degree of heading towards graduation, right? Like it is a very trusted project. Yeah, no I mean my only point is I I'm not positive. You know, I am I was scarred very early my career with prologue, you know But you know, and I know rego is not exactly prologue, but you know, I just like, you know, maybe king for day I would have started with a more Malleable language, but but other than that, right? It like you said, it's there. It's everybody's got it everybody's using Wi-Fi it and and what they've done is basically created a nice sort of um, you know translation and Relation coupled relationship between the the yaml pack files the policy is code files It's really beautiful. Um And you know, you see how all that and you know, sort of decoupling policy Uh, it was um, this is sort of an example. It's a policy is code All right, like but that's just yaml, right? Like yeah, imagine that just you know, and I Project that we've used a gherkin model this okay Very simple, but actually so you've kind of guessed the bank because they they've actually built They've got some of their stuff like graphius.  It was good idea, but like nobody's really Thought about how could you use like the the notion imagine that one of the attestations is taking the build log tarring it And then turning that into a you know a shot and putting that wow. Yeah Now you have real real immutable Yeah, like meta immutable Like yeah, the graphius like didn't give us that and then um And then graphius doesn't really have uh, you know a relational database or some really Permanent store, but you know what they stuck with graphius and now they've they've got like a Graphius my sequel which is awesome They've uh, they've modified their own version of graphius to sort of make work in this model And they're basically trying to contribute. I'd love to get red hat Excited about graphius. So you know again, maybe maybe maybe this thing I mean this entirely possible somebody at red hats already looking at it I don't know could be because what happened was it came out There was a whole everybody got all excited about it And then they couldn't really figure out how to fit it into their work because that was a model graphius It would like look great. You used it. It had all these sort of really honestly architectural floors for Like if you weren't google it didn't work And p&c stuck with it and now they've got it where it actually works for a bank and they have this go badge thing This is really cool too. So one of the things that um that I love about automated governance is that it's just once you get to for the first step You get to see all the things you couldn't see until you got to that step That's right Like we had to have the attestation model to be able to say. Oh, well, why can't we create re human readable? Why do we have to have policy people go to it people have it people then create? You're like, hey, I see all the office space, right? Like yeah, have you read the What exactly do you do here? That's exactly And then the other thing was that um as they started thinking about um How do you put all this together? You know one of the things that like all the stuff is there, but like the They started thinking about like it's sort of you know, everybody's cmdb out in Everywhere in the enterprise. It's just publicly, right? It's just not But yeah, you have this notion of like the service name or this mnemonic that describes This thing, but it's just if you go back to cmdb and you look at the configuration item It's like like there's no possibility in the universe to reconcile that with cloud made No, like yeah, no like the fact that you can maintain an active configuration management Database with pods just spinning up and down left and right Thousand changes, you know, I mean, I don't think it's like amazon but thousand changes, you know You know the police in an hour right or whatever, right? Yeah, like just keeping keeping that under wraps and like having that as a valid database would require another like whole System just to keep that up and running almost the equivalent size of the existing system Some of the some of the things about legacy like sort of risk is like you like even if you wanted to solve it It'd take a three-year You know all hands on deck You know vomit to solve but but here's the thing though This is why I like that what we're finding is people who are implementing it We're actually solving some of these complex problems where You know the alternative would have been a three-year summit with everybody in the company Versus emergent properties. So like in this example, they they have this go badge thing Which is it's an open source project. So in bit bucket it sort of shows but the The componentry behind it is interesting in that Basically, they've actually as part of the or DevOps automated governance So every change has to be sort of a pneumatic of the service It's got to be the component definition and the version And so now that when when you actually want to sort of create pack files or start this policy as code initiative You have to define Your component at that level. So they're actually reverse engineering a configuration management database Because the pack file can't exist without that three-level identification Right that three-level indication now is the evidence In the attestation store And now they've been able to do a simple thing like developers can see At the you know, this is sort of in bit bucket, but could have been any other tool continuous evidence Of their risk and compliance posture And then then you get into if you have that This notion of audit and replay. So now Every change that happened imagine order not only order now can just look at digital evidence Right with the back start from, you know, say grapheus and my sequel, right? That's there. In fact at the end of day They could just be hitting enter every Day or every hour and day But they can actually say I want to know a little more about this one And we know that because now we can tie that to sort of the the service mnemonic the the component id and the The the the the version right to change itself, right? Like you you can put the shine that commit shot Yeah, like you could have the the git commit show as Now I've actually solved one of the hardest problems between Sort of service management and idle and cloud native, which is how the heck do I get those to the work? Well, okay Here we go like basically if an order to walks in and says I want to see this one Okay, well, I can just go right back to the attestation store that stuff will take me right back to the history and get um, and uh, you know and so um You know, that's all there and and so now I have a mutable evidence both not only on the attestation But I have a mutable evidence back to The deployment process that we're just commonly using this, you know, get up get whatever right It's all there right so in a sense that the policy that was the actual change that you made the policy is code that was like, um the um The abstraction definition for that delivery are now completely cobbled and evident So the order can come in look at the mysql back You know sort of uh definition this fine-grained detail definition And then if they need to ask any real detail questions beyond hey, do you not trust the blockchain? Um, we could go right to the evidence history of that change the commit right and and it's it's right there You just click the link off you go. There's the change. It was approved by two reviewers that kind of thing And those were all part of the the pack file that reinforced like maybe one of the attestations is appearing on a pull request Yeah, and in fact There's even they don't all have to be automated like the you know one of the problems That comes up a lot is you know pen testing like pen testers like oh, yeah You need to pen test this like okay great. Well, uh, give me a time window. What do you mean time window?  We don't have the sense of a window anymore, right? Like and that's another problem Like if you look at the change records, right from the audit perspective, it's like, you know Who you know who authorized the change? Well, it's whoever's in the service owner to see him to be. Oh, yeah Right. Yeah, exactly. I had one client where the ci for all activity on amazon cloud was the account So that means from everything that they did from an audit perspective by the book from service management, which was This change happened. I had dynamo db. I did this I did what I you know, I credit s3 But whatever yeah, if the auditor came back they went to the ci and there was one ci Which was the account it was actually for they had four accounts This is like a top five bank, right? The it wasn't pnc by the way Top five bank and so the auditors would literally and I confirmed this they would literally look at any of the activity on amazon They would basically okay. Where's the who's who's the change owner the service? Wow And the service owner will be somebody who actually set up The credit card or the the the when that wouldn't be credit card at that top side bank, but the right right You know supply change structure for working with amazon who has nothing to do with anything Right, and then the second criteria for the first order is the service owner Which is like somebody who's either dead or has nothing to do with it and then the second is the change window There's no change window. It's like it's now it's yesterday. It's like in three minutes from now you know, but one of the things about pentesting then is You say, okay, well, this is real easy You do you pentesting whenever you want and here's your attestation model And if your goal is to make sure that every once a month there's a pen test against this We just throw that in as an attestation. It shows up in the continuous compliance review again, there's all these like really You know, you find all these like Opportunities, you know, once you drive down this path. Anyway, that's um We might have used up the whole hour on that one and have to come back for cloud automated governance So we got a little bit of time I guess. Yeah, we got us measured enough time.  You're always welcome You know me. I love to I'm a I'm a big old blowhard. I I love to talk, right? So The second project which is really interesting. I told you that like we you know, we we created that That's what I made a governance guide. That's you know, if you need to ping me j. Willis that read out I'll get you pointed to it's free creative commons. Um, you know, we're actually starting another working group We're going to just really focus on policy The first one was really about our reference arbitration. Now we're going to like what have we learned. So imagine this So you give all those things I just talked about Could you then do error budgeting for policy? Oh, why not?  You actually have evidence to do something. So like s l o s l i sort of activity All right. Yeah, all that happened and then um, I've been loosely working with the guy who runs onug Which is the open network user group? It's these guys are really big and sort of defining the white papers for sd And uh, you know sdn and all that a really really powerful group It's it's a user group But it's like this monster monster group with like all the major banks of wall street and you you know They're all on the board. Um, the guy runs it. Nick. Let's just gave me a call and said, hey Like we've been looking at this paper. Would you like to sort of work with us? I'm like, yeah So the next thing you know in december of last year we start this working group with fedex Signa Kaiser Permanente. I live a trauma life my friend. Yeah, you do It's a lot of luck with a lot of hard work, right but um the um signa Kaiser Permanente and um fedex, uh utc, which is Raytheon and um b of a and Um, basically loosely golden sacks, but the guy who ran all engineering And so we we sat down and we said like let's use this and the first thing everybody wanted to do is focus right on cloud I'm like, hey, I'm not That's fine. You know we could build on this or and so, um, I sort of sat back I was the chair but you know the chair meant that I just make sure that we focus on stuff, right? And not get a pause but uh immediately they came up with like three Really interesting industry problems with the cloud providers And so we wrote um and and this will be available in a couple of weeks. Actually the wall street journal is going to do an armor on it But here's the three that we in this paper and again, I can get people sort of early looks at some of this stuff, but We were we're asking and and one of the things was we weren't asking the cloud providers because that like, you know Like yes, like naive us are going to tell amazon and google and and microsoft what to do, right? So I was very clear about we're not asking the cloud providers We're asking the industry To see if they accept these questions And then maybe the industry will go back to the and by the way that is happening now So and the three questions were this quite simply first was Could we get all the providers to give us a normalized way an attestation maybe some event or a signature or a checksum That tells us the current status of their boot sequence Don't want to know any of the ip behind the boot sequence, right? Don't care about that. No that when I'm looking at my sort of security posture My trusted posture might turn it from your provider Your provider that I have a known state and nobody's you know electricity to a hypervisor I just want to I just want to know that you've given me some identification Some checksum that I know what that state looks like. So if somebody tomorrow decides Oh, nobody would even care. I need to change some code in the boot sequence Like why should I even document it to the customers? Um, it's scale Let me say it again. Yeah That may change the security and trusted posture Well, very simple and and all these requests are and again, this is a big ass But that's why I was very clear about we're not asking them But like let's get a hundred, you know fortune or global Them with trillions of buying power, right? And so one person's not gonna move Yeah, even one FedEx signal, you know, I mean there's actually a trillion dollar work of mine about right just in the working paper, but right the point is like big You know Little b big ask is could you give us these three things? I'll describe the other two but one is sort of an attestation that we that we understand what What your boot sequence looks like now? We'll know if it changes The capital big ask is we want that in a normalized format from all the vendors Right, so we don't yeah, yeah Yeah, like give me a standard here. That's right. And again, we're being clear not to say standards, too the second Every cloud provider sees all our ingress They're the ingress requests to them, right? Right from us, right like the api everything we do like so from a tenant perspective We know that amazon has an entry point to see everything that we're requesting right What if they could just expose that? Back to us through an event gateway And again here big ask capital B all three of them in a normalized format That isn't packets, but it isn't very specific to the the actual We create sort of a and there's a lot of work to be done here, right? Like yeah, absolutely I mean, it's not this isn't trivial stuff, right? Like you're talking about feeding all the events back to the customer Yeah Now but but in a way that you can listen on it because now think about what you can do So what do people do today, right? Most people don't do anything but the advanced people have to scrape hundreds of logs Just on then they have to have a whole not a set of code and when the log format changes Imagine we just get rid of all that and we just have an egress event gateway or event process We can sit on with something out lambda. What can we do now? We can remember those server-side request forgeries or If somebody look at this attack that's coming at us right somebody is Somebody is is become, you know doing server-side request forgery and they're trying to add something And then, um, you know, and you know, so that there's a lot of sort of To be there's yeah, there's a lot of potential there Well, but imagine all your infrastructure. So I've actually let me go sort of deeper here and show you this You know, so I I we worked on this using gherkin as pseudocode So imagine that all the infrastructure So in the second ask which is give us this sort of gateway model The third ask is we didn't really get to finish as much Which is the have all the cloud providers give a common Security framework they all have their own security frameworks exactly But the second one to me is the most interesting which is so imagine now You've got this advanced stage of excuse me for saying this way dev ops But where you know, you're using ansible or terraform and all these things everything built Is actually built by some automated Um Tool so now you can put meta labels and tags and all that stuff Yes, and now in the in this ingress egress model from the cloud provider They expose back the labels and tags Right, so now a simple so like again, I won't go into this gory detail, but it'll be in the paper So a simple sort of gherkin can say I got you there adversary. You didn't get the memo There's a blank meta field here Right and going back to policies code. Maybe the meta file is the is the mnemonic the component and the version Yeah, right and and oh, it is no meta field here. I wonder what this is. Let me look at a white list for crypto miners Oh Or if we start seeing like, uh, you know the average statistics of our requests I'm just going to make up numbers for is like You know a hundred requests an hour for this service and now all of a sudden we saw a thousand requests Right like hello something broke Logs but good luck pal and you know make sure you have a full-time person Maintaining logs just for amazon right, you know not and then another for google and so the and actually the second paper That we got so much good press out of the first one um the um four companies have now sort of gone back to amazon google and uh And uh in microsoft and I've actually said, you know, I'm trying to get somebody read. I told you about this, right? Like um like passes should be certainly part of this electricity to hypervisor, right? Like yeah Yeah, yeah Anyway, so that's where we're at and uh, you know It looks like there's a shot that the actual cloud providers might be involved in the next working paper this I mean so Well, that would be that would be an amazing feat and it would also be something very good for the industry overall to have A standard coming out of every cloud provider, right? Like that right there would be Big right like if everyone agreed that yes, this is a standard for Anything I think that would be a win But if it's a standard for something like this that is so crucial and so powerful and so needed Uh, but people don't realize it's needed because it is so big and nebulous Like that is a huge win You know christa tied all the way back to the beginning like I was telling about sort of dev ops and I was getting a little jaded You know, I one of the things I came to realization is like how do how can I be? Effective here and it like me Becoming an expert on identity and all those things would be just a waste of everybody's time including myself But when I found this I'm like, you know what this isn't the answer to everything security, right? No, well, but Man when we talk about cloud native and all the problems that we're having with cloud and all the stuff and all the sort of You know theater of how we're doing audits and the exposures that we have You know, I talked to dj sling who used to be a top security guy at etna now. I think he works at sonite now Yeah, he does Listen to him. He's like this is this thing like once you see it you get all these Like like secondary ideas. He said yeah, you know what I would do if I had that if everything was built from an attestation model When I got pwned I would just dump the attestation data store And then I would look for You know set a needle in the haystack. I'd be right I inverted the forensic because yeah, so it's just a red flag sitting there in front of you don't have Somebody's talking my system. It's like the label thing. Yeah, let me find all the things that are here that have happened Like let's look at this particular event. Let's backtrace it And oh my god, there are no attestations for this. Oh, how did that happen? Oh We got an old Jenkins running over here, you know, and yeah, so yeah, you'd find things in your infrastructure very quickly Fun stuff my friend. Yes, it is sir And again, I appreciate you joining. Uh, we're running up on the top of the hour I will be back later today with you know our good friend Diane Muller from uh OpenShift Commons and she will be Having a presentation That's a good from um, Alvin Kirkway, I can't say his name right but for he's from ken folk He's going to be talking about ebpf superpowers and that's here in an hour So join us in an hour for talking about ebpf and unleashing that on your grouvernet's cluster for maximum power So thank you again, john willis for uh touching base with us Your your twitter handle your email. I've dropped all that into twitch chat Uh, anything you want to say before we sign off here, buddy No, it's cool. I mean if this stuff gets you excited, we're starting and I'm starting two more working groups These are all creative commons open people that want to come in and share ideas I mean, it's just beautiful to see multiple bank centers This stuff never happened 10 years ago No banks sitting in the room and sharing because this is not your competitive advantage This is table stakes. Right like this is how you keep your operation running So it's pink. They will set uh, you know at redhat.com, you know, yeah Have a shout out. Thank you again, john. Appreciate it and uh, see y'all soon. All right


You had the fear. What was the thing that pushed you through? There wasn't really anything that pushed me through. I wanted to be the best. This is what I believe. I'm sharing that with you for nothing.  The initial fear, butterflies, all that stuff picking up the phone the first time. Because let's face it Ricky, the hardest thing in the world, the heaviest thing in the world is not a dumbbell or a weight or whatever it is. The heaviest thing in the world is this, the phone. You've got to pick it up to you, is it correct? Right. Well, I mean you don't get over that. Why are you trying to get over it? Just so you don't have an excuse, Arthur, you're going to hang up on me anyway or I don't feel like doing it. If you're going to make that excuse, you'll just come up with another one right behind it. If you eliminate that one, you'll come up with another one and another one and another one. If you're just making excuses and not taking action, then you're not going to make it. There's no way around that. There are excuse makers out there. When all they do is make excuses and not take action and there's nothing to cure them. They're going to be like that the rest of their life.  Are you somebody like me who just does stuff and doesn't ask questions or make excuses? What you need to ask those agents are, do you have kids? Do you have children? Do you have a family you got to take care of? Okay, you do. Ouch, because what you're telling me is that you're not willing to feel just a little uncomfortable to provide a better life for them.   And you do that thousands and thousands and thousands of times and build a database and then do a weekly email behind it to keep everybody in touch with you and become the number one agent in the world. So you get over the fear or you don't get over it and it's just this is my job, this is what I have to do to provide for my family and this is what it is. What I'm talking about is that when I first started making calls, I was scared and every single person is scared. So what makes you so special that you don't think you're going to, you have to be scared.  I mean, is everything supposed to be just easy peasy? You want to create this amazing life for yourself, you know, but it's supposed to be easy and it's supposed to be done on your terms. You know, it just doesn't make any sense that the numbers don't add up there. Something's not connecting, you know what I mean?  What was the thing that pushed you through? There wasn't really anything that pushed me through. I wanted to be the best. Yeah, there was never a question. I mean, there was never a question of if I'm going to do something or not.  You know, public speaking uncomfortable, but you got to do it to get to the next level. You know, posting on Facebook and doing live videos are uncomfortable, but you got to do it. You can either grow or you can just stay the same and keep making excuses. It's really your choice. You know, the whole game is set up for you to win big time. All the infrastructure is there. The people are there ready to do deals with you.  Everything's just set up right there on a platter for you. All you got to do is just go do it. So you're either going to do it or you're not. It's right there. So you mentioned earlier, just to go to a different topic. You mentioned earlier they wrote a couple of books, two books, one list to last and one zero to diamond. Tell me about list to last. Why you wrote that book? What's in that book and what's the value that most can get out of that? Well, when I wrote zero to diamond first in 2016, I started writing it, you know, when I went through the crash and came back and then, you know, lost everything and then came back and then started selling 100 properties a year in 2014. I was thinking, is this really real? Because I've made it and lost it before. So I was wondering, oh, am I going to lose it again this time? So I gave it two more years to 2016. I sold a hundred properties years for three years before I decided, okay, this is real enough to share with the world, right? A lot of coaches have been selling for two years and closed on nine properties and now they're selling courses and books, you know. I actually made it, lost it, came back, made it again, then stayed there for three years before I started, before I decided to write a book. So zero to diamond is kind of like the basics of my philosophies. And when I sent that to the editor to get edited, I was like, oh no, I forgot all this other stuff that's still in my head. So I literally wrote list to last before he got done editing the first one. I basically just traded him. Zero diamond was edited, give him list to last to edit. And I published two books back to back in 2017. And list to last, zero to diamond was the basics of my philosophies. Zero to diamond is the titles actually, list to last, how to survive every real estate market crash. And it's literally everything I learned through the crash. You know, like I said, I got back in in 08 during the worst time, that's where I built my business. You know, so everything I learned through there is in that book. And you know, I got over 25,000 agents in my coaching program that are just absolutely killing it. Does everything work everywhere? Like just what works in Alabama going to work in Minnesota is going to work in California is going to work in New Jersey. No, it works in Finland. It works in Brazil. It works in Portugal. It works in South Africa. It works in the UK. It works in Australia. I have coaching clients all over the world. The bottom line is that relationships are universal. People just want to know that somebody cares about them. They want someone that's going to make them feel comfortable enough to handle this huge investment for them. And so it's not necessarily the nuts and bolts of how I do and my systems and everything. It's more of how do we communicate with people? See, the Zero to Diamond coaching program is based around helping people and communicating who we are as humans that we're there to help, right? And not being high pressure. Knowing when to strike, of course, you know, that 5% high pressure, we want to know when to strike. Of course, we want to strike. We want to close, but not so soon. We want to more get to know people and find out what's going on. And through that, you close more deals. I have a guy that first year in the business, he found me before he got his license. He closed 100 deals his first year and made a half a million dollars. And so you take what I'm doing and you may have to tweak it a little for your area, you know, of course. You have to tweak any program to at least your personality, right? This is based around taking your personality and using that personality as your strength, as your uniqueness, as your value add to the to the public, right?  And we're going to use that to attract clients and customers. So yeah, it works all over the world.


Hey traders, this is Tosh I go by T Bradley 90 in the my investing club chat today one of our moderators Joe Kelly Who does a weekly Sunday video series, which is a how-to series on many different topics today? We have a very special video on low hanging fruit trigger orders and sizing strategies And while today is just a preview of the full link video if you want to watch the full length or any of our Exclusive content then become an MIC member Today we're going to talk about what I call the one-fifth rule Okay, so the one-fifth rule is a scaling method I use in order to spread my orders out and determine my size So I like to use the one-fifth rule in a couple different scenarios So in the scenario I like to apply it in the most is on low Hanging fruit plays so low hanging fruit place can be things like Let's message this off to the side here We something like a former runner so a former runner is going to be anything that Ran in the prior, you know, it can be years. It can be years ago That was a former runner. It can be months ago. It can be weeks ago It can be days ago. My favorite ones are the days ago place you know as a former runner a few days ago and I I Like to apply the low hanging fruit strategy that bow teaches and I use a one-fifth rule for the scaling and what I want to explain Is a scaling method and using the range orders because and let's say that that is the move That we are focusing on and the ideal level is not that red line because that doesn't help much It is this black line right here So the ideal level is right above this black line, okay, and Now let's say this level on the left side over here starts it. Let's say like 335 it goes up to let's say at the top here goes to 350 and it gets to 350 at the top and Then there's a wick. No, you're looking at the line chart and this is you know what the peak looks like It's you know, it's So 350 is the top of that peak but on a line chart the way it's calculated is it's the closing price during that time frame So if it's a one-minute chart, the reason why use one minute is because it feeds in more data and the line becomes more accurate If you use a five-minute line chart, it's a wider average. And so the chart doesn't get as Accurate to the wicks and everything and so the one-minute average close is it let's say 350 That's the peak of the line chart But if you look at the candle chart because you should use candles combined with line charts because let's say that there's a Level at 350 but above 350 you saw that it went parabolic above there and there's a big wick hanging out That wick. Oh my well go straight. There we go It's when all the 350 and then the wick went all the way up to 370 so Let's say this is the application you want to use When I apply the one-fifth rule to a trade. Here's how I do it. I look at the Range in which I would like to start shorting Which would be anywhere in this range right here? Okay, and notice I'm gonna point something out to you I do not split orders over here and Then over here and wait for confirmation. I don't do that. I If if I want to add to a winner I've got to realize a piece of profit first.  It is it means nothing It's it's the it's the age old thing that you know, I can't lose if I don't sell So it's not a loser. It's not a winner if you don't sell either and lock in any piece of the profit So you've got to lock in some profit before you can add back what you previously covered Hey traders, this is Tosh I go by T Bradley 90 in the my investing club chat Just wanted to reach out and say if you have any questions about M. I see joining M. I see maybe you're a member already You have three ways to contact myself personally and through M. I see you can hit our social media You can hit me through PMS and chat or you can contact us through my email at Tosh at my investing club calm That's Tosh at my investing club calm I will get back to you in a timely manner and I'm saying this because I'm here to help and I don't want anybody to be Afraid to reach out and ask any question that they have we are here for you guys. All right. See you guys


Ladies and gentlemen, yesterday I was inspired. Man, we saw Ronnie2kHop on stream and say this. Are you about to leave the answers that we only do Q on title than the rest of the story? That's the same.  Like, I can see him just being like, I don't want to do this. No way. Not to mention his matchup would be annoying, too. It's NBA players that are carving out their time. It's not like... Now, I'm not entirely sure whether or not this is a April Fool's joke. There's a good chance that that was real and they're just trying to play it off. Or maybe it was. I don't know. But what I do know is I feel inspired, ladies and gentlemen. Inspired to spread some negativity. So today, I got the most negative guys I know. And today we're spreading negativity all across the neighborhood throughout NBA 2K20. Um, you guys have any objections?  That's what I'm talking about. That's the energy I want you all to come with, all right? Oh, we missed trivia. That's tragic.  Yes, you see vortex, you're getting the hang of it, man. I'm just in a really bad mood today. What happened, yo?  Now my dad left again. Wow. How could you keep falling for the same trick? He's not coming back with milk, bro. Stop. How did he leave me when it's to be in the household? Oh my God. I have a perfect fit. Lo, I'm gonna win this time. Fuck! First of all, you make me spend way too much money to run into K. Every single time I hop in the game, I have to buy a whole new fit just to like keep up, bro. Are you seeing what I'm seeing? 30K for a hoodie? That's what I'm saying. Is this a buck down hoodie? Is it coming with diamonds? Ladies and gentlemen, look at the subscriber count right here. Bro, if y'all don't run it off, go ahead, man. I'm trying to go ahead and beat PewDiePie. I'm so close, guys. I'm so close. I'm off by like 100 million. I have an objective today. An objective that once we're done, we're gonna spread so much negativity throughout the 2K community. We're gonna make 1.2K proud. Sorry. I'm gonna murder the king with the opposite. The opposite? It's dark times out here, and I just wanna brighten those dark times up. I got a whole bunch of color on my t-shirt. I got the clean-ass designer black sweatpants with the gold 99 overall 2K 18 shoes. Then I got the cowboy hat to top it off with the braids, man. So that's, I mean, that's how I was coming today. That's it? That's it? That's all, man. So right now, what I am fashioning is the Pixar edition of the... All right, Agent 1. Jesus Christ. Oh, man, that's so good to win, man. Let's top top left. I'm looking forward to Marcus Cousins for the whole group. Yeah, I'm staying about to Marcus Cousins. I'm gonna put a jersey on real quick. You know, support him. Yo, Vortex, why are you not wearing a cousin's jersey? Why are you not wearing a cousin's jersey? You a Ronnie? You a Ronnie son? Oh, the latency did not go down.  Good take, Vortex. That was a horrible play. You're so trying, Vortex. You just got lucky. Oh, sorry. Sorry. I'm being positive. It feels like I'm running through molasses.  You always complain about latency. You always are. Cast. Carriable. Cast. You're lucky. You're lucky. I get it. You got lucky. You got lucky. You got lucky. You got lucky.  He dropped me off, though. Just trash on V4. Can you see the screen? Are you? Nope. Hey, Vortex. Oh, yeah. Get out of my way. Get out of my way next time. What are you going to do with the ball? Wide open. That's how I get that. Like, I wanted something better. It's about time. Open three. It's about time. Oh, you know how we get down. You know how we get down. Bop! The door is higher. Another delay. What's that screen for? You can do useless. Why would you pass it to that retard? Look at that retard, bro.  Hey, whoa, whoa, whoa.  Why would I buy this? If there's one person that I'm supporting during this hard time, it is Ronnie. I may have family. I may have friends. There may be people who really need me to donate money to them and help out for a better cause. But the only person that I am supporting is going to be Ronnie 2K. And you know what? That's a noble cause, man. It really is. Hey, real quick. I'm going to spread negativity.  So let's do that real quick. Hey, hey. I'm about to get people all done, man. I'm about to get them.   Bro, none of y'all drip is good. Like, y'all have zero drip. Hey, look at my helmet. Look at my helmet. The helmet is clean. I'm not going to lie to you, man. Yes, sir. Legend of Dumb Dumb. Oh, yeah. I don't know how to answer that, man. Give me a vortex, give me a vortex. That's a green. That's a green. Yes, sir. Oh. Ain't no way. Oh, my God. You're Ronnie 8. It makes sense as you threw that pass with that helmet on, boy, because I was retarded. It ain't no hoes. Thank you. Hey, Lowe, where's your helmet? Right here, right here, right here. I'm not, I'm not retarded. I don't need a helmet on, bro. Bro, helmet is, helmet is for safety.  I don't need a helmet on. No, bro, look at the helmet on. He not going to get it. He not going to get it.  Bro, I'm not trash. I feel this way, bro. Oh, my God. Oh, I'm trash. I'm trash, huh? Yo, Ronnie did that.   Yeah, Ronnie did the same thing to me, bro.  There's a difference. Yo, vortex, just win the game. Please win the game. Thank you. And we don't get it.  I just want to get them away. You can't say that, bro. He's recording. He monetized. I don't give a f**k if he was dead or not. He's dead? Y'all need to cut that out. I'm dead? I'm dead. Bro, stop touching me, bro. Word.   Team Jump 16 broke all in the car. You're trash, boys. You're trash, bro. The delay, bro.   You're trash, bro. You're trash, bro. You're trash, bro. This new jump shot of mine is f**king horrible. I don't care about the Netflix experience.  That's the whole purpose of this video, so. Oh, my God. Hey, tell Luigi, I mean, we'll lead us in high. Luigi? I don't know him. Oh, okay. No, I swear to you, bro. I swear to you, Vortex. Let's go. Let's go. Let's go, let's go, let's go. Yeah, Vortex, I swear to you. Please check it out, bro. Yo, no, no. Ain't no way. Ain't no way. No. Oh, my God. Let's go. I'll go. I'll go. Oh, my God. How? Hey, hey, Vortex. Sell the game, please. Come here, Vortex. Come here, Vortex. Eat a little teca-looking- Yo, Vortex. Yo, get off the car!    You're tipped over, Tony.  You're trash! Hey, man. This team DeMarcus. All right? Pay your respects. You're on team Ronnie. I need you to lead the party. I need you to lead the game immediately. Green! Oh, my God. Hey, it's how we get down, man! D.O.!  Bro, bro, do not come at me like that. Oh. Yo, you- Hey, are you going to let that girl chop you like that, boy? Oh, look at Lowe. I still up top at the hash. Drives right. Gets bombs. Going to pass it to Agent. Gets it right back. We're going to drive right. Move it, Lowe.  The reason why we got these DeMarcus Cousers is because it's a PR move. Ronnie Lowe, he really loves DeMarcus Cousers. They're one, like, best of friends.  Yo, we don't want you to release. We are so trash. Agent, who's the quickest YouTuber alive? You said the quickest? The thickest. The thickest. Thickest? Go, go, go! So what counts is an Instagram model that has a YouTube channel count? Bro, you already know who it is. Stop playing. Yeah, you're right. It's Davis. Yeah, I don't know what I like. It's Davis. Thank you. It's Davis. It's Davis. It is Davis. Come on, Lowe. It's Davis. It's Lowe. You can do it, man. I believe in you. I have full faith. Yes, sir. Oh. I'm passing him. Yo, don't worry about Gus. Gus just clicked X.  Who will win the ones we want? Play or Agent? It'll be close. But I got, I got, it's close. But I have my money, Agent. Yeah, I have my money, Agent. I got my money, Agent. It'll be close. It'll be close. It'll be close. It'll be close. It'll be close. It'll be close. Sweet.  Push it up. Push your pace. Push the pace, Vortex. Oh. Agent, let's keep grinding, bro. You're going to get to five mil in a week. Bro, first of all, that's way too much positivity for this video. That's way too much positivity for us, man.   Do that. Do that. Do it to me. Of love? Yeah, I would say GG, but it really wasn't that. It wasn't that good of a game. I would say GG, but it wasn't that good of a game. But I will see y'all later. Word, word. I'm getting too positive by accident. My fault, y'all. My bad.


The House of Representatives says it is committed to reforming port operations to make it competitive, efficient and business-friendly. The Chairman, House Committee on Customs and Exercise Honourable Leke Abedjide said these are an organised interactive session with relevant agencies under the Committee in Abuja. For example, it has nothing to do with going to another bonded terminal before going to either ICD-CANU or Dry Port Cardinal. In fact, the long process is responsible for the congestion at the port because containers that ought to have been evacuated will not leave Y-versus upon-versus we keep on coming to populate already congested terminals. And we cannot blame them but blame our bureaucratic procedures. Sometimes there will be a change in policy by customs. What we see is just somebody telling us when we get to some office that we want to do this you know, we have a new circular telling us that we should go and do this or do that. Whereas when that should be taken, they didn't put the stakeholder to have their inputs. So sometimes before we adjust it takes time and it's cause delay. So sometimes when you just put in your element. What we are saying is that there is no time lag. What we are saying? If there is no time lag in the formal... It's not allowed. They don't give time to give for clients. They have no policy to take effect. We just suddenly... Suddenly, it will happen immediately. There is today a process that if in place would automatically reduce fundamentally the challenges that will happen. I mean the automation systems that we are putting in place, particularly the e-customs. And I'm hoping that because the customers are here they are able to speak to each other. Once we have that platform in place and all stakeholders can plug into each other. Believe me, your interactive session today would have had an important input into how do we solve some of the cumbersome processes that we have involved. So I thought I should just notify the committee that there is a process ongoing. But at the moment it's very slow. There's a snail's beat that is being brought to bear only that who really don't know why this is the case. So I think that maybe this is one important information that can be brought to bear on the course of this interactive session. It will help us fundamentally. We are always the mentors. It comes from the government of implementations. According to two of them, the implementation and implementation. That's what every Monday that you have to come from is adding numerous activities. So I don't know if the MBE will know what MBE will do. Can you say it? Come again? Yes. I said the issue of the second approach is just... Please do subscribe to our YouTube channel and don't forget to hit the notification button so you get notified about fresh news updates.


I feel like they kind of tune onside kicks where you don't really get them as much as you did earlier in the year I say that and he's definitely getting this isn't he boys like he's 100% That was the best onside kick ever


I remember that game, my dad, he was there, he was visiting, because he was working a lot, traveling a lot between places and he came up to the game and he said, I'm nervous you can play like that. This program we've really discovered confidence, so confidence on the ball. In the mental side of it, that definitely has improved a lot, just simply things like how close should I get to whoever I'm working or whatever the right option is, when you have the ball or when you don't have the ball, where to go when you don't have it or you do have it. It's just really helped, I'm just a much more disciplined, concentrated person that I think I've just developed over the last year, not just as a football player, but as a person overall. They told me later, they were so impressed by my attitude and that what caught me into the team and I trained so hard like half year and our season started and then I ended up breaking the record, goal scoring record for the second division. Wow, how many goals is that? 40 goals. And how many games? 27. Like I can dribble now, I can shoot, I can pass, I have accuracy on my left foot. So I was scared to mess up and now in practice and games, I always walk the ball, I get frustrated when I don't get the ball. Ball control, dribbling, shooting everything, everything you can imagine, so technically it's a great program for every react player who wants to become a professional. I took the ball, I got past the first defender, I got past the second guy, I got past the third, the fourth, the fifth, the sixth and it was just me and the goalie at that point. I missed the shot but I'll say it was incredible just having the confidence to be able to dribble past that many people. It exploded my confidence, I went from a kid who didn't believe in himself to a kid who was willing to take on six defenders. Some of you shooting video and get to the field, I can see the improvements the same day. And if you just really watch what you say and listen what you say and apply those things, it really makes a big difference. I've just learned to play simple and prior to watching your videos, I always try to overcomplicate things. I played every game, I played every minute of every game and at the end of the season I got player to player of the season. Yeah, in terms of goals, it's been my highest scoring season in about three years. You think better, you know what to do on the field. So if you train hard, if you follow this program, I think that you'll be the best on your league, maybe one of the best players on your league. Wow, that's fantastic. You score more goals, assist, whatever you want. It's great, it's great. So my acceleration has increased to my first five steps, whether that's chasing down somebody's attacking or after you beat a player, sprinting past them, or even so you're vertical when getting up for a header and just your strength in general to hold off players. My fitness has improved. I could only get 10 on the beep test. I got 15.2 on the beep test.  On the field, I'm playing much quicker. I'm moving the ball a lot faster than I used to and therefore that's more opportunities. My teammates are more happier and just overall we're more successful now. Since that, I just always watch your videos and I really do think they're really great, best in YouTube. I watch a lot of videos but I really do think you are the best. I got picked up by the South Texas ODP. I'm playing with Dundalk FC and I'm second choice right back fighting for position against our captain and Fires International. I got there from start in your program. Your program has helped me so much. I get to everything paid and it's like playing like a professional. It's really great. We're a top half tier one team in U18 and we usually start every game. One of them was an NAIA Division 2 in Ohio University and another one was another NAIA Division 2 in Indiana. It has a weakness and they want to improve it. You have the video for it no matter what it is. As long as you watch it and try it and stick by it, it'll definitely work like this. Now I find that I've improved a lot. Each skill that I've wanted to develop, I've watched your videos, I've stuck by it and that's what's got me where I am today. I recommend to every young player who wants to achieve their dream to become professional in any league, maybe Europe, Asia or wherever. So I recommend this program, buy it and you'll see much results in the future. What you're teaching your audience is really what's right. It's really what the coaches are looking for.


In this video, I am going to show you how to digitally fill and sign any PDF file. Let's get started. In this tutorial, I am going to talk about four different scenarios. I put timestamps in each of the scenario. So if you are interested only in one type of scenario, you could just click on the link and view only the portion of the video that is of interest to you. The first scenario is a PDF file that can be filled and can be digitally signed. We can't see it here in the browser but we'll get back to that. Scenario number two is a PDF file that can be filled but there is no digital signature and we'll see how we can sign this type of form also. Scenario number three is a normal PDF file that cannot be filled. You can print it and fill it by hand but we'll see how we can digitally fill this form and even sign it. And the fourth type of form is a document that has been scanned and saved as a PDF file. We will see how we can fill this form digitally as well as sign it. The first thing we need to do is to save the PDF file on a computer. As you can see currently all the PDF files are open on my browser and you can't fill and sign PDF file using your browser. Let's go ahead and save the file, we right click on it and we can say save as and choose a folder on your PC to save the PDF file. I have already saved all the four PDF files on my PC so let's move to the next step. Make sure you have Adobe Acrobat Reader installed on your PC, if not you can download it from the Adobe website, it's a free download. We are now ready to fill our first PDF file. Let me open the first form that has been enabled for digital signature. As we can see the fields that are marked in the light blue shade can be filled up by entering the correct information. The form is now filled and the last thing to do is to sign it. This form can be digitally signed and if I click on this field which is marked with an orange color it will open the digital signature dialog. If you have already created a digital signature the name will be listed here but let's say I want to create a new digital ID, I do that by clicking on configure new digital ID. I have three choices available for creating a digital ID, either to use a digital signature creation device or to import a digital ID from a file or to create a new digital ID. Let's go with the creation of a new digital ID, let me continue. Once you create a digital ID you must tell Adobe what you want to do with it. You want to store it in the window certification store or I want to create it as a file on my PC and I am going to do that and I click continue. Enter your details, the mandatory fields are the name and the email ID. You can add optional information about the organization unit and the organization name. I will leave it blank and let's say we continue. Make sure you protect your digital ID with a strong password. So let me put in the password. You have to re-enter the password to make sure it matches and click save. Our digital ID is now ready. To insert this digital ID in our PDF file click continue, re-enter the password and click sign. Adobe will ask you to save the digitally signed PDF as a separate document. You can use the same name which will override the existing file or you could give it a different name. For example, dash signed and click on the save button. The file is now digitally signed and secured. What happens when you open a PDF file that is digitally signed? At the top of your PDF file, you will find a notice which says that this is a signed PDF and that the signatures are valid. If I scroll down to the signature and I click on it, first of all I get a notice that says that this is a valid signature and it mentions that the document has not been modified since the signature was applied. I can check the properties of the signature who signed it and we can see that the signature originates from this email ID john at gmail.com. What happens if I try to make some changes to this document, for example, instead of John Smith, I change it to John Adams. The notice at the top of the PDF file now changes. It says at least one signature requires validation. Similarly if I click on the signature, it says this is no longer a verified signature. So if you make any changes to a digitally signed document, all the previous signatures in that document becomes invalid and the document needs to be re-signed. Let's move to scenario number two. This is a PDF file that can be filled but it does not have a signature field. Let me quickly fill this form. I have completed the form and if I want to add my signature to this form, I can use the second method of adding signatures in Adobe and which is this option called sign document by typing or drawing a signature. You can add your signature or your initials and store them. So if I want to add my signature, I just click on the plus button. There are three ways to create a digital signature. The first is to type your name and Adobe will create a signature for you. The second is to draw your signature using the mouse like this and the third option is to use an image of your signature that you have previously scanned and stored on your computer and this is my preferred method of creating a signature. Here is a sample signature that I created. I did the signature on a blank piece of paper and took a photo of it using my mobile phone and transferred it to my PC. Now before I use this as my signature, it would be a good idea to remove the white background and make this as a transparent signature. If you are good in Photoshop, that's very easy to do. If you don't have Photoshop or the skills to remove the background on your own, my recommendation is to use a website like remove.bg where you can upload the image and it will do an automatic background removal for you and this is a perfect signature that you can use in your PDF documents. So I will download it. In PDF, I select the image and this is my image with the white background removed and it shows me like this and I can apply. So as you can see, the signature can now be inserted anywhere on the document. I can resize it to make it big or small and move it exactly where I want it and that's it. My document is signed. If I try to save this document now, I will get a warning message because this is a fillable PDF without the security features of the digital signature that were available in scenario number one. So what Adobe does in such cases is it saves a copy of the document but makes all the fillable fields read only that means no future editing of those fields is possible. If you want to proceed with this option, I can say save a copy. I'll give a different name to it. Let's call it signed and this document that I have filled and signed cannot be saved as is which means I have to discard the changes that I have made up to now. If I open the signed PDF file now, I can see the signature at the bottom here and notice that this fields can no longer be edited. They have become read only. So this is a fillable PDF that has been signed using method number two. A final note on PDF files that can be filled. If you want to ensure that you can make further changes to this PDF file, do not sign the document. In this case, if I save this file without a signature on it, then I can open this document again and make further changes to the document. The third scenario involves a PDF file that cannot be filled. So as we can see, this is not a fillable PDF file. If I want to fill this PDF file, I can use the same feature that I had used in scenario number two, which is to sign the document. When I click on the signed document, I get this new menu option. The first item is called add text. If I click on the add text, I can go to any area in the PDF file and start typing. If I want to change the color of the text that I'm typing, click here and choose a different color. For example, red. When you are in the text mode, Adobe will try its best to determine where the fields are and you see that they turn into light blue color. But not all the time. For example, here it cannot determine that this is a field, but I can still type in that place. Once you have filled the form, you can sign it as we had done in scenario number two, which is click on the sign button, pick up your signature and place it on the document, resize it and move it till you are satisfied with its position and you can then save the document. Again, I'll give a different name, let's say sign and we are done. The final scenario is a scanned document that has been saved as a PDF file and the technique that we will apply in scenario number four is exactly the same as scenario number three, which is to use the sign feature, select the text box and start typing the text. The only difference between scenario number three and four is in scenario number three, Adobe tries to determine where are the fields, but in this case it cannot because this is a scanned document, there is no text that it can automatically recognize and define as a field. We have to position our cursor at the right place and then type the text. If you want the signature to be attached to the document, click sign, pick up your signature, place it on the document and then save the document. So there we have it, four different ways of filling and signing a PDF document. Depending on the type of PDF file that you have, you can use one of these techniques that I have shown to you in this video.