Don't counter. Oh, if I could have countered supers that would have been sick that hit read would have been amazing But I'm like I'm just gonna keep doing it How's it going everybody dato do it here back with another round of dragon ball fighters online matches and in today's video We are finally going to be doing the first open lobby of season 3 if you're new to the channel I don't know how these videos usually work I post on Twitter what lobby I'm in trying to get an empty one so we can fit in as many people as possible And then we all head into the arena and just play as many games as possible Another thing I've been doing in these videos is after I play somebody I also take their team and I guess in season 3 maybe even their assist and then go into the next match with that team And assist and just keep repeating that for as long as I can and it looks like in our first game here We're going up against the goji to play on land of the supreme guys. All right I kind of like honestly this has become one of my favorite stages and fighters and I'm still waiting for another new stage Arksis you can you can keep me waiting as long as you want as long as it happens. Eventually. I ran it to gojita's light. Oh I was not ready for that. I Was not ready for a drag-a-rush on the opening block string not that I was I wasn't taking that Let me tag out here back in the Kefluk. I Jumped up to him. All right sliding knockdown piccolo assist set the two warbs up. I Went for three I should have thrown in some key blast But that'll do That will definitely do who's coming out trunks. All right, I was thinking about piccolo But now I want to do some ex flip mixes. Maybe not even a mix. I kind of want to ex flip a neutral and see what happens Wow, I've never been so physically stopped in my life. He literally kicked me That time I didn't have super dash I tried well I don't think I had super dash anyway, so I try to make these am super dash. Boom. Let's go. Oh Piccolo wasn't there to help out Catch him Kefla. Damn. That was a bad miss. That was just a bad miss. All right, don't go hunt going to put in work Ex legs What is it? Is he gonna level three here that? Okay, no level three. We clashed. Oh my goodness. I Didn't block that I didn't block the overhead. I try to block low and he wasn't on the ground So not my brightest defensive moment. I'm not gonna win any defensive awards of the year Even though I would love to Just just for once if the defensive Academy could nominate me. I'd appreciate it But I don't think that performance is gonna warrant it speaking of that though. Is is gohan gonna warrant this? Nope. Oh, I you know what? I didn't know if that would work But we were so close it seemed like a waste not to try go on don't level three. Don't do it. Don't do it Don't do it All right now to get off the ground Do we level three and return? Return fire. Oh, he's dead. He's trying to drag a rush. That's a whole light grenade. You got to eat All right, when do we spark? Because we got to do it eventually. I'm a switch actually we don't we don't have to spark We I can't believe that didn't punish that. Oh That would have been If that worked that would have it oh get off me All right. All right, you can block you can block I see you I see you I see you oh Good super that oh no super that's just all right. Well, he got hit. So that's the big important part You know what hold this oaky hold this Reflected do whatever you want. Oh That was not the best move. All right. All right decent damage. Do we get the corner? No, we do not but whatever just eat this oaky pic. Lois. This is also here to stay. Oh I shouldn't have gone with the overhead. No all the lag I didn't have enough time to actually connect with it. It would have connected But we messed up and went with the heavy should have gone with the mediums. That was a big mistake It's actually been kind of it's been a long time since I've played Kefla So I might wake up level three just to bring in the hey you blocked it. Oh No, did I just lose? No, I'm gonna lose. I'm gonna lose because I switched. Oh Oh No, dude, I shouldn't have switched. I was just so excited. We got the reflect Bro Super Dash one more time. I might super you. Oh god Just take the first couple of green orbs got to lock them down. All right, so you get the first I completely forgot his team I knew my memory was trash, but I forgot his whole team Wow, this is actually kind of a scary team Kefla Frieza and DBS Broly That's a lot of characters that required different ways of engaging with the character Kefla for one hand I got a block a lot. Oh the machine gun punch. That was sick. Go on lock them down That's sliding, right? Okay. Good Yeah, I feel like I haven't played Gojin in a while and I was gonna bring up the fact that people say he's a you know He's fallen in favor a lot now. I can see why in this current game. I feel like being able to tick-throw is so important not not so important, but It's just a lot. It's a good tool to have and Gojira practically does not have it These frames on his light ain't the best Which you know hasn't been to see am I dead It's not like that's been a secret, but I feel like in season three you get rewarded so much more for having a friend I am dead by the way. Maybe wait. Hold on one bar. It's gonna be close. Ah That had to be last tick material we we we almost survived. How do we how do we end this by the way? Okay, I think I think we take Kefla back Nine times out of ten. I think we take Kefla back. I didn't take her back Yeah, this must be the one out of ten time. Oh Stop that. Let's go. Gohan. You know what to do Get one level get one level gohan. Nice. I don't know if it was worth. I Didn't really slow. Can you drop me? I just wanted to access to all my level one material No, dude. Oh my goodness. All right, this is down tech buttons material No No, how many drops? All right, only two we can only settle for two drops on the third one. I got to take the win I got to take the character out Hold on. I'm about to do the EX overhead How did that stuff? What that's still here go on. That was crazy. All right get him down. Maybe go for a mix DP that wasn't the DP button. I messed up No beams allowed. Oh No beams allowed. All right, it might be time to switch out an Android 18 and try to put some pressure on with uh You know what we're actually just gonna save it We're gonna save it because I just want to save spark it with sparking in this situation where he still has it. Oh Hold on usually you just want to save it so you can also get limb to break level three hard knock down You already know the mix is going to be Okay, you know what I was cheesing I definitely was cheesing with most of that anyway, so I Will I'm not I'm not upset that hit me. I'm just impressed barrier up. He He just he just missed and then debauched All right sparking was needed years ago. Oh Is that it? Okay, that's it. Oh my goodness that go home was going off dude Hey post for the camera AT where 17 get him in your 2A While the androids on my team really didn't take too much damage alright, so Broly Kefla Broly, freeze okay guy. I got I got I got Wow. I really got a remember like right that down This is one of the rare times I actually remember the assist He was rocking all assists which I It's actually very rare that I used Keflah. I'm overhead. Yeah, I don't like freezes A part. He I've always been bad with that For about as long as fighters has been out and freezes been a playable character. So, you know about three years. Oh my goodness Demolished. All right, can we stop? Can we we don't have to do this? Let's go overhead. I Probably should have landed and then go for all we got like six frames That's fine. I was born in 19 frames six frames to me. This is like weighted clothing.  All right. I'm a spark early. Oh I almost dropped that I Desperately was hoping I didn't All right, you don't hold on take this mix No, I didn't I ran out of sparking so I couldn't forward dash medium. Oh, even though we learned our lesson the first Kefla game. Oh How was I suppose he was also born in 19 frames? That was the forbidden technique We were taught that one at the temple of wife I'm just adding more Lord of this board in 19 frame scenario. All right, freeze. How do I spam this? Whoa, those rocks are kind of good All right. Hit just hit just mess really up. Okay, I'll take it. I'll take it I don't know any freeza combos. So it's it's a lucky We're lucky. We only needed to do that amount of damage. You know what hold on me I may not know any freeza combos, but I know a little I know a little something something about throwing disc All right first disc, come on. Here we go. Oh, I hit myself All right, I'm active you play too much. Oh, no golden freeza. Where are you? Oh, we're dead. Wow, that's it. Whoa That's it so much damage for a level one that had to be no scaling Come on. Hold on. Hold on. All right. I'm trying to remember his team just in case we lose bar doc Goku blackhead Jump then I Can still win this Why is why is everybody else giving up? It's not over till I say it's over It's over. Oh, it's not I didn't give up I gave up for a second, but just one second. Come on. Anybody would have given up He's gonna bar dog. We vanish. Come on. No vanishing. That was sick.  You should have sparked man Okay, how do we get up off the ground? If he goes for a dragger rush, we're dead. We have to take it So remember dragger. It's almost I jumped Zamasu too That's the part that hurts as I dodged Zamasu, but I panicked and held forward so the beam at me I go go black bar doc and oh No, hey, it was it right. Yeah. Yeah. It was it was it had to be oh wait It'll show it on the victory screen. Yeah, it was it. I knew it Wow, this is a very similar team to the one we're rocking right now But with I guess kept was pretty popular. Oh, it's actually been a while since I've seen so many keplers Oh my beam is just got taken out real quick reflect. Does it come out Keppler putting on pressure hit break that guard Hey, that assist actually hit some nice hits done to it. All right. I I lost it I didn't do my second jump to end starter that What why does it feel like I'm not playing bar doc That was the weirdest feeling ever is was there to lay there. Okay. I don't think there was That was so we felt like bar doc was not doing the inputs. I wanted her to do Speaking of being bar doc though. Okay. I was feeling it. How many how many how many ex punches can one man possibly do? I'm gonna go somewhere in the light 100 to 200 range Need half a bar to do any ex punch. That's fine. We'll settle for this I'm gonna go for a rare mix up. We'll get off the boy All right, watch Don't counter. Oh, if I could have countered supers that would have been sick that hit read would have been amazing But I'm just gonna keep doing it. Oh, that was high. Okay. Hold on. Hold on Hold on.  I'm too addicted to the counter. Oh, that was almost so sick. Oh No Coming back in Well, this has been a weird five seconds Wow, he landed on my back All right, this bro Lee is putting in a lot more work than I would have liked him to especially consider He's been at this house for so long Don't grab me. Oh, we didn't even try. Oh, we got him. Man. This the two m's are really hitting this game All right one Goku black left. I might I might try to to do Is that crazy to say? Okay, uh, is it even possible to to do with with my limited knowledge on bardak I would have to land an insane starter Like that. No, he's too far. No What is going on?  I really let that second out. You know what? Let's just go to the last round and forget that happened devious bro Lee keppla and goku black All right, heading into our last match. Let's make this one a good one, dude. Keppla is back yet again I think I'm gonna start with the overhead of a six eight. Why not? Oh, it would have if it was if I would have micro dashed forward. I think it actually would have worked All right, we're going in We jumped way too far in. All right. Hold on. What is it? I tried a bit. You know what? This is Keppla. We said I want Keppla to do good. What's happening to me? Why why did I just get it by two? All right, we're not getting touched for the rest of the match. That's the goal All right decent start with goku black a strong overhead All right, I'm a little worried about losing this game Why did you just do it? Oh, no That was a bad dash off my part burning attack. Is that gonna hit? It did That's kind of sick All right, we're in If you'll notice, I don't know how to actually confirm off of that I probably should maybe 2m. Yeah 2m actually or just jumping medium Whoa, it came back Broly help me out here. All right, we got him reads. Oh armor. You can't get through it I think we're out I should have level three, huh Where are you going? Level one I'm just gonna go with it with another level one from Keppla. That didn't kill divine lasso finish it off This move has been our clutch gameender Divide lasso. I don't know why that super has been in. Oh, he's gonna ex it, isn't he? I'm gonna beat him halfway Well, he didn't ex the move. I thought he was going to Decent started. That's probably it actually I missed the combo All right defense divine slicer, that's it. There's no living this not anymore orb Level three from Broly. Wow. He's actually healing. No, no, no I don't think that's enough healing though Not when you're dealing with the monster that is dbs Broly. Is it? All right, it was all right jump He didn't jump all the reads. It was it was a poor read. It was a poor read. I should never done it I regret it. I regret it very much.   I'm definitely playing this character soon. I I gotta play more dbs Broly Hopefully you guys enjoyed that video though If you did definitely let me know down below if you want to see more of them and what you thought of this one Fire down in the comments though If you liked the video and enjoy the channel make sure to like button and subscribe and check out some of the Other videos that are on your screen right now other than that. I've been Dr. Doia and I will see you in the next video


Hi everyone, my name is Kalyan Dixit and my talk is about securing smart home automation with tar. So it's a very upcoming topic because we have seen many cyberattacks and I mean, what harmful come in, it does cause to a infrastructure in a very big way and it can be fatal if it is not taken properly. So the first question that comes up whenever we speak of home automation is that what is exactly home automation? I mean, why that we have hearing it nowadays more than the previous decade? If you see like, the thing is that home automation is always there in, home automation was always there from even from the 1960s and 1970s. The only difference that we have seen is that we have never seen in that in a huge scale. For example, connecting a battery to a bulb is nothing but home automation, like using a switch to lighten the bulb is home automation, but the only thing is that we have never seen the compactness of it in a very smaller scale rather than in a big scale. If you have seen like a few search like what is exactly home automation, it is nothing but it involves the controlling of all the smaller up like an instance using a smaller gateway by using a protocol either in Bluetooth or Wi-Fi so that you could have an entire control in your hand. So the thing is that when we had the technology has been has been grown exponentially in the last five years. In the same way, the home automation has came up from the back to it came from dead so that you know many people who have been thinking like how to automate those stuff for home appliances have increased their working and they came to know about the new protocols or the new technology that has been existed in this decade which can help them to make it more successful than the previous decade. So early home automation began with labor saving machines and self-contained electric or gas powered home appliances and also which involves the introduction of washing machines, water heaters and sewing machines and etc. But in 2012 by the in the United States according to the ABI research around 1.5 million automation systems were installed so that is just a tip of an iceberg if you have taken the growth rate in the next five to ten years and first generation was a wireless technology which involves fuel lower rate protocols like ZIGB automation then we have seen the artificial intelligence taking place taking the place and we have this home assistance coming up like Amazon ECO and we have even AI in a small mobile of itself then the third generations are nothing but the entirely AI making a robotics or making a robot which can take care of the entire grid or a entire neighborhood for it. So the question comes up always is why now why now this technology has been so popular and why we have been hearing it in the last five years. So if you have seen the convenience of the development of such devices was much harder in the previous decade on the previous two decades because we didn't have the particular technology or we didn't have the particular protocols which can support those hardware systems. It is the same scenario when Apple thought to introduce a MacBook before the iPod but the existing technology couldn't be held so they started with an iPod then they later have been moved to MacBook in the same way we had the idea but the problem was that we didn't have the particular hardware and software resources which can support the idea or implement in a very mass scale and the most important part is that people had a more affordability right now than compared to a previous decade because people income has been increased in a huge and drastic way or in the world and also people whenever we have a smartphone coming up every once or two years people would like to use the latest technology and it so the comfortness of using a technology has been increased exponentially or rapidly in the last three years and we have seen that you know when we use machines the wastage of energy will be reduced to the minimum level or we could achieve a zero rate of wastage and also you could we travel or we work every time so it will be much easier to look on our family or to know what is happening in our own home or what is going on in our absence and also to have a luxury of yourself by sitting at the same place and controlling your entire home by just a click so that you need not go over for making a coffee but you can just send a command for the coffee maker saying that I need so-and-so coffee and also we have seen that you know people started to introduce this smart lock system where you need not carry a hardware or a fiscal key to your home but just using a sensor and a prepared Bluetooth device it can unlock it for you so these are the few of the observations that have been taken in the next five to ten years and if you see the total expected adoption has been decreased in the next five years but if you see the fires from now especially in the terms of a connected device security system and smart thermostats has been increased and recently there have been a great article which says that people have installed more thermostats in the in the previous five years but the always the question comes down to like is it secure the the same technology that we have been using for our loud ones or to take care of our home but is it secured the question is that it is not secured at this point because there are many numerous factors which come into the play so I mean there's a story which I have like how I experienced that this can be a very bad way or a very in a negative way where a remote hacker can watch over your loud ones or they can manipulate your key or they can lock you out of your own home even though you have the key to your home I mean when I just went to my sister's house for a weekend then they had a smart TV bought it on newly so the thing was that I was always curious to know like how do this smart TV works so when I was going to the manual I I have came to know that it you just say the same Wi-Fi networks or you can just transmit from all the Netflix or Amazon but the problem was that when I started a scan for it like a IP scan I just came to know that there are other devices which are connected in the same network which happened to be have a very very less authentication or unable to authentication by passing but when I was able to access the main interface hub I could see the entire home of theirs and the entire cameras their thermostats and the heaters and everything so by just a single click I can just make sure that they don't use it anymore in their future but I could also make sure that you know it reacts in a very weird way so that you know it makes them impossible to use it for the next usage so this is how the hackers list have a look about your home like the cameras the thermostats or the smart applications which are connected to it so the question is like why are they not secured so if we see the problem is that whenever we have a devices with this type of technology we don't have a dedicated service support for it in the first place because whenever we contact a customer care they will say that we will try to send it to our engineering team but you never hear from them until unless it has been affected in a very huge way in a massive scale and also there are no frequent or updates or patches for it because and these devices are not their primary concern for their income so they just release the device and the patches or updates or the vulnerabilities which has been identified to it are not patched in the next three months or the next 90 days or the next six months too so in this scenario the attacks on this increase in a much easier way because after a vulnerability has been in the wild and after a few days it comes to the public platform so whenever it is been in the public platform any person who is well known in that particular field can take advantage of it and just create a huge cyber attack on the entire systems in the world and also though we don't have a lifetime support as we have an open source operating system for Ubuntu if you take you know they have increased from three years to five years the LTA support for the next releases but we don't have any lifetime support for this type of devices because you know they just do it for in a minimal scale and they don't take care for the next three years the regular updates or the regular patches which has to be released and end of life of these devices are released very early because for example if they release version one system in the first quarter by the third quarter they will be coming up with the version two of the system but by the time the v2 version comes out the v1 version i mean v1 version doesn't have a support for it for the next one year so i mean they force people to buy the v2 version saying that we had a huge upgrade in this and those but whatever the v1 devices which are in the market and which are connected to the internet and we have seen a lot of times that you know there is a there is an improper or broken authentication systems which are very poor to be imagined for example if you if you have seen if you try to append test a system if you cannot login but if you can go to the source code there will be a source code which is a similar to like you know login dot html id equals to one but if you change the id equals to two we have seen many cases which have a redirection mechanism which can be redirected to the login page by just changing a single parameter in it and also we do have a hard coded passwords installed in the firmware which is easier to extract by using the tools like binwalk and others and strings and hexas so that we could know the which firmware has been in that and also we do have a backdoor account installed by the company so that you know they could push patches for the future approach but they never do that only just for namesake they just have a backdoor account so that they can know the data or they can sell your data to the interested parties for it and the question comes up is that how can we make sure that you know we do have a very secured home automation system for this we could we have a home open source home automation softwares which have proper updates and the code has been altered regularly and the patches has been released in a very fortnight or a monthly manner but the question is them the question is how secure are the open source softwares itself in the I mean how can we use an open source software in the most efficient way okay so at this point we have around a five open source home automation softwares they are the KalaOS and the Motik and home assistant open hab and open otaxi open otix and even all the five open source softwares support the minimal hardware system and they do have a dedicated support and they do have a code in the open source platform on the github and they get updates frequently and also the software is audited and any security issues has been reported to the internal team will will get immediately patched in the next 24 hours to 72 hours so the question is that how do we even though we install the software how do we make sure that you know no one can access the home automation and network except you so for that we'll be using Tor because you know Tor has been a great source for people who have been battling the privacy issues and we have seen a huge spike after the Snowden leak that you know most people started to use Tor than the previous last decade and after it and Tor has gone many changes in terms of the latency issues and in terms of node attacks or in terms of timing attacks for it yeah so for this demo we'll be using the open source home automation system called open hab and so we'd be using a raspberry pi 3 with a 8 gb or 16 gb memory card for that we'll be instead of using an extra monitor we could use the raspberry by by going through a headless display by just using a RJ45 cat 5 cable so that we could access the UI part by using SSH and then we'll be using VNC I mean RDP protocols so that we could access to the interface part of it and we would be adding few details in the Tor RC file since you know we could create the basically the entire idea is to create a hidden onion site so that you know no one can know the URL of the site and we will be also using a stealth keyword so that the other nodes even don't know the on-site on it and we will be also creating a authentication cookie like in the back end the encryption key pairs of they get ended so that until unless you have an authentication cookie you cannot log into your home automation system so if someone by chance know your onion URL but they don't even have an access to the in website of the system until unless they do possess the authentication authentication cookie for it so the if you see the hidden service directory is nothing but it's an the open have to is nothing but an this is a normal software application name and hidden port is nothing but in which port that we would like to run in which port we would like to run the authentication system in the Tor on-site and the remaining and the remaining part is the local host and the open soft open software system instance are running on it and we do we even add a hidden service authorized client which specifies that you need a authentication cookie to log into it so until unless you don't have it you cannot log in so we will be adding those three lines of code in the Tor RC file we will just restart the Tor and we do have a the Tor that generates a unique onion address in the host name and you could get that by using the more command and after that in the output of the command you could see a unique domain name and authentication cookie where the QRST is a sample cookie but if you add it to your Tor client set access you can just access the system in that and the client ASG 2017 is just a name you can just add a different name and you can even have a different types of names for it for example if you are having three people I mean you are planning to give access to three people you could create three generic names and we have a different three unique onion addresses which are associated with a unique authentication cookies for it yeah you could access your open app too either from your laptop or your mobile phone for example if you go for your laptop you should install the Tor EXE file or in the windows or you could just install it in the Linux system change the add the hidden hidden in the Tor RC file and add the unique onion address and the authentication cookie restart the Tor file from your client side and I mean to the mobile side you could just install our bot in Android or iOS just you can just add it in your settings type and if you use our fox for the accessing on end sites in your mobile phone you could point it to the unique onion address that we have generated for it and it works yeah is there any other questions that you would like to ask this is a local instance running on the local host yeah this is a unique onion address that has been generated for it and I'm sorry okay sure I mean I'll just move on minute that's it thank you


It's like you're right next to a mall or something I'm sitting in a messy study fighting the sins. I have my fake stadium behind me. That's very cool too. Is that Boston? Yeah this is the old stadium for the New England Patriots which was worse than a high school stadium. It was terrible. It was cement seats and everything. This is way before the Patriots were very good. This is when they started to get good and then they created a new stadium. It was terrible. You can see openings here and here. There's no more opening. The whole thing is like a big oval. It was terrible. High schools were better than that. So morning Ray and T-Pool. I guess you are new to the SIG? Yeah I am new to the SIG. This is my first time calling. Excellent. Awesome. Welcome. Yeah I attended every once in a while. People. Very cool. Welcome. Nice. Wait a few more minutes. People are joining late today. Yeah when you don't have to drive anywhere and work from home some people get the time changes. Yeah I'll put the agenda in the chat. Morning SIGU. Morning Kristin. Morning. I was just going to suggest that we wait a minute or two because we've got fairly low attendance today. We probably have enough people now. Let's start off. I've posted the agenda in the chat window. So there's a few things I wanted to go through. First off I've incorporated all of the final changes on the database sections and management interface updates etc and that Jing, SIGU and everybody else had sort of provided feedback on and contributed with. So the final document for the version two of the landscape is now ready. It would be good if we could get sort of a final review. And I'm proposing that we close off any comments for the next SIG call. And then I'll raise services requests so that we can publish this officially. Does that sound okay with everybody? That's good. Sounds great. Just in summary Alex, the difference between this and the last one we published is it just that we added the database section is that right? There is the database section and the database comparison table and then there are quite a number of changes in the management interfaces section to kind of all of that was sort of refreshed to take into consideration some of the new things that happened with CSI and object interfaces and that kind of thing. Sounds great. And just to be clear that optional text is something that will be used as reference for the other document, right? That's correct. Yes, yeah. So in fact, yes, that optional text that we had written, we said we were going to include it in the use case template and I've put that into the, I've put the headers into the use case template. So the next doc I just wanted to talk about was the performance and benchmarking doc. We made a bit of progress in February and there is quite a bit of content there, but we've now stalled. There are actions on myself to tidy up the intro section of the documents which I'm happy to do over the next week or so. But we do need to flesh out the benchmark example sections which Nick Connolly and a couple of the guys from Percona were going to help out with, but we haven't gotten that yet. So I'll chase up, but in the meantime if anybody else has any updates or has any ideas for this, I would really appreciate any help that we can get in. I'd really like to clean this up and have a version that's ready for review for the next meeting because it's been outstanding for it too long at this stage. And then again, similar sort of thing with the use case templates.  It was, we had some fairly contentious discussions as to what we're including in the use case template. We finally agreed to have a use case based on groups of categories and we decided to move the markdown into Google Docs and put in a couple of other sections to cover off some of the other comments that we had previously discussed. But we've kind of stalled at this stage and I think it's probably a bit of coordination and a bit of work where we can maybe spend, we need two or three people I guess to sit down together for an hour or so and flesh out one example and then release this for comments and further work. So Luis, I guess you'll put your hand up for this. But anybody else who would like to help out with this is again super appreciated. Awesome. So how about we set up a call maybe in the next week or so and just use that to flesh out this example. In the meantime, if you want to give some thoughts to what would go into it, that would be useful too. Sounds great. Just realized I wasn't meeting the entire time. Sounds great.  So Jing pings me and reminded me about the survey that we had prepared last year and it turned out that I think following the webinar that we had done, we got 30 or 40 new people responding and we just hadn't checked up on it unfortunately. So this kind of fell through the cracks, which is a little embarrassing. But the results are now in because we have at least 54 people had responded. So there's some meaningful data there. I guess the question is now, how do we process this? It would be very useful obviously to maybe summarize a bit of this and present it in maybe the next QCron whenever that is. But also, should we actually formally review this in terms of helping to define any priorities going forward? So I'll open it to the floor for comments. Does the CNCF have a blog website where we could just write us a blog and say these are the results and just kind of comment on them. Just keep it as simple as possible and just let everybody come in and kind of consume that information. Just an idea. Yeah. That's a good one. I think it'd be good to have a presentation to this group at least and perhaps a discussion of the outcomes. First of all, just to verify that we think we've got sensible responses. I don't know what makes sense. We've kind of sanitized the results or made sure that they make any amount of sense. So let's do that first and then we can perhaps say I think a blog or something like that in addition to perhaps QCron present would be good. Excellent. Sounds great. Yeah. And you know what? We could probably also ask Kim if we could do a webinar if we prepare any presentations. That might be useful too. Okay. So then moving on, we have a number of project reviews in progress. The first one is the TIKV graduation. So as background, this project is a distributed, sharded, replicated key value store, which is used as the backing store for TIDB. And it's currently an incubation project. A due diligence stock was written as part of the PR. And I've had a brief review of that due diligence stock. But I guess one of us needs to go through that in a bit more detail and perhaps try out TIKV. And we also need to schedule a presentation of the project as an update because the last presentation that they did was prior to incubation. Erin, I saw you had volunteered to look at the DD stock, but did you actually get to do that? No, but I have time today. So you can wait till the end of the day. I can look at it. Awesome. All right. If you need any help, I'm happy to help out with that as well. And then the next step was going to be the next project was going to be Harbor. So Harbor has been through a number of the SIGs. I believe it's with SIG Runtime who's driving it. We had some concerns after and Saad had prepared a review of Harbor. And during the talk meeting, we had some concerns around the use of the fact that there's a single point of failure with some postgres dependencies and things like that, which we wanted to highlight. So I guess there is a final step there to move our concerns from the issue I think that Saad had created into the due diligence doc. Unfortunately, Saad wasn't available to join today. So maybe I'll ping him offline. But if not, I don't know, Quintin or myself maybe can move the information in. Because I remember, Quintin, you had quite strong feelings on this. Yes, I can. If Saad wrote to Delta, Saad did most of the due diligence, I just sort of chimed in at the end as is my penchant. But yes, I think if he's written the stuff down, I'm happy to summarize it in the consolidated document or move it there or whatever and sort of make sure it's represented correctly. It would be great if he could, but if he's not able to, I can do that. All right. So we'll ping Saad after this. So next one then is the Rook project. So similarly, this is a project moving from incubation to graduation. Jared and team had presented to the SIG a couple of weeks back and we're going to work in our next progress, the move to graduation. They had completed things like the security review and things like that. However, I believe there was an issue where the due diligence doc hadn't been completed at the point of incubation, which basically means it must have slipped through the crack somehow, which is not great. So the challenge now is to implement the full due diligence doc for the graduation request. I don't know if any, if Quinton or Aaron has any more background on this, that's worth sharing. I don't have any more background on it. Alex? I just saw a discussion with Jared. So just to be clear, it's not about a document. It's about an actual due diligence. It's about somebody actually going through the project and basically checking out that we think it's up for grad, that it's of sufficient quality for graduation. And I thought someone had done that. Did we miss that? I guess that's what I... So I didn't do that and I was not around when they... So maybe let me just clarify. So they went into incubation at some point in the past and I was not around at that time. I was either not on the TOC or I was on long vacation or something, but certainly I don't recall voting for it or having anything to do with it. And then, and I hadn't looked into the exactly when that happened, but it was a few years ago, I think, in 2008 or something. And Jared pointed out on some other thread or email that they had not actually had a proper due diligence at that time. So I don't know, I haven't gone through the archives to find out like how the vote happened or why the vote happened without a due diligence, but it sounds like that's what happened. And all of what I'm saying should be verified because it's kind of based on emails I think I've read. And so my suggestion and I think the suggestion of others is that we need to do a due diligence before they graduate and that hasn't been done yet. Right. So remember this was at KubeCon, Austin, and it was just silliness going on. So I'm not surprised that it is kind of messed up. So I'm happy to also take this one on to get a proper document created. It's almost like, I remember when this was happening in Austin and I remember the meetings. And it was the first project that we were trying to get to SCNCF if I remember correctly. So I don't think we had to process down yet. No. And it was the first storage. It was not coming in a sandbox. We didn't have sandbox actually at the time. No, it was in section. Yes, exactly. This was not the first SCNCF project. We had tons of them before that. No, I mean storage.  The PR for it is insanely long about people who aren't even associated with this project weighing in. I don't know if it should be grandfathered. I said, look, it was just done before. I think we don't want to have graduated SCNCF projects that have not had a due diligence done. So I would suggest, and it's going to delay the process obviously, and it's going to disappoint Jared, and they've been trying very hard to kind of get their thing graduated. And it looks to me superficially as if it's probably like totally fine to graduate it. But we do need to actually do the due diligence that have been done in the past. That's my feeling at least. That's fine. And I want to emphasize it's not just a matter of a doc being missing. It's a matter of like, I'm not sure anybody has from the TOC or SIG storage have actually gone and looked into the details of that project. It's one thing to see a presentation. It's another thing to actually go and verify that the project is everything it says it is. And I had no reservations about the team or Jared or anybody else, but we still need to do that. I can take this on, Alex. Paul. So Quinton, does this entail sort of like actually speaking to end users and that kind of due diligence, or is that something that the project provides? We can decide that. Years and years and years ago, I put together a guideline for doing due diligence, and it's got a whole bunch of questions to ask. Make sure you have sufficient information to verify this and that in the next thing. And I didn't, you know, I was not explicit about exactly how you should get that information by speaking to users. If you think there's credible information that says that XYZ is using this at so and so scale, then it's up to you to decide whether you think that's credible information or not. And if you want to speak to, I mean, let's face it, even speaking to customers does not necessarily provide credible information. So use whatever methods you think are necessary to ascertain credible information. Right. Okay. So that book went through a bunch of reviews on the other six though. So I guess that's why I'm confused because I know that they went through security review and another review. I mean, there has to be some, I think there has to be some assets that we're missing that were created out of the graduation process. So I don't feel like we have nothing to go on that they haven't gone through some of the process. I just don't think we have all the information consolidated into one place. No, just to ask, I'm curious, are all the projects are graduated? Do they all have due diligence? Yeah, they should have. Yeah, I mean, that got into incubation went through due diligence. That's the problem. Not the graduation stuff is a very small incremental addition to what's required for incubation. So incubation is the major due diligence that happens in the CNCF. Sandbox is, you know, very lightweight because we want immature and, you know, twinkle in the eye kind of projects to be able to be hosted in Sandbox, but due to, but incubation is the big one. And yes, I believe they have all had it except this one. And this is another oversight, but I'm not aware of any others. Just wondering from old, the one, CNCF first started like projects like, I don't remember, like Fluent D or Linker D, one of those two, one of the first few graduated projects. Do they all went through it also? They went through it when they went into incubation, allegedly. I wasn't on the TOC at the time, but I did speak to Alexis Richardson, who was there from the beginning, and he helped me put the due diligence guidelines together. And he said, yes, that that's what they've done for. Okay, cool. Just making sure. Are those due diligence reports or recorded somewhere on GitHub? That's what I'm less sure of. I'm not sure how much of it was written down, but allegedly, the TOC did actually go through the exercise. We can speak to Alexis if you like, and he can give us the details. I believe in the TOC repo, there's a directory with all the previous due diligencees, honestly. I'm sure I saw that the other day. We also have the recordings rate of every TOC call. Yeah, but it goes through recording. So I think this one might be slightly, because so just to summarize what Quinton was saying, all of the main due diligence happens at the incubation stage. The graduation stage is kind of like a couple more steps. So for example, at graduation, you just have to show additional users more than one user using it. And secondly, you have to do a security review, which is actually paid for by the CNCF. And I think what we're saying here is that we missed the DD at the incubation stage or at the inception stages, as it was known then, due to some of the previous drama, which we will not regurgitate again at that infamous meeting. Okay. So finally, the Previka project that presented at our last meeting, I'm going to follow up briefly with the project team. I think the Previka project looks very interesting. It's an interesting set of components to which sort of lead it to be able to be used as a message queue and another event processing. In many ways, it would be comparable to perhaps the NATS project, which was already in the CNCF or maybe even something like Kafka. So I think it's worth following up with them. But they're not 100% decided to donate this to the CNCF at this stage. I think they were trying to debate whether to do it as part of the CNCF or as part of the, I believe it's the AI foundation or something like that. That's also part of the Linux foundation. So I'll reshack to them just to see what's happening there. And then we can either close that off or move forward, depending on what they come back with. I think that covers the agenda for today. So I just want to quickly summarize the storage landscape leads to feedback please before next meeting. The benchmarking doc, I really need help with the benchmark examples. Tom, I see you joined the call. I don't know if you can help move that along at all. I wanted to look at it a little bit. Who's been contributing to it so far? We had, so there's myself and Paul Sobri from StorageOS. There's Nick Connolly from the Terra. There's Vadim Chachchenko, which is I believe from Perkona. And there's Saif Al-Harthi, which is that Planet Scale? Yeah, Planet Scale. Yeah. And Tyler Desana, who I think it's Perkona as well. Yeah, Tyler and Vadim are Perkona. So my comments in there were really around the right amplification and different technologies at different layers in the storage stack, how to handle those. I've seen a lot of people benchmark SSDs very poorly and don't get to a steady state because it can be difficult, especially with large SSD pools. So I can try to put in enumerate some of those pitfalls, but it's a big step when this is kind of a primer and getting into that kind of right amplification is going a little deeper. So I didn't know what kind of audience you wanted to really tailor to. Is it just to get awareness or did you really want it to be kind of a checklist, walkthrough, guidance kind of document? So the idea was primarily to kind of inform users and especially in the pitfalls and sort of common considerations. It's kind of like common issues that people might come across. So certainly, you know, if there's a paragraph or two that you can talk about to write amplification and SSDs, I believe we actually had it to do on the list to put something like that in there. I think that would be fantastic. So, you know, if you can just stand it in as a comment or ping me an email or I can add you to the doc as well. Yeah, I put in comments in a descriptive way, but they weren't ready for the, you know, the document itself. I could review that and actually add it in if you want. Yeah, that would be fantastic. Let's see. Do I, yeah, I have, I guess I'm looking at it. I think the comments did get added in as a suggestion. And if you look on the page, they're under commented falls. Oh, yeah, I can see that page three. So all right, I can add that. Yeah. And just ping me if you want to, if you think we need to go more or less detail, we can work through kind of your where you want to go. I can work some more. Cool. Okay. And then just moving through the agenda very quickly. So the next action was on the survey. So I was wondering, Jing, do you want to sit down maybe for half an hour? And we can extract a couple of summaries from that so that we can present it to this sake next time? Sure. All right. And I think we have action items for TIKV on Aaron, Harbour on Sandham and Clinton, Rook on Aaron and Alpha with Pravega. We've gotten through quite a bit in half an hour, but does anybody have any other items that you'd like to raise? I just wanted to actually thank you, Alex, for looking through all this stuff that we have actually achieved is pretty impressive. It's a small team and most of the work has actually been done by you personally. I think we should all take the opportunity to pat you and the rest of the people who have been involved on the backs and things because I think this is one of the, yeah, one of the more effective six, personally, as far as I've seen. And there's a lot of really valuable stuff that's been happening here. So thank you, everyone. Well, thank you. And indeed, thanks to all the team. We've done some magical stuff together. Cool. All right. So in that case, unless there's anything else we can call it today. Thank you. Thank you, guys. Thanks, everyone. Bye-bye. Bye.


Claudia, in the last few months, there's been a lot of international attention focused on what are perceived to be possible changes in the Brazilian forest code or how it's applied. Could you, in general terms, tell us what the issues are and what you see as the process that's unfolding in Brazil? Sure. Let me start by saying I think it's really interesting when at certain moments in time the international community starts sort of paying attention to the forest code because in Brazil at least it's been under heavy debate for the last 15 years non-stop. And so a little bit of the history there is that the forest code came into being already in the 1930s and I think is one of the most progressive pieces of land use legislation in the world. It's the only country that puts any kind of requirement on private landowners to keep a portion of their land in a private forest reserve. So there are essentially two components. One are these sort of permanent protection areas which typically are on mountaintops or slopes or especially around riparian zones. And then there's this legal reserve as it's called which the size of that legal reserves in terms of the percent of the individual property depends on what biome in Brazil it's located in as defined by Institute of Geography and Statistics. And so debate over the last 15 and then before that even years has been changing the percentage especially in the Amazon forest biome or even in the legal Amazon or even Savannah areas. So in the Amazon forest biome in 1996 they changed the percentage that was required from 50% of the land holding to 80%. And in part that was in response to a huge spike in deforestation numbers, the highest numbers until 2004 that occurred in 1995. And at that point I think the government was under severe pressure internationally to do something about deforestation rates and the PPG-7 project was developed at that time and a number of other initiatives and one of the things that came out of that was this change in the forest code. And the first five years of its life, this new change, it never actually became law. It was an executive order that continually was renewed every 30 days or so for this period of four to five years. And so landowners themselves never really saw it as something that they should necessarily follow. I mean there was a lot of uncertainty because there was always this possibility that it might be overturned, that it might not actually become law. Although I think many of the environmental groups really considered it to be, well this was the law and this is the way it should be done. One big problem from the standpoint of the landowners has been there was no grandfather clause in the sense that if you were at least legal, let's say in 1995 you still had 50% or more of your legal reserve, you didn't then sort of get to continue to be counted as a legal landholder if you actually had less than 80% as of the time that that executive order was signed in 1996. So in some research I've done in one of the highest soy producing regions in the Amazon, 25% of landowners became criminals overnight when this executive order was signed. And if you think about that, I mean these people who really see themselves as in many cases law abiding citizens who are really trying to sort of help Brazil become this big economic power, they see themselves as part of the big engine of economic growth in Brazil and then they're told no no sorry you're criminals. And on top of that they're also told well you can only use 20% of your land. And I think very often again to come back to the international attention, I think when I first heard about the policy I think when a lot of other people first hear about it they say wow that is so incredible 80% of land being protected on private lands. Well if you try to do that in Europe or in the United States or in Canada or Australia I can't imagine what kind of firestorm you would have on your hands from ranchers and farmers who simply wouldn't stand for that especially without any kind of compensation and that's really been the situation. And so in some senses I'm not just trying to defend landowners here because certainly there does need to be regulation and I mean there are many aspects of this law that really are great and very innovative but I think that it's important to see why there has been so much debate. Anyway so recently I think there's been a lot of strength gathering behind landowner lobbyist proposals to make major changes in the forest code and not just reducing the percent of the legal reserve but all kinds of issues about legalizing what is currently considered to be a land that's not being legally managed and that's where a lot of the concern comes from. And I think internationally there's probably a lot of concern because it sounds like it's going to lead to more deforestation. That may or may not be the case. I tend to think that it's less likely to lead to more deforestation than it is to simply legalize what has already been cleared and make it and not require those lands to be restored and that for me I think is one of the big issues and so we have been working a lot on trying to figure out what kind of mechanisms could you use to try to restore some lands make it less onerous both in terms of labor and costs for landowners which is not something that was ever included in these original changes. Do you see red as playing a role in that and some of these changes that you think might actually be necessary or helpful in this process? I mean definitely I think if some of this financing could come in the changes that landowners need to implement on their lands have everything to do with red and have everything to do with needing some kind of funding source in order to whether it's growing seedlings in a nursery or not planting them and monitoring them because they have to restore riparian land or this legal reserve or if it's just saying hey we know you have a high opportunity cost in this region this is a really productive region for soy the cost of land there or the value of land is about $2,000 per hectare versus $500 per hectare for forest land so for them there's a huge opportunity cost I think it could really help to offset it. The thing that's of course difficult is red or whatever it turns out to be is taking a long time to get anywhere where it could actually move some of those benefits to these land users you know and so I think that's across the board not just in Brazil and certainly not just with landholders and I think it's one of the major issues that governments and sub-national governments are trying to deal with is how to actually develop mechanisms for benefit sharing and then also where to get that funding in. I think what Brazil has done at least in my view probably better than many other nations is really try to think about land use planning and the forest code is a part of that and then there's these you know legally required zoning plans that each state and the Amazon has to develop and I think those are a really important model for thinking about how red or low carbon development plans really get implemented and I think that's something that especially on the scale that Brazil is working and you know it's not a Costa Rica and Costa Rica has done many wonderful things but you know we're talking about a country the size of well almost the entire United States and that they're really trying to develop these zoning plans and strategies and the forest code sort of comes into that. I think it's very instructive just in terms of the kind of debate and where the pushback has been you know how do you make it economically viable for people to carry out these agricultural activities whatever they are at the same time that you try to preserve hydrological and climate function in the region and you know that's I think the thing that for me we really need to focus on is getting that balance so in that sense I'm not at all advocating that the forest code you know be overturned or anything like that but I do think that you know there needs to be sort of a very constructive debate about how to make sure that this climate doesn't get completely altered. You gave us a really profound sort of idea of the depth the historical context and all of the forest code and you mentioned in a few cases a bit about why Brazil may be different maybe somewhat exceptional partly scale but other issues as well so do you think there are any broad lessons that other areas perhaps other large tropical countries might take from this particular experience of the forest code and the flexibility or non-flexibility that might be involved? I would like to say that you know yes the forest code is working and therefore it's a wonderful example for other countries that also have these large private land holdings or concessions let's say with large commodity production unfortunately I don't think that we can say that it's entirely you know working the way it ought to and so I think maybe one of the bigger lessons is thinking about when is the window of opportunity for implementing it and how extreme can you be and I think you know we often characterize in our discussions in our group forest code is being a little bit the perfect being the enemy of the good in the sense that I think that 80% maybe went a little bit too far and you know there are certainly sectors of the environmental movement that would disagree with that but I think that many landowners have been amenable to a 50% legal reserve and sort of felt like that was something that they could live with that it was still economically viable to do their work and so I think if you try to think about what this means for other regions it's a question of really trying to get the analysis right and get all those perspectives in there that it's not just about preserving forest but you are already dealing with landscapes that are occupied by people and I think that's the case for many countries we're not talking about vast areas that are uninhabited and that aren't being used by people but in fact they are areas that are being used whether it's at a small scale because they're small holder populations or if they're indigenous populations who are using it or if they're these large companies or individuals who are doing commodity farming or ranching to really consider the perspectives of all those stakeholders and what their cost benefit analysis is as they make their land use choices one problem with the forest code has been that it's a real command and control policy it's extremely dependent on an enforcement component and that there's just not the capacity for that Brazil has extremely high social capital very talented people and still they don't have the financial and the human resources to really go out there and apply fines to every land holder who has cut illegally or cut in excess of what he's allowed to the judicial system isn't always capable or willing in some cases to process those cases to the owners they really consider the cost or the amount of the fine is a cost of doing business so for them the amount of profit that they can pull off the land if they clear more than they're allowed to is still much more than the amount of the fine even if they're willing to pay that fine and many of them aren't because they feel like the whole the whole law doesn't make sense or maybe it won't hold and so I'm not going to do this now the law is going to change and I will then be legal again I think one thing that maybe I haven't talked about and I think that's important to consider is that you have this great diversity in size of land holdings in Brazil so this 80% until this new change takes place applies to all land holdings whether they're the 100 hectare average smallholder settlement lot that's distributed by the government or it's these 82,000 100,000 hectare mega ranches that are especially located in Mato Grosso state where most of the soy production takes place and these are sort of you go to the Midwestern corn belt in the United States and these ranches will put those to shame there if you say we've got 50% of that land holding has forest that's 40,000 hectares of forest that's not something to sneeze at that's not something where you should say that they're not protecting forest