Good afternoon. My name's Matthew Garrett. I'm going to be talking to you today about building a secure bootchain from the point where firmware hands-over-control to the operating system components all the way up to userland, and being able to verify at each point that nothing significant has been tampered with in the process. So some background here. I'm currently employed by Google. Just to clarify, much of what I'm talking about is stuff that I'm involved in working on. But none of this is a product. None of this is an official Google position in any way, while a normal source of disclaimers. Secure boot is important to overall system security in fairly fundamental ways. The biggest reason for this is that every layer of your security depends on its dependencies also being secure. If your kernel has no security issues whatsoever, which is a wonderful utopia that we can consider in an abstract way, even then that kernel is not going to be secure if the bootloader that loaded it was not secure. Because that bootloader could have been tampered with in a way that would then allow the kernel to be tampered with. If a previous layer is able to interfere with the operation or integrity of a later component, then any security guarantees you thought you were getting from that component are now gone. And obviously, every part of your operating system comes after the system is booted. The integrity of the boot process itself is the single most important part of overall system integrity. If the boot process is compromised, you have no security at any later point in the system. This has been demonstrated multiple times. There is malware in existence. Well, if we go back far enough, the original malware that existed as viral infectious software tended to be in boot sectors of floppy disks. You would put the disk in your system, you would boot the system from that disk, and it would copy some code into RAM, it would hook into other operating system components, and then if you inserted another disk at some later point, it would write itself to the boot sector of that disk as well. So this is not a new thing, but people seem to stop worrying about this sometime towards the end of the 20th century because this sort of malware was mostly replaced by stuff that acted at the operating system level. But that software was easily noticed and fixed up by antivirus software. So more recently, we've seen people start moving back to malware that does fit into the boot sector, the malware that is intended to attack this part of the boot process. We've even seen cases where this malware is being written by firms for sale to governments as persistently infectious materials, stuff that will continue circumventing any source of antivirus updates because it will hook the kernel, modify it, and stub out any attempts to read the boot sector logistically and instead return something that looks legitimate rather than something that contains the malware. And if your boot process isn't secure, you also lose out on many of the benefits of disk encryption. The boot process has to at some point be able to obtain an encryption key and something that may be protected by a passphrase. If the boot process has been tampered with, that key can be obtained by the modified boot process. That passphrase can be obtained by the modified boot process and then stashed somewhere and made available to attack us later. So the state of the art on consumer systems is pretty much UEFI secure boot. And this was something which we were somewhat legitimately concerned about in the free software world to begin with because it was unclear that we were going to be able to participate in this process and that systems were going to ship in a way where we had to give users the choice between either having the security or being able to run Linux and not being able to do both. Thankfully, that isn't where we entered up, but instead we now have a scenario where the firmware verifies the bootloader using a configurable set of keys. So admins or machine owners are able to install new keys to verify software. The firmware uses these keys to verify the bootloader and the bootloader having been verified then uses either the firmware's keys or its own set of keys to verify the kernel and then execute the kernel. So this sounds great because we now have a process where as long as your firmware is trustworthy, that's not necessarily true, but there's also someone at the scope of this talk, if the firmware is trustworthy, you know that your bootloader has not been tampered with and you know that your kernel has not been tampered with. So you've now got a mechanism by which you can get a known good kernel, which means all security that depends on the kernel being correct should be acceptable. That's something that is a meaningful base of trust. Unfortunately, this isn't really good enough because the early boot process is more than just the bootloader and the kernel. We have the Initram FS, which is responsible for the early stages of boot configuration. And one of the key things that the Initram FS does is configure and handle the any encrypted disk setup. So the Initram FS is what's responsible for obtaining the disk decryption key, what's responsible for obtaining any user passphrase for that decryption key. And right now, even in a secure boot setup, an attacker can modify the Initram FS and can drop in a module that will, rather than just decrypting the disk, will also copy that key somewhere else, will copy that passphrase somewhere else. So we're not to the point that we need to be in order to provide the security guarantees that we want to be providing. We have secured part of the boot process, but fundamental components are still not intrinsically trustworthy. And we actually have some similar problems with the kernel command line. So, for instance, if your system has an exposed DMA capable bus, for instance, if it has ExpressCard or if it has Thunderbolt, it's possible to attach a PCI device and then just DMA out of arbitrary parts of memory. And this is avoided by having an IOMMU that will be configured and restrict access to memory that isn't directly associated with that device. Which, again, sounds great, except that there's a kernel command line option that just disables the IOMMU. And so if it's possible for an attacker to modify the command line arguments that are provided to the kernel, again, a lot of fundamental security functionality can be disabled and they're in a position to just scrape secrets out of RAM. So, yeah, this is still not anywhere near good enough. Secure boot, as it currently stands, is necessary for us to provide security, but our implementation is not as yet sufficient. Which brings us to the question of why isn't the Inetrem FS side? And the answer is that it's dynamically generated and it's system specific. When you install certain components, that results in the Inetrem FS being regenerated and the components that are copies into the Inetrem FS differ between different systems. Part of that is that some of the information that ends up in the Inetrem FS is local configuration, like potentially information about the root file system and the arguments that it should be mounted with. But other parts are just things like, well, which boot splash should be used? Which keyboard layout should be used? Which language should prompts be presented in by default? And another part of this is that we, as Linux distribution people, tends to think of the distribution as a large number of integrated but decoupled components. So the Inetrem FS is sort of tightly associated with the kernel, but if any system components that is installed into the Inetrem FS is updated locally, that will often result in the Inetrem FS being rebuilt. So because of the way we've engineered these systems, because we sort of assume that any components upgraded should then have that updated component upgraded everywhere on the system, we are building things locally, even if that's not necessarily a hard technical requirement. We do it that way because that's the way we do things. So the easiest way around this would be for the user to sign it, that's a ridiculous idea. We're not going to do that. It's implausible to expect the majority of users to handle local signing. That's just not a realistic proposition. You're basically asking people to generate and take care of vital encryption keys. And I don't trust myself to do that. I don't see why I should trust anybody else to do that either. So what can we do instead of signing the Inetrem FS? And one approach is to use TPMs or technical protection modules. TPMs are small cryptographic chips that exist on the vast majority of consumer hardware these days. Now, when I say they're small chips, that's not actually necessarily true. It just means that certain functionality is available and until recently the common way for this to be handled was as a discrete chip. These days on Intel systems, the TPM is often in fact a software stack running on the management engine, which is an integrated part of the system chip set. And so it's not necessarily a discrete chip. It could be a firmware based thing. TPMs are often thought of as crypto co-processors that results in a sort of misleading impression that they're fast or you can offload tasks onto them. In reality, they're incredibly slow. If you can do something on the CPU, you should almost always do this on the CPU instead of on the TPM. The TPM is not there because it's fast or because it's good at cryptography. It's there because it is independent of the software that's running as part of the operating system. It will make its own policy determinations as to whether to release a secret. It will keep its own track of certain bits of system information. And a fundamental part of this is that it will record system state. Now, to be clear here, the TPM has no visibility into the state of the running system. Everything the TPM knows, the TPM was told by the operating system. The TPM is not a spy chip. It cannot reach into the running system and look at what you're running. It can only say, okay, I have a record of this information that the operating system voluntarily gave me. But based on the information it was given, it can then choose to either release or refuse to release secrets. It can choose to either decrypt or refuse to decrypt information. Now, how does it do that? How do you avoid this state just being corrupted? How can a malicious bootloader not just lie to the TPM about what it's doing? And the answer is that every single component of the boot process measures the next component and passes that state onto the TPM. And in this case, a measurement is just a cryptographic hash for TPM one devices, it's just a HR one. For TPM two devices, it can be a pretty much arbitrary cryptographic hash. And the TPM, when given that, does not just replace the existing state with this new hash. Instead, it takes the existing value, concatenates this new hash to it and then stores the hash of that. Which means that the value that the TPM has depends on every single measurement that's been passed to it up until that point. So the only way, unless you're able to just pretty much entirely break Shah one, to get to a specific value in the TPM is to provide it exactly the same sequence of measurements. Which, assuming again that there is a trustworthy route of trust, is great. If someone replaces your bootloader with an untrustworthy bootloader, then when the firmware measures your bootloader, it will pass a different measurement to the TPM. Which means that there's no way for that malicious bootloader to get the TPM back to the desired known good state. And this way, we can measure the Initram FS. So we don't need to sign the Initram FS, we can measure it and then put that measurement of the Initram FS into one of the TPM's registers. So why is this better than signing? The first answer is the list of valid states can be arbitrarily updated. There's no need to have any sort of cryptographic validation of the Initram FS. Beforehand, you can boot any Initram FS you want to, but if that Initram FS has been tampered with, it will end up with a different measurement and then you can have the TPM, for instance, have the disk encryption key sealed to the TPM. And the TPM will then refuse to hand that to the operating system unless the Initram FS was correct. Whenever you regenerate the Initram FS, you just give the TPM the new expected value and then when you boot that, the TPM will voluntarily hand this over. So that sounds pretty much ideal, but it's not really for a couple of reasons. And the first is that you can't actually prevent any code from running. You can only prevent secrets being handed over. So again, going back to the idea of at some point, a user is going to type in a passphrase to verify, provides additional information to allow the disk encryption key to be obtained. You can replace the Initram FS with one that still brings up the same prompt that fools the user into typing in the correct passphrase and which then immediately reverts the Initram FS back to the good one, stashes the passphrase somewhere and reboots the system.  At which point, well, okay, software's bad, computers are confusing, the system rebooted and now it works again, except someone has successfully stolen your passphrase. So that's not really sufficient. The other part is that it's kind of fragile. If you update the Initram FS, then you need to put the new hash into the TPM. If anything goes wrong during that process, then you end up in a state where the TPM refuses to hand over your disk decryption key. And then your system doesn't boot again ever. So yeah, that's kind of suboptimal. So what can we potentially do instead? And one approach is that, well, the kernel supports having multiple Initram FS images and each of them gets unpacked in order. We are to a large extent building the Initram FS locally because we are mixing local configuration and system binaries into the same thing. As they get unpacked in order, you can pass multiple images to the kernel. When a later one gets unpacked, it will overwrite the previous contents. So if we put all the code into one Initram FS and then loaded that last, that would overwrite any malicious codes that's been put into previous Initram FS images. So if we separated out configuration from code and put the configuration in one image and the codes in another image, then the dynamically generated material could go in one image and the statically presented material could go in another image and the second one could be built into the same image as the kernel and that could be signed. And then we just have some glue codes there that reads in any user-provided Initram FS images, unpacks them and then unpacks the trustworthy signed Initram FS on top of that. The distro would then be responsible for generating this image, goes through the normal signing process, and without having any meaningful kernel modifications, we end up with a way to provide a trustworthy mechanism for guessing early boot data with signatures. But how do we then verify the rest of the chain? Now, the fact that our file system is encrypted is a good way to make offline tampering more difficult, but it's still not impossible for people to get additional binaries onto your system. People talk about, well, okay, we should extend ELF so that we just have signatures inserted into every binary. That isn't sufficient in any way, shape or form, unfortunately, because a lot of the stuff that we run, a lot of the stuff that has meaningful security impact, is in interpreted languages. And you can't put an ELF signature on a Python script. You can verify the interpreter, but you can't even necessarily verify all the modules that the interpreter will then load, less loading the script it will execute. But the kernel does have support for signing entirely arbitrary files using something called the integrity measurement architecture, or IMA, or IMA. IMA is a combination of two things. The first is an extended attribute on each file that contains a signature in this configuration. And the other is a policy that tells the kernel when it should verify the signatures of files, under which circumstances. So you can specify there's a subset of files being measured, and you can also specify under which circumstances they should be measured. Now one of the ways you can say, okay, this should have its signature verified, is to tie it to a specific Linux security module policy. So you can configure IMA such that only things that run in a specific SE Linux context or only things that run in a specific app armor context should be verified. And then you can define policies that restrict access to various critical system components. And you can say that only stuff running in these security policies should be able to touch these components, and anything running with those policies should have its signature verified. Anything else that's running in a security context that doesn't need access to those components doesn't have its signature verified. And so you can continue downloading random stuff, building it in your home directory, and running it. And as long as it's not something that attempts to touch critical system components, it will continue working just fine. Otherwise it will be blocked by the Linux security module layer. Of course that means you need a mechanism to protect the security labels on these components which gives us the next level which is the extended verification module or EVM. And EVM provides an additional signature that is used to verify various bits of file metadata such as the file ownership, the security label, and any file level capabilities it has. So for instance, if something has cap net raw, then EVM would allow you to protect that such as if someone changes its to have different capabilities, the EVM validation would fail. There's a couple of problems with shipping EVM at the moment and the biggest one is that it's really designed to do local integrity validation and generation. It assumes that your LSM policy will prevent anything bad from happening which is not necessarily true. So the way this is supposed to happen is you have a symmetric key in the kernel, one that's potentially protected by the TPM and then whenever a file is modified or updated, a new hash is generated and a new signature written out locally by the kernel. Downside of that is that if your kernel is compromised even once, an attacker can then obtain that key and can then create arbitrary files that look entirely legitimate. The other is that signatures includes the INOS number. You don't know what the INOS number is in advance which means that you can't currently ship EVM signatures in packages. There's ongoing work upstream in an attempts to fix this. But the combination of EVM and IMA means that you can write a policy that says files that have access to critical security infrastructure must be signed by a trusty key. And for clarity, those keys are loaded from the IntramFS or optionally can be built into the kernel. So it is entirely possible to ship this in a way that still leaves it up to user control. Users can decide which keys they want their system to trust. And what's the future? Directly integrating IMA with Flatpak is unfortunately kind of difficult because you have, when you are getting Flatpak images, then if they're sharing run times, then well, what's the signature on something? If you have multiple Flatpak images that share files, the idea is that the deduplication avoids you having multiple copies of that file but in that case, whose signature is applied to it. There's some complexities around there. And the answer there may be, well, we just don't do this directly with Flatpak. Instead, the Flatpak agent, the runtime, is expected to be trustworthy and then it can do some sort of reasonable signature validation of the Flatpak images before it does anything else. We don't need the kernel to do this for us. We can just verify that some intermediate agent is trustworthy and then assume that it will do the right thing. And obviously, as with anything that is intended to restrict the running of malware, there's the potential for it to be used to restrict the running of the user's own free choice of software. And when deploying any of this, we have to be very careful to design systems in such a way that fundamentally, the owner of the system is still the one who chooses which keys their system trusts. And we have a mechanism in Shim that allows users to enroll new keys by proving that they are physically present at the system. Extending this such that additional keys can be loaded through that interface and then the Interim Affairs can pull those out of UEFI and load them into the kernel key ring may well be sufficient here. But that was allowed the user to fundamentally be in control of which keys they trust. Also, this is not necessarily something that we are, even once a lot of the infrastructure around this exists, this is not necessarily something that is going to be enabled by default. This is something that may well be relevant for users who have particular concerns about being targets, users who really want to have as much faith in the integrity of their system as possible. So we have three minutes left. So anyone have any quite quick questions? Yeah. Does... Does IMA and EVM protect directories, the contents of a directory? No. So you could add new files to the contents of directories, but they would not... Those files would not themselves have valid signatures. So if it's a thing where you're making security decisions based on the presence or absence of a file in a directory, yeah, that is something where you may want to think about whether that's actually the correct design. But so there are definitely cases where right now you would be able to violate security assumptions because, right, we do make that sort of decision and unless we have a rethink of that, there are going to be surprises. Anyone else? Regarding the inner-term affairs, why not just let distributions provide a generic one? I mean, there are generic inner-term affairs and we could just, for instance, in Fedora create one that boots on desktops. Right, so the... I think the biggest reason there is that sometimes there are still bits of user configuration that you want to embed in the inner-term affairs. If it's already possible to ship systems with a generic one that doesn't require any user configuration, then yeah, we should be doing that. And I know that a lot of the information that previously might have been embedded in the inner-term affairs has instead ends up on the kernel command line. So we're still left with we still need to protect the kernel command line. There's actually, in that case, we can take a similar approach of a bunch of security relevant arguments can just be appended to whatever the user provides is, which will then overwrite any insecure ones that were provided. And in that case, sure, we can probably get away with just providing a generic one without having to re-architect anything and building that into the kernel image. Okay, thank you very much.


When we talk about our best moments, they include humanity's first steps on the moon, alongside stories about the steps we're taking right now, at one of our country's greatest institutions, Purdue University. A family of students and professors who are in this together, persistently pursuing and leadlessly rethinking the next game changers, difference makers, ceiling breakers, innovators, boiler makers. And we will never stop. We keep going because discovery is in our DNA. Our greatest adventures are yet to come, and they include you and everything we will experience together when you take your next giant leap.


Hi everyone, Shawn with jaspyscasebreaks.com here doing 2019-2020 Panini Hoops premium stock hobby hybrid 10 box half case break pick your team number five so Brand-new release first year ever Five and six are from the same case. So this will be the first ten boxes from this case all-card ship Just some product details overall really nice stuff released Yesterday no Wednesday, but it's been really cool. I think on average we're finding two autos per case So let's see what kind of in these first ten boxes. Here is our customer list and corresponding teams and Our case you can see up on the Nick cam sealed case of Hobby hybrid So let's cut this open and figure out which ten boxes we're gonna get cool So we're gonna go like this Ten on left town the right figure out which ten we're doing One two three for the stack on the left four five six to the stack on the right So we're going with the boxes on the right these Will be for pick your team number six So those are for pick your team six Which if it's not in the store will be Dean you can check the website Right above my head there for all prices on everything you see what we have available what you can get into night and The such remember all card shit What a Beyonce How are you sir? Happy Friday Chillin It's a good way to have a Friday night. I really like this stuff. I Specifically like the fact that the base rookies from this from the regular version You know how like it's just the rookie not in a live action photo with a solid color background behind it I like that that is actually the photo variation for this version Only five left in that one nice That's from a different five boxes. That won't be from the same case But I think that's number four, right? So I think those are the last five boxes from that case. Oh Yeah, we have Family emergency had to go handle But we're all good now That's why I was saying I'm glad that we I was I had late night five nights this week that way That way I could We can catch up on everything tonight And it'd be like no, of course, Randy. I appreciate it I Like hanging out with you guys. It's always fun for me. Yeah Two random teams in each one. So if you guys want to this is a pick your team But we do have that five box random team version of these breaks guys Cool first five boxes Good luck Zion Williamson right off the bat New Orleans pelicans One of the teams that was filled in our team random You can see anything that has that little hat next to it means that that team was given away in our team randomizer So pelicans Christopher Hoyt and grads Chris Bought a spot straight up in that team randomizer ended up with the pelicans very first box already has his first So the reds are a parallel, but they're not a numbered parallel the greens are numbered to 99 so sweet Lou Williams 55 out of 99 for the Clippers and Chris Erickson. That was part of the trade so a little trade when trade mojo there and Also a team that he won in the dream randomizer They are yancy. So like, you know, the regular hoops is like paper paper thin These have like legitimately more durability to them Like if I did that to a regular one, it would have been Ignace Brosdika's rookie for the Knicks Yeah, a little bit. Yeah, actually exactly like optic, you know, see. Yeah, very much. So like off the Kyle Anderson silver For the Grizzlies Steve Burch Mike Connelly red For the Utah Jazz Serenity love Darius Garland. This is what I was talking about with the rookie variations So the new rookies this year the premium edition the rookie cards now have the players in their live action So rookie Ignace Brosdika is his regular rookie in hoops this year was in a solid background like this The photo variation in premium edition is this where it's the solid background. It actually looks really cool So that's for the Cleveland Cavaliers Patrick Sullivan Eric Pascal for the Golden State Warriors John Denine and Holy hell How about a short print Zion Williamson keys to the kingdom? I think we've pulled like three of the John Moran to this. This is probably the first It's not on when we've seen that Not too bad. That's pretty cool Pelicans Christopher Hoyt a team random is working out for you so far and it's only one box in Nassir little rookie red Portland Ryan Kasin and Kemba Walker silver for the Boston Celtics and James Coupe that card is super cool Yeah, we pulled like three of the John Moran ones and like somebody said that they watched ten cases be broken And they didn't see one of those John Moran's and then we pulled in like three straight cases. We pulled a John Moran This is the four. No, this is the third case. We've done on case breaks. We did one case also over there So four cases now we got a Zion So three John Moran's and a Zion I told somebody I thought we had hot cases of these Jackson A's Pelicans Christopher Hoyt Taylor and Horton Tucker THT Lakers j. Goans. That's a red variation Eric Pascal photo variation for the gold state Warriors John Denine Nicholas Claxton for Brooklyn and beyond. Holy wow What is going on here back-to-back boxes? We see our first one and our second one two boxes in a row Chris Hoyt See if we can keep going Dean check the website literally it's right above my head right there See it. That's a thousand dollars and they got two of them Jamal Murray red and Kevin Love Silver Hurston Ilyasova red Milwaukee Bucks That's John Denine that silver Kevin Love goes to the Cavaliers Patrick Sullivan Jamal Murray red for the nuggets that goes to Matt Arnold Kevin Huter green to 99 Atlanta Hawks Matt Arnold Isaiah Roby Oklahoma City Thunder Patrick Sue Seiku Damboya rookie red Detroit Pistons Nicholas Casberg and Mark Gasol silver for the Toronto Raptors and Fawad Corey Seven sold out nice bread So we can add that right behind the next break on the schedule. We go three boxes in a row with that Zion card Or even a Zion Teddy in the middle of a break Okay, you should come check something out when you get a chance You should come check this out when you get a chance box three We go three boxes in a row Just gonna walk out of here Avery Bradley red for the Lakers Jay Goins RJ Barrett photo variation for the Knicks John Denine Nassir little rookie Portland Trail Blazers Ryan Cason and high voltage Dramon Green Golden State Warriors John Denine cool Tom look forward to it Trevor Arisa red for the trailblazers Ryan Cason Michael Porter Jr. Silver Nuggets Matt Arnold Dean Wade rookie for the Cleveland Cavaliers Patrick Sullivan Matthew Delvedova red Cavs Patrick Sullivan Jamal Murray blue That is number 25 out of 49 For the Denver Nuggets Matt Arnold Seiku Damboya base rookie for the Pistons Nicholas Casberg Markel Foltz red For the Orlando Magic Steve Birch and Evan for me a silver for the Magic and Steve Birch Disappointed we didn't have a Zion on that one What a disappointment of a box Only RJ Barrett photo variation These are all group breaks over here Alan We do personal breaks over on our Instagram Teddy is over there actually doing personal breaks We have NBA hoops breaks available Release Wednesday really nice stuff go get boxes of it right now Before it runs out because if it runs out next time we have it Jordan pool rookie Golden State Warriors John Denine Nicola Jokic red for the Denver Nuggets Matt Arnold Cam Reddish photo variation Atlanta Hawks Matt Arnold. We got another high voltage This one's Andrew Wiggins for the Golden State Warriors John Denine Andrew Wiggins again for the Golden State Warriors John Denine and Thaddeus Moss or Saddeus young silver for the Chicago Bulls Eric Ainge Brandon Clark rookie for the Memphis Grizzlies Steve Birch Jackson Hayes rookie red This one's going to the Pelicans Christopher Hoyt red is not numbered But this green Trey young for the Atlanta Hawks and Matt Arnold is and that's numbered to 99 three out of 99 Nas read rookie Minnesota Timberwolves Robert Runkel Anthony Davis red For the Lakers J. Goans and Joe Ingalls silver for the jazz and sprendy love Alan you have to check on the website. These were a pick your team So it depends on the team. We do have a random team version of this where you get two teams per spot So you can check on that Jalen McDaniels For the Charlotte Hornets Robert Mancini James Harden red Houston Rockets Doran Kenick DeAndre Hunter rookie variation for the Atlanta Hawks Matt Arnold High Voltage Zach Levine Chicago Bulls Eric Ainge Nicola Vusevich red Orlando magic Steve Birch Montreza-Harrell silver for the Clippers trade mojo Chris Erickson DeAndre Hunter Hawks Matt Arnold Marcus Morris red for the Clippers Chris Erickson Back-to-back boxes in a 10 box break Yeah, I saw I saw one we pulled the John Rans. Did you pull a Zion of that before? Yeah, okay Boxes back-to-back Gary Harris green Denver Nuggets Matt Arnold. That's numbered 70 out of 99 Kyle guys Sacramento Kings Patrick Cologne Marcus smart red Boston Celtics James Coo and Willie Coley Stein silver for the Dallas Mavericks and John Dane This is a 10 box break half case Alan. The second half of this is going to be pick your team six Which if it's not in the store now, it will be shortly Or if you want to do random teams like I said, there is a five box Random team break of this that is in the store currently Where you can get two random teams for each spot that you buy and it's a five box break And I it's either it's either random team three or four that's in the store So if it's number four, it's the last five boxes from the case. I don't know what we're pulling the first three Cool. Good luck last five boxes guys There you go, Tom Very nice. We'll add that to the schedule as well So if you look at the schedule, there's one other break after this Probably not Randy I'm gonna check but I've got orders. We'll see I think it's sold out Alan It was random team three. So the last four five boxes from that case will be up there random team four So those will be up there and we can do that again tonight If it's sold out and on the schedule that just means it's sold out before The last time we took a break to do orders and update the schedule That does not mean it will not happen tonight. If it's sold out, it will happen Avery Bradley red Going to the Lakers J goings Mike Connelly blue to 49 for the jazz Serenity love Tremont waters for the Celtics James Coo Jimmy Butler red Going to the heat and Ryan Cason Dennis rotor silver for the Thunder Patrick Sue Grant Williams rookie red Celtics James Coo Brandon Clark photo variation for the Grizzlies That's going to Steve Birch Jalen Noel Minnesota Timberwolves Robert Ronkel Matthew Delvedova red for the calves and Patrick Sullivan and the Kendrick Nunn rookie silver for the Miami Heat and Ryan Cason Alan I like I said it there's one on the site. It's sold out The full the next one will be loaded. It won't be till tomorrow. It'll be later on tonight The silvers are really nice Talen Horton Tucker Lakers J goings Coby white Chicago Bulls Eric Ainge Tobias Harris For the Philadelphia 76ers Kevin Rebus. That's a red and Seiku Demboi a photo variation Detroit Pistons Nicholas Casberg Taco Fall Boston Celtics James Coo Goga, but I'd say rookie red for the Pacers and Patrick Garcia John Wall silver for Washington Robert Rumpel Deandre Hunter tribute for the Hawks Matt Arnold LeBron James red For the Lakers J goings. There you go, J. And go to the Todd's a rookie purple to 35 Pacers Patrick Garcia bull bull Denver Nuggets Matt Arnold Ricky Rubio red Going to the Phoenix Suns Oliver Smith and Admiral Schofield rookie silver Washington Wizard Robert Rumpel Mojo, I'll try to pick it up for you Terrence day Terrence Davis rookie red Toronto Raptors Fawad Corey and nice Tyler Harrow Miami Heat photo variation Ryan Cason Jalen Noel Minnesota Timberwolves Robert Rumpel Steph Curry high voltage Golden State Warriors John Deneen D'Angelo Russell Red for the Minnesota Timberwolves Robert Rumpel Steph Curry silver Warriors John Deneen RJ Barrett tribute New York Knicks John Deneen Kyrie Irving tribute red for the Nets young young in and TJ Warren blue for the Pacers to 49 Pacers Patrick Garcia. I mean if it's sold out it'll break tonight Is it sold out? Yana Sanse Campo Milwaukee Bucks John Deneen Cody Barton For the Charlotte Hornets Robert Mancini Erin veins red for the Phoenix Suns Oliver Smith and Malcolm Brogdon silver for the Indiana Pacers and Patrick Garcia And whether you're awake for it or not if it's sold out it will break box nine Brandon Clark rookie for the Grizzlies Steve Birch Enos Cantor red for the Boston Celtics James Coo and another Tyler Harrow variation Miami Heat Ryan Cason Nas read Timberwolves Robert Rumpel Blake Griffin high voltage for Detroit Nicholas Casberg Harrison Barnes red Going to the Kings Patrick Cologne Matthew Delvedova silver for the Cavs Patrick Sullivan PJ Washington Going to the Hornets Robert Mancini Kent Baysmore red Sacramento Kings Patrick Cologne Landry Schemet purple to 35 for the Clippers and Chris Erickson Terrence Mann rookie for the Clippers Chris Erickson Brooke Lopez red Milwaukee Bucks John Denine and Sergei Baca-Silver for Toronto Raptors and Flawed Corey One box left last box. Good luck everybody. No auto yet. Let's see if we can find one in this last one Dylan Winnler photo variation Cavs Patrick Sullivan Maxi Kleber. Oh, we got two photo variations in this Maxi Kleber for the Mavericks John Denine red Kendrick Nunn photo variation for the Miami Heat Ryan Kasin Terrence Davis rookie Toronto Raptors Flawed Corey Russell Westbrook red Houston Rockets Dorn Kenick Willie Kalli Stein silver for the Mavericks John Denine Dylan Winnler again this time. It's a red Do you think does Dylan Winnler have a photo variation does he have does he have in-play photos? He might be the only one that maybe doesn't have a photo variation But Cleveland Cavaliers Patrick Sullivan Kevin Durant tribute green to 99 48 out of 99 for Brooklyn beyond he on in Lugans d'Ort Going to the Thunder Patrick Sue Darius Basley for the Thunder Patrick Sue Larry Nance Jr. Red For the Cavaliers Patrick Sullivan and Cody Martin rookie silver for the Hornets and Robert Mancini D'Ort It's the man So there you go guys that was 2019-2020 Panini Hoops premium stock hobby hybrid ten box half case break pick your team number five From Jasper's case breaks calm pick your team six, which is the second half of this case We'll be in the store later on Jasper's case breaks calm. Thanks for hanging out. We'll see you next time


Welcome to JSA TV and JSA Podcasts, the newsroom for telecom and data center professionals. I'm Barb Mitchell coming to you today from ITW 2021. Joining me today is Sean Barton, Chief Operating Officer of Edge Presence. Sean, thank you so much for joining us. Welcome to JSA TV. Hello, thanks so much for having me. It's a pleasure. Why don't we start by having you, for those of our viewers who don't already know, would you tell us a little bit about yourself and about Edge Presence? Sure, I have a background in technology, everything from hardware, software, infrastructure, telecommunication, it kind of runs the stack, as do my colleagues at Edge Presence. And what we've done is we've taken all of that collective knowledge and put it forward to build modular multi-tenant data centers to deploy out on the edge. Okay, and I mean 2021 has been a great year for Edge Presence actually. You've received a number of fantastic accolades. So I'm going to list a few. So these include CRNs, ranking in CRNs, 10 hottest Edge computing startups, STL partners, 60 Edge computing companies to watch. And most recently and impressively, you earned the number one spot in tech tribunes best tech startup in Jacksonville. So tell us about this. What's behind this? Why are you winning all these awards? What's behind all your growth and this success trajectory that you're on? I think we feel really lucky to be recognized. And I think that where we're finding success is the fact that we have taken our backgrounds and really focused on the core elements of data center. And when we look at our designs and deployment and the operations of these data centers, we try to keep our costs low, stay very lean and nimble, which allows us to quickly change and adapt and evolve to meet our customers needs. And that has really, really enabled a lot of success for us. We've also expanded quite a bit to several locations throughout the US. Can you, can you talk to us about those locations and others that may be on the horizon in the future for Edge presence? Sure, sure. We have two, two key strategies for deployment. The original deployment strategy was to focus on tier two, three and four cities that do not currently have a data center. And we did a lot of research to determine what we thought were the next right communities that needed a data center. And so we went ahead and started our deployment list focused on 100 plus sites that we identified. And we're trying to slowly get out to all 100 sites. In addition to that, we are second deployment strategies to focus on core clients when we have an anchor tenant that needs to go out to a city. We've sort of developed into a data center on demand scenario where if a client says, well, I need to be within this specific geographic location, we can take down property and deploy there pretty rapidly. Well, so it sounds like you're, I mean, you're already taking on a lot and made, you've made great progress to that end. But what's next? You know, we're always thinking of, okay, that's great for now, but what's next? You know, how about next year? What's next year going to look like for Edge presence? I think it's just going to encompass a lot of tremendous growth. I mean, we've got a, we've got a national contract with an MNO and we're going to see a lot of growth nationally in deployments throughout the next several years, based on that loan. And then we have our core strategy that we're still following, as well as some other things that are developing very rapidly. And I think the other thing that's going to really lend itself to growth over the next couple of years is when we talk about Edge and next technology, the next gen technology and applications and things. I think we've seen them, a lot of them being incubated in the last couple of years and tested in labs and in small environments. And now they're getting really ready to hit the deployment stage on a lot of those, those technologies. I think we're going to see that really fold into the mix in the next couple of years as well. So for those of our viewers who want to follow this path that you're on and learn more potentially about Edge presence, where can they go to find you? It's very easy to reach www.edgepresence.com. We list everything about our deployments out there, where we're going, our news is out there, even some of our design elements that sets us apart from the other data center companies that are out there. It's all on the website. Thank you. Thank you, Sean, so much for your time. Really appreciate you taking a few minutes out of your busy schedule to chat with us today. And thank you viewers for tuning in to JSA TV and JSA podcasts. Happy networking.


What's up? How are you guys today? As most of you know, I've done many videos on eating raw animal foods for specific health nutrition benefits, mainly testicles and caviar. But we now have every gland you would ever want on Frankie's food range meat. And you want to apply some specific precautions to these foods so you don't overdo them. The overarching logic is that these are relatively inaccessible and powerful foods from a nature perspective. Eating more than one adrenal gland or testicle per day, even per week, is pretty questionable. You're getting bioactive hormones and tissues that your body can use for days to weeks at a time by just having them once. And I've read in books about how each member of the tribe would get a tiny nibble of the adrenal gland, not half a pound of them delivered straight to your door. And that's what we're going to be doing today. The adrenals, which produce six different hormones, aldosterone that regulates kidney function, cortisol, which plays a role in digestion and metabolism, the male and female sex hormones, androgens and estrogen, as well as the two types of adrenaline stress hormones. And there's a reason that adrenal glands are usually very expensive and the most sought after. It's because of that hormonal profile. But if you're interested in any of them, if you go to frankiesurangeme.com, you can click on each of the products and read more about those specific health benefits. So this is how you guys will receive it, half a pound of adrenal glands. And I also have a single-goat testicle here, but we have many different types available on the website, guys. Check them out. So we're doing the testicle for testosterone and the adrenals for all of the other hormones.  So when you cut the adrenal gland open, you have the outside and then the inside that each produce the different sets of hormones, but, you know, you can't really separate them. So what I do is the same as you guys have seen me done with the testicles before. I chop it up very tiny. And just for comparison, not all of these are the same size.  Just do a very, very tiny amount, see how you react to it, and then you could always increase it. In the case of these glandulars, less is definitely more. You know, same with the testicle. I wouldn't really, I don't even do half of a testicle. You know, a lot of people are stuck in this mindset of adding things and excessiveness, which is really the opposite of what nutrition should be. We really just want to replace things that we're having issues with. And, you know, someone like me with liver dysfunction and all these modern estrogens in the food and water supply, it makes sense to try to replace some hormones. Since I've had the testicles before and I know how I react to them, I'm okay with mixing them with the adrenals today, but you should really just keep it to one glandular every day, see how you react, and then, yeah, maybe in the future you can combine them, but you want to make sure that you feel good taking each of them. Because if you take like a thyroid glandular and you feel crazy, then omit that one and try the other ones. Don't just take all of them at once, because then you can't see which ones you actually need. So we have maybe half a teaspoon worth of adrenal gland, and I think it's going to be two tablespoons of the testicle. Man, nothing like eating raw animal organs at 6 a.m. before you're going to work, huh? So the only other thing I'm going to take this morning is half a teaspoon of masticum, and this is to prevent any sort of bacteria in the stomach from kind of digesting or absorbing these glandulars and hormones, because what you want is for your body to break them down with enzymes and absorb them into the bloodstream. So that's why we're taking the masticum. So normally in the morning I would take vitamin C, magnesium, maybe some B vitamins, today I'm not doing that. You don't want to bomb your stomach with all of those vitamins and then the glands you want to kind of space them out. I also have to start really focusing and doing my liver detox smoothie with the Flexros and the fiber, but you know, if you start having any sort of digestive issues or feeling weird, it's probably because you're doing something crazy and unnecessary and unrealistic. So hopefully this helps clarify the amounts of these products that you guys should be using.  So hopefully you guys have enjoyed these products. Hopefully they have you feeling a lot better, and maybe we'll do some more blood work and stuff in the future to show you guys that these will actually change your blood levels of certain hormones. So you guys can go to frankysurageme.com to check out all the glandulars, as well as frank-safano.com for all of my other businesses. So I'm really interested in products and just by browsing through the websites, you guys can learn a lot about things you might want to be doing for your health. So as always, if you could please drop a like on the video, and give a comment down below, subscribe so that YouTube can unsubscribe you next week, and be sure to check that notification bell so they don't notify you of my videos. Thanks for joining guys, and I'll see you for the next video.


Ice arches that form along Nairie Strait, which separates Greenland and Ellesmere Island, act to reduce the export of thick multi-year ice out of the Arctic. Here, we show that there has been a recent trend towards shorter duration arch formation that has resulted in enhanced transport of ice along the Strait. This article was authored by G. W. K. Moore, S. E. L. Howell, M. Brady and others.


This study found that 56% of patients visiting the internal medicine clinics had fibromyalgia, based on the 2010 modified criteria from the American College of Rheumatology. This suggests that fibromyalgia may be more common than previously thought. Additionally, the mean age of those with fibromyalgia was significantly higher than those without it, suggesting that fibromyalgia may affect people of all ages. This article was authored by Sanat Javid, Muhammad Zayed, Sumerah Imran, and others.


Welcome everyone. I'm Matt. I'm the platform manager for Moodle Alamus. I've been with Moodle for almost a year now but this is definitely not my first Moodle Mood, although for those who do know me I've stood up on stage many times at Moodle Moods wearing a different logo on my t-shirt. And my Moodle journey started probably in about 2010 when the university that I was working with at the time moved from WebCT to the newly released at the time Moodle 2.0 and my job then was as an educational technologist helping academics move their learning into the online space and all of the challenges that that entailed. I then moved on to a major Australian health care provider where I helped them roll out a Moodle system and then use it for the teaching and upskilling of their staff. Sorry you pointed a camera at me, I was small. And then I spent about the best part of a decade working with a Moodle partner where I work with organisations of basically every type who are all at various stages of their Moodle journey and really just sort of helping them solve their problems and get the most out of Moodle Alamus. And after all that time this year I'm up on stage at a Moodle Mood in a Moodle t-shirt and I'm very very excited about it and it's awesome. So where does my role as platform manager fit into the whole thing? Here's my slide thingy, there it is. So you've probably seen this before if you're in Brett's talk so this is a bit of a high-level diagram of the relationship between the various products and services at Moodle and with Alamus sitting right in the middle of it and Alamus is actually managed across two different teams There's my team, which is the platform team and we look after the core of Moodle Alamus So things like all the core subsystems, user management, administration, APIs, security, all of that sort of thing and then wrapped around the Moodle platform like a big hug is the educational solutions team and they're led by Brett Dalton who you would have seen if you went to his earlier talk on open standards and the educational solutions team look after all of the educational components of Moodle so things like all of the courses and activities. Now Brett and I work really closely together and there is some overlap in what we do but I'm the one lucky enough to be on stage today talking about what's coming in 4.3 So just let's get on to that enough about me So Moodle 4.3 is going to be released on the 9th of October. It's not very far away now It's going to have over 260 new features and improvements and If I was to spend about the next 25 minutes talking about each of those I'd have about six seconds per thing now. I did kind of consider trying to do that I know I talk fast, but I'm not going to I'm just going to focus on some of the new things and I'm also going to spend some time at the end giving a small look of the things that we've got in development now that's going to be in Moodle 4.4 So let's start at the main course view as a student In 4.3, we've worked on the presentation of the activity cards. They take up less vertical space, which means less vertical scroll However, we didn't want to limit the display of important criteria and information to students So we've changed the way that we display completion and availability requirements for each activity The completion requirements are now in a drop-down Which just really helps reduce that visual load in activities that have got a lot of things that you have to do before they're complete But you still get that overall clear completion of when they're done We've made a similar change to the availability criteria so you can expand out a box and see all the criteria that's required and With the new layout actually as you work through and complete an activity as we're seeing Now that box will actually just update and only show you what you need to focus on next again Just trying to you know help students focus and reduce that that cognitive load that they have Looking at the activity cards now as a teacher We've made some improvement of some good improvements here to a lot of the common actions for activities Are now more easily accessible directly from in the context of where they're displayed So also into additional where they've always been so things like you can now update activity Activity completion directly from the drop-down that displays the activity completion for that activity and when you do edit them You're only actually presented with the criteria that the settings that you're trying to change no more Scrolling through that entire activity page just to get to completion In a similar fashion you can update the group status directly from the activity card itself And in fact noodle 4.3 introduces some new UI elements That sort of make that easier and you'll start to see that rolled out this video is not entirely in sync with what I'm talking about It all loop you'll get it and Just like the completion The availability settings can be updated from where they are and again with availability You only get the settings that you're trying to change And finally you can also set the visibility for the activity from the context menu And as a bonus and the same as what you've seen with the other ones if you've already got visibility set You can update it from where it's being displayed And these changes I think are really going to just save a lot of time just going through those very common course management Tools and I actually think it's probably my favorite set of functionality in 4.3 If I'm allowed to have a favorite probably shouldn't say that Still on the course side of things but moving more towards activities We've made some improvements in 4.3 to the way the LTI tools are set up and used and if you saw Brett's talk a bit earlier You would have seen some of these so just to go through these in a little bit more detail There's a dedicated page to set up LTI external tools now and on this page You can see what ones you've got set up for your course You can see how many instances are used in your course You've got easy access to edit and delete them as well as add new ones and the way that you create tools for a course Has been simplified. It's just easier to do now and once they have been set up They're actually also easier to use in your course In the activity chooser which displays all your active activities as you're aware the configured LTI tools now display as First-class activities in there so you can actually find the LTI tools that you've got set up in your course And also though if you're a teacher and you don't want all of those LTI tools in there There's only you've set up a few but there's some you don't want to use anymore or those don't want it as easy access to you Can just as a teacher in your course select which ones you want to see and don't One of the things that's actually not in the video, but is very cool if you're an administrator who's got LTI tools set up at a course level. You can now restrict their display by category So in the case where you've got a math faculty that's got a certain set of LTI tools an English faculty There's another set of LTI tools. They don't have to see each other It's just once again, just reducing that load on the teachers and making slides there a bit easier starting Step forward into the mic. Sorry Can't stand still Zooming out a bit now 4.3 brings some good improvements to the activity completion. So at Site level administrators can now set default activity completions for their activities using the site So this is this case of where your organization for example wants to have a completion criteria for Assignment that says students must get a grade before that things before assignments are considered complete as an organization Teachers now learn longer have to go in and remember to do that every time they set up an assignment It just gets inherited Once again, it'll just save us so much time We've also taken this new site admin page Pattern and applied it to the course. So if you want to manage activity completion Defaults at a course level you get the nice new improved page You've seen in this video and in a couple of the other ones the completion settings themselves Also improved they now have a bit more of a progressive disclosure pattern to them So the settings are only shown to you as the as they need and they're only the relevant ones The irrelevant ones are hidden and this was actually an Mua sponsored Contribution so I do thank them for helping make this possible on The topic of tracking student process at progress. I should say we've made some good changes to the gradebook Firstly looking at the gradebook setup. You can there's an improved user interface You can add gradebook categories and items directly from a drop-down Menu and when adding them the settings are simplified and they're also displayed in a modal window And so you're not taken away from the context that you're working in it's everything's done in front of you There's some other changes. We've improved user search behavior So you can easily more easily find your students when you're working in the gradebook We've made it easier to improve and what improved I should say the bulk movement So you can move the grade settings around a bit more easier and also in this video. There is a sticky footer at the bottom of the page and that just displays common actions for the reports that you're in It's always at the bottom of the page. You don't have to try and scroll to find it And look, there's actually been quite a lot of improvements to the gradebook over the last couple of versions of LMS I've just given a little bit of a tease of what's in 4.3 But if you're interested in a more in-depth look I Recommend you go to Barbara's presentation, which is on at 2 30 p.m. On Thursday in this room I believe I'm getting the nod. So yeah, I do invite you to attend that and You just get to see some more great book improvements in depth So feel like I've gone through so much already at Sony so little What was seen so far is broadly relates to like optimizing outcomes for both students and teachers So where these changes for both groups, you know will help them manage their workloads and optimize their time and look What we've gone through isn't even everything in that area But I am going to spend some time looking at some things that are not just limited to courses and activities Now security it's not the most attractive thing in an application But it's so important and we've always taken a security very seriously and LMS But for 4.3 we wanted to do more and just have that dedicated push to sort of get where we need to be Or beyond where we need to be in fact and this slide just got a few of the security improvements They're pretty nerdy, but if you're into that sort of stuff, they're pretty cool I'm a nerd I can say that and look they sort of just basically cover how we manage Passwords more secure more securely how data is secured as it moves around the various parts of your Moodle infrastructure And a couple of examples of how we've also improved the Moodle user interface to enforce additional security patterns and just trying to You know do things like not show keys more than months and things like that And look this is really with the aim of making Moodle LMS the most secure LMS application available And this is something that we're going to keep pushing beyond 4.3 There was a couple of things I did want to specifically mention about security and privacy in 4.3 The first one is around our data sharing when using the YouTube and the Vimeo media players So both these players now have an admin option to reduce user tracking. So for Vimeo it implements their do not track option and When you've got that enabled it basically sends only the data that it needs to Vimeo to actually play the video for YouTube it reduces tracking using their YouTube no cookie comm domain and It still uses some cookies because it's YouTube, but they're not they're not initialized on on Render of the video anymore. They're actually only get initialized when you click play So if you wanted to have something to say if you consent click play you can do that And there's actually a bonus with this feature for YouTube is because it doesn't initialize all that until you click play There's less web calls when you're loading pages with YouTube embedded Another specific piece I wanted to talk about is multi-factor authentication And it actually has come up a couple of talks. We've seen already 4.3 will ship with native multi-factor authentication. It'll work with any authentication method. You're already using it's not a replacement authentication method It's an extra feature It works with some of the common factors that you'd be familiar with like the authenticator app on your phone Hardware tokens, which are really cool your email and a few others This was a joint effort with one of our partners They had a battle-tested plug-in that they've been using in some high security environments for quite a while We've brought that into core. We've contributed some UX improvements and some other user workflow improvements And made it available to everybody and we'll actually continue to work on that a bit more on 4.4 I won't show too much of this But if you're interested in more about MFA or and authentication security in general I recommend you see Peter Burnett's talk in this room I think he's the one after the one after mine and Alexander Bice's presentation which is at 4.15 today in the Trezi point group So something slightly lighter than security. So over the last few years of LMS We've been improving our integration with the Thai MCHTML editor Because we're actually sort of moving towards retiring our own homegrown addo editor Tiny became the default editor in new installs in 4.2 And we've continued to improve it in 4.3 And one of those improvements is actually several improvements is one in one I should say we've made our use of tiny compatible with the tiny MCE premium plugins So some of these are getting very quickly demoed in the video They're like their advanced image editing and PDF export plug-ins. They've got a bunch of content edit plug-ins like Advanced tables checklist footnotes format painter Plus a bunch that I didn't get time to put on the slide And the cool thing about this and to make it a lot easier for admins You don't need to install additional Moodle plug-ins to get this to work You just need a tiny API key and click enable the premium plugins will be downloaded directly from tiny and available in your Moodle instantly We've also made some improvements to the core of tiny and just a couple of those that we now have a Nice source code editor for when you want to work with your your markup directly as you can see you get the nicely Formatted code you get your code colors the editor itself also does like tag suggestion and tag auto completion and and tag closing As well just so to make it easy when you're working with it like that We've included the no link plug-in just in case you want to have URLs in your content And don't want Moodle to turn them into links for various reasons But at full screen button to the nav bar just to make it easier working in that mode Plus more stuff that's coming in 4.3 and all of these things are really in that space around unlocking creativity and helping you just Build better learning content in your Moodle Right, so not only do I not have enough time to go through all of the new things I don't even have enough time to go through all of the major things in 4.3 But there is a few things that I did want to quickly mention 4.3 will introduce a new communication API and a new plug-in type and these are aimed at making it Easier to integrate LMS with external communication Providers and in 4.3 will include the functionality to connect your Moodle course to a matrix instance Which is quite cool the we've improved the Moodle net functionality So in 4.2 you could share single activities in 4.3 you'll be able to share whole or partial courses We've added there's improved functionality in the question bank to assist with discovery and filtering of questions and I actually The question bank work and is on quiz works on ongoing and there'll be more there's more of it in 4.3 That I won't mention. There's some coming in 4.4 I will make a special call out if you're interested in that space in Moodle and improving that space Please come and see Tim Hunt. You probably have all seen before and Luca Bosch They're the kind of people who want to ask they they are the people to talk to and I'm really keen to hear your questions We're continuing to build our report builders There's more functionality and more reports in that and there's some course navigation improvements Including better navigation when using the book activity and there was actually a sneak peek in one of the other videos if you saw those little floating arrows and that you actually would have seen if you use Moodle Academy and Part of the reason I sort of chose to quote these particular features is they did make it easier to share and communicate when using Moodle Which is important when you really want to facilitate that collaboration with your different users Look, there's more stuff coming in 4.3 There'll be some more detail about all of these features plus more in the next few days as we get closer to the release and start to send out some of those release communications But before I start to wrap up I did want to spend a bit of time giving a glimpse of some of the stuff that we're working on now That's aiming to be in 4.4 because guess what the 24th of April next year is not far away and Just like the speed that I'm talking we are not gonna be slowing down So just a few things I want to touch on We're introducing an improved UI and better workflows when adding images and media when working with our text editors And this is just a couple of the slides of what that'll look like It's just gonna be less clicks when doing those really common actions of adding media and images to your course And it's actually part of a larger project to improve the file picker and repository functionality in LMS overall We've been working on further improvements to the course layer and how you can manage activity hierarchy on the course page Now I do really need to point out that these are preliminary designs that haven't been finalized That's why they're in black and white But in the concept you can see here you've got the ability to add subsections to your course So in the image on the right you can see week two's got two subsections one for the week's quizzes and one for the week's readings and I do want to make another call out if you are in wanting to get involved in shaping this functionality Sabi who I'm not sure was in this room today But Sabi and the UX team are running some usability testing sessions across the next couple of days right here at the moot So if you want to get involved in that head over to the moodle stand And they'll be able to give you a bit more information on how to get in contact the team We've got to me improve we've got some improvements landing around how you select to manage your themes in the LMS Just to make it easier to see where the context of various themes are getting used as well as some reporting behind that as well Look apart from being a cool improvement I just wanted to call this one out just to sort of show that we're not working across all areas of LMS to improve things for all of the user types Big list of some other stuff that we're working on tiny the MCA native plugins So they've tiny you've got a community of plugins just like we do at moodle So we want to generic way just to add them from the moodle Admin interface once again. No need to install them in moodle plugins as Brett was talking about There's more LTI improvements on the way So more changes around making it easier to set up and manage LTI tools more places You can use LTI tools as well as long as in addition to the ability just to integrate with more different types of LTI tools We've recently completed a large piece of research around Notifications with sort of the aim of you know getting that right information to the right people at the right time And the first parts of that functionality is going to start landing in 4.4 Some improvements around the task API so the way that moodle runs and manages its tasks And we're going to be starting to some user research around the admin menus and making lives easier for our admin So they'll be look out for some ways of getting involved in that Plus more still so much more stuff And look today. I've really just sort of covered what's happening in the very short term in LMS we've seen some of the stuff that's coming in 4.3 on the 9th of next month There's a very quick look at some of the stuff happening in 4.4. Well, that's really just the start So I do invite everyone to come and see Marie's talk at 430 this afternoon in this room She's doing the last keynote for today and she'll talk about our larger product vision And look finally why I'm up here on stage I would like to say a big thank you to everybody who's contributed to the 4.3 release Specifically everyone from the moodle community. So everyone who contributed in various ways from lodging issues in our track are Taking part in all that user research Helping with testing and indeed to all of our community of developers Thank you to all of our partners who support so many of you with your moodle instances Thank you to my team and the other LMS teams. They do so much of the work every release and finally Thank you to everyone for coming today. Thank you Just before we get started with the next session We've still got some time for questions from that if anyone's Got a burning question. Yep. We've got one over there Barbara, please Oh, we've got multiple While the sorry while the mic runners are doing their thing Just to let everyone know I'm around at the moot all week I'm on the stand for a couple hours on the schedule somewhere And I'm not hard to miss. So if you've got any questions, you don't get to just come up and talk to me Is bootstrap 5 coming to moodle anytime soon? Is it already there? So the short answer is yes, there's already a tracker and the team are doing Polymer only work on it. I don't have the exact sort of one that we're aiming for off the top of my head, but Yes, okay I Understand why from a business point of view it's very helpful to have paid integration partners Is there ever a danger of conflict? So for example tiny mce's business revolves around certain selling certain premium plugins What if we think in our open source way we want that feature as part of standard moodle Can we just is there any kind of impediment just implementing that as a moodle feature and really? releasing it freely So to answer your question directly, um not as like maybe easier to ask in the abstract not a specific Yeah, no, so it's always like it's a good. It's a very very good question And I'll sort of get to the answer of it as well I won't just talk around it But one of the things that I did want to mention because it talks to a lot of the stuff that we're doing in this space is we You know we have to decide we've got limited resources and also some of these things I'll take the matrix integration for example Matrix is a massive company big group of people a lot of developers building a chat platform is Lots and lots of work right more and building a good one. Let's say right not just a one so Where things In the case of that We don't like we don't want to start building one.  There's already a good one So why are we integrate tiny's the same thing? There are You know commercial things around that But there is sort of and I don't want to speak to a contract that I'm not a hundred percent across But in in terms of the ins and outs, but there's no really reason for like for the thing and one of the Exact examples of that is the the code plugin the code styling plugin. They've got a premium one of those We've got one in core


Are you frustrated and defeated after every job interview? Wondering why you're not getting past the first round? Putting in a lot of effort with no results to show. Don't worry I have the answers you're looking for. I'm Chris and I've been hiring UX designers since 2015. Over the years I've probably interviewed hundreds if not thousands of designers. In this video I'll show how to ace your next UX interview with these six actionable steps. And as a bonus I'll give you tips in dealing with rejection. Stick around till the end. Let's get into it. First let's tackle the problem with most UX interviews. If you're struggling with getting past the first round of interviews I would approach it like a UX problem. So it'd be like well what do the interviewers want? First like what are they looking for? What are the measures of success that gets you through to the second round? It's not completely your fault okay just know that as well. Because UX interview is really weird right? Like I don't know how many engineering friends you have but their interviews is really simple. The way they outline it is really simple. Either it's a culture fit interview then it's a technical test and the good thing about technical interviews from the engineering side or engineering interviews is they'll tell you what they want right? Hey we want you to produce an algorithm to solve this. We're going to analyze you based on this but for design it's completely different because they don't necessarily think that design is a technical capability or whatever the thing is but it's not really controlled and written by designers like the interview process. But for engineers it really is.  So maybe that's also one reason why you're not progressing right? So it's not completely your fault and that's just a problem with the industry in general. Second thing I could say about this is I'll tell you about my experience of phone interviews. So we set up phone interviews in the organizations that I've run because one I'm in Vietnam or in Asia or I'm in Mexico so we always test the candidate on English skills right? In the US I'm not sure how much they do that but that's the first thing and then we provide questions to the recruiter to ask. It really depends on how familiar the recruiter is to it but it's really a real general thing. So they'll ask you about your design projects can you speak about it and you know really general stuff they're not really super qualified to sort of give you the green light so they just really want to hear you say the right stuff which is typically your design process, what you learn what would you do differently can you tell me where you made these decisions and why? So it should be the easiest stage. Here are some actual tips that you could follow. Practice with real or mock interviews. Yeah one of the things if you're nervous for the interview then obviously practice makes perfect but having you know sticking the answers that you might receive next to your wall or whatever you're taking the interview that helps but remember you can never prepare and you never know exactly what they ask right so I think embracing that chaos is also good and the best interviews that I ever do are ones that I don't really care about so I have this really weird habit of like every three to six months just do job interviews after job interviews even if I don't want the job because it puts you kind of in that practice so I would say you should do that too right so what you should be doing is like doing a lot of interviews just get as many interviews as you want even if you don't want it so it filters out good questions and it basically puts you in the space of I know how to deal with the questions because in my head I have answered like this three or four times already right so you can do this with companies in Nigeria or Africa or you know companies that you kind of aren't super interested but it's good practice for you right and then you know the US company would be the goal right like if you can get a job move over to US that that would be the best sort of thing or even to work remote but you could also do the mock interviews on ADP lists right there's plenty of you know local people on ADP lists that could help you you know similar times those and stuff that could do mock interviews you know the more you do the better you are and the more surprising questions they throw at you also the better you will be to think on your feet right talk about what you want to talk about I wrote down the common problems I see on design teams and then I map that to what I've done before to try and solve those problems or at least ideas and I've said here's what I see that is a common thing that I see all the time and here's how I would go about solving it maybe it's too deep for the first interview but really what you want to do is impress them right so even sometimes when they ask you some sort of questions and you don't really know you can talk about what you want to talk about it's absolutely fine remember these are recruiters all they want is like you know is this person like excited are they capable of like kind of speaking about design are they passionate all that you know are they smart so that they're not really judging you on specific design knowledge what they're judging you probably is like does this person sound like someone I want to work with can they speak in an elegant way or whatever so it's okay not to answer their questions I think a lot of people do that and you can just talk about what you want to talk about right things that excite you yeah reflect on the past I've been applying to like head of design jobs and I basically have a document of what value I bring to the company so I think you should do that too so think about your career think about where you are okay and clearly write down what you want to do where you want to be let's just say you want to be an expert in product design you don't want to be a specialist you want to be a generalist or you're really fascinated with user research or you know something you want to learn more about and delve into where you are in your career now but also your achievements in the past at your company or what you've done that says I think I did really good at here and I believe I can transition that value to your company right I think that's a good practice as well also feedback at the end of the interview so one thing is that I like to do and not sure everybody likes to do this but I like to do it anyway I actually ask at the at the end of the interview I'm like so do you guys have any feedback from me you know how did that go in your perspective and so that will basically kill the doubt that you had in your head right if they didn't like it hopefully they give you some good feedback if they did like it uh then great let's move on but just for your own sanity ask that question I think I appreciate it when people ask that because I'm like oh look at the balls on this guy let's go right that's always good send a follow-up you should probably send a follow-up you should always send follow-ups why do we do this we send follow-ups to say thank you for your time first second is we say not only thank you for your time but we appreciate that you sat down spoke to us to show your enthusiastic right to show you actually want this job so it could be two lines in an email it doesn't have to be this cover letter of like this is my destiny clearly isn't right but you can just say simply thank you for your time I really enjoyed it if there's any other questions you want me to ask feel free to ping me and just be open and if you did f**k up let's just say they asked you where do you want to be in five years in manual and then you say ah I don't actually know then you can address that in the follow-up you can say oh that question kind of caught me by surprise but here's my short concise answer right you can address that and then what that does to interviewers is say oh this person is actually not as bad as I thought or I have warm feelings because they reached out directly after right do it within one or two hours as it's fresh in your head and just kind of be like look because when you wait for someone you're already nervous right so how do you address that by acting first by saying okay I'm just going to do what I can to close this deal but then after that you can't do anything right so address those feelings straight away if you didn't think it went well even if it did go well you should still address what you thought about it and just kind of move on you remember you're taking five minutes to write that email but the chances of you going through the probability will be higher after that as promised here are the bonus what if you didn't understand the question you are being asked in the interview so if you didn't understand the question basically what you just asked me right I said what do you mean and it's just it's a it's a mechanism for clarifying right so it doesn't you don't have to you don't have to be perfect they're not looking for the perfect person they're just looking for the person that's perfect for the role right they're looking for real humans so if you end up writing these cookie cutter answers likely you won't get hired really they want to know who you are and what you're passionate about right they want to see the potential right and that's what all good hiring processes kind of filter out so don't be too worried about that really it's just nervousness right it really is just about can you talk about what you work on in a concise manner and you know are you enthusiastic have you done some research on the company do you do you know what they're talking about or working on and yeah the first stage should be the easiest but if you knock off some of the items that I mentioned I believe your chances of success is a little bit higher and finally what do you do when you get rejected sometimes when they reject you and you get these rejection letters it weighs you down and I think that's super normal right like because you had such high hopes or you know everybody wants to sort of be like accepted or validated through some sort of recognition but this is the hiring process right you got to do it a million times so you grow thick skin and that you can kind of approach every situation like that you know whether it's selling your product online interviewing on a job or even dating right you're going to grow thick skin man otherwise you're not going to get the girl all right you're not going to sell the product and you won't get the job this is what it is right when you go up to a guy at a bar if she says no do you move on to the next one or do you still try either way people do different things but I'm saying to use that trying again is probably better and then if it still doesn't work then move on right this is the whole courting sort of thing with hiring processes there's probably only a couple of companies in the world that you should really work for as a designer right and the ones that you apply to I'm guessing are probably not those companies so it doesn't matter at the end of the day right so you know the best ones are like your Google your Apple your Airbnb your sort of like these creative agencies out there but literally there's probably 10 in the world but how many jobs are there there's there's hundreds of thousands of jobs so don't be super upset if it doesn't work out it just doesn't work out and and that might be for the better for something else right I always get upset as well when I don't get it because I want to get it because getting it feels good but not necessarily is it the best career decision as well let's just say both companies offer you a position which one are you going to choose you're going to have to reject one of them right so it's the same sort of concept so yeah if you need UX mentorship let's jump on a call link in the description or you can hit the big red button bye