On the 17th of April, a battery of 155-millimeter howitzers prepares to fire a mission in support of 25th Infantry Division troops engaged in Operation Longfellow. The target is an area being prepared as a landing zone in Contum Province. Final instructions come from the FDC, as the big tube artillery is prepared for firing. The battery is firing from positions near Duck Toe, 480 kilometers north-northeast of Saigon. Elevation adjustments are completed, and the firing commences. Now the entire battery is in action. Even as this barrage fire is covering the landing zone area, Tropic Lightning troops are mounting their assault helicopters for a successful move to the forward landing zone. During the period 29 April through 1 May, additional units of the 25th Infantry Division were filmed as they arrived at the seaport of Bung Tau, Republic of Vietnam. In a shuttle service, LCTs ferry the men from their troop ships to the beach. Onshore, the division band greets the landing troops. The beachhead is located some 64 kilometers southeast of the capital city of Saigon. As the Tropic Lightning troops reach the beach, Phase 1 of Operation Moonlight is completed. Phase 2 of the massive deployment is to move the Hawaiian-based outfit inland to their new base of operations at Kushi. For the trip to the division's headquarters in Vietnam, 96 kilometers to the northwest, the arriving elements are taken to nearby Bung Tau Airstrip. They will be flown from here to Kushi as the more than 4,000 new troops complete the final phase of Operation Moonlight. Camp Alpha, situated at Tonsunut on the outskirts of Saigon, is the trans-shipping center for both incoming and outgoing troops of the 173rd Airborne Brigade in South Vietnam. On this day, early in May, a group of replacements, fresh from stateside, load aboard buses for the 28 kilometer drive to Benoit. Arriving at the 173rd base camp at Benoit, the new men are completely processed by the personnel of the administration company. Briefing and unit assignments are followed by stops at record section and finance. After processing, the replacement soldiers board waiting trucks and are taken to their respective units. For them, the war against the Viet Cong is about to begin. At the same time, other men are being rotated back to Conas. No troops are held overnight at the processing center and all are soon on their way. For the returnees, Camp Alpha is the gateway to home. Here their transportation back to the states is arranged. For these veterans of the Vietnam campaign, a long-awaited moment has arrived. Camp McDermott, headquarters for Field Force One Vietnam, is located at Nhat Trong, 40 kilometers north of Cameron Bay. The old Grand Hotel now serves as the headquarters building for the command. The camp, opened on 13 February, is shown here in film shot on the 3rd of May. During the 10 weeks the camp has been in existence, it has been greatly expanded to handle thousands of troops. A construction program is going forward to convert from tents to frame buildings, and concrete foundations have already been poured for many of the structures. One of the units assigned to Camp McDermott is an MP company. The military police not only provide security for the headquarters here, but they perform many of the same type of duties as they would in the United States. As the camp has grown, the MPs find their activities increasing. Speeders along the highway between the camp and the town of Nhat Trong are given tickets just as anywhere else. For many years Nhat Trong has been a popular coastal resort city and is densely populated. Speeding is out. When out on patrol, the military police are in constant communication with MP headquarters, often receive instructions to be on the lookout for overdue or AWOL individuals. Usually these persons are in town. Nhat Trong, once noted for its beautiful beaches, hotels and temples, has undergone certain changes as local businessmen vie for the money of Camp McDermott soldiers. Colorful lilies lounge and the robust Los Angeles bar are typical examples of the new fun places. To the MPs, the gaudy bistros are frequently the source of trouble and are under continuous surveillance. Passing through the red velvet portal of this night and day spot, the MPs check to make sure no military personnel are patronizing the bar during duty hours. The place is empty, so the MPs mount up to continue the patrol. Incidents of a serious nature are occurring less and less as the MP patrols increase. Camp Radcliffe, home of the First Air Cavalry Division, is located near Ankay. Here on 6 May, presentation of division colors from Major General Harry W. O. Kennard, outgoing commander, to Major General John Norton, formally launches a change of command ceremony during which General Norton will assume leadership of the Air Mobile Division. General Norton is officially installed by Lieutenant General Gene E. Angler, Deputy Commanding General U.S. Army Vietnam, and Major General Stanley R. Larson, Commanding General Headquarters, Field Force One. As troops of the First Air Cavalry stand in formation, the new commander troops the line. First Cavalrymen salute their new Commanding General as the divisions and the nation's flags fly in the brilliant sunlight. General Norton's most recent assignment was as Deputy Commanding General of U.S. Army Vietnam. General Kennard is assuming temporary command of Field Forces One while General Larson is on leave. After this temporary duty, General Kennard will return to the United States for reassignment. As a climax, division helicopters pay tribute to their new commander and bid farewell to General Kennard, who helped develop the Air Mobile concept and was the first commander to direct its use in combat. Approximately once every two weeks, a freighter completes the journey from New Orleans to the Dominican Republic, where it unloads enough food and other supplies to support the 7,000 or more troops who make up the United States contingent of the 8,000-plus Inter-American Peace Force. There are 30 dozen eggs in each of these cartons. Perishables are unloaded first and transported in refrigerator vans, a prime necessity in this subtropical climate. All supplies, perishable or not, are taken to the Fairgrounds Depot complex of the 627th Supply and Service Battalion. These experienced supply experts know that in this climate food must be placed immediately in cold storage lockers. Eggs, like all foods, can go bad during shipment. To protect the health of the troops, an Army veterinarian is assigned to inspect each shipment of perishables that arrives. Producing daily bakery products is another function of the Supply and Service Battalion. Here, battalion bakers place dough in a molded divider assembly to make two-pound loaves. The bread is then baked for 45 minutes and permitted to cool. French, rye, whole wheat and raisin bread are among the bakery products the battalion supplies to their hungry customers. Inside this enclosure, the Battalion 649th Supply and Service Company operates a 7,000 customer laundry. Care and consideration become second nature to men whose official battalion and company designations contain the word service. The Battalion's 67th Maintenance Support Company frequently stops U.S. Army vehicles on the highway, spot-checking them to see if any repairs are needed. Minor repairs are made by the unit motor pool. For major repairs, vehicles are sent to the repair tents of the maintenance support company. Each vehicle repaired and virtually rebuilt will be returned to its unit in peak operating condition. These jeeps, carefully tuned and checked by the maintenance company, will be donated by aid to the Dominican National Police. They symbolize the wide spectrum of responsibility which faces U.S. Army supply and service personnel in the Dominican Republic. General de Division F. Binoche of France, Major General Sir John Nelson of England and Major General John F. Franklin, U.S.A., attend the Allied Forces Day celebration in West Berlin on 14 May. Governing Mayor Vili Brant and family are next to arrive. The Mayor greets the commanding generals on behalf of the city. Colors are born the length of the parade route. The Strasse de Sibseine Uni, west to Ernst Reuterplatz, then along Bismarck Strasse. A combination of three military bands. The pipes and band of the 1st Battalion, the Royal Inniskilling Fusiliers Band and the Royal Tank Regiment Combray Band. Execute the traditional British march maneuver left wheel. Nine military bands participate in the overall parade. The Gendarmerie National of France, with origins dating back to the Gallo-Roman era, leads the mechanized section of the parade with elements of the Gendarmerie Mobile. In the second portion of the parade, a squadron of the Queen's Own Hussars marches the route. Various motorized units participate. The original division uniform is worn by the 6th U.S. Army Infantry Division Color Guard. The state flags of the 50 states of the USA are carried by men of the Berlin Brigade's Special Troops. An M-60 U.S. tank from the 40th armor salutes as it passes the reviewing stand. Large crowds attend the biggest Allied event of the year, which demonstrates the unity and might of the Allied partners for peace in Berlin. The Thailand Armed Forces Military Research and Development Center in Bangkok is seeking a practical individual combat ration for their troops. They are working in cooperation with the U.S. Advanced Research Projects Agency Field Unit in Thailand, and with the Thai Preserved Foods Organization. The research and development stages are completed.  When new machines are received this year, the output will rise to 2,000 units. The packages contain dried rice, sliced dried fish, a Thai soup of cabbage and vegetables, dried beef, fish powder and other dehydrated items. Dessert is a sugar peanut candy bar. Various sealed packets making up the individual three-meal ration are assembled and placed in clear plastic bags which are also sealed. The dry food is therefore doubly protected against tropical humidity which might otherwise spoil it. Throughout the whole process, quality control is maintained in this modern well-equipped laboratory. It is operated by the Preserved Foods Organization at Kasart University near Bangkok. The laboratory has been working on the project for the past 18 months. Thai soldiers sampled the rations. When hot water is added to 250 grams of rice in waterproof bags, it becomes 750 grams ready to eat in 10 minutes. Special tablets placed under the canteen cups heat the water. Powdered soup poured into cups of hot water is also ready in a few minutes. The rations shown here by Dr. Amara, the director of the project, have been field tested by various royal Thai armed forces and were favorably received. This is Main Street, Fayetteville, North Carolina. The 150-year-old Fayetteville Observer is the hometown newspaper for thousands of members of the 82nd Airborne Division stationed in the Dominican Republic. They left their families and their loved ones in the Fort Bragg Fayetteville area when they were ordered to Santo Domingo to restore peace a year ago. The Army has made arrangements for 1,000 copies a day of the Observer to be sent to the soldiers who call North Carolina a second home. Near the large military base at Fort Bragg is Pope Air Force Base, whose Dominican Republic terminal facilities are used nightly by a military courier jet to get the newspapers to the readers in Santo Domingo. Within hours, the aircraft carrying the newspapers lands at the headquarters of the United States forces in the Dominican Republic. From the tail section of the C-130, the newspapers are offloaded. The papers with all the news of the activities and interests of the families back home are dropped at the various distribution points in the Camp Randall and Santo Domingo area. The Observer is distributed on a basis of one copy for every seven men and reaches soldiers everywhere, ranging from the headquarters section of the IAPF to 82nd Division headquarters and units out on special duty. Within 24 hours, the Observer is in the hands of its readers in the Dominican Republic. The morale factor is a large one. In a foreign country where the soldier is away from the ones he loves and where the inhabitants speak an unfamiliar language, the Fayetteville Observer is like a daily letter from home. The first anniversary of the formation of the Inter-American Peace Force is held on 6 May. To celebrate this, sports events are scheduled between the five Latin members and the U.S. IAPF forces in the Dominican Republic. In soccer, Paraguay swamps the yanks 11 to nothing. In the more familiar game of basketball, the U.S. defeats a Brazilian Nicaraguan team, 83 to 27. The game at the Brazilian Battalion Camp is watched by the IAPF's commanding officer, Brazilian General Alvaro Bracca and his deputy Brigadier General Robert R. Lindville U.S. Army. The baseball game also goes to the North Americans, as Nicaragua is shut out by the lopsided score of 21 to nothing. On another field, the Brazilians revenge themselves against the U.S. forces in volleyball, whipping the yanks in two sets, 15-5 and 15-2. But here, it's a long home run good in any park for more U.S. team runs. The following day, trophies donated by the Brazilian government are presented by General Bracca to the team winners at the IAPF headquarters. The awards will provide memories of a welcome change from the routine policing and peacekeeping duties of the Inter-American Peace Force. In Trieste, Italy, on 8 May, at the officer's club of the Vittorio Emanuella Cossern, competitors are welcomed by General Nunny of Italy to the boxing matches of the Council Internationale des Sports Militaire, CISM. Lieutenant Colonel Joseph Haynes, U.S. Air Force, chief of the U.S. delegation, is seen with representatives of other countries. On the following day, delegates draw lots to determine their position in the competition. The lightweight drawing is followed by another drawing for featherweights. The preliminaries begin on 10 May. Flyweight Marbley, U.S. Army, defeats Yaragar of Turkey. All U.S. boxers wear white with blue stripes. The next bout sees Albert Johnson, U.S. Navy, against Jorge of Spain in the featherweight division. To qualify for entry, CISM contestants must be in active military service. The Trieste Palace of Sports sees Marine Corporal Art Redden, Decision Aukhaesim of Holland in the lightweight preliminaries. On 14 May, the finals are held. Featherweight Robinson of the Navy is seen again, this time matched with Song Eun of Korea. In this event, Robinson wins by a knockout in the third round. Victoria of Army boxes to a decision over Hangsock of Korea in the lightweight class. CISM's international sporting events seek to improve the sport. Army's James Wallington and Zamperi of Italy draw close attention as they clash in the light welter event. For the light heavyweight finals, Marine Corporal Redden returns against Barbiera of Italy and wins on a TKO. In the tournament's final match, U.S. Navy heavyweight Richard Pettigrew meets Piccanale of Italy and wins by a decision. Various dignitaries present medals to the winners of each division. U.S. contenders take four gold and two silver medals.


Welcome. It's Jenkins documentation office hours. This is the 6th of January 2023. Happy New Year. So items I've got on the agenda for today. Action items. Pipeline. Oops. Pipeline Docker. Let's get here. Pipeline Docker plugin possible deprecation. WMI windows agents deprecation. Archiving the website component on Jira. Interesting poll requests. And the poll request backlog. And the December newsletter. Any other topics you want to be sure we put on the list, Chris. We can talk about these are like that. What we have in terms of documentation. The ones for the project. Good. All right. So Google summer of code documentation. Yep. All right, good. Let's include that. We'll put that right at the top of the list. Okay. Great. Excellent. Anything else you want to add on the agenda. Oh, not much. Okay, then let's go ahead. So my way of action items. Kevin's got the action item to archive the docs mailing list sometime this month we hope it'll be done. That's those are the only that I'm aware of. Google summer of code documentation so what do you need to share Chris and let's talk more further. Okay, so we have got thinking about 10 project ideas so far and but only one of them is confirmed. So which means that nine of them needs working on by contributors for potential mentors. So we may need to communicate better with like potential mentors. Okay. Yep. And I think we're going to have a meeting soon. And that's going to be like the week or two. That should be a That's a next Wednesday or next Wednesday. On the next Thursday. Next Thursday we're going to have a meeting. And this is the Org admins or Org admins and mentors. And it depends like we should start inverting management to us to if we can visit. I think the next Thursday is one that's mostly for me or admins. They should be open to us because we got a few more holidays, which is good news. Good. All right. So the topics tell me more about the topics that we discussed there. That's, is that more about how to improve the project ideas to further refine them. Is it. Yeah, more about. Okay, so. Yeah, so we need to like you're using jmms term to crystallize the ideas. Go ahead. I know that therefore for many of the projects. It's good for a start but we do not have all the complete set of like details for the mentees to start. So may remain need to add more for a complete set of starting points. Good. All right, I like that. And so how will that be announced that'll be announced in getter and community. This course. Okay, good. I mean, I may need to coalesce with jmms first to see what he thinks. Because the proof of that's possible. And that makes sense that absolutely makes sense. Yeah, mainly it's an email to, to everyone in the advocacy and I wish as I jso you, Lisa, Jim and Anna and Bruno, because it's new. Yeah, I should include into you. Right. Very good. Okay. So the other topics that you wanted you wanted to highlight there are there. So do we need to should we spend some time here looking at those specifically I think if I recall correctly there were some projects that are documentation projects. Some of the project ideas are documentation specific. I think that we're going to spend a little time here talking about them looking at them and trying to improve the, the depth of the things we should. Yeah, if you have to tell me. Well, I think with with you and me here together and the two of us. It's probably much more effective if you do that than anything else I have on the agenda. Okay, okay. So how about let's look at those ideas, and then we'll, we'll decide which ones we should improve and how so if we look at Google Summer of Code in Jenkins. And GSOC 2023 project ideas list. So we certainly could talk more about the plugin installation manager tool improvements that's one that I've got a little involvement in. It's very specific to documentation. There was an autumn or go ahead. Yeah, yeah, go I go and talk about that first. I should. Sorry, sorry, which one. Because like, I think it's the one I have been assigned to work on like, I think that the alternative tools also involves documentation.  Yep, that one. This one. Oh, oh yes. Good. Okay, well so let's yeah so let's spend, let's spend more time on this one. That's a that's a good one to to talk through. Okay, yeah. Okay, so the background here is that we've got we today we generate the Jenkins.io site with at Ostrich using ASCII doc sources and YAML files and data sources and Ruby scripts and all sorts of cool things that ultimately result in a static site. And the challenge of course is that Ostrich is no longer being actively maintained. So, so the idea was okay should we consider Antora or Hugo as a tool that is actively being being maintained to replace it. And this is the one that that I know CloudBees documentation team is using it so we're more likely to get mentors and coaches from the CloudBees side if we were to choose Antora. Gavin Mogan likes Hugo, so he might be willing to coach on Hugo. He also suggested Gatsby as well but I'm thinking like I say, both Hugo and Gatsby they're not they're not designed for ASCII docs per se. So they may be a good idea but maybe extra work would be required if you want to use these tools. Good. All right. So, so whereas Antora I believe was actually created by the ASCII doc creator wasn't it so or a key voice in the ASCII doc community so yeah. Okay, maybe a better idea to use Antora because it's like it's more direct. Okay, well and and that Mitch matches with what this says so that's good most likely we will lean towards using Antora. Good. Okay, that's that's why I added. Okay, well so then. I think we may need to work a bit more on the background. Because like right now we don't really discuss much about Antora or Hugo because like you can't like with I mean this I said, I think we should set on one tool. Well so how about shall we show you and I let's take the time right now and let's do the writing and propose it. Okay, are you okay with that or would you rather. Yeah, we can do it. Yeah. Update. G soc. Let's see update. Doc site. Yeah, generator idea. Yeah. upstream slash master. Be sure that I'm in the right place which I am good okay so okay so here's a mention, and there we go. Yeah. Okay, so, would you be okay if we just like to embed. How should that be. Yeah, I'm going to leave that the way it is just because we don't like to embed. WW that breaks the resolution of things if I'm using. What do you call it if I'm using if I'm jarring the site locally. Okay, so the. Doc sources. Yeah, the ammo data files. Yeah, and Hamel. Yeah, that's that's okay. Stored in GitHub right. One of the drawbacks is that the technical documentation is not product version about that's absolutely true. Is not possible to you, that's correct. Only the latest can be viewed. This leads to unnecessary confusion. Yeah. Okay, and, and is a worse experience. Yeah, then many other side documentation sites. Like the get site. So I think I suspect others, the free BSD and others right there are many sites now that do versioned documentation. Yeah, most sites are like versioned. Except I was maybe. Okay. So, the preferred tool. How about if we just admit it, we think we should use Antora. Yes, and this is generated as a static site. Using awestruck. Yeah, uppercase. Oh, thank you. Yes. Yeah. Right. From ASCII doc sources, YAML data files and Hamel templates stored in GitHub. Okay. So the preferred tool to replace awestruck. Is Antora. Yeah, and let's just admit it. We, you and I have a have a strong enough opinion. And our opinion matters. And if I'm going to mentor it, I'm actually going to shamelessly promote something that I think I can go ask other people to help with. Okay. And Damian Deportal knows Antora and likes Antora a lot. And so do a number of other people that that could be good helpers. Okay, okay. Ostrich is Antora. Okay. The potential would be to build a working tool. Okay, working. Okay, I'm not hearing you. No, I didn't say anything. Oh, okay. I'm some other crosstalk. Okay, good. My colleague working in the background. Oh, got it. All right. Okay, so the potential GSOC project we do to build a working site generator. Yeah, that was weird wording. I didn't realize it until now. So a site generator to district to demonstrate. Yeah, right. So the existing site. Okay. And add the concept of versioned display. Am I saying, saying how, so for me just getting to the existing site will already be quite challenging. There's, there's an awful lot that the current site generator does. I think it is what we're waiting for it. Okay, so then, once the existing site is generating the existing or no. Once the existing site is generated with Antora. It should be the site should be reworked should be extended how about that. To add versioned versioned what what would you say versioned copies of the documented versioned specific. Yeah, documentation, right. Yeah. Okay. So we've got the quick start and the quick start. This one I think we can actually put it in is some ideas might be create quick start. So documentation. Quick start steps include. So build the current documentation site locally. Yeah. Familiarize yourself structure. Exactly. Yeah, actually let's say this way, become familiar with the current site, including so page types, and how they are generated. And this includes things like roadmap. Right is kind of an exotic one. Security, let's see, change logs roadmap user handbook. Yeah, developer guy developer handbook right. Yeah. The artwork page, which is a little different artwork. See what are some others. Oh security security advisories. Yeah. version specific to have content in tutorials. Because there is some of that right see the like, like what's the example. Like, like, oh, improve a plugin. So now page types in there probably more but all right so then familiar then. Page formatting or page content. Sources like. Hamel. Yep. The most important is ASCII doc. Yeah, there's also a Hamel. And I think we may have. So, and, and this is another web components, because that just barely arrived web components. Okay, so, so familiarization already. Are there other things you'd say, hey, oh, using make files right. Yeah. So the build process. Yep. Make file. Docker containers. Yeah. Inside the Docker containers. Yeah, because that's how I believe that's how Ostrich is doing it. And, and so we ought to put Ruby in there. Hamel slash Ruby. Okay. Docker containers. We just had some additions. Syntax and spelling checks. Okay. So then maybe as another part of quick start might be fix. One fix several good first issues. And we should probably include a hyperlink there to the good first issues. It's in the, it's below. Oh, is it? Oh, we've already got it. Oh, okay. See this one goes to this one goes to get first issues. Oh, it does. Okay, it's got. All right. Very good. Yeah. Excellent. We'll just steal that. Okay. Good. Okay. Okay. Now, after they've fixed several of those that gives them and they've built the site. Now it's that's that's gives them familiarity with the current tool set. Now, how do we get them familiarity with with, and maybe this is where we should put. Explorer and Torah. Yeah, I just did it. Okay. As a start, I downloaded it. I started it. Oh, good. And it was kind of cool is to use and they did have this thing called playbook. You can use to as a temp like as a conflict file. It's quite easy to set up everything from there. Good. Okay. All right, so Explorer and Torah. Should, should they as part of their quick start. Should they review. Version. Specific documentation techniques. So we have used by and used by and Torah sites. Yep. Give them examples. They like CloudBees. Oh, good idea. Okay. Yeah. So, for example, CloudBees documentation site. Good. Okay. Now I haven't looked at the CloudBees site. So let me see if I can grab a quick link. I haven't looked at it recently cloudbies.com. So let's see capabilities. We want to see developers. Oh, here we go. There we go. Okay, so let's see. Well, let's see. I think those this may just be stories what I was telling people. I was looking more for detailed, detailed documentation about continuous integration. Let's try. Okay. Folders plus. Controlers. This is an awful lot of marketing material. That's lovely. But now let's find. Okay. So, well, maybe this will help me and maybe it'll be versioned. Oh, yes. Here we go. Notice. Here we are. Okay. Wow. This, this gives me the folders plus plugin in this one. And if I want to go back. It gave me an older version. Okay. Yes. So this is a good choice. Thank you, Chris. Excellent pointer. All right. So let's embed that into the, into the text we're creating here. Okay. And since we'll probably want more than one, I'm going to make that. CloudBees documentation site. And I personally really like, I don't know if it's generated with Antora or not, but I really like get SCM. I read it a lot and it actually has. A versioned concept. Let's find this, the documentation, the reference manual. Look at get config. And notice here in the top left hand corner there are all the versions. So, again, it's this one. Okay, so. Get config reference manual. Any other sites like that you think that we should point people to. I think because like a lot of sites do that, like. Yeah, we could try. Let's see, is there something on maybe a Ruby site? Yeah, it's fine. Maybe it's just Ruby. Yeah, so let's go Ruby. Yeah, they do documentation. Because they've certainly got a long history and I would bet Python may as well. Let's use pythons because like I saw with this one is more rudimentary. So I definitely got version control. Okay, so Python documentation. And here we go docs Python. Oh, yes, this very much has version. Okay, good. So let's use that as another example. But this one is generated with, if you have a tool used to use for all these things. Python is definitely with things swings. Oh, we're choosing. Okay, and that's. Yeah, that. And I don't care which tool it's using. I think it's still a good things. Sphinx is the generator. The notion of how do you do this navigation. And I don't know how get does theirs. I'm sure it's probably not Antora. But I think each of these is, okay, this is how they navigate. And how, how would, and notice I like, again, there's a highlight up here at the top that says, you're reading old material to this application. So, so, and that's, that's a good thing, right. They should understand it helps them as they're preparing a proposal but hey this is how I think it should be based on these other projects that do the same thing. Okay, so get SCM we did Python three Python we did. Yeah, any others that come to your mind that we should include as, as things to study. We can use any more jobs like I think. Oh, you say Java. Yeah, John. Yeah, so let's that's a good one let's look at. I'm not sure that they're a great example but let's try it let's see Java. So let's see Java, Java, well let's look at Java doc for Java 11. Right, maybe we can find so here's the JDK 11 documentation. So this may not be what we want. I mean, it's, it's certainly an example of of version specific and it provides another for me. I'm not as thrilled with that one but I think maybe what we do is we include it as a here's an example. Another idea to see how somebody else did it. Let's refer the Sphinx technique or the cloud bees technique where it embeds it right into the, it makes it more obvious in the page. Yeah, I think maybe pytorch as it to which one you said pytorch. Yep. Okay, so let's find that pytorch. Okay, so here docs. Right, there's another okay good very good example. So this has index on the left and direct access to which version you want to see. Nice. Okay, good. Very good. Okay, any others that you'd recommend. I'm given how nice those are I'm taking off the Oracle one. But just, it just doesn't fit with how nice, how nice I think the others look let's let's keep what I like as really elegant examples. Okay. Okay, like spring boot docs but they're not like really doing the versioned. Okay, it's really like spring boot not a good idea. So Java later. I don't see anything here that tells me anything about. The version 3.0. So if you look at the box, box, okay, which box, the one way bill. Yeah, you see that. Oh, it shows here, right. It's like, it doesn't give you a choice to, to select. Well, and maybe I just went to the wrong place. No, that's not terribly helpful. Is it. No. Okay. So they've got it, but they don't have a really terribly comfortable navigation path to it. Right. Okay. Yeah, we can try out. Yeah, one thing we can try is like, it's kind of like, not sure if we should use it. But I think for the docs of TensorFlow. Let's see when let's okay, TensorFlow talks. Okay, so here. All right, so they've got a version number that they're showing there. Oh, and this is a different way that they're navigating versions. So if I want to travel through their versions. Yeah. Okay, that's I like that. That's a good one. So let's, let's put that one in there. Thank you. Maybe more five. Yep. Yeah, and, and I think at least this gives the candidate a chance to think about several different ways that people are doing it they don't, they don't have to get stuck on Oh, there's only one way to do this. Yeah, it's no there are a lot of different ideas, and they've got to, they'll need to bring their ideas to how should it be done. Yeah. Okay, anything else we think so as they're getting started. Build the current familiarize yourself with the current or go ahead. I wanted to change earlier like for like the skills to study and improve section can we can we change it ask it dogs, the two uppercase. Oh, yes, absolutely. Yeah, we should do it that way because it's the purpose for it. Good. Okay. Well and should we have. Are there more things that we should include in this like the YAML for YAML data files to drive. Web page templates. Okay. Yeah. And then probably Hamel files, Hamel templates. Hamel, Hamel templates, YAML data files. And maybe those are just subsets of static website tooling. Yeah, I think so. Yep. Okay. Yeah. No. It doesn't go to the new feature. Sorry, say that again Chris I missed it. We have a new section called new feature. So maybe we can use it. Oh, yes, yes, good, right. Absolutely. Yeah, because for the new feature we can have like an improvement on the current layout. Good. Good. I like that. My editor is has decided recently that it's going to do highlighting of characters a little differently. There we go. Okay, so. All right, tell me again what were the what were the things there that should be said. We can include like new layout for the web pages. Oh yes, right, right. Improved layout of the existing page of existing site and pages. Right. Oh, we should come in now. Yeah, that one should come in. Oh, I was just going to take it out like that. Yeah, cool. Okay. I mean, I think.  There's, there's a piece of this which, which we need to be sure that they deliver iteratively and incrementally. Yeah. So, so maybe one of the other things is as an expected deliverable it is. See so do I dare change it. Yeah, I do. So let's make it. iterative and incremental improvements to the site. I don't know about the project. If they're doing it as big bang at the end. I don't, I think that will, that will lead to all sorts of problems. Yeah, we better not do that. But the thing I'm kind of worried about is like how to, how to introduce a changes. As we go. Because we need to change it. The tool. To be as fast. Or should we like start a new branch. And we're going to that one is that. So, so you mean in terms of chain, making the transition from Ostrich to Antora. Yeah. Wouldn't we wouldn't we want them to set as the first objective. Just to do this thing, right. Get equivalent, but using equivalent to the existing one, but using Antora. Oh, okay. So what you mean. Yeah. That was that was at least my thought is make the transition from Ostrich to Antora. And find a way to do it. So that we get the current site. Yeah, that was that even, and if the project only achieved that, it would already be a dramatic improvement. I know. Yeah, it would be. Because then, then I don't, we don't have to worry about, oh, Ostrich doesn't being cared for anymore. How do we deal with it? Okay. Sounds good. So that's, that's okay for you phrase that way. Yep. And maybe actually maybe what we. Put this one first, even. The iterative and incremental is the way we do it. Okay. And, and fully automated CI is another piece of the way we do it. But we want to use Antora to do it instead of Ostrich. Yeah. Now, is there a way we could do Antora for a subset. I think about that too. Because it might not be the best way to do it. Right. We cannot segment the project and might introduce some problems. So if, if, do you think this would be, are we at a point where we should submit this already as a pull request where, or at least build the site to see how this page works now that we've done it. Yeah, we should do that. So let me make the site. Okay, so the site's rated of you. I'm going to bring it up in a web browser and I'll drag the web browser in in just a minute. Okay. So here's the web browser. And let's look at. We have a number of code 2023 project ideas. Whoops. I picked the wrong thing to get there. Oh yes I need to go here. Google summer of code in Jenkins. And this one has the project ideas list. Okay. And here we should find building Jenkins.io with alternative tools. Let's see if the layout came out correct. Nope. So I didn't get it right. So I need to do the nested list thing. I used the wrong syntax just a minute. Okay. Oh yeah. So in this case, it's that it's probably two. Instead of spaces, it's double asterisk. Let's try that. Yeah. Yes. Okay, that's it. Good. All right, back to where we were. So the easy thing here is then. And then this one. Help if I typed correctly. Okay, checking now if I got it right. So the indentation was. Page types. And then here's the list of page types, page content types, build process, and then fix several good first issues top level. Okay, I think that got it. Let's go read it and see. Okay. Where's my page. That's not the page we wanted. Sorry, I'll have to edit that out. Here we go. This is the page I wanted. Yeah. There we go. Okay. So that layout looks okay. Yep. Good. All right. Any other changes we need need before I submit it as a pull request. It looks really good. All right, let's do this. That's great. Excellent. So we're going to update. The project idea with. Update and site generator idea. With more details. Okay. So we've got one ahead. Let's do this. Update site generator idea. Details. So Chris, you are a GSOC or Gadmin, this has the nicety that you can go in and approve it. Later today. Yeah, yeah, you can do it whenever it's comfortable for you. Okay. I'm going to say that as soon as somebody's approved it, it's going to auto merge. Okay. Because you and I worked it together. And so once it gets its first approval. And has passed CI, it will just automatically merge. And whenever you do that approval, or if John Mark approves it or, or Bruno, whoever approves it is fine. It just, once it's approved, it gets merged. Okay. Great. Thank you. All right. So back to our agenda topics. I think we've covered the most valuable thing that I could have wanted to do today. That's great. Okay. Anything else you want to see that we do on Google summer of code before we end our session. Today. That's a more important thing. We still need to. To work on the other ones. Right. Yeah. Great. All right. Well, so we've got, we've got that first idea. Just give you a brief overview. Maybe we could take a few minutes on one or two of these others because I think you may be able to help me on some of the others. Sure. These deprecation topics. What's happened is there's an. Plug in deprecation process in the life cycle of Jenkins plugins. And that deprecation process. Shows a warning dialogue to users. To tell them that, hey, this plugin you're using is deprecated. Well, one of the plugins you're using is deprecated. Well, one of the plugins that was recently deprecated was this WMI Windows agents plugin. And it was deprecated for very good reasons. The reasons are described here in this issue tracker. Why is it deprecated? What's that mean? What's the impact, et cetera. But the crucial thing here is that. Jesse Glick. A core maintainer offered a really good idea of a way to. Make it so we don't have to do. Quite as much work to do this. And so there's a core change that's been proposed here. To make it so we do much less work. With. In order to implement this. Finalize this deprecation and make it. Good for our users. So that's, that's the info piece here. Now the next piece. Is an entirely different topic. And the next piece. That's the info piece here. Now the next piece. Is an entirely different topic. And this was the one if you could stand to spend five or 10 minutes with me, we'll, we'll try to make progress together on it. There's, there's a component in Jira. Called website. That's the place we tracked issues until about two years ago. And so what Kevin's done is he's gone through the work of closing out.  And here is that list. And what he, what he did, he closed out a bunch of them, but there are a few that are not yet closed out here in this very bottom section. And I wanted to just you and I. Take some time to go through those together. And decide if we want to make a recommendation to Kevin on what should be done with those. Okay. So let's read them. And we're just going to read them. One at a time and. Make our decision. So this one is. System administration capabilities using groovy. And the suggestion was. Hey, there's a lot of capability in the Jenkins script console for administrative use of groovy. And this could be a dedicated section. I think this should just be. Transported as an issue to Jenkins. It's a. Yes, we want this. I don't know when we'll get it, but I think it would be a good thing to have. Okay. Good. So we're just going to say. Move to get hub. Okay. The other one is now let's take the next one is. 734. Create a C or C plus plus tutorial similar to Maven. Python and no JS. Yep. And again, I think. I think that's a good thing. There's still plenty of people who code and C and C plus plus rust is not used by everybody. Yeah. So for me, I'd say move it to get hub as well. Yep. Good. Okay. Now updates to the solutions pages navigation. This one. Improve the look and feel of the solutions page. And. There's the navigation page. You get it from you. I think you get to it when you. Go to. Solution pages. Yeah. So it is actually now used here. But. Well, what is it asking for? It is negative and accessible now. Yeah. I think this one we call done. I'm going to say this is done. It asks for some additional things add Kubernetes, but that's an entirely different story. This one is done. Okay. All right. So that one is done. Thanks for your patience. We will. Just keep going through this. Broken links throughout the Jenkins site. These are pages of broken links that were generated by someone. By a contributor two years ago. And for me, I think this one, we should just. Close it. And say that we're going to. Find broken links a different way. Okay. So I'm going to, you're okay with that idea. Yep. As for broken links. In a different. And track them. Using. Get hub issues. Okay. Done. So we call it because this one is done. I just submitted. Fact here, let's see if it's done. If it's. If it's finished the, the pull request. Oops. Where's my pull request link? I didn't put it in there. Sorry, Chris. I need to fix a mistake I made. Okay. I go do this now. The mistake is. GitHub. Here. Pull request. Broken artwork credit links. Fix this mistake too. And I am going to boldly merge that myself. Because that doesn't seem very risky. Okay. Merge without waiting squash and merge. And that means. This issue is closed. And all the issues in the broken links. Epic are closed. That looks very tidy. Yeah. Okay. So. Done. It's not that it's ever all the way done because we continue to have broken links that pop up. Yeah. Next one. So we have five minutes left. Okay. So we continue to have broken links that pop up. Yeah. Next one. So we have five minutes left. Okay. Continuing to do this as we work through it. All right. Oh, that one. That one. I already image. Oh, that one's done. Okay. Good. Like in page sorting does not work. Like in search updated. I don't understand. How did he do sort equals. I don't even understand what, okay. So sort equals updated. How is there an updated on this page somewhere? Not sure. Recently updated is here. Oh, oh, maybe it's over here. Okay. Sort by state though. Right. But there is no way this is sorted by release date because look at this. SCM API three weeks ago. Is after Mailer released six months ago. It isn't working. Okay. So it's, this is real, but it's not working. Okay. Sort by relevance. Sort by most installed. It looks like they're all sorting by most installed. Yeah. I don't know. I don't know. Because title sort didn't, doesn't do anything. Now I don't know how did this sort thing. Appear. Oh, it appeared like this. Okay. Okay. So what this, what, so what we need to do with this one then is it needs to be transported. Copy to or move. To get hub. Plugins. Jenkins. Yeah. Because this is not the. This is not Jenkins.io docs. Site. Okay. So. Move to and let's just call it. Make it so it's less likely to make a mistake there. Okay. Okay. Turn security page into main tab. Oops. Main tab menu item. Oh, yeah. Okay. That's. That's a valid one that I think belongs in GitHub. Okay. Community. Okay. So 772. Okay. This one. Is. This one is nothing we're going to do about. Won't do this one is. Tracked in other locations. What this is really asking is, Hey, please. Please give us some way of filtering. The content of this community reported issues. Text. Okay. So that people, when they submit bogus bug reports, like 69 or 420 or whatever. They, they would not appear here. Oh, I see. I can show you an example of a live example is even better. We look at this. So download. What happened was. People. A user clicked. One of these two cloud icons, either this one, I had to roll back or this one I experienced notable issues. And when they did. They typed a bogus number in here. So instead of typing 69955, which is a valid issue. Yeah. They typed. 1, 2, or 3. Oh, or 2, 9, 9, right? 2, 9, 9 is not. An interesting issue in, in jank in that version of Jackens. Okay. But the problem is there's a whole curation problem there of. Three is in fact a valid. GitHub issue. It's not a valid Jenkins issue. It's just not a valid Jenkins issue here. It means someone has to review these and filter them and that. That is. Well, the core maintainers haven't been willing to do that yet. And I'm one of those core maintainers who's unwilling. Okay. Chris, thank you for your patience with this. So I'm going to close. I'm going to list that one as closed. Okay. Thank you for this. Let's call an end for our session today. Much appreciated. You're welcome. We'll see you. Yep.


We've had a very late night and I see a lot of people that we're going to be here that weren't because they're completely out of it and We could not wake them up this morning for anything I'm Cyrus Bacari. I'm the chief technology officer of virus MD corporation We're in Dallas, Texas, and you may know us for our software lately we're doing antivirus applications for the pocket PC and wireless phones and and Before we get started, I just wanted to First of all, thank Jennifer Granick for this disclaimer. Is Jennifer here right now? No She suggested this one and that's remember you need permission to alter someone else's system even if you're trying to fix it and So basically what that's saying is don't try this at home because they will get you arrested and And a public service announcement for those of you that can't wait a whole nother year for death con There is going to be a security conference hacking conference in Dallas, Texas this winter you can visit it on the web at Dallas con calm and So far the sponsors are several different groups including soldier X com hack 3r Check some org Black code, which is a nice group security news portal and world of hell and Lately security writer's guild is going to be sponsoring it also. So if you have a hacking group and You want to Sponsor or speak of this conference. You can let me know For those of you that want the full version of this talk in detail. You can download it on the web It's at virus MD calm slash Def con dot html and you can grab it as a Word document or if you want a text file, you can just email me Through virus MD calm Now who can recognize this virus? Raise your hand Melissa close That's right. That's the Anacorna cova virus. So as you can see it's quite a deadly virus and And a lot of people that I talked to said it was worth opening this virus even though they knew it was a virus just to see her picture Now just as an overview of our talk What we're going to present today is that the unchecked proliferation of information network such as the internet Leave society vulnerable to collapse And we're going to show how viruses actually counter this vulnerability by stabilizing and strengthening global networks So in other words, we're going to show how virus writers can save the world now Who here has ever written a virus raise your hand? You don't have to admit to it if you don't want to who here has ever been infected with a virus raise your hand Probably most of you have Well, the problem is that the internet has become a single complex organism much like the human body and It's no longer to no longer sufficient to immunize Individual cells in that body for example putting antivirus scanners on individual computers is missing the whole picture and Basically, we need some way to immunize the entire body of the internet at once And we've seen that current antivirus solutions don't work Because one virus the I love you virus did an estimated 10 to 15 billion dollars of damage That's just from one piece of code So our current solutions fail Well, what we're going to show today is we're going to use examples from medicine to formulate a computer virus vaccine we're actually going to write a virus that's going to strengthen the entire internet and We're going to propose an attenuated computer virus attenuated means a weakened So basically you cut off part of the payload or some of the vectors and you have a weakened pathogen and We're going to draw on examples from both history and medicine to show that Good computer viruses are not only possible, but that they're inevitable if we want to prevent the collapse of civilization well, first let's start with some historical examples and those of you who are history majors and actually most of you are probably better at me than this but Looking back in the Middle Ages. We know that the black plague Set European civilization back the equivalent of a thousand years And we're going to show that in a second a more recent virus smallpox Single-handedly destroyed the Native American civilization. So viruses do cause the collapse of civilization Now this next slide is a graph showing the population of Europe in the Middle Ages and on the vertical axis you can see the units are in millions of persons and On the horizontal axis is time and if you look here in the center, you can see that Right around the 14th century the population of Europe was abruptly nearly cut in half So essentially one out of every two people dropped dead all throughout Europe and this was all from a single pathogen It took several years for the population to recover, but even longer for civilization to recover Because this virus caused famine and unemployment and widespread civil war What happened is the rich nobles severely suppress the poor people and at the whole process set civilization back about a thousand years There's a more recent biological virus that destroyed a civilization and that's smallpox and Smallpox was brought over by the Europeans when they invaded or when they explored the New World Now the problem is that the Native Americans had no immunity to smallpox the Europeans had been building up immunity for years but when the When they brought it over the natives had no resistance, so it basically killed all of them and 95% of the population of Central America and Mexico Was wiped out literally in a few years and that's that's almost overnight in the terms of global timescale and 50% of North America was wiped out So the Europeans basically walked into an empty continent. There were no warriors left to defend this continent just a handful That was the end of their civilization Now none of you have ever seen a case of this in your lives. This is a picture of smallpox and This is the caused by the virus now. This has actually been eradicated from the earth and the reason you haven't seen this is because we came up with a good vaccine to cure it and We're gonna show the why this is important with our computer virus vaccine later on Now when smallpox vaccine first came out it was extremely dangerous and a lot of people that took the vaccine died So people were violently opposed to any concept of a vaccine but with time the vaccine was improved and By 1977 the World Health Organization announced that smallpox was cured. There was no more smallpox left in the world The only sample is in a very tight security government research station And they keep it there under observation and probably a few other countries have a sample as well so Getting back to our computer virus. Why do we need a vaccine? Well, we've seen that any attempts at Antivirus Program so far have been Limited and we saw that with the I love you virus which failed to prevent a global infection that brought the internet to its knees There's also been attempts at digital immune systems for example IBM corporation came up with a digital immune system where they Were able to pick up samples of viruses in the wild and automatically extract signatures and then send that Patch back out to their subscribers So this is kind of an encapsulated digital immune system But it's not really a true vaccine for the for the entire internet body Because they're not really using a virus. They're using just purified code and so what we've shown is from history and medicine that vaccines are very necessary and they're Inevitable if we want to prevent global catastrophe. We need some kind of holistic solution well, unfortunately, there's problems to any kind of idea of a vaccine and number one among that is the antivirus community The antivirus or AV community hates virus writers. They really really hate you guys and You can see that by going on newsgroups such as alt.com.virus and you can see the arguments go back and forth And And it's kind of funny to read it sometimes because you see the two sides arguing But you realize from an objective point that they're really not that far apart yet They're so they're so violently opposed to each other Now we can we can kind of the AV corporations arguments by looking at medicine and for them to say there's no such thing as a good virus is ridiculous For example, every day doctors inject kids with daily viruses when I give vaccines The polio virus vaccine for example is a real virus. It's it's live. It's just attenuated so you're getting the real virus and This falls under a utilitarian model Utilitarianism says that you should do the greatest good for the greatest number of people for those of you that study ethics and This is the model that society allows the government to do this to us under well, who will release this global vaccine and Most importantly, don't try it yourself Because if you do it's it's highly illegal right now Spreading live viral viral and you in jail Probably as far as I can see the government right now would be the only possible solution for that and For one thing they they can do what they want and get away with it. There's not much you can do you can't really sue the government Another benefit is they will indemnify you from harm Remember the polio virus that all of you get when you're young. That's a real virus now if you Say your brother when you're young gets the polio virus vaccine And you don't get the vaccine for some reason you can actually catch live polio from your brother That's called vaccine induced polio and it can kill you or paralyze you Now what happens in that case is the government will actually pay damages to your parents for the damage you suffered That's little constellation obviously, but that's how the the government works And that falls under a paternalistic model And paternalism means being fatherly in other words Society allows the government to do what it wants because we think that it knows best And as far as I can see you would this virus virus vaccine We're talking about would probably be released by a global epidemiology body like the world health organization They would have to create a particular branch made up of programmers Because you need somebody that knows how to track vaccines around the world Well, finally the talking about the computer virus itself what characteristics does it need to have For one thing the vaccine should be open source And the main reason for this is quality control Because we're releasing this vaccine globally. We know that open source models Give a much higher level of quality control and debugging And number two it should be international We can't have individual governments releasing vaccines for an obvious reason For example, suppose China released a vaccine, but they were the only ones who had immunity to that virus That would be viewed as an act of war by all the other all the other countries So in order to prevent that situation, it would have to be released internationally Third the virus should be attenuated, which basically means castrated You should take off part of its payload or reduce its number of vectors The goal what you're trying to do is create a virus that will confer immunity without severe damage And finally the vaccine should be live. In other words, you need real replicating code The Just to extract a virus signature like virus scanners do right now It's we know that's not as good Think back to the polio virus vaccine. That's why doctors use the real live virus in our bodies Okay. Now, here's your test for the day You guys go to school. So You thought you were gonna be free of test this summer, but you're not Who can tell me who said this quote if you if you can guess it raise your hand Who's that Fred Cohen, okay, we have a guess for Fred Cohen. Who agrees with that? Actually, that's incorrect Anyone else pardon McAfee Good guess you guys are going to be surprised when you hear the answer That's that's not correct Let me read it. It says that beneficial viruses are a simplest solution. That's always wrong The virus is not bad or good Based on its payload Viral propagation methods are inherently bad And giving them beneficial payloads doesn't help Is that bill gates close you're very close This was bruce schneyer. Actually. He said this in a talk in September 2000 He said that viral propagation methods are inherently bad So we all know bruce and we love him. He's a regular here at defcon But you may want to ask him about this one Now who knows which virus this is You guys got to know this Very good the jennifer lopez virus once again using the power of just her behind This virus infected millions of computers people were tempted to open the uh, I love you virus to get a glimpse of this Sorry the jennifer lopez virus So just winding down here they're they're in 1997 veselin bonchev and Wrote a famous paper about the 12 reasons why there can never be a good virus And has anyone read that paper raise your hand a couple of you. Okay. I see there's some hardcore virus people out here and uh Now this was a very famous paper and for a couple years this was the gold standard But then in april 1999 Member of the ultimate chaos virus group came along and utterly destroyed these arguments And that author was midnight and if you read his paper, it's quite eloquent I'm not going to go into all his arguments right now But what we're going to do is present arguments from a different angle saying why you can have a good virus And I just want to go through these 12 points very quickly Uh, well number one the antivirus companies argue that You can't have a good virus because it takes away your control And you you just feel helpless But actually we know that That's a good thing and sometimes for example There's certain vaccines doctors give where It confers what's called herd immunity like a herd of sheep They know if they could only immunize 50 of kids in a class Those 50 percent will infect their classmates either by sneezing on them or by smearing snot all over them Or by not washing their hands after they wipe themselves And this actually is a good thing because they pass the immunity on to their friends That's called herd immunity so that lack of control can be good Number two is recognition difficulty and this argument is that Well, our scanners won't be able to tell your good virus from a bad one But that's what we want. We want a immune response from the world antivirus software That's how it's going to work Number three is resource wasting and This argument says that Computer viruses waste cpu and memory. They're just a waste of time and money But actually that can be a good thing For example, how many of you have had a flu shot? I'm sure most of you have a flu shot at some point What happens after you get a flu shot? How do you feel the next day? You feel sick A lot of times you'll get a sore throat or a fever And the reason is the when you fight this weekend attenuated flu vaccine Your body shuts down critical pathways and strengthens others And so basically it's wasting your resources But in the end you end up being immune to influenza, which is a good thing So that takes care of that argument Next number four is bug containment And the avs argue that badly written viruses spread software bugs But we know that Software bugs are ubiquitous. They're everywhere. Anyway, that's not really a big issue And this is just one more argument for an open source model Next is compatibility problems And this is the The avs argue that well your virus vaccine will set off all our checks on monitors and integrity checkers But again, we want that we want to do that in an attenuated fashion before it becomes a real problem Next is effectiveness And the argument here is that you should use some kind of emulator or simulator You shouldn't infect the total system. You should stop it at a firewall or a sandbox But again, we know from examples from medicine like the polio vaccine Really getting the full replicating code in your system is the best way to really test it and strengthen it Just continuing the last six Unauthorized data modification states that it's illegal to modify someone else's attack someone else's system But again, this just argues for It needs to be done probably by a central agency We all we all let doctors inject us with deadly vaccines when we get vaccinations anyway We permit that in fact we embrace it So a society will embrace this with time Next is copyright and ownership problems And this is not a big argument. It says that basically viruses can void copyright contracts But again, the government could indemnify you from this and say that if you're infected with our vaccine Then that's not going to affect your copyright at all Next is possible misuse and this argument says that It argues that while virus writers will use our good vaccine to spread viruses But this is kind of silly because a virus writer could Write a much better virus himself or herself. He doesn't want to use a weakened or attenuated vector Next is responsibility And this states that we should not give any excuse to these quote juvenile virus writers We don't want them to you know if we do this and they're going to say well I was just writing a virus to save the world. I was just trying to help people But those of you who heard sarah gordon talk at defcon here last year She spoke on the ethics of virus writers and she talked about a cycle Where virus writers start out at a low ethical cycle sometimes and progress through to higher levels of ethics But that there's always a continuing cycle There will always be people releasing viruses without the need for an excuse So I think this whole argument is kind of irrelevant The last two are closely related And they They talk about negative common meeting and trust problems And what this says is that people will never trust the idea of a virus The word virus is just too nasty. It's too evil. We're never going to accept it in society but I think if we uh We look back to uh Our medical vaccines. We see that in in time people will embrace it Now one of my colleagues who heard me practicing this talk Suggested that well, why don't you just change your virus learn from the fbi and change the name of your virus to dcs 1000 or something like they did with carnivore and uh And uh, you guys watch the whole fbi carnivore carnivore issue They've changed the name to dcs 1000 as far as I know in a public relations move But that didn't help them too much in conclusion We've shown that viruses are needed to stabilize global networks and to prevent the collapse of civilization And we proposed an open source international attenuated computer virus vaccine And we've shown that it's not only possible, but that it's inevitable if we want to prevent the collapse of society And for those of you that are new to defcon Or who are new to hacking or security? Uh, let me make a shameless plug for my book. It's called Windows internet security protecting your critical data And it's going to be published by apprentice hall this fall And it's basically a very gentle introduction to hacking and If you've never done a buffer overflow or you don't understand what such things are I recommend you get this book before jumping into hacking exposed or something more advanced and uh I was asked to announce that coming up after this talk We have a talk by little elam. I hope i'm pronouncing that right on renegade wireless networks And then after that in this room, there's going to be a talk by the famous robert graham the chief technology officer of Uh network ice he was scheduled to speak yesterday So if anyone missed came to that talk and was disappointed Stick around for the talk In an hour and that's going to be really good And what i'm going to do now is open the floor up to questions Yes, we have a question back here You said Okay, we have a question saying how do we attenuate the virus, you know lowering the number of vectors and things like that and uh Basically, this is going to be up to a lot smarter people such as yourselves For example, think back to the melissa virus. Those of you who studied melissa know that it had A certain number of vectors like it infected the first 50 people on your outlook contact list But once you got it, you have your immune to it it conferred immunity. It doesn't reinfect you So in a way it had kind of a vaccinating immunizing property to it If you wanted to create a vaccine you might try Reducing the number of vectors making it two or three for example In that way it's or even give a time delay Saying that it couldn't spread that fast maybe one email every Hour every six hours That way you wouldn't shut down the whole internet within a couple days You'd still get the immunity, but nobody would notice it would just be a minor Infection did that answer your question? Okay, yes question here could you So what's the good virus going to do is it going to provide some immunity Or is it going to just induce people to upgrade their antivirus software? Well, thanks. I think you've answered my question for me. It's uh, probably the most important effect I can see right off the bat is it'll raise awareness And that in itself confers a lot of immunity because I mean if you ask somebody off the street They probably have never updated their antivirus software Ever, you know, since they put their computer up and that may be three four years out of date We're talking about normal people off the street and most of us I mean Probably a lot of us don't even update it every two weeks or every month or so So in one way it can raise awareness, but we're hoping it'll have a lot more A lot more impact that we can't even foresee So how's that going to stop another global killer like I love you? That's a that's a another excellent question. And uh The the only thing I can foresee is examples from medicine. What what we do in uh What the doctors do in medicine is They research what viruses are coming from asia or taiwan in the summer months They create a vaccine. They quickly synthesize Big vat folds of it and they distribute that by the time the virus makes it over from Asia They've already got these samples ready. Everyone's already immunized in the united states Now we'd have to work much faster Obviously in computers and maybe a system like ibm's would help in that situation where it could be done automatically In the wild But I feel personally that it's going to be done by people who Who actually are fanatics about viruses. They scour the news groups and they know what's up and coming There's always going to be some that slip through the cracks Just as in medicine Okay Question right here. Oh, I'm sorry. You were first Okay Okay, the question is uh We proposed that the virus be released by the government Um, I don't know that that's the best answer, but I think that's probably the only answer That's the paternalistic model Pardon Will we trust the government? Okay. So there's two questions One is why would we think the government would help us because they're spending money building up their military and things like that Uh, to be honest, I don't know that the government in its present state Would would be able to do that and again, I think would have to be a world body I think we're talking about the future when Uh, we'll have a more world-encompassing government And that's one of the things I really believe in is that in the future we'll have a more world embracing government We won't have these petty, uh Power hungry individual governments that don't really Care as much and your question again was Okay, the quit Okay, the question is how can we trust the government to do the right thing How to do it quickly enough that's a that the reason that's a good question Is because if any of you work for the government or have dealt with the government It's a huge bureaucracy and basically we're talking about Years and decades before things I'll get your question next before things, uh get done and I don't have a good answer to that but I can say that with groups like the world health organization where they Those groups are actually much better if they had the money and resources For the resources they have they do a really good job. For example, eradicating smallpox Now that's a government organization, but that's a really good example of one. So it may be possible, but like you said It's it's hard to trust the government and I think open source will help a lot if I mean That's one thing we can lobby for is for open source you and then a question over here Is Okay, the question is can I explain why replication or The actual The viral lifecycle that the thing that bruce schnire said is always bad How can that possibly be good? As opposed to just a controlled environment where For example administrators update their scanning software Okay, it kind of happens automatically and Uh I'm not sure I can justify that except through the analogy again. I don't have a working model That's what we're going to be working on in the next year. Hopefully we'll have something by next year And if anyone here is a really good coder, please talk to me because we're going to need a lot of help building this I think we had a question Yes As a vector Excellent I hadn't even thought of that and the statement was that you can look at it from a genetic engineering perspective and in genetic engineering You often use viruses as vectors Uh, I can tell you're a molecular biologist. Is that physicist? Okay close enough But uh, that's that's a good way to put it. I'm just teasing you Uh, but you're probably in a better industry than the molecular biologists right now because those guys are having trouble getting jobs We'll do one back here and then we'll come up to you I'm not worthy. We have sarah gordon here in the audience Okay, well the the correction was from the legendary sarah gordon who I'm actually quite humbled is actually here, uh in this talk and the correction she made was that The avi community doesn't uh necessarily hate virus writers and for me to make that statement was a stereotype and I apologize Uh, so is that acceptable? Thank you. Thank you. I'm sorry Uh, we have a one here and then sorry. I'm missing you. Let's let's do yours and then Is And you know who wrote that Okay, most of you probably do uh, the question was that uh, and The question was that there was recently a virus that went through and fixed the bind vulnerability Basically, it was a worm That did kind of exactly what we're talking about here The only flaw with that is that it left a back door In all the systems that infected and it was released in the department of defense And I believe the person who wrote that has just started their jail term Unfortunately, I believe that was written by max vision who is quite famous in this circle The irony of that is in the future the Government will probably be coming to him for help on how to write this vaccine Uh, because he's he actually did it. He wrote a worm that went through and immediately patched this vulnerability Which was a huge vulnerability for the department of defense The only problem is he did it without permission And what what the heck by the way he put in a back door On every system of the department of defense, so he had the right idea But I hope you all go about it in a way that doesn't get you arrested. We had a question here and back Okay, the uh The question is if this is going to be open source, so what's going to stop someone from taking what we've got and putting in a uh, nasty payload and again, um Excellent question. I may be wrong here, but but I From what from the virus writers that I know they to me a lot of them are real geniuses And they can often go beyond what society even Or even the best programmers That I know can write so they I think they can personally do even better Okay, uh, the question is uh, what's to keep? Uh script kitties from downloading this code compiling it And then releasing it uh before it's available And I don't have an answer to that yet, but hopefully by next year I will question here and then We're we're about to wrap up. So let's take a question here Okay, and the I'll get his question and yours the question is We have a What's the logic of having a virus that just come or confers immunity to one organism when antivirus Uh, you can do it automatically and much more efficiently. Is that your question and you may be right There's no guarantee that this would ever work. It's all hypothetical But may perhaps a combination of two and the thing I the thing I'm trying to Present that I think will be the most important is the actual power of replication And from what we've seen in medicine it it can be very powerful and useful But it may be that we have to really harness it into an antivirus system such as One that IBM or other companies have developed. So you may be totally right I may be totally wrong. We'll see I'm sorry. Can you speak up just a little bit Okay 90% are already Pardon They won't want that Okay, that's a very good point and what he mentioned that first of all after there's a big infection like I love you You said statistically there's a dip in the Number of viruses for the next few weeks or months after that And so that may kind of be supportive of this whole theory, but at the same time you said people will People don't want that. I love you virus in the first place. They're never going to accept The the idea of a computer virus in the first place They don't want the infection even if it gives them that dip is that Most corporations don't want to stop getting viruses by getting viruses and again, you may be perfectly correct This is just a theory that is coming from medicine, which is my background Yeah, yeah Are you uh in medicine then? Okay, so this is a genetic engineer. We have a physicist. I'm actually a medical doctor myself. That's my background So that's kind of how i'm coming from it Uh bringing that now there's a last question I guess Is So the comment was wouldn't you say that virus is already doing what I have proposed up here in the last decade Uh viruses have caused a resultant upsurge in antivirus technology Which has effectively gotten rid of most viruses and given us a great degree of protection. Is that Corporations Okay Okay, and so he pointed out the first the vbs script virus already did this it caused corporations to block vbs or to Uh update their systems in a way to protect from it. So you're perfectly correct This is already happening and I think if it weren't for the viruses that have already been written and the resultant antivirus community Society would be geared up for a big collapse Just like the native americans in smallpox. They were wiped out overnight So I think the viruses we've had that have infected us have actually been really good for us They've given us an eight built-in immunity and the last question is right here We better have better security Okay, then the probably the best point of the day is that uh The gentleman suggested that the Proposal here is kind of like bringing a bomb to an airport and blowing it up And saying well, that's going to improve airport security. Why don't we go, you know blow up some airports? That's going to increase their defenses point taken And again, this is Like you say, this is probably an extremely radical idea and I think av will Be violently opposed to it may never accept it and What I've tried to do is kind of bring what I've learned from medicine To to this technology and remember back in the early smallpox vaccine days People, you know, if they told you they were going to immunize you you'd you'd either kill them or run away You didn't want that vaccine. I think that's probably where we're going to be at the beginning so Very good point and you really got to the heart of the matter Well, thank you all for coming. I'll be around if any of you have any questions or comments


I'd just like everyone to know that over the weekend we've pursued a line of enquiry that we may now think is not connected to the nurse, the attempted abduction of the nurse in Brisbane Street as she walked to the PA Hospital on Saturday night. That line of enquiry hasn't been totally eliminated but we just ask members of the public that we are looking for a male offender with black skin, could be African or Aboriginal descent. He has a large deep scar on the left side of his face and what happened at 9 o'clock on Saturday night this person has confronted the nurse who parked her car in Brisbane Street in the vicinity of the Princess Alexandra Hospital. As she's walked to work he's confronted her, struck her with a sharp implement on the side of her stomach which has left a mark on her body and then she's fled, gotten free and run to work so we still are looking for out-standing offenders. The victim described the car as a silver-nissan pulsar and it was parked in the vicinity of, as I said, Brisbane Street and Ayr Street near the PA Hospital. It could be possible, yes it could be. The victim speaks good English, she is of Filipino descent but it could be possible that maybe the shock of the event that they may have said give us your car or something like that but we can't be certain of that. Yeah, I'll detect you some Dutton Park spent yesterday in Toomba, there was a group of young Sudanese boys from Toomba, they were acting suspiciously at the Brnoon Railway Station on Saturday night and strangely enough one of the offenders does fit the description of the offender with the nurse and that vehicle likewise fitted so we're currently running that out but as I say at this stage we don't believe that is linked to the nurse. So what were they doing? Just that they were coming and going and acting a bit suspiciously around female passengers turns out that one was there to meet his girlfriend so they were coming and going, turning lights on off and good work by the security guard for Queensland Rail. He actually went up and spoke to them, got the regio number and that's how this line of enquiry is developed. No, they were acting suspiciously or could be perceived to be suspicious and that's why the security guard took the action he did and we as I said our detectives have run that line of enquiry out there. Does this mean you're back to square one? Suspects, but particularly having walked a suspect? At this point in time we have ruled them out as a suspect for this offence on the nurse so yeah in short we are back to square one and we are asking for anyone and a member of the public come forward to assist either come forward to Dutton Park Criminal Investigation Branch or Crime Stoppers. We've got no idea what the sharp implant was, don't know whether it was a knife or whatever. I can say that the nurse's top was damaged, was pierced and she does have a minor scratch to her stomach. That's right, we don't have a regio. We do know or she described it as a small silver Nissan and had a similar logo to the Nissan. So whether it was a polser or something like that. So is it still considered an abduction attempt? We're still treating it as an attempted abduction, certainly. They could well do. My word, yeah, they're quite brazen in the way they fronted this girl and were very demanding of her. My word, certainly, yes. Yeah, she claims that she was threatened. Don't scream, do what I say. Get into the car was what she what she believed was said. Not of note, no, not of great note. Obviously shopping centres and that are vulnerable from time to time. Of note, lately we have noticed a lot of high-end motor vehicles being stolen, but they're from breaking into houses, burglary offences. I'm not sure, sorry, no. There are a number of leads we're following in right to a number of offences that have happened over the weekend. In relation to silver vehicles, we are following those lines of enquiries. Yeah, there is one particularly strong enrolling aboriginal offenders. And as I said, the detectives are running that out as we speak. That particular silver vehicle was dumped at eight-mile planes. A subsequent stolen vehicle has been used for a series of other offences. So we're very interested in following that line of enquiries as well. Yes. So it was dumped at eight-mile planes after it was used in another number of offences? That's right, whether it's this vehicle or not, we don't know. But it is similar in nature, so... No, not of note, no. She's very upset. The detective said she's most distraught by what's happened. I'd be very vigilant. We've had other instances on the weekend where they've just driven by, threatened people from the car window. Particularly if you're carrying a handbag, mobile phone, wallet-the-like, backpacks, anything like that, I'd suggest people be very vigilant, particularly late at night. No, as I said, the detectives are running that line of enquiry out at the moment, so there are suspects for that that we're seeking. No, but I had just recently had a conversation and I'm going to liaising with Queensland Health. They have their own investigative body, so I'm closely working with them. And as I said to all nurses, this particular nurse had parked not in the parking area at the hospital, it was some street away. So, obviously, they're probably at more risk. And I suppose the good thing that's happened here that the actual nurse's car park wasn't targeted. Look, all I can say is my daughter's a nurse at the PA Hospital and they're most vigilant about starting work late at night. And I think they're more aware than we appreciate of just what risks they are at, but I can't comment on that email. Has it frightened your daughter? Oh, yeah, she's most concerned. They are all concerned, particularly starting late. They're shifting that, and she mainly parks where the nurses do park on site at the hospital. What's the most effective of that? I haven't personally asked that. All I can imagine is that's probably where she parks, if it's cost-effective or whatever, I don't know. Is it a hundred spaces free at the car park straight across the road as well? Yes, that's a good point. Yes, there will be, we've got a police in the beat at the hospital and together at Dutton Park, there will be extra patrols, for sure.


The Ani of Ife or Badiya Yogo will see one's all-stake orders to allow for peace and tranquility to reign in the Supreme in Nigeria, especially during the selectionary period in the country. Oba Ogo will see who spoke in the Leif air while playing host to drummers across Yoruba land on the occasion of the year 2022 Ayogalu Festival. The festival is celebrated in the Leif air, described the drum as a vital tool for communicating peaceful cross-extents globally. Also, the Ayogalu Ambassador, Princess Runkia Demiloyi commanded on a force celebrating the dirty disclose that over 200 children will be trained during a planned workshop on how to make drums and how to become a drummer with a view to sustaining the traditional drumming culture of Ayogalu. Some of the drummers who participated in the festival describe it as an essentially and uniquely significant communicative aspect of the Yoruba culture. We are like the barometer for the next electioneering campaign in Nigeria. In Osho, our election is coming up within the next two to three weeks and that will lead to the major election in Nigeria by next year January. On this note, we know that things are very hard. We know that everywhere in Nigeria is sort of hard as far as security is concerned. So we're using the drum and the celebration of Ayogalu to communicate that we should continue to foster a look for peace and peaceful co-existence. Ayogalu, the patron deity of the drumming is the one we're celebrating today, we're remembering her and aside from that his majesty is an advocate for gender equality. Time of peace, there is kind of the way, there are kind of adage proverbs that the beat with talking drum that shows that this, there is no problem. So and aside from that, you know, people also use talking drum for festivals.


Hey, guys. So, welcome again to Path to Nowhere. We're going to be demoing how you're going to be using kawa kawa. It's actually very simple, but also clearing suspect pursuit. So, let's go and try to clear this stage out. I already cleared this one, had a lot of difficulty actually clearing it a bit. So, this is the formation and you'll be making a couple of moves here. Just to clear this one. So, energy, energy, and energy. So, energy as soon as possible. Okay, so, have to, you know, take note of KK here because you need to move her as soon as this guy crosses to this plate. Okay, so there you go. And you up that shield as well for her. Then as everybody moves down, it just trickles in to the next opponent. So, this is quite a nice round. Either one of them, or sorry, KK can actually die in this stage and yet you can still clear this one. So, we're just going to move her here. Well, that person moves here so that you could lure her. But again, she dies because she doesn't have much HP. But kawa kawa, as you can see here, can hold it out. She's going to gain HP for himself. Then you can transfer him here to finish off the rest. So, that's basically it, guys. So, that is how to use kawa kawa. You can actually put some shield into himself so that he can heal. And that is it. I'll see you in the next one. I'll be showing you guys how to use Stargazer. So, thank you very much, guys. Take care. Stay safe. This is The Warden and I'm out of here.


Update 18 arrived into a leak dangerous yesterday bringing with it the culmination of the year plus war against the thargoid invasion of the bubble. If you're curious about what shape that culmination might take here's everything we know so far. Suffice to say what we're about to talk about delves heavily into spoiler territory so if you're sensitive to that stuff stop watching now. With the arrival of update 18 we now have access to the new guardian nanite torpedo pylon. This new anti-titan specific weapon fires guided fire and forget torpedo style weapons that are 100% effective against the heat regulation vents that open every minute or so for approximately 30 seconds. Rather than an explosive warhead the torpedo delivers guardian nanites directly into the titans normal heat regulation vents on what is generally regarded to be the ship's upper surface. Once the heat regulation vents are infected with guardian nanites they turn a distinct guardian blue colour and they're unable to dissipate the heat they would normally need to keep the titan running. In this event the titan must initiate a secondary emergency heat venting system on its underside. When this happens the vessel's thermal core emerges from its underside and is then vulnerable to attack from conventional weapons. Once the health of the core reaches 0% the core retracts and the titan initiates its torus magnetic field attack causing all attackers to withdraw from the titan's surface until it's over. Any attackers on the titans thermal core are awarded a 503 credit combat bond and then as best we can determine at the moment the cycle resumes. There does appear to be a larger picture at least going on here as a new element to the thargoid war galactic map also arrived with the update that shows a given titans level of damage resistance. Taranis the titan that was the first to arrive and became the primary focus of the efforts of the AXI and other groups last night is showing a resistance level of moderate, the other titan levels range between extremely high and maximum. Events in the Thargoid War have always largely moved on a weekly cycle with the server tick every Thursday. With the attention that Taranis has been getting the key to whatever happens next could possibly pivot on any observations made to those titan system states after the Thursday tick this week. The next frontier unlocked live stream is happening on Wednesday, we do know that Elite Dangerous will be featuring on that live stream and will continue to report back here as this crucial week for Elite Dangerous continues. How have you fared attacking titans since update 18 dropped and what do you think the next step in the war will be? Let us know in the comments below.