Welcome to the Home Lab Show, Episode 38, Managing SSH Keys. This is a question that came up a lot out of our topic on SSH specifically, and we wanted to talk a little bit more in general. Why I say we, I want to Jay to talk about it more, because I don't know that I'm following as much best practice. Jay is, well, this is more his realm. He knows this side a little better than I do. I know how to manage SSH Keys for my servers. Jay is going to talk about how to manage it for your servers and then, well, all the other servers you may do if you're looking for a career in this, and there's not a one-size-fits-all. It turns out even amongst my Linux expert friends such as Jay, there's different opinions on here. So this is a methodology or methodologies we may talk about today, but there's always more reading and always more learning, and there's always better methodologies coming out in the future. But hopefully we're going to lay some groundwork for you on how to do this. I'm pretty excited about this topic. But before we dive into it, another place you can manage your SSH Keys is Linode, and we have them as a sponsor for this podcast. They've been a sponsor since the beginning for us. We really like Linode. Thank them for all of this, and it's very applicable when you're setting up your Linode instance. The best way to do it, Jay, would be putting your SSH Keys in. Yeah, absolutely. No password authentication allowed. Well, we shouldn't anyway. Right. So they make that really simple to do when you're deploying their systems. You can have your public keys available. They can automatically deploy them in there. So any of the projects we've talked about on here, well, many of the projects I should say we've talked about on here, maybe not 100 percent of them, you can run over in Linode. It's a great place. We need to run something in a cloud that's up and running. We were laughing about that because there's a few clouds that are having a rainy day right now. Yeah, like the stormy day. I mean, we have a logging vulnerability with related to Java and AWS outage right now. We have a lot of fun going on. A lot of fun going on right now. Lots of things to patch and update. But we'll thank Linode for being a sponsor of the show, and if you have any systems in Linode running anything with log4j, please tell me that you're not listening to this while waiting to patch. That's not our topic of the day. You should be patching whatever software needs to be patched. If you have something that has a dependency, please patch it. But thanks again for Linode for sponsoring and yeah, we won't I'm hoping there's some time in the future when there's not an egregious thing on fire, but it's the Internet and this will happen again. Yeah. You know, I've always, ever since I started doing podcasts years ago, I've always wanted that moment where I'm like breaking news, this just in, like literally as we're talking, like something amazing happens, but so far it's always been before we hit the record button or the previous day, but I'll get that moment one day. I just can't wait just a person thing. I mean, this is somewhat, you know, we, I don't know that there's really anything I've got some videos on my channel and me and Jay, we're talking a little bit, Jay's probably going to publish a video on this topic as well, because there's a lot of different aspects to it. And when we have a flaw this large, I know people may want us to do the podcast on it, but unfortunately it just segues off for this particular podcast. It's more about patching all your individual things, unless you're a listener that's also a software developer using this, there's not always as much for you to do as a homelabber because just patch all the things. You know, I just released two different videos on Unify patches or an example. I know it's popular in the homelab. Get it patched. That's it. There's not, if you want to know more about vulnerability, read about it. It's, it's on every headline. It's hit all the mainstream media. It's gotten so bad. So wow. Yes. Yeah. Nonetheless. All right. Let's get started on SSH keys. So we can quit rambling about all the other fun stuff on there. I do see, I will mention, I see two things mentioned that we're not covering today, but at least we honor to do list. Teleport is pretty cool looking product. There's some videos you can find by say his name in those comments. And I'll give him a shout out here. That digital life you can find his YouTube channel, but he's done some videos and teleport. It's pretty cool. But we're not covering that today. And there's also a SSH and the certificate management. Are we covering that at all today? No, not today. No, that's going to get its own dedicated future. Probably video on Jay's channel where he's going to dive into that. That's not a today topic. We're specifically going to talk about key management here. Cause one thing the certificate management stuff is a little bit more nuanced. I see people love it. I see people hate it. I've been to say with what Jay said, there's not enough documentation for clarification on it. Would I say that correctly, Jay? Yeah. For the most part, there's a lot of companies out there that, you know, in the enterprise they have their own way of managing keys. And, you know, it's not like they just go out and go out in the public and say, here's how we do it. Here's where we store our keys. And here's how we cash them and, you know, age them out and things like that. You know, cause they're just not trying to advertise exactly how their system works. So there's going to be some gray areas here. I think the important thing to keep in mind is that we're talking about, I'm not going to say the basics is probably more intermediate level things, but there's no shortage of other ways of doing it. So we're going to get all kinds of comments like, what about X? What about Y? And they're already starting to come in before I even mentioned it. And those are all valid. Those are all valid solutions. I will be looking into teleport. I'll be looking into vault of a number of other things. I'll be doing a video on Yuba keys at some point. I've already done one, but it's, it hasn't aged well. So I'll be redoing it. So there's going to be no shortage of content about the other things. But until we get to those other things, we, I mean, we have to have a baseline here. And I think that's what this video is going to be. Yeah. Cause a lot of people just in general managing and creating SSH keys and making sure you have some methodology by which you manage them with your servers is where you should start and have a good working knowledge of it. That way you can better understand the difference between basic SSH, SSH key management and does something more advanced like using vault or using teleport. And the other challenges become when you introduce other third party software in there, you don't just add complexity. You increase that surface. Now, right, surface increases come with some convenience, but you always just have to be thinking about that. Just, it's more of an understanding. Cause when I say there's a flaw in SSH keys, you're like, well, I'm using this as our flaw in this too. You know, and right now we don't know of any flaws, but these are just things you think about as, as you add complexity to your environment, think about the chain reaction of all the things you have to be keeping track of is one more system in the machining that you build that you have to keep track of. So we're just start simple here. Yeah. Yeah, definitely. So a couple of things to mention before we get started, I have an entire video that's an open SSH guide. It's quite long, but you can go in the description. I'm pretty sure I put time codes in there and look at the specific section. So if you know, like a lot about open SSH, you don't have to watch the whole thing unless, you know, you're new to this. Also, I have two videos that are like 99% done pending a, you know, I just watch it, watch them one final time, make sure everything's fine. They're pretty much ready to go right now. And they're, they're related, but not the first one is going to be about SSH config files. It's all about that one thing, something I've covered before, but it'll be a dedicated video just on that. But the second video that I've done is about multiple SSH keys, a topic today, but I kind of consider that SSH config file video to be a prerequisite, not because it's a, you know, related concept is just, um, it, there's, you'll understand when you see the second video, because it all comes around full circle. And then also we have an episode in this podcast where we talk about open SSH. So I'm going to skip what open SSH is and all of that kind of thing because, you know, if you don't know, you could watch that previous episode or any one of my videos and, you know, get the information there. But I think the only thing to know is that it's a remote management solution. There you go. That we're, you know, logging in remotely to systems because we don't want to waste gas driving all the way across town to the data center when we could be managing our servers and our pajamas while we're watching Seinfeld. I don't know. Um, exactly. Okay. So SSH key management, um, why is this even a topic? Why do we need to talk about this? Well, first of all, a quick aside, I've said this before, password authentication is bad. It's easy, not necessarily easy depending on your password, but people can attempt to brute force your systems.  None of it is publicly accessible. So why does it matter if I use SSH keys in my home lab or just use password authentication? The short answer, there's nothing wrong with that. If there's no capability whatsoever for someone from the outside to, you know, connect to something on the inside, if it's completely segregated, then I think, um, the only risk would be that I could think of if someone literally stole your equipment and then they had your password too, but then they have your equipment so they can just get into, they can just take the hard drives out and get whatever they want. Um, so I mean, you can make the argument that password authentication is probably fine in the home lab, but my counter to that is SSH keys are the proper way to do it. And part of the home lab is learning how to do it right and getting that into your muscle memory. So yeah, you're going through an extra step, but I think that it'll become muscle memory. It has for me, I use SSH keys on everything. And if it's publicly available, you really should be using SSH keys for sure. For sure. And you know, there's the risk of lateral movement. This is still something that kind of needs to be thought about where somehow, and there was recently some CVEs found, uh, in browsers, numerous browsers really this whole year has been a collection of them for all the different browser platforms. It's not calling anyone out. But if someone gets inside your network, the next thing they look for is what else can I get a hold of? Is this computer valuable or can I laterally move across your network between servers? If they have an opportunity and no one's thinking that your computer would be the attack mode for the server sitting next to it that's on the same network, uh, being able to brute force that is obviously a prime opportunity where they can get around your network and find things. So even though you're thinking it's behind a firewall, I don't publicly expose it. This is one of the reasons is still best security practice to do it. And even in the lab environment, when I'm spinning up servers, when I spin on my lab servers, I still have SSH keys in them.  Um, there was a recent debrief by a cyber security company who was, uh, doing proper disclosure of an internal problem they had. They had a password that was left on a demo machine and nothing bad happened because it's part of their demo infrastructure where they do demos. But someone did log into their demo machine and I thought it was cool. They did a debrief on this because like we should have not let RDP open even though it was a demo machine and it was low risk and it's an isolated separate environment, boy, something still did happen and that the thing that our user could be connecting to it and something happening is why overall do it right. That's the, as much as I can hammer that home. Exactly. And to piggyback on that, there's also the vulnerability chain, which is essentially what you were saying, but one scenario could be, well, I guess to take a step back, there's a few types of homelab people, right? There's the, um, people like a lot of us, we have something like PF sense or open sense or something like that, maybe even, even a custom Debian firewall or whatever. And we, it's completely up to date, right? Cause, you know, we're awesome like that. And then the other kind of homelab person is the kind that has some really amazing servers, but they have that D link router from 10 years ago, that's no longer actually getting updates.  They have a, you know, command prompt. And then from there, they probably have access to SSH, depending on what the firmware contains. And then they can try to brute force systems that are connected to that device and then keep going just like you were saying, they could just keep trying to go through the network. If they don't have your SSH key, then, you know, that stops them right then and there. But it's all about the attack surface, which is one of the first things we'll get to. But SSH keys are something that you generate. I'm not going to go into too deep, too much detail what they are because we've already talked about it, but it's a public and private key relationship. You have a public key and a private key for every SSH key, the private key stays with you, the public key, you can put it on a billboard in the middle of an interstate, it's fine. You can throw it up on GitHub. It's fine. Never throw up your private key anywhere, but the public key is public in every sense of the word. So talking about the threat surface for a moment. I think this is kind of what's really going to bring it home because the question from a newcomer might be, should I just use one SSH key on everything? Now let's paint that picture for a moment. So on your home lab, you have password authentication disabled because you have SSH key authentication enabled, and that's how you log into all your stuff, even the computer setting next to you. That's how you do it. And then you get a new job. Let's just say you're now a Linux administrator, you're making some big money and as part of the job, I need you to generate a public key for the servers on your work computer. And someone might say, well, I already have a key. I'll just copy the keys over to the work laptop. And now you're logging into work systems with the same key as your home system. So if it leaks out, you know, that's a that threat surface contains all the machines at work that have that key plus all your home machines. I mean, you're wide open. What are the chances that your key is going to leak? And when I mean leak, the private key leaks, which in that case, you can't really trust it anymore. I don't know. I mean, it really depends on how well you protect it. People make mistakes. Maybe you accidentally revealed it in the clear somewhere. Now you can no longer trust it. At that point, you have to go through all of your systems. Hopefully you have something like Ansible where you'll have to do it once and revoke it. But then then all your work systems, you have to, you know, take it out of there too. It just becomes a big thing. And even worse, you know, if you have a managed service provider that is using the same SSH key on like 2000 clients and that key leaks, then 2000 clients could be, you know, compromise, they can get in, they can get compromised. Yeah, that's the word. I don't know why I sometimes forget that word. But anyway, yeah, they get compromised. And then if you have just one key per client, then possibly one client might have been compromised. But I think that's a lot less of a legal issue than all of your clients being compromised. But then the problem is, well, if you have 2000 clients, you have 2000 keys. So what the heck do you do about that? And that's kind of where we have this problem. Because, you know, I've seen people that have like 20 different SSH keys or however many in their dot SSH folder on their computer. And then they go to SSH into a server and then it tells them that they've tried too many times and they're locked out. And the reason ends up being because it's going to try the first key, then the second one, then the third one, there's only a certain number of keys that it'll try before the server is like, whoa, you're trying way too many keys here, like slow down and then locks you out for a bit. I've seen that happen. So SSH key management can be kind of a challenge and it's a confusing thing because I don't feel like there's a lot of information out there about how to actually do it, which is, you know, obviously our topic for today. Yeah. And managing it, a lot of it's going to come down to managing it with the config file is probably the easiest way to make this work. Yep. And that's, that's exactly something we're going to talk about. So as an aside, like most of what I'm talking about now is in the two videos that I'm releasing, this is just a different format. So, you know, I guess for the people that are listening to this episode, you pretty much are getting the gist of what I'll talk about, but still watch the video because sometimes visual is better for these kinds of things. Anyway, so the first question then, like I mentioned is, should I use the same key and everything? My answer is no, don't don't do that. Generate multiple keys and excuse me, what I do generally is I, when I'm generating a new key with the SSH key gen command, I'll give it some kind of name that I don't like to use the default name because if you do, then you could accidentally overwrite it.  So if you have your, the keys you use as a different name, different file name on your system, then you don't have to worry about the key getting like stomped on by another SSH key gen command because it's just going to use the default name. If your keys don't use the default name, you don't worry about it. So hypothetically, you could have an SSH key for your home systems. And if you do Linux stuff professionally, then you could, or maybe a managed service provider is a better example. So that's what I'll go with. If you, if you work for a managed service provider, maybe you have a key for Acme, then you have a key for this, this company, then a key for that company. And you separate them based on that, which I feel is the best way to do it. Now, before you get to that though, I think the most important thing to know is always use a passphrase because that really helps if your private key leaks. If your private key leaks, you should absolutely revoke the key. Even if you do have a passphrase, chances are whoever got a hold of the private key will not be able to use your private key without the passphrase unless you, unless they do have the passphrase and you don't know that they have it. So you don't know, you don't know what they know or what they don't know. If your key leaks, it's gone. I don't care how secure it is or how, if you have like a 64 character passphrase or something insane like that, it doesn't matter revoke it. But still with it, with the passphrase, you have that extra layer that it's as far less likely they can use the key if they steal your private key than if you don't have a passphrase. So definitely use a passphrase. It's it's it's one of those simple things. I know it's slightly inconvenient because you just want the key to log in. You don't want to be prompted for anything. But go that little bit extra. And I'll admit to have been lazy and some of my lab stuff may not have it. But I recommend doing it. I will slightly draw a line at my lab stuff, probably not having SSH path. I mean, I should upgrade that. How's that? Jay, Jay's not going to be going. Yeah, you had this discussion offline. He's like, yeah, Tom, you know, I shouldn't do that. And I'll admit I'm guilty of it too. So don't if you're doing it, don't don't think I'm high and mighty and saying, oh, no, always do this. I'll admit because you can call me out by watching my videos. Hey, Tom, we watch you log in SSH to your lab stuff without passwords and like, that might have happened. I mean, to be fair, they might not know if you have your passphrase cached, which I'll talk about in a moment. But I think that's an important thing. Just because we have YouTube channels in our own companies does not make us perfect. We're not like, you know, infallible. We have multiple layers of security to help protect our systems. Sometimes those multiple layers of security protect the systems from ourselves. You know, super sleepy or just, I don't know what it is, but anyway, you know, that's why we do it. We're not perfect and we learn, we're still learning. And then that's great because then we learned something. We teach you guys about it. So it's the way- Please learn from our mistakes of doing this and maybe Tom's current mistake of definitely maybe my project for the next couple of days should be swapping all my lab stuff, starting it up, swapping up with a new key that has a password on it. There we go. And one exception to this is when, on my end at least is if I'm just doing a demo, like a tutorial video and I spin up a Linode instance, for example, which I'll do often just for like a recording session. And then I plan on deleting that instance right after. Yeah, I'm not going to worry so much about that because that instance contains no information whatsoever that's important. And it only exists for the hour it takes for the recording to be done.   But reasonably secure is what I'll do. But yeah, you'll see me not use some of those things in my own videos just because, well, this is a temporary server, which is very common.  The thing is though, we have SSH agents which can cache your passphrase such that you don't have to keep retyping it over and over and over again. And another trick I do, I'm not sure if this is just Tmux in general, but or my config, I'll start an SSH agent before my Tmux session. So everything in the Tmux session has that cache too. So I don't ever see the passphrase again until I close my terminal window. So that's what an SSH agent is. You load your key into the agent. It asks you for your passphrase for the key then it's unlocked in memory. And until you close that terminal window you could just keep connecting, disconnecting, disconnecting to that server all day long and you'll never be asked for that passphrase again. Now to make things even better, every operating system, but Windows, maybe Windows does this now, I don't know, has an SSH agent built in actually. So your Linux distro, unless you're using a window manager, if you're using a desktop environment like GNOME, then you could basically unlock the key and it'll ask you, do you want it to always unlock when you log in? So you could basically make your session when you log into your computer, unlock your key for you. I'll leave it up to you guys to debate the security of that. That's another story, but you can open it up yourself to make it more convenient. And I think with macOS, for those people that use that at work or something, I thought it was like SSH-K, but don't quote me on that. There's a command you could use that'll do the same thing in macOS. So unless you're using Windows, unless they have a solution for that now, there's a SSH agent built into that. So that'll help you with that passphrase. If you don't run, I believe Windows subsystem for Linux and load that on there because it's fully the Linux subsystem that has the SSH manager in there. So you can do SSH key gen and your standard SSH commands. Be careful because it doesn't store them under your normal, there's a specific spot in storage. So make note of where it stores that key information so you can properly back it up or do what you need to do with it. Because it doesn't, I don't think it's under documents under the normal spot you might expect it to be. So heads up on that. It goes out of scope of this particular video.  This applies to whatever platform you generate it on, but yeah, just make sure you note where those things are. Exactly, yep. And this is where you start to get into the territory of companies that have solved this problem in some kind of way, their own way. I've seen companies utilize LDAP for this. I've seen SSH certificates being a thing, third-party solutions that some companies run which kind of worry me because if the solution itself has a vulnerability then everything leaks but there's all these different technologies for making this easy. I like doing it manually just because I know how it works, but I get it, not everyone at your company or even in your house if you have like other family members that are hackers and getting under systems too have the same level of experience. Now, okay, so we know SSH keys, what those are and we know what the SSH agent does it just helps us not have to enter the past phrase every time and we also know to disable password authentication and absolutely use a key, that's great. Now, then you start to think about where you want to have a different key. Now, if you have a bunch of Raspberry Pi's that are just testing devices that contain nothing important whatsoever there's probably nothing wrong with sharing the key between all 10 of them because I mean, if you don't really care about them then okay, you're just doing it to be in the habit of it. You could make the argument to have the same key for everything in your home lab but if you're connecting to a friend system you might want to have a different key over there or if you're doing it at work you want a different key per client that's my recommendation. But like I mentioned earlier you have this problem where if you do SSH user at domain name or IP address it's going to try every key in your dot SSH folder and by the time you get to a certain number of keys and if the key that matches that server is all the way at the end it's going to lock you out before you even have a chance to get into it and this is a common pitfall I see with newcomers with SSH you're like everything's right the key is correct on both sides and I use SSH and I get locked out. Now, you could specify the key on the command line that you want to use with I believe it's dash I if I remember correctly and you could say I want to use ACME's key or whatever the file name is for that and then you give it that it's not going to try all those SSH keys it's going to use the one that you told it to use but then you run into this issue where you have to LS in your dot SSH directory which one is which now? I got to remember the file name that gets a little clumsy and that's where we talk about the SSH config file which is how I like to simplify everything and that's also why I recommend watching if you're going to watch my videos on this the SSH config file video first which I will be releasing first before the key about this topic and I think that's the way to do it is using the config file. So what is the config file I'm talking about? I'm talking about a client config file not something in the Etsy directory it's literally called config it's in your dot SSH directory it's not there by default you create it yourself you could just look up the syntax online it's pretty easy that you have like a stanza that contains a name whatever you want it to be referred to I think it's host name I'm doing this off the top of my head but you give it a name and what's confusing is for each entry you can name it whatever you want if your server is Acme dot or web.com or web.acme.com or something you could put that in that's fine but you could also call it like potato in the config file it doesn't matter you just name it whatever you want whatever is easy for you to remember but when you actually type the host name in the config file or the IP address that has to be real but you can give it a name to refer back to anything you want which is what I think makes it easy so you could literally come up with a syntax like home hyphen web work hyphen web for example and in that way it's pretty easy for you to remember the syntax you just do SSH work hyphen web home hyphen web or whatever your server name is and if that's in the config file the SSH client will see that and that name you're typing on the command line matches what's in the file then it's gonna use all the parameters underneath that particular entry inside the file. Now a couple of things I wanna add to this I threw in the live chat and in the description a fun little tool called SSHTO and it's a way to read that config file so when you're like me and you have untold numbers of things that maybe you forgot some of the names of them you can then use this as a quick little bash script someone put together that will read the SSH config file all simple easy bash one liners it's really slick how simple I'm not one liner but one file bash that's using the bash menu system and it can then turn your SSH config into a menu the reason this is handy is because it lets you add a couple other things to that config file such as you put like a dump there's a dummy character you add so it'll parse that and then group them all together to like servers, lab stuff and create like a whole sub menu system it's really easy to use but it's one of those things if you're managing a lot of keys, a lot of systems it kind of simplifies I think the management of it that way we can add this file it's actually it's a really fun utility to use there and other notes that I think are kind of funny and I've covered this when I've talked about this topic on SSHTO on my channel is you can actually put some of the emoji characters will fit into the config file so when you set up your jump box maybe you can put a kangaroo on it or maybe your free PBX box has a little phone icon in it I think it makes them kind of cool as long as you don't put the emoji at the beginning because then you have to add the emoji when you type the word SSH for the autocomplete but SSH and the name of the thing you're logging into will autocomplete or as I said you can also in tandem use this little SSHTO utility it's a great little utility I've used it for a little while that's really awesome so I guess now that you can use the emoji if a server is really, really giving you a hard time and it's tedious and you've been fighting it for weeks and it's just driving you nuts then you could just name it the poop emoji and then, you know, anyway, moving on so we have the SSH config file and that's great but is that directly related to keys? Well, yes or no, yes and no because the SSH config file the client config file I'm talking about is for simplifying your SSH connection command so for example, you could have a username on one system of admin on another one it's your first name and then on a third one it's first initial last name or whatever it is there's, you know, different rules for different places you connect to and that could be hard too because you might not remember what username you're supposed to use on which server because then you'll get like a key error even though the key is right the username is wrong because it's a different username on the other end in the config file you could put the username in there so you don't have to remember that if the SSH server on the other end is on a different port you could put the port number there and, you know, sometimes I've seen you know, clients I've worked with I've had all these ridiculous domain names and you've probably run into this where it's like, you know DNS is supposed to simplify things but they have something like server hyphen one U and then like some serial number dot company dot company dot common who can remember that it defeats the purpose of DNS but that's another story anyway you could put that in there and give it a name you could remember it by and that way you can get into it easier and also the SSH key file where it is on your file system is an item in there too so you could also with that config file tell it everything about that connection including where the key is for that particular connection the name of the server to connect to the port number the username all of that and you could just do SSH space name of entry and config file that's it and you're in if any of this confuses you guys I know this is a podcast and this is probably something better shown visually you will see it like I mentioned these two videos which I'm assuming will probably be out next week will totally take you through all of this and will refresh everything that I've said so far. Yeah, and I also left the link to your previous SSH videos are in the description as well. Yep, and maybe I'll have you sneak it into the description of this episode after and retrospect when they come out so that way we try to keep things up to date so if you're watching this in the future you may find those videos that Jay has published because this is future time. Yeah, we're talking to you from the future now but SSH key management is a large topic so is that everything? No, of course it isn't there's like I mentioned there's all kinds of these other ways of doing it SSH certificates, there's companies out there that have solved this in some kind of way which we could talk about in the conversation can be don't use this company's product because they're not doing it in a secure way or definitely use this company's product because they have security figured out but for right now it's just a matter of understanding how it works, how to utilize the tools that are built in before we start getting into the subject of adding another solution or just using something that's protocol that is optional but there's a lot of clever ways to handle this but understanding the basics is what you have to do first and that's what we're doing today. Absolutely, hopefully that was clear. Yeah, I know that was a lot of information but again, either you'll watch the videos to reinforce what I've said or the other way around depending on the order here watching or listening to I think at that point it'll come full circle and you'll totally understand it and then after those videos are out the door I think hopefully early next year maybe I'll start looking at some of those other ways of doing it that'll just build on those videos so there'll be more content about that coming. Yeah, and like I said in the beginning that one of the tools that they mentioned on that digital life, that YouTube channel you can find the teleport thing I've not vetted it personally but it looks really cool. I watched his video on it, I think it looks interesting. I've talked to the people there a little bit so those are coming forthcoming topics. We're just careful. One of the things we're always careful about is before you recommend a product is have we at least gone through some general testing with it? Do we understand it? Do we think there's a potential threat? Everyone gets excited when something new comes out that seems to solve a problem but it's always really important to vet things and things like that and we take it personally so I'm not at all calling, I see they're in the chat right now, the digital life, they do a great job on it and I haven't looked into the vetting of it. I do trust that he did a good job of looking into it, he's got some great videos but we're just very cautious and careful because it's the better way to go when you're talking about something that manages the access to your servers. I take that at a very serious note. I'm very slow to iterate into new products that seem to solve all my problems. Although I did like I said, my conversation with the people over at Teleport follows those where I did the email back and forth to me and it looks good. I think it's pretty cool and his video definitely piqued my interest. That's why I watched it. Yeah and you know the other thing too is, yeah we realize other people have covered some of these things but I don't personally do well and I think you're probably the same way starting where someone else left off. I always start at the very beginning. I make it a point, usually to not watch a YouTube video about something when I can, there are times when I do but most of the time I try not to because I wanna go into it completely blind just like everyone else is that are watching my videos for the first time where when they know nothing until they get to the end of the video, I wanna know nothing at first and then kinda go down the rabbit hole of figuring it out for myself and that seems to kinda make it stick better if I take the easy way and just, oh here's a tutorial that someone else has already done. Oh that's invalid, that's invalid and rearrange it and give credit to them obviously. I don't wanna do that because I just don't learn anything but the same for me when it comes to technologies like Vault and Teleport and there's others and I've seen comments in our live stream, is this gonna be an endorsement for a product? No, there's no product here. This is all stuff that's built in. The only thing that opens for a product is that we mentioned is the Windows subsystem for Linux which is part of that platform but that's not an endorsement either. We'll get to a point when we'll generate an opinion about those technologies but for right now, I am personally doing it manually. I am not using any product for this. It could be that I discover something like Teleport Vault whatever and decide, yes, this is awesome. I love this. I did look into Vault once, probably over a year ago and I believe that's from Hashicorp if I'm not- Yeah, Hashicorp Vault. Okay and I looked at it and I'm like this is more complicated than my manual method so okay, moving on and I just disregarded it but of course that might not be true my first impression of it. So I do plan on giving it a proper look and all these other solutions as well but I think something could be said of doing it the manual way for a while first because that's when you understand it better. You could appreciate a vendor's product if you want to go that direction or you could do it the manual way forever but if nothing else you'll have a greater understanding of the security behind it which I think is the main point here. You wanna understand how this stuff works before you take the easy way out. And we can't enter it enough get hands on with this start poking away at it hopefully you don't break anything hopefully you don't overwrite your SSH keys because you didn't have a password you added a password you overrode your keys you tried to push it and you're like, oh wait I just broke everything but that's part of the learning process back up everything before you start back up your current SSH keys if you decide you're gonna regenerate some new ones because mistakes have been made before and I learned the hard way years ago and I accidentally locked myself out of many things so that was fun. If you're not locking yourself out of your own systems to where you have to go grab a monitor and a keyboard to get yourself in you are not learning hard enough. You're not learning hard enough man. You're not gonna get yourself locked out. That is a learning experience. It's not your company servers though. The other thing I learned on my time servers. For sure. The other thing I will mention if you really wanna learn more about SSH please buy Michael Lucas's book on SSH mastery you need to buy this book. It is not a big book. You could finish it in just one afternoon. And when I was earlier in my career I read that and I already knew SSH fairly well by them but he goes so far over my head with this stuff that I'm always learning something from him. You need that book. It's not a big investment. It's not expensive. It's not an investment on time. Definitely buy it. We get nothing for that. We just like recommending Mike's books because he's got some awesome books. I don't even know if he knows we're even talking about him. Well I usually message him. I was like, you know, I just let you know I endorse your book again and it'll set a smiley face to me. I message him now in that. So if not just follow my Twitter. Yeah, we don't get a cut of it. He gets all the, he self publishes. He has his own money over there. So I just love his book. Yep. All right. Well thank you for joining us. Link's all down below and look forward to those new SSH videos by Jay. I don't know that I have any coming out anytime soon but definitely Jay does. All right. Thanks.


HP's Spectre laptops are one of a kind when it comes to design. While the American company is famous for its chassis sharing, the Spectre is the only line-up to feature cut-out corners. The Spectre X360 14 is the latest in the family with Alder Lake hardware and a crisp display. The laptop has a stealthy black chassis, which is entirely made from metal. The edges of the laptop are now curved with a silver line in the middle. The black and silver combo does look quite good, including the HP logo on the lid. Durability is fantastic as the lid and base provide a lot of flex resistance. The hinges on the lid are quite stiff, as they should be since they will take their fair share of abuse. Still, it opens with one hand, revealing the base. There we can see the input devices. The keyboard has black keycaps with good size, long key travel and clicky feedback. The pad is massive and the glass surface is really smooth. The accuracy and responsiveness, however, while good weren't as good as some of the Spectre X360 14's competitors. The I.O. on the Spectre is limited, offering a single 10 gigabit full-sized USB port and an audio jack on the left, along with two Thunderbolt 4 ports and a microSD card slot on the right. Interestingly, the Spectre X360 14 is equipped with a 13.5-inch OLED panel with a 3000x2000p resolution. The panel is excellent for all types of work, showing comfortable viewing angles, a peak brightness of 412 nits, and full sRGB and DCI-P3 coverage. The color accuracy is exceptional as well thanks to our design and gaming profile, which lowers the Delta E value to 1.5. The display shows PWM usage up to 100 nits, which is easily fixable with our health guard profile. We'll have links to all of our profiles in the description below. With a 66-watt-hour battery pack and a Core i7-1255U inside, the laptop lasts for 11 hours and 40 minutes of web browsing, or 10 hours and 9 minutes of video playback, which means you'll be fine for a day without a charger. Only 2 per 100 people watching this video are subscribers. If you decide to just start following us, we'll be able to reinvest more in our laboratory, thus making even more helpful videos for you. Thank you, you're awesome. The Core i7-1255U is great for short bursts like 2D rendering and image editing with Photoshop. However, in 3D rendering, it's nowhere close to the Ryzen 7 6800U from AMD. The cooling setup inside is quite good for a 15-watt chip, with 3 heat pipes and 2 fans. It's safe to say that the CPU is working hard, showing 3.03 GHz on the P-cores while running at 90°C. Comfort is great, as the 2 fans can't make that much noise despite their best efforts. As for the hotspot on the keyboard, it only reaches 36°C, 5°C, which is more than comfortable. Upgradability isn't that good, which is fine considering the small stature of the laptop. You can outfit the laptop with up to 32GB of LPDDR4X soldered memory while there's one M2 slot for storage. We have a detailed teardown video for you to check out, which shows how to access the inside of the Spectre X 360 14. The Spectre X 360 14 is a fantastic small device that comes with the traditional drawbacks of smaller laptops, mainly the lack of upgradeability. Everything else about it, from the design to performance to even battery life and cooling, is exceptional. To find out more about this machine, we will place a link in the description to our web page.


Okay, in this segment we're continuing on looking at transient solutions, convective boundary and we're going to be looking at an infinite cylinder and so we're looking at approximate solutions as well as a graphical solution using the Heisler charts. So let's begin with the approximate solutions. So this is the infinite cylinder. Sketching out the geometry, remember we had r naught is the outer radius and we're interested in what's going on at some radial location and we're assuming that this cylinder goes off to infinity. Beginning with the approximate solutions. So we have the centerline temperature and whenever you're working transient problems you always got to start with the centerline. If you're wanting something spatially you start with the centerline you get that and then you move to your spatial temperature as well as for heat loss you need to know the centerline temperature. So let's take a look at that using our theta designation it's theta naught star and that is going to be theta naught divided by theta i and defining what those are. Centerline temperature minus T infinity divided by the initial temperature of the entire cylinder divided by minus T infinity and the solution here just like we saw for the slab is going to look like this. That is zeta and then the Fourier number very important non-dimensional number in transient conduction analysis. Now our length scale you'll notice before when we had this slab it was l squared now we're dividing by r naught squared and the bio number h times the characteristic length scale which is the outer radius for the cylinder divided by the thermal conductivity of the cylinder. Now c1 and zeta where are you going to get those from? Well you get them from a table and they will be as a function of the bio number and those are listed in a table. Okay so that is how you can evaluate the centerline temperature. Let's take a look at spatial temperature variability and you'll notice that this is quite similar to what we saw for the slab but there are slight differences in the equations so just be careful with that. So spatial temperature theta star theta over theta i and that's going to be the temperature at our radial location and specific time the radial location that we're interested in that's off the centerline minus T infinity divided by the initial temperature minus T infinity and that is going to equal the centerline temperature so the theta naught star that we just calculated in the previous part or I showed you the equation and then this is where you get the fun Bezel functions so that's a Bezel function of a first kind times zeta r star where do you get the Bezel functions well there should be a table in your book if not search it out on the internet I'm sure you'll find them. Bezel functions of the first kind and then our star what is our star that's our non-dimensionalized radius so that's going to be r divided by r naught so that's spatial temperature you'll notice you have to evaluate what's going on at the centerline first before you can get what is going on there and this is what you'd be looking for in that equation. Let's take a look at heat loss. Heat loss is q divided by q naught and I'll give you q naught in a second. Again this is a Bezel function. Evaluated at zeta 1 and q naught that is the total heat loss that would occur if your solid your cylinder was to go all the way from t and original ti all the way to t infinity t free stream. Now we see heat loss you can have cases where the object is getting hotter so just be aware of that sometimes t infinity can be larger than the initial temperature that we're looking at so it doesn't always have to be heat loss it could sometimes be heat gain so that is the approximate let's take a look at the Heisler Heisler charts that's the graphical technique and this is quite similar to what we saw for the slab. First of all we start with our centerline and you'll have a plot of theta naught that is at the centerline divided by theta initial and that's going to be plotted as a function of the Fourier number and you'll have these interesting curves that have breakpoints and that is one over the bio I'll show you these in an example problem in the next lecture so if you're wondering what do these look like spatial you have to do your centerline first and once you've done your centerline then you can do the spatial and that's plotted as a function of one over the bio number and here we're going to have curves like that and they are in order of increasing radial location so as you go out towards the outer radius of your sphere and then finally heat loss there'll be curves for a heat loss and these are q over q naught again plotted as a function of Fourier bio squared and these curves are plotted for different bio numbers so those are the curves that pertain to the cylinder for the Heisler charts and very similar to what we saw for this slab the only difference is that you're using r naught for your characteristic dimension was before we're using L okay so that is the cylinder the next segment we'll look at the equations for a sphere and that will give us all the equations that we can use for collective boundary conditions


0. Accounting Software 2023 Receive Payment Deposit from Invoys Get ready because it's time to become an Accounting Hero with 0. Support Accounting Instruction by clicking the link below giving you a free month membership to all of the content on our website broken out by category further broken out by course. Each course then organized in a logical reasonable fashion making it much more easy to find what you need then can be done on a YouTube page. We also include added resources such as Excel practice problems PDF files and more like QuickBooks backup files when applicable. So once again click the link below for a free month membership to our website and all the content on it. Here we are in our custom zero home page going into the new company file we set up in a prior presentation that being get great guitars we're going to duplicate some tabs to put some reports in like we do every time right click in the tab up top to duplicate it right click in the tab up top again to duplicate it again let's go back to the tab to the middle I counting drop down up top we want to be opening up our balance sheet report as it is thinking I'm going to tab to the right I counting drop down again this time open up the income statement or profit and loss back to the middle tab hitting the drop down on the range we're going to have a custom range we're going to go to the drop down we want to have our own custom home on the range over here we're going to have it on December 31st 2023 and have it up to date up to date home on the range tab and to the right this one looks good for the income statement let's go to the first tab now and now we're going to imagine we're receiving payments for invoices that were issued in a prior presentation so remember the flow here I'm going to jump over to a flow chart this is a QuickBooks desktop flow chart but we're just looking at the normal flow of an accounting cycle and in essence the sales cycle which is this middle area remember that it depends on the industry that you are in so if you had a very basic industry like you just collect money from YouTube or something then you'd probably just have a deposit coming through the bank feeds that you would record as revenue once you receive it using the deposit form to record the revenue however if you have a cash register or something it gets more complex because although still on a cash-based system you now have to collect the cash most likely group it or the credit card receipts and whatnot in such a way that you can deposit into the bank so that you have the internal controls of checking your cash register to your sales receipts and whatnot and that the deposits going into the bank in the same format that it will be on the bank statements so you can reconcile if you're in an industry like a bookkeeping firm a law firm where you do the work first and then invoice the client then of course we're gonna enter the invoice and a lot of e-business is is gonna need an invoice these days because that often is the form to facilitate the sales transaction when we email out the invoice so we sent out the invoice now we're gonna be receiving the payment so you can think of that as a deposit type of form that is going to be happening when we receive the payment now usually if you're in a system where you're getting one payment per invoice then it's usually fairly easy for us to then receive the payment and deposit it directly into the checking account so for example if you send out an invoice and you would expect some kind of electronic transfer or something like that and you receive the payment for that dollar amount of the invoice that goes into your bank account then we can record the receive payment as basically a deposit at that point in time however we could imagine more complex situations where we're gonna get paid on the invoice or multiple invoices get paid for example or maybe they pay us through some other kind of payment platform like a payment port or a credit card or something like that and then the credit card company is going to be the intermediary receiving the payments and when they group the payments that actually hit our bank account they might have multiple invoices that they've received payment on and put one lump sum into the bank account so that's one of the common issues that come into play with our receivables in our sale cycle is the grouping of the money that's going to go into our bank account on our books in the same grouping in format on the bank statement so that we can do bank reconciliations so in order to deal with that issue sometimes you might create an intermediary clearing account which you might set up another checking account for example to have a hold-in account that you can put your money in and then when it gets grouped either cash grouped together or credit card payments grouped together to actually go into your checking account you can then take it out of the clearing account and put it into the checking account in the format that matches what's on the bank statement so we're gonna practice that middle step which can be a little bit confusing of a step and something you have to think through to see whether or not you need to have that middle step or not when you're at it when you're at a cash register you can clearly see why that might be the case if you're collecting cash payments and or credit card payments right because if you're selling five dollar items all day long you're gonna be collecting the cash when you go to the bank you're gonna deposit not a hundred five dollar transactions but one lump sum transaction for the sum of the day's sales so that means that the bank statements gonna show that one lump sum and you would like your books to reflect the same thing so you're gonna have this clearing account that can help you to facilitate that that process so let me show you let's see this in zero let's go on over what I'm gonna do first is go to the accounting drop down and let's look at our chart of accounts and I'd like to add a clearing account which I'm gonna set up as basically a bank type of account and it's the money that's just gonna go in and out of the clearing account so that we can then group it if we need to into the checking account when it hits the checking account one other thing I just want to mention before we dive into that is the bank feeds you might think about how the bank feeds are gonna fit into this you could try to wait till something clears the bank you invoice someone if they're gonna pay you electronically you could try to wait till it clears the bank to then to then match the bank feed deposit to the invoice you could you could kind of test that out but again that will be difficult to do if for example you receive multiple invoices and whatever whatever platform is facilitating the sale like a credit card or something groups the payments together you won't be able to do that as easily so you gonna want to think how the bank feeds are gonna fit into your system if your invoicing clients because the invoice is a non-cash kind of transaction so we'll talk more about that when we get to the bank feeds course or section but just want to point that out all right so we're gonna add a bank account here I'm gonna add a bank account now it's gonna make me try to connect it I don't really want to connect it I just want to add it so I'm gonna say this is gonna be let's just say chase I'm just gonna type in an account but it's really just gonna be a clearing account chase chase us all right that's just a bank so I'm just gonna put something there and then I'm gonna skip the check-in because I don't want to put up an account there account name it's gonna be the cash clearing clearing account you could come up with a more creative name like undeposited funds or funds to be deposited or whatever you want to call it and we're gonna call it every day okay and then account number they're gonna make me put something here so I'll put something there I don't know the code I want to use yet so maybe I'll just see if they let me post it without it and then I'll put it in in a second US dollars good save it and continue it pour five or so there we have it now I can look at the code which is the account number here so the checking account is 1 1 0 0 so it should probably be under that so let's say 1 1 1 0 let's say I'm gonna edit this and put a code 1 1 1 0 for the account number code and I will say let's save it and this it's I put the day-to-day I think it's good there okay let's save it so there we have it all right so now we're ready to go we can now collect on the invoices so we entered invoices last time we could track the invoices by hitting the drop-down up top and I go to invoices we can also track the invoices under the contacts but this is kind of our list of invoices if I go to this tab these are the invoices that are awaiting payment so we expect to be paid in whatever format we're expecting payment now this is the format we expect payment gets a little confusing these days because you might be expecting electronic payment they might send you a check you might give them multiple options to pay you you might be using other platforms to help to facilitate the payment so whatever the process is you're gonna need to make sure that you're able to track the receipt of the payment obviously and then when it's gonna be hitting you know the checking account and then we're gonna record the received payment here which will decrease the accounts receivable and the other side is gonna go into the in our case the clearing account and then we'll put it into the checking account from the clearing account so we're gonna choose the payment here now we're gonna be picking Mr. Anderson so we want to make sure that we're in the awaiting payment you could actually go into it here if you just have a payment on one of them and then down below where it says receive payment you got the amount paid the date the paid to and we're gonna put it into our clearing account where you can put it into the checking account and reference number so that's one way that we can do it the other way is possibly a little bit faster and if you had multiple amounts you were receiving for example if I had multiple invoices that I'm receiving then I can check them off this way and create a deposit for it however I just have one that I'm gonna receive here so I'm gonna be checking this one off and I'm gonna say there's Anderson and let's go ahead and deposit that so this gives us our new batch deposit now we only have one item in the batch but you could have multiple items that that you were depositing this way and if you had multiple invoices that you were grouping together for example to deposit into the checking account at one time as we talked about with this issue with the undeposited funds you could batch them this way as well but you might have other things that you're grouping with it to like you might be grouping other sales with it as well that weren't just invoices like sales receipts so I'll put it through the clearing account in any case so we're gonna say the date is gonna be January 18th 2023 for the practice problem it's a deposit and we're putting it into not the checking account but rather the clearing account that we set up in this practice problem so that's going to be increasing the clearing account here because that's going to be a deposit the other side's going to decrease the accounts receivable not only that but it's also going to be decreasing the sub ledger for accounts receivable for the customer Anderson guitars so let's make the deposit and check it out so we'll make the deposit and then go on over to the balance sheet update the balance sheet so it's up to date and then we're going to go down and say let's check out there's the clearing account clearing account looks good and then the accounts receivable let's go into the accounts receivable here and check it out we're going to say all right we had the decrease so there's the receipt payment form decreased the accounts receivable that's good going back I'm going to open up another form notice there's no impact on the income statement right now because there was an impact when we made the sale but the sub ledger for accounts receivable will be impacted so if I right click and duplicate a tab just to look at another report for the sub ledger of accounts receivable I'm going to go to the reports on the left hand side you can also hit the drop down for the reports let's tight let's just search it down here we want the receivable it's like at the aged receivable summary aged receivable summary like a fine wine it has been aged well so now we've got the all we really want to look at is the total here so we've got it broken out by total and we have it broken out by customer 23 721 50 that ties out to what's on the balance sheet or it should 23 721 50 but we would probably be tracking it internally in the first tab now we could go to the accounting drop down if we go back into well let's go into the business drop down let's go into our invoices and now that invoice up top is no longer a waiting payment right so the invoice is no longer waiting payment if I go into the paid area there's our paid invoice so that's one way we can track it we can also go to the contact drop down and go to our customers perhaps and we would like to see Anderson guitars going into Anderson guitars and we can see our detail in here so invoice approved and invoice paid all right let's do another one so I'm going to go back up top and hit the business drop down and we're going to go into the invoices and so oh by the way the others oh no I'm let's go do another one so Jones guitars let's go into a waiting payment over here don't get ahead of yourself we're going to go into the Jones guitar so we'll add this one so I'm going to select that one and again if I had those two at the same time that I think the payments going to be grouped together when it goes into my uh my bank account then maybe I well I could I could so I could have selected both of those items together and had a grouped deposit that goes into my checking account and that's one method that we could use to solve kind of that grouping problem which is probably all you would really need as to a method and therefore wouldn't need basically the clearing account that were that we're setting up because it's likely that you would get a lot of you would be processing all of your receive payments through an invoice if that's your normal cycle however you can imagine situations where you got paid say cash from the invoices and then paced possibly you got paid cash from a cash register receive payment type of stuff and in that situation you would still need like a clearing account so we're still going to kind of imagine a clearing account situation just to get the concept of the clearing account all right so we're going to be putting this in here we're going to make the deposit and do this again so we're going to say this happened on uh on jan you wary I can hit the drop down this way january 18th again let's do that and 2023 I'm just going to say deposit and we're going to say this is going to go into the clearing account again for jones guitars looks good I'm not going to have a reference number what's this going to do increase the clearing account and the other side is because it's a batch deposit and we made the clearing account a cash type of account the other side uh decreasing the accounts receivable because we're paying off an invoice and we can connect to the invoice by the way if we clicked on it here just to check if we wanted to do that and it's going to decrease the sub ledger breaking accounts receivable out by customer in this case jones guitar being the customer let's do it let's deposit it and then hit that big blue button the green pops up because it's good to go balance sheet update the report we want up-to-date stats here stat so we've got our clearing account has the two items within the clearing account now so if i'm going to deposit them together again if they were both invoices i could have deposited them into the checking account as one lump sum by selecting both of those invoices and making the one deposit i might have wanted to do that if for whatever reason due to credit cards or whatever the payment processing form i'm using is that it was going to hit the bank account in one lump sum uh at that nine five nine nine so i can do the bank rec if they're going to be hitting the bank account with two separate transactions and like this then i would like to see it in my system that way so once again i can tie out to the bank accounts and so so again the the check the clearing accounts a little bit redundant in this system but again you can imagine that i'm also you could have a situation where you're going to get when you're going to also get received payment forms money in forms like that were cash that you're going to deposit together along with these items that are in the clearing account and therefore again you might have a grouping problem when you deposit it into the checking account so we'll just check that out conceptually the other side accounts receivable 19 122 50 if i go to my aging account and update it then uh we're we're now at the 19 22 50 so that should now tie out to what's on the balance sheet if i go to the first tab then and look at this internally business drop down look at my invoices then we can see that uh we have the awaiting payment invoices have now decreased or there's one less of them the paid invoices are now here we've got the two in the paid invoices if i hit my contacts drop down and look at my contacts i can go to jones guitars and go into to that they still owe us some money but uh they paid off this invoice so invoice paid if i go into that invoice by the way you could see the detail uh of uh of the invoice so there we have it amount due uh no amount due so less payment i can click on the payment and link on over to the payment so here's the transaction batch transaction very very nice all right let's do one more i'm going to hit the drop down on the business again invoices and let's do uh smith here uh so let's go to a waiting payment a waiting payment and we're going to pick up this one this time that's the one and then deposit it boom we got a payment for that one and the date i'm going to say is again january uh 18th let's say reference deposit bank account is going to go into the clearing account and we're going to say that this will be there's the invoice for the 8 000 this will increase the checking account the clearing account this will decrease the accounts receivable and it'll also decrease smith guitars the customer sub ledger for accounts receivables let's deposit it and do it again we've seen this before let's update it so now we have in the clearing account 17 5 99 again if i would expect that all 17 5 99 was to hit the checking account in one lump sum due to the credit card processing or whatever i could have checked all three of those invoices off and deposit them them directly into the checking account as one lump sum which hopefully would tie out to the the the bank statement for the bank reconciliation or if they were going to hit the bank statement in three separate deposits i could have chosen them one at a time and simply put them right into the checking account so the clearing account is redundant in this example but again you you could imagine a situation where you might get paid and something other than invoices where you'd still might have a need for the clearing account if you also are receiving receive payments from clients probably for many companies that wouldn't be the case because you would probably be receiving your payments and whatever the normal cycle is if you invoice that's usually the way you're going to be receiving the payments through the invoice although you could have different payment processors credit cards different intermediate pay pals and whatnot and cash and checks and whatnot that that could be grouped together in strange ways sometimes so the clearing accounts good good to get a get a grasp of the check the accounts receivables now at 11 122 50 if i go to the aged account we now have smith guitars off the book so there's the 11 122 50 if i go to the first tab we can hit the drop down and invoices that drop is down that's a down drop we're going to hit this let's go to the awaiting payment so dropping down just like dropping into a half pipe with a skateboard or something so drop down so paid and then the paid items look good i don't know what i'm talking about apologize i apologize for the rambling and uh smith guitars if we go down to smith guitars smith guitars uh there we have it so that looks good now i actually have a correction that i need to make here so if i go to the first tab and i go to the business drop down and we look at our invoices then the ones awaiting payments what i wanted to do was pick up this one for jones guitars and i picked up the other one so if i go into the paid area i went into jones guitars and picked this one so what i'd like to do is uh undo this transaction and then pick the other one and obviously i did that totally on purpose so we can test this process out so one way to do that i'm going to go into the transaction actually drilling down on it from the financial statement and then delete it from there so i'm going to go to the balance sheet and then in i know it posted to the clearing account here so i'm going to go into the clearing account and then i'm going to find that transaction and drill back down into the source so i'm going to say there's the one for jones guitars i'm going to go into that and then we have the options up top so this is the batch receipt i'm going to hit the option up top and we want to say remove and redo so i'm going to remove it and so cash uh clearing account so there we have it so then i'm going to go back to the first tab over here and then refresh this one that is awaiting the payments so now we have jones guitars back on the books so there's the jones guitars and the one i want to pick up is this uh 7500 so let's pick that one up instead and make the deposit for it and this happened once again on january 18th and i'm just going to say deposit and so it's going to go into the clearing account jones guitars let's try it again let's deposit it and then i have to recreate the balance sheet because i messed it up in this tab here accounting drop down reports actually i don't need to go to reports i just go right down to the balance sheet because it's in my favorite reports here i put a little star next to it and everything so we're just going to that one and let's change the range and bring it up to 2023 and okay update okay so now we're at the clearing account at 20 500 here and the accounts receivable at 8 2 to 150 if i look at my aged account and update that one we're then have uh anderson and jones guitars there's the 8 2 to 150 all right let's also see it in the form of a trial balance and just check our numbers as of this point in time so i'm going to hit the drop down up top and let's go into our reports and type in trial balance up top i'm going to go in the trial i should put it into my favorites but i'll just type it in here trial balance type it and it shall come type it and it shall come and so then we're going to hit the drop down and we're going to say custom date range 2023 and update so this is what we have thus far if your numbers tied out last time then you would think the only things that changed that could be off if you made an error or whatnot would be the 20 500 and the 8 2 to 150 because that's those are the accounts that we worked on of this time and i showed you quite intentionally what you can do if there's an error that happens you can drill back down onto those source documents and make the adjustments that you need to make usually it's a date issue oftentimes especially with the practice problem so you can expand the date range and see if it is a date issue if these two numbers change or if any of the numbers change when you expand the range then you can drill back down onto the source documents and make the adjustments necessary