I had got quiet suddenly. Those lights will do it every time. Well, President Febreze Codero, Mrs. Codero, distinguished ladies and gentlemen, it's an honor tonight to welcome to the White House a national leader who is clearly devoted to the political and economic freedom of his people. President Febreze Codero, when you were elected, you were well known to the Ecuadorian people as a man who would not waver in pursuit of the welfare of his country, even in the face of enormous pressure. You promised leadership and reform, and you have not let your people down. When we met, I could see in you the strength of character and love of liberty which the Ecuadorian voters saw. It's been a genuine pleasure for me to get to know you better after our first meeting a year and a half ago. Here in this historic setting, which was once the home of Thomas Jefferson, it's fitting to recall, President Febreze Codero, the words of your last State of the Nation message to the Ecuadorian people. In it, you said, democracy is the highest and most noble political system that mankind has created throughout its history. Well, Jefferson would be proud of an expression such as that. Today we see a resurgence of democracy throughout the hemisphere, a resurgence which started, as did the cause of national independence during the last century in Ecuador. Democracy, as you have so eloquently stated on many occasions, Mr. President, is the way not only to freedom, but also to peace and to economic progress. In Central America, we both know this is especially true. I want to take this opportunity to thank you for your strong support of democracy in that troubled region. Those who would repress their own people and export subversion to their neighbors should not underestimate the depth of our commitment and steadfastness. They should note your words. You said, so long as the people are not given the full right to self-determination, there will not be peace in Central America. Well, those of us who enjoy freedom cannot take it for granted. We cannot turn our backs on those struggling for freedom against oppressive regimes. We must provide assistance. And, Mr. President, in that same State of the Nation address, you reminded your people that Quito was once termed the, quote, light of the Americas, and you challenged all Ecuadorians must see to it that that light remain lit here and throughout the continent. Well, in this task, holding high the light of liberty and freedom, the people of our two countries can and should and will stand together. So let us drink a toast to that and to you, President and Mrs. Fabres Cordero. Mr. President, Mrs. Regan, distinguished guests. As President Regan mentioned in his very kind words of offering, the talks that he and I have had have been what talks between old friends alike, the precedents of ability and on pretensionness. As well as the coincidences on many of our points of view, over the destinies of our countries and of the whole hemisphere, have allowed us to leave formalities aside and enable us to have clear and frank exchange of views. When in my youth, I studied in this country, in this great country, I could not have imagined then that a moment like this could ever take place. At that time, I frequently watch Western movies, some of them featuring an extremely likable star called Ronald Regan. I must confess that I'm still an addict to Westerns. But now I view President Regan as the actor of a more transcendental and historical role. Of course, Mr. President, this doesn't mean at all that there is a significant distance between our respective ages. We belong to the same generation. A generation that fortunately always believed in the everlasting values of dignity. A generation that was and is willing to face off to obstacles and to overcome the rigors imposed by nature and by men. You and I, Mr. President, have in us something like a cowboy spirit. And with that spirit, we are trying to prove the lot of our countrymen. Our peoples and all mankind, Mr. President, are going through a period of strains and on precedent problems. You, as I in my own country, are responsible for taking the reins of the state with the conviction that in so doing, we are effectively serving our peoples. But we cannot complain. We have asked for it. We have no one to whom to complain for the burdens that our duties impose upon us. You are performing your task with courage, with vigor and keen sight that will be recorded definitely by history. I hope too that my efforts will likewise be fruitful and that Ecuadorians may soon be able to live a better life and that my country, Ecuador, may reaffirm some of those transcendental values that have been lately threatened. Let me, in thanking you for your toast, express my best wishes for your permanent well-being and that of your distinguished wife. And ratify at the same time my confidence in your nation's leadership within the important affairs of the world. Thank you. Ladies and gentlemen, allow me now to raise the glass for the health and well-being of the President, Mrs. Reagan, and all her distinguished family. Jesse Norman, Philip Maul. I know you all thought that you were just here at a state dinner. You weren't really. You're really singing and we were all here for, I think I got the number right, the 32nd wedding anniversary of our guest of honor. Well, I think we all know now why Jesse Norman is sought after by the great conductors and orchestras of the world. I know that in her singing over the years she has won many awards. You didn't win an award tonight. You just won our hearts. But we're very grateful. You, Philip, thank you for coming and making this a really magical end to our evening here. We're most grateful to you. Thank all of you.


And welcome to another OpenShift Commons briefing. And as we like to do on Mondays, we have an AMA with one of the many upstream projects. This today is Claire, which has been associated with Quay and Project Quay as well. But we're going to get an update on that project from three of the key folks from that team. And there's Alice. And Hank, Doné, and Louis De Los Santos is going to take us through what's going on in the Claire community and give us an update on the latest release. So ask your questions in the chat. We'll have live Q&A at the end, and we'll try and answer as we go as well in the chat. So feel free to ask and post questions there. So without any further ado, Louis, take it away, introduce your cohorts and tell us all about what's been going on in the Claire community. Hi, my name is Louis. Today, Hank, Aless and I will be presenting the recent work we've been doing to rejuvenate the Claire application and its community. I am a principal engineer on Claire along with Hank and Alex works on EXD Cloud in the PNT organization. In this talk, we're going to go over what Claire is, why you should care about Claire, how Claire works internally, how to move from Claire v2 to Claire v4, where Claire is being used today, the v4 one roadmap, how to contribute, and then we're going to end with an ask me anything. So what is Claire, right? Claire is a set of scalable services for container security. It can be used by both developers and operations to understand any vulnerabilities that might affect your container builds. It's open source and it is community developed. So why does Claire matter, right? As most of you know, we're moving to distributing applications in containers. Before this, it's more likely that you would deploy applications on servers, right. There's some kind of configuration management or your application there. If you had issues, vulnerable dependencies on those deployments, the splash damage was confined. They were confined to the service you deployed it on. Now that we're shipping containers as the default way to package and deploy applications. We're now pushing those vulnerabilities to anywhere those containers run. This path shouldn't become apparent that your organization's posture around container security becomes pretty important. There's also something to be said about the recent supply chain attacks of the solar winds hack. Obviously, when you're moving to a centralized repository where your artifacts go for deployment. That repository can become subject to attack as you probably are aware of if you've been following any of that. So what's new in Claire before. So previously in clear B2, the API was layer based. You were responsible to handle the parent child relationship of layers. That became a little bit cumbersome. So we moved to a manifest focused API. As you can imagine the manifest structure itself expresses that child parent relationship of the layers. So the client no longer needs to. It's much more intuitive to deal with that schema versus having to deal with the layer pushes yourself. Claire before. I would ask content address ability as a first class citizen. I put a little star there because it plays a key role in Claire before and it's a concept in the rest of this talk. I was introduced to contents address ability in the service in the storage domain rather. And what it is is it's a way to have a unique identifier always associate with the unique resource. And I put that in context is a checksum of some binary data. As long as the binary bits don't change, you can be sure that the checksum identifies the data hand player utilize this and you'll learn more about this in a couple slides. We have completely updated all the security advisory data sources that we go out to we moved away from doing any kind of ad hoc database parsing where we can avoid it. The JSON dumps or YAML dumps we now favor oval as the standard and we're able to move most of the database or data security sources to oval, which is nice because we're able to create some tooling around oval that makes parsing pretty quick on our end. We now have a native CLI tool. We no longer depend on external repositories to provide a CLI tool for Claire. We've completely rewritten the notification subsystem. And we also have baked language support into the data model from the start. And we currently support Python. We've also completely redesigned Claire before in a micro service architecture with an emphasis on scale and performance. This allows operators to asymmetrically scale Claire, whether it's a push heavy day, or whether it's a read heavy day. These functionalities of Claire can be scaled asymmetrically and really conform to your performance characteristics and trends. So how Claire works. This is the 30,000 foot view of what Claire does right. There is a container will use container and manifest somewhat interchangeably manifests is just our JSON schema, it represents a container. So Claire is broken up into three services, the indexer, the matcher and the notifier. The indexer is responsible for taking manifest or a container and parsing out the contents, you know, typical things like packages repositories what distribution those containers are representing. And it places these contents in a report that we dubbed the index report. On the other hand is responsible for generating reports of flagged content. So, when the metric gets a request saying hey, does this manifest have any vulnerabilities affecting it. It goes to the index says hey do you even have an index report to this for this manifest. If you do can I have it so when it receives it. It goes to its database and just sees that there's any flagged content packages distributions repositories. It'll take all that flagged contents and it will place it into an ultimate vulnerability report and return that to the client and notifier just hangs out down there he watches the matcher and the indexer. And he identifies new updates that come into the system and, and then asks the index or hey, do these vulnerabilities have just entered the system they affect any manifests I care about. And if they do they'll send a notification to any subscribed clients. So let's dig into indexing a little bit deeper indexing is a term we use for extracting the contents of a container. A quick explanation of what a container is in the context of clear before a container can be viewed as a content addressable hash with layers inside that hash. It's like a container object, and then layers are content addressable as well. So for a hash here represents a high level manifest and the subsequent layers you see are also content addressable. The order of the layers themselves are dependent. And again that is expressed in our new manifest API. So how does indexing actually work. First thing that happens is Claire needs to identify if the manifest should be scanned. If this manifest submitted to it, it's going to check. Hey, have I ever seen this content addressable identifier right have I ever seen this manifest hash before. In this case, hasn't. So it goes okay yes you should be scanned let's move to the next phase. Next it determines what layers it needs to actually scan. So we express a common case here, and that the base layer might have been seen a million times by clear right this might be a base layer. So it says hey I don't need to scan this I already saw this, but the subsequent layers, it has never seen before so it's going to mark those as yes we need to scan these I have no content available for this. To perform the scan, the base layer is simply just retrieved from the database any content we know about it is not there's no work performed it is just a get from the database. The subsequent layers are actually scanned. This is the process of going to fetch the layers decompressing them looking for package databases, identifying the characteristics of the individual layers. Finally, it coalesces all those results into a final index report, and it saves that. So now the next time it comes around, if it sees that okay the 604 AC index manifest hash. If it sees it again it's going to say okay yes I have this data we already scan this by looking at the manifest hash it can already know I scanned all those layers right because if the layers changed the manifest hash would change. Cool so for the matching part I'm actually going to hand it over to Hank who's going to demonstrate this further and just give me a small queue when you want me to change the slides. Will do. Okay yeah so now that we've got this index of what's in these contents, and it's content addressed obviously when obviously we don't need to redo the work, because it won't change. But what does change over time is the vulnerabilities there are new vulnerabilities discovered all the time. So that in this matching process is handling this more rapidly changing data or the data that changes at all. Next slide. So the matching bit has two parts to it the matchers and the updaters the updaters feed data into the system and the matchers use the data, the updaters provide and sort of turn into our common format. The the matchers take the this index report and all of them in parallel examine the the index report for the sorts of data they know about. So here in this in this example, we have bits of code all at the same time looking for rel packages, another one looking for Ubuntu packages and other looking for Alpine packages. Most of these won't find anything. And the ones that do return their results. And we combine all of them together and return the matcher doing it this or return the report doing it this way means we can just sort of additively add bits to look at new parts. So, for example, our language support is implemented as a as a box on this second row here, and any sort of OS just automatically gains that support because of doing it this way. And these are all then fed and kept under the same, the same hash as the index report that we gained the same same sort of content address ability benefits there. Next slide please. And updaters updaters just on whatever interval an operator has a config configured for sort of check if there's a new version of the data source they care about and if it is patches that parses it loads it into the database for you. And then any new matching requests will use that version of the data. We know internally, whether a matcher has been run against the latest version that's in the database or previous version, and if it's not run against the latest one, it'll run again and save the results for you. So even if these updaters are run on a staggered interval, you'll always have the latest version of the results, and you won't redo the work that you've already done. So, next slide on to notifications. Like I was saying, because we sort of keep track of the versions of the security databases or when we update them. We can internally figure out what's been added or removed, and then work backwards to figure out which manifests we've seen that we were affected by what's been added. So the notifier effectively diffs these two versions of the database, discovers the vulnerabilities, and then looks at the manifests, and then does some sort of configurable action to issue notifications, whether that's issue a web hook, or push it out to a message broker like am QP or stomp or something like that. Next slide I believe is. Oh, sorry I skipped over a whole bunch of topics without viewing slide changes. Here we go moving from Claire v2 to Claire v4 so Claire v2 is the most widely used version out in the wild. That's what powers quay.io. The process of building the new version we ended up actually rewriting just about everything. So the API is completely different again it's manifest driven not sort of layer stitching. And all of our internal data is completely different so you do have to resubmit images to Claire. But you know it should be faster so little initial pain and some win on the back end. And now I'm going to hand it off to a lash. Okay, hello everyone. My name is Alex and I will tell you something about how we use and release Claire at the redhead. Next slide please. So as you might know, and you already heard Claire is an open source project for container security scanning. But it's also part of redhead quay product. Redhead quay is a container registry for the enterprise that brings solution for storing and building container images. And since the security point of view is essential part of for the container workflow, quay has integration with Claire. And it provides information about vulnerable content in both user interface and the API. So if you either build or push container into quay registry Claire in the background index the image and produce index and vulnerability report as was described earlier. Those reports are visible in the user interface and the user can check whether their container is vulnerable and whether they need to rebuild the container to update the latest version. In the previous version of quay Claire v2 was used up until quay v3.3 where Claire version 4 was available as a tech preview and it becomes default container security tool moving forward. So Claire version 4 is released as a GA in quay 3.4 and Claire version 2 is deprecated. Next slide please. Claire is also available in a public instance of quay which is known as quay.io and Claire version 4 will be used as a default scanner at the end of March 2021. Next slide please. And redhead not only release Claire and offers it to customers but we also use it internally and we are integrating it in our container release pipeline. This means that every image that is produced by redhead or ISV partner is scanned using Claire security scanning tool. And the release process is driven by the results so if we discover vulnerability in the report we don't ship the container and instead we rebuild the container because we don't want to ship content that is vulnerable to customers. Our container security information is also publicly available in redhead container ecosystem catalog and it's represented by so called freshness grade which is simplified and graphical representation of container security score. It's a scale from A to F. Previously in a redhead we use the custom solution for container scanning but since it was completely internal and we didn't have or our customers didn't have a way of to reproduce upgrades. In 2019 we replaced the custom solution with unofficial version Claire version 3. And last year in October 2020 we upgraded to the current latest version of Claire Claire version 4. Our instance of Claire is deployed in an open shift cluster on the production scale as a free separate services one service for indexer one for matcher and one for notifier that allows us to easily scale up or scale down those services based on the load. In the past three years, redhead built over one million of images and currently in our production database Claire version 4 indexed over 400,000 of them. Okay. Now, let's hand it over back to Lois. So let's go over what we expect from Claire before one. Claire before hit GA couple weeks ago so this is a roadmap for the next minor version. We'd like to expand on language support quite a bit. I believe there are some plans are ready for Java which are going to make its way in via another collaboration with code ready containers. We'd like to address going and definitely get some JavaScript, the note MPM ecosystem in there. We're currently plugging away vigorously on a Kubernetes operator. We should just make the deployment of Claire and the various architectures that you can deploy Claire in pretty trivial to set up. We're going to put an emphasis on performance and scale analysis. So we really want to know, you know, how well Claire scales in the event of excess traffic trendy and bursty traffic. So we'll be putting a lot of effort into that and then just general reliability efforts things like making sure database connections don't flood. You know the downstream database and making sure we really push the right heirs forward so clients can react to your various states of Claire. So for contributions. We're going to begin community development meetings at a bi weekly cadence starting in March. I will have a link to those meetings in a subsequent email burst along with the mailing list blast and other ways that we go about disseminating that information. There's a quick link to our mailing list. I would go follow this if you are interested in community development or further OpenShift briefing meetings will definitely be posting there. We'll also be placing a lot of information in the repository, which is a quay Claire the discussions area of that will be placing a lot of information about how to interact with the community moving forward. So there's just a couple contacts here. And if you need to reach out to us these are our emails and then there's a general way email. So that kind of wraps it up I hope that was informative build you in on we know the work we've been doing on where before. Well, thank you very much guys for joining today. I'm wondering Hank, if you have, and if there's a repo for the Kubernetes operator, if there's an ETA for that and if there's, if you need people to test that from the community. Not yet. I'm still it's still in like half broken building phase. So get ready for that. Let me know. There's a lot of folks and that we can reach out to and get them to test that for you and on different platforms and different. Yeah, we will do our ultimate goal is to make it sort of seamless into the Claire operator. All the, yeah, the, yeah, sorry, quay operator, the quay operator, it pulls it in sort of transparently behind the scenes and get all the sort of scalability benefits of something that understands Claire's workload. But it just comes along for free with your container registry. And Lewis, you were talking about performance and scale analysis and and trying to get some better, a better grip around, you know, how, how Claire was doing out there in the wild. If there's folks out there who want to work with you on that or give you feedback on that. What's the best place that is it that Claire mailing list to reach out to folks to do that. Yeah, definitely. I mean, that would that would be really great if it does peak anyone's interest. They can definitely contact us in a couple places definitely posting anything on the mailing list. We'll get our attention to help issues or get help discussions will get our attention pretty immediately, or just shoot us an email and, you know, we'll take a look at that. But yeah, there's a couple options right now. All of them should be pretty viable. But the use of it in house Alice referenced the a million images scanned with inside of Red Hat or we have created a million I think we've created more than that but personally I think I might have made a whole bunch of messy images that should be scanned. But that's growing into other organizations that can can utilize performance and analysis metrics and give us feedback. Is there any telemetry being added into Claire or anything like that to collect that from outside external. Yeah, I think Claire is capable to send the metrics into Jagger. It's like building a feature and of course, things like making logs available in the system that can easily make a dashboard out of it. For example, in our use case we use the Elk stack together, like together with Kafka. So we are able to see some metrics directly in the Kibana dashboard. And I'm going to read out one of the questions I know you answered it in the chat, but I'm going to read it out for people who might be watching the video here. Later, will the expanded language support for Java, etc include sources outside of red hat I maven central or will it be primarily focused on libraries that red hat supports and Lewis had a nice answer to that. Yeah, definitely. So Claire takes an open source approach to begin with. So all the data that we collect are independently upstream managed and the reason we do that is because the most accurate data is the source of the data right so we go out to your local manifest for red hat data will go out to the Ubuntu security tracker for Ubuntu data. We are pretty adamant on not using quote unquote closed sourced or aggregated data, we really do want to keep a consistency and a level of accuracy with the sources. So the long winded way of answering your question, definitely we will go out to, you know, maven central or any of the official sources that we can find. As long as we can grab the data in an open source way. Any kind of closed source data sources we have to open up to more of a discussion around how that could work, but we haven't had that happen yet. So for me it's always annoying to find a piece of software that looks like it does exactly what I want only to find out that there's some sort of hurdle in the way and you need to go get a key, plug it in and use it. So we don't want to, we don't want to be able to do that, but we want to make sure everything we ship by default works. All the data is there, you can all the all the checkboxes in our read me, you can go do without having to go sign up for another search. One more question in the chat, the in this probably top of mind for a few folks. How would you define the relationship between Claire and stack rocks? Are they mutually beneficial or is one a superset or subset of the other? How does this we just had the cube linter folks on last week, I think so it's probably topical. Yeah, so I can talk about what I know so far. I know that there's no official talks of how the teams will work together but they utilize clear B2. So we've already started discussing at a high level what clear before can offer them. I imagine that they'll be a pretty tight collaboration in the future, as long as you know it's a little bit above my pay grade to determine those things but as far as I can tell they utilize Claire as a product and they would be interested in Claire before so we should see more of a merging than a, you know, any kind of separation or a schism between the products I imagine that they would fall in line pretty well since the underlying technology they use for at least the scanning portion of their product is the same. So it works out pretty well. There's another relationship where we can get more performance and scalability from people using that and so there's another whole chunk of the ecosystem plus more engineering resources coming. Hopefully our way to work on this and so that that's always always always a good thing so yeah. That's the most exciting part. That's always the most exciting part. One other earlier question that I just wanted to get a read out on to for anyone who's watching this and not in the chat was. So, I just wanted to ask you, Murphy's question on can partners build custom matchers are custom matchers using Python and you had a nice answer for that to as well with. Yeah, definitely. So we support we support remote matching, which is when in the process of looking at the data that the matcher service received from an index report not to get too technical and terminology, but it can take a look at those contents instead of looking at its own internal database, it can go out to an API. So anyone can go and write an API and in any language you'd like. If you do want native matching support, obviously there's some advantages there. So, right in go at this time, and it will need to reside in the bear repository at this time we are working on on a possibly allowing X out of tree matches so matches that live in other repositories. But yeah, if you are interested in the cross platform, looking into our remote matching might be applicable to you. So, I don't see any other questions in the chat, you said you might have a little demo to give us. If you're up for that and that would be great. For those of you who haven't played with Claire. Let's try that for half a iota of a second. There we go. Okay, cool. Yeah, so what I have here is a pause for one more second. There's one more question. Will Claire v for be pushed to the container security operator and if so when. So, as I understand it, the container security operator is written against ways API. So it depends on having quay and the latest version of quay ships with Claire v for as it's sort of security back end. Thanks. All right.  So what I have here is a local Claire environment. You can do this today. If you want to you can go and pull the Claire repository. And do this command, make local dev up just make sure you have the necessary dependencies. We won't go into that right now it involves. Compose, but you can just look at the repository for that. And what it does is it sets up quay and Claire locally on your machine. And quay lives at local host. So what we can do. Is we can go over here. I've already logged in. I created an admin account. And I created this organization Claire before org. When you're utilizing the local environment. You can use pod man. As far as logging in and pushing an image to the local container or the local repository. You'll want to specify this TLS verified false because it's a local environment. We just didn't bother to wire in SSL. It just kind of gets in the way. So what we can do is a login. And that's at port 8080. So this will log into the quay instance that is running here. And I have a container. It's just even too latest. And we can go ahead and we can push that. You'll notice that you'll have to tag images with the local host 8080. And then we can go ahead and push that to the local quay instance. Okay, just got barked at me for a bit, but it looks like they're pushing successful now. So we'll go over here. And having new repository called testing. If you go to this tag area, you'll see that we have successfully scan. Let me make this bigger. I'm sure it's quite small right now. This was the image we just pushed and then Claire was able to scan it. You can go and you can dig into the security information via this gooey. Yeah, so if you'd like, we can just give you a quick overview of what Claire actually did. And Louis pulls this up. Like, again, one of the cool things is, because everything is driven off of this content address ability here, because Claire did the work of scanning this base image once any new container that shows up only the new layers need to get analyzed, which makes it a bit snappier. So this thing is pretty quick. So, if we just stand through the logs right here, you know, you have to be acquainted with the application a little bit to understand, but the indexer is really going and it is. It's doing an analysis on the layer right identified an OS release file. Okay, so we couldn't identify it. So the match identified for the AWS distribution. Okay, I can't find an OS release files. I'm just going to continue. So yeah, these will be the indexer itself is doing this it's grabbing the layers. It's identifying any items that can then it's storing. The index report. And then the clear match is really just going ahead and it's, it's issuing these these matching. So as you can see, it's a Ubuntu image is found that is 92 are interested. So this corresponds to in the talk, Hank mentioned that, you know, most the mattress aren't going to care right because it's not like you're pushing a, some kind of hybrid between an Oracle and photon container. So it's nice because even though we're kind of fanning out. We're not really doing a lot of work, only one of the mattress actually wind up doing work in the common case. So this is the, the match are basically evaluating the pushed content so this process will return vulnerability report, and then that vulnerability report is pretty much just parsed by quay and presented here. So yeah, you can do all this right now, if you wanted to go and pull the clear repository and play around with it. So just basically go and run, you would just go and run this. And that will deploy a quay instance at local host 8080. If you have any troubles with that, you know, just, just, we've been doing a new thing where, if you have like quick, quick support questions, drop them on discussions. And that seems to work pretty well we can mark things as like yes this is the correct answer, but it's been a nice place to put anything really support it should not serve it's a bug right you should put something there will will triage it will work with you to understand you know why your environment might not be working. But yeah, that's clear before. Hope you'd like to demo. Love the demo. How about if you can throw up the resources slide one last time so we we end on that people know where to find you again. And I don't know if anyone else who's on the call if there's anything we miss Daniel or bill anyone else that we should have covered. I think you did a great job here guys and so I'm looking to see if there's any other questions coming in from chat but I think we're we're good. And that you get a bunch of folks hopefully listening to this out there in the universe to come to the community development meetings starting soon. And we will post this video up there along with the slides if you share them with me and weed it out and as always, great stuff from the Claire team and we're really grateful for all the work that you guys do. So thanks for coming today and sharing all of this with us. Thanks a lot. All right, take care guys.


Ah, clouds. So sweet and puffy. So dark and scary. Whoa! Sorry, where was I? Right! Clouds! Clouds are made of water droplets or ice crystals that are so small and light they stay afloat in the air. But how does the water and ice get into the sky? And how do they form a cloud? Clouds form when water from oceans, lakes and rivers evaporates, becoming water vapor. Warm air containing water vapor rises. If it rises high in the atmosphere, the air cools down, and some of the water vapor condenses into liquid water. The condensation process is easier when the droplets have a particle to condense upon. Oh, hey there! These particles, like dust or pollen, are called condensation nuclei. When enough water vapor condenses upon many condensation nuclei, that forms a cloud. Clouds can form in many places where air is rising, at weather fronts, where air is heated at the Earth's surface, where air is forced to rise in areas of low pressure, or when wind encounters a mountain range and has nowhere to go, what up? Hello! As you can see, there's a lot more to clouds than meets the eye.


A Vietnamese tiktok chef is clapping back at the online haters about her upcoming expensive Vietnamese restaurant David we got to talk about this online beef or should I say tit ball I try to say it I try hey man from silly to serious we're covering everything I'm gonna go ahead and put this in the silly lane but there is some interesting issues within the Asian-American or Vietnamese community that it brought up and her long story short this is all contained on neck shark Tway the Bay who is a famous tiktok chef she's partnering with some non-Asian people to open up a restaurant that's gonna be $75 a person in West Hollywood next shark had a lot of comments against her she made a video clap back and this just sparked a bunch of discussions of course a lot of people supporting a lot of people going against her and a lot of people in the middle so we got to break it down get into the comment section give our own takeaways because you know silly to serious sometimes it's fun to talk about the silly things all right first off though we do have to play her video clip so next shark had posted an article about me a couple weeks ago talking about the opening of DD and the partnership with Hwood group and in going through the comments I noticed that there was a lot of uproar about how the food at DD is priced to be on average $75 per person so let's get into it firstly I just want to lay out the question why can't Southeast Asian food be in that price range is it so outrageous for Vietnamese cuisine or any other type of Southeast Asian cuisine to be held to a higher standard because I mean I get it I love me a good hole-in-the-wall fuss spot as much as the next person but DD is not that the restaurant is located directly on restaurant row where the average price point for a meal at any of these other places on the same street can run for a hundred dollars per person if not more and Vietnamese cuisine is constantly regarded as the cheaper alternative to eating out but the vision I have for DD was to bring that same familiar homey feel of my culture's cuisine into an elevated market one that can really push the culture forward in a space where most haven't and simultaneously make it less intimidating for people who have never ventured off into trying it people tend to mistake Asian cuisine from being cheap and accessible and while that's true there's nothing wrong with that but Vietnam also holds some amazing Michelin star-level quality food that consistently ranks on Asia's 50 best restaurant list that version of Vietnamese cuisine has yet to reach America and I'm grateful to be someone that can lead that change to bring modern-day Vietnam to LA all I know is this if I'm going to have my restaurant on one of the most famous blocks in Los Angeles on Los Angeles Boulevard in the middle we hope I'm going to do it right DD is it meant to be just a restaurant the entire menu the decor the hospitality everything involved is meant to be an experience and I for one would confidently pay the price for the quality I know that I'm getting wouldn't you hey man listen I just view this as some tiktok stuff man because to be honest I think that high end via food has been bubbling for 10 you can argue all the way to crustacean you know and was that Beverly Hills or Hollywood that's 25 years ago but it's true that your average person which is tiktok represents your average person you know not everybody's a foodie on earth right yeah exactly I mean we there's a I mean if you've ever come to New York City they do have some Vietnamese food and some of it can get pretty pricey alright so but I do want to say about 20 the Bay because I did do some food videos were her back in the day like 2017 she is a good chef like even back then I thought she was a good chef and I'm sure she's only gotten better she went to culinary school she she was very professional to work with so I hope her success you know I hope she's building the Vietnamese no boo or the Vietnamese hakasan which is true that both those spots even though they're Japanese and Chinese based on the menu they do more cater to a non-Asian audience and that's okay because you need to have you know the stuffed in the enclave that's low end mid-end high-end but then you need stuff that's on the west side which is typically the west side of anything New York or LA is more like not Asian you need that low middle high to all the way up I think there's a market for everything but anyways guys I mean listen as far as we're just I'm just gonna rattle off some restaurant names of kind of higher end Vietnamese restaurants that we've known of for years now manamvo Montserrat vote even Saigon social is kind of up there Vanda Bolero they were really high-end but they did close out crustacean out in Beverly Hills there's like Galviet over in the Bay area summer rolls even in even summer rolls in 66 I'm sure you could drop $50 a person guys this is not cheap Vietnamese food but it is actually all pretty good shout out to on Choi I think on Choi was the first spot to do high-end for in Vietnamese food in Manhattan in 09 and since then they've transitioned to D on D so you got Zall in over in Toronto downtown Toronto colonial in Houston there's their stuff there's more stuff than people think I'm not saying that the TikTok audience because you got to be kind of like in the foodie world in these big metropolitan cities to know about it but this is the first time that this whole debate got taken a TikTok right right right so anyway let's get in the comment section somebody said whether you broke boys or girls can afford her food or not we need to celebrate her success because it's also the success of the Vietnamese in the Asian community I mean I think to an extent I'm gonna be honest I don't think you have to celebrate her success you don't have to support her and go do anything but and also the it would be nice to yeah it would be nice if the community got around each other and and even if they kind of saw the pros and the cons of anybody or they're the thing you guys still supported can I tell you this that West Hollywood is not exactly a little Saigon type neighborhood okay are you sure that's not really fact West Hollywood is closer to anything is closer to Tytown right it's not that close but it is closer to Tytown where you know Thai people have their little their community out there you know interestingly enough there's actually a lot of high Thai rush high-end Thai restaurants in America but not in Tytown yeah I think a lot of people forget that Southeast Asian cuisine is at that level because there is a lot of expensive Thai food it really is this is a comment against her or against the whole concept somebody saying I think she's missing the point it's very simple that food is simply too expensive for 99% of the people in the real world it costs an arm and the legs so I mean we just are questioning who'd you make it for yeah I mean I don't like again I don't think she made it for the Vietnamese enclave community I don't even necessarily Asian I mean but maybe not I mean but I'm not saying that Asian people won't go there but also again guys crustacean has existed that is a soup that's probably a hundred dollars per person plus 150 a person bro that's a lot of seafood heavy stuff yeah it's a lot of seafood it's a lot of beef so I'm saying like that has existed now you could say crustacean by Helen on and the on family like that's not for Vietnamese people that's fine it's probably not solely for them but I'm just saying you know it's been around right right right um somebody said people pay 75 dollars per person for French or Italian food and nobody bats an eye why can't be the case for Southeast Asian cuisine and then of course there was a lot of comments and that but then somebody said but yeah if you go to Italy or France food is not cheap at all but when you go to Southeast Asia you can get a bowl of food for like less than a dollar again man I mean Thai food Thai food is very cheap in Thailand but it can get pricey in America because people like it yeah somebody said if y'all are broke just say that and somebody said STF you you ain't eating there every day this is the hilarious eating there every day I mean seriously who's gonna eat there every day I think this is a loud chef he said listen if 75 dollars is too much for you go eat somewhere else simple as that stop crying about the price when most of y'all probably never even worked in the restaurant industry before what yo you guys expected her to open up a typical hole in the restaurant copy and paste Vietnamese restaurant yeah I mean listen I don't think this is dude opening up in West Hollywood is not gonna jeopardize any sort of the mom and pop you know Vietnamese restaurants that we know that are very cheap and affordable it does not threaten that also I do think a lot of the people leaving the comments do not work or really work in the in the food you know what the funny thing is they're people who open up restaurants whether they're in the enclave zone but especially outside of the enclave zone they always are like man I get so worried when my people come in because they are gonna break down and be so critical on my menu but my menu has to appeal to people outside of our world yep exactly I mean that is a difficult balance dude you're juggling fish bowls because at the end of the day America's hyper diverse you know I guess we all speak English but like our taste buds are like very different like people in this fish bowl still American don't like what this fish bowl likes you know who are the biggest critics of ethnic food is that ethnicity those people are the biggest critics it's true yeah somebody said 75 bucks bro my grandma makes tick call every day bye and somebody said underrated comment and somebody said okay then go eat your grandma's tick call then bye there was a lot of arguing you know they like to they like to banter yeah also I do feel like if next shark never posted this article I don't even think that there's this discussion yeah to be honest somebody said she clearly must not clear care about her own people that are middle-class coming to the restaurant if she's charging these prices and putting it in that area yeah I mean goes this goes back to the again the criticism of any expensive Asian food where you can find a cheaper version listen I mean I've been to expensive Chinese restaurants how come no one's getting mad at Chinese people right for charging like a hundred dollars for a peak but some people do go against like how noodle or like I didn't tie phone yeah of course people can say you can leave whatever comment you want you say it's overpriced but I do think you got to eat there first yeah you got to eat there and then you can roast I'll tell you my own personal opinion on it like I always try to judge places for what they're trying to do like if I'm in the West Side whether it's a West this city West the West Side is always bougie West Seattle's like that too West West LA West New York West Village I would say I have to look at it under the guise of like the demographic it's appealing to exact of course I have my own opinion because I eat ultra cheap or ultra authentic ethnic food and you know the food in the ethnic enclaves is starting to move higher end as well but I have to understand the lens of like the main primary customer demographic of that spot yeah like I have to be relative I mean I do think if I had to say what she's trying to do some what I think it's trying to do is bring Vietnamese food to that level where you kind of it's like you go out and eat it before you go out like you can get lit there and it's fun and the vibe is cool because the restaurant group behind it also doesn't a lot of nightlife so of course they're gonna make it super vibey probably with loud music like a noble or a hawk a song right if it is a bunch of rich Persians or Armenians they're whatever have an expensive via clams lemongrass clam yeah dude it doesn't threaten Orange County man this ain't for the Garden Grove crowd who wants full oxtail foe for like 13 bucks it's not it for me though I might be trying to see the abg's maybe throwing the bottle beer bottles David it's okay to say that you're not gonna be coming to this restaurant every day either it's okay to say that I'm gonna check it out of on the West Side somebody said tick-tock and chef there's there's are two things that do not fit together be better to eat at a restaurant somebody who's not a tick tocker all right that to me is the best criticism of this restaurant literally this comment all other criticism I'm not really with but if you want to discredit it but because she's a tick-tock chef first of all she has done a lot of pop-ups with other chefs and other restaurants in New York and LA so she has valid but she has that but you're right she didn't work me what dish do people have to work at a French restaurant she went to culinary school she graduated from it I mean I don't know I think a lot of it will just be up to the execution and then the sous chefs and the system or whatever the food is gonna speak for itself somebody said and then somebody said all of y'all complain about price it's simple don't dine there are there cheaper alternative sure go there and eat if Brazilian food French or Italian or even Japanese sushi can be price high and no one bounce an eye then y'all can shut the hell up I'm tired of Southeast Asian cuisines always being treated as second-hand food people feeling titled and expected to be cheap when reality it takes more time and effort than Italian or French cuisines and then somebody said seventy-five dollars that's clearly for influencers ABG's and white folks there's a market for these people like we said guys Andrew I wrote I could keep going on there was comments back and forth back and forth good point good point counterpoint also good counter counterpoint go I I love via food I think via food is maybe my second or third favorite Asian food or type of food period in my life honestly it's incredible yeah I love you I love via food a lot it's actually yeah so anyways guys but I mean overall I mean this is not the most serious issue this this is gonna happen what again when the restaurant opens and there's gonna be a super a lot of judgy people who are judging the little bowl of like braised short rib for that she's gonna have and you know I will say this and let me be real because I've had for a lot of restaurants I've paid thirty dollars for for and I've paid thirteen dollars for for for is one of those dishes that is kind of hard for me to pay a lot of money for I've had the expense of for and hasn't been that much better but other Vietnamese dishes been great at the higher end yeah I think at the more macro and because obviously like I said I hope Tway the Bay's restaurant is successful yeah I think you know it has a chance out there because there's not nobody's done like a hawker son but via concept yet um it's almost like a influencer versus consumer thing you know what I mean because you have a crowd that was probably never gonna go to West Hollywood to begin with sort of judging you but it is true that the influencer sometimes the influencer sometimes can have like a I don't want to say holier than thou or like put themselves on a pedestal type energy vibe I can see that too I'm gonna keep a real I see what I see yeah yeah I do think her response could have been I think her video response could have had more tact I think she could have shouted out to some more high-end Vietnamese chefs I think she could have acknowledged that Thai food has been at this price point for a decade or so and no one's has batted an eye at it just because you know white people love Thai food it's true they do um so I think that yeah her response could have been written better for sure I think that criticism is fair but honestly when it comes to the price point of food guys the food will speak for itself yeah the vibe the Asians we might judge it on the food right but other people they might be judging it only relative to other things on that West Hollywood Street that it's on you know what I mean because they party on that Street Dave four times a week David so it only's got to beat out like seven other spots but obviously the Asians has got to beat out like 7,000 other spots let me do a shameless plug we got our chili oil coming up Smala you can sign up at the link down below to get 5% off of your first order let me tell you this Smala it's a chili oil it's not the cheapest chili oil it's not as cheap as some of the Chinese brands but it's got certain ingredients that do make it taste a certain way and kind of levels it up so we sell it at you know not not $7 a bottle right so I'm excited about it but honestly some people might say it's a little too expensive for them yeah absolutely man I think it's always a struggle you know you got first generation second generation third generation thing and let them know what you think in the comment section below valid arguments to go all around until next time we to hop up boys we out peace


Day two at UMG Nashville the eSport live event happening right now and freedom is Representing the video behind me shows one of our networks powered by freedom. I play prodigy runs Infinity and he is hosting interviews getting coverage for you for those of you who are not at UMG You can get all the details Right here this video will take you to the interviews done today On the eSport channel. If you don't know what eSport is go to YouTube comm slash eSport our brand new eSport only channel Dedicated to live events and pro gaming competitions like UMG Nashville Which is a call of duty ghosts? Competition and you can see footage in other videos on that channel with other competitions like Optic versus evil geniuses, and I'll won't spoil it for you, but there was a one-sided beating Tell me what you think in the comments below about eSport We would love to know how to build this brand to better suit you to help you grow and So we can all grow together because this is all part of the freedom family and Freedom is all about helping each other grow So tell me in the comments below how we can help eSport grow together Who am I? I am George founder of freedom, and you've been watching Let's discover freedom click the first video to learn What is freedom and how it helps you grow click the second video to learn about? Sponsorships for all freedom partners even if you have just 10 subscribers and click the other videos like how do I leave freedom? to learn more Click get more views to learn how to build your audience faster on YouTube Click get more CPM to learn how to make more money from your channel and click get more music to learn where to get more Music to spice up your videos Click the first playlist to watch the George show on freedom That's my show or watch the Anthony show or the Alex show also on freedom And we will grow together as a family because this is the freedom family You are part of it. We are all part of it, and we're all growing together so grow with us and Partner with freedom that play now button right there on the video bar is all you need to click to get Started your secrets if you really look at yourself you will be speechless What happened to being doctors and teachers what happened to being your brothers keep on


Hi everyone, Joe for JaspysCaseRakes.com, coming at you with a pack of that, 17-18, blah, blah, blah, blah, we're giving away the seven spots in this, blah, blah, blah, blah, blah, but as always we're doing the break first, there's that, there's that, let's roll it, let's randomize it four to three, seven times. Yes Robert, we do Instagram live seven nights a week, five, six, and seven the final time, we got Ryan down to Manny, seven times for this one, and seven the final time. After seven times, okay, C down to the bowls, all right, so there's the first half of the list right here, this is 17-18 basketball, so I guess we're looking for Robert, who has the Celtics, possible Jason Tatums, no trade windows in this, I think people just want to see who gets what, who gets those spots, why is that $20 bill taking a bath? Is this an investment commercial? Ah, it is, Savings, Ally Bank Savings Account, so there's all the names right there, so at the end of the break, as always, we'll re-randomize that list of names, and then we'll see who wins those spots. All right, oh, Dennis Smith Jr., Dennis Shrooder, and Lonzo, that's not bad, that'll be for the Lakers, Kevin with the Lakers might have, he is Lonzo Zion adjacent, so I think he might get a little extra boost if Zion does well. All right, so there's that group right there, and it's going to be top, top seven will be in that one box break, top seven after 11, five into six, one, two, three, four, and 11 in final time, after 11, there's one right here, Ryan, everyone in eight through 30 appreciated, thanks for giving it a shot, so there are seven, six, five, four, three, two, and one, Ryan, Manny, Ryan, Manny, Ryan H, Manny, and Ryan S, a lot of Manny's and Ryan's in there, so there you go, you are in the break that's coming up, the one box break of NT basketball, jashbyscasebreaks.com, I'll see you for that.


and welcome to this video explaining how to get started with the Bluetooth Low Energy STM32 Nucleo Expansion Board. This board is part of the STM32 Open Development Environment, a fast and affordable way to prototype and develop innovative devices and applications with state-of-the-art ST components. Information on how to obtain the board can be found on www.st.com-x-nucleo under the reference x-nucleo IDB04A1. The package includes the board itself and an insert card that provides a first level of information on the main features. The board is built around the ST Blue Energy Bluetooth smart network processor. A balan for signal conversion and a printed antenna at the bottom of the board. The board is equipped with an Arduino Uno R3 connector, allowing it to be plugged into an STM32 Nucleo Development Board. The board is FCC certified and passed the RF test for Japan Radio Law Certification with significant margin. It supports the Bluetooth Low Energy Standard Profiles for both peripheral and central roles and comes with complete middleware to build applications. To start building your prototype, plug the STM32 Nucleo Expansion Board onto an STM32 Nucleo Development Board. Next, connect the STM32 Nucleo Development Board to a PC using a mini USB cable. The board is automatically detected and seen as a disk drive. Visit st.com and search for the keyword x-nucleo IDB04A1. Click on the main part number link. Then, go to the tools and software section and click on the x-cube link. Finally, go to the end of the page and click on the download button in the get software section. When downloaded, just unzip the file in the folder you want. In the software package, you will find directories with all the required material. Now, let's try a sample application that allows you to exchange data between the Bluetooth Low Energy Nucleo Expansion Board and a Bluetooth Low Energy Capable Smartphone. The firmware to be installed is called sensor demo and can be found in the applications folder of the project's directory as shown here. Select the STM32 Nucleo Development Board you are using and drag and drop the binary file onto the Nucleo disk drive. On your smartphone or tablet, install the blue NRG application available on Google Play and the Apple Store. Launch the application and connect to the board. Press the blue button on the STM32 Nucleo Development Board and this makes the cube on the screen move as the information is transferred over the Bluetooth link. A second screen shows simulated environmental data transferred from the expansion board via Bluetooth. The last screen displays the received signal strength indication or RSSI measured at the antenna. The value decreases as we move the board further from the smartphone. Discover more features and software add-ons at st.com slash open software. OSX SmartCon PS is a free and easy-to-use software package to develop applications based on Bluetooth Low Energy Standard Profiles. OSX Blue Voice is a voice-over Bluetooth Low Energy vendor-specific profile library for STM32 and Blue NRG. Blue MicroSystem is a full-featured software development framework that streams real-time data from motion and environmental sensors to a smartphone using Bluetooth Low Energy. Blue Voice Link is another example of vertical application and it uses digital MEMS microphones together with the Bluetooth Low Energy expansion board. A comprehensive set of documentation for the STM32 Nucleo Expansion Board including a user manual, application notes, quick start guide and data sheet is also available. Visit st.com slash stm32ode.


With this outfit, I wanted to embrace aspects of the quiet luxury trend, and I've done that in two specific ways. First, the lighter color palette of the Luxe Foundation. Like gray sweater, cream-colored jeans. I don't really need to understand why, but for whatever reason, lighter colors almost always equate to a more luxurious look. The next thing I did was to include some more Luxe fabrics, a cashmere cable knit crew neck sweater, and some suede split toe derbies, which really tie into the color of the leather jacket quite nicely and make the look very cohesive.


Hello and welcome to the session. Today I will help you with the following question. The question says, Is a square prism same as a cube? Explain. First let's see what a cuboid is. A cuboid is a box shaped object in which all the faces are rectangles. This is the key idea to be used for this question. The figure given here is a cuboid with length L, breadth B and the height H. As you can see all the faces of the cuboid are rectangular in shape. Now let's move on to the solution. If at least of the lengths for cuboid are equal then the cuboid can be called a square prism. So in this cuboid if we take any two lengths to be equal like suppose we take the length L and the height H to be equal then it will form a square prism. As you can see in the figure this is a square prism which is formed by taking two of the lengths of the cuboid equal. So we can say that a square prism is a special case of the cuboid. All the three lengths of a cuboid are equal then the cuboid can be called a cube. So if in this cuboid we take the length, breadth and the height all three lengths to be equal then it will form a cube. As you can see in the figure this is a cube in which all the three lengths that is the length and the breadth and the height are equal. So we say that a cube is a special case of a square prism. Notice one more thing that a square prism one dimension different from the other two but a cube cannot. So a square prism is not same as a cube and from the definition of the cuboid we can also say that a square prism can also be a cuboid. Hence our final answer is no it can be a cuboid also. So hope you enjoyed the session have a good day.