Okay, we've just arrived into Matula and according to ways this is sort of like the center of town just to the right of us here There is the Bedamot Zah, which means the community hall. There's a Khalid Which is one of the national health funds in Israel some signage here about the first five homes The local Arab style Matula on the map looks like a nothing place I mean it is the northernmost village in Israel, but when you actually get up here, there's a surprisingly Decent amount of stuff. There's a few art galleries center of Matula or Downtown Matula you could say and this is the second time I've been up here You can see here. There's a You know hotels may be a bit generous, but some kind of accommodation the Alaska in hotel I guess because it's so cold up up here in the winter and Where we're looking now north Just bring the camera down a bit for that's looking into Lebanon hotel Alaska in here The historical name of this hotel is Shalegh Alevanon the first hotel built in Matula constructed in 1911 She'd love to stay up here Very place to stay I'd say if you're doing some skiing in Mount Hermon, which we just came back from You can see there's a synagogue here a shul with Knesset There's a bit of life going on up here, so this is Matula the north of Israel and we're going to try get some Sandwiches or Some other kind of food up here Always amazed me that all these kind of Israeli institutions exist all over the country. They only is the biggest bank You can see the little bank all the way up here north Clalis as I mentioned help is a health fund to a more Jew and La Shuf I've explained before that for reasons that are not clear to me. La Shuf is actually quite big here So it looks like you can get your La Shuf here Very picturesque this place Matula Walking towards the border, which is at the end of the street Passing some more hotels. As he said, there's quite a lot of things to see in Matula another Institution that exists pretty much no matter where you go in Israel is Doar Yisrael the sometimes maligned National Postal Service. This is a little building on Harishonim 29 in Matula. They've got their PO box PO boxes over there So you can actually rent a PO box even if you live in Matula Nice views there as we're just about 330 here. So the Sun is starting to go down It is the winter. So we're trying to get as much sightseeing in as early as we can during the day Not sure how busy all these places would be generally, but clearly the whole you know COVID situation has caused kind of a downturn in Occupancy rates in hotel nations hotels nationwide. So I'm sure probably wouldn't be this empty. This place is like completely Breft of customers. We're actually just a bit as far down on the streets. We can go we're gonna hit the Border fence in a second. They'll make a video of that. Bus connections to Kiryat Shimonit, which we might visit on this trip. That's kind of the northernmost city in Israel a few things to see there too and look at those beautiful views again of the hills You can see how close on is from where I'm standing because if you see center of frame here You can actually see the Palestinian flag in the center next to I think it's a Lebanese flag or maybe even a yellow flag of Hezbollah. This is on Hirishoneem Street So it's just towards the very very end and The hill and that billboard you're seeing again in the center of the frame here. That's already in Lebanon as is this road There's a road that literally runs alongside the border and the border fence is just in front of us here and likewise all these houses in the distance are actually already in Lebanon and even that the traffic there you're seeing coming across that rose that's already in Lebanon The border fence as he said literally comes around the village. What's interesting about Matula is that all the buildings here both serve official modern purposes. This is the Rabanurth building which got Rabanurth and you can see it looks like it's open right now Just right next to it's there. There's a sign talking about the teacher's house and explaining how Baron Rachild and his officials believed that educating the children of Matula was of the utmost importance So pretty much this whole street Hirishoneem which seems to be like the main street all has all the houses here have historic significance


What's going on everyone Sam here with late in sports cards gonna expand myself really quick, and I'm ripping 2022 fanatics memorabilia silver box break number 10 random hit style So the way this is gonna work is I'm gonna open the box, which is right here show you guys all the hits I already have the names in put it into a random Jake is going to be typing out the descriptions of all the hits at the end We will random off the names and the hits the same amount of number of times And we'll match up the person to their hit. So good luck. Here we go So Zion the best catch that part one. Yeah, not bad. Honestly, Rory had Zion ball is a Zion ball at the end of the day Man, that's awesome Here we go. Let's do it guys We got time and that's gonna be Still got a fill of eminence to still got a fill of eminence That's nasty, I will start with this right here I am going to Take this helmet out of the box for just a second It is still in wrapping inside but I will Make myself smaller and then that that photo has got to go last but This is nasty We've got white Helmet got to take this thing off Bane of my existence is this thing right here Wait, New York Giants helmet that is Eli Manning That is so sick Good luck to whoever gets that one That is a fire helmet right there guys Nasty, so we got the pain now. I got the brother. We exactly got both both Manning so far All right, do you mind just throwing this back in there? I think we got to do the Jersey All right, so we have a Jersey as well. I have did you open it? Jersey, yeah, we did not open the Jersey. We don't know who this is We do not know who this Jersey is So good luck on the Jersey. Let's see who you got Paul Goldschmidt on the authentic autograph Jersey for the Cardinals That is so sick Wow, dude Paul Goldschmidt a Cardinals authentic Jersey Nice hit there Good luck again on that one and dude, this is The exactly triple crown potential MVP Just auto, but it is authentic place. It is an authentic Cardinals Jersey. It's not like a leaf replica I gotta expand myself again. We got a sick photo You guys ready for this one for the Toronto Maple Leafs Austin Matthews 16 by 20 2016 number one overall pick 2017 Caldera winner inscription. Wow Good luck on this one What a photo that is so cool, man So so sick Austin Matthews Wow, man Good luck to everyone on this random Gonna get it set up here Got all of the names in here. Let me just Who Matthews? Give me one sec guys. Let me Make myself smaller again Cup winner not on the Leafs. Very true blink That Goldie might be game used Give me again one second guys. Sorry lot going on here Copy paste. All right guys gonna take you over the random screen We got all our names here Harper B Rory B and Steven C Then we've got our hits Eli Manning autograph replica helmet Paul Goldschmidt autograph Jersey Austin Matthews all autograph picture So gonna roll the dice. See how many times we are going to random guys. Good luck Going six and three that is nine times. Good luck everyone one two three four five six seven eight and nine Steven down to Harper Then we've got nine times on the hits one two three four five six seven eight and Nine Matthews picture down to Eli Manning helmets Let me get these copied over for you guys We've got Steven C with the Austin Matthews autograph picture congrats on that Steven We've got Rory B With the Paul Goldschmidt autograph Jersey, and then we got Harper B with the Eli Manning replica helmet auto Congrats everyone on your hits next up. We've got the diamond Break and then we got eminence to end our night. Thank you again everyone very excited for this


Item Number – SCP-497 Object Class – Euclid Special Containment Procedures – SCP-497 is to be kept in a secure, sound-proofed room under continuous observation by standard security cameras. One guard and two medical personnel equipped with high-grade earplugs are to be posted at the door of the containment chamber, at all times. Only cleared personnel are permitted to handle SCP-497. If SCP-497 materializes a body, medical personnel are to evaluate the subject's health and notify security. If still viable, the subject shall be escorted to a medical ward to be processed. Dead or terminal subjects are to be analyzed and then disposed of according to standard procedure. Description – SCP-497 appears to be a Eustrombus gigus conch seashell. Recordings have shown that SCP-497 continuously emits a very faint sound of voices screaming from within its shell. This sound dissipates a few inches away from the object. Periodically, SCP-497 will become active and its sound will increase greatly in magnitude for approximately one minute. During this, an emaciated human subject materializes, holding SCP-497, and then collapses to the floor unconscious or dead. Instances of activity under normal conditions have been observed to occur at a minimum of two weeks apart and a maximum of two years apart, with an average of four months. SCP-497 has materialized raw objects since containment began. No subjects absorbed during experiments involving SCP-497 have been recovered. Subjects that hold SCP-497 near their ear and listen to it for more than 10 seconds will appear to fall unconscious and then disintegrate. This leaves SCP-497 to fall to the floor. During periods of high-magnitude sound production, any subject that hears the sound will be absorbed, even if not in close proximity to the object. Experimentation has shown that the subject must actually listen to and hear SCP-497 in order to be absorbed. Subjects listening remotely or listening to recorded sound from SCP-497 are not affected. See Experiment 497a for further details. It is possible to damage SCP-497, and samples have been extracted by using diamond drill bits. However, SCP-497's sound will increase in magnitude when damaged and will materialize subjects at a greatly accelerated rate. The shell will quickly repair itself during this period as well. Attempts to continue damaging SCP-497 will cause its sound to increase exponentially. Determination of the composition of the samples has so far proved inconclusive. Extraction of further samples is advised against. See Experiment 497b for details of early extraction attempts. Addendum SCP-497 has produced subjects of various ages of both genders. Subjects have been comprised of a majority of people of Indian descent, with a small percentage of other races. Approximately 80% of recovered subjects have been dead. Of the remaining 20%, only 3% have survived more than two days after being released from SCP-497. Severe malnutrition and resulting complications have been the primary cause of death. SCP-497 was recovered in Rukhans house, in Rukh, India, following an investigation into missing persons reports. The situation was brought to the attention of the Foundation after the discovery of many unsolved missing persons cases, originating near the location, dating back hundreds of years. Since M and R were called in to investigate the house and surrounding area, SCP-497 was discovered to hold supernatural qualities after Agent M found it among a collection of shells and was absorbed into the object. I should have kept a better watch over Agent M on his first mission. But how inept do you have to be to hold a shell up to your ear when we are searching for SCP-class objects? Agent R during debriefing. Agent 497A Subject, human equipped with earplugs Result, subject holds shell up to ear, is not absorbed Subject, human equipped with headphones with loud music playing Result, subject holds shell up to ear, is not absorbed Subject, deaf human Result, subject holds shell up to ear, is not absorbed Subject, chimpanzee Result, subject is allowed to interact with the object. After approximately 15 minutes, the subject holds the shell up to its ear and is absorbed. Experiment 497B Under direction of Dr. R, a class D personnel attempts to remove a sample of SCP-497 with a power drill. 0800 Hours Class D researcher equipped with high grade earplugs enters the containment chamber and starts to drill. 0805 Hours Standard drill bits prove ineffective and are replaced with diamond bits. 0810 Hours 2mm of depth reach with the drill. Observation room reports substantial increase in SCP-497's sound magnitude. 0811 Hours A dead subject materializes in the chamber. Class D is interrupted from drilling and reports rapid repair of the shell. A decrease in sound magnitude to normal levels is recorded. 0820 Hours The subject is removed from the test chamber. Dr. R. R. authorizes continued drilling. 0825 Hours 2mm depth is reached again. An increase of SCP-497's sound magnitude is again reported. 0826 Hours A new subject materializes and is removed from chamber. Class D quickly resumes drilling. 0829 Hours 4mm of depth is achieved. SCP-497's sound magnitude level increases beyond the rating of the Class D's earplugs. Three subjects materialize within 30 seconds of the volume increase. Both the Class D and the drill are absorbed into SCP-497. The hole repairs quickly and a decrease in sound magnitude is recorded. 0830 Hours Lesson complete. If you missed the previous orientation, go watch SCP-496, a sunken contasion, right now. Or for the complete course, watch this playlist.


Today, I want to talk about fixing your pushup and the first I Maybe not the biggest maybe not the most common, but probably equally common with back position This one is I need to finish with my arms long. Okay, so This is kind of a common misconception because doing it without Finishing with your arms long still looks like a pushup at least to normal people Right, so I come here and I finish here now I can do a lot more push-ups if I go that way and you know if that's the only goal Maybe you do that we have this push-up challenge at Google where all the different buildings and different sites all over United States. I don't know if we compete with other countries, too We all band together and everybody in that building Tally's up how many push-ups they can do you can do up to 400 every day to count towards this total I did 400 every day for five days last year and my neck was just jacked up But I was not Finishing every rep with my arms long like this. I was not ensuring that my spine stayed Relaxed and rounded, you know how you you have a normal Rounding to your upper back and a little normal bending curvature of your neck I was just letting everything flatten out and push Right because I can do more push-ups that way. It's definitely something to consider But Assuming your goal is to lift over the long term to stay really healthy while you do all this And to keep your shoulders stable and mobile at the same time We got to make sure that you're finishing with your arms long So if if you're doing a push-up like this, I'm first gonna say reach your arms through the ground at the top of the push-up That's one of my favorites if that doesn't work. I might say push all the way away at the top Okay, and if that doesn't work It might be a strength issue that you have here And you may need to try it without the full weight of your body on your hands in that case I'd set up hands and knees and I just see if you can round your back and push Your whole upper back towards the ceiling Again, if you can't get that You got to sit there. You got to try to figure that out. You got to try to finish Reaching without a big pec muscle, right? Your pec is moving for the majority of this movement But at the end it's got to shut off.  Okay so that's one of the biggest things and why we're starting with Finishing your push-ups at the top


A man broke his fast in Ramadan He came to the Prophet sallallahu alayhi wa sallam and he said my wife and I couldn't control ourselves broke our fast During the daytime in Ramadan As the Prophet sallallahu alayhi wa sallam. He said free a slave and he said I can't afford to do that And then he said you have to fast for 60 consecutive days and the man said I can't even fast three days of Ramadan And he said then you have to feed 60 people He said I don't have anything with what and so the Prophet sallallahu alayhi wa sallam He went out and got him a big basket of dates He said here take this and feed people. He said you know, there's nobody more poor than my own family And then the Hadith says The Prophet sallallahu alayhi wa sallam He smiled until his molar teeth were showing and he said then feed your family with it Right


So we're actually close. We finally got the long list of the factors that was broken. All of them are free. Like the most recent one, the instance that we've seen. Can I start? I mean, I don't think that's a true representative. Can I start? Oh, one minute. Oh, I see. We've put it too much back. Well, we'll see. I'm going to read the main. Thank you. Thank you. Thank you. Thank you. Thank you. Thank you. Thank you. Good afternoon, everyone. My name is Chris. Chief technologist for North America on the west coast at red hat. at Red Hat, and I've been with Red Hat for about 12 years, working with strategic partners and customers, primarily in Silicon Valley and the tech and entertainment verticals. And so today's discussion, a security state of mind, enabling continuous security for DevOps with Kubernetes. I'm gonna go through some of the drivers behind DevOps, also in terms of DevOps, how can you enable DevOps with containers and Kubernetes and the security implications of containers, as well as if you have time at demonstration, some of the basics of Kubernetes, how can help you with managing security at scale in your container-based environment. And so does anybody recognize what this is a photo of? It's an assembly line, yes. It's actually the Tesla automobile assembly line. And the reason I show this is that there's a digital transformation happening across all different industries. Just take this as an example. And the business is really putting a lot of pressure on companies to really innovate quickly and to deliver capabilities rapidly to the marketplace. And certainly, no better than Tesla, they have revolutionized the automobile industry. And not only are they automating the production of these vehicles with software, but software for the first time is enabling these vehicles to be better over time. For the first time, I can buy a car in six, 12, 18 months down the road. I can get a software update over the wire to improve the zero to 60 time better battery efficiency or update the applications in the center console for autonomous driving or turn-by-turn directions. And so, huge fundamental transformation and competitive advantage that they're having over the rest of the industry because they're able to rapidly innovate quickly and deliver capabilities to the marketplace. And what happens to an industry that rests on its laurels and stops innovating, right? This taxi industry represented by San Francisco here in this graph is a perfect example of what can happen. You know, the San Francisco taxi industry pretty much have monopoly on point-to-point driving and ride-sharing in San Francisco for many years and they stopped innovating. Well, Uber and Lyft came along and totally transformed the user experience, but also they fundamentally transformed the business model because they were able to leverage real-time data of their customers and their drivers and match drivers to riders and also dynamically scaled the pricing to encourage more drivers to enter the market as well. And so they fundamentally had a competitive advantage. And so even if the San Francisco taxi industry came up with a mobile application, they were still at a disadvantage to Uber and Lyft because they were using real-time data to be competitively ahead of their competition. And so as you can see, the ridership in taxis drop by 65%. It's even gotten a lot worse last year. They filed for bankruptcy, the San Francisco yellow cab and they were the largest provider of taxis in San Francisco. And so there's a lot of pressure on IT to keep up and not become the bottleneck. And so you're seeing a transformation in how applications are developed, the architecture that they're used in terms of microservices, also in terms of how applications are delivered in containers, and then also where those applications are deployed in terms of private or public clouds. And so one of the main hurdles that IT has is that it's very difficult to move software, encompass some of the move software from dev test into production. Many customers I talk with, they say it takes four, six weeks to get a single word changed on their public-facing website. These are large companies that you've heard of, may use their applications on your mobile phone. And one of the key things that they have is organizationally, they're organized in silos. They have the developer team, they have their QA team or operations team all siloed off, not collaborating. And as a result, they've evolved with their own processes, their own technologies, making it very difficult to move applications through the pipeline of dev test into production. And security is certainly an afterthought, usually reserved for operations. And so dev ops has evolved and has gotten a lot of publicity and popularity because it breaks down those walls and it's really people process and technology. Bringing together these different disciplines of dev QA operations in even the business unit as well. So more mature dev ops organizations will actually be tightly aligned with that business unit and collaborating with them and bringing them into the team as well. And then adopting new processes such as CI CD to enable rapid building of your software and rapid deployment of your software. And it's not just about how many times you can release your software per day, but it's when the business needs that new innovation, IT is able to deliver it for the business right away. And that's how IT becomes a strategic differentiator for the company in terms of being able to deliver on that innovation to the marketplace rather than being viewed as a cost center in the organization. And certainly, how do you enable this? Open shift based on Kubernetes and Linux containers is an enabler for organizations to rapidly roll out this next generation I call software factory. Intel, their competitive advantage over the years has been their fabs, right? For a software enterprise, how can you be a differentiator? You need a next generation software factory that can rapidly and efficiently roll out innovation and new capabilities for the business. And so, Andy Grove speaking of Intel talked about how only the paranoid survive. In this context, it was back in the 90s and he talked about how there's this point in time, a strategic inflection point when there's a massive amount of change in the industry. And for them, they had the pinion bug which was a massive crisis point in their history. And the company has the option of either adapting and thriving to the marketplace or falling by the wayside. And I feel like the IT industry is certainly at that point in time with this huge transition to DevOps, to containers, and to public and private cloud as well. And what do you do about security, right? Security is an end to end process. It's not just about production. And when you look at the DevOps, there's some changes and some implications to secure that we're gonna talk about today. And the key point here from a DevOps perspective, security starts in terms of the people, the process, as well as the technology. And it starts in development, carries into task and into production. It's not just a production issue or an operations issue. And so let's talk about continuous security. Today, we're talking a little bit about OpenShift, Kubernetes-based container application management platform enabling really the automation of the build of your containerized-based applications as well as the automation of the deployment of those applications. Some early adopters of DevOps have cobbled together their own pipeline with automation scripts maybe it's Puppet, Chef, et cetera. And what has happened in those organizations is you have the developers coding infrastructure pipeline code. It's very inefficient in a waste of their time because that's a time taken away from them developing new innovation, new product features and capabilities that matter to the business. How do you free up your developers from coding this do-it-yourself pipeline to embracing something that's out of the box automated and enables you to rapidly deploy this innovation for the organization? That's what OpenShift is all about. Enabling your developers to be efficient, enabling them to hit the ground running and deploy containerized applications and move it through the lifecycle of DevTest into production at scale. And so here's the typical CICD flow in a containerized based environment.  Then once it's checked in, triggering a build, right? And that's an automated build putting that artifact into the repository creating that based on a build image that's reproducible and inconsistent every time you build it. And then once you generate your application in a containerized format putting that into a shared image repository, right? The whole principle here is you build your application once in development and then deploy everywhere. You don't rebuild and reinvent the wheel in your test environment, right? Get rid of that silo instead break down those walls move that application from Dev into test as is put it through its testing cycle resolve those issues rapidly provide the feedback to the developers and then promote that through the lifecycle into production as is, right? So everything that goes into production has been tested during the build process, right? You build it, you test it and then you deploy into production. Don't go into production and make changes that have never been for this test cycle, right? And that's a real change in the DevOps process. Build once and then deploy anywhere. And here are some of the implications around containers from a security perspective that we'll talk about many areas that need to consider the security implications around, you know the content, the container image. What about the build process, right? How do you incorporate security scanning as a part of your build process? You're gonna build it once, scan it after you build it and then deploy knowing that it's past the security check. Also a registry of where you're storing these images, right? Are you gonna have enable your developers to go out to the public cloud and download any image or you have a private one? How do you deploy security updates and security fixes in a container-based environment? At the end there, container hosts, right? How do you manage security patches for that host as well? What are the security issues there? Do you wanna be aware of? Network isolation, right? How do you ensure isolation if you have your dev test in production environments in a OpenShift or Kubernetes-based environment? What about storage, right? Containers aren't just about new applications that are stateless, right? What about your existing applications that you wanna containerize that have persistent data requirements? How do you manage security for that? And then how do you control access to this platform? The APIs, everything's being API-driven. Well, how about controlling who gets access and the ability to create these clusters to have access to the data? And then also monitoring and logging capabilities to help you with security for your clusters at scale or across the federated clusters as well. How do you manage those? And so there's some work coming up in the Kubernetes community to enable those capabilities. And so let's go into some of the details. First off, the basic principle around containers, the basic flow is to build, ship, and run. You build your container based on a Docker file, right? And a Docker file is similar to a make file in C language. And of course, you wanna version control that just like you would if it was a programming application. And it's a very simple, easy to read syntax. And then once you build that image, you wanna build it once, you wanna then be able to share that image across all your environments. And so you will put it into a registry, whether it's public or a private registry. And so this is a repo of all your images, right? And the enterprise, primarily people are using private registry, so you know where it was built, what's in it, right? Whether it's gonna be trusted or not, you wanna sign those images too. And then you wanna be able to deploy that image, whether it's physical, virtual, private, public cloud, or in your dev test or production environment, right? No more rebuilding or having things done in a unique way in each individual environment. Have it consistent and repeatable and have developers build on a production-like environment from the get-go so you don't have unique issues. And so first off, what are some of the basic principles around building your Docker file and best practices? So treat it as the blueprint, right?  You wanna be able to reproduce that. Just like in a physical system, you may have a kickstart file for how to build that Linux host, right? Don't log in to your container image and run commands to configure it because no one's gonna know how to redo that, right? When that person goes away, how do you rebuild that image? What changes were made to that image? A version control the Docker file, right? Store it in your source code repository and use versioning. And then when you're using an image, just be explicit with the version number. Don't use latest. Be very explicit so you know what you're getting. And be mindful that every time you put a run in the Docker file that it creates a new layer.  OpenShift itself has some built-in capabilities to manage that image size and to reduce the layers by using base images for you and doing some cleanup for you. Also, let's talk about content security, right?  Similar in the Java world, you have your standard format there and you have your standard runtime. Likewise, in the Docker world, you have your Docker file and your Docker runtime. However, in the Docker file, you can actually run C, DHB, Perl, Python, any language. It's not just about Java. But a Docker image, it pulls in the dependencies of that application. So it has everything it needs to run inside that container image, right, in the user space. And so, one of the things you want to be mindful of is what's it pulling into that Docker image? Let's take a look at the second one. That's the Java. It pulls in the JRE, bash, glib, c. And what you may not be able to see, there's a little triangle and there's a number inside that triangle. And in the JRE, the triangle says 66. And what that number represents is the number of security notifications that there have been since RUNL 7.0 was released for the JRE. So what does that mean? It means when I'm pulling these images down, I need to be aware of what security issues are in that image at the time I pull it down. But I also need to be thinking, what's my process for checking on security issues for this image on an ongoing basis? I would have had to address 66 different issues over the life cycle of RUNL 7.0 as of the time this slide was put together and it's many months old and there's certainly a lot more since then. So what inside the container certainly matters. And another best practice is as you're implementing continuous integration, continuous deployment in your DevOps environment, you wanna incorporate security. So this is a Jenkins pipeline. It typically has different phases where you're committing, you're doing a code review, unit testing. What about adding a phase that does a security check of that Linux container image? So once you build your code and then once you automate the building of that container image, you wanna run a scan on that image to see if there are any known security vulnerabilities. If there are, you wanna flag that and potentially stop the pipeline or at least flag an alert. And then secondly, you may wanna scan that image to see if it complies with your security policy, right? Are out of date services enabled and running in that container? Are certain directories created that you don't want there? File permissions, et cetera, are they accurate? And so those are the types of scans you wanna incorporate as an automated process so that every, with the philosophy of build once, the plenary, after you build it once, check it and then you know you can put it wherever it goes, it's already passed that security check. And you may ask, how do I go about doing this automated scan? There are many tools out there. One is an upstream open source project called OpenScap. This allows you to not only scan container images for security vulnerabilities as well as security policy within a container at rest or running, right? So if you have a container that's running, you can scan that or if it's not currently instantiated, you can scan the image on your NFS or your Gloucester file system. And it also works with virtual machines and physical systems as well. And essentially what it does is Red Hat or the distribution that you're working with provides a security guide for that operating system with the standard security policy settings. And then it has a checklist you can either check or uncheck those particular criteria if you wanna enforce those in your environment. An example may be like set password minimum length. And it also can scan for the RPM CVE alerts as well to see if there are any positive findings within that container as having known security vulnerabilities. And OpenScap is a set of tools. It also integrates with the upstream project form into manage security at scale. And it generates reports if you need to audit or have compliance regulatory standards you need to meet. And it also has remediation. So if it finds particular issues in terms of it having an air in terms of a security policy, it actually can automatically run a script to rectify that issue. Maybe it's disabling FTP or maybe it's setting the file permissions or directory permissions properly in that within that image. And so that's OpenScap. Also another best practice is to treat containers as immutable, right? What does this mean? It means separating your application code in the configuration as well as the data, right? And so that's an ideal state is you wanna have that nice separation of your application. Those usually make the best case of what applications to containerize, but more and more features are being added to support any type of application. And an example of this when you have nice separation is in Kubernetes they have config maps which basically allow you to set environment variables or you can use secrets which are encrypted so you can pass passwords. But keep those data, that data outside of the actual container image, so it'll store in the image. Instead use things like objects like config map which allow you to use key value pairs to pass on data to an image and make it dynamic without having to store that data statically in the image. Also some of the work that's being developed right now from a Red Hat perspective is around image sign. So in a RHEL atomic host which is the container optimized spin of RHEL7 it provides a containerized, a lightweight container based OS. And there's a lot of development to be able to sign images so that you can then check the images to make sure that they're intact and they haven't been modified. And so that you can trust that image to run in your environment. You don't have to worry that it's been hacked. And so there's a lot of work from a Red Hat perspective being done on that in the 7.3 release. Also a container build process. So in a traditional environment today most enterprises have admins responsible for the core build. They're using a kickstart file to generate that RHEL image or sent us or whatever distribution you're using. And then your middleware team is typically packaging up the J2E server or whatever application platform they're using in a tarball.  So right there that goes back to the real challenge with DevOps that's overcoming is that you have these silos. They're not talking the same language. You have kickstart, tarballs and war files and each organization doesn't know about the other. They're using different tools, processes and it's hard to collaborate creating a lot of friction amongst these team members. Well one thing that Container does is it breaks down those walls and now all three organizations are specifying their application in a Docker file. So now they're all talking the same language. It's the sad minutes responsible for the OS. They specify the definition of that base image in a Docker file, the J2E middleware team. They now specify the J2E server also in the Docker file and they can leverage the base image. This is sad minutes defined. And then lastly to deploy that application they can define that within the Docker file as well. Right and so now it's very modular and using the same tools and syntax. And so what this means is then you have kind of a supply chain in this inheritance where the new application leverages version one of the middleware and version one of the core build. I as a application developer, I don't wanna pay attention or spend my time keeping track of OS core build security issues or even middleware J2E issues. And with this model, you don't have to. Right because I'm inheriting what the other teams have done in leveraging that. And within the OpenShift solution, I can subscribe my images to what's called image streams and if there's ever an update. So if I've written an application that depends on core build version one, there's ever an update to version one will automatically be notified and it can optionally trigger an automated rebuild of my application with the update of version two which maybe addresses a particular security issue. So providing a lot of efficiency around security in that model. And so let's talk about these security implications around the ship step. So register security. Red Hat did an analysis of the public Docker Hub registry where you get tens of thousands different images that you can pull down. But at this point in time, when we ran the analysis, 64% of those images had a medium or high priority known security vulnerability inside those images. So the message is here, if you're in operation spokes, be aware of what people are pulling down into your enterprise. These are things like Hartley, Poodle, Shell Shot type of security issues. And so what can you do? The best practice is around private registries. Setting up a private registry, OpenShift automatically deploys a registry on top of the Kubernetes environment that you can leverage in your OpenShift cluster. There's also a standalone OpenShift registry that you can set up as well. And then you can also have a hybrid environment where you have private registries but if it's not available in the private registry, it can then look into a variety of public registries as well. And then the last phase is the runs phase. When you're running and instantiating that container image as a process on your physical, virtual, private, public cloud. And so one of the different things you wanna be aware of is that in your CISCV environment, you wanna be aware of where you're pulling that image from. So you may wanna have a private registry, you may wanna have registry in your production environment versus your dev test environment, but then just move images from one registry to another. You can certainly do that by copying them. So that's a best practice there. And of course, you wanna incorporate that security scan as part of the build process. And then also in terms of continuous deployment, OpenShift adds automated builds to Kubernetes and then Kubernetes provides automated deployments. And so you wanna be able to have visibility into the progress of your builds and your deployments. And so OpenShift provides pipelines to provide that visibility to your developers or admins. And then also provides the ability to easily deploy the container images into production. And then also deployment strategies. So Kubernetes enables continuous deployment and it has a lot of deployment strategies that allow you to address the issue of how do I update and patch my containers at scale? They talk about one physical machine could translate to maybe 10 to 20 virtual machines. Well, multiply that by 10 if you move to containers. How do you address security at that scale? It needs a lot of automation. And so Kubernetes, no, we should help you with that. In this case, you have the ability to do rolling updates to your environment. So you have version one deployed onto your environment. Your developers work on version two or the next version to address that issue in 1.2. And with Kubernetes, you can do an automated rolling upgrade by updating each individual pod. And here I've deployed it to one pod and I can test it out. If I have confidence that it's working and it's not to break it, I can then increase it to two thirds and then till I have 100% of my environment. And what it's doing is it's updating the load balancer, taking out the old version, putting in the new version into rotation. And it's automating all that for me so I don't have to write scripts. I don't have to manage the networking. I don't have to manage pushing these images, et cetera, making my deployments very easy. And I could also roll it back if there was a particular issue. I can also test out security patches without going all in and I can see what the impact may be. So let's say I have version one installed and I want to develop another version and see what the impact would be. So 100% of my traffic is currently going to version one. Well, I could also deploy out into production version 1.2 and then I can route some of my traffic to version 1.2 as well as version one and see, hey, is there an issue with one or the other? And so here you can see my A.V. testing. I could deploy 80% of my route to version one and I had a 25% conversion rate, maybe on my click through. And then I want to see what the impact of deploying version 1.2 was and here I could see it's gone up to 35%. So I wanted to validate that before I fully commit to that new version. And so OpenShift allows you to dynamically adjust the load balancing so that it routes 20% of all traffic to the new version and 80% to the old. And I didn't have to write scripts to that and handle that all automatically for me. And also, what about the hosts that these containers run on? But what are some of the best practices for my hosts in my Kubernetes OpenShift clusters? Well, first off, don't run your containers as root. It's not necessary, right? You wanna run it as a non-root user because if I run it as root, then they could have root to the underlying host as well as all the other containers on that particular system. Also, you wanna go to a model where you're not SSH-ing into your containers, right? Have everything that you need accessible via a service API, right? That other habit of SSH-ing into check logs, et cetera, set up a log service. Also, Kubernetes has names, spaces for networking, for example. I can set up network isolation for my dev test in production environments across the same underlying physical infrastructure. I can provide production-like environment to my developers easily, but at the same time have isolation from a security perspective. Also, you wanna define resource quotas, right? So you don't have to worry about the noisy neighbor, right? Don't let one container's over-consumption impact the quality of service of the others. Enable logging, be sure to have a process and tooling to apply the security around it, as well as security contacts and set comp filters so that you limit the capabilities of the process that's in the container. So it doesn't have full access to all the kernel capabilities. Filter that out. And so security context, this is the operating security settings, UID, GID capabilities, et cetera, apply to a pod or a container. So OpenShift provides the ability to define a policy for your security contacts and deploy that. And so we talked about content, builds, registry, deployment container hosts. And so now I think I have about 10 minutes. And so I'm gonna go into a demonstration to show you some of these capabilities. How many have used OpenShift or Kubernetes before? How many have used Docker? Okay, wow. All right, so I'm gonna show you OpenShift. And I already have the, oops, bring that on the projector. So OpenShift has a command line and I am using a wrapper called OC cluster to that command line. It's getting angry at me. So the nice thing is, really simplified from a developer perspective, I don't know, we have some electrical static going there. So I think I just go like this. Looks like we have a short. So the OC cluster command allows me to rapidly bring up a cluster on my laptop. So this is an old MacBook that I'm using. And nice thing is it really shows you how lightweight OpenShift and Kubernetes are. And so I'm gonna bring up, so what it did is it went and instantiated a cluster on my laptop. This is an easy way to get familiar with Kubernetes and OpenShift is to use the OC. And so you can see it's, what it's done is it set up the cluster. It's installed a registry to store my images. And then it's also set up the GUI. Okay, and so I'm gonna get one step further this time. And I'm gonna bring up the web console. And so here I have my web console for OpenShift. I logged in as my developer user. One possibility was to try to reduce the resolution of the output. Oh, the output? Okay. But I'm not sure if it will work. We're gonna... Yeah, but it looks like it will not. I don't know how much. I think that some program is this EPRS. Do you think it's the resolution? It might help. Okay, we'll try 720, is that it? Try that. There we go. Yeah, yeah. All right. It's so far.  If I can deploy AB. Oh, it looks like that may have been the problem. Is there a certain resolution? Let me try another resolution. Yeah, I didn't see anybody have any, unfortunately, I was just going to show a demonstration of the ability to automatically build your application. Once I have that container built, I can easily scale up, scale down, and I can also roll out the next version. And then I can also do things like A-B testing, so I can do 80% of load, 20% of load to version A versus B. And then I built that image in Dev and then now I can just take that image and move it into my test environment, my production environment, all on my laptop, without having to rebuild and kind of move that image through the life cycle. Go ahead now. The questions. Okay, the deployment scenario doesn't actually differ much from what we had in the past, maybe, and all that stuff. Question is, okay, how can we propose handling counter deployments or blueprint testing in real life when you have applications that depend on the background, for instance. So we have two versions, but the new version needs, like, I don't know, database changes or something like that. So this is one thing, and the other is, does how a certain shift suddenly support Kubernetes updates? Sure. So the first thing is, you know, how do you handle your data store? So I've seen folks leverage the container application platform with their data in a couple different ways. Some, you know, don't have the option of moving the data into a container platform. They leave it on their physical and virtual infrastructure, right? So they have some sort of manual process to keep it in sync, or they have some automation, maybe Ansible, outside of the platform to kind of synchronize and orchestrate that. Others have moved their data into a container and deploy it with their application. So in some cases they're creating a pod, which a pod can consist of one or more containers. And for some applications it's tightly coupled, whether it's latency or just they scale up and scale down together so it makes sense to put it in a pod. And so then they treat it as a single entity with two containers within that pod and then they upgrade, downgrade, and together. And then you have separation where you need to just orchestrate. I think for instance, it's natural that the database is deployed together with the new version of application and then test it, right? Then you are sure that it's so capable of collection. Then you apply the same for the normal database that I believe will be outside of the business. And also they're developing so they have backwards compatibility, right? So there is AIP for those of you in the field so that you can have a few installable sets? Yeah, so like Petsets, I think it's been renamed now. But those are for more static IP, static type of deployments. But that's different than the upgrade process more about the implementation. And I'm sorry, the second one about upgrade. Yeah, so there's an upgrade process with an OpenShift to upgrade the nodes, to upgrade the master in your environment. Some folks, they do their upgrades by deploying a totally new cluster but it just depends on... I've seen some real world where that's, every time they upgrade they just deploy a totally new cluster. And so they've really automated the movement of their configuration from one cluster to another. It's not bad actually if you're going to be sure that you don't lose production. Right. I think that's the thing and those pretty good developments, I guess you need quite a bit more time to decide if the new version doesn't have any faults. The OpenShift that you're providing the capabilities to, you know, enhance noise at all. So you would have different levels of monitoring. OpenShift really provides more of the infrastructure and the container level from an application perspective to monitor like the click-through rate and things like that. You would use your traditional monitoring as well. So that would replace it but we do augment it with, you know, the utilization of the resources, etc. for a container or at a host level. And we provide centralized logging with elastic search capabilities to search through those and we gather those logs and you can also plug it into like slump if you want to search those logs. And so we provide centralized logging. That's a great question. So how does OpenShift support essential logging? Do I have to actually employ or configure mining software applications or do I have to? No, so that's a great thing. It has logging and monitoring capabilities built-in. When I was doing that OC cluster there was a monitoring command-line option as well as a logging one. And it would deploy the logging or the monitoring services on top of Kubernetes. Yeah, that's fine. But the application that is deployed on Kubernetes needs to log somehow to the service that is. Oh, so it's standard out? Standard out, yeah. So how would then come to statuaries in the last search? Well, how do you handle them? Yes, it was normally from standard out. If there gets logged into the last search, you would get by 30 records in the last search, and there's a lot about that. OK. Any other questions? Which point is it put out, standard out? Sorry, standard out. Standard out, then take. Basically, you can imagine use for build, run, consult, and doing this kind of work for customers. You have to try to put the data into a special place after the customer in the group, the customer you know, which may be coming from standard out. Imagine KPMG comes to see your work. How you will do this, what business of the service? Yeah, I don't know. I'm just going to take a look at it. OK. So what's the next one? What's the next one? How do you provide access? Well, what's the next one? I don't know. Here? Yes. Okay. Okay. Here. Here. Here. Here. Here. Here. Here. Here. Here. Here. Here. Here. Here. Please. Please. Please. Please. Please. Again. Please. Attendant.


Trevor Traders, welcome on back here to begin our week here this Monday, October 23rd. Of course, it got my ugly mug once again, Fausto is still on vacation for his lovely wife anniversary and he will be back tomorrow, I believe probably in commute right now. So great to have all this back inside our live trading room. We had Kathleen before, Brian, Brad, Egan, Grant, John did pretty good before, Steve did pretty good before, Andrea looking for shares to short on a harp, one of our stocks in the pre-market watch list there. Great to see Kennedy and all of us just live inside the trading room. Great to have all this back otherwise on Facebook live, all of our social media streams, Facebook live, Twitter nowadays, YouTube, et cetera, be a friend, tell a friend, just at cyber trading you right there, just on all of us, all of our social media channels right there on our streams. So with that being said, let's hop right into the thick of it here to be transparent with the market drop off that we had from the end of last week. You know, I'm looking to see a lot more volatility heading into this week with the earnings that's coming out. We have Microsoft, Amazon, Google. There's a whole boatload more than I'm forgetting about. It's earning season. All right. So those are the main three players for this week. We came off last week. We had Netflix. We had Tesla, obviously. So with that, we ended up seeing IMVO this morning in pre-market. I wasn't necessarily expecting this. I was more hands off this morning in pre-market. The only chart I actually do have lined up here and it's not going to be on, oh, did I not clear my lines? Okay, cool. There we go. My spot chart right here. I was going to peel back occurred in a bit, show you my actual chart there that I have here to trade. I didn't clear these lines yet. So spot charts. The only thing I'm personally following going into the open, just more or less the options, the zero days till expiration options on it. So we'll see which way the market can break or bounce. But with that in mind, I wasn't expecting too many stocks in pre-market to look good. It was a shorter pre-market watch list. So Harp Andrea, hopefully he's doing good on the short, he was able to get the shares because that thing did drop off the way he wanted. What else did we have on our pre-market watch list? Obviously, Mara. I was going to get to that last. R-O-I-V, pre-market dumped off after the seven o'clock move. Then after eight o'clock didn't really do a whole lot either from there. And then with Bitcoin, making a strong bounce Friday heading into the weekend, broke back over 30,000 for a little bit, might still be over there right now live. Mara is moving back up, gapped up a little bit, hasn't done a whole lot though in pre-market. After eight o'clock, where we look for that eight AM move, would it go up like 10 cents, 12 cents? It's not a whole lot. So hopefully the calm before the storm, hopefully, if we get a good bounce within the market this week, if not today, Mara could be a great beneficiary of it. But outside of that, I wasn't really thinking about a whole lot here in pre-market. So that is where the IMVO took us by surprise, and it still led to a great trade from the VWOT price. A little bit later on, I'd call that out after the initial pop. So what's the news out on this company? Honestly, I don't even know. I had it up on Benzinga here just to prep up for this meeting. Do I homework here? But looks like IMVO Bioscience agrees to acquire another company, looks like private company, and an all-stock transaction. Well, I'll tell you what, normally when one company buys out the other, typically you see a gap down because the company would be spending cash, spending money to purchase another company out there. It's actually like, not to say inverse, but when you see a company get bought out, they gap up. Actually, another stock here today this morning, I think, just that TGH, the stock, I mean, has to be a buyout here, just looking at the way it flattened out after the gap up this morning. That's typically what happens when a company gets bought out, but for a company to buy another company out, you normally don't see this type of squeeze up actually. So very impressive. Actually, just recently a moment ago, pulled up on book map, pulled up on level four, it still needs to keep going, but it broke over resistance at 150. There were a couple of different sell orders out there. You know, right before the pop. So it tested it earlier, about 40 plus thousand shares. And then even right here before the breakback above it, you had another 21,000. You had another 12,000 here at 51, 13k at 52, and just like smashed right above them all. So let's see this flip into support it has so far. And we'll look to see if this can keep pushing up. Your next resistance seemingly is like right under 180. Got a 25,000 share order out there. All right. A lot of talking today. We're on the stick actually up until one o'clock Eastern time short break. But then we actually have our class this afternoon. It is class week for all of our students here, Grant, Michael, Andrea, Kennedy, Lawrence, et cetera. We got a packed house here for a Monday inside the cyber group room. We got the phase one and two classes being conducted this week. Of course, I teach those myself and you'll have found so next week for the advanced class phase three, but more or less, it is a busy day today. A lot of coaching and to make sure I get my water in. So that said, I in VO, I'll put this on our watch list to begin here. Hopefully it keeps going. But with this news that came out, a little suspect, a little suspect down there. All right. So I'll say otherwise, though, nothing really too impressive to write home about in pre-market. We covered our list already. This is the best one. So let's see if there's anything else looking better at this point or as good, you know, maybe making like a nine a.m. pop now at the stock LMDX. I got to look at it at least here. I may as well look at it now. It's up 292%, but it's a 35 cent stock. We're not really trading 35 cent little penny stocks here. So I will tell you, it has made a beautiful pump up.  We see these happen every single day, maybe not to a 294% degree, but, you know, you'll tend to see these penny stocks pop and drop all the time. So we're emotionless to it all. Even if we miss out on it. I just think pop. I don't know what happens here. Yes, empty and the hell is this 745 broke out. This could be a buyout also looking at the way it's moving. I don't even care to check. And I don't even care. It's not even worth our time. I keep moving. Wolf. Oh, geez. I don't think there's even, I don't know if there's any news out on this company, but it's not really making the best move either. So, you know, if I really need to jump back to a wolf, I guess I will. Uh, rove again, the same thing with that, not really impressive at all. After the eight AM move and that I'll keep it on our side list now, our B list, harp, same deal. And Dre, if you're able to get the short off on that, you're looking pretty nice, but otherwise past there at the Bitcoin stocks. Like we said, Mara, Ryan, blah, blah, blah.  It's up more percentage wise. It's more volatile. They own more Bitcoin. So if Bitcoin explodes in price. In theory, you'd imagine that riot would be a much larger beneficiary of that. Uh, CLSK is a company that is very surprising in the sense of how much Bitcoin they actually own. I don't have the number in the back of my head right now to give you, but more or less it's to say that I saw on Twitter, saw on social media, like last week looking at like a report on the crypto miners. Very underrated CLSK actually. So I'm going to look into this more as a swing trade over time alongside my Mara for students like Grant Michael, et cetera. You know that I am big on Mara for the long term. So it's not even worth asking like, Hey Josh, you still bullish on, I am bullish on crypto long-term always, but short-term though, I really haven't been, you know, they could be good day trades here and there. And you know, Mara and CLSK, perhaps if we get some better movement across the board on Bitcoin holding over 29,000 now, perhaps 30,000, these can make a better swing trade here. So, um, you know, Mara, I'll put on our main list. I didn't do that before. I don't think CLSK actually I will as well. It's up over six plus percent. So even if not as a swing trade, just as a day trade, nice little push up the last minute, popping up a little bit more. We like that. We like that here. So, Hey, let me ask us for all our students inside our live trading room. If all of these crypto Bitcoin mining stocks move similarly or together, do we need to call every single one out? Do we need to call every single Bitcoin stock out? Every single crypto miner stock out there? No, we don't. We absolutely do not. Right, Bill. So, Hey, I'm going to add Mara. I'm going to add CLSK here. If there's anything looking better than those two, then I'd be surprised because I was scanning just before, you know, you got hut up a tiny bit. You got cannon up a tiny bit. I saw BTB T up a little bit more earlier. Maybe they dipped off. Yeah. Side list, not even that, actually. If like Mara and CLSK are moving, then it's not even worth it, right? Those are our two main horses in the race for today. And then if you trade the options or you do more expensive, you know, stocks, then in that case, perhaps Coinbase could be for you. But even such, you know, Coinbase is only up 2.4%. It's not up as much as Mara or as much as CLSK is yet. So, you know what? Actually, I will add Coinbase to our B list for right now. Coinbase in particular. The others will pass on. All right. So let me know if there's anything else looking good from the gainer side. Maybe not the crypto miners at this point, but anything else looking good on the way up, let me know. Hop over to the losers list though. Otherwise, seeing if there's anything looking good there. Our VMD took a huge hit. Now to 18 bucks, getting actually pretty close surprisingly to all-time lows. Still has a ways to go, I reckon, like 13, 14 bucks roughly. But that's a big drop though on the intraday. So let me break back open Benzinga Pro just for the curious mind to your why is the stock down 33% so our VMD shares trading lower after the company announced it presented clinical activity and safety data from its phase one trial of blah, blah, blah. So obviously not a good reaction from the street there.  But yeah, otherwise down big here today, it could be a good short. Just the order book is really like a ghost town right now is empty. So just because it's down big doesn't mean I'm as like as particular to follow it. If this does fill in a lot more, I will be a lot more of a fan of it. And it's pretty much as like straight, straight forward as that. This is dropping off. Don't get me wrong. It's only trading like 86,000 shares though, comparatives like Mara, IMVO, CLSK, and maybe some shorts here on the loser's side. You know, it's not really a whole lot, but want to see a little bit more here in pre-market even. All right. So I'll tell you, I mean, it's not really too surprising for a Monday, but I don't see a whole lot more out there across the board on the gainers or losers list. So for all of us collectively, just, you know, Grant and all of our students here being the way through in cyber group and all of us in social media at CybertradingU, once again, be a friend, tell a friend, just make sure that you're subscribed to all of our social media streams, including Twitter, including YouTube, but that being at CybertradingU. And let me know if there's any other stocks that you folks over there would want me to look at as well. Got a nice fancy water cooler next to me. Long day of talking. So may as well refill now. All right. So Jith asking about the heart trade. Yeah, we looked at that just before. It wasn't going anywhere really at the time. You know, it's just making lower highs, lower low. It looks like a gap fill on the intraday and, you know, maybe later on, if it can make some like higher low, you know, don't get me wrong, it dropped off from a little, you know, from a higher price, like 13 down to seven. So when it does solidify the support, it likely could bounce a dollar, but, you know, are we waiting on that throughout the morning? Are we banking on that to be like a 930 move? It doesn't look like it's going to be a 930 move the way it's trending. So that's where it's like, it'll be on our sideless, Jith. It's there. It's on my notebook. I wrote it down at least for the, for the, for the sideless there. All right. So hey, three stocks to work with two of them being the Bitcoin miners. That's all we got here for a Monday. Can you believe Powell speaking again this week? Did you know that? Did you know that Powell speaking again this week? I saw on the calendar, he's yapping again at like, I think Thursday after the market closes, Thursday after the close, we got Powell today again. I don't know about what, but surely it's, it's going to do the market wonders, I'm sure, right? So definitely stay tuned for that. Bill says, I know you how you love Powell. I think everyone loves Powell, right? As much as Jim Kramer nowadays. So again, last call folks up, down, left, right. Let me know if there's anything else before we finish up. I believe that you'll get Fausto back tomorrow morning.   I am yapping right now for the last 13 minutes. I'm talking all morning. No, Chuck's obviously not referring to me. Stop Kramer and Powell are good friends there. John says, he'll bring the popcorn Torello and style. Right, John? There you go. All right, folks. So, hey, we're going to finish up here for the meantime. Pretty short list, honestly, but we did our job. I mean, hey, we went through the gainers list. We went through the losers list. I mean, if there's a Tesla out there that's making a pop without me, then let me know like a sideless stock that is a name brand. Tesla, Apple, not really going anywhere. So, you know, hey, let's start with what we got. There is no need to try and dip out of the dip away from this watch list at the open. You know, after like the first 15 minutes, 945 in the morning, if there's nothing looking good from the INVO, Mara, CLSK, then we'll look at harp, then we'll look at like, you know, Roy or Wolf even Luciano asking about snow snowflake. I was going to say, I'm like, is this all pre-market data? I was like, whoa, what happened here? Is this all pre-market? No, this is all yesterday's data. I was going to say, I was like, wow, that's a good trend. Yeah. I mean, hey, it is on a good downtrend, but yeah, it's only trading 35, 36,000 shares there. Luciano, it's just on our side list right now. I mean, there's so much that looks like this in pre-market. It's spotty. There's not much activity here in pre-market to show any sort of smart money being traded or direction. And that's okay. Again, there's like, you know, for the, I don't know how many thousand stocks that are out there publicly listed out there nowadays in the stock market, you got three of them on the watch list. Three. So if I'm not putting a stock on the watch list, it's A-OK because there's not much out there that looks good. And on top of that, it's a Monday, folks. It's a Monday. So Mondays and Fridays, we normally don't expect a whole lot, but with that in mind, after they're closed today, we'll get a bunch of earnings. And all throughout this week, again, we have Amazon, Google, Microsoft, the works basically will say it's week two of earnings season. So looking forward to it. And for all of our students here in our chat board, hey, stay tuned. I'll be back on at 9.30 for the market open. Let's try and make some money together here heading into the beginning of this week. Talk to you all soon. Take care.


While H2 evolution from water may represent a renewable energy source, there is a strong need to improve catalytic efficiencies while maximizing materials utilization. Here, authors examine single-atom PT on nickel-based hetero structures as highly active electrocatalysts for alkaline H2 evolution. This article was authored by Keiling Zhu, Zelen Wang, Chang Bao Han and others.


Anything you want to achieve in life, you can absolutely get there if you just take it step by step. This is something we often forget, because when we look at a vision that we want to achieve, a project that we want to get done, the human brain naturally, automatically, looks for obstacles, looks for, well, this can't work because that's natural.  So it's just a natural gift that we have, a natural talent we have is to look at, well, this can't work because of this or this. So if you don't write down what the specific and doable steps are to help you get to where you want to go, you will always struggle with your mindset, with your limiting beliefs. So this is something that I do all the time, I practice, it's become natural for me, but I realize a lot of people still don't do this and I hope that you will start to make this a practice as well. Write down specifically what you need to do to get to where you want to go. That's really the first step. Write down in a doable way. So let's, for example, let's say I want to go to the moon. I don't really want to go to the moon, but let's say I had my mind and heart set on going to the moon. What would I write down? I would write down whatever I already know to go to the moon. So it would be like, step one, find a launch pad, step two, learn how to build a rocket. Step three, get the right financing to build a rocket. I'm just playing with you, but this is an example. Then after you write down what steps you already know, it doesn't have to be the right order, the next step is to put the things in the order that you think makes sense. So you might say, well, I can't really find a launch pad or build a rocket before I have the right financing. Maybe I should get the right financing first, step one, and then find the launch pad where I can build a rocket. And then step three is to build a rocket, as an example. And then after I've written down what steps I know and reordered them to what I think needs to happen, then the next step after that is to look at each step and make it very, very doable. So get the financing to build a rocket is too big. I will start thinking of obstacles. I'll start getting blocked on how I could possibly do that. So then I write down the smaller steps to how to get financing to build a rocket. So maybe the smaller step that I can very much do is Google how to get financing to build a rocket. Google, I can Google it. Or I can go to a Facebook group of rocket enthusiasts and say, hey, how are you all getting financing to build a rocket? So I write down the very small doable steps that I can underneath each step to say, oh, I can do this. Oh, I can do this. Oh, I can do this. Get it down to that level where you feel very, very doable that you could do each one. And then the next thing after that is to take action knowing that as you take each step, more understanding will be revealed to you. You will know better. Oh, before I realized I thought I had to do that. But as I started doing that, I realized I have to do this first. You will only know more as you take action. That's very important. And then finally, as you take action, bring your higher self into each action that you take. This is a secret that if I could leave you with one secret, like if I were to die in the next hour, and this is all I could say to you, this is what I would say. Learn to find joy in every step along the way. Most people dislike working and I get it, right? Like none of us, oh, I can't wait to do my bookkeeping or I can't wait to do my taxes. I can't wait to do my marketing or whatever it is that you feel you have to do in order to get there. But if you learn the secret of learning to enjoy every step, you've won in life.  It's not about the result. It's about this moment and taking the next step with as much breath and joy as we can. Then you've won and that's really kind of what I practiced over the years. I think that's why my business has been more viable and sustainable than many other people in my market, in my niche, is that I've learned to practice bringing joy to every single thing that I do. I am a solopreneur. I don't have an assistant. I don't have a bookkeeper. I literally do all my own bookkeeping. I do my own taxes. I don't actually prepare the taxes, but I do a lot of the prep work for the taxes. I do all my marketing myself. I do all the tech work by myself. I don't do the graphic design because I'm not so good at that, so I outsource that. But I do so much of it myself, not because I'm really good at those things, but because I am dedicated to being a solopreneur to provide an example for a lot of my clients who are solopreneurs. And I've learned to just, you know, lots of things that I do are not my natural talent, but I just take joyful step after joyful step and it just works out. So that's my encouragement for you today. I hope this helps anything you want to achieve. You absolutely can achieve it. Just remember to write down what the steps are and to take the steps with as much breath and joy as you can. I hope this helps. Take care.


I can tell you there's a price to pay for the anointing on your life. Salvation is free, but the anointing will cost you everything. I'm talking about that beautiful presence that will rest on your life. And I'm not just talking about moving in power. I'm talking about the very dwelling place of God that you become. Not having to look for an atmosphere but becoming one. Not having to seek after signs but signs following him. This is the power of the Holy Spirit that can flow through your life. That when people come near to you they can sense the presence of Jesus. To carry that glory to house his presence in such a way that it's remarkable people can note it on you.


Welcome to Church of the Chair, where we don't need no water.  I'm your host, E, and today we got a hot one on our hand. For those of you who are new around here, you need to expect spoilers for all of Stephen King's books. If you haven't read all of Stephen King's books, I suggest you click away. You've been warned. Today, we're talking about Firestarter by Stephen King. Now let's go ahead and jump right into the theories. I was not displeased with my original theory video for this book, so I'm going to let this lost Teletubby tell you what he thinks. This is where my theories start coming together. This is the first of Stephen King's books that discuss the shop. Actually, no, that's a lie. The stand, oh sorry, the stand, the shop, the government secret, government agency, the shop, are the ones who try to stop the spread of Captain Tripp's before it takes over. Of course, we all know that fail. The shop is also mentioned in The Longmower Man. It's the film. It's in the Golden Years, the miniseries. It's mentioned, of course, in The Tommy Knockers, The Mist. There's some people theorize that The Mist, the happenings that occur in that, the shop is actually what did that. So they were doing some scientific hoodoo, ended up opening up a portal to mid-world I'm gonna go ahead and say it. I think they opened up the portal, they let some old ones in from the prim, and of course there's a stand. But wait, there's more. What that absolute unit failed to mention was something that commenters called him out for. As seen in these comments, here and here, you can pause to read if you need to. So not only does Firestarter connect back to all those other books that he mentioned, but they also tie into the stand, and the stand ties directly back into the Dark Tower series. Checkmate. Finally, I would like to add that Firestarter is, I believe personally, one of Stephen King's most underrated works. It has made it into and stayed in my top 10 for years. If you have not read the book, please do so. Also, please, please stay away from the most recent reboot. It is, oh boy, it's something. If you're interested in the review of that adaptation, I'll leave it at the end of the video. But that's all the time I have for you today. If you found any other mentions of the shop, please let me know down there in the comments section. Also, if I missed any other connections, period, let me know that too. I don't mind being corrected and I surely don't mind you adding to these theories. But until next time. Oh hell, the chair. Also, if you'd like to record a video and email it to me, just leave a comment down there and you can do the outro yourself. Like in the last two videos. Thanks. Bye.


So far, we haven't found any explanation for irreversibility in the fundamental laws of physics. But our analysis of the Sterling and Carnot cycles has led us to agree with Clausius. For practical purposes, a process is irreversible if it increases the entropy of the universe. No process is possible that lowers the entropy of the universe. And adding heat Q to a body at temperature T increases its entropy by delta S equals Q over T. The ideal monatomic gas is the model system we have used throughout this series for making quantitative calculations. Let's now try to use these ideas to figure out its entropy. We denote by U the internal energy of the gas. Q is heat transferred to the gas from the environment and W is work done by the environment on the gas. The gas satisfies the ideal gas law. Pressure times volume equals number of atoms times Boltzmann's constant times temperature. The internal energy is the heat capacity three-halves Nk times the temperature T. And the first law of thermodynamics gives us the relation du equals delta Q plus delta W. du is a tiny change in the internal energy delta Q is a tiny amount of added heat and delta W is a tiny amount of work done on the gas. Work is done when an external force compresses the gas. Consider a piston with cross-sectional area A. If a force F pushes the piston through a displacement dx the change in gas volume is dV equals minus A dx. And the work done delta W is F dx.  F over A force per area is pressure and A dx equals minus dV. So delta W equals minus P dV. Rewriting the first law is delta Q equals du minus delta W. We can substitute three-halves Nk dt for du and P dV for minus delta W. Then from the ideal gas law we can substitute Nk T over V for P. Then divide both sides of the equation by T. On the left we get delta Q over T which is dS the increase in the gases entropy. This is equal to on the right three-halves Nk dt over T plus Nk dV over V. Factoring out a common Nk this leaves dS equals Nk times the quantity three-halves dt over T plus dV over V. An expression like dV over V the change in volume divided by the volume is a dimensionless quantity representing the fractional change in the volume. dS is the change in S and dV over V is the change in the natural logarithm of V over V zero. Likewise, dt over T is the change in log T over T zero and we can always add a constant S zero. This gives us the entropy S as a function of the temperature T and the volume V. The log of one is zero so when T equals T zero and V equals V zero S equals S zero. Therefore if we can determine the entropy S zero at some temperature and volume T zero and V zero this expression gives us the entropy of the gas for any other temperature and volume. Using properties of logarithms we can express this in the more compact form. S equals Nk natural log of the quantity T over T zero to the three-halves power times V over V zero plus S zero. This is the absolute entropy of an ideal monatomic gas of N atoms at temperature T and volume V. Note that since S is a function of T and V which are state variables, S is also a state variable. The entropy of a gas sample is a function of only its current state independent of the processes used to arrive at that state. This expression is not yet of practical use because we don't know how to determine the constant S zero. But we can put it in a form that is replace T zero, V zero and S zero with T one, V one and S one. Move S one to the left side and replace S, T and V with S two, T two and V two. Then we have S two minus S one equals Nk log of the quantity T two over T one to the three-halves times V two over V one. This tells us what the change in entropy is in going from state one with temperature T one and volume V one to state two with temperature T two and volume V two. In the next video we'll use the techniques of statistical mechanics to solve for the absolute entropy of an ideal monatomic gas. The result is called the Sacher-Tetrode equation. However, in practical applications the simpler form we've derived here is often more useful. Although we've expressed entropy as a function of temperature and volume, we can use the ideal gas law to express a temperature ratio in terms of pressure and volume ratios. Substituting this into our equation then gives us an alternate expression for the entropy as a function of pressure and volume. A process is said to be isentropic if it occurs at constant entropy. Our entropy expression is constant if T to the three-halves times V is constant. Substituting PV for T gives us P to the three-halves times V to the five-halves is constant. And raising this to the two-thirds power we get P times V to the five-thirds is constant. So on a PV diagram curves where P varies is the inverse of V to the five-thirds are isentropic curves. We've encountered these before. They are the curves of adiabatic expansion and compression such as in the Carnot cycle. It makes sense that they are isentropic because adiabatic processes involve no heat transfer and hence no change in entropy. We have also discussed isothermal curves for which P varies is one over V. So we now have four state variables to describe the state of a gas sample of n atoms pressure P, volume V, temperature T and entropy S. Given any two of these variables we can calculate the other two variables. Let's simulate adiabatic that is isentropic expansion and compression. We start with n atoms at temperature T confined to a volume V. The volume is insulated. No heat flows to or from the gas. As we allow the middle wall to move right the volume clearly increases. Not as immediately obvious but still discernible. As atoms bounce off the moving wall they slow down reducing the average kinetic energy and therefore the gas temperature. So we could see the volume increasing and with some effort the temperature decreasing. But did you notice the entropy remaining constant? Well what does that even look like? Pressure varying as the inverse five thirds power of volume? That's a rather abstract quantity which is one reason why entropy is a challenging concept. You can measure volume with a ruler, temperature with a thermometer and pressure with a pressure gauge. But you won't find entropy gauges at your local hardware store. Now let's compress the gas. The decrease in volume is obvious. The increase in temperature is less obvious but still apparent if you carefully watch atoms bouncing off the moving wall. But constant entropy? It doesn't exactly jump out at us. After compression we return to our original state with n atoms at temperature T confined to a volume V. So the adiabatic expansion was reversible through adiabatic compression. Previously we considered the microscopic reversibility of all mechanical processes. If at some moment we reverse the velocities of every atom the entire system will retrace its evolution in reverse. But that is not what is happening here. Atomic velocities are not reversing as we go from expansion to compression. Indeed we have no mechanism to implement such precise and extensive changes. Instead all atomic states continue to evolve without sudden changes. All that is reversed is the velocity of the movable wall. The reversal is macroscopic, not microscopic. Although we return to the same macroscopic state, n atoms at temperature T in a volume V, it is not true that every atom has returned to its original position. The system has been reversed macroscopically, but not microscopically. So when we say that the Carnot cycle is reversible and running the cycle in the forward and then reverse directions returns the universe to its original state, we really should be more precise and say to its original macroscopic state. We do not return every atom in the universe to its original state. For practical purposes, when designing heat engines and heat pumps, this is the only kind of reversibility we care about. But it is an important distinction. The reversibility we are referring to when we discuss the second law is macroscopic reversibility. Microscopic reversibility, or theoretical possibility, is something we have no way of implementing in a large scale system. Heat flow from hot to cold is irreversible because there are no macroscopic changes that will cause heat to spontaneously flow from cold to hot, even though it is, in theory, microscopically reversible.


We got a lot of blood and a lot of one guy trying to run through everyone else in the Lakers Pistons game last night. It's brought to you by DraftKings. Download the number one DraftKings Sportsbook app. Use promo code Johnboy when you do. They're going to get into position here. LeBron slides over. He's right next to Stuart. They're hanging out, going to watch the shot together, take it in, have a good time. And Stuart just throws his elbow right into LeBron. He's just pushing them, pushing them, pushing them. LeBron decides he doesn't like it so he punches him in the face. He's like, hey, stop pushing me, bam, bam, bam. And his elbow actually makes contact with his forehead first. You can see the forehead on Stuart kind of like wrinkle, like right there. You see if you're looking like right here, kind of wrinkles up because his elbow gets him first. And then the hand comes through and just kind of scrapes at his whole lip and face. Slow-mo, it looks more like a scrape. I mean, in live time, bam, got him. Boom, kind of gets the nose a little bit too.  Did I punch you when I punched you? Man, I didn't mean to punch you while I was punching you, my bad.   He gets up. He doesn't even know what to say. He's like, bro, you just hit me all over. You just went from eye, nose, and mouth. You got my entire face. They're trying to calm him down, wrap him up. And he's like, yo, go talk to LeBron. He's the one that just hit me all over my face.  Hey, and the ref's over here. He's like, hey, I'm so technical.   His coach has got him wrapped up. He talks to his coaches out of him. He's like, I'm good, I'm good, I'm good. Just let me go. So let me go. They're like, all right, cool. He's not good. He was lying. This coach has a beat on him. He's staring him down. He's like, all right, I'll be the man right here. I'll get in his way. And he just gets bulldozed to the ground. The glasses come off. They go flying. The notebook goes flying. It lose a piece of paper. It's a bad scene. Another guy falls on the ground. His cell phone comes out of his pocket. This security guard's like, all right, I'm the last line of defense here. I can put my hands up. Blocking, blocking, blocking, blocking, blocking, blocking, blocking. No one's getting by this dude.  Hell of a job by him. Yes. Great job. Just maintaining control.    Get off me.  Don't need your wisdom right now. Just got hit in the face. Pretty fired up about it. Trainer comes out. She's like, let me take care of you. He's like, fine, fine, fine. Psych pushes, cutting into the outside, busts inside, breaks through that tackle, breaks through this tackle, breaks through those guys. And the ref, the ref gets him. He lassos his wrist. The double wrist grab always works. It's a favorite. And LeBron's like, oh my God. Mel's like, huh, and he's just bloody. You kind of can't do it. Also kind of don't blame him. Got punched in the face, but kind of can't do it.  I just sipping on his drink, filming the action. Don't do that. Don't do that. They bring the towel for him. And this guy, Grant, like, goes to wipe his thing. Grant brings the towel over. And he's like, I'll clean you up, man. Don't worry about it.  Never mind. So this coach is like, all right, I gotcha.  Like that's helpful in the moment. And then they just backwards, backwards, backwards, backwards pushing.  There's no one behind me if I just bull rush backwards. So he does that. That guy gets shoved. He's off. And this security guard's all over it. Get the other door. He's going that way. He's going that way. He's going that way. Everyone checked that way.  Yeah, yeah, yeah, yeah, yeah. Yeah. I say it, Tom. It's like the layout, Stewart. There's then a Flagerfell penalty two resulting in the ejection of LeBron James. Love out of the ref couldn't even get the next sentence out because they were cheering so loud. Second ejection for LeBron ever.  So that's what happened here. It was brought to you by DraftKings. If you bet on the game, this kind of turned it around. I think the Lakers won. They rallied behind LeBron. He's a clean player. He'd never do that. He does the flopping, not the hitting. Come on.