is he's good enough where he can get away with it. But like Aziz Ansari did it on the last season of Master and None where it's like, when you have all that creative control, you have a lot of these really, really talented people that are like, no, I just want to tell a little short film. I just want to make a 15 minute short film. And at least Atlanta does it with its main characters and not like just random side things that are invented. There are definitely episodes of Atlanta where I'm like, what the heck? But I find it very compelling. But sometimes I'm like, I don't like what they're doing right now, but I still find it compelling that they're doing it. It's, to me, the best episode of Atlanta or the one that kind of encapsulates that gray area on the Venn diagram that it kind of exists in is that club episode from the first season with like all of a sudden, there's like trap doors and invisible cars and all these like very silly cartoony sort of things in this very realistic sort of world, basically. But I liked the most recent episode. It was good. The most recent episode was so good. So good. I also didn't like the, I don't know what we would call it, the recluse episode. Tommy Perkins, was that his name? Tommy Perkins, yeah, yeah. Was it Tommy? Teddy, Teddy Perkins. Teddy Perkins. I was like, I don't know what's going on right now. I mean, wow. I really like don't, like this is high art. But I don't really understand what's helping. The operative word. I'd be an operative word, sure, yeah. Look, if they're going to take, by the way, did you read some of the behind the scenes on that episode? Uh-uh. No, no, no. He stayed in character off camera. Teddy was in character and nobody knew. Donald was not around. It was just Teddy. Teddy worked with the director. I think it's obvious, but maybe that's just because I saw the, you know, maybe if I was, you know, on the lot somewhere, I would be like, who's that guy? Yeah. I thought it looked like him. Well, no, everybody, no, I mean, people knew, but he was not reacting. Oh, I see. Teddy. He was Teddy. So you are acting, you are acting with Teddy. We're not acting with Donald.  And then we can just sort of start experimenting in a weird way. What do you think Didrip is all about, Sarah? They can acclaim. Didrip. Didrip. No. Didrip. Didrip. And then we can kind of like shorten it to D-Drip. Yeah. Talk about my tech news. D-apostrophe-rip. Yep, sure. Yeah. Tech beat Drippin'. All right. You guys, it's time for the news. Let's do it. It's about time for the news here. Let's do it. Well, here we go. Everyone ready? Everyone ready for the news? Just we press. What is it doing? Daily Tech News Show is gonna start over again. All right, my bad. It's my bad, y'all. It's all right, I took too long to start. Too long. I faked you out. I faked you. Pump faked. All right, here we go. Daily Tech News Show is powered by you to find out more. Head to dailytechnewshow.com slash support. This is the Daily Tech News for Monday, April 23rd, 2018 from DTNS headquarters in Los Angeles. I'm Tom Merritt. And from Studio Feline. I'm Sarah Lane. Welcome, California. I'm Justin Robert Young. Please welcome our producer, Roger Chang. Hello. Roger. Roger. Justin. Yeah. We're gonna talk about robots today from Amazon. Think about it like this. Kindle, fire, echo, robot. That's the timeline we're gonna evaluate. Let's start with a few tech things you should know. Here's what Tom was alluding to. Move over, Roomba, because Bloomberg reports it's worth to say Amazon is developing a household robot. We're gonna talk a lot more about what this means a little bit later in the show. Media research estimates music sales for artists without labels grew 27.2% in 2017, making it the fastest growing music segment. Media estimates that revenue based on artists who distribute through platforms like Tunecore, CD Baby, and Bandcamp are the reason for the search. Monday, the US FCC's repeal of the open internet guidelines took effect. The FCC has now officially reclassified ISPAs to be information services again. They're no longer telecommunications service magically. Boom. US Federal Trade Commission will now handle consumer complaints about ISP practices. Right before the show, Alphabet's latest earnings report came in $13.33 per share on $35.15 billion of revenue, $31.15 would be pretty bad. Anyway, they beat expectations of $9.30 a share on $24.75 billion. So quite a jump over what the street estimated. We'll talk about this a little bit later tomorrow when we have time to parse the information. Yeah, a lot of people thought privacy was gonna, you know, gonna hit them, but no. That's all directed at Facebook. Who can you trust though? Who can you really trust in these tech companies anymore? Well, Justin, talk a little about that. Thanks, Tom. A SurveyMonkey recode poll asked people in the US which tech companies have the most positive impact on society tying for first place with 20% was Amazon and none of the above, which is a, I don't know who invested in none of the above but they're doing great right now. Google came second with 15% followed by Apple with 11, Facebook with 10, pulling up the rear. The survey was conducted April 8th and 9th. I mean, pulling up the rear out of those four, but I'll be honest, April 8th through the 9th is after all the Cambridge Analytica stuff had heated up. We were in, I was, I checked on, I think April 8th, I wrote here are the latest allegations against Facebook. Like we were already, you know, in the groove of like, there's daily allegations against Facebook. Facebook's number four, they're in front of Microsoft. They're in front of Tesla. They're in front of Uber, Netflix, Twitter, Snap, Lyft, granted, most people are like, yeah, I don't think any of them have a positive impact. Well, not most, I guess 20%. It's, none of them have above 50% being mentioned. So it's kind of spread out.  And in some sense, some more than others, I suppose, it's interesting that Amazon is still writing that, yeah, and maybe it's because, as we'll talk about a little bit later in the show, they're innovating on the hardware side. Google is as well, but Amazon, perhaps more so, at least as far as the general public is concerned, to the point where it's still kind of exciting and new and convenient, Amazon Prime is the best thing ever. So that kind of data collection that Amazon is doing seems to be going under the radar a little bit. I think people can understand and fully are comfortable with the 360 of their relationship with Amazon. I give them money, they sell goods cheaper, they get them to me early if I pay a yearly fee. That is the primary way people interact with it and they get it from STEM to Stern. They don't, yeah, they don't with Google. You don't quite know how Google makes money. We're finding out how both them and Facebook actually make cash and Apple, people like Apple, but it's a luxury good. You're never gonna, that's never gonna be 100%. I love Apple for the people that can afford it. Amazon brings you Christmas every day, right? It brings you your birthday every day. When you interact with Amazon, things show up and you get to open them and you get things. Google, I mean, they give you email that you have to deal with and spam and search results. Like, it's not the same positive hit. Beaker here and there, but it's not the same. Everybody else, Facebook, Twitter, they're all giving you grief. Like, oh my gosh, look at all these complaints from people I follow, right? It's like Facebook, baby pictures, Amazon, cat foods. Absolutely. And by the way, Amazon did deliver early something that I ordered yesterday, a Amazon Echo-enabled coffee maker. Whoa. Okay. Very excited about it. Also, my wife works at Amazon, so we should probably stop be gushing about the company. Well, moving on, this is a bit of a poor out of little looker for the Web 2.0 crowd. A photo storage site Smugmug has purchased Flickr from Verizon's Oath, Oath, of course, is the combined company of AOL and Yahoo, which is now under the Verizon umbrella. Smugmug said Flickr will continue to operate separately, at least for now. Smugmug was founded in 2002. Flickr was founded in 2004. And I looked it up and I was surprised because I didn't remember that it sold to Yahoo in 2005. Oh yeah. I thought it was independent for a lot longer than that, but hey, you know, how quickly we forget. Well, and you know, it's one of those things where you've seen Flickr's fate go where our understandings of what was valuable when it came to photos online. Flickr was a place where the primary Flickr user was uploading what was thought to be high quality photos, which took up a lot of space. And now the idea of, oh, I can store all my photos on this thing that's easy to find and share. That's not where photos turned up, went up, going. Well, and Flickr was going to Instagram and Snapchat. And Instagram killed Flickr for me. Yeah. You know, I didn't want it to. I actually used Flickr as a cloud storage service, honestly. In fact, that's why I just renewed my Flickr Pro account. Not really because I haven't even been to flickr.com and looked at any of my collections in a long time, but at one point I was like, well, you know, if my house caught on fire, at least all my photos would be on Flickr still. And that's just, you know, I have so many other options now. I can't believe you guys are not talking about text America and mo blogging in relation to this story. No, we could. The what man? Would you like us to? The thing that I can barely remember preceded smug mug. I still have all of my data from my text America mo blog. Do you really? Oh, I do. Yeah, yeah, they let me down on it. All right, let's talk about dreams. Motherboard reports on research from a team at MIT led by Adam Horowitz to study the effect of hypnagogia on creativity. Hypnagogia is that state you pass through when you're not awake anymore, but you're not quite fully asleep. You often have little microdreams then. Isn't your Delaware? Delaware? Different kind of state. Different state, different kind of state. The hypothesis is that creativity is boosted during that stage. Is that better? Yeah, sure. Stage of sleep. The study uses an Arduino device called Dormio that measures your muscle tension, heart rate, and a few other things. There's a phone app that then plays a message that tries to incept something into your hypnagogic state. Remember to think about a rabbit is one example. And then once it detects that you're starting to get into the state, it says you are falling asleep. The idea there is to keep you from going all the way to asleep, but keep you in your hypnagogic state. And once you're there, the app starts asking you what you're thinking about and records the responses. Participants in the study have mostly scored higher on creativity tests after using Dormio. Horowitz will present his research this week at the Computer Human Interface Conference in Montreal. That is fascinating. Isn't it, though? I had a crazy dream about a song. I wrote a chorus to a song and I told Ashley about it. And during exactly one of those, like I didn't know whether I was awake or asleep kind of dreams. And she was very nicely, very nice. She just told me to go back to sleep. There are all kinds of creative people have talked about trying to take advantage of that state. Thomas Edison used to hold ball bearings in his hand so that when he got to that state, his hand would relax, the ball bearings would fall, it would wake him up and he could remember what he was thinking and then write down his ideas. Huh. I mean, I've definitely gone through periods where I tried to write down my dreams right when I woke up, which if you don't do it, they'll go away. Even if you think you'll remember them later, at least I don't. You won't, yeah. But yeah, I mean, there are definitely a lot of particularly disturbing dreams that I have where I'm like, I'd love to try to figure out what the theme is here, because nobody likes to have a nightmare. For example, last night I fell asleep watching Barry and I think the show, like there was a man's voice on the show and I woke up on the couch being like, thinking there was a man standing above me and the cats are all freaked out and everything, but it's like, where's that coming from? I wonder if that was hypnagogia where you were being incepted with that. Right. Because it was fairly early, because the difference between hypnagogia and real sleep is you're not in REM sleep, you're not fully asleep.  Yeah, and people can sometimes answer questions and talk in that state. Right, right, yeah. Also, sometimes what people think are the experiences that folks have with ghosts or alien. Scientists at the University of Washington had developed a video streaming method that uses 10,000 times less power than traditional method of streaming videos from wearables. The process uses backscatter to send 720p video to a nearby PC or phone. The prototype is limited to 10 frames per second at distances up to 14 feet. If that can be improved, wearable cameras could have smaller batteries and generate power from radio signals. I mean, or like you wouldn't even need a battery if you can generate power from a radio signal and if that's enough power, that blows up what you can do with wearable cameras because you don't need to carry around a heavy battery in your glasses or your whatever. You know, geez. I mean, this is how we get to the point where literally everything is filmed at all times, right? When we have cracked this last hardware challenge of being able to transfer the data somewhere where it's recordable, that the battery power is so small or agile that it can be anywhere at any time. It can be used for ill or good, right? There are lots of situations where having a live video stream can help with research. It could help with monitoring. That aren't nefarious, but yeah. Yeah, I don't mean to say that it's bad. I'm here to say it's inevitable. So let's all start brainstorming ways that we can be better and more responsible with it because it is coming and it will be here before we know it. And that sci-fi idea of the little thing that you stick on your face that does the video and you can barely tell it's there so you don't even have to wear glasses or anything, that's not possible unless you can do this because we don't, or if we come up with a really great way to make condensed batteries, which is even farther off. This could make that happen. Moving on, Apple's acquisition of Music Identification Service, Shazam, still one of my favorite apps ever, is now facing an EU probe with antitrust regulators concerned the buy is designed to lock people into Apple Music. Yeah, don't say EU regulators. The EU said, I said, September 4th, deadline to determine if Apple is getting unfair access to commercially sensitive information about users of rival music streaming services. And if Apple Music competitors might be harmed, if Apple were to stop Shazam, referring customers outside its own ecosystem. You know, I remember Shazam used to have more options than the last time I used it. I've been sitting in the back of a Lyft, listening to music that the driver was playing and going, oh, that's a really good song. I wonder what that is. I would tap Shazam, it would bring up what the song was. And then I could add it to Google Play Music immediately. Now when I do it, it only shows Apple Music and Spotify. So I don't know that the acquisition is the problem. I feel like they were already starting to clamp down. You know, I noticed that too recently, and I figured, and I don't know if this is true, that it was because at one point when I set up, you know, here are my accounts on various services. I just didn't have a Google Play or Spotify account. Oh, yeah. So now it's like, that's my option because that's actually the one that it can dump me over to.  However, if it does mean that there are no other options once Apple officially acquires Shazam, I get what the EU is saying here.  It didn't go away there. And Apple is just as likely to shut the thing down and just incorporate it into their own software. Oh, yeah.  So I don't care if Shazam goes away and it gets built into Apple Music. Oh, I care. Well, of course, of course. You know, again, it's one of these things where it's like, if you're in the ecosystem, it doesn't matter. It's just a feature that goes somewhere else, right? You don't care about my well-being, Sarah, come on. I care about your well-being. I just care about mine more. I just don't remember the song that would encapsulate your disappointment because you can't play mine. Because Shazam wasn't working for you anymore. Exactly, yeah. And there are others like Soundhound does a similar thing, but Shazam's just really good at this. So, I mean, so much data. They have been, and Sarah, you nailed it, man. Shazam was one of those first apps that just made you realize what a good app could do. Because it was magic. It was magic to me. That and the mobile web being able to settle sports arguments at a bar or restaurant with your friends was like, okay, there's pre-smartphone and there's after-smartphone now that these things that would forever be a complaint and argument can now be settled instantly. All right, folks, if you wanna get all the tech headlines each day in less than five minutes, the compressed version, we don't need extra battery power to do it. You can get it from Daily Tech Headlines on your Amazon Echo, on your Google Home, on the Anchor app and also at DailyTechHeadlines.com. Bloomberg's Mark Gurman and Brad Stone. That Mark Gurman, man, the hits just keep on coming. They're reporting that sources tell them Amazon's been working on a project called Vesta. Vesta, the Greek god of the hearth and home. Project Vesta is working on a domestic robot. Now, Amazon does have a robotics section for warehouses, right? And we've talked about that before, but this would be a consumer product. Greg Zaire, who runs Amazon's Lab 126 Research and Development Division, is supposedly overseeing the project. That would make sense.  They did the Amazon Echo. So they have a history of developing this stuff and their jobs page has several listings for jobs involving robotics. The sources are telling Gurman and Stone, robots may end up in Amazon employee homes by the end of the year and be available to consumers by sometime next year, possibly. So Amazon is in such a great position when it comes to this, because A, they know how many of these things sell. And so they know exactly what they're going for. They probably know exactly what price point they wanna sell it at. And this is, their internal division is, all right, knowing all these definite factors build us the best thing that you can. And their track record there, like you mentioned, is spotty. For every Echo, there's a fire phone.  But they know the value of that front page. They know the value of their email system. They will be able to blow out whatever they have and be done with it and iterate and be on to the next one. Of all the blogs I read this morning about this and a lot of the blogs were like, okay, I know what you're thinking. Wow, I don't need a home robot. So here's an example. The robot can get you a beer from the fridge. That kind of thing. Where I'm like, ah, it's right there. But then I kind of thought about, okay, beer ha ha aside, accessibility for a lot of folks where getting something from the fridge or cupboard or whatever might be way more of a hassle than having the Vesta robot get it for you. It's like, okay, this starts to make a little bit more sense to me. And that is what robots are doing right now in a lot of places. Japan companies, Japanese companies generally leading the way. SoftBank has a few of these products. There's several other companies that have these products for assisting people, right? Amazon either is doing what they did with drone delivery. Although I don't think they are because this is sources say, right? But with drone delivery, they made a big deal out of something that other people were already doing and trying to make it look like Amazon was inventing it even though they weren't. This, because it's behind closed doors, I think they're really saying, what's the next step for Amazon voice services? Instead of talking to your Amazon Echo that sits over there, what if it's following you around?  Can, you know, I'd be very interested what they have found useful that it can do beyond just accessibility. And I'm not trying to minimize accessibility, but if they want this to be an Amazon Echo level product, it's gotta do a lot of different things. Well, and it's gotta compete with something that is fairly intense and well entrenched. So right now you can contextualize what a Roomba is. It just does a cursory job of cleaning your floors when you're gone.  I've never gotten the Roomba to work for me because I always have too much weird stuff going on on the floor. So I'm right there with you. Yeah, so if that is where there's no matter what and when you're seeing it in the headlines, that's what we were gonna think of when it comes to the price point. So you have to say, all right, how can we over deliver at the average price point of what a Roomba is going to be? And I think that will determine how successful it is. It's Amazon voice services plus Roomba plus X, right? And that's that X that I'm like, 126, what do you got? But right now, so I'm on Amazon right now, just strolling through and I'll tell you what, these are pretty high.  So, you know, if they can come in anywhere between that 250 to 500 range, now the question is, what is that killer robot? Man, we're on the way now, hold on. We're on where it's, what is that a very helpful robot? What is the killer app for the helpful robot? It's like the Roomba, the Roomba is such a great example of something where it's like, I mean, it's kind of silly. Like it's a little bit apples and oranges, but the Roomba was the first robot that a lot of people, you know, Tom and Justin aside, because they have too many things on the floor, we're like, this is amazing. Yes. I never have to vacuum. It does a really good job. This is great. I'll never go back to the old way of doing things. And then you think, okay, well, so there's that functionality. Can you then talk to the Roomba or, you know, the Amazon equivalent of that and get the weather for the day or when the next NBA game is on, things that I ask my smart speaker all the time. And then it's like, okay, well, what's the next thing? What's the next thing that I actually need that I don't realize I need yet, but I'm gonna love once I have it. Does the mail, but even then it's like, Then you might have to go at sat, like my mail is like way downstairs, that would be crazy. And I have a hard time believing that they're gonna get into like articulated arms. That's where I'm getting hung up, right? Is the echo with smart home can do a lot of things that you would think, oh, I'll have the robot do that because it's just, you just have connected things, right? You can unlock the door for someone with Amazon products right now. You don't need a robot to do that. So what is the thing you need a physical robot wandering around to do? I mean, Sarah, you hit the only one that I'm certain of, which is assistance, right?  Or maybe, you know, again, it really depends on what your floor plan looks like. But right now I'm in a room where I actually have a Sonoma speaker that I don't have set up, but I'm far enough away from my Amazon speaker that if I, like I'd have to really yell, you know? What if it's more of like, instead of having a speaker in every room, you just got a robot that's wherever you are in your house. Well, I mean, really, but is that? But then you're gonna trip over the robot, it's never gonna be fast. Just get a six pack of Echo Dots, right? That just seems easier. Yeah. I don't know. I don't know. I think what would be interesting is if they could do it as sort of a device, you know, even if you have home security that you can access on your smartphone, what if you left something plugged in? Do you really want to drive like an hour back to your house and plug it because you're worried about it? When you could have something there to kind of ancillary, like do that for you, those small tasks, like those, like did I lock? You just nailed it for me. Did just a mobile security camera, a mobile security camera I would use, I would have in my house, it would tell me whether or not the door was locked, it would tell me whether or not the birds were in the cage. I could roll. Is the curling iron still plugged in or not? Yeah. If you had a single arm or an apparatus that would allow it to do a limit, like even if you had to put tabs on your plugs to allow the robot to unplug it for you, that would still be huge because there is a tremendous level of emotional comfort knowing that you can do something remotely even if you're physically not there. And Amazon's the perfect company that you will trust Amazon to keep your data secure and they would run an app that you would want to download. Right, it make our lives better. Yeah, smart outlets. You have smart outlets already. If this thing is like, oh, you just make sure you have smart outlets and then it can deactivate any of them if you leave something plugged in or it can turn off your smart appliances. Yeah, I think you nailed it, Roger. I think Justin's right. All right, get on it, Lab 126. We can't wait to see what you come up with. I'll see you this Christmas. Oh yeah, by the way. And I would say 60% chance that this is total garbage because like, again, they take a lot of hacks. I don't know, man. If it weren't German, I'd say 60%. I'm gonna say 40%. Oh, no, no, no, no. But even the reports real, I'm saying the product. Oh, that they just, the reports real that they're working on it but that the product just doesn't ever. Or it comes out and it's a fire phone. Yeah, I mean, if they're testing it in employee homes and the employees are like, this is a terrible idea. Sure. Might not see it in 2019. I don't know. I kind of felt that was gonna be the case about the Amazon Go convenience store. And then my wife has actually shopped in one and she's like, yeah, totally worked. So who knows? Oh, how about that? Hey, thanks to all those who participate in our subreddit. You can submit stories of vote on them at dailytechnewshow.reddit.com and try out our Facebook group. If you're into the Facebook thing still, facebook.com slash groups slash daily check news show, daily tech news show. Daily check news show is a very good show about check news for people interested in the Czech Republic. That's not us. It's daily tech news. Payday loans. Or payday loans. Or that, yeah. Let's check the mail bag. Let's do it. The army is not doing the predatory loans. John from Pendleton, South Carolina keeps this whole Edison cylinder conversation going that we had last week. I got a lot of good feedback from people. John says, I just recently reread an article about the progress of a project run out of UCSB. That's the University of California at Santa Barbara that is doing exactly this. Sounds like they may be able to help. This was Allison's original query. What do I do with these Edison cylinders? I wanna digitize them. They have designed a special process to extract and convert the audio from the cylinders with as little damage as possible. Then he links to the project cylinders.library.ucsb.edu. Says hope it helps keep up the great work. Yeah, I mean, you could scan flat LPs, like 33 to third LPs and turn them into digital audio. There's companies that have worked on that. I don't see why you wouldn't be able to do a similar thing with the cylinders. I know they're a little different, but that's very cool. Thank you, John. Also, Bruce wrote in our bosses' Slack regarding Tesla and meetings. Remember Elon Musk last week set the memo saying meetings not working for you. Just walk out. Bruce says, we've moved from a small company to a large company over the years and meetings can take over if you let them. I just tell my folks, don't go to a meeting that doesn't publish a specific agenda beforehand that includes what they want to accomplish or take away and make sure at the end of the meeting someone is summarizing what the take away and action items are with deadlines for them. Then don't just not show up. Instead, decline the invitation and say why you did. When I did that a few years ago, when I first started to feel like my days were useless meetings, the quality of meetings I was going to went way up while the quantity went down. I mean, I'm no meeting lover, but mileage may vary, I feel like. It just depends on who you work with. I feel like all meetings should be timed and there should be loud buzzers that don't go off until everybody leaves the room. Like at 30 minutes. Well, I feel like what Bruce is saying is a great, when I used to conduct meetings at Tech TV and even at CNET, I would say this is what we're gonna do. Here's the question, who's got an answer? Next, let's move it along, let's move it along. Like you have to have someone who knows how to run a meeting, run a meeting. And also, don't give me this, I'm taking notes on my computer. You're not, you're checking Twitter and we all know it and you need to put your laptop, close your laptop. Project the notes up so everyone can see. Although I used to have a boss who shall not be named, who insisted that nobody could have laptops open during meetings and like half the time it was really inconvenient for all of us because there were answers that the laptops would have made a lot easier and that didn't really work either. Yeah, my wife had a similar, if not the exact same boss. I remember being very excited about that. It might be, it might be. I'm saying you can pop them open, I'm just, the persistent laptop is something that I've always found more of a hindrance to the flow of a meeting than anything. By the way, I have a friend who works at a company owned by Elon Musk. I saw this weekend and I asked him about this. He's like, oh yeah, he's like, I'm not following that. I don't care what he's like. That's just not what's gonna happen. Mayhem is not the solution. Kind of depends on the division, I suppose. Yeah, of course. Well thanks to everybody who emailed us. Of course, there are lots of emails that we're saving for our new mail back episode, which we actually will announce soon since we're getting close to the end of the month. But for now, thanks to Justin Robert Young, who now joins us semi-regularly on Mondays, which is such a treat.  Oh, go on. But what's been going on with you since we saw you on Thursday?  You guys can still go ahead and get my thoughts on the world of politics. Super quick and easy. Five days a week for free. It's a political newsletter. So you can go to freepoliticalnewsletter.com and sign up for my free political newsletter, The Politics Politics Politics Daily. It's a super quick read and this week we're trying a little something out different where I'm gonna be sending it out overnight. So you'll get it as soon as you wake up, either West Coast or East Coast. Oh, very cool. Let me tell you, Politics Politics P3X, as those in the know call it, fills a great need for me. I have overcorrected and I don't read the bubble.  What's going on? It's an incredibly valuable resource. Well, thank you. And of course, that's the Politics Politics Politics Podcast. You can download that wherever a podcast are found. iTunes, Apple, or Google Play, all the hits. Right now, we have at least one, I think we have maybe nine, more patrons than last month. We want that number to keep going up and we've been promising we would do something possibly involving a tarantula at the end of this month if we hit that number. Now, here's the thing. As someone pointed out, actually a few people have pointed this out, I don't wanna do something that we can't top the next month, right? We always, because we're gonna wanna do something to thank you every month. Tom will not be mauled by a lion. Yeah, exactly. In order to get another patron. But yeah, so if you wanna, the more patrons over the number, the more likely I am to do something really silly. So please, by all means, if for no other reason tend to see that, go and support us at patreon.com slash DTNS. Our email address is feedback at dailytechnewshow.com. If you've got ideas for us, you've got questions for anything in between, we'd love to hear it. We're also live Monday through Friday at 4.30 p.m. Eastern, 20.30 UTC. You can find out more at dailytechnewshow.com slash live. Back tomorrow with Lamar Wilson. Talk to you then. This show is part of the Frog Pants Network. Get more at frogpants.com. I'm in club, hopes you have enjoyed this program. Oh, I'm a...  Do they do they do the speaking bit? They're not parrots. No, doctor, doctor will just say hi doctor, but he's not even really saying it. He's just making the kind of tonal, like, like that kind of sound. So it just like, he'll whistle and then we'll say hi doctor and then he'll whistle and then we'll say hi doctor and that'll be that. I was wondering if they could do the ha ha ha or the he he he he spit. No, no, I don't think that they can do the brushwood chuckle. Or maybe just start playing it on loop. And do the brushwood chuckle. We tried to get him to learn the Game of Thrones theme. And so we would just play, we would leave and just play the Game of Thrones on like those 10 hour loops. And just be like, maybe he'll pick up some of it. Maybe we're supposed to love that for a little bit. He was able, if I if I did the like, he would start to start to do it. But he like, I know it. I know this one kind of falling out of it. A long time ago, you know, because I have my bird stories as well. We thought it would be great if squeakers got the do do do do do baseball thing. And he would go do do do do. So he was getting really close. Yeah. Yeah. Whistle and he'd kind of get it, you know, and we'd be like, he's trying. He's trying. And then finally he did it one day and the whole house erupted and we're like, Rah! And he never did it again. Right. He scared the crossbody. Because he scared him. He's like, I'll never do that again. Yeah. I didn't like that reaction at all. Even though we were happy, it scared him. All the things we do to birds. They're so smart, though. Titles. Yeah. What do we call on this, Roger? We can do either do Amazon keeping it close to the Vesta. Hmm. Fine. It's only character count. It's only character count. Amazon's robot prime directive. Or Kindlefire. Actually, Amazon keeping it close to the Vesta isn't as long as I as it sounded now that I'm looking at it. Or you could just say in keeping close. Take a couple of characters out. Amazon keeps it close to the Vesta. Yeah. Do that. That sounds good. All right. I wonder if they're going to have to come up with their own Amazon rules of robotics. I don't know. I'm sure not clean when the door is closed. Well, actually, the rules of robotics from Asimov are fiction. They do not apply very well in a real robotics situation. You know what? Why don't you get some inagel decongesting and come back and talk to me? We can. So I can understand you. Actually, actually, actually, actually, I'm just hungry and I want to slice a pizza. Can you robot? Oh, what if it was a robot with an easy bake oven in the middle? What if with a tovala? Yeah. It could go get the tovala out of the refrigerator, put it in itself. Steam broil, bake it. Really? Everyone either wants Irona from Richie Rich or Rosie from the Jetsons, where I want it. I don't want Rosie. Rosie was she had too much opinions. But that's great. It's sassy and can make a good. No one. I don't need a sassy robot in my house. Get out of here. Yeah. Be quiet. I don't need to be looking at that robot being like, come on. Really? I go home to escape people like that. Yeah. Oh, Mr. J. My Rosie impression. That was really good. Listen, I don't do a lot of them. I have a lot of you do them. Break them out. You nail them. No, my Hannah Barbera. It's a good question, though. Like there was a time when Rosie, the robot is what everybody thought of when they thought of a robot. But I don't think that's true anymore. What do we we think of Roomba, I think? No, it's a real robot. No, I think what we wanted to the idea that we were getting it with Rosie, I think, artistically is AI is that then there will be somebody that now in, obviously, this very domesticated lens of what television entertainment was that we will have somebody that will go that role for us. So Bender. Yes. Yeah, exactly. Well, I mean, I think now what we've realized is that we don't really want chatty robots. We want robots that speak when they're spoken to. Well, but it's also like it gets into a weird gray area, too, because it's like, we no longer think like, oh, a robot is this like metal machine that's sort of like a person. You know, we're like, nah, it's different than that, right? That was just what we thought of before we knew how technology would make that possible. But it's still supposed to give us answers in our natural human language that we're like, oh, that's a good answer. That's an answer that a human might give me. But there's, oh, there's so many limitations.  Amazon Smart Speaker, she does these things where I'm like, gosh, you guys really gotta figure this out. It's like, I understand why you're getting this wrong, but it's the most natural way I could ask these questions and you don't get it. For example, so the Warriors were playing yesterday and I was like, you know. Yes, I'm sorry about that, by the way. You know, hey, three and one. But, you know, it was early in the day, so it went at home, see, they're doing on purpose. But I was like, oh, it's early in the day. Like, are they playing yet? I didn't remember. You know, so I asked her, when's the next time the Warriors are playing? And she tells me Tuesday. And I'm like, ah, Tuesday. And then I was like, that's not right. But it was because I said next. Yeah. So I skipped the game that was already in process. Oh yeah, see, that's not right. Because, so what I'm like, I'm like, I gotta tell somebody at Amazon that like what she should say is, just in case, like next means now and or next, depending on the, you know. That's funny. If that's what she should say, besides the game already in progress, the next game would be on Tuesday.  I gotta feel like that is getting smarter. And that's something where that's a real, just like what kind of data they're pulling. Because I've definitely had, I forget which assistant it was, where it's like, I asked for a score and it gave me, here is the current game, the next game, and like how far out of first they are. Oh yeah, no. If you say, when are the Cardinals playing? Yeah. Don't use the word next. It gives you exactly what you said. Yeah. It's when you say next, it gets all super literal. Like, well, you said next. So the next game, we assume you know they're playing. Maybe the Amazon Smart Speaker should say, like when you scold it, it'll say actually you said next. And since the game is. If you were a real fan, you would know they are playing right now. Oh yeah. No, it'll just start scolding you like, oh, Doctor.  Oh yeah, totally. But also it's like, that's the question that I would ask any of you and you would know. You'd be like, oh, actually they're playing right now. Yeah, exactly. So when are they gonna start loading in the home doctor like aspect of Smart Speakers? Cause one of the most interesting things is every time a new technology comes on, besides porn, what also ships is some sort of medical like advice or something that you can look up yourself, right? Remember when CD-ROMs came out, you get like an entire medical. You don't have a Smart Speaker, do you? No. Cause you can do that. Pound. Boom. No, no, but I mean like, like where it would be like a branded thing. So. Yeah, there's a bunch of skills from various medical infrared web MD kind of places. I should never talk to my wife about that cause that would be the only thing. Oh, I would look back at our Alexia history and it would be nothing. I don't know how good they are. I haven't tried them. Questions that she has at all times. What about Dr. Phil, a pseudo psychiatry sessions? We're going to get that Gwyneth Paltrow skill. Like that goop. Yeah, where it's like just getting a sauna. Yeah. Hey, by the way, Oakland now entered the Oakland Port Commission entering into exclusive negotiations with the Oakland A's for the second time in four years for the Howard Terminal location for a new stadium. That is right. The Howard Terminal is the one at the docks. Right by the ferry. So they're, but Oakland, but the A's made an offer on the Coliseum lot too, right? Yes. And now Oakland realizes that the city realizes that they can make a lot more money and there's been rumors that Tesla wants to buy that. Ah, okay. Fair thing. So they wanted to be able to sell that for more than what the A's would want to pay. Well, cause the A's were offering to just pay off the debt. Pay off the debt like immediately basically. Yeah, yeah. But then also have the ability to build more stuff there. The city wants them to be at Howard Terminal. And now the reason why it apparently fell apart the first time was because you can't just build something there. Like this is Northern California. So not only you're going to need environmental things, there's like a million different hoops. Cause that was the nice thing about the Coliseum is all the environmental impact reports are done. Yeah. But 50 acres north of Jack London. You also don't have transportation there. So you got to figure that all out. Not that you can't, but yeah. But like the Coliseum has Bart and freeway access and everything already there. Howard Terminal, you're going to have to change the kind of access. Oh, it's no more of a walk from public transportation. Where are you going to park? Then Bart is to... What's the Bart station to have for Howard Terminal? It would be the... Alameda, right? Oh, the 12th Street one. The one... Yeah, that's a little longer. That's a little farther. I'm not saying it's impossible. It's just you got to figure all that stuff. Oh, it's a long walk from the Market Arrow stop for to get to the Giant Stadium. Yeah, you've got a train that drops you off right next to the park. Could you get on to another train? I mean, but that's why there's no train that goes to the Howard Terminal. The city does. Number one, listen, I'm not trying to shoot it down. I'm just saying Coliseum already has all those problems. I walk this all the time. I don't think it's that big of a deal. All right, fine. The city agrees with you guys and they love and so do the Oakland A's. They want an overhead tram to shuttle fans between downtown Oakland and Howard Terminal. Because people won't go. Even if it's silly, people are like, oh, I have to walk, forget it. I mean, it's a walking city. Has LA broken you so quickly? No, I'm just saying this is just human nature. This isn't a city-specific thing. If you want to sell the maximum number of tickets, you have easy transportation. No, what they do is they line the area like they do downtown Disney with shops and restaurants. Well, that's not an either or. That is also part of it. I mean, it's already halfway there. I mean, Jack London has got stuff. It just didn't know. Let me tell you, Dodgers is a nightmare for that because there's nothing there but parking lots. Yeah. They have the same problem. But there is plenty of parking. Sort of, I guess there is. Have you ever been there and not been able to park? It's just like. I've never not been able to park, but I've been not been able to leave. Yeah, I believe the leaving is an issue. Yeah, I think that getting the hell out of there in a car, although it is by the highway. So like push comes to shove, at least you're not sitting in an access road for three hours. I don't know, man, I've been sitting on the access road coming out of the Coliseum and it had a BART station. I'm just saying, I'm looking this up. I'm looking this up. Because I don't think the 12th Street, if you get out on 12th Street, this is a part of DeDrip that I like to call very, very, very local. This is the local trip. Yeah, this is our 510 local edition. Sorry, I got to run up next on DeDrip. DeDrip, thank you. Think about DeBrat. Yeah, listen, if you work at Schnitzer Steel. And then you'll remember. If you work at Schnitzer Steel or Ink Shares, you're going to love the park being a Howard Terminal. 12th Street's on the other side of 980. It is. So you got to walk under the highway? People don't like that, though. Again, it's not about what's reasonable. It's like when someone's deciding to buy tickets to the Giants or the A's, and they're like, oh, but I have to walk under the freeway in Oakland.  Whoa, Salesforce has a gondola? We're learning so much about Oakland. I'm not sure that's what this is. It might just be like a worker thing. Okay, yeah, Jack London Square being right next to it. That's a big cost. Jack London Square. All right, it's a 12-minute walk. 12 minutes a lot, man. This is a discussion of food. What do you guys like eating at the Paul Park when you're there? Nachos. You know what you do? You know what you do? You make Jack London Square the stop and you build an exit that goes out. Like you walk underground all the way over past Yoshi's. Cause San Francisco does that all the time.  Yeah, I guess you could do that. I don't know about a tram. Also, there is a free bus that goes down Broadway. Well, what's wrong with the tram? Because could they just replicate what they built for the Oakland Airport? Yeah, that's fine. I get what Justin's saying. Like this is even closer than the airport though. If you have a tram go from the Jack London Square stop to Howard Terminal, that's short. What if they made a zipline ride? Now a zipline would be rad. All I'm saying is this, man, by the time that this thing gets built, I just don't know whether or not the tram will be in a world with ride shares and motorized scooters and all the other ways that we have to get from point A to point B that there's not gonna be 50 different ways that you can get to a ballpark in 2024, whenever this. Oh, wait, I was looking at the bus stop for Jack London Square. Lake Merritt is the stop. It's by Laney. All right, anyway, yeah, the point I was trying to make is not that this is an insolvable problem, but it's something that they have to look at and go, okay, does this all work? Whereas Coliseum was already like, yep, it's built, done. Don't take care. Well, they would still want to build a new stadium, I think. Oh yeah, they would just tear down the Coliseum and build on that site. I just really, I just know what's gonna happen. What's gonna happen is I'm going, they're gonna build this thing and I'm like literally gonna wind up moving like the second before it's there. I just know it. I can see it. Oh yeah, yeah. That happened to me where I lived in Lake Merritt and I moved and all the good restaurants opened up. So yeah, next phase is- And all the cool people moved in. Yeah, well, closely. And now you just got some freeloaders just popping out of the kit. Oh man. All right, ballpark food, I'm always doing a hot dog and I'm always doing popcorn. I always do hot dog if I've never been there before. I always gotta try the hot dog. But if I'm a regular, I always find a thing like a park specific thing that I like. But what would be different about the hot dogs? I mean, aren't they all just kind of purchased? No, no, no. That's like saying- The bun because they're a different vendor. Why would you go to a, what's the difference between McDonald's and Five Guys? I mean, aren't they just burgers? No, because I'm taught.  They're not all made by the same people. They're different restaurants. I'm a fan of the ballpark Nacho. They're the worst nachos around. Oh yeah, no. It's the same thing as movie theater nachos. It's the time where you're like, I want Bill Vita. Yeah. You know, maybe a jalapeno or two, maybe not. Yeah. And that's what I'm eating. But I really enjoy them at a ballpark. I wouldn't want it at a Mexican restaurant. I'd be like super offended, but I like the fake cheese. Where are you at with the hand? What fake? It is fake. No, I used to serve it. It's just processed. Okay, well, whatever. Processed to the point of unrecognizability. Sarah, where are you at with the hand mess, though? There's a lot of hand mess that comes along with nachos. And it's... What do you mean hand mess? You dip the chip in the nacho. A lot of loose cheese, man. Those chips can soggy towards the end, though. No, no, no, no, guys. No, no, no. You're thinking of something else. The cheese is on one side. The chips are in the other part of the plastic container. Oh. And you do your little scoopy scoop. And then you blow. Okay, you're not getting loaded nachos. You just got it, got it, got it. Yeah, no, if it were that, if that were the point, I wouldn't do it. You don't get a nod drip? That's why you blow. Yeah.  It's almost like a virtual lacquer. Yes, that's right. Nacho lacquer. And on that note, we'll see you guys tomorrow with Lamar Wilson. Yeah, on the drip.


This study examined the Earth's magnetotail over a period of seven years, using data from the cluster mission. It found that dipolarization fronts occur prior to a decrease in BZ, followed by an increase in BZ. These fronts tend to become thinner as the plasma flow increases in speed. The fronts can be divided into two categories, earthward and tailward moving dipolarizations. The fronts are believed to be tangential discontinuities, with the current having a primarily perpendicular orientation. This article was authored by D. Schmid, D. Schmid, M. Baugh work, and others.


Okay. All right. So, Hunter clearly didn't talk for a long time, and he had to get it all out. Okay, so he gets a talk. I want to get a talk, too. Who taught security? Yeah, I think people still awake, I'm not sure. So, who said security was going to be exciting, right? Not many people. All right. So, at SWOT, SWOT is a company I just joined like half a year ago. We also had to implement a kind of secure environment. Well, there I say that I made a very secure environment, and I wanted to share a little bit of what we did. I think this talk is going to be a bit focused on a certain use case. So, I just want to know, like, who's using Amazon Web Services? Right, that's a good amount of people. Who's using Google Cloud? Okay, that's... And Azure? Okay. All right. So, at least I'm using Amazon. So, who's using the hosted or managed Kubernetes clusters in Amazon? Okay, two people. Everybody else. Who's using K-Ops? Kubernetes operations. Okay, just me and the X on the handle on this, people. All right. So, that's maybe going to be a little bit less... Okay. I like Kubernetes. And my other image is gone. So, I also like K-Ops, which is the Kubernetes operation. It's a tool that you can use to provision Kubernetes clusters in Amazon. And I want to highlight a few features that I use a lot. So, for example, one of the features of K-Ops is the ability to create, like, an organization where you manage, like, your POPs template. And then you have your defaults. And then you have, like, different clusters. So, in this case, I have a template in K-Ops. All the clusters are defined as a manifest. Very similar to how you define anything in Kubernetes. For example, deployments use a manifest. So, in this case, I can use a... How does this thing work? All right. All right. The right one. Okay. So, the API version here is cops, not Kubernetes. And then, in this case, I'm talking about a cluster. And I have parameterized the cluster name, some buckets where I put some add-ons, and things like that. So, using this, I can specify some defaults. For example, my cluster, it has a default cluster domain. Zone IDs are not the real values. And a version that I want my default to be for my clusters. This is very long time ago, right? I'm not using 1.9 anymore. Hunter was saying how everything is changing so quickly. I don't know who's using Kubernetes 1.9 still. Running Kubernetes 1.9. No, I'm not. Who's using 1.10? 1.11. Okay. That's all right. 1.12. Okay. 1.13. Okay. Nobody. All the Google Cloud platform people should be like 1.12, right? Anyway. So, then you can provide some variables. And also, for example, you can provide your cluster-specific one. In this case, I've created a demo cluster. And I have created dedicated subnets for it. So, if anyone is familiar with K-OPS, they know that by default, K-OPS will create a bunch of subnets for you. But I will go over some reasons why you don't want to use that. Actually, I want to go really fast. And like I said, this is going to be quite K-OPS oriented. I'm just going to go really fast. If you want to learn, after this presentation, you want to learn K-OPS, go ahead. Then you can go back to the video and see, like, hey, what was he talking about? Maybe I can use some of these things. If you said I never want to use K-OPS, that's fine. Sorry. Sorry. It's mine. I'll try to go fast. So, yeah, using subnets and all those parameters that you want to pass in for cluster-specific values. Next, I love make targets. So, in this case, I create a little make target that uses the toolbox template function that uses my default template, my default values, and then my cluster-specific values and manifest. In this case, I just need to run make cluster demo, and it's going to pull everything together and generate the whole cluster definition. So why do you want to separate your subnets? By default, I don't want to use the K-OPS. After you've used K-OPS for a while, you realize that actually I think the main reason is routing tables. But there could be other reasons that you want to manage your subnets. I think in Amazon, the main reason to manage your own subnets is to set up your own tags and to set up your own routing tables. For example, if you do a lot of VPC peering, if you do a lot of connections from other data centers, and if you want to do some egress controls. For example, as Hunter mentioned, Istio allows you to do egress whitelisting for the outgoing domains, like if your containers are connecting to Google or to other domains to make sure that you allow those connections. In my project, unfortunately, I could not push Istio yet, so I had to find an alternative outside of Kubernetes solution to whitelist the outgoing connections. So for these reasons, you might want to run your own subnets. So how do you do that? I like Terraform, so Kubernetes Terraform helps. There we go. So in this case, I'm defining a bunch of availability zone subnets, and then I specify my shared subnets where I put in a couple of tags. These tags are important. They define the let Kubernetes know where it can create external load balancers. So whenever you create a Kubernetes cluster in Amazon, if you use K-Ops or anything else, they're always going to use tags to let Kubernetes identify the subnets where it will create load balancers. So that's one thing. And then after that, I actually have animations. Everybody else lost theirs. After that, I have to create private subnets for my specific cluster. In this case, I have two types. I have my edge nodes and my compute nodes. This is also something that was mentioned in HunterTalk. It's about segregating nodes using taints and affinity, I think, to push certain containers onto certain nodes. So I have a couple of edge services that I want to run on edge nodes and a couple of application services that go deeper in my network. So in this case, I create two separate subnets for this. Again, the tags on the subnets are important. I am letting Kubernetes know that this particular subnet is spawned. So it's not shared with any other cluster. So it can usually do more stuff with it. And also that this will be used for the Kubernetes API internal. This is actually not a specific Kubernetes tag. This is my personal tag because I need to do some VPC routing. So I use it to identify some subnets with this tag. And then finally, I have my edge where I basically tell here, if I need to create internal load balancers, they go into my edge subnets. So earlier, we saw this tag, which is for the external load balancers. And if I need to hit from inside my VPC, I'm going to create it in the same subnet as the edge. Is this good? Maybe not. Maybe I should create my load balancer in a separate subnet where I was lazy. Next. So this is where my subnets and I entered and spliced into my cops definition, as I mentioned earlier. And in the end, I get a nice cluster stack generated like this where I have my subnets specified and my edge subnet specified, allowing me to then create different instance groups. So why do you want to use edge nodes? Compliance requirements. If you need to have, if there is a customer requiring you to hit certain nodes before you hit other nodes, you might need to run edge nodes or different types of nodes. How? Like I mentioned, using a dedicated instance group, which you use to tag and put tints. And then also by using load balancers that can be limited to edge nodes. So let me go into those two points real quick. So the first one is an instance group definition and chaos looks like this. So we have chaos definition instance group and I am adding a label that this belongs to this cluster and I'm adding a taint. This will force explicit toleration so that means if I want to run anything onto these nodes, I have to tolerate this taint. That's a way to schedule workloads onto specific nodes and Kubernetes. Another thing that I do is I put a label on top of the nodes which is the instance group. I need this because I need to be able to select my load balancer only a hit the edge nodes. My load balancer should never touch any other nodes, not my application nodes directly. So I have to put a label on the nodes as well to find them later. Then finally, how do I set up a load balancer that only hits my edge nodes and don't hit my application nodes directly? The problem here is if you use Kubernetes service type load balancer, by default this will always hit all of your nodes. So if you use Kubernetes services, then you have three different types. A cluster IP which is only accessible within the cluster, a node port type which will open the port on every node in your cluster using IP tables. And then you can use load balancer.  So the solution, I cannot use the default service type load balancer. There is this great project from Zalando which is called Q-Indress AWS Controller which allows you to provide custom filters for your nodes. So earlier when I set up my edge nodes with the label for edge, then I can use my Ingress Controller to hit only the instances that have been selected for edge. So this looks like this. When I deploy my demon set, basically the controller is ran to identify here the custom filters. So I give it the controller ID and then I use the Amazon region and the custom filters that I pass in through a templated function. This is basically Terraform templated manifest and I will explain more how I use that.  I have a special module and I will go a little detail on that and basically in my custom filter I specify that the Kubernetes tag has to be this particular cluster on nodes and the key for the cluster autoscaler has to be a node template taint for edge. Actually I'm not using the label. I'm using the taint. Interesting. So I don't need the label. Okay. But I do need the label for something else. I think for my morning today. Then I think earlier Hunter highlighted that, I mean Hunter highlighted a lot of things and there was a lot of things to think of but one of the things was in terms of user authentication and alteration. So alteration, this is the same thing that you mentioned I think, the R-Bag, other events and image-wide listing with admission controllers. One thing he mentioned also was the OpenID Connect which you can do with Google and Betsy which is what we're using almost every right. And then the other thing is to use the Heptio Authenticator. If you're on Amazon and you run your own Kubernetes nodes you can integrate the authentication. If you use OpenID Connect, you can integrate with anything. You can integrate with GitHub. You can integrate with anything that talks the OpenID Connect protocol. Then, and if they don't talk OpenID Connect you can use text to talk to GitHub for example. And then if you're running on Amazon and you don't want to use a third-party authentication you just want to use AWS Identity Access Management then you can use Heptio Authenticator. So this is very technical and I'm going to go really fast. So the Authenticator requires these steps. First, you need to create an Identity Access Management role inside Amazon that your users when they want to access the cluster need to be able to assume role. Then you need to set up certificates for authenticating like setting up the WebHook TLS and you need to also reconfigure your Kubernetes API server to use a WebHook. Then your Authenticator Demons needs to be scheduled across all your masters. How? I like Terraform and I like K-Ops. So I use Terraform, K-Ops, Hooks and Add-ons. So real quick, first Terraform to create a role just create a current account trust policy document that basically says the root of the account is allowed to assume this role. So we trust this, so users can assume this role through the root of the account and we then push, sorry, what's this? This is the user group. So I have a user group and then I basically give the user the ability to assume the role. Actually this one is to give the Amazon server the ability to assume the role and this one is to give the user the ability to use the Amazon service to assume the role. Next, I have to specify the TLS certificates. So I'm using a private key based on that private key to generate a self-scientificate which is signed for local hosts because the authenticator only listens on local hosts and the Kubernetes API server talks through local hosts to authenticate the user. Then I generate these certificates and use S3 to push all this information into Terraform to push it into S3. And finally, I need to set up my API server to authenticate and basically set up the base 64 encoded certificate signature and then provide the URL that this API server needs to talk to local hosts to authenticate. So using the local hosts, it will talk to the daemon set which is the authenticator service. So the authenticated service then needs to have those variables so again this is templated in. So this is how I use a Terraform template and then finally push that configuration into S3 as well. And when I bootstrap my nodes with chaos I basically can say every node whenever it gets created if the role is master, not my compute nodes. If they are master nodes, then it will quickly run a Docker container because this is CoroS I don't have any AWS, Python or anything. So I need to, whenever the CoroS node starts I need to do a Docker run to quickly copy from S3 all of the data. So the TLS certificate is the web hook configuration everything and then on the API server I have to set up the API server authenticated to use this config. So I know that at this point I've done the set of the role, set up the TLS, set up the configuration for the web hook and then bootstrap my masters to pull all the certificates from S3. Next, finally, Kubernetes chaos operations has this add-on bootstrapping thing. So whenever you create a clusters pack you can specify add-ons that you manage. So in my case, I have my own add-ons that are having their own channel. So the way a channel looks is a channel of add-ons can have multiple add-ons. So at SwapMobile we use many add-ons that we want to use. For example, our ingress, like I use a special ingress controller, right? So I have a special add-on to manage my ingress and I have a special add-on to automatically provision my authentication as well. Okay? There's a point to this presentation that I'll get to. And then I can do this. You can watch the video if you want to get the details of how this is. Basically, this is a demon set that is running on all of the masters. So this demon set run on the masters will be able to expose the authenticator for the web hook on the masters. And then this is templated as well. So the cluster ID is templated. So again, I have some templated add-ons that basically are pushed into S3. All right. So I wrote this post on Reddit this morning. Basically, what are we doing wrong? All right? Our DevOps is trying to replicate Google Cloud service locally. Only a few wizards know how to use Kubernetes. And why are we also running self-managed promises? So this was an interesting post because after everything I told you and everything that Hunter told you... It's so simple. It's so simple, right? It's so simple. So why even... He mentioned the DevOps guy has been working on this for over a year. So... And this was... I don't know why I put this side here. Because the next part is also... That's one part. But this is also about the security. Like, if you want to secure your Kubernetes components, you want to set up 2LS between your HCD and Puber bootstrapping. And you want to set up all of this, right? So, as you see, when to offer custom deployment, right? When you do your custom deployment, you need to set up your symmetric keys that need to be rotated. Kubernetes talks with TLS, so you need to rotate those keys over time. You can probably use Cube Admin now, but at the time I was setting up the cluster, it wasn't production ready. Then also we need to isolate HCD. We need to do all of this, right? So, what you get is you get a leading edge. You get a choice. I can choose my machine configuration. I can choose my operating system, my storage backend, my network against my Ingress configuration. I can choose everything, right? I have a lot of choice. But the trade-off is you might end up in Kubernetes nightmare, where you have only a few people that are able to do this. And doing this for a while, I started to realize more and more that actually going with a managed Kubernetes solution kind of starts to make sense. Am I getting... I mean, only two people were using Google Cloud hosted Kubernetes, right? And there was one person using Amazon's. I can understand why you're not using Amazon's hosted. So, who's running Kubernetes on bare metal? Okay, yeah. All right. So, after doing this for a while, I started to realize this is hard. Definitely if you come down to the security part, right? We are not all experts, and we cannot all make this work perfectly. So, and then as an add-on on to Kubernetes... Sorry, on to Hunter's talk. You are now called Kubernetes. On to Hunter's talk. Part of it was regarding application lifecycle. As Hunter mentioned, with containers, we have immutable images, and we can move the scanning or we can start verifying vulnerabilities right at the build stage. So, we need to integrate our security more towards the CI pipeline, more towards the left side, which is where the build starts. And while it's being shifted, so we need to check the registries that we're using as Hunter mentioned. And then we need to also, during the running part, we need to assure that the images that we are running are authorized. So, this is a slide actually coming from AquaSec. And then, I mean, at least this part is coming from AquaSec. And then, as a recap, that was pure on containers. But then we talked about container orchestrations such as Kubernetes. We not only need to do the scanning, but we also need to possibly set up admission hooks to make sure that the images have gone through the whole pipeline that they have been checked. We need to do process whitelisting, we need to do binary whitelisting, no protection, and set up RBAC and ensure least privilege approach. So, there is a lot of open source projects, right? Initially, when I look at this, I was like, okay, Claire, Koro is there, open source, I can deploy it. Graphia is open source, awesome, I can deploy it, right? Yeah. I decided that this time I'm not going to go there. And I actually looked at AquaSec whitelisting secure and there was another one mentioned earlier as well, no? No. Those are the only ones that I could find. And we have a lot of whitelist stickers. But basically what they do, they, and this is again an AquaSec image because their images are just nicer, not only do they provide you with this initial scanning phase, but they also give you the runtime protection.  They also integrate with secrets back end. So if you want to use vault or you want to use something like that, then you can set up rules to inject secrets inside containers. The great thing about this is that when you inspect the container, if you normally provide environment variables into a container and you inspect, you can see all the secrets. If you have access to the Docker API to talk to and look at the container, you can see everything. If you use their system, they kind of obfuscate the secrets from the container level, only injected within the container. And I actually had a bunch of knowledge I wanted to share about how to inject secrets, which is probably another topic because the HALM talk also touched on it. Basic secrets are not really secure and it's important to look at that. So I didn't want to make the mistake of running everything myself. I chose the platform. They're not necessarily cheap. It depends on what is your requirements and your compliance requirements. So that's basically it. I hope that made some sense. All right, you have a question? Yeah, I'm not familiar with COPS, but does that handle your host private network investment business? With Kops, you can also provision bastions, but we took that out as well. We provision our own VPN and everything. So actually we run all of our Kubernetes clusters only privately exposed and we manage the VPN outside, so we don't want the bastion for that as well. This depends on your use case, but yes, Kops, if you want, you can specify utility subnets and then bastions will be provided there. And the bastions and utility subnets shared by the ELB by default. So where your external open access are. Any other questions? No? Yeah, which one? Okay. Do you want to bring in the cluster like a public cluster or private cluster? Private. So which means the A guys server is also like only private access. Yeah, so my client cluster that needs to be secure is private. My personal, like the you will probably still find some public clusters. I just want to guide myself before you attack me. But yeah, everything is private and then the problem is how do you use CI-CD and things like that. If you use hosted solutions for CI-CD for example, sort of CI and things like that. It's going to be hard if everything is private because you need to have some way to hit the API, right? That's why I run my own CI-CD. Yeah. Unfortunately, yeah. Sorry? Fascist. Fascist. Well, SSH tunnels maybe, VPC peering, if you have CI-CD hosted provided that allows you to do some SSH tunneling to hit the API and things like that that will help. Otherwise an interim private CI-CD. Okay. Any other questions? All right. I also didn't talk for a while and now it's out. Thank you very much.