Get this one on here next. This load tarped up. An overlap here with this one should be good. I want to make sure that it overlaps that as well on the front. Because this front tarp is only going to go up to the end of this. So I'm going to have to try and keep this tarp on top of that yet. So I think I'm going to actually pull it a little further this way for now just to make sure that we won't slip off of that. Going up here and readjust it once we have it over the load and get it where we want it then. Okay one more. Okay grab this thing here and up we go. Up up and away. Tarping all day. Snow hasn't started yet but it's supposed to start anytime now so I'm trying to get out of here. It's already feeling like snow outside. It's getting pretty cold. So is it going over the top? Which is barely eh? Okay I want to go and adjust that real quick. Want to make sure that the the other end of the tarp stays on top of that upper level because it'll be hard to get it back up there if it doesn't. This has to stay up here like that. There we go. It wants to slide that way that's the problem. There we go. I'm going to hold this here. There I think we're good. Is it looking on this side? Looking good. It's unhooked. Unhooked. It's very nice having a tarping building like this. I'm sure it was very expensive for them to set up for us and I really appreciate it. There we go. Then I just gotta bungee it all down and go home before the snowstorm hits. So glad that I rushed to get here at the time I did because I think they stopped loading trucks now. Just the start of it up here it's supposed to get a lot worse overnight so I'm taking this trailer home. Leave with it uh Sunday. So what I'm doing is I got my windows both open and I got the defrost off. I got the heat going just to the floor. What that's going to do is it's going to keep me warm. The heat's going to come over my feet keep my feet warm and come up by here but my windshield is going to stay cool. When you keep your windshield cold the snow just bounces off and then it doesn't melt and then ice up your winter blades or I mean your wiper blades. They are winter blades though. That's the strategy I use during storms anyways. It gets a little chilly in here so you gotta drive with a sweater on but you keep the cab or at least the dashboard and the windshield here cold as cold as possible and only have heat going to the floor. That way you don't gotta worry about it. See it's still sticking a little bit to my windshield there just because I had it all heated up before when I was tarping. Oh this is a sketchy corner especially in winter time. Can't see anybody coming that way. Can't see anybody coming that way. I don't see anyone. You just sort of gotta send it and put your four ways on once you get on here and just pray everyone's paying attention when they come whipping around that corner and not going too fast. A lot of weight on me now. I ain't got lots of traction. About 15 minutes emergency services are just getting here now. The guy with his radio on but he's not of any use. There's a fire truck. They're going past. I thought the accident was down the hill here because this wire wheel stopped here. We're stopped at the top of the hill here and top of the hill over there. Those guys are going something's happening. Hope we get moving soon. Hope everyone's all right. We're at the corner. We're at the Manitoba Ontario border. We're just into Manitoba. Fighters here. We got the police down there now. Hopefully these firefighters will come and let us know what's going on and when they think we might be moving. I don't know where the accident is. It's got to be at the bottom of the there's a little hill here. We just passed the scale coming into Manitoba. It's right there behind me. But the cops are going past here too. So where is the accident? The book got run off the road like just a few miles back as well. The road was obviously he came like straight at me. I just made it past him and he like he almost hit the ditch on my side of the road. It was clear where the ditches were. I don't know what he would did he fall asleep? How do you fall asleep in weather like this? Hopefully he didn't cause an accident behind me somewhere. But now I'm stuck here until this all gets cleared up. Really quite the bummer because I was so close to home. I just wanted to go home to avoid this exact thing. But the police are here now. So maybe the police will start directing traffic through there hopefully. So what do you do when you're stuck on the highway in a snowstorm? You make yourself a peanut butter and honey sandwich. Makes me feel better. That's good. So one of the guys came up here and told us what's going on. No accident. Thank thank goodness. I guess the emergency guys were called. Well they came in just in case the police are here to direct traffic because we got miles of backup behind us already. This is the one highway across Canada. It's the only way you can get east to west so there's a huge backup. No accident. There's a couple of drivers. Probably a rookie. Slowed down on the uphill. Came to a stop. Stuck right there spun out. So a teaching lesson would be I know it's kind of it sounds kind of weird but when it's snowing in the roads of slippery you don't want to go slow up the hill. You want to go fast up the hill. You want momentum. Don't slow down on the uphill. This is this will happen and then you got a big kerfluffle with a lot of people affected because now the whole road is blocked but they're gonna get them out of the way right away. We should be going soon but my advice to you. I've been driving since 2006 so I think I'm almost at the point where I can give advice and you can take me serious. Almost. Get some good momentum going up the hill.  You want a good bunch of momentum especially if you don't have a lot of weight on your truck. If you don't have a load. They got people moving through here now. Good. Fast up the hill but slow down the hill. You want to go down really slow.   If you can and if it's safe to do so don't slow down on the uphill okay. Let's get some momentum going up the hill at the top make sure you slow down and then go which sometimes I get it that just doesn't work because people at the top of the hill are slowing down to go down the hill right. People coming up the hill are going fast to get up the hill.  It doesn't always work that way.  You don't have to listen to me but if you're wondering what you should have to eat right now I know you're hungry peanut butter and honey sandwich and don't go cheap on the honey okay very important that's good and let the honey give the honey time to soak into the bread too so you make the sandwich and you put the honey on the bottom and you get let it sit for like five minutes. Let it soak into the bread. You can thank me later. Oh oh things are moving now oh boy they've got the eastbound lane open now I'm guessing they're going to escort us through next they had the RCMP escorting them that way continue on this road for 40 kilometers Karen calm down I know I want to go home too why would you why does she randomly do that does your GPS do that too just randomly start talking for no reason I've been sitting here for like two hours she's still talking to me well we're still here I think this is our escort coming on the left here he just finished escorting eastbound to the Ontario border I think he's gonna pull in front of us now and let us go please come on come on oh now there's a tow truck coming here too what in the world I'm so confused I have no idea what's going on nothing makes sense I think that cop's gonna let us let us through I think he's gonna lead us through maybe not no idea no idea I know eastbound is open now anyway I don't know why they're not letting us go westbound just want to give a quick shout out to Evan from champion towing he's the guy who was getting this all cleared up here and apparently you watched my videos they were just finishing up and he saw me and he was just leaving I guess here he said he's going back into Ontario that's where he stayed uh based for the winter and uh he pulled over and he walked across here to say hi to me he says that everything's cleared up that we should be moving in a few minutes or so they're just finishing up a few things so I got the inside scoop from him the benefits of being on youtube now I know what's going on but uh shout out to you Evan that that was uh nice to meet you thanks for cleaning this up otherwise I would have been here all weekend I want to go home so thanks we're moving woo I'm letting traffic get a little bit ahead of me here like I said I'm gonna want a little bit of momentum to get up that hill they have been sanding and salting I got a heavy load behind me I shouldn't have a problem I shouldn't spin out I know you can't see much on the video right now you'll just have to trust me feels good to be moving going for about a mile or two this is what happens when you shut down the one road that goes from east to west in Canada just for a couple of hours I got to know some of the people in the lineup there a little bit while I was waiting vehicle in front of me there that guy's Jim same story as me saw the storm coming and was trying to beat it we almost made it now we're just trying to get through this section of bad weather hopefully I can make it all the way home yet we're all moving along at 50 kilometers an hour about 35 miles an hour I'm gonna need to pick it up a little bit hopefully it clears up a little bit so I can do that but uh for now I don't want to rush the guys in front of me you know nobody wants to be the next reason for a highway block I know I don't want to be wonderful right it follows me everywhere you know this bad weather is turning into kind of a stalker for me good job all blue you did great me well my patience was so thin I couldn't even see it anymore it was oh my all the way from the Ontario border to the 12th that's uh usually about an hour and a half drive but you know the weather was kind of bad as you as you can see but hey at least we arrived safe hey I guess better than oh man some of those guys though because you got that person in front of me going way too slow and I thought it was way too dangerous to pass so I just stayed behind them right but there was like four five or six trucks semi-trucks blowing past people pushing through about two feet of snow in the passing lane blinding everybody just because they were getting impatient blowing past people and then uh one one of the trucks got sucked into the ditch we saw his tracks go in there luckily for him he was able to get it back out and back on the road you want to be you want to play those games there's families in these vehicles around us like the car that was going so slow at the front driving me nuts but I'm sure it was like a young mother and her child or maybe it was a pregnant woman if that was my wife who's pregnant if that was my pregnant wife and there was trucks blowing past them on the snow pushing trying to push her into the dish leaving her in a whiteout because they were getting impatient man I'd have a different kind of record I would what is wrong with people you're supposed to act on the road like the people around you or your loved ones in your family how would you feel if someone would do that to your wife and kids if they were driving if you wouldn't like that you shouldn't do it either anyways enough ranting about that that got me so upset but here we go I thought of it after I got it in here maybe I should have knocked some of the snow off outside so I don't have to squeegee it out of here in the morning but it's too late now I can't go outside there's I literally I had to make tracks into my shop with my pickup truck in the snow so that I could get this and without getting stuck there's two feet of snow outside that door there it goes up to here I can't show you outside the shop but it goes up to about here that first notch there that's how deep the snow is outside that door I had a lot of trouble detaching the trailer but we got her got her detached and that old blue in the shop so now let's get our stuff out of here it's already 11 o'clock now there goes my weekend again well my Friday Friday that's okay that's trucking right trucking in the winter time the winter time is very expensive but I'm okay hey tomorrow is another day we're gonna have some fun no trucking tomorrow okay no trucking I've had enough trucking for a while we're just gonna stay at home and I don't know build a snowman something I don't care anything but trucking for the next two days have a good one everybody give a thumbs up for that snowstorm give a thumbs up for old blue look at what she puts up with look at this


All right, so here with another student from WFA, why don't you go ahead and introduce yourself? All right, thanks. Well, thanks for having me. So my name's Caroline Shadrack and I've been working mostly with coaches and consultants for the last few years. And I build funnels for them. I do all sorts of lead generation and messaging for them. That's awesome, awesome. So tell me a bit about how you ended up coming across the work from Anywhere Accelerator and even Christian considering you already have a background in funnels and everything. So how did that interaction happen? That's a good question. And to tell you the truth, I'm not exactly sure how it happened in the first place because I looked back because basically what happened actually is someone introduced Christian or, I don't know, somehow Christian reached out to me actually about funnels, about building funnels. And so we had a conversation before I actually joined the program but I knew that I'd heard of him before. And I wanna say it was years ago but I looked back at my emails and yeah, I'm on this list for about a year, right? So I'd seen his whole thing about the digital nomad and I really liked the messaging in terms of being able to work from Anywhere. But yeah, anyway, so after I had that conversation with him then I started to get his emails again and actually started to open the emails. And it sounded really cool. And so because I've been, as I said, been doing these funnels for a long time I liked the way that he kind of put the whole thing together in terms of being able to kind of really leverage it which is what I hadn't been doing and that's what I wanted to do. So, but I think also I really liked the way that he kind of positions himself in terms of how he talks about it being able to give you a lot more freedom in, you know, work, life, the whole thing. So yeah. Makes sense. That's awesome. Definitely kind of the exact same way that I met Christian actually is the exact same story. No idea how he got connected but somewhere or another, I did that conversation and that's where it went off. That's awesome. So what were some of the first things that you did when you joined? Because I mean, we do go through kind of like a pretty heavy intro for the folks that don't know what funnels are. You were kind of already ingrained in that space. So what did your initial journey through the program look like? Well, actually I really kind of appreciated the way that you guys have set the program up because I think with the first module that I went through it's literally all mainly about mindset and about setting yourself up so that you can win. And so as I said, because I've been doing this a long time so it's the same if you like, I know that for most of the time what stops people from progressing or making any kind of progress or headway is what's in between the head. What's between the ears? It's all about the mindset. It's literally like 80% mindset and 20% strategy. And so however, knowing that and actually being able to do something about it's completely different. And so what I thought was really great about the program and what I did go through is like in that first module you not only talks about that, about what to expect but it gives you lots of different techniques to kind of overcome it. And that I thought was just amazing because I've done lots of cool. I mean, I've literally spent hundreds of thousands of dollars on various different courses and masterminds and blah, blah, blah. And most people will tell you what to expect and they might give you one tactic to kind of overcome this. What Christian does is actually kind of attack it from various different places. So however you learn, if you rely on listening or reminders or community or whatever it is he kind of gives you all these various different tactics that you can use to really kind of keep on track. And I thought that was amazing. So that's what I kind of dived in to first. And then I think just kind of following your instructions I kind of immediately went out and put out, actually I know, I wouldn't say that. I didn't immediately put this out. I waited four days before I put a post out saying, hey, I'm going through this course. It's basically, I think you're guys call it the curious student post, right? I'm going through this thing. I'm looking for some child clients. And I think, I know that was the procrastination that I had one of the reasons I waited for four days before putting it out. And I wasn't sure if it was gonna work and it worked like amazingly well. Particularly actually what happened was I put it in a couple of private groups that I belong to master paid mastermind groups. And I think it works particularly well if you have those kinds of connections with people because there's already a trust there. There's a trust patch. And so there were a lot of people that approached me. In fact, I want to say it was like 20 people that I did various different strategy sessions with. That's awesome. But the thing is, and I think I said this in the group was that I also knew one of the reasons I wanted to take this program is because I knew I wanted to try to approach a different niche, right? So I've been working with coaches and stuff and I know them very well. But part of me wants to go into something like plumbing. I probably won't do this for you. Something that's really kind of easy that I don't really have to think about it. All you need to do is kind of really get to grips of okay, this is the market. This is what all those, anyone who uses a plumber is gonna need this type of, have this type of problem and this type of solution. And so you can go out and find lots of plumbers and they all need the same thing. With coaches it's completely different. They all have a different story. And it's not that it's great market. I think you said this too, right? It's just, it's different. Like you have to kind of get into a story and then help them to kind of do the messaging, which is what I do. But and so, yeah, finding the trial clients was the next step that I did. That was, you know, I found a lot of them. I think I have four trial clients that I'm working through right now. And I think none of it turned out how I thought it was gonna be. Like these, the people that turned up weren't the people that I expected to talk to. But basically I decided, okay, I'm just gonna go through this. Do keep doing the steps and seeing what emerges. That was a long answer to a short question. It's all good. So what type of markets are your trial clients in right now? So, yeah, so it's interesting. So I have one of my, one of the trial clients I'm working with is, so she is a coach, but she works more in the, what's it called, alternative yoga field. So she has, she basically runs events every month that she holds.  So that's one of the clients I'm working with. Another one, he works also more on the kind of holistic spectrum. And he doesn't have events, but he actually wants to get people into his courses and programs. So there's the two that, and then there's another one who has a, something completely different actually, but they're all the common denominator between them is that they're coaches. And as you can tell, like you shouldn't have their story. And so it's like a different thing kind of going through that messaging. So I basically, in addition to what I'm doing with the trial clients right now, is also going through the 14 day challenge that you guys have. Which again, I think is like it's, it's brilliant the way that you guys have set it up because it really allows you to take the steps to get into a different market. And that's what I want to do. So, yeah. Makes sense, makes sense. That's awesome. So I mean, obviously working with coaches is a complex thing. That gets hard because every single one is totally different. So with the support and training and everything in the work from Anywhere Accelerator, how have you found that support level in helping you get through working with those folks? Yeah, the support is amazing. I mean, every day I keep thinking, I mean, I should put a post out there because like this is like, like I've spent a lot of money on different coaches and masterminds and stuff. And this is one of the best courses in terms of the way it's laid out and the type of support that you get. Because I think I said to you just last week, I didn't even realize that you have these Q and A's that happen every week where people can, it's not just recording like you can literally go on there and get your questions answered. And even without that, I thought it was amazing because just you guys are in the Facebook group and you can answer your questions and you come in, Christian comes in and answers questions. And then just the community themselves are very kind of supportive as well. So I found that to be really helpful. And what I found is kind of going through the course, I think one of the things that I would like, I don't know the request that I would like, because what happens is like, so I had all of these trial clients and then I thought, oh my God, now what? And there is actually a now what do you do? The first step, I need you to all the other steps past that too. Like if there was like a layout, okay, this is you've got your trial client, this is what you do on the fast track, and then there's another track of this is how you kind of keep going through the process step by step. So yeah, that would be great to have, but that's how I've been using it. And I think I keep coming across things like, here's your onboarding map. I'm like, I didn't know that was there. I was like, oh, but I found that after the fact. So there's lots of stuff in there. And actually it's not, I've been in some courses where it's stuffed full of things and you can't actually find anything at all. It's not that. But at the same time, there are lots of things in there and sometimes you discover them and you don't even realize that they're there.  Now what do I do? And we kept answering the same question like, well, let's just ask it as a question and rephrase it and then create a video. And that just, you know, exactly, right? It's all to me. Yeah, I'm sure. And I think there's lots of things in there we should like that as well, that you can tell that they kind of created because you guys are listening. And that's the other thing as well that I found amazing too, because, you know, a lot of people kind of create courses. They create the course. They might wanna like a weekly Q and A, but then they don't really do anything to the course. The course is kind of left there, you know? Yeah. And, but this is what it's like, it's organic. It's literally growing. I mean, I'm going in there and saying, wait, I saw that, I'm not in a video. I'm saying, wait, I saw that post like two days ago. And it's like, you literally are kind of updating things as you go, which is amazing. Yeah, I mean, definitely in this, with Facebook making all the changes, they are as much as I hate all the UI changes because it means you have to update everything. It, I mean, it just, it gives us ability to just go in there and be like, great, so let's make sure there's the most cutting edge thing. Yeah, it does. It's always important for us, for sure. Yeah, I mean, it's really important. I mean, I've literally had clients who, it was a client that I had last year, he walked away from, I think he went to Guancudin's event and he bought like one of the speakers had like a, it was a course and Facebook ads, in fact, right? By the time he left the event, the stuff that was in the course was already not available to him. In terms of like the first term, because it's through that going through that whole, you know, that whole scandal that they had. And so they took away a lot of the stuff that he was talking about. It's like, oh my God. You know, so, yeah, it's really important, like if you're going to do this type of work, to know that you have like the support in the community that is live and can help you with the updates that happen all the time. Yeah, 100%. Yeah, we definitely went through that with the special ad category that was, it was supposed to be imminent but then all of a sudden they just implemented it and started banning accounts, not having it. So that was, yeah, that was a big one for us making sure we actually put that out. Oh, yeah, sure. That makes sense.  So tell us a bit about, you know, some of the wins you've had since you joined the program. Hmm, that's a good question. I think that one of the things that you guys talk about is that you have to appreciate all the small wins and I think most of the time that isn't what I do. And so, you know, in fact, I think someone, I was posting something the other day and someone said on the community group, like, oh my God, you know, like you've got it all sorted out. You know exactly what you're doing. Next thing you're going to be in your own course and I'm thinking, yeah, no. That's not gonna happen. I think that for me and this, you know, everyone's different. But for me, I think that wherever you are, it always feels like there should be more. And that's one of the things that I had to kind of slow down. I think, okay, you're doing okay, you're doing good. You know what I mean? And so, yeah, so right now, working with these trial clients, I think, you know, I've just found in that there's, that I know more than I kind of give myself credit for. And at the same time, I think that, you know, when I kind of start things new, I kind of approach it from that place of being a new student, not wanting to, not saying, okay, I know this already. You know what I mean? Because then that kind of leaves you close to what other possibilities are. And so that's the way that I really kind of understand. Yeah. 100%. Yeah, I mean, as entrepreneurs, we're kind of ingrained to always think of the big, big wins, big pictures, everything like that. Meanwhile, I mean, all those small wins of getting someone to say, yes, I mean, it's a tiny, tiny win, comparative to everything else that most folks are working on and what you're working on, but that's still a win, right? I mean, it's nice to have, but as an entrepreneur, we're kind of taught to be like, okay, we'll just gloss over that. That's all right, but it's a small thing in the grand scheme. Right, because you're always kind of waiting for that next thing, but I mean, but the truth is all those kind of little things do make the difference. And actually, there is one thing that, it was a win for me at least anyway, because one of the things that I found in the program is that like I've done a lot of work with clients, I'm just myself in terms of building your avatar, you know, you really need to understand who they are, what the, you know, the pains are and the language that they have, the questions that they have going on in the head, all that kind of stuff. And again, like it's one thing to kind of know it. It's a different thing to actually know, okay, how do you actually find this information? And one of the things that you guys have in the program is that you really, the way that Kristen broke it down in terms of finding that information, actually using those Facebook groups to kind of look for that information was something which I think I actually knew in theory, but he kind of, I think he did, he showed you how to do it and then it clicks. And I think that's a lot of the things that's happening with us. I'm going through this program, there's things that I knew already, but the way, I don't know, maybe it's me that I'm ready all the way that you guys explained it, but there's more things kind of click in. And so he was showing how you can go into groups and find out what are the questions that people are asking? What are the problems that they're having? And for some reason, I never really kind of thought it before, but now I can see it clearly. You can literally go in there, find the questions, and then that becomes your copy. Like you literally just change it a little bit and then that literally is the language. This is what people are asking. And it's brilliant. Because now it allows me to kind of go into different markets without knowing much about them, but really kind of getting to understand it. And then literally using the language of a market that I don't know anything about, within the ads, within your copy, within your landing page and so forth, and really kind of resonating with them. So it's amazing. 100%. Yeah, I mean, we use that exact methodology for all the ads we create and everything as well. It just works really, really well, but that's awesome. So I guess, I mean, so what's your best piece of advice for someone who hasn't yet gone through the process, hasn't kind of nailed down, this is what I want to work on, or these are the folks I want to work with, like someone who's just kind of getting started. And I kind of ask that hesitantly, because I know that's going to be a hard question since you're already in the funnel arena, if you were before you joined. But for someone who might be new to it, and maybe was in a position, like where you were at just before you joined, what's the best piece of advice you could give them in order to take that next step and kind of get to where you are now? I think the best piece of advice that I could give is actually just to take the steps and go through the process. What I find is what most people do is they just kind of stay up in the head and think about, oh my God, well I could do real estate, or I could do chiropractors, but I only have a maybe, and so you start having this stain in this loop of questioning all the possibilities that you could do, but what you'll find is that once you actually kind of go through the steps of actually working with any particular market, it will emerge if you actually like working with them or not. And most of the people don't think about, okay, do I actually, is it going to be something that I like doing or enjoy doing? Because you're just thinking about the bottom line, I just need to get the money, actually. But what will happen though is that if you literally have no interest in it at all, then what happens is you probably just won't end up doing the work. You know what I mean? You have to have some, actually you need to know what your why is, because you can actually overcome that if you have a bigger why, right? But so first of all, I guess the step is that you need to know what your motivation is. And really, really embrace that. Whatever it is, if your motivation is to help a particular field of people, then just go up, just do it, right? Or if your motivation is really to kind of, to build that nest head and help your family and do whatever it takes to get there, then do, you know, just always remember that and really kind of have that as your thing that kind of keeps you going. For me, it's actually more about the people that I help, which is why it's more important for me to take the steps and actually start to work with these people and discover if that's gonna work for me. But it might be different for different people, but either way, you don't know until you take some steps and what I found is that most people will stay in this place of procrastination and learning, right? Just, that's the other thing. I mean, that's one of the things that I've learned through my time being an entrepreneur is that the most people, I don't know what percentage, it's a pretty high percentage, most people will spend all their time learning and never actually taking action because they think, well, I'm not the expert here. I know I can't do this because I'm not, I'm not qualified. And they'll do the whole course about actually taking steps and I think you guys have actually built it into that you are taking steps as you go along, but I can still see in the group, like people say, well, okay, well, I'm on step five now and I'm just going through this without actually taking steps because, and what will happen is that you'll have to go through it again anyway once you start working with people and you actually get a lot more information if you go through the steps, take the actions step by step, stop, do the action, come back, what's the next step? And go progress that way, you'll get like a lot more, it'll be a lot more effective for you doing it that way than just learning the process or just thinking about what you could do without actually taking any steps. 100%. And I mean, I think that in itself takes so long to learn and then once you're doing it, you're like, okay, pan over the head, why wasn't I doing this all along? But yeah, that's a huge, huge one is just, I mean, getting out of your own head and taking action. Massive, I don't even know how many hours upon hours and years it took me to just be like, okay, great, just take action, who cares about all these other things? And it seems so simple, it seems so simple, but it's, and all of it, again, all of that stuff is just in the head. Like even Stave and I, I think I was writing a few emails about like I was having some problems with the, I don't know, just some process. But there's so much more in my head and it's like, okay, I don't need to put this down, I just need to know what is the answer so I can get from A to B, just what is the next step? I don't need to know all the other stuff down the line right now, I just need to know what's the next step and let's just do that. Exactly, 100%. That's awesome, it's awesome. So I appreciate you taking the time. If anybody wants to be able to get in touch with you, whether they wanna work with you with coach or consultant or otherwise, what's the best way they can go ahead and do that? So the best way they can get in touch with me is if they go to my website, which is my, the name of my company, which is Core Story Branding. So it's corestorybranding.com. And yeah, if they can go on there, there's, I think there's a contact form on there, they can literally just kind of email me or I think I'll also, they can actually schedule an appointment if they wanna kind of talk with me and set up some time. So yeah, that's the best way. Awesome, awesome. So yeah, so I guess what folks what folks would you want to work with? So I guess like coaches and consultants, if they wanna work with you on. Yeah, yeah, coaches and consultants. So right now I'm actually focusing on chiropractors as well and also med spas, like I think I'm looking at what's a cool sculpting. And so all of these are actually some of the services that people that I've worked with previously have offered as well, but I've never really kind of got into this other side. So, so yeah, it's exciting. And one other thing that I'll say as well that there are a lot of people worry that, okay, I'm not gonna be able to find any trial clients like I can't do this. What I found is that people are really excited when you offer to help them with Facebook ads because whether they've tried them in the past or whether they've never even made that first step at all let everyone kind of knows the potential.  They just couldn't get it to work. And so they're, you know, they're super excited when they're like, oh, someone's offering it that might be able to work. That opportunity is huge, absolutely huge. Yeah. So that's awesome. I appreciate you taking the time. It's been absolutely phenomenal. You're welcome. And your link for your company, I'll make sure it's in the description below somewhere. And that way, if anybody wants to reach out to you to be able to work with you, that information is going to be down below. But otherwise, I appreciate you taking the time. So it's absolutely phenomenal. Thanks a lot.


Hello. Hello. Sorry I beat you Emily to the attendance list. No worries I was actually getting ready to copy the template over and I saw somebody else had just done it when I almost hit control the. Sorry, my clean responsibility for that. Emily how long will you need for your section or just on the time adults and save I'll be joining. I can't imagine I would need more than like maybe five minutes. I mean you guys know how fast I talk so. But there might be a lot of conversation aside from me, explaining it so I would, I would probably venture on 10. Okay, sounds good. Just that people join in. All right, cool. It seems like we have. So let's just kick this off. So as usual, this meeting is being recorded and CNC guidelines applied to this. All right, so I'm going to go through the this of attendance, see whether we have any announcements. So let's start. Magno, I think you had one. Do you want to. Sure, sure. Yeah, just a reminder for that were March 17 meeting that we're going to have Jen Burns, since the last one was canceled, talking about tech for containers. And people asked me to remind them about that a few meetings earlier so I'm doing that. Awesome. Okay, yeah looking forward to that. That was on the attack matrix right exactly on attack for containers yeah and Kubernetes is cool. Right. Yes, agenda items are good there. Okay. And Diego I'm assuming your data is in the agenda item right so we covered we're going to cover that data. Okay. Ash, thank you for volunteering to describe. So let's get started before that any other new folks new introductions. Cool. Okay, so let's get started. I think that the first, the first issue that that we have from the agenda is actually about the cognitive security map. We presented a few weeks ago about the version to a cloud native security landscape, which we call the cognitive security map. And so we have started a new project now, which is going to be kind of like the first version one of this cognitive security map. So I'm going to share my screen. Really quick here. All right, so we have this new new issue now so we've sent our email to the cognitive security mailing list. So you can look at that to kind of get a good idea of what it's about. But the information is also encoded over here in a different way. So this is really what we're doing is, this is taking the concepts of the white paper. We're going to cognitive security map which really focuses on the more practical practical use aspect of it. So looking at things like the different projects which you can use on different aspects of cognitive security as well as, you know, what are some examples of things that you could do. We are open to flavors of this right. So this has been that will maybe to like magnificent with the chocolate for the next iteration. It's only at more spice into this. All right. So this ends with the previous issue. But I kind of want to really go down into the details of this. What we're really doing is we're trying to scope this down really bring down several aspects of the original vision, which is like removing some of the thematic aspects first. Focusing on the content. And we hope to get this done by the end of March at least to have a really prototype in which we can start refining a little bit. And then we're hoping to kind of launch this that keep on you. So this is where we're going to get a lot of additional eyes on this. And hopefully, you know, bring this the next chocolate version of strawberry. So kind of as an overview. So this together with Ash and Diego. We are coordinating this effort. So this is kind of like a quick mock up on what it will look like. So currently the security map. So you have the different stages of the life cycle in the company the security pipe paper. So you could go into the different ones, you know, security tracks of them on tests, you go in. And you could go into distribute you have different aspects. So it's a good way to kind of like explore the different areas of security. And so a lot of this content right now is just content from the white paper. So Diego and Azure are going to go through the content aspect of this so right now it's all just white paper content. So what we're planning to do is to, you know, include additional details of okay here are some projects they can use. Yeah, some examples that that you can carry out as reference for implementation. So let me go back to the issue. If you're interested and we've got some comments origin here. I think the next kind of big point to look at is really this cognitive security map. Google document. We have already some contributors that putting your name down. So we are looking for contributors both in two areas one of them is in developing kind of the website that we saw earlier. So if you're interested in that to put, put down your name in the issue and say that you're interested in development. And we are also looking for content contributors. So I think Diego, do you want to, do you go as you want to kind of talk about content contribution. Yeah, sure. And so, yeah, you want to keep the document open and we'll be fine. Yeah, so as Brandon was saying, we will love more contributors to in this effort and in this document that it's linked in the issue. And just please bring us either put a comment in the issue or see the dog that we are specifying and a channel at the top of here in the edge you can see this like channel that we are. Just tell us that you want to help and here in the document, how you can contribute, you can include your name in the contribution table. So here we will assign the specific topics to each person who wants to help.  We are putting the example on how it's going to be in a specific section that you can add it's identifying the projects that are relevant to that area. And putting some examples of why that it's a good example of a practice, and even extending other links for more context and information on that topic. And I think that's the main theme for now but we have, if you can see in the table, a few, a few areas that we need help. Yeah, the more the merrier. And yet if you have any questions, please bring us to Ash, Brandon and me and come in the show this lecture now that we will happily impress you to conclude. Did I miss anything else. Yeah. Yeah, I think our everything just your one more thing to add would be the projects in the list can be open source projects, preferably CNC and other non CNC open source projects, and we're also accepting some like commercial projects as well in the list of projects, but they'll be lower priority compared to the open source one so feel free to add your name to the contributing the subject you want to contribute to and then add the projects in the examples that you want to contribute as well so Yeah, so happy to help you all with those contributions and if you want to contribute to this effort. Thanks. PJ do you want to mention what we discussed in the earlier meeting about the white paper and the branching off of that that paper to this map. PJ. Okay. So yeah I'll go ahead and talk about that like we had a previous meeting me PJ and Alex about the retrospective of the white paper at the survey that you want to send out to people about the white paper. And so we thought, at least we discussed this that the white paper is more. Okay, sorry. Yeah, feel free to chime in. So the white paper is more like awareness document right so to raise awareness for cloud native and everything is not a is not a tutorial it's not a cookbook is not it's nothing like that and we understand that. We hope that people will understand that as well but but like, if someone wants to implement a specific section of that white paper right that that best practice of security. So basically, let's say for runtime protection right so where where the where should I go right so what where they should should they look for right and we thought that a good idea would be to have this this map as more technical and more detailed information from from the white paper, instead of having the white paper with like a lot of technical information. I'm not sure if that makes sense. But it's this well said and I hope that this this document will kind of like me at least half of that requirement right I think that we are still not going to be at the point of like the cookbook or something but definitely it's going to be like some starting guidelines to kind of getting started. I think a cliff notes if you don't mind me kind of chiming in I think cliff notes are great here right because look they're already inundated with, you know, guideline bugs and best practices right this to me cliff notes is I use the term if nobody's familiar it's just like basic like a TLDR. This is like a TLDR, but works right. That's a good way to. My brain so small I can only process things in that way. All right, cool. Any other questions so we will follow up. Actually, I got myself will follow up on on those that have commented the issues to kind of see see what will be good places to kind of pick up. But, you know, this is good. This is going to be a fully cut everyday document so even if you just request access I'll give you access start writing stuff. Feel free to go ahead and no one's stopping. Brandon just a question so in each section we need to mention different projects, like for example, we can take service match or anything right. So, so projects can be mentioned but what you want under the examples are these more oriented towards different use cases that that could be solved or, or what. It should be under examples is it use case or is it I mean, is it right post what is it. So, so the idea of examples really that the motivation behind it is that is to provide like a better illustration of if someone says we supply paper and say, okay I need to do this this that. And then the next question is like, how do I do it. So the examples are supposed to serve as a way to say that, okay, a control for example for image image scanning or application manifest getting is you know, you should not run application manifest should be scanned so that they're not running as a root user for example. I think I think it also depends on the specific topic because some topics are a bit broader than others. But the main ideas you know it should be of feel free to really go down into specific specific example so in this case for application manifest scanning. And we say that you know prohibit content images that use the latest tax, you know, for him, and for certain registries for containers and things like that. So kind of like ideas that people can look at and be like okay maybe this is something that I can do. And, you know, obviously not a comprehensive list of all the things they can do by at least give them an idea of what they can do. Okay, yeah, thanks. And super quick observation if I may. This is great stuff by the way, on the title of this activity stream, would you mind renaming this to plain from vanilla, we're international community, like the nuance of flavors get lost in people so if we want to call it like plain or high level or basic that's probably more descriptive. I was going to the Android route with naming. Yeah, I think that it wasn't so much kind of like this would be the plain one but it's just like a versioning a virgin name. Yeah, cool. If not there are the examples you know actually when I have really put some I think this one was actually written by kind of a poet is written by someone else from the APEC meeting. But yeah, this is this a ton of stuff that's written here so you know if you feel free to take a look at other stuff and then write based on that. Cool. If not that sums up the section and any last questions before we proceed with the agenda. Alright, if not Emily, all yours. Okay, so this is actually kind of exciting because it's a little bit more actionable for the community. So we had so we merged and the new security review process if you have not read it please go read it it's very awesome we're extremely excited about our next projects coming to us for review that way we can test it out. But to that effect, the security review process which I talked about last time is broken up to better align with the project maturity. The co chairs had wonderful meeting with our talk liaisons, Liz and Justin to discuss these new changes and we were trying to discover a way that we could introduce security for non security focused products in the cloud native ecosystem and one of the recommendations that we came up with was this concept of the security buddy. And what that means is, we'd like to look at a one or two non security focused sandbox product projects to take advantage of our self assessment template which is new and the security review process and assign somebody from the site to engage with them and kind of walk them through completing the self assessment. Now the self assessment is designed to be, excuse me, that initial understanding and self reflection of a project state of their security. The security buddy would explain security concepts to them, potentially have the opportunity to join a security focused mailing list for the project to help guide the project in making more informed security decisions. The intent does not to have them be a developer or a contributor on the project per se, but to be more of an independent security advisor. This model is currently in use by container D, which is actually really neat. There's a lot of good information on it. I wanted to propose it to the group to kind of generate interest, see who would like to be able to learn more about a project that's currently in the sandbox stage, walk them through what self assessment actually looks like and start engaging in those conversations. It's a good way to bring more non security projects into a security behavior and also expose them to different portions of the CNCS as well as that cross knowledge and collaboration within the group. So, I guess a quick question. I guess some of these details may not be kind of formed up yet, but this is something that the TOC is going to say, okay, every sandbox project will be attached to someone for a certain amount of time because I know that projects can be in sandbox. So this is not at this time determined to be like you are fixed to the hip for life. This is more of just that initial jumping off point to get the projects to think more about security. It's also to provide the talk with evidence of this new security review process and how it could potentially be applied to non security CNCF projects, which is the next logical progression that we'd like to see projects move and we want. We want the SIG to not just perform security reviews on security focus projects because they're already thinking about it. It's the rest of the ecosystem that could potentially have significant value add even from the most lightweight review or even discussions about the state of their security. Is there any particular reason why it's targeted at sandbox, not incubation or anything else? Um, it could be incubation. There's a fair amount of projects. Give me one second. So not really anything in particular, but we figured if we started with a project that is early enough on in their maturity, the self, the self assessment better aligns with that, whereas projects that are coming to us for incubation have are slightly further on. We would expect a self assessment probably to have already been performed and then they would be receiving a joint evaluation with the SIG. So kind of trying to set it up so that these different templates and documents for our overarching security review process has a better alignment with the CNCF phases for early adopters and early majority, as well as the very early innovation projects. Okay. So, so my question would be, and I think Frederick mentioned that in the chat there, like the first question would be why not security champions, right? Because on the dev tech ops approach and everything and we have that concept of either a developer or application security person that is involved with a squad or a development team to help them and to champion those security initiatives, right? So maybe creating a new name would cause maybe confusion. And I think that the concept is very similar here. And I really liked that that that that we're doing that I'd like to volunteer as well. So, yeah, that's it. So I think the initial thought around security champion is more somebody that's integrated with the project, which we're, we're hoping that these are more independent than an actual contributor of the project. It could be a security champion. I'm not fixated on any particular name. We want to approach it from the perspective of a lot of security professionals are usually seemed at or viewed as kind of like the enemy, the thing that stops developers from being successful or being able to deploy faster. And we want to be that security friend. We want to come to them and be be part of their team, but enough that they come to us and they're, they're, they're listening to us. So whatever terminology works best to kind of relay that message in that position, we can certainly go for it. I will be writing an issue to define a lot of this. So part of the effort is to not only look at what this individual would potentially be doing. We do have some great resources from the container D team. But also actually picking a project, seeing if they have the appetite for this level of engagement, and then following through with probably one, maybe two different projects to determine one is this if is the self assessment valuable as it currently exists and two did the project get value out of the engagement. Okay. Okay, got it. Yeah, yeah. The name, the name really doesn't matter, I think, for my perspective but yeah, I think it could be also sidekick right pop sidekick would be a good name as well. For I'm sorry, what was that for the security buddy. I think we already put this copyright infringement. I'll talk to my people. No problem. So, so yeah, I maybe like my concern would be if someone starts getting involved into a specific project right and then they can't help anymore they start volunteer they stop volunteering for example right so maybe having a pool of security buddies. Right, that each any project you go to and ask for help, and then someone takes takes on that issue and help them specifically and and if someone is not responding then another person can take that that would be a better approach from my perspective. Is it visor to generic, or is it to advisor seems to kind of like high level. advisor is actually what they're called for container D. So, that's certainly like, that's certainly an option. I think having a poll of these individuals would be beneficial as like a centralized point to contact, but I genuinely think that having a primary at least for a limited engagement would be very beneficial because you've got that one person. You know who to go to you know who to have the conversation with. Sure, sure yeah yeah once once once they get assigned to like a specific project that and then yeah for sure that would be the point of contact there right, but but I think that at least we should have a slack channel of security advisors right and they can exchange information if they need help like for example, I'm helping this specific sandbox project but I'm not very familiar with the technology or what they're using. Can you guys give me some pointers there and that would be beneficial as well. I'm not really familiar with what I call how I'm secure. But seriously, I'm, I'm sort of listening and thinking about how I'm not too familiar with the sandbox and incubator here but thinking about Apache, and they're mentoring for incubating over there. You know someone one or two people get assigned to a project. If it's not working out or they get too busy they sort of go back to the, to the dimensioning team and said hey look I'm too busy I tap out and bring someone else in so that that's a pretty small deal I think. The overall idea sounds interesting I'm curious to see if that becomes something which attracts people into Seattle or are the opposite. So, so Emily from the six perspective, won't this be like the similar process like we do for a normal security assessment right we're going to have like a security reviewer. We're going to have a team. So from a sick perspective it doesn't from our perspective it doesn't matter if it's a security or non security project on the other end. We still have that same structure, so that we have some accountability and obviously there's going to be overview by the co chairs and details if something is not going as expected or is taking too long. Then we can obviously intervene so on so on one side I think is the same process, like on the management side but the question is what's the incentive on the other side for a non security project to actually take this on. So this is in an ideal world if I had my way this would be like the dipping your toe in the water your first introduction to what it is what it means to be cloud native secure for non security focused projects now if there is a security focused project we still have a reasonable expectation for them to have some security specific documentation within their repository. And that's kind of what the self assessment does is that it's that introductory. Tell us about your project from a security perspective, these are the things that you should be thinking about and if they are a security focused project they've already probably got that we would just like to encourage them to document in a standard format. And then that self assessment, actually a lot of the content there feeds into the joint evaluation which is part of the new security review process. It's the same joint assessment joint evaluation that we've been doing with some more detail added on to it, just based off of the feedback that we've received so self assessments a little bit more like wait, it's independent so the idea is not to analyze the project but more for them to be self reflective and be there and available to answer any questions that they may have and kind of have that guiding conversation. And then all of that work grows into the joint evaluation where we do that joint kind of look at the project, poke around at see how they're thinking about security and how they're applying it and where they fit in the cloud native ecosystem from a security perspective. And then from there, those two documents when they're finalized help contribute to the security audit, which is one of which is later on in their life cycle we found that a lot of the work that's been done from the security assessments by the SIG has been significantly helpful to the security auditors. So it sounds like there's a lot of discussion about it and would be beneficial to have. So I guess I will go ahead and create the ticket and we can start having a little bit more documented discussion on what does this mean and what are we going to call it Sarah had an excellent suggestion to use a very specific name affixed to this. That way we can define a finite term during that evaluation. Awesome. Cool. Thanks Emily. And I think that our last agenda item is for the confidential computing project. Eva, are you on. I just joined. Yes. Awesome. Oh, yes. Oh, okay. Literally just joined. So the, I wanted to share a project we just launched coming out of DS labs at Microsoft, called mystic hosts. The, you know, the one line Twitter pitch is bring your own application binary container or VM and run it in an enclave. Some limitations apply. I'm already chatting with a couple of folks in this committee, and in the CNCF about using this potentially in projects like spiffy or an SM for taking advantage of the unclad native functions of attestation, setting up neutral TLS. And sort of wanted to see like, hey, we literally we just launched like a week ago. If folks want to kick the tires or check it out. And we're looking at how do we integrate this with Kubernetes. And how do we integrate it with other projects in the space. I don't have a presentation to give on it though I could spin on up if folks want me to like do a technical walkthrough of the project. Can you, Eva, I had a question. This is the name here so how. How do we think about this, maybe the one thing that came to my mind is service mesh right you talked about mutual TLS, some kind of a confidential container or runtime environment and you're adding on some kind of security capabilities. Just briefly compare and contrast the two, and how we should probably think about, think about this, just trying to understand on create a little bit better to the. Are you asking for a broader context of what is an enclave or a trust execution environment or more how does it fit into the container ecosystem. So all of the above maybe this does require maybe the deeper that but anyway, no worries, thank you, but I think all of the above. Okay, so a hardware aided trust of execution environment, basically takes advantage of some properties of processors that are kind of new still coming out but at this point all the major clouds have either sgx or arm trust zone or as a capability. A lot of these provide similar functionality through different API is like it's not yet standardized, each CP vendor has something different. Each of the cloud providers has some sort of an attestation service or attestation model that is layering on top of these. The attestation in this scenario, sort of the proof of identity of the machine. And the proof of identity of everything under it, the ability for the, the user of the cloud or the person who is defining the policy and orchestration of workloads to say this particular application or container can only run. The underlying host meets these requirements, this firmware this patch level this operating system patch level, then once it's running. That container is isolated even from the host. So the root of the host don zero if you're in Zen cannot access it. They were separated with encrypted memory regions. I'm not sure, you know, they all do it a little differently, different CPUs but the goal being to the blind hypervisor, or blind container, in this case. We're looking at some of the was chatting with a couple folks about using it for mutual TLS in service mesh, where the certificates are tied to the actual hardware ID. You have just an extra layer of proof of where the communications happening that something hasn't been moved off the cloud or out of your region out of your geographic boundary boundary area. So that's sort of a shotgun of ideas. Yeah, no that that's very helpful just one other question is given the, the scale and the ephemeral ephemerality and the dynamism of container workloads. How, I mean what is the time to set this up get it booted running and is it even conducive for this kind of workload pattern. Great question. It's going to vary by implementation. Think we're at the early stages right now. Some similar projects launch times a little bit slower than a normal container, but not by much. Not be great for function as a service yet if you're expecting you know sub the second total runtime total lifetime for your container. Because, at least in, in my testing some of our testing the bring up time is measured in the less than a second, but it's not as fast as a regular container. So that'll change depending on how much memory you're allocating so if you were allocating a very large amount of memory to one of these enclaves that initialization might take five seconds, play number out of a half. Still if you're going to run it for an hour or six hours the length of your of your SSL certificate that's still fine. Very helpful. Thank you. Great question from Cameron on where are these being discussed is it under. So there is a separate foundation parallel to the CNCF also under the LF called the Confidential Computing Consortium. And a lot of this work is centered in that body. And this particular project mysticos is right now not homed in any foundation it's just developers doing some work. As far as the discussion of surfacing this up into the cognitive ecosystem. I think that's here, at least for now until it in grows it out grows this body and needs its own channel. Yeah, this is a 10. I made me some contacts here so I have a question regarding the music as a part you mentioned. So you have mentioned the hardware ID, some curious like, do you use some tpm or other technology to make sure that you have to present, get the hardware ID and put that into the processor. So a te is another type of hardware, different from a tpm it provides similar functionality though. So you can think of it in the sense of tpm provides attestation of integrity of some devices in the system as well as some key it might have stored. Trust zone wrong. I'm trust zone is one implementation of a te. So it's SGX. So it's a MD serve. Also IBM pfcf. Right so each of these you can think of them like a tpm, but also has memory isolation and execution capabilities for arbitrary programs. So, are you saying, like, for the key framework, we do not need to care about like it's on server or, or, like, how can I say, the, like the traditional x, it is a six server right. So it's not a matter right with tt. So, one of the things we're trying to do is build a cross te compatibility layer in the runtime engine itself. We don't have that today. We have the framework for that and we've done the work for one te target and one generic non te target. So if someone wants to come work on the trust zone or the SEV support we would love the contributions. It is certainly the product goal from day one to become a runtime platform that spans across all of the different CPUs that provide this capability. So the question on this is this kind of like a, I know there's an Enox project which kind of wanted to do that. This is like the work that's together with them or this separate project that's. Yeah. Good question this is a separate project with different goals so there's some overlap nrx is was the wasm runtime abstraction plus a bunch of the run orchestration. I did a complete ring. We're talking that nrx type of that. One second. That's right. Mystic. nrx is the red hat project. Yeah, I'm talking about the slabs mysticos right now. Sorry about that. The main difference is nrx is focused on was the wasm plus its own orchestration and key release layers mysticos is focused on application portability so bring your own runtime. Bring your own application whether it's a binary you compiled and rust or go or a Docker image right now we have support to just take an existing Docker image. That is, there are some some limitations of what can be run in our current target of SGX. But take your Docker image simply migrate its format at a at a signing or attestation around it and run it in enclave. No problem we have a proof of concept with Kimu right now to take a Kimu VHD file format and just mounted and run it. So very different approach but same hardware layer. This is something that I've seen recent work on this issue in Canada continuous now that's kind of discussing. Yeah, confidential computing. You can. Sorry, I was just thinking like you see this kind of like being orchestrated as a type of work the local committees or something like that. I do. Yeah. In Azure today, we have jade product for a cast support for SGX. So it's a type of node or property of nodes you could schedule workloads to. And at the moment that would just be an SGX device available in your in your node. If you had an application that was written to use that it could use the raw device. What we're talking about with this would be a little bit different potentially.  I think the container work you're referring to. Last time I chatted with that team they were using Auckland plus in clivari. Yeah, this this new revitalization of the issue now. Yeah, we started discussing it and then I got painted on the images stuff as well. Something to look at again. I see a question is general portability and issue for an app. So there are limitations for two limitations that are important to mention one is SGX doesn't support fork. So some of the SGX runtimes like graphene they work around this in a really slow and painful way that also, in my opinion reduces security, because it calls out to the untrusted host whenever you fork to launch a new process. But if you're assuming that the new process is trusted because it was launched from in the enclave. The reality is it was launched from outside the enclave. There's a paper that talks about this. I'm trying to, it's called a fork in the road. David, can I ask a simple question and again, why wouldn't you just fold this capability into one of the runtimes like cryo or container. You don't mean like have some type of switch that says hey, take advantage of te and all that. And again, I, you know, you know how I am with cliff notes I just I try to simplify things right so I love that you thought of that. The shorter answer is we haven't done it yet. But yes, please do it. Because that would be incredible right just talking to those individuals like look now you have the ability to say yes my containers or my runtimes are secure and they attach to some type of hardware equivalent like that would be fantastic. I remember back in the day like this way back in the day Docker was doing I was at HP Docker was like hey can you integrate you know, can you integrate with TPM right to be able to like have it so like you know getting that stuff. And it was like that kind of helped to kind of articulate some of that capability but that also helps in widespread usage of the tool when it's integrated integrated in all the ingrained in all of those various run times right so that's the ability for this to be connected as a container D runtime plugin. Yes, absolutely. Like that is incredibly desirable and part of what we're working towards but you know, do you want to do that. Go for it. I'd love to see it. The tricky part there is that that's definitely interesting but how do you do it for a different CP architectures right and uses different than Intel is different. The scope here is that mysticos provides the portability layer across CPU architectures and then container D simply calls into mysticos mysticos detects what it's on and launches the appropriate way. Have you seen kind of like, I know each enclave or you see has its own like attestation. Framebook and some of them match these different ways or that's like, oh yeah, unsolved problem so one of the bigger work streams in the CCC that I'm co leading is the attestation working group to try and address both how we how someone might do cross cloud attestation because Google Amazon and Microsoft's cloud attestation services are different. And how you might do CPU that cross CPU architecture attestation for the point we just mentioned unsolved problem if you want to work on it come join our sick. Can you put a link to that that that's like that, like how to join I think there were a couple others and they were asking as well. I haven't yet created the like a mailing list or a slack for that said yet. Things are a little slow to get started sometimes in a new foundation. The official vote to create them happens next Thursday. Can you post where the, the CIG is where you guys meet and whatnot. There's an online doc for that. As I said it doesn't technically exist yet. Okay, we are forming it right now I've been trying to corral that for a little while. You can certainly join the CCC discussion lists. And I'm going to get a link that works to that right now. I'm going to use the main page. This should get you to the mailing list. So it'll be a sub project under the tack, but it'll probably have its own mailing list in its own channel. Awesome. Thanks. And I guess when the, when the sick details up, you can, if you could put it in the security channel, you can just send it to one of us and they can dump it in there. Awesome. We almost all the time so any questions any call to actions. Awesome. Not thank you Eva. This is really helpful I, I think a lot of people are keen so hopefully you see a few more new faces. Alright, I think that is all that we have planned for today so any additional topics anyone would like to bring up. All right, if not see everyone next week. Have a good one. Thank you. Thank you. Bye.


The Minnesota Public Utilities Commission has decided to stick close to its original timeline for deciding whether to approve Enbridge Energy's proposal to replace its aging Line 3 crude oil pipeline across northern Minnesota. The April 30 target came into question after the commission last month deemed the project's final environmental review to be inadequate and asked for further information. An administrative law judge who will recommend to the commission whether the project is needed then pushed back the briefing schedule. That could have delayed the Public Utility Commission's final decision into September. But the commission decided Tuesday against such a long delay and asked the judge to submit her report by April 23. Executive Secretary Dan Wolf says the commission now expects to take up the issue sometime in June. If you enjoyed this segment of Lakeland News, please consider making a tax-deductible contribution to Lakeland PBS.


What's up YouTube? I want to give you my top 20 attributes that I look for in women that I cannot do without. I'm sure a lot of women out there wonder what men are really looking for. Well, I'm a man and I'm going to tell you what I look for in a woman. Now, I don't exactly have these in any particular list. Number one, two, and three, because they're all important to me. Like, I need these. There's only maybe one or two things that I don't need. And I'll tell you those at the end, alright? So, number one, you gotta be attractive. And I'm sure some of y'all are like, Ah, of course, man, let's say that. They're so visual. That's the truth. We are visual. And it doesn't make me shallow. The fact of the matter is when we're out, if we are single and we're looking for a woman, we want someone that's going to be attractive to our eye. But there's other things that we look for once we see how good you look, okay? That are going to have to line up too. You can't just be attractive, okay? Now, number two, good and bad. It's the motherfucking truth, y'all. It's the motherfucking truth, okay? Because that is part of a relationship. If it's bad, it can make a whole lot of other things go wrong, alright? So, good and bad means you do everything I like it, okay? In just the way I like it, alright? And if you don't in the beginning, but I see you got potential, then we can move forward. You know what I'm saying? You could call that shallow, but the fact of the matter is, sex is a huge part of a relationship. Alright? I want you to be healthy, alright? Men love a healthy woman. When you see, when we see you and it transference, it furs into your beauty and attractiveness.  The way your hair looks, you know what I mean? Your eyes, the cup, you know, everything. You know, we want you to be healthy. We want you to be in shape. We want you to be fit. You know what I'm saying? We want you to take care of your health. We know that if you take care of your health, the longer you're going to live and have your longer marriage, we're going to have, okay? The worst thing is for a man, and I've already thought about being married and losing a wife that I'm so close to. It's a horrible feeling just to even think about it. So we want you to live a long, happy life with us, okay? Other thing is sophisticated, okay? Sophisticated is going to be, you know, how a woman carries herself, how she acts in public, you know? This is something that you don't find all the time. You know what I mean?  You know what I mean? It's like I can't stand a ghetto-ass girl. I'm sorry, I need you to be sophisticated. I'm not saying ha-sa-ditty, okay? Boo-jee, that's not what I'm saying. It's sophisticated. You carry yourself as a lady, as a woman. That's what I need, okay? Another thing is intelligent. I can't stand a dumb-ass girl, okay? Now, I know there's different intelligence levels, okay?  What I'm saying is just a lot of people out there that are actually slow, but can carry on a stimulating conversation, you know what I mean? She's just articulate. You don't know she got a low IQ. Trust me, I've met people that didn't do well in school, were not book smart, but they were intelligent. They were some intelligent people. And I need my woman to be intelligent so we can have good conversations. So she can stimulate my mind, get me to think of new things. I can get her to think of new things, okay? So intelligence, okay? Supportive. I need a supportive woman. And fellas, you know this, man. When you're down and out and you ain't feeling good, she can be your anchor sometimes. She can help bring you up, you know what I mean? Whether it's telling you you can do it, saying it's all right, you'll get them next time. I know you're gonna do it, baby. All that stuff, please support us in our work and in our health and whatever it is, just be supportive. And most women tend to be supportive, which is a good thing. We want you to display, especially if we want children, qualities of a good mother. I gotta tell you, I dated, there were two girls that I dated, specifically I saw them around children. And I never knew this, but when I saw them around children, I was like, wow. It was the way they treated the children. I was like, oh man, they're gonna make a good mother. And both of them that I saw around children, I was like, I might just want to marry this girl. You know what I mean? Like I could tell how good of a person she was. A good mother is a quality that a lot of women have, but it can be lost with some, you know. So, yeah, a good mother. We want you to be respectable, respectful.  You got what I'm saying? That respectable type. You know what I'm saying? It's, like I said, and a lot of other ones tie into it. You know, sophistication ties into it. You know what I mean? Intelligence ties into that respectable type of girl. Okay? Goals. She's got to be goal-oriented and ambitious. All right? I don't want the girl who's happy with being the cashier at Walmart. I'm not cool with that. If you want to be the general manager eventually, if you want to be the district manager, the regional manager, you moving your way up, you want to eventually run Walmart, that's what I'm talking about. And I don't mean you have to want to run Walmart, but you got to be ambitious. You got what I'm saying? I need you to be moving forward because it's stale.  I know some of y'all watching them like this, but I hate to say it, but a lot of y'all just happy with a nine to five. You know what I mean?  And you do it all over again. I need a woman who sees more in herself. You know what I'm saying? Because I see more in myself. You know what I mean? How can I be a successful actor, model, voice actor, whatever?  Bing, bing, bing, bing, next.  That's just the way I feel. I need a successful woman.  That's what I'm talking about. I'm not a gold digger. What I'm saying is I want a girl who, and it goes hand in hand with the ambition, who is moving forward. You got what I'm saying? She's always moving forward. Success is a journey. It's not a destination. You got what I'm saying? I consider myself successful because I'm not stale. Everything is continuing to move forward for me. And when I get to that pinnacle, I'm going to keep going. It's never going to stop. So I need her to be that way. I need her to be a good cook. I need you to be a good cook. I cannot have a girl that can't cook. The first time I had a girl cook for me, and she's probably watching. If she remembers, she knows who she is. And she was good too. She cooked. I was like, God damn. She set the table. I sat down. I was like, look at this. And it was good.  That's how good she could cook. Oh my goodness. Yes, it is a way to our heart. There's always a heart too that I mentioned earlier. But other way to our heart. But good cook. Oh girls, if you cannot cook, learn. You better be the baddest thing ever walked to earth. Every other quality on the plan a man needs and then can't cook. Cooking is just, it evokes a man's soul. You don't understand. Funny, alright? Now, I need a girl to be funny. Whether it's the way she act is funny sometimes or a joke cracker. Or someone that has a great sense of humor who I can laugh with.  Y'all already watched my videos. You know I like to be funny. Comedy is 60% of what I do. 90% of what I do in my videos. So I'm sure some of y'all have been laughing through this video already. You know what I mean? I need you to be funny. And first of all, to find a girl that is funny is so rare. Especially pretty and funny. That's rare. You don't see that all the time. So either she's got to interact with me like looking at stuff and watching stuff that's funny to me too. We can watch comedies together. Or she's funny. She crack on me. You got that one. You know what I mean? I like that. You know what I'm saying? So, funny. Alright, next is sexy. Now, sexy. Don't be set up with attractive. Consider some ugly-ass girls that have seen that it's sexy. It is something about the way you walk. The way you act. The way you walk. The way you talk. The way you hold yourself that is sexy. Sophisticated is not always sexy. Sexy. Sophisticated can be sexy. But it's all in how the girl does it. A lot of it's in that walk. Oh, lord, if you got a killer, walk! Woo! Tell you what, I'll follow you in the mall if you got a sexy walk. I will follow you into the mall face and see what you look like. Sexy is your walk. Girl, especially if you dance sexy. Man! If you can dance sexy, man! You got me. You got me. You just don't, you don't get it. You do not know. If you can dance... I want, I don't want to talk about this. Sexy is what I need. The way you talk. The way you act. Your mannerisms. Everything. I need sexy. Okay. Patience. That's a contrast. We need patience. We know that relationships and men can be hard to deal with. And, you know, women for men sometimes are hard to deal with. We don't understand each other. A woman who's patient, who's willing to work on things with you is what I need. I saw a quote the other day on Facebook and it said something about a five-year-old couple and they said, well, what was your secret?  We fixed it. Yeah. So everybody gets divorced now. All of a sudden you find out one little quirk about a person and you get rid of them.  Like you think, like, and then people will have all the qualities you want. And all of a sudden they snore and I got to get rid of them. Why don't you work with them to help them get rid of their snoring? They need to lose weight. They need to wear something at night, a mouthpiece or whatever they came from snoring. Then can you love them? Shallows, motherfuckers. Clean. No, I really need to say more. You can't stank. You know what I mean? You got that nice clean teeth. You know what I mean?  She was straight up Trailer Park Trash. Exactly. Just like what the rock used to call Stone Cold Steve Austin. She was so trashy. And I remember later on before I realized what Trailer Park Trash was. I couldn't understand it. Like, I don't know what I don't know what was made. I know why I was messing with her. She had certain attributes. Certain attributes. And I was just throwing my thing for a second. I didn't hit it. And she was nasty. Anyway, organized. I like an organized girl.  Like, damn! Did you get robbed? Oh, no. That's how you live? Like, I need a girl that's organized. Who takes care of things. And that's what I'm talking about. Organized from her home to her finances. I need that organization because I'm organized. I like things in place. No, I'm not crazy military organized anal. I can be with certain things in mind. But I need a organized woman. Good credit. Now, I like you to have good credit because it shows me that you have been organized and responsible in taking care of your issues. If you got bad credit, can I get with you? Yes. Because I understand things happen. I've had pitfalls in my life, especially when my mother died. I had a one credit. I could buy anything in the world. When she died, that depression and me paying for a lot of things. Bills that got behind because I was paying. But it got really hard. So I understand that. You know what I mean? But I would like you to have good credit. It shows me that you can take care of and you can handle business. You know what I'm saying?  Do I have to have this? No. Because I know that some good people come out of great tragedies and horrible people. But a good family.  Feel like you belong with them. You got what I'm saying? You want to be treated properly. You want a family that when you ask other people, they've got nothing but good things to say about them. You know what I'm saying? That makes you feel good. That when you marry this girl, you've got support from both sides. You know what I'm saying? So that's number 20. Like I said, no particular order guys. So let me know what y'all think about my list. Get at me, email and comment and make sure you subscribe.


I hate regressions, especially when I am to blame. Cisco's use of the Office Interability Testing Suite has been invaluable for finding my regressions, but I would prefer to notice them before my name ends up in a bug report. So in this talk, I want to share my recent practice of asserting defined existing unit tests that will be impacted by each patch. We want to, of course, fix the problem and not just the document that we're working on. And so once I have my patch developed, I add some debug output and assert to find examples of the documents that will be affected by the change and then run a make check. So in the example that we're going to discuss today, we have the top part of Microsoft document. It says, hello world and a table cell. And you'll notice there's no spacing at the bottom underneath word, because it has contextual spacing, which says that if it's the same paragraph above and below, then you don't add the spacing to it. And so in this case, hello has a spacing above, but world doesn't have any spacing around it. In Labor Office, we add spacing below at the bottom. Our theory is that the bottom of a cell, we just ignore the contextual spacing just like you would at the end of a document. And so we have here the adding of the additional space of the lower, but in our case, when it's a doc x and it's contextual spacing, then we don't want to add anything at all. And so we're going to assert the case when we would have a nonzero value that we're adding to the lower part. By running a make check, we found a number of examples and this one was a very clear one that does show some spacing at the bottom of a cell. And so that proves that our theory is not complete. And it actually ends up being a very complex thing. They are logical in the way that they do it, but their logic is not expected and not at all similar to the way that Labor Office does things. And notice that the first cell sometimes has spacing and sometimes doesn't, depending on what occurs outside of the table before it. And the same thing is true on the bottom, although in a different way. And the cells are also not independent. They depend on the cell before them. And the special situation at the end of a row. So some of the lessons that I've learned in doing these asserts is that first, make sure that your assert of course works on the your bug report example. Too often for me, I forget to do that and I have my assert logic wrong and I waste all that time running a check with a broken assert. It's also good to add some debug output before your assert. That can help you with a number of things, including identifying the location of the instance where it's happening in a large document. Can also hint about the need for better asserts that you might need. You might need to assert for a few more conditions or avoid a few more conditions. And can also help you determine whether a document is even worth investigating more if it's just a tiny spacing change in this example. It might not be worth even looking at the document. If there are no matching examples, you probably forgot to do step number one and have a bad assert. If there are too many examples, try to assert only on the interesting or highly visible examples. One nice thing that this can do is you can find unit tests that exhibit the bug that you're fixing. And then you could perhaps use that as your unit tests instead of creating a new one and avoiding a load save operation. So for example, in this document, we might only be interested in a larger space, a greater than 100 instead of just a non-zero space. Delete the unit tests that you run into so that you can run the make check again. And once you hit check in a certain area or a folder, run the tests in that folder sequentially and not in parallel. So you can do that with a make check with the brackets as defined there and I'll run each one one after the other and stop if it ever hits a matching test and then you can just continue on again from there. And then I've also been uploading the patch with all the asserts and the deleted unit tests as a work in progress patch to Garrett. And that is nice for documentation. So if you upload it as a percent WIP, then it doesn't run any Jenkins tests on it. And so you're not wasting TDF infrastructure time on it. In these cases, I also try to add a reply to the commit indicating that the patch that contains documentation, otherwise, it'll probably get lost. It does take a lot of time and effort to run the make checks, but I think the results end up being worth it. And it's helped me a lot to avoid regressions. Thanks.