Hi everyone, here I am Carol Valencia. I used to work as a DevOps, currently I am working in Aqua Security, and I am focused more in Cloud Native and all the best practice that we call Applied Insecurity. Today I will talk about runtime security with EVPF. I will do an introduction. As we can see here in the agenda, I will talk a brief introduction about challenges in container security, the built states and the runtime. Next, we will talk about EVPF, what is this technology that is so many companies that are investing in applying this new technology. And we will see some runtime security use cases, like some attacks on the wild that is happening right now in Cloud Native. Let's continue with the first topic that will be talk about container security. Well, here we have the container life cycle. As you can see here, we have the code, the source code, that it could be like open source code, proprietary code, third party. Also, it could be binaries and libraries, plugins. And we will take this source code and we will try to build another library or in the case of containers, we will build an image, as we can see in the second stage. And after that, we will have a pipeline, continuous integrations pipeline that it will generate another artifacts. It could be infrastructure as a code artifacts like terrafore, terraformations or even our image, container image. So if we have continuous deployment, we could automatize this. And in the case of our image, we will deploy it in some built-in machine or Lambda or even a Kubernetes cluster of Kubernetes. We will have our image in the state of running. Our container is running right now. And in this process that we have, especially the pipelines, we will have some intermediate steps like, for example, validate and try to push the image. We have this step of container registry. When we built this image and if the date is built correctly, we could push and save this image in the container registry and we use it in the next stage. We also have, if you notice the artifacts, that could be the CI artifact and CD artifact. It's another element that we need to take care that we will see in the next stage because this is like an overview of how we built the image and we will see what about security. Well, here we have the container security life cycle. As you can see, we have like new steps. For example, when we will build, we will in the stage of, in our continuous integration pipeline, we could apply static analysis tools. Maybe like the most famous in the past with traditional applications will be SAS, Das, or ACA, the compositions analysis. But right now that we are using cloud native applications, for example, container, we also want to do image scanning to find the vulnerabilities that we have when we build our image, that will be also with the dependencies that we have. And we could also have another scanning tools that could be like, for example, for Terraform or Proformation, that will be the infrastructure scanning that will help us with the misconfigurations are also with some hard coding data or hard coding secrets that could be find with secret scanning. So we have like in this stage of the static analysis, we could add in our inside of our pipeline as a step to do these checkings. And when we talk also right now, we have this new box that is supplying chains because you maybe you heard about the commons attacks that we already having in supplying chains. That means that in this stage of supplying chains, we will need to protect the source code and also the artifacts that could be, as an artifact could be also our CI pipeline or our CD pipeline. This is artifact that we need to protect, for example. When we build our source, we need to prevent some commit from malicious code. If we are talking about to build integrity, we need to ensure sign-in metadata in this build process. So we could analyze the pipeline to really validate if we don't have some misconfigurations or issue insecurity. And also in the artifact of the deployment, we need also to release integrity. Supply chains will help us with these checkings that try to do some controls to create some standards that help us in this stage. But if we see that we have this stage of supplying chains static analysis, but we also will need some tools or steps in our runtime stage that will be the runtime protection. Maybe you already hear some tools like RASP or WAF that they are protecting at the runtime, but they are very specific in some usage cases. But for example, if we are talking about some, the container and we have some attack that is happening at the runtime, we need other tools that help us to identify, for example, some process in the Linux or the kernel that is happening a bad behavior or suspicious behavior. And we need some tools or we need some protections that prevent, even prevent not only the attack. We will see, because the talk is happening, it's the talk that I will explain. It's more about runtime and EVPF and it's in the latest stage. This means that means that we need, it's good that you have these steps in the static analysis that you use SAS, DAS, that you use vulnerability tools, that also it's good and it's necessary that you use some tools for supplying chains, that you are signing, you are creating a bond, you are validated your pipelines. These are good practices that we needed, but we also need tools protection at the runtime because it's in another state that we will need. Together it will be like a more protection from the source until to the runtime. Okay, let's continue. Well, as you can see, we see it in the before slide. We always will have new vulnerabilities that is now as a zero update. So it's always will be, find it also a new misconfigurations that could be in our cluster or in any technology that we are using that we will find that it's some misconfigurations. It could be a whole insecurity. Critical vulnerabilities also it's fine. Continuously it's updating the database with vulnerabilities. That's the reasons that we need some tool for runtime because even if we do the best practice in the supplying chains or in the pipeline, the depthcups, the shift left, we always, we are finding some new things at the runtime because our applications is already running and we need in this stage some protections that help us to mitigate the future alerts, the future attacks that could happen that always is continually discovering new threats. Let's continue with the introduction to EVPF. Here we have a phrase from Brandon Greer. He wrote a lot of material about EVPF. He already has two books that if you want to know more, you can consult. As you can see here EVPF is more than 10 years inside of the Linux kernel. It's already inside of our applications, Linux applications that he's using. Linux, what problem does EVPF try to solve and how it's working? I will try to describe this and how can it help us with security, observability, etc. If we want to understand EVPF we need to understand more deeper the Linux kernel. As you can see here the main two parts, especially to do some difference how it's working our process is the kernel space and the user space. The user space is everything that we are interacting like we have some visual code that is here. We are using maybe Docker that is a client but we are using from the user space. Kubernetes is another client or even when we are trying to create a program like as we can see here we have a Golang and we will create some binary we build it and create some program with Golang or Python or Java but we are in the user space these applications could interact with the kernel space. For example we create some program that they call they need to call some devices, some device drivers or keep some memory, use the memory in the CPU we will interact with the system calls. The system calls is like an interface as you can see it's in the top of communications it's in the middle help us like a bridge between the user space and the kernel space. Here is the importance of the system calls we can think about like as an interface and in the kernel space we can imagine all the main modules all the kernel core that could be like I put some functionalities that it's interesting from the point of view of EBPF like key probes or tracing points that it's functions from the kernel that help us for example you probes interact with the user space and the key interact with the kernel the kernel functions and trace point with some system calls that is interactive we have also some well the kernel core it's very big but I put some interesting parts that will help us with some topics that I will talk in the next slides for example the Linux security module maybe you already heard about App and More or Seccom and these are security models that help us like creating some list like some access controls to create some white listing that help us with security for example try to block some specifics try to block or some special system call that interact with some device they will try to create some rules they help us with security and we also have these low at ball kernel modules that it's another way that we could extend the kernel core functions functions and with these low at ball kernel modules we could try to low at dynamically that this could extend is generally using with device that for example you have some hardware or some device driver and in this common case is when you use this LKM okay this is like an overview that you try to think about when you try to understand EVPF you have some kernel functions in this kernel space and we have the user space and we have the system calls like as interface between both the space and with that I will put some samples about that will be more clear about how is a system called okay for example here you can use the S-Trace command that give you a resume about how many systems calls you need for any activity that you are using for example I am putting cats on text you can see we have like almost 100 system calls that it means like open try to open file right and we have like many systems calls that it has to call when we are using our for example this presentation or using any problem soon we are acting so many with throw many system calls with the kernel so this is like a sample that only can give us an overview that a simple call can call many system calls so as you can imagine the events that is happening at the kernel is thousands of thousands and by seconds so many activity or events and this is the kind of information that EVPF is receiving it's trying to tracking and yeah it's like a lot of events that it's at the kernel level okay so here we have a program imagine the sample that they did before that you have a program that is calling some system calls as you can see this is happening in the user space but our program can communicate with the kernel using the systems calls you can call indirectly like when you the binary it's doing it's not maybe directed like you can see here that I am calling some system calls but for example if we are open a file behind these sections we are calling many system calls that we see in the previous slide in this case I am directly calling using this Unix point to call it can happen in many ways so we can interact with Linux kernel let's continue here we have a diagram about the Linux kernel architecture we will see that the application is in the user space and in the kernel space we have several modules that is specialized in some parts like for example in networking we will have several modules that is specialized in some topics that will interact with the hardware mainly the device drivers and depends on the CPU the characteristics of the architecture of our machine we will need some special core functions kernel functions to interact with this hardware and in this context this is the diagram about the Linux kernel we will try to think about how is creating a container what happens when we create a container in Docker RAM basically when we run the Docker run the Docker is in the user space because it's a client that we are interacting with our shell and when we create the Docker these other container runtimes they will use the system calls to interact with some kernel components like name space and control groups and try to isolate this process because we will run like a few processes inside of our containers that it will be isolated because of the name space and control groups that is belong from the kernel from the and in that way if we can think about at the end the containers is like more process that is running in the kernel in the Linux kernel and we can explore and try to see these events with eBPF so that it will be well let's try to understand how is working eBPF power in the before slide we see an overview about all the main parts about the kernel core but right now we will try to understand the eBPF as you can see here we have like a complete new section that we can start to think about the user and the kernel space and in the user space as unusual we will have some section for eBPF that we could create a program try to interact maybe with some try to create some eBPF code or maybe go along throw some wrapper but just for simple at the beginning we are using some problems when we use some problems we are in the user space but the difference the main difference when you think about in a simple way at the beginning we have some problems that we create some binary that is in the user space that when we create some problem with eBPF this program lives in the kernel space as you can see we have some eBPF program but it is living in the kernel space and living in the kernel space is like he is receiving all the eBPF events you can think about like an event driving in the kernel space so eBPF is like receiving all the events that we see in the before slides they interact with the systems calls that is happening with all the programs but we have some eBPF program that is living in the kernel space getting these events and we could create some programs that is that could be specialized like networking, observability and security when you create some eBPF program you will have like these steps that are in this section that you can see that we will have before start living as a program in the kernel space they will go for an eBPF verifier that will do some shakings and after that we will compile with this kernel that you can see is just in time and the kernel and after compiling we will have an eBPF program in the native code in machine code that after compiling after go for these steps after approve it it will be an eBPF program that is ready to receive these events and work with eBPF map that is like you can think about like a key value that will start some important parts to interact with the old systems calls and we have this eBPF help color will help us to translate these calls that is happening in the kernel but it will as an input with the eBPF programs well I think I try to do in a simple way this definition I hope you understand but if you have some any doubts if it's not clear maybe also with these designs please contact me I would love to receive your feedbacks well here in this slide we have like a time life of the features that was added to the Linux kernel and many of these features that is in the tracing part it's that some of the main components that we you will see in the eBPF programs for example keyproops, uproops, trace points and all these components that is part of the kernel it's using for the eBPF so you can think about that eBPF it's like born like in this year basically because we call the create some compile some program in the kernel space they can use all the other the before features that it's already belong to the kernel to the Linux kernel well here you can see some basic sample about some eBPF program interacting with the networking because at the beginning eBPF it was the next step for the TCP dump the first uses cases it was focused on networking as you can see here we are in the user space and here in the kernel space the eBPF program is is reading the assistance calls about networking and trying to do some sniffer so at the beginning eBPF was focused more in networking but with other features that eBPF maps and also other features CDFP it will be more complete that could interact with also with the Linux security modules and the others parts of the Linux kernel for example here in the next slide well here in this slide we can see uses case for eBPF we will have in the kernel space our eBPF program after is doing the verifier and just in time compiler with this eBPF program could use the kernel functions the kernel modules like sockets you prove that this belong to already to the kernel it's part of some functions that belong to the kernel they will interact with this kernel functions interact with the eBPF program and with that this eBPF program could help us in container security observability interaction detection because we are in the kernel level we have informations about everything about all the systems calls we only need to create a program and start to interact with the specific system calls that depends on the use case that we want to resolve for example container security maybe it will be very important to try to track in the namespace and cgroups other actions like privilege also networking depends on what you are interested you will try to hook this important part from the kernel from the main parts of the the modules that the kernel is interacting for example networking or user space or kernel space I think with this overview about eBPF we will try to describe some security attacks Tom, we will hear some eBPF use cases with security talking about Kubernetes security and with eBPF because we have access to the all system calls and all the kernel events through eBPF programs we could detect or even better prevent several common attacks that is happening in Kubernetes like for example some explotations for credential access someone has access to the service account and with this they could do lateral movements for example and try to steal information because they have already the credentials and they could try to go to the host for example some lateral movement or even if we have some privileged container someone will maybe try to do some mounts or some actions and these actions could be detected with eBPF some container escape because we can see everything that is happening is a system call an event and because eBPF is reading the testing these events we could create some programs focused on security so this is like a use case in Kubernetes we will see here we have another use case that in security maybe you will hear about rootkits that this kind of attack as this meaning of this word root it's someone that has some privileged administrator that with this privilege can do some actions in the levels of our operation system or just a space or current space and all the levels of privilege that we could get access well here maybe we will have more clear about the levels of the rootkits or the types of the rootkits because it will depend of in which part this rootkits is created to restart and we have several hierarchical protections maybe the protection rings that is very popular that you can define how you can get access to the privilege but in a simple way you can see that if a rootkits some program that will have some access to our system could be installed in the user space or maybe using some programs like low adder or using some resource in their own memory or using their own models of the kernel we have some extensions models like the linux security model or the low add wall kernel that they could use also this resource to create some rootkits and also they own the EVPF technology that we use to create some rootkits because at the end any technology also could use it for the adversary ok in the next we will see some protections how can you detect the rootkits with EVPF well here you can see that EVPF could help you to detect a rootkits for example if someone hook as is called table an adversary gains control on the song specific system function it could be like reading a file or writing a song file system and after that the adversary may also hijack the execution flow of other process and the system called hooking is considered a malicious behavior with EVPF you could identify this kind of behaviors and it generally is used by rootkits because EVPF has these ppf events you can recognize this kind of behavior generally in cloth native environments attackers usually execute rootkits on the host if you want to know more about how is happening I am leaving these links that is with more detail how is happening the attack change here and here you can see some rootkits that already happening it's using some open source that people is trying to learn or is from security that it's like testing some feature or maybe you are trying to learn some technology and you build your project and the adversary is attackers use these friendly projects that is not with hacking purpose and they use these repositories that they have for example here is a research about rootkit and that it's used in some real attacks this common thing that you see some repositories that someone is trying to learn that it's published and this is reusing for attacks purpose this is a sample for example you can find it it's a project that is trying to explain how to create a rootkit with load ball kernel modules and it was used in real attacks I will change here here we have another attack that is happening in runtime the file is attacked that it's creating some descriptor it's running the program the malicious program at memory with this if it's running at memory some of the tools like AVs, antivirus or even network tools like endpoints maybe it's common that not attack these kind of behaviors because they only detect base set and file system because in file is you are creating load in the program at memory you can detect or use these traditional security tools it's a difficult attack to detect you have here some explanations how how can you detect using linux for example maybe could use using ld preload or using the own system calls of linux like mainfd create or pitrace and with that they can have the creation of this process at memory here I put this example how easily you can create with the own linux features mainfd create that it was in the before slide you can only call in any program and in that way you can create an anonymous descriptor and you set this to run it to run in a file is mode if you want to be more detailed how to execute it I give you the details in the slide here you have a demo about that I am executing but I am executed in the file is mode using this program run it and as you can see with using Tracy I am detecting this suspicious behavior all the details are to you can do it at your home you can try it it's not a malware it's a benignus process so you can try it at your house yeah here we have that using the explanations that in the before slide mainfd create this call it's happening real attacks as you can see that here is described that using mainfd called even the same program that they use main run but they was used it in real attacks more details you will have about in this block and it was using shuri that basically use encryptions to to be more difficult to detect and with that they use with a malware in the before before demo I use only running a date a benignus process like it's been dated but in that case you can execute any other program in that like a malicious program that could be a malware well that is the end thanks so much this is the tool that I was showing here in the sample thanks so much for being here any doubt that you have it here you can contact me in the link in the description I will be happy to talk more about this content bye


Well, you guys smell that. Smells like there's a rat in my steakhouse, but I thought rats like cheese. It's 3 AM and I'm losing sleep because I can feel this rat scratching my eyes out. Tom Billu is an American entrepreneur, best known as the co-founder of Quest Nutrition, who has a very large audience, well over 1 million followers. I was listening to a recent podcast of his and they say imitation is the sincerest form of flattery and boy, am I feeling flatter by a freshly minted MD, no less. And this MD is doing very well for himself. He now has an affiliate with White Oak Pastures, claiming to be supporting the environment. I find it great that General Mills was kind enough to fund a study for White Oak Pastures. It's even better that General Mills beat their lawsuits against the use of glyphosate in their food products. You know what's more amazing? That White Oak Pastures was a conventional feedlot back in the 90s, but now they're selling you grass-fed beef. I can't wait to buy my formerly feedlot beef from General Mills. We're going to take a look at a couple of clips, then I'm going to show the clip from a previous video I had made, then a brief explanation of what happened. This is an urban legend, urban myth. So there's never been a case report of Vitamin A toxicity from eating food. There have been case reports of Vitamin A toxicity people taking Vitamin A palmitate supplement, but you can eat a pretty decent amount of liver per day and not have Vitamin A toxicity. And with the lack of evidence in case studies as well as raw paleo people and carnivore dieters consuming pounds and pounds of liver without having any problems, I've led to believe that those specific cases are heavy metal toxicity. Now what can we learn from actual cases of hypervitaminosis A? And all of these occurred in supplemental plant-based form, specifically retinal palmitate. This might be the most blatant direct quote. Most of the other quotes, he changed the verbage slightly, but this was practically word for word. I guess he doesn't understand it enough to make his own sentence. The other thing is the corn they're feeding them is sprayed with atrazine, which is this lipid soluble toxin, and atrazine is part of a family of compounds called xenoestrogens, and these are compounds that can affect our hormones, specifically estrogen, by mimicking estrogen in the human body. That meat is also loaded with xenoestrogens from herbicides that are used on grain and even sometimes grass. Atrazine is a xenoestrogenic herbicide and endocrine disruptor. Here is a visual of it causing ovaries to grow in uprogg's testicles. This is great! How nice and convenient was it of me to make a video explaining what atrazine was just a few weeks before he was on this podcast? We can go back 80,000 years and look at stable nitrogen isotope studies of collagen, so basically they look at different types of nitrogen in the bones of Neanderthal and Homo sapiens. And what they see is so much nitrogen, so the ratio of the nitrogen gives us a sense of what these people were eating. Where did you get that study that did samples on collagen? And we can safely say that their main food source was meat. Oh, I know. This was from a video that I made several months ago on what a caveman's diet actually was. Coincidentally, he is making the same reference to cavemen using the exact same study I did in the exact same dietary community. An availability equation. If I can go hunt a woolly mammoth and I can get a million calories in a woolly mammoth, like millions and millions of calories, it can feed the tribe for a week. Or I can go look for tubers. What am I going to do? There's no question what you're going to do in terms of calories and fat. So from a survival standpoint, from a procuring calories and nature standpoint, the amount of nutrition that one room and an animal can give us is astounding. And imagine if this was some of the larger wild game that we used to hunt in packs. Imagine a femur bone that's three, four, five times as big as this. The amount of marrow in one of those bones could feed your whole tribe for probably a day or two. And maybe even more. It's very clear when we experience these foods in their natural state, try to process them, and even taste them when they're raw, this is the diet that humans are supposed to be following. Because fruits and vegetables, these plant foods, weren't exactly excellent sources of calories. This verbiage is almost identical to mine, twisting it slightly, but he still says things in the order that I said them in my video. Kidney has all of the nutrients your body needs. The water soluble B and C vitamins, all of the fat soluble vitamins A, D, E, K2, all of the minerals, elements, and essential fatty acids that your body needs. When we talk about nutrients, we mean vitamins, minerals, elements, and fatty acids. What most people don't understand is that we need to consume animal foods in order to get all of the vitamins, minerals, elements, and fatty acids that our bodies need to thrive. Again, almost identical verbiage, same sequence. I've been saying this for years in my videos, and no one mentioning him blatantly ripping off my motto is discouraging. And so we can use them as survival food, kind of harkening back to our ancestry. The food access, the resources, and the necessity of consuming grains from a caloric standpoint. If you need to survive in nature, and if you're eating berries in the forest all day, it doesn't matter if you have unlimited access to berries, you will starve to death eating fruit. I've never heard anyone else in the carnivore community, outside of my own videos, mention the lack of caloric availability in plant foods, and the need for them for survival. The stomach and the digestive system is an interesting story too. Again, this is conjectural, but we'll entertain it. If you look at the pH of the human stomach, it's actually so acidic, meaning low pH. It looks like carnivores. It doesn't look like an omnivore. The pH of an ape is about 4 or 5, I believe, and our pH is between 1 and 2. But if you look at the stomach acidity of other animals, things become a bit unclear. That's why we have to look further into the digestive system. So over the course of a few minutes, he was explaining the digestive systems of humans versus herbivores, and the layout was identical to my video I did on carnivore versus herbivore digestion, specifically because of the order he mentioned things, from acidity to organ changes to brain size.  I do eat raw eggs. That's scary, you're freaking me out. So here's the thing with eggs. What we worry about with eggs is contamination of campylobacter and salmonella on the shell of the egg. Correct. The inside of the egg is generally sterile. If you're buying eggs, if there was feces on the outside of the egg, ground up into the meat, you're going to have an issue there. Now he talks about campylobacter and salmonella being a cross-contamination issue on eggs one week after I do a video on raw meat safety saying the exact same thing. For instance, if you look at cabbage, it's a good example. Cabbage is a brassica vegetable derived from ancestral or ancient mustard. People believe that mustard was the original, you know, it's this mustard family. So the mustard plant is the same genus or as it's the brassica. So it's the same genus as kale, cabbage, cauliflower, broccoli, brussel sprouts, all these brassica vegetables. But cruciferous vegetables like broccoli, cabbage, cauliflower, arugula, bok choy, watercress, all of these originate from one vegetable at the top of the brassica family. So if we could say that, well, there are dozens of vegetables that we've literally never consumed before, they are all a result of modern agriculture. Is this something we should actually be doing? And when you look at the nutrient content of these foods, considering the availability, it definitely leaves something to be desired. So it's relatively safe to say that I find it crazy that every single nutrition topic this guy talks about is a concept from one of my videos. The way he reiterates the same context in a conversation, it becomes very clear what's going on. The brain and the bone marrow would have been, I think, things that we prize the most. Bone marrow in particular is something that I really enjoy the taste of. It is a food that was prized by our ancestors and one of their favorite parts of the animal. Brain is a delicacy in many countries because it's rich in nutrients. I mean, think about where the DHA goes. Here. That's what we used to make it. And think about all the potentially unique factors in the brain. Is there any truth to the belief that some indigenous people held our ancestors, hunter gatherers, native tribes, in eating certain parts of the animal to give you certain health properties? We know our brains are composed of cholesterol, DHA, omega-3 fatty acids, various vitamins and minerals, but if we consume an animal brain that has a similar nutrient profile to ourselves, wouldn't it make sense that we are nourishing that part of our body? This is another very obvious one. Took the exact quote I said and worded it just slightly differently. You know it's the funniest part about this whole thing? He denied ever watching any one of my YouTube videos, having the nerve to say that he simply came up with these concepts on his own and explains them better. Yeah, apparently not if you have to copy me word for word. If he is willing to blatantly lie about that, what else is this person willing to lie about? Is his whole story made up? Is the whole carnivore diet story made up? Every single thing mentioned on that podcast about nutrition was ripped directly from my videos. In addition to this, I came up with the perfected health podcast a few months back. One week later, rat boy, hey guys, watch my Fundamental Health podcast.  Does he have any ideas of his own? All this man cares about is making money and promoting himself. He has made no educational videos on his YouTube channel. His sole purpose is to steal other people's information and use his connections to network and make himself look good on these large platforms. Not one word that comes out of his mouth is an original thought. The title of his book was stolen from Jason Fung, the obesity code unlocking the secrets of weight loss, the carnivore code unlocking the secrets to optimal health by returning to our ancestral diet. What really disgusted me was the cover of his book.  That was the exact idea I was going to use for my book. I might have mentioned that I was going to do that on a live stream at one point or another or even the illustrators that reached out to me could have been secretly working for him. I don't really know but it really disheartens me. In brighter news, Ratboy is actually moving to San Diego so he can surf more. Yet I'm here killing myself the past three years making YouTube videos trying to improve people's health, helping my mentally disabled sister lose weight, helping my mother who had many health problems feel better and trying to help my father. This scum of the earth comes in, is worth millions of dollars and is using my information. Until I leave this planet, I will do everything in my power to make this man feel my pain regardless of how much it hurts my own success. I was going to try to be happy in this video but out of all the struggles I've had in my life and how far I've come for this to happen to me is my last straw. You know, I wonder what the Washington state medical board would think about him using his medical credentials to consult people on the carnivore diet. It seems like he would be practicing outside of the scope of his psychiatric residency. But hey, I guess if you follow a diet for 10 months and you watch a 26 year old bartender's YouTube videos, that sure beats 12 years in medical school. If you want to actually learn about diet and nutrition, feel free to check out any of the videos that were plagiarized in this podcast. Or you can pay this clown doctor $1,000 for a half-assed explanation of my videos, perhaps maybe buy his book in several months for a complete transcription of my videos. Maybe you can even buy his $300 red lamp while you're at it. Oh, I mean, I guess someone has to pay for his Adderall prescription. I mean, he needs it to focus with all of the YouTube videos of mine that he's watching. And don't be surprised if my channel gets censored further or if this video gets a lot of dislikes. His daddy has a lot of money.   I haven't cried in, I don't know, how many years. I told myself I would never cry again in my life and it really breaks my heart that I had to make this video. I told myself, I told myself for two, three, four months I wasn't going to make this video and it's been eating away at me. I couldn't, I couldn't, I couldn't, I couldn't do it anymore. I'm sorry guys.


Okay, let's get started. Hello everyone and welcome to this online easy build tutorial. We're very happy to have many people register for this tutorial and we hope everything works out well. And this is very useful for you. We'll get started with some practical information for the next couple of hours. So first of all, I would like to thank everybody who helped out with organizing this tutorial. Maxim, Christian, Alan, Oke and myself are actively here and Marcus was instrumental with making the proposal, the original proposal for ISC. And we also got some additional help from Michael, Terje and Miguel. So thank you very much for everybody who has contributed to the tutorial in one way or another. A little bit of background before we get started. This tutorial was proposed for the ISC conference which was supposed to happen this week and was accepted there. But due to the ongoing situation, the tutorials have been postponed until next year. And we figured since the tutorial was accepted that we could go through with it in an online format and still make it useful to people. So hopefully that works out well. We're very happy to get very good attendance for this tutorial. We had 101 registrations, not including some of the people helping out with this tutorial. So that's mostly new people across a whole range of countries, 15 different countries. And we have 16 people from in total, seven different companies as well. So we're very, very happy with this kind of attendance. Here's the agenda just quickly. The times we're showing here are universal coordinated times. So keep that in mind with your local time zone. So we get started with this welcome and some practical information, the general introduction to EasyBuild. Then we'll do installation and configuration which includes some hands-on work. We'll continue with basic usage and actually installing software with EasyBuild which also includes hands-on. Then we'll have a quick break, some coffee or bio break. We'll continue with some troubleshooting of installations. We'll look at hierarchical model naming schemes which actually also includes a little bit of hands-on. We'll look at how to add support for additional software which includes a fair amount of hands-on as well. Then we'll have another short break and we'll move on to looking at how EasyBuild is used at the Ulrich Supercomputing Center in Germany and at Compute Canada. We'll look at how you can contribute back to EasyBuild. We'll do a quick comparison with other tools and we'll wrap up with some information on how you can get help with EasyBuild and any further questions that there may be at the end. So we're gonna try and take some time for questions in between as well, roughly after each part but we'll see how fluent we are in terms of time if we'll have enough time for actually doing that. Some practical information, you've received all of this via email as well. So the event page here has all the links, this wiki page. So you don't have to type over any of these links, you can just click on them through the event page. These slides are available in PDF format in the EasyBuild tutorial repository. The tutorial site itself is behind this link and looks something like this. So if you click this, this is the tutorial website which again has the YouTube livestream. I will get back to this in a second. The streaming as you know is through YouTube, through the EasyBuilders channel and we are recording this session as well and we will make it shortly available after the live tutorial. Then for the Slack channel, I hope all of you have joined the tutorial channel in the EasyBuild Slack by now. I see many people already there, so that's very good. We do ask that if you have any questions, you can ask them in this tutorial channel but to follow up on questions, please start a thread in Slack. So don't just post in the tutorial channel directly but try to keep things organized in threads which will make things a bit more manageable. There's multiple people in the tutorial channel that will help you if you have any questions. So feel free to ask questions as they come up. Also for Slack we will do regular polls in the Slack channel. For this we will use emojis because that's a bit funny and useful and quite easy to do as well. So we will post a question, we will give a range of answers and each of the answers will have an emoji corresponding to it and then you can vote for the corresponding emojis for which answer or answers you want to apply to. We have prepared environment for you that will be very useful for the hands on during this tutorial. It consists of a Docker container image which we have built with a bunch of software pre-installed in it to make the exercises a bit more feasible. You can run it either through Docker directly or through Singularity. This will be covered in the practical, or this is covered in the practical information in the tutorial. The container image contains pretty bare CentOS 7.8 with Elmot 8 already pre-installed. We have a pre-installed software stack in the slash easy build directory in the root of the file system and we strongly recommend you to use Python 3 to run easy build and we will show you how to do that. We also have resources available in the AWS Cloud 9 environment and Christian will now give an overview of how to access this. For this you should use the login URL you received via email in the second email. So the URL in the first email is not valid. Please use the one you got in the second email. So I'll give the floor now to Christian who will show us how to get things set up in AWS. All right, cool. Yeah, thanks Kenneth. Let me share my screen and let me share the correct one. Yeah, I'm sorry about the link that we needed to recent because I screwed something up. So sorry for that. So it's not Kenneth's fault. You should have this link with the hash and when you click on it, you will get to this page here. So it will log in automatically. Christian still have no sound from you. One, two, three. Sorry, that's my fault, cool. Okay. So you will see this dashboard here and we just go straight to the AWS console. So just click this AWS console button, then click here. You can ignore the rest and just go here. And this will just log in to a dedicated account on AWS for this session for each of the attendees and eventually it will appear. And this is a training account. So you can do potentially what you want, but in this case we want to go to cloud nine. So if you go and find services and you type cloud nine, then you will go to this dashboard of cloud nine and we have prepared an environment already. So you should see the next low workshop environment and we had a little mess up. So I didn't rename it, but I think you can still use it. So just if you go here, if you are here, then just open IDE and then we are already at the end of my practical information piece. This will start an EC2 instance with a resized EBS volume. So your root volume will be 100 gigabytes so that we can install whatever we like. It has a two VCPU and four gigabyte of RAM instance behind it. Not super powerful but powerful enough for this occasion I think. And that's about it. So let me wait until I connect and then I show you some two tricks that you might want to do. So now we will have this dark theme and I personally, I don't like the dark theme so let me change it to a more lighter one. So you go here and you have this lights scheme. It's pretty nice. There is a terminal already in the bottom but you can create a new terminal at the top. That's what I prefer to do as well and then close this window or this welcoming piece and here we go. So you have your EC2 instance. There is an editor for text files here at the left hand side as well. That's I think something that Canvas will use as well but that's about it. So just again to recap, you lock in with your login and the hash then you go to AWS console, click AWS console again. This will forward you to the right region and the right console. And Christian, I just restarted, right? So here we go, we are in the management console landing page, just type cloud nine here. A little bit slower, okay? So everyone got to the management console and I can do this. I will do this over and over like for two minutes or so and then you can just follow. So go to cloud nine. You will see an already an environment created, just open IDE that will forward you to the cloud nine IDE. And since I initialized it an hour ago, it's most likely to be stopped. So it needs to start up, which takes like two minutes. And then you are at the same console. You can change the theme of the console just here, go to the preferences icon here on the right top, go to themes and then choose the theme that you like. I personally like the light one, but it's up to you. And that's it, I will restart once more so that the people can follow. And that's a cool thing, by the way. So if your browser crashes, your Wi-Fi goes down, you will still be going to the same exact terminal and the same exact IDE. So if something goes wrong, you will go back to where you left off. Okay, so again, copy in your login URL. This will forward you directly to your team dashboard. Click AWS console once, twice. This will forward you to the AWS management console. Within the console, just go to find services and type in cloud nine, click on cloud nine. This will forward you to the dashboard of cloud nine with one environment already prepared for you. It's called next flow workshop, but please ignore next flow and magically replace it with easy build. Here we go. Open IDE and this will point you to the cloud nine environment. Again, the theme you can change on the right hand on the top right, just go themes and change it and create a new terminal on the top. So you can create a terminal like this, kind of multiple terminals. You can create file up to you. And that's about it. You can also increase the font here if you like. And that's something that Kenneth did, but within here you have the font size. You can increase as well if it's too small. But yeah, that's basically it. And if you have questions, if you are stuck somewhere and feel free to ping me on Slack, I'm happy to help and make everyone like work on the cloud nine environment we provide. So don't be shy. Kenneth, back to you. Thank you very much, Christian. The mine is still initializing, but hopefully everybody now has the AWS environment set up and ready to go. I will also make this a little bit more nicer to look at. So I will change the theme to the white theme and I will increase the font size quite a bit. I'll make this 18 in my case. And there's another one here. And close this, close this, hide this, and open a new terminal. And close these two as well. OK, so let's get back to the presentation. I think Christian did a very good job at showing how to set up the AWS environment. The slides have a couple of screenshots for you. So open AWS console twice. Open the cloud nine environment. Then you see this and then the open IDE is actually the next step after this one. And then you can start a new terminal session. That's good enough for now and we'll look at the practical info in a bit, what we will do there. So the idea is that we will run the Docker container image in this environment, which gives us a bunch of software pre-installed and ready to go. You don't have to type over this command for sure. You can copy paste it from the tutorial page. So here, if you go to practical information and you click the using Docker section, you can copy paste the commands here. So the first one just creates a directory that will be mounted in the container and we will run the easy builders tutorial container that was tagged for ISC 20. Note the copy button here. If you click this, you will actually copy the contents of this box. And then you can go back to the AWS terminal and just paste it there. Has done the creating of the directory here, which you can see on the left as well. If you look at the available directories you have and then we can run the Docker container. So it will tell you the Docker container is not available yet locally. It will start downloading it. And shortly after it will open the tutorial image for you. For people who do not want to use or can use Docker, they can also use Singularity instead, which is also covered in the practical information page in the tutorial. It looks very similar. So again, we create a directory first and then we use Singularity run. We make sure we're in a clean environment that we're not using the home directory of the host, but a new home directory, an empty one. So we don't pick up anything that we don't want in the container image. And we tell it to use this Docker container as well. There's one small caveat here. When using Singularity, there's one of the exercises and examples that will not work when using Singularity. When we hit the hierarchical module naming scheme, part of the tutorial, those exercises will not work there and we'll mention that when we get to that part of the tutorial, what the issue is there. In Docker, everything should work fine. Let me check again. Once all the downloading here is done, it will fire up the tutorial image for you. And you should see a welcome message that has a banner like this showing easy builds and some information about the tutorial. If you have this, then you're all set for the hands-on exercises that we will walk through during the tutorial. So here is a small recommendation in terms of screen setup. This is mostly for people who only have a single screen. If you have two screens, this is less of an issue. But you should keep an eye on the YouTube livestream, which I have here on the top right. You should have your terminal in AWS open, which I did here on the bottom right. And then ideally, you also have the tutorial site open, which I have here on the left. So you can scroll through it and copy paste any commands that you may want to execute in the terminal. And of course, then there's Slack as well. So maybe you can switch on the left between Slack and the tutorial website. This is just some recommendations since there's a lot of things to keep an eye on during the tutorial. The tutorial website itself, which I already showed has a hamburger menu here on the left, which you can click on to get an overview of the tutorial, the different sections. And for each of these subsections, there is a sub menu, which is again a small hamburger menu that you can click to see the different sections in that particular part of the tutorial. And again, please use the copy button in the code snippets that will save you a lot of time and not making silly typos in the commands that you can run. Okay, we're now ready to start the general introduction to EasyBuild. So this is the first part of the tutorial, which is on the tutorial site. Let me show that here. So once you have the welcome message in the Docker container, you don't need the practical information part of the tutorial anymore. And we can jump to the introduction section, which is this part.


Danger, Dr. Banfield. Our story opens in the small town of Benton, located north of New York City on the Hudson River. Two French-Canadian labors are digging a ditch on the grounds of prosperous-looking farm. Monty! Monty! Pierre! Hey, Pierre! Lee, what is it more than me? Come here! There's something I do not understand. Hey, what is the matter, Jacques? You find some gold, maybe? Our mother of Mary. I think perhaps we have found something we are not supposed to help Pierre. Oh, crush yourself, Jacques. It is the body of a man. Suck what is left of a man. Come, we should not disturb the grave of the dead. Grave, you say? Do not be a fool, Pierre. Because one buried one's dead in a field behind a house, with neither casket nor cross to mark the spot, huh? That I do not think. No? Then what is it you think more than me? I think that we will find this is the body of Monsieur Howard Holbrook, who has been reported missing these past months. Come, let us go to the police. Well, it sounds interesting, Mr. Fuller.  Well, there isn't a great deal more to tell, Doc. You see, as representative of the Great Eastern Insurance Company, it's my job to check every detail before I recommend to the home office that they pay Mrs. Holbrook for $100,000. $100,000 is a lot of money. I don't blame you. Still, I don't see that you have any real reason to suspect that Howard Holbrook was murdered. Well, I'm relying mainly on a hunch, Miss Fairfax, and the so far unexplained reason why Holbrook's body was found in a trench behind his former home. You're positive that he was out of Holbrook? Yes, yes. The corpse had, of course, disintegrated beyond recognition. But Mrs. Holbrook identified him by the fact that the third toe of his left foot was missing. Also, there was a watch inscribed with Holbrook's name. Were you able to determine the cause of death? No, there were no marks of violence at all. But still do you think he was murdered possibly by his wife in order to collect the insurance? Well, we have definitely established that Holbrook's wife was spending most of the month of June with her sister in Fairfield. But, uh, Fairfield is only 50 miles from Benton. Couldn't she have driven back without her sisters knowing about it? Well, from June 6th to June 13th, Mrs. Holbrook was sick in bed with a cold. Her sister and some friends have already testified to that fact. Well, that establishes her alibi rather completely, doesn't it? Well, wait a minute. June 6th. That was a year ago. I thought Howard Holbrook was serving a jail sentence at that time. No, you see, Ms. Fairfax, he was given his freedom on June 5th. As you'll remember, Holbrook was sentenced on a charge of embezzlement from the bank of which he was president. Oh, yes. Yes, it was quite a scandal. He'd been appropriating the bank's funds over a period of years. That's right. He had amassed a small fortune, but all of it was spent fighting the charges against him. So, when he was released from jail, he was broke? Yes. On June 5th, he was set free. On June 14th, he appeared at the home of a cousin in Chicago. And he told the cousin he lacked the courage to face his family or society. The next day, he disappeared and hadn't been heard from since. It looks to me, Mr. Fuller, as though you'd have to pay Mrs. Holbrook $100,000. Possibly you're right, Ms. Fairfax. Oh, well, before I make my offer, there's one other thing you must know. Oh, what's that? Well, between June 6th and June 13th, neighbors reported seeing a light in the Holbrook home. And some of the reports stated that a mysterious figure was seen moving about the grounds. And what's your answer to the stories, Mr. Fuller? Well, just this, doctor. When Holbrook was in jail, he made an enemy of a man named Guy Emerson. They quarreled frequently over small matters, even resorting to fisticuffs on one or two occasions. Emerson was released two days after Holbrook. And it's your opinion that this Guy Emerson came directly to the Holbrook home, found Howard Holbrook waiting there for his wife to return from her sisters, and murdered him? No. No, it couldn't have happened that way. Remember Dr. Holbrook was seen in Chicago on June 14th? Oh? As a matter of fact, Dr. Danfield, I don't believe he returned to his home at all. Then what do you believe, Mr. Fuller? I believe that Holbrook was murdered by his wife. I don't know how or when or where, and I've absolutely nothing to go on but a hunch. But my company, Danfield, is willing to gamble $10,000 to have me proven right. In a moment we'll return for the second act of danger, Dr. Danfield, but first, now for the second act of danger, Dr. Danfield. Oh, yes, Rusty? What time did the plane get into Chicago? Oh, in about an hour, I think. And you really believe that these cousins of Howard Holbrook can help us any? I don't know, Rusty. I'm not yet convinced that it was actually Holbrook who called on them a year ago last June 14th. What if it wasn't? Bill, do you know what I think? What's that, Rusty? I think that you feel that this case is as hopeless as I do. You're just pretending there's a chance of proving that Elsie Holbrook murdered her husband because... Well, because... Because of $10,000, Rusty? Oh, I don't mean to imply that you take money under false pretenses only. Rusty, you're wonderful. Don't worry. If I avail the proof that Mrs. Holbrook murdered her husband, I'll not take Mr. Fuller's $10,000. I'm sorry you came way out here to succumb to Dr. Danfield. There's not the least doubt that the man who called on me a year ago last June 14th was my cousin Howard Holbrook. Thank you very much. You've missed a lot. Well, Dr. Danfield, now are you convinced that it was Howard Holbrook who called on his cousin Charles in Chicago? Yes, yes I am, Rusty. Charles Holbrook struck me as the type of man who wouldn't lie. I can't see that it would avail him anything if he did. But you're still convinced you can build up a case against Mrs. Holbrook? Don't be so pessimistic, Rusty. There's an answer to this problem somewhere and we're going to find it. What problem? I don't see that there's any problem. A man is found dead. His wife identifies him. There's no indication that he was murdered. There was no indication that he wasn't murdered either, Rusty. And if he wasn't, how did he die?  Guy Emerson, his prison mate.  Oh? I thought you didn't believe that story about a mysterious figure being seen about the Holbrook place a year ago last June. All right, all right. So I made a mistake. So now I've changed my mind. If Howard Holbrook was murdered, the murderer had to be Guy Emerson. I think we'd do much better if we tried to run down this Emerson person instead of chasing all over the country trying to prove that Howard Holbrook wasn't Howard Holbrook. Oh, do you, Rusty? Well, I disagree. I think we're going to find the answer to our problem at Holbrook's home in Benton. And that's where we're going right now. Very, Dr. Danfield. Your purpose in coming here is too obvious. Well, I'm sorry you feel that way, Mrs. Holbrook. Just what do you think my purpose is? Oh, come. Let's not try to fool each other. Didn't Mr. Fuller of the Great Eastern Insurance Company offer you a sum of money to prove that it was I who murdered my husband? Do you believe your husband was murdered, Mrs. Holbrook? I don't know. There are no indications that he was. You haven't answered my question. Oh, well, Mr. Fuller did offer me some money to work on the case. That's true. Then aren't you being presumptuous to think that I would help you prove myself a murderer? I don't intend to prove you're a murderer, Mrs. Holbrook. In fact, I intend to prove just the opposite. Mr. Fuller, believe me. Yes, I know Mr. Fuller believes you're guilty. I don't. Now, will you cooperate? I don't know what to say. I think what Mrs. Holbrook wants to say is that she doesn't believe you, Dan. No, it isn't that. I... Oh, I don't know. Everything seems so strange and unreal. People have been coming to the house ever since poor Howard's body was found. They all act suspicious. They all look at me and go away without offering any explanation. It's terrible. Believe me, I know how you feel, Mrs. Holbrook. Suppose you look at it this way. You didn't murder your husband, so therefore you haven't a thing to lose by offering me your help. As a matter of fact, you have everything to gain. I... I suppose you're right. What is it you want me to do? Well, I'd like to ask you a few questions, and then I'd like permission to remain here at your home for a few days. Very well. You'll have to shift for yourself, however. I've had no servant for over a year. Everything's run down. I've only been able to survive because there was a lot of valuable machinery and livestock that I could sell. Yes, yes, I understand. Howard Holbrook's plan was to build himself a model farm up here, wasn't it? Yes. We'd only lived here one summer, you know. Howard invested most of our savings. We had great plans for the future, didn't we? Yes, yes. Now, Mrs. Holbrook, are you sure in your own mind that the body that was found by the laborers was that of your husband? Oh yes, I'm positive. Why do people keep asking me that question? Because if you weren't sure, Mrs. Holbrook, the insurance company would save themselves a hundred thousand dollars. Now, about this ditch that the laborers were digging, what was to be its purpose? Well, there's an orchard behind the garage. Howard had had it set out. A neighbor told me that if I kept the trees alive, the value of my property would be much increased. I see. So you decided to plant water into the orchard? Yes. Now, one more question, Mrs. Holbrook, and then with your permission they'll browse around the place. Presently. What is the question? Do you believe that this man Guy Emerson, who knew your husband in jail, is his murderer? I'm not sure. How can I be? There's no indication that Howard was murdered. However, it seems to me that the least the insurance company could do is to find this Emerson person and question him. The police are endeavoring to do that right now. Well, thank you, Mrs. Holbrook. Come along, Rusty. That's if we can't dig up a clue or two that our employer is overlooked. Dan, when you told Mrs. Holbrook that you didn't believe she murdered her husband, did you mean it? I've already told you I meant it, Rusty, and I'll stop asking me. I don't want to change my mind. Yeah, this must be the ditch. Oh, let's skip the ditch. It's almost dark. We can't see anything tonight. Besides, I have some questions I want to ask you. You see, now, if I cut the silhouettes over there, it must be the apple orchard. Well, that means, of course, that the pipeline should run, right? Well... Now what? Well, no surveyor, Rusty, but it seems to me that if Mrs. Holbrook wanted to run water from a house to her orchard, there's spending a lot of money unnecessarily. Why? Why? Because if those laborers kept going in the same direction as they started, they'd wind up at a point between the house and the garage. Oh, Dan, stop grabbing at straws. There could be a dozen reasons why the ditch is heading in that direction. Oh, name three. Well, laborers might have struck a ledge. They might have intended to splice into the pipeline that must run from the house to the garage. Or they might have intended to splice it at the garage instead of the house. Yeah, perhaps you're right. Wearing of your ancestors plum is Rusty. Oh, Dan. Say, it's getting dark, isn't it? Now, say it is. And I'm tired. Good gosh, what's that? I can't get alarmed. It's only a screech owl. Owl? Well, let's get back. I see the owls. They're like that. They're not at all like that, Rusty. All right, come on, let's go. There's as much as we can do in the daylight anyhow. Oh, there's an owl. I'm beginning to see as much as we can do even in daylight. Dan, I wish we weren't going to stay here tonight. Why, are you afraid Mrs. Holbrook will murder you in the sleep? I'm afraid I won't even sleep. Oh, here's the garage. Yes, I imagine those outside stairs lead up to the servants' quarters. Well, Rusty, come on. Hey, look out. Oh, Dan, someone! In a moment we'll return for the third act of Danger Dr. Van Field, but first, now back to our star Michael Dunn for the third act of Danger Dr. Van Field. Rusty, you all right? Oh, I guess so. What happened? I don't know. Someone attacked us.  I didn't see anyone, and I didn't hear anyone either. Hello? Is that you, Dr. Van Field? Is something wrong? Over this way, Mrs. Holbrook. Bring the light, will you please? How's it now, Rusty? Oh, I'm all right. More scared than anything, I guess. Dan, what was it? What was what? Oh, here's Mrs. Holbrook. Over here, Mrs. Holbrook. Oh, what is it? What happened? I heard the girl screaming. Oh, it's nothing serious, Mrs. Holbrook. Someone attacked us. Hold the lantern up a little bit, will you please? Oh, my, you're bleeding. I'll call the doctor. It's only a scratch. No, no, I don't need a doctor. Dan, did you see the person who attacked us? No, no, he got away too fast. He got on my whiteboard. Are you sure it was a he? Am I sure it was a... What do you mean by that? Well, she's upset and frightened. Come back to the house, both of you. If you won't let me call the doctor, I can at least pay that scratch on your face. Well, that's an excellent idea, Mrs. Holbrook. Come along, Rusty. But, Dan, you don't seem to understand. I understand perfectly, Rusty. Come along.  I wish I didn't have to go to bed. I'm scared. Can't we sit up all night? Sit up all night? That isn't going to help me, there's nothing to be frightened of. Well, there is. I don't know what, but there's something terribly wrong in this house. Dan, why do you suppose Mrs. Holbrook left us alone so long in the kitchen when she went to the antiseptic? I think she went to telephone. Oh, here's that awful owl. Telephone? To whom? I don't know, but I plan to find out in the morning. How? Oh, is she telephoning to someone about us? I wouldn't be surprised by a thing, however. Dan, that was a shock. Yes. Come on, there's a window at the end of the car there. It sounded as though it came from the garage. Look there, someone's running across the fields. Oh, he's carrying a rifle. That bright moonlight, it's easy to see. Yes. Dan, what's that in his other hand? I don't know. I think he's gone now. I wonder if... Dan, what does it mean? Oh, I wish we'd never come here. On the contrary, Rusty, I'm very glad we did come here. Let me see now. Yes. By George, that must be it. What must be what? Rusty, I think I'm beginning to see the answer to all this mystery. Yes, I'm sure I am. Well, what is it? For goodness sake, tell me. Yes, yes, it all adds up now as soon as I check a few more facts. Come along, Rusty. We're going to get a good night's sleep and then I think we can clean this case up. I don't suppose it matters that it's only the crack of dawn. I didn't sleep anyway. The least we could have done is waited for breakfast. Well, it's in consider of you, Rusty. Waking Mrs. Lowbrook at this hour of the morning to get us breakfast? Besides, we have more important things to attend to. Well, here's the barn. Let's go in. What do you expect to find in the barn? Well, as we find, my dear, the more airtight our case will become. Well, it seems to be empty, doesn't it? Except for a few broken down farm implements. Well, for even sake, what's that? Looks like a butterfly net. Maybe Howard Holbrook indulged in bug chasing as a sideline. My daughter, that net is big enough to catch a whale. Well, I guess we've checked everything that's worth checking here. Now what do we do? Now, Rusty, we go out and see how many acres of land Howard Holbrook planned to have under cultivation. That's very important. Okay. So, Holbrook could have had 50 acres under cultivation, mostly in apple orchards and potatoes. Now, where are we? Well, we were a lot closer to the solution of this mystery than we were a half an hour ago, Rusty. Uh-oh, who's this? Looks like the farmer from next door. Dan, look at the ugly star running from the corner of the pie. Hello there. Looking for something? No, nothing in particular. We're staying here at the Holbrook farm for a couple of days. Oh, and my name is Dunston, Jason Dunston. I live next door. Well, I don't know you, Mr. Dunston. I'm Dr. Daniel Danfield, and this is my secretary, Rusty Griffax. Well, the crime psychologist, eh? Still trying to find out if Holbrook was murdered, do you think it was murder, Mr. Dunston? I'm sure he didn't crawl in that ditch himself and pull the dirt over him. Yes, you're quite right. Oh, by the way, did you hear a shot last night? A shot? No. Where'd it come from? From somewhere near Mrs. Holbrook's garage. Well, I wouldn't be able to hear it anyhow. My place is half a mile away. Who was shooting at what? Well, we don't know. Tell me, did you know the Holbrook's very well, Mr. Dunston? Oh, I didn't know Holbrook at all. I didn't buy my place until about four months ago. Mrs. Holbrook and I have become pretty well acquainted, though, since then. I bought some of the stuff she sold off. Did you have much to sell? Oh, plenty. Holbrook really went to town when he stopped the place. Oh, the widow would get along, even though she doesn't collect her insurance, though. Dan, look, someone's driving into Mrs. Holbrook's yard. Oh, yes. She has probably a treasure. By the way, Mr. Dunston, is there a public library in the village? Public library? Yes. That's a funny question. And yes, I suppose there is, although I never happened to see one. There's a set of encyclopedias in Mrs. Holbrook's living room, Dan, if you want to look up information. Oh, is there, Rusty? That's fine. That was nice meeting you, Mr. Dunston. Possibly we'll see each other again. Come on, Rusty. You bet, Doc, that if there's anything I can do to help you, let's just let me know. I hope I didn't embarrass Mr. Dunston by staring at that scar on the stage. Yes. Yes. Well, all adds up, doesn't it, Rusty? What adds up? You see, Dan, that man coming across the field is Mr. Fuller, the insurance investigator. Yes, so it is. Hello there, Mr. Fuller. Hello, Doc. Mrs. Fairfax. I thought I'd drop by and see how things were going. Well, you made it bright and early, all right. It's only six o'clock. Well, I'm not used to this country air, Mrs. Fairfax. I stayed at the hotel in the village last night and hardly closed my eyes. Oh, uh, may I headway, Doc? Oh, yes. We've got your mystery cleared up for you, Mr. Fuller. It wasn't too difficult. What? This is incredible. I've seen that you actually know who murdered Howard Holbrook. No, but I know that by earlier conviction was right. Holbrook wasn't murdered. Wasn't murdered? That doesn't make sense. Why not? A man can die at least two ways besides being murdered, naturally, or accidentally. I know, but being buried in that country... Come into the library with us, Mr. Fuller, and I'll show you the final answer in the Encyclopedia National. Let's see now. Am I picky? Yes. Yes. Here we are. I wonder where Mrs. Holbrook is. She ought to be getting up by now. Oh, I'm much more interested in what Danfield expects to find in that Encyclopedia than I am in... Oh, no one's... Yes, here we are. Owls. Owls. What does it say, Dan? Just what I expected it to say, Rusty. Listen. A mother owl will become vicious to a port of insanity if she thinks her offspring are in danger. At such times, they fear nothing or attack any foe regardless of size. Their claws are like steel. Have an advantage because they are entirely soundless in flight. Dan, then it was an owl that attacked us last night. We didn't see anything or hear anything. That's right, Rusty. It was an owl that's responsible for the scar on Jason Dunstan's forehead. On Jason Dunstan's forehead? Yes. It was an unusually deep scar made about a year ago, wouldn't you think? Yes, but it's... Wait a minute, Doc. How does this business about the owls and scars on foreheads tie in with the murder of Howard Holbrook? It's rather an elaborate plan for murder, Mr. Fuller, and most cleverly executed. I'll be glad to explain. Oh, well, come in, Mr. Dunstan. I rather expected you. Where's your partner in crime, Mrs. Holbrook? Right here. Oh.  Dan, they both got guns. Naturally they both have guns. Two people who are about to be proven guilty of murder would be expected to carry guns.   Oh, I didn't do it for nothing. I did it for $10,000. $10,000, eh? Fuller, you must have been pretty sure of yourself to gamble that amount. I was, but I'm still on course. Of course you don't. You're not smart like Danfield. Go on, Doc. Give the guy his money's worth. Tell him how you worked it out. Well, be clear to him. When our Holbrook was in jail, his wife got the idea about the owls. She visited her husband and told him her plan. The day before Holbrook's liberation, she left for his sisters to establish her alibi. When Holbrook got home, the place was deserted. Using the net which we found in the barn, he captured the mother owl. So that's why the net interested you so much. Yes, Rusty. Mr. Holbrook then dipped the steel-like claws of the owl in a powerful poison called curare. Poison? Then that's why Holbrook's body showed no signs of violence. You're almost right, Mr. Fuller, but not quite. After poisoning the owl's claws, Holbrook released the bird and sat back to wait. Yes? For what? You know for what, Mr. Dunstan, for the arrival of his convict friend Guy Emerson. Well, then it was Guy Emerson who murdered Holbrook. Oh, no, Rusty. It wasn't Guy Emerson who murdered Holbrook. In fact, it wasn't Holbrook who was murdered. It was Emerson. What? I mean, the corpse that was found wasn't that of Howard Holbrook at all. That's right. The corpse was that of Guy Emerson. As a matter of fact, this gentleman here who was pointing the gun at me and who calls himself Jason Dunstan is actually Howard Holbrook. Oh, Mr. Fuller, did you tell your men to surround the place? What? Surround? Good, good. Rusty, step away from the window so the policeman can shoot. The guy? Howard, it's a trick. Is it? You better shoot now or you've got a chance. In a moment we'll return for the conclusion of Danger Dr. Dunfield. But first, now back to Michael Dunn for the conclusion of... Oh, come in, Mr. Fuller. Mr. Fairfax and I were just about to leave. Is everything taken care of? Yes, the local police department took them both away. Oh, by the way, Doc, before you leave, I'd like to hear the end of the story. Well, there isn't a great deal more to tell. Holbrook obviously invigorated Guy Emerson to a spot near where the owl had its nest. He out of tech, gouged Emerson about the face and the poison took effect, killing him. Then what? Now then Holbrook transferred his watch to Emerson's pocket and severed the third toe of his left foot. Afterward, he buried him out behind the garage. And then Holbrook went to Chicago, called on his cousins and announced he couldn't face society and was going to disappear. Yes, yes, that's right, Rusty. He stayed out of sight for a while and then returned to this town in both the adjoining farm. No one recognized him because few people had ever seen him in this neighborhood and because his face was disfigured by the scar. Well, I guess that explains everything. Oh, who got you to thinking along those lines, Dan? Oh, great many things, Rusty. But chiefly it was the ditch going in the wrong direction and netting the barn and the scar on Holbrook's face. The scar? Of course. It's not unlike the one on your face, Rusty. Only his was deeper. Then I remembered that after we heard the shot last night, we no longer heard the hoot of the owl. Holbrook shot the owl? Yes. Well, Mrs. Holbrook knew we'd been attacked. She called her husband and told him to shoot the owl just in case we got suspicious. Oh, and then when you saw the scar on Holbrook's face, you reasoned that he must have been attacked by the owl when he captured it to dip its claws in poison. Rusty, you're 100% right. You're always right. I don't know what I'd do without you. As a matter of fact, I don't intend to do without you. Now, come on, Rusty. We've got $10,000 to spend. Let's go.


It is my belief that a globally aware and socially conscious leader is a loving human being, educated and experienced, who through action brings their dreams of contribution and solution into existence, changing the world and inspiring others with contagious hope. Before I came to university, the only thing I ever finished was primary school. The way that I have participated in my classes has been altered from the fact that I felt like I belonged. I sit in the front row and I engage with my lecturers. If I wasn't in the program I probably would have sat in the back corner and not been as confident to speak to other people. And that comes from walking down the hallways and having staff members have been academics recognise me and knew my name. I got the first year prize faculty award for academic achievement. I put on a commendation list for the second year. I've just had so much experience through the program to allow me to look at myself in the mirror and smile. This scholarship program has made me really value my culture. It's just made me feel proud to be who I am. Something that has stood out for me was definitely the Wollumbaya Cultural Camp. That was a highlight for me being of Aboriginal background and unfortunately growing up not quite connected to that. It was very satisfying having the non-Indigenous scholars engage and appreciate Indigenous culture and values just as much as the Indigenous scholars. Everyone just came together and there was no cultural divide. It was just the best experience. I think my goal of wanting First Nations voices incorporated into the Australian legal system has significantly developed through this scholarship program with my law and development studies degree behind it. As an Indigenous Australian woman I would love to represent and work with not for but with other Indigenous Australians. When I first started the Marmalay Scholarship Program I connected with some of the program's values and I thought that I had a wide view of the world. I think that it's massively broadened the way that I look at the world and it has really facilitated the kind of social worker that I will be. I think I will always take a piece of Marmalay with me. The things that the scholarship program have offered me will have a ripple effect. With how many scholars will go through this program I think there'll be big changes and small changes and all different kinds of changes that are rooted in the program's values but I think there'll be loads of little seeds along the way. To meet Jack Maher again in 10 or 20 years time and to just let him know how big of an impact this scholarship journey has had on me would be great. All the scholars come from different backgrounds and different degrees. The change that we can make in the future is like endless and limitless in its possibilities and reach. You know it's nice to know that you're special but it's good to realise that you're special because of how you see the world not because of how the world sees you. Everybody has something to contribute whether they've been lucky enough to realise it yet or not.


Good morning, Hank. It's Tuesday. It's Question Tuesday, the day that I answer a prime number of real questions from real nerd fighters. Let's get right to it.  This painting, which opened me up to the idea that there might be some kind of, like, direct form or expression for the deeply abstract and difficult to describe problem I have inside my brain. What's your third favorite type of rock? Um, Dwayne Johnson, in role of Gibraltar. The Rock of Gibraltar is my third favorite type of rock. Any news on the Looking for Alaska series? Yeah, so my first novel Looking for Alaska is going to be adapted into a limited series on Hulu. It's still happening. I've read the script for the first episode. It's great. And that's about all I know. Oh, I do know one other thing, which is that in addition to not casting movies, I do not cast Hulu shows. Favorite song by the Mountain Goats? It's always changing, but at the moment, my favorite is a song called Weekend in Western Illinois. How do you measure success? What did I learn and who did it help? What are you geeking out about these days? This novel by Tommy Orange, Dr. Benji FM's YouTube series in which he is the manager of a fictional football team, I have never been so invested in a series of pixels and the new season of the podcast In the Dark. Best prime number? I've always been partial to 37. Hey, why don't any of your books have a prime number of chapters? Right, so that is an inside joke I have with myself. All of my books have a number of chapters that is equal to a prime minus one. The Fault in Our Stars and Turtles All the Way Down both have 24 chapters, 23 is prime. Will Grayson, Will Grayson and Abundance of Catherine's both have 20 chapters, 19 is prime. Paper Towns, if you count the Prologue, has 32 chapters, 31 is prime. And Looking for Alaska has 60 chapters, if you count the Authors Note, 59 is prime. Now that I'm saying this out loud, it's a little weird. Wait, what other inside jokes do you have?  Books take me a long time to write, so I have to find a way to entertain myself. Like, one example is that I use the word deadpan way too many times in Looking for Alaska, and so in every book since I've used it exactly once. Are you writing a new book? Sometimes, but not usually. What are your most used emojis? I'm not sure what this says about me. When does the Project for Awesome start this year? December 7th, so mark your calendars and block out that weekend if you can. This is a question from my four-year-old kid. Can you eat light?  Why do people think pineapple pizza is bad? I wrote half an episode of my podcast, The Anthropocene, reviewed about this link in the doobly-doo below, but did you know that pineapple on pizza was invented in 1962 by a Greek immigrant living in Canada who was inspired by Chinese cuisine to put a South American food on an Italian dish? Pineapple pizza is peak Anthropocene, for better and for worse. What are you excited about right now? I really love making The Anthropocene reviewed, actually. Also, I am so, so excited to go on tour with Hank in September. I don't know the next time we're gonna get to tour together, and I love it, so I'm just gonna try to relish it. I should say, by the way, that tickets are selling out in many places, so now is the time to get them at HankGreen.com. How excited are you for AFC Wimbledon's new season? Very. Also, all our advertisements in the stadium are now advertisements for an absolutely remarkable thing, so Hank, you'll definitely be reaching that coveted demographic of third-tier English football supporters. And finally, are you ever gonna win at Fortnite? Right, so I play Fortnite as a pacifist over on Hank Games because I refuse to let the Epic Game Company turn me into a violent monster, and I will continue to play Fortnite as a pacifist until I win, or else people just get bored with Fortnite and stop playing. Probably that one. Thanks to Tuataria for making this glorious pizza-john in Fortnite Playground mode. Links to everything discussed in this video in the doobly-doo below. Hank, I will see you on Friday. P.S., if you count the intro and the outro and this, it's a Prime Plus one. Bye!