Good morning, fellow cloud nerds, and welcome back to day four of AWS re-invent. We are here in fabulous Las Vegas, Nevada. I'm joined by my co-host, Paul Gillan. I'm Savannah Peterson. We're on theCUBE. Paul, how you doing? Hey, Paul. We're staggering to the conclusion. Yeah. And I say that only because we're talking about my feet. This event is still going strong. The great keynote this morning by Werner Vogels about system architecture and really teaching 70,000 people out of design systems. AWS is really taking advantage of this event to educate its customer base. So much education here. Yeah, and that was a fantastic sort of cap to the keynotes we've seen this week. Yeah, I'm impressed, Paul. Our first AWS re-invent, I think we're doing pretty good on all things. Well, we're still alive. And our next guest actually looks like he's been sleeping this week, which is remarkable. Please welcome I-all to the show. I-all, how you doing today? I'm good, I'm good. Thank you for having me. It's our pleasure. I'm here with Anjuna. Yes. Just in case the audience isn't familiar, what's Anjuna? Anjuna is an enterprise security company. We focus on the space of confidential computing. And essentially we enable people to run anything they want, anything they want in any environment with complete security and privacy. Which is a top priority for pretty much every single person here. That is true. Now, confidential computing, I keep hearing that term. Yeah, let's go then. Is it, I mean, is there a trademark associated with it? Is there a certification, is the concept or is it actually a set of principles of frameworks? Give us a scoop. Yeah, so confidential computing is essentially a set of technologies that were added to the hardware itself, to the CPU and now to GPUs by the hardware vendors. So Intel, AMD, ARM, NVIDIA, AWS were their own hardware solution for this. And essentially what it allows you to do is to run workloads on top of the CPU and the GPU in a way that even if somebody gets full access to the infrastructure, you know, root access, physical access, they're not going to have any access to the data and the code running on top of it. And as you can imagine in cloud environments, this is extremely, extremely well done. And it's done through encryption? It involves encryption. If you go one step deeper, it involves protecting the data while it's running, data in memory, when the application is processing it, which is always being the missing piece in terms of where you protect data. So I got excited when I looked at the show notes because you are serving some of the most notoriously security-strict customers in the market. Can you tell us about the Israeli Ministry of Defense? Sure, so essentially what we do with the Israel Ministry of Defense and other customers, especially on the government side, one of the challenges the government has is that they have to, if they want security and privacy in the cloud, they have to use something like a GovCloud. And sometimes that makes sense, but sometimes other the GovCloud is not ready because of legal battles or just it takes time to set it up. In some countries it's just, it's not going to make financial sense for the clouds to create a GovCloud. So what we do is we enable them to run in the commercial cloud with the security and privacy of a GovCloud. Was that, I can imagine, so you took them to the public cloud, correct? Was that a challenging process? When I think of national security, I can imagine a business transformation like that would be a little nerve-racking. Oh, definitely, it was a long process. And they went like, this is probably one of the best security experts on the planet. And they went extremely deep in making sure that this aligns with what they would be able to do to actually move sensitive data to the commercial cloud, which obviously that the requirements are higher than anything I've ever seen from anybody else. And the fact that we're willing to publicly talk about this and be a public reference for us shows the level of confidence that they have in the underlying technology in the security and privacy that this allows them to achieve. We still hear reservations, particularly from heavily regulated industries, about moving to the cloud, concerns about security, data ownership, shared responsibility. Are those real? Are those valid? Or is the technology foundation now strong enough that they should not be worried about those things? Yeah, this is an excellent question because the shared responsibility model is exactly sort of the core of what this is about. The shared responsibility model essentially means the cloud's sort of by definition. The cloud is somebody else managing the infrastructure for you, right? And if somebody's managing the infrastructure for you, they have full access to what you do on top of that infrastructure. That's almost the definition. And that's always been sort of one of the core security problems that was never solved. Confidential computing solves this. It means that you can use the cloud without the clouds having any access to what you do on top of their infrastructure. And that means that if the clouds get hacked, your data is safe. If an employee of the cloud decides to get access to your data, they can't. They just don't have any access. Or if the government comes to the cloud with a subpoena, the clouds can't give them access to your data, which is obviously very important for European customers and other customers outside of the US. So this is essentially what confidential computing does and it allows to break that chair responsibility model where you as the customer get full control of your data back. Now do you need the hardware foundation to do that or are you solving this problem in software? No, so we do need a hardware foundation for this which is not available in every cloud. And it's part of every server CPU, that Intel ship, that AMD ship. This is part of almost every data center in AWS. But what we bring to the table at Anjuna is every time there was a fundamental shift in computer architecture, you needed a software stack on top of it to essentially make it usable. And I think the best last example was VMware. Virtualization was extremely powerful technology that nobody was using until VMware built a software stack to make it super simple to virtualize anything. And to some extent that was the birth of the public cloud. We would never have a public cloud without virtualization. We're seeing the same level of shift now with confidential computing on the hardware side and all the large players are behind this, they're all part of the confidential computing consortium that pushes this, but the challenge customers are running into is for them to go use this, they have to go refactor and rebuild every application. Why? And nobody's going to go do that. And that's exactly what we helped them with. In terms of why, as part of confidential computing, what essentially means is that the operating system is outside the cross cycle. You don't want to cross the operating system because you don't want somebody with root access to have any access to your data. And what this means is every application, obviously communicates with the operating system pretty often to send something to the network or save something to the file system, which means you have to re-architect your application and break it into two, a confidential piece and a piece that's communicating with the operating system and build some channel for the two sides to communicate. Nobody's going to go do that for every application. We allow you to essentially do something like an Juno run application and it just runs in a confidential computing environment, no changes. Let's talk a little bit more about that. So when we're thinking about, I think we've talked a little bit about it, but I think there's a myth of control when we're talking about on-prem. Everybody thinks that things are more secure. It's not the case. Tell us how enterprise security changes once a customer has adopted and Juno. Yeah, so I think you're absolutely right. I think the clouds can put a lot more effort and expertise into bringing security than the data center, or you definitely have this sort of more sense of security in your data center because you own the full stack, right? It's your people, it's your servers, it's your networks in the cloud. It's in your house, so to speak. Exactly, and the cloud is the third party managing all that for you and people get very concerned about that and to some extent for a good reason because if a breach happens, regardless of who's fault it is, the customer is going to be the one sort of left holding the bag and dealing with the aftermath of the breach. So they're right to be concerned in terms of what we do. Once you run things in confidential computing, you sort of solve the core problem of security. One of the core problems of security has always been when somebody gets access to the infrastructure, especially route access to the infrastructure, it's game over, they have access to everything. And a lot of house security has been built is almost like these band-aid solutions to try to solve, like perimeter security is how do I make sure nobody gets access to the infrastructure if they don't need to, right? All these detection solutions is, once they're in the infrastructure, how do I detect that they've done something they shouldn't have? A lot of the vulnerability management is how do I make sure everything is patched because if somebody gets access, how do I make sure they don't get route access and then they really get access to everything? And confidential computing solves all of that. It solves the root cause, the root problem. So even if somebody gets route access, even if somebody has full access to the infrastructure, they don't have access to anything, which allows you to one, essentially move anything you want to the public cloud, regardless of the sensitivity of it, but also get rid of a lot of these other sort of band-aid solutions that you use today to try to stop people from getting that access because it doesn't matter anymore. Okay, so cyber security is a one and a half trillion dollar industry growing at over 10% a year. Are you saying that if organizations were to adopt confidential computing universally, that industry would not be necessary? No, I think a lot of it will have to change with confidential computing. Exactly like the computer industry changed with virtualization. If you had asked, you know, when VMware just got started, if the data centers are going to, like, oh, this is going to happen, I don't think anybody could have foreseen this, but this is exactly what virtualization did. Confidential computing will change the security industry in a massive way, but it doesn't solve every security problem. What it essentially does is it moves the perimeter from the machine itself, it used to be sort of the smallest atom, to be around the workload. And what happens on the machine doesn't matter anymore. You still need to make sure that your workload is protected, so companies that make sure that you write secure code or so are going to be needed, plus you're going to need security for things like the null service, because if somebody gets access to the infrastructure, they can stop you from running, but your data is going to be protected. You're not going to need any of these data protection solutions around the box anymore. Let's hang out there for a second.  Where are we going in the next two to five years? Yeah, I think with confidential computing, the first thing that this is going to enable is essentially moving everything to the public cloud. I think the number one concern with the cloud, kind of like you mentioned, is security and privacy. Right. And this essentially eliminates that need, and that's why the clouds are so excited about this. That's why AWS talks about it. And I think Steve Schmidt, the CEO of Amazon, who used to be the CEO of AWS, talks about confidential computing as the future of data security and privacy. And there's a reason why he does that. We've seen other clouds talk about this and push this, that that's why the clouds are so excited about this. But even more so, again, I think over time, this will allow you to essentially remove a lot of the security tools that exist today, kind of reimagine security in a better way. Clean it up a little bit, yeah. Exactly, and over time, I think it's going to change the world of compute even more, because one of the things this allows you to do is, the closer you get to the edge, the more security and privacy problems you have. Right, and so many variables. Exactly, and it's basically out there in the wild, and people can get physical access. Quite literally, a lot of the time, yeah. Exactly, and what confidential computing does, it provides that complete security and privacy, regardless of even if somebody has physical access, which will allow you to move workloads much closer to the edge or to the edge itself, instead of sending everything back to your backend, to process things. We have interviewed a number of security companies here during this event, and I have to say confidential computing has never come up. They don't talk about it. Why is that? Is there an awareness problem? Are they threatened? Yeah, so I think the biggest, and to some extent, this is exactly like, I kept bringing up VMware, but like VMware, you can think of Salesforce. When they talked about SaaS, they sort of invented the concept of SaaS, no other company in the planet was talking about SaaS. They created a new category and now almost everything is SaaS. You know, VMware with virtualization, right? Nobody was doing it again and now almost everything is virtualized. Confidential computing is a new way of doing things. It's basically, I kind of have to shift the way of how you think about security and how you think about privacy, and this is exactly what we're seeing. I don't expect other security companies to talk about this, and to some extent, one of the things I've realized that we're almost more of an infrastructure company than a security company, because we bake security to be part of the infrastructure, but we're seeing more and more of the cloud stock about this. The CPU vendors talk about this. We talk to customers more and more, like almost every large bank I talk to now has a confidential computing strategy for 2023. This is not becoming part of the mainstream. And yeah, security companies will have to adopt or die if they don't fit into that new world that it's going to create. It's the new world order, baby. Get on the train or get up, you know? Get left behind. I love it. This is a really fascinating conversation and honestly what you're doing makes so much sense. Yeah, you don't need me to validate your business model, but I will just for the sake of that. Thank you. We have a new challenge here at Reinvent on theCUBE where we are looking for your 32nd Instagram real hot take, thought leadership. What's the biggest theme key takeaway from the show or experience this year? For you. Yes, so for me obviously focusing on confidential computing, I think this is just going to be similar to how, you know, no network was encrypted 10 years ago and today every network is encrypted with TLS and HTTPS and how, you know, five years ago no disk was encrypted and today every disk is encrypted with this encryption. The one missing piece is memory. Memory is where data is exposed now. I think within a few years, all memory is going to be encrypted and it's just going to change two industries, the security industry as well as the computer industry. Does that include cache memory? What's that? Does that include cache memory? That is encrypting the RAM essentially. So everything, this is the one last place where data is not encrypted and that's exactly what confidential computing brings to the table. Are there any performance concerns with encrypting memory? That's a phenomenal question. One of the really nice things about confidential computing is that the, this was the heavy lifting is done by the hardware vendors themselves as part of the hardware and not part of the critical path in the CPU. It's very similar to the TLS acceleration cards if you remember those, which allows us to be extremely, extremely performant and that's why I think this is going to be for everything because every time we had a security solution that had no performance impact and was super simple to use, it just became the default because why wouldn't you use it for everything? I all, this has been absolutely fascinating. We could talk to you all day. Unfortunately, we're out of time, but really thank you so much for coming on the show. Now we feel more confident in terms of our confidential computing knowledge and definitely learned a lot. Thank all of you for tuning in to our fantastic four day live stream at AWS re-invent here in Sin City. With Paul Gillan, I'm Savannah Peterson. You're watching theCUBE, the leader in high tech coverage.


Howdy how's it going? My name's Davy Chappy, and today it's time to melt ourselves into glue because we're gonna be talking about the weirdest conceptual creature in the D&D mythos, the centaur. I'm gonna go over the centaur's real life origins, their in-game lore, and the stats presented in the mythic odysseys of Theros that you have all the information you need for when someone's looking at you a little horse-faced. As always, keep in mind that a lot of this is just my opinion, so if you feel like Forge Clerics that fashion armor for centaurs should also get jack of all trades because they are technically barding, feel free to play your games however you want. But with that out of the way, let's begin. So the idea of a half-man, half-horse, all-abs adventurer is an idea spawned from the gazed culture around the Greeks. In Greek mythology, centaurs were creatures of two worlds, born neither fully man nor fully animal, that largely stayed out of human affairs in favor of hanging out in forests and eating grass. At first, there were only male centaurs due to the old binary of, this race is X gender, such as satyrs being all dudes and dryads being all girls, but later stories acknowledge that, unless your species reproduces by eating so much that your horse person just rips itself into two different horse people, you're probably gonna have female versions of that creature. So every once in a while, a grill horse would show up in the background like, hey, another misconception is that, despite being portrayed as uniformly wise and noble creatures in modern media, original centaurs were actually not at all dissimilar to satyrs in their love of parties, freedom, revelry, animal legs, and what hangs out between them.  Because he was pretty much the only noteworthy centaur, he became the poster boy of the race, and his individual personality started to get conflated with the behavior of the species as a whole. And by the time that C.S. Lewis got ahold of them, centaurs had been flanderized into being the noble warrior guardians of the forest. And that is where D&D comes in. See, everybody points to Lord of the Rings as being the biggest influence on the fantasy genre. And it is, but the second biggest, as far as D&D is concerned, is the Chronicles of Narnia by C.S. Lewis. Seriously, most of the stuff from D&D that can't be found in Lord of the Rings is very likely to be found in one of those wardrobe books. So, when Gary Gygax went looking for lore on the horse race, he didn't have to look very far. Like in the Chronicles of Narnia, the D&D centaur is a nomad at heart, constantly traveling from place to place, staying away from areas that appear to lived in. A simple farmer might hear a rumbling coming from outside their window one day and look to see dozens and dozens of centaurs riding in a herd along the open plains of summer. Luckily, unlike most creaches of that type, centaurs are friendly and their twin stomachs can withstand diets of grass and leaves, so they don't need to raid anybody. Lucky you're still, centaurs are proud and protective of goodness in the world, meaning they're willing to help if said farmer was having problems with a band of marauders that lived somewhere in the distance.  The only disadvantage to the nomadic horse life of the centaurs is what happens when a centaur can no longer run, either because they've gotten too old or because they've broken their legs in a freak frolicking accident. This is the worst-case scenario for a centaur, because it means that they can no longer travel with their pack. Do horses travel in packs? Is that what they're called? It is called a harass. Because it means that they can no longer harass their fellow horsemen, and they're doomed to be left in the next hospitable town that the harass can find and live out their days as that weird horse uncle that steals their neighbor's hay and shits in their living rooms. That's about all there is for the normal centaur, but if you're looking to flesh out centaur culture into a more living thing, the mythic oddities of Theros present the race as they appear in one of the many worlds of Magic the Gathering. In Theros, centaurs are split up into two cultures, the Lagona and the Fairies. The Lagona are the more chiron-esque wisdom centaurs, traveling in merchant bands and going on journeys of self-discovery to gather more wisdom that they can take back to the herd. While the Fairies are the combat-atars, running around, punching stuff, electing leaders based on who can punch the best stuff, and going on journeys of self-discovery so that they can discover more stuff to punch. Both of these cultures have minor roles within their culture that a centaur can fit themselves into, with the Lagona having barterers for trade deals with other merchants, Coursers to chart paths for the herd to take, Omenors to ask the gods where the best course of action is at a given time, and the Kualtras, who are the designated face-punchers of the merchant guild and are fun fact, fated to die in defense of their family. Meanwhile, the Fairies have their leader, the Charger, as well as scouts, archers, warriors, foragers, and two special roles called the Collar, who is either a ranger or druid that can call animal allies to help them in times of need, and Trompers, who are the number one face-punchers after the Charger. It's pretty basic lore as far as cultures go, but the centaurs are fairly simple as far as life goes, only affecting the greater world to train heroes from all walks of life in the way of the blade.  A centaur player gets bonuses to strengthen wisdom, a speed of 40 feet, the fey creature type, which doesn't make a lot of sense to me, but whatever. The equine build trait, which is like the powerful build trait, but also you can't climb upstairs as easily, proficiency in animal handling, medicine, nature, or survival, a natural hoof attack, and a charge ability that lets you attack with your hooves as a bonus action after you run straight forward 30 feet. Now, all that may sound like a lot, but the only real useful things here are the increased movement and the charge ability, and maybe the proficiency, whatever. I personally love when classes implement an actual reason to use your natural weapon instead of just tacking it on there and calling it a day. The equine build feature can undoubtedly get annoying, but as long as you don't start any fights in a mini-mall, then you shouldn't have too much of a problem.  Buuuut, that'll about do it. I hope you enjoyed this video. Be sure to leave a like, comment, subscribe, ring the bell, hit that like button, and maybe support me on Patreon so that I can get that surgery to get the horse body I always wanted. But yeah, Davi out.


Answering some of Google's most asked questions about Marquette University. Is Marquette University a good school? Marquette University is a great school. Wall Street Journal ranks Marquette as 56th in the country and names the top ranked university in Wisconsin. But hey, don't take our word for it. Is Marquette University safe? Marquette University is dedicated to creating the safest environment possible through its innovative programming, educational efforts, and its dedicated police department, including an outreach dog, MUPD Blue. Is Marquette University affordable? Although Marquette is a private university, we offer a variety of financial aid options including grants, loans, scholarships, and student employment. Approximately 99% of our students receive financial aid. To learn more or to schedule your campus tour, visit marquette.edu.


The narcissist push Paul game the narcissist will push away the people who are closest to them While still keeping them in arms reach Because they're trying to protect themselves From their fear of being abandoned That is why the narcissist is so distant And because of that you will never know who they really are They will push you away, but they will never let you go They will keep you at a distance But they will still think that you're a part of their life Because they see you as something that belongs to them They see you as their property But they will withhold whatever they think you want and need from them To prevent you from moving on and to keep you wanting more of them The narcissist will push you away Because they don't want you to be close enough to hurt them Which is why you may never feel like you knew the narcissist was Because they can never be vulnerable with you They can never show you who they are But they can't be alone They need to have people around them. They need people to feel them So when the narcissist is around you They will drain you of everything you have And you will never know who they really are Because they keep your arms length But they will tell you whatever they think you want to hear Whatever they think will make you trust them But they will never tell you everything about themselves Because they're afraid that if they do that You could use it to hurt them Because that's exactly what they would do to you If you confide in the narcissist They will later use that information against you because they're very selfish They're not really looking for a relationship partner They're just looking for power, status and control They're looking for attention They're not looking for love When they first met you They thought you were the solution to their problems But that soon changes after a few weeks or months Because the narcissist never built the foundation for a relationship Which is why it isn't long until they come to the realization that you're not ideal anymore You're just a person They start to criticize you But they also become attached to you So they believe there's still a reason for them to be with you Even if they don't really want to be with you They believe that they're benefiting from it in some way But at the same time They hate you They don't want to be close to you anymore They cannot be intimate with you Because they don't allow themselves to be vulnerable Instead they push you away They are for vulnerability and they also lack empathy for you They don't care about the effects the behavior is having on you They have an inability to communicate with you and they lack self-awareness Which is why they just end up blaming you or they don't tell you anything As time goes by They will resent you They will become very bitter They will feel like you made them do something But they will make you try harder to please them You will be putting in more and more work to make them happy But eventually They push you so far away That it's hard for you to come back and that's when they really begin to fear being abandoned They lose the attention they had from you It makes them feel like they're not good enough But they want to feel important They want to have power and control over you and that is why they pull you back in But they don't pull you back with love or affection They use their manipulation They try to intimidate you Because it makes them feel better about themselves So after they've just pulled you back in They can only push you away again Because they're afraid of abandonment They don't want to be vulnerable because they feel like they're losing control So they avoid intimacy And they will never take responsibility for pushing you away They will make you feel like you misread the situation Or they will say that it was in response to something you did They don't pull you back to resolve anything They do it to keep getting what they're getting from you. They're just thinking about themselves They're thinking about what will make them feel good Whether it's going back to you or finding someone else It's never about building anything with you It's always about them Which is why there's no communication with them about this and this is the difference Between a person who wants to build a relationship with you and Someone who doesn't a person who is thinking about the future And a person who isn't If they value your relationship and they're thinking about the future Your wants and needs are going to be very important to them They're going to care about your feelings They're going to want to know how you feel Which is very different to how the narcissist treats you. They can't communicate with you They can't be vulnerable and they don't care about how you feel They don't care about what you want and need Which is why they never asked you Thank you for watching. I hope this video resided with you Please like comment share and subscribe if you would like to donate My PayPal link is in the video description Coaching queries you can email me at coaching at mark survivor at the UK Thank you for watching and I'll talk to you soon


Hey curlfriends, I'm Bianca Renee and you're watching Bianca Renee Today and today, believe it or not, you're looking at curls that just came from the gym. Yes, today I'm showing you how to work it out the gym and then still have beautiful curls after your workout. Now as some of you may know, I am someone who likes to preserve her curls for up to day four, five, day six sometimes and I do workout Monday through Friday so it is possible to have beautiful looking curls without having to wash your hair all over again every time you go to the gym. So without further ado, let me show you how I went to the gym, showed you what kind of workout I did and then how I got to this point after the gym. Here's my trainer that won an only zipper. A zipper. Why should I listen to you? Have you won any competitions or anything? Well I kind of won, I'm so shy. I've won Mr. America, the Mr. Universe, the World Championships three times. Oh that's all. Please, please put me on the YouTube channel. You can't fix but what I probably haven't shown you in any of my videos is that every time I shower throughout the week, I wear a shower cap. These are just little cheap, clear 99 cent store shower caps. We are going to add some water to refresh but we don't want to be soaking wet and start all over again so make sure you have a cheap little plastic shower cap and take your shower. Alrighty, now I am fresh out the shower feeling oh so clean. My makeup is on and now it's time to assess the damage of this post-gym hair. Now like I said, I usually like to put up the very top of my head in a pineapple that way kind of just you know falls back into place. Oh I did this on a late day hair this was like day four or five but nothing I can fix. But technically speaking it is good to keep your hair at the very top of your head. That way it's not touching any of the sweat that's on your neck or your back so you don't want to put it in a low ponytail. You don't want to put it in braids because your curls are just not going to look right post braid unless you're doing like a full twist out then that might actually work. You don't want any hair resting on the areas where you're going to sweat so it's best to keep it up high and away and in a pineapple. I wouldn't even recommend putting it in a bun because now you're just smushing your curls even more creating more dents and it's just going to be harder to refresh so just let them be free you know and let them live on the top of your head. We've got some straight pieces right here not curly not cute and we're going to refresh it no problem. So as always I grab my curl keeper water bottle you can use any water bottle brand you want I think it might be cheaper on Amazon but this is what I have and we're just going to resprit our hair. If you sweat a lot which I don't really think I sweat a lot you might want to add some dry shampoo but I'm just going to rewet it okay already looking better I know most of you would look at this and be like oh it's ruined time to wash my hair but y'all give up too soon you give up too easy better now since you guys have seen me refresh with so many of the products that I already have in my other videos I want to try something new for you guys which is the diva curl arc angel gel this gel is not new by far but it's new to me and I know I'm late to the game but I've heard this gel is even better or maybe has more of a hold than the ultra defining gel what do you guys think which gel do you like better if you've tried both I'm curious so I'm going to add about that much I showed you a clear hand can you even see that that's how much gel I'm using we're all them together and we're just going to reapply it in this little scrunching flattening motion so we want to pray for our curls pray for them pray that they will be revived and beautiful once again pray and scrunch pray and scrunch since I have bangs now I'm going to bring my bangs forward you gotta find them believe it or not these are my bangs that's called shrinkage and then I'm going to apply some gel to the top of my head and my bangs many of you focus so much on your length of the hair that you forget the top of your head and then you wonder why you have frizz on the top of your head so don't forget to apply to the top and there you go so at this point I just like to let my hair air dry for at least 30 minutes on a refresh day sometimes I can get away with not waiting as long as my day one hair but I will come back when this gel starts to harden a little bit we want to wait for that a little bit of a crunch and then I might diffuse if need be and we'll see how it looks I'm back and now my hair is completely dry and now we're going to fluff it out and style it so I'm gonna give it a little shake once again there's a lot of shaking involved in the refreshing get my bangs to come forward I am really liking this new well not new but this arc angel diva curl gel I think it's my new favorite diva curl gel it just took first place look at that beautiful or what and you are about to wash your hair again just because you went to the gym I think the arc angel gel has just the perfect amount of hold and if you think there's too much of a crunch to it you could just scrunch it like this I have a full video on how to get rid of the cast that gels leave on your hair I think it's perfect what do you guys think now I'm gonna get my handy dandy pick and kind of make it bigger but this is what I do every day guys I go to the gym Monday through Friday and then I refresh my curls just like this I hope this video helped you guys with your daily workout and curly hair routines if so I hope you give me a thumbs up and subscribe I post two new videos every week foundation reviews on Fridays and curly hair videos on Sunday so come back next week for more videos I'll see you guys next time thanks for watching Bianca Renee today


Begin journey, navigating the road to cyber resiliency. Welcome to episode two of navigating the road to cyber resiliency, brought to you by Dell Technologies and their partners at Broadcom and presented by theCUBE. My name is Dave Vellante and if you watched our first episode, you know that we're delving into how to best protect your company and your critical data by developing the right strategies for your cyber resiliency via secure backups and recovery and cyber vaults, plus overall security education and awareness for all your employees. We have some great experts with us today. We're gonna walk us through how to improve your overall security posture and your cyber resiliency. So today we're gonna hear from Arun Krishnamurthy who's the Global Strategy Lead for resiliency and security with Dell Technologies Services with some expert security and cyber resiliency insights for you from his hands-on customer work with Dell Services. Now, Keith Bradley is the Vice President of IT and Security at Nature Fresh Farms. They're a fantastic Dell customer. They've got this incredible IoT and Edge story. They've got this computing infrastructure and they suffered a really scary ransomware attack and Keith will walk us through how they recovered and then hardened their defenses. And then finally, Michael M. Bruzzo, Systems Engineer, Worldwide Technology, WWT, Dell's partner of the year in 2022 shares some excellent insights into how to assess risk, set expectations and deliver better outcomes for your cyber resiliency. So without further ado, let's dive right in. Wow, organizations face a lot of obstacles when they're trying to get cyber resilient, multi-cloud data protection. Yeah, but it's a smooth ride if you're on the journey with Dell. You're funny. Oh, are there any chips left? Sure, here you go. Perhaps you've been hacked or you're just feeling exposed. For many customers, it's a bit overwhelming to try and figure out how to secure your entire estate or even where to start. Well, we'd like to help. We're here with Arun Krishnamorthy who is a wide range of experience across all aspects of IT management, generally in security specifically. Arun, good to see you. Thanks for coming in. Great to see you. Thank you for having me. So you're very welcome. So give us a quick overview of Dell services and specifically the cybersecurity piece in your role. Happy to do it, Dave. Super excited. Dell's doing a lot in the security space. We've been doing a lot for many decades. What we are doing now is bringing together some key services that will help our customers really tackle this big challenge in cybersecurity. We all know that ransomware is rising. Many of our customers are struggling and we see that across all segments, small business, medium business, commercial and even enterprises. Some customers may have a sock and dedicated teams. Other customers do not have it. But in general, this is a widespread challenge and it's really causing a lot of grief for our customers. We know it. The stats are probably more than half the companies don't even have a sock. And so Dell, what I like is end to end, small all the way up to large. And we could spend a lot of time talking about the challenges that organizations face and I think that's been well covered. But what we really want to do is share a framework. We have a slide actually that you and I were looking at earlier, Alex, if you would bring that up. And I want to understand sort of how you frame the conversation, what you've learned over the years. Sure. So look, cybersecurity is really a risk mitigation conversation, right? And what we've learned over many years of our experience working with our customers and really solving real problems for them, this is one of the blueprints that's emerged for us and how we engage and talk to customers. There's three critical things in the blueprint that will help our customers not only prepare, which is pre-breach, what do they have to do, and also help them think through, God forbid something happened, how do I recover my, this is kind of the cyber resilience conversation, which is how do I understand both scenarios and be ready for it? So the middle of this is this slide is where everybody has all the tools, right? We all know that, but start at the top here. This is where, what's interesting to me is you guys go in, you do a portfolio assessment essentially and evaluate the risk, is that correct? That is correct. So one of the most important things in cybersecurity is it is not just the CISO and their team that need to be worried about it. The top layer is what we think of business layer, risk layer, we want the business units, the IT teams, the application teams, the risk teams, the security teams, collectively working together and understanding what does risk exposure look for this company? And this widely varies between different companies because they are in different stages of maturity and they have different priorities. So we need to understand that risk appetite and exposure first, and then understand and build that strategy, right? How are we now going to tackle it? Where should we start and what does next look like? Can you bring that slide back up? I want to talk about the bottom layer now as well. So this is where you get into the architecture. Explain what you've got going on down here. Yeah, this is an interesting one. So this is your layer technology architecture and another way of looking at it is if you looked at some recent Zero Trust mandates, the NIST DOD model reference architecture for Zero Trust also talks about this at different pillars. With the remote workforce that we have today and the remote target destinations that workers are going, which is multi-cloud, you now have a very diverse distributed workforce accessing very diverse distributed applications, whether it's private, public, SaaS, multiple forms. So how do you now connect these different pieces together is where some of the new technologies are evolving? And one of the interesting challenges is in the old model, you had one data center, one firewall, you knew who was coming in. Once they came in, you kind of understood what they were doing, but in the distributed model, you have to build security posture along the way. If I'm a user with a laptop and I'm coming in, what applications do I access? Where do they sit? How do I traverse the network and how do I protect every piece of it? So what you're looking there is the technology stack and we want to make sure that every piece of that is protected. Okay, so this is like I said, overwhelming for a lot of customers. So we've got another graphic that I want to bring up because where do you start? Simplify, if you could bring up slide two, Alex. Simplify for the audience, where do I start? Like I say, I've been hacked or I'm afraid I'm going to get hacked. I come to Dell, what do you tell me? So when you look at it from a customer journey, our first priority is understanding what exposures currently customers have today and we want to make sure we want to solve for that. Wait, so great example. We had one customer that had multiple domains, multiple websites that had forgotten about it. So when we do our attack surface management assessment, we uncovered that these assets were out there exposed for the bad guys to operate on. So let's understand the open vulnerabilities you have and make sure that we address it. And while we are doing that, let's also take a protection point of view, right? Let's protect what you have. God forbid the hackers came in, we are protecting the data. So can we double click on that second pillar here? You know, that's something that we talk about often on theCUBE and that is the adjacency of data protection to cybersecurity. Our audience has heard that a lot. How are firms thinking about this adjacency? How do you think about it? So one of the critical aspects of data protection is the recovery component, right? Are we protecting the right assets? Do we understand what does a recovery scenario for a particular business process look like? So when we talk to customers, they have hundreds of applications, they have some business process that has to come up. God forbid they had a cyber attack. So understanding the priority of the applications, protecting the right data, isolating them, and then having the ability to bring them back in an organized manner is super critical. So you can now prioritize those resources for the most critical applications. And from a protection standpoint, we also extend beyond data protection, which is where things like zero trust come in. So William, we'll talk about that, but so you're essentially connecting the architecture to the business process. So there's a lot of dependencies, so multiple databases, there's maybe multiple tools that you've got to deal with. We always focus on the tools, but there's a lot of other things going on in the business. What about that third pillar? If you could bring that slide back up, that idea becoming more anticipatory versus being purely reactive. What are the keys there? You've got this manage proactively. Let's double click on that. So when you follow the journey and you have now protected your assets, you've closed some of the exposures, you've put the right controls in place, well you have to understand that every customer environment is dynamic.  So you have to manage your security proactively. You have to make sure that you're doing active threat management, you're bringing in a lot of threat intelligence. And Dell, for example, we have a SOC that spans 75 countries. We have a lot of different threat sources. We are able to bring that intelligence and understand if you're being hacked, if you're being hacked, we know what the connective points are, so we can help you detect and respond very quickly. You know, one of the things that, you know, you see these frameworks like the NIST framework, which is great, but it's a lot, and I think organizations have trouble or operationalizing that. Is that something that you hear as a frustration and how can Dell help them actually bring this to reality? Yeah, so great question, Dave. The frameworks are an evolution of what the industry has collectively understood over many decades. So they are phenomenal guidelines for customers. So NIST, for example, has five functions, and if you balance your investments across the five functions, your security posture is gonna get better. NIST also has controls, understanding those different controls and how do they work. So with our services, we take a pragmatic approach. We have the frameworks as a reference point, guiding principle, but we also look for common cyber hygiene when we work with customers. There are some low-hanging fruits you can attack and immediately increase your cybersecurity posture and then worry about the broader framework alignment and regulatory and other alignments. How does all this fit into, everybody talks about zero trust, zero trust is everybody's on the path to zero trust, but it's very challenging. CISOs tell us it's gonna take three to five years, which is kind of depressing because they get a lot of other stuff to do. What's your take on zero trust? How does this all fit in? So first of all, zero trust is not a new concept. It's been around a lot. It's getting a lot of trust now because the cyber attacks are continuing to grow and we need to find a really solid architectural foundation. That's what zero trust gives. So when you look at many security programs, customers are running today. It's dependent on understanding a few good behaviors, but mostly customers are looking their needle in a haystack. Is there a bad behavior going on? What zero trust does, it shifts the paradigm, right? Let's focus a lot more on the good principles, good behaviors. Do we understand our users? What devices do they use? What applications do they have? And put the right technologies to make sure that we are enforcing those good behaviors and it reduces the burden on catching bad behaviors, right? So that's the fundamental concept, but there's a lot of vendors with a lot of technologies that also have some aspect of zero trust in it. What we are particularly proud in Dell is we are kind of bringing them all together so our customers have a better understanding of the roadmap. And the other thing is we find a lot of our customers at brownfield environments. So essentially where we are helping those customers is how do we take those existing investments and convert them into a zero trust type policy and architecture. Yeah, so you mentioned needle in a haystack. Sometimes it's like a needle in a needle. When people ask me why Dell, I'll often say that the company's obviously got great services capability, but I want to learn more about the ecosystem, particularly as it relates to security. So we have a third slide that I wanted to pull out of the deck because it really does talk to this. Big theme today in security is how do I reduce the number of tools I have? And there are a number of world-class companies that can help you do that, can help you consolidate, and there's some listed here. Talk about your ecosystem strategy. Yeah, that's another great question. One, like you said, it's a highly fragmented industry because each vendor is solved for a particularly difficult problem, but the burden is on our customers to put it all together. The other interesting thing about technology, security technologies is they are not working on their own. So for example, when you detect a threat, you want to cross-reference that to open vulnerabilities. You want to potentially cross-reference that to your penetration testing and how the controls are behaving. So what Dell is doing is we are working with the industry leaders. And Dell is becoming the MSSB, the systems integrator, and we are not just working at the level of putting services together, but we are working at the engineering level. How do I now have secure API-based automation? How do we bring these technologies? For customers, we want to onboard these technologies really quickly and how do they all work together? So we are playing a very pivotal role in bringing these leaders together and collectively we feel that we're going to have better message for our customers and solve it. You're making it easier in a very complex world. Arun, thanks so much for spending some time and coming into our studio. Thank you, Dave. Appreciate it. All right, keep it right there for more content on navigating the road to cyber resiliency. This is episode two. You really can't take a wrong turn on this road. It's very... What's the word? Modern? That's it. Modern. When you think of farming, what immediately comes to mind are the many challenges that farmers face. Planting, fertilizing, harvesting, drought, irrigation, and flooding, pests, parasites, and pesticides. But cybersecurity, backup, and recovery for farming, are not top of mind. No one expects to be hacked, but in fact, everyone should expect it. Even small to medium businesses, and unfortunately, even farms. Current stats show that a business is hacked every 11 seconds. By 2030, it's estimated that an attack will occur every two seconds. So yes, even farms have to pay special attention to cybersecurity. Tune in for a short subject documentary presented by Dell Technologies. Nature Fresh Farms. Navigating the road to cyber resiliency. A special presentation from theCUBE. I'm really looking forward to seeing that mini doc. It's going to be available at thecube.net right after this episode. We're back with Keith Bradley, who's the VP of IT at Nature Fresh Farm. Earlier this year, we had Keith on theCUBE and we took you inside the ransomware attack at Nature Fresh. We're pleased to have Keith back to help the good guys get more prepared. Keith, always a pleasure to see you. Dave is always great to see you too. My tomatoes are almost there, you know, but not quite as beautiful as the ones behind you. Okay, let's review for the audience. You got attacked. What were the initial signs or alerts that made you realize that you were under attack? The first set of alerts that came in were fairly easy to see. We got alerts that a couple servers came down, a couple switches went offline. And when I first seen the alerts, I actually thought we lost one of our core switches. It just felt like that to me. So I basically popped in and ran to the office and evaluate and see what was going on. I figured it'd be a quick switch at the switch, put a new one in place, program it, and this and that and the other thing. And when I got in the office, I started to look and I'm like, nope, everything's running. And then I tried to log in my computer and it didn't work. And then I walked by one of the other techs computers and I could see that dreaded ransomware screen up on the computer and I'm like, oh, that's not good. And as things started to happen, they continued to happen. And I just ran and I just pulled the plug on the internet and stopped the feed and started to evaluate where we were. That's your heart rate ticked up a bit. How did the attackers initially gain access? I think it was through an open port, wasn't it? Take us through what happened. Yeah, so what happened is we had a vendor set up a computer and they needed access to program it. So they needed to gain a port access to remote into it to control the computer and program it up. I had been on site in actually Delta Ohio or other facility for them to do this and I opened up the port. Port was opened on a Wednesday by the looks of the evaluation. They got it on Friday and by Saturday they were executing their attack on our network. Okay, so was there anything else that you discovered? I think you brought in an outside consultant in terms of like, so they get into the port and then what happened? Did they start traversing horizontally? Can you give us any more detail up to the point of which you got that ransom notice? So yeah, they started traversing the network horizontally. They kind of went all over. They spread out, they gathered more credentials from the system and at some point in time they gathered an administrator credential that got them further and then they kind of had the keys to the kingdom at that point in time. Once that happened, they traversed not only the Ohio network but they also went through our VPN connection to the Canadian office to the Mexico office, to the Laredo office and kind of took over everything. Once that happened, there was no stopping them. Okay, so you get a ransom note and you didn't pay the ransom. Take us through that discussion. Why didn't you pay? Did you ever think about paying? What was that like? When we first happened, we really didn't know what to do. We didn't know how to look at it and what to do. And that's when we started gathering our consultants both from our cyber insurance that we had and even Dell Technologies that came on site to help see things. Well, they didn't come on site but they did things remotely for us to help us gather what do we do next. There was a lot of conversations that the investigation firm had with the hackers to try to gain insight into what they got and to see what they got. But we decided that it wasn't in the best interest to pursue it and that was about suggested by Dowling Insurance but most cyber attackers to just don't pay it, it's not worth it. And that we were blessed enough to say that we were able to recover all the data that we were missing. So we didn't really need to pay them to get it in back. We just had to rebuild our entire infrastructure from the ground up and start going. So how did you manage to regain control? You know, there's how did you recover? How long did that take? So the initial recovery to get us back to bare minimum was so the attack started about 6 a.m., 7 a.m., so about 6 a.m., Saturday morning. We lost basically everything in its entirety. By about noon, one o'clock on Saturday, we were able to pick and shift product out of our distribution centers again by our backup and recovery software. We had nothing more than that. We just had bare minimum to run and see where things are. Then we started to actually evaluate, okay, where is damage? What do we recover? How do we recover? What are the next steps? And at that point in time, we'd engaged with Dell to say, hey, what do we need to do this and how do we do these steps? So it was a double dip. So they expedited our deployment of carbon black. So our carbon black was B in the middle of being deployed and now we just deployed it everywhere. Found out what was the hash for the attack and the other symptoms they were seeing and we just blocked it entirely out. Then we continued to just kind of rebuild things. And we continued to rebuild every moment of every second and it basically took us to about Monday, Tuesday or the next week to get back to a point where for the most part, the end users didn't know what even happened. The longest part for my team was rebuilding probably about 300 laptops from scratch and some of them doing it remotely. So it was a busy time. Wow, okay. So all this was a catalyst as we talked about in May to restart your journey to cyber resilience. What else have you changed as a result of this attack? So we not only changed how we look at things but how we do things. We now make sure that the vendors are much more compliant with our cybersecurity policy. We are much more adamant about what's open on our firewalls and how things are. We reevaluate and even though our backup solution worked to recover for us, we found that that six to seven hour window wasn't fast enough for us for recovery. So we actually went out and rebuilt our entire backup policy and how we backed things up and how we'd recover. Then we institute what we call a cyber vault which is basically a virtual air gap solution that not only protects your data but analyzes the data to see if there's any hackers laying in weight in the data that is going into this vault. So we really, really started to look at how do we back things up every day and actively saying we don't want to do this, we don't want to change the way we do it and this is how we are going to secure a network. So you compressed your, if I understand it, your recovery time objective if I got that right, did you change the RPO or were you comfortable with the amount of data that you were able to get back? We actually did increase it, we made sure we were backing up every single thing now. So every single thing that we did was totally backed up and recovered now. There were a few servers that we were kind of using but not needing to have recovered that we just rebuilt because we didn't do it but now we cover everything from a simple user's text file to an AI algorithm that we have on one of our servers.  Is that something that's in the future? It's possible right now, again, the power effect that I manage that we're using right now, that's something we like always, we can keep expanding it from what we need. The next step I think that we would do is we would have an air gap to a one of our other locations so we would actually air gap to two different locations probably before going on the cloud, more because we have such a diverse area. I kind of like to say that we've built our own on-prem cloud to make things work. What would you tell somebody who, let's say was in the position you were prior to the attack, they see this discussion, they maybe see you at your Dell Tech World interview, what would you tell them, what advice would you give them? I would say to them is whatever you think you're doing today, it's never going to be enough. So you have to look at full size of the coin. How do I protect my network? And yet how do I recover when it happens? Because there is no if, it's always a matter of when. Like one of the things that I love from the intro was a ransomware attack happens all the time and by 2030 it's going to be every two seconds. So eventually one of those two seconds is going to catch up to you. So be prepared on both sides. Protect your network from the attack and be prepared to recover from the attack. Yeah, the statistics and the probability are not in your favor. Keith, you've always been a great friend of the cube and I know you've been loyal Dell customer that sounds like they were there for you and your time of need and you're repaying that with your customer loyalty. So I really appreciate you coming back on and telling your story. Yeah, I always appreciate value. And it's a good story to share as I feel like people don't want to talk about it. They don't want to acknowledge that it's happened. And if we work together, it's going to make it feel better for everybody. Fantastic. All right, keep it right there. We're going to have more content on navigating the road to cyber resiliency. This is episode two. Cyber recovery. Immutability. Isolation. Intelligence. Zero trust. Just face it. You'll never beat me at the cyber resiliency game. Pretty sure that was a tie. You wish. Data protection, DR, cyber recovery, architecture and much more on Michael. Well, the rest of it. Yeah, good to be here. So what's your role? Well, first of all, a little bit about WWT and what's your role there? So we're a large privately held, value-added reseller across the market. We were Dell's partner of the year last year. And really we like to engage with our OEMs and our customers to obviously facilitate, add value and bring our expertise to bear to help customers deploy the best data protection solutions that we can. And large is an understatement. I think it's known that you guys are like 17 billion dollar company. Yeah. Very substantial player. And really working to double every five years and just very focused on growing the business. This is a second scene. Objective, I love it. So simplification is a big theme in tech generally, but specifically in cyber security. When you work with customers, what are you hearing? Where do you help them start, how do you help them get started and how do you set expectations so that they're not trying to get too far out over their skis? Well, that's the important thing is setting good expectations, right? The first thing we need to do is look at what applications need to be protected, get a firm understanding of what needs to be protected, where the customers crown jewels, help them understand what their RPOs and RTOs need to look like to ensure that they're going to be able to recover the data appropriately and then develop a plan to execute on that and understand what those timelines need to look like so that when we do get into deployment nobody's surprised. Okay, so you start with sort of, is it a discussion? Is it an assessment? What's the starting point? Definitely start out with a discussion because you always want to have a conversation but then we can perform assessment, we do app rationalization studies, help understand the dependencies. Obviously if you're protecting a large application, you want to make sure we'll complete some parts that go in there are protected together, things of that nature and then make sure you're engaging the right stakeholders as well in those early discussions. Okay, so you've been at this for a while. I'm interested in the lessons learned from two perspectives. One is from the many, many years of experience you've had and then the second is post-COVID because pre-COVID people talk about zero trust but they really weren't serious about it. It was kind of a buzzword now, everybody's on the path and I think they're realizing, well this is going to take a while. All this hybrid work, remote work and I know people are coming back to the office but still a lot of people working remotely. So there's sort of lessons learned pre and post and maybe you can share those with us. Lessons learned pre, I think the biggest thing again is that especially in large organizations this needs to be a top-down scenario. If you try and work it from the bottom up it becomes very difficult because the first thing you do is walk in and tell everybody that what they're doing is not sufficient. When it's a top-down perspective you have to make sure that you engage both the security and the information teams and generally at the C-suite so it's the CTO, CIO and the CISO all have to be on board to make sure that that's going to work in a coordinated fashion. And then the other big overall lesson learned is don't try to boil the ocean from day one because that's going to result in a project nobody's going to be able to swallow. Post COVID really what we're encountering is that there's a much greater awareness in organizations on the need to manage that data and protect it. So what we're seeing is more awareness of security out to the edge and the fact that data is not just always going to be sitting in the middle of that big data center in some centralized location. Also we're really seeing post COVID a lot of customers have moved a lot of solutions to cloud-based and incorporating the cloud solution and understanding how to protect the data that's in the cloud as well as the data that's sitting inside the four walls. So what's interesting is it relates to stakeholders. Cloud has now become the first line of defense for a lot of companies and yet cloud is code so you get application developers that are actually being asked to secure the infrastructure. That's not their... Let me back down. No. In terms of the stakeholders how do you connect? You've got the infrastructure, you've got apps, you've got business processes are you bringing in the line of business people? Is it the app dev heads? How do you deal with that? That I think is eventually what needs to be happening but again at the beginning of the day the C-suite has to have a full understanding and then push that down from the top. This is where we're going in order to save the business. You have to remember when we're talking about cyber resiliency these are existential threats to customers' businesses. You may not be there tomorrow. This isn't oh we're down for two weeks because hurricane. This is oh all of our data has been encrypted. Oh all of our data has been ex-filtrated. It's a threat to the business that everybody has to be on board and often to that point it often comes down from the board because they have the fiduciary obligation to ensure that the business is going to be there. They're very much aware of these threats and the board and the CEO come to the teams and say this is what we need to do to make sure we're here tomorrow.  Less now which is great and in fact at WWT we're really starting to lean into tabletop exercises for that. It's really nice we're developing a script that puts you in the room when a cyber attack occurs and walks you through a typical response so that you kind of get a day in the life and we found that when we do these kinds of tabletop exercises especially with folks in the C-suite they walk out with a much better understanding of the potential downsides of doing nothing and of what mitigation would look like. So it's like the empathy exercise but the C-suite and the sec ops shoes and oh by the way what do you do when your operations officer is backpacking in Maine when the cyber attack occurs? Well and how do you permeate that so you got top down and then I guess that trickles up and then you got the middle out meaning you've got all these let's face it bad use of behavior is going to beat good security every time so how do you create that security culture is that part of what you see organizations doing do you work that into this? It doesn't quite fit into the data protection value I mean the good news is from a data protection side I think for the last 23 years or so everybody's kind of understood that you have to have your back up so if we can get the information technology and security organizations on board the end user behavior of protecting the data is generally already there which is very helpful. Do you think people you must underestimate the scope of the problem and what it's going to take in terms of human capital and budget etc? Right and it's really important to start setting those expectations early understand what the budgeting looks like and more importantly what the timeline looks like because if you underestimate the amount of time you're going to need to spend to do app rationalization and understand what you need to protect you know the whole timeline goes down like a bunch of dominoes so getting those expectations set up front and that's something that we do a lot of with our customers and those out of scope expectations that may be in the executive's mind what's it going to take for me to solve this problem right how much give me a number and scary scary boil the ocean conversations what we tend to do in those cases is really start small say what do you need to rebuild your shop Mr. Customer start with putting that in a safe location tertiary copy offline and then expand to what's the data that the business will be gone tomorrow if you lose it and then move on from there so it's generally a kind of a better best good better best approach so as watchers of the Siri know a major focus has been the adjacency between data protection and cyber resiliency so we've been asking all of our guests where does data protection fit into that mosaic of cyber security well if you look at it and we've been doing it this way for a little while from the pillars of the NIST cyber resiliency model obviously we're recovery right we're the guys that you go to to get that data back and you know that's the key feature functionality where we play in and one of the biggest changes there is now we're going from a small scale recovery anticipation to a large scale recovery anticipation we got to get the whole business back as fast as possible but we also fit into some of those other pillars right anticipate one of the key things about backup is it touches every bit of data in the organization if you can start to do analytics against that backup data you can understand things like blast radius and infection time a lot faster so we definitely see a lot of our OEMs developing capabilities around that that we're then evangelizing to our customers and then on the back end of that whole NIST cyber security model of being agile and learning to respond and kind of you know skate to where the puck is going you know the bad guys are not sitting still they're learning they're developing constantly this is a constantly changing threat landscape and if you're not you know every time going through and analyzing where can we make this better what's changed that final pillar is I think really important to make sure that the data protection teams are engaged in you know so I do a lot of these types of interviews and people will often say you know look at the NIST framework how do we implement that and that's obviously good advice and there are other frameworks as well but customers sometimes have trouble operationalizing it actually you know driving it through the business so that it can be continuously improved do you find that as a challenge and how do you address that it's definitely a challenge because I mean organizations don't like to go they like to go okay this isn't a done pile we're through check we have a disaster recovery plan we have a cyber recovery plan and when you come back in and tell them you have to test it that costs money and you have to then sit back and well how has the threat landscape changed and how do we need to change it there's always going to be resistance to that because it costs money and it gets things out of the done pile and back into the to pile nobody wants to do that so yeah working with customers to help them understand that that needs to be done and modeling good behavior when we first met we were using the sort of football analogy you got two teams that are pretty equal you get a first down on every play you're not going to not punt and you use an analogy about watching film what was that they're going to watch your highlight reels from your previous games and understand what are you doing and that's the thing the bad guys are looking at all the stuff that we look at they're evolving their strategies and solutions you have to stay ahead of that you have to keep working and understanding and getting educated that is really really huge because again hurricanes are not out there looking for soft targets the disaster recovery and cyber recovery are related but very very different in that respect you're dealing with an active opponent who's evolving who's changing, who's looking at your highlight reels who's studying your plays and sometimes it goes all the way up to state level actors as the time of recording this we've got a lot of health systems in Connecticut that just have no information technology right now this is a scary scary landscape and we're not just spread and fought so taking that metaphor and sort of applying it as well I like the sports metaphor because a coach will come up with some new whatever like the west coast offense when it first came out and then the defense had to respond to that you see it now with AI I feel like when you work with a company like a large company like Dell they still have a lot of AI but they maybe had AI access to AI that the adversaries didn't have now all of a sudden chatGPT comes out the adversaries have, they start to the light bulb goes off do you think that in the near term that all this AI buzz helps the adversaries more than maybe the defenders it certainly makes it easier it lowers the barrier of entry right because if you're really clever you can trick chatGPT telling you how to hack a system and you don't have to have a lot of technical knowledge to do that used to be you at least had to understand the technology really well now you can have this AI spit out a script that will help you to subvert a system and if you can subvert a system you can subvert multiple systems etc etc so that's really the scary thing for me right now is it lowers the barrier of entry and makes this significantly easier to repeat we saw this with ransomware for a while where you could go on the dark web and you still can get ransomware as a service it's a business it's a volume business and that's still my biggest concern is ransomware for service or ransomware for state actors because all they have to do is succeed once and that's why we tell our customers you have to operate under the basis it's not a matter of if you're going to get attacked it's not a matter of if they're going to get through it's a matter of when they're going to get through because the good guys have to win every time and the bad guys only have to win once so what's the one thing that you would ask customers to not do and or do the one thing that I would ask them to do is to really take this seriously and make sure that at the very least you have a tertiary offline copy of the information systems and things like that switch records DNS I don't want to get too technical but the stuff you need to rebuild your shop that's square one that's the important thing and the one thing that I would tell customers to not do is to not don't make the ostrich play don't stick your head in the sand and hope this thing passes you by because hope is not going to be a solution for this problem you've got multiple databases you've got multiple tools it affects different business processes so you really got to think that through planning planning planning Michael thanks so much great having you I'll be right back to wrap up and share some news you're watching episode 2 of Navigating the Road to Cyber Resilience you know I don't think I've ever been on a road that's so simple to navigate well why do you think I let you drive oh you're hilarious Emmy okay today we learned about Dell's approach to integrated security and resiliency and what that means a room laid out key steps to take to become more mature in risk assessment and reducing that expected loss reducing that risk and the importance of a connected partner ecosystem and then we got into the anatomy of a real world cyber attack how one seemingly benign activity opened the door for a malicious event but most importantly how that experience reshaped nature fresh farms outlook on the security posture their processes and their entire culture for the better immediately following this episode tune in right here on navigating the road to cyber resiliency on this website for a special short subject documentary on nature fresh farms their operation their unfortunate ransomware attack and how they were able to successfully recover with help from their partners at Dell and then finally we heard how Dell's partners like worldwide technology as part of their critical connective ecosystem are helping guide customers along the right path assessing their risk setting the proper expectations for success developing individual plans and working hand in hand to deliver positive outcomes for better cyber resiliency that's it for today stay tuned for episode 3 which will be live in our Palo Alto studio later this year in December thanks for watching episode 2 navigating the road to cyber resiliency made possible by Dell Technologies in partnership with Broadcom we'll see you next time


The floor may not be a robot. Day one. It's Christmas break.  I scrolled through the games while sipping my hot chocolate. My eyes landed on The Underground War by Stickmaster Luke. To my surprise, there were actually a lot of players, so I decided to play it. The second I joined, a powerful wave of nostalgia hit me. I joined in 2009, so this made me feel young again. After a few minutes of playing, it was actually more enjoyable than I predicted it to be. I almost forgot how old the game was. My full focus was on the game, and my hot chocolate was getting cold. It was almost like I time traveled back to 2009. The only an ordinary thing that was going on was the rapid speed of players leaving the server. Every minute, a player disappeared. I didn't think anything of it at the time, so I decided to continue playing. The amount of players leaving really only caught my attention when I noticed that I was the last one left in the server. I was slightly skeptical, but I brushed it off as another coincidence. I was about to leave. When I opened the menu, I realized that I wasn't actually alone. There was one other person in the server with me. He went by the name of, Happy Time 927. I searched all around the map for him, yet I couldn't find anything. He wasn't saying anything. I decided to end the silence by asking him where he was. Hey, where are you? I am happy. He said in all capital letters. Ha, do you know how to play? He didn't respond. I was creeped out, but I figured that it was probably just another cruelest person, who is new to the game and isn't the best at speaking English. That was until he started saying more creepy, strange and almost concerning things in the chat. You are happy. I decided not to respond. I continued to look around the map for him. After a few minutes, I found him in one of the underground tunnels. His face was pressed against the wall, and he wasn't moving. Hello. I asked him. After that, I immediately left the game.  I could hardly sleep last night. I guess I'll update you guys if anything else happens. Day 2. The chirping birds woke me up. I got out of bed, forgetful of what happened yesterday. I turned my laptop on. As soon as I opened Roblox, the game I played yesterday appeared in the Continue Playing section. That made me remember everything. I remembered his username, so I searched it up. There was a green icon on the corner of his profile picture, indicating that he was playing a game. I was curious. As I scrolled through the servers of yesterday's game, I kept an eye out for the unsettling character of his. I eventually reached the end. I saw what looked to be him. He was in an empty server, all by himself. So I joined the server. The chat had been filled with him rambling on about happiness, and how everybody should be happy. I looked through the chat for a while, and then I found something seriously concerning. I saw the chat from yesterday. The one that said, you are happy. This discovery sent chills down my spine. Has he really been staying in the server all night, just talking to himself? I went to look for him. And when I found him, he was in the same exact spot he was yesterday. This was absolutely bizarre. I stared at him for a minute, before he turned around and looked at me. This made me jump. I didn't say anything, but he did. Do you want to see my happy place? He asked, again in all caps. I stood silent, as I was too afraid to speak. He left the server. My inquisitiveness led me to see in what his happy place was. I went on his profile and looked at his creations. There was one game. In all capital letters, it was called, happy place for happy people. There was one person playing, which was most likely him. I joined the game. The sky was a dark unsettling and depressing sign like color. The grass was very green, and there were some flowers in a field. A pitch black house was in the middle of the map. When I walked in, I saw a cake on the floor. There was also a rose on the windowsill. I saw him in the server, but I couldn't find him. I jumped out the window, still searching. That's when I found a doghouse. And there was a blood stain on it. I was grossed out. I stared at the doghouse for a few seconds, before noticing his eerie character at the edge of the map. I walked over and looked at him. He quickly turned to me, causing me to have a mini heart attack. When I moved side to side, his whole body also turned that direction. He was watching me, with every move I made. I left the game out of pure fear. From now on, I will try to forget about this guy. He hasn't let me get enough sleep. Thanks for reading, I guess. Day 3. I never thought I would be writing this. It all went down pretty fast, so if this part seems rushed, don't judge me. I'm still trying to process everything. I was playing some do-inspire brick battle. This was basically my feel-good game that took away all my stress. I was on green team, and I was absolutely destroying everybody else. I was doing better than usual. I felt happy as I was about to bomb red team's last spawn. But right as I was about to place it down, I heard footsteps from behind me. I quickly pulled out my sword, ready to fight. But the player who came down the stairs wasn't just any ordinary player. It was happy time 927. This made me come close to literally shitting myself. I thought I had already gotten rid of this person. Why are you still following me? I asked. You aren't happy? He responded. He needs everyone to be happy. Gu needs everybody to be happy. My master. These two words managed to distress me more than anything he's ever said. This person has a master. Gu needs everybody to be happy. This puzzled me, while also making me shiver. I left the game, hoping that he would leave me alone. This hope failed me. I joined my friend's game. I needed to tell him what was going on. He was in his own game, called Testing Place LOL. He seemed to be testing some sort of script. There's been this weird dude following me around in every game I joined. Heh. He responded. Yeah. It's a long story. Tell me bro. I proceeded to tell him everything that's been happening. When I started to talk about the Doomspire Brit battle encounter, the player joined us.  My friend said. Why'd you leave him into my game?  The player followed us as we stepped back. We eventually reached the edge of the base plate, that my friend was testing his script on. The strange personied both of us down. Then he started to talk, which was never a good sign. You aren't happy anymore? He said. These words put me in a stage of confusion that I have never felt before. Does he know about what happened last Saturday? Because since that day, I have not been happy anymore. I would tell you guys what happened on the day, but it's kind of personal, so I rather wouldn't. At that point, I just shut off my computer. I don't think I'm going to play Roblox for a while. This is the end of the story. Please find more info about this man. He scares me. Hey, it's me again. The guy that has been stalked by the mysterious user, HappyTime927. Nothing has really happened since the three traumatic days, but I have an update. My friend and I connected the oddities, and there is a chance we know the backstory behind this guy. First of all, let's take a look at his freakishly eerie game. I described how this game looked in the actual story. You can go take a look at it for yourself if you want to. The game is called Happy Place for Happy People. This game has many blood curdling features. For example, the pitch black house in the middle of the map. Also, the unsettling sign sky really adds on to the distressing feel of the game. But there are things that aren't just creepy because of the look of it, but creepy because of the possible backstory. The doghouse. A key feature that you could easily miss. This doghouse is located on the right side of the house. It is next to a small patch of flowers. When you look at it from behind, it seems fairly ordinary. But when you see the front, you will shiver. This doghouse has blood in front of it. What could this be indicating, you ask? Max and I figured it out. Trigger warning, the next two paragraphs, along with the second to last paragraph, could potentially be triggering for some readers. Reader discretion is advised. The blood in front of this doghouse could mean that Happy Time's dog was brutally murdered by his master. If you read the first part, you would understand who this master is. The reasoning behind his actions will be explained later on. This devastating death of his dog could be part of the reason Happy Time acts the way he does. The reason he acts like this could be caused by some sort of mental illness. Another thing that could make him have a mental illness is his master. From what Max and I figured out, this master could be forcing him to be happy at all times.  Who is this master? Well, this could be anyone. Max and I think this could be his dad. There is no specific evidence backing this observation up.  Maybe this could be how the man shows his dominance. It could be the master's way of showing what will happen if the kid doesn't obey his rules. This is the end of the backstory so far. There could be a sequel to the story if this gets enough attention. Maybe even a trilogy if any of you guys want. Thanks for reading.


Hey everybody, it's Eric Johnson from Airtate Throws Nation and today is quick tip Friday. We're gonna give you good throwing content in two minutes or less. So here we go. Let's talk about a little glide shop But today I'm here in my discus ring, but that's okay So what we're gonna talk about is staying straight the straight back And so when I pull in you're gonna see this kind of things when we see a straight back Or we bend over with a straight back and then an athlete pulls in they're gonna be flat on the foot We have to know how to get coiled up and load over the drive leg Right?   Keep the back Coiled up load the drive leg don't have that straight back which causes you to bend at the waist That's gonna help you to create that better glide line and hit that big glide when you need to in crunch time So thanks for watching. We'll see you next Friday When we look at rotational throws so many throwers are squatted down and then whether it's the Rotational shot they got to come around and they're too squatted in the discus This is a really a killer when we see this type of thing and then we're here We kind of get this type of emotion. You can see how that makes me do this. Remember, there's a


I got local community united by going bald. Four-year-old Knox Olufsen is battling a rare bone cancer, and his parents decided to host a head-shaving event at the Warwood High School in support of Knox. Hordes of people were in the gym last night donating hair, shaving their heads, and cheering for Knox at the Dare to Be Bear event. So far, 69 people saved their heads, and 41 donated hair. Sixty one of them, in all, were kids. About 350 people were in the audience watching.  I think he was pretty impressed. He was looking around with a big smile on his face. So yeah, it was pretty amazing. It took much longer than we anticipated, but it was totally worth it. So far, the community of Warwood has raised over $18,000 for Brighter Tomorrow's. That's an organization that helps families of childhood cancer. If you've enjoyed this segment of Lakeland News, please consider making a tax-deductible contribution to Lakeland Public Television.


Signs of autism to look at for in your toddler first with acts. What is autism? Autism is a neurodevelopmental disorder that is characterized by an impairment in the ability to communicate with others and impairments in the ability to form social relationships repetitive and stereotypic behavior patterns according to the diagnostic and statistical Manual of mental disorder this in five a manual of the American Psychiatric Association Which provides us a list of diagnostic criteria as well as signs to look out for in Autism this list consists of social interaction communication and language restrictive repetitive and Stereotypic behavior patterns social interaction a lack of the ability to follow familiar adults With their gaze or look at what is being pointed at a lack of enjoyment for activities or the children will enjoy example, but the party play dates lack of showing or pointing at objects of interest Can be described as self-sufficient. That is happiest when left alone inability to look parent or caregiver in the eye eye to eye gaze or poor expression isolate themself in a group setting communication and language delayed receptive language Showing showing a lack of understanding of what is being said example at 18 months a child should Recognize familiar individuals objects or places within the home delayed expressive language not vocalizing words or verbalizing by guest by gestures difficulty with pragmatic language Charts in ability to use language as required for different settings For example, a four-year-old child should be able to follow the rules of conversation Staying topic take turns ask questions and unusual intonation repetitive use of language impaired Make-believe play a regression or an absolute loss of speech The chart should be able to wave bye-bye at one year Repetitive stereotypic behavior patterns and unusual adherence to routine or rituals repetitive motor mannerism example body rocking and flapping always seeking to touch others fascinated by numbers Letters and or any object of choice Fisected on objects if your chart ticks off some of those criteria Please do not wait early intervention makes a whole world of difference Remember no two children as a bit the exact same symptoms of autism Toss the statement by Dr. Steven Shaw If you have met one individual with autism, you have met one individual with autism So Your child has been diagnosed with autism now what next I Always ask that question. What is diagnosis? You know me, you know me, you know me You know why I ask that question I have I don't stop talking about my daughter is 21. She has autism. She's on the spectrum Okay, so think about 21 years ago. What diagnosis entailed? and I Say it not out of a place of which you throw away everything that's happened but I come from a perspective of I've seen what happened previously like you rightly said the world has moved on where copying things and so there are a lot of Diagnostic tools out there that so it's no longer a question of I give you Ten questions to respond to and when you've ticked off the ten you now say oh you give somebody a label They have autism which is what is still happening quite a number of people are doing it, but that is just screening Absolutely, so if you've done the screening and you suspect that this individual may have autism Mark my words may have autism Autism what should you do refer them to someone that can diagnose properly not just looking at the DSM 5 like you pointed out because that is just a criteria yes, if we don't have people who are trained Yes to use a tool to diagnose as a different But I know there are a couple of us around who are doing that Okay, so it's important to have that you can have a clinical diagnosis no problem But at the end of the day, let's not give people the label and say they have autism without Confirming yeah, I am doing a research Work right now. Okay, we went out of Lagos state and we met this child a girl who's about 11 12 thereabouts, you know adolescent and When I ran the diagnosis on her She didn't meet the criteria for Autism AST, but I kept asking myself. What was going on? Until we got hold of the mother who then answered the screening questions And I compared it to what was in the DSM 5 it turned out that this child had childhood Disintegrated disorder Which is also neurodevelopmental disorder something people don't really understand It is that a doctor telling you is different from the specialist telling you right? So like when you go for your MOT and maybe you know the GP has found something You know found a lump. I suspect it might be you know cancer or found something I suspect is this you then are referred to the specialist in that area to check So it's a it's a similar thing For me, I think for me the next question should be Who then does the diagnosis before because I think that a lot of it just like as you said Some people have the screening tool and they use the screening tool to screen out and you say this So who does the diagnosis because sometimes I just go to one person or even the doctors Cannot just be the person to do a diagnosis. They do not do that. No, they say they shouldn't. They shouldn't But sometimes that is what you get. They shouldn't. Yes What they use is a scale like the DSM the criteria We need to speak on that because Let people be knowledgeable about who does the diagnosis because you said you need a diagnosis You know you to be able to get intervention. So who does the diagnosis? That's what what I say. Remember what I said I'm not saying we should jettison The DSM criteria because to be trained to do a diagnosis costs a lot of money It is not readily available in the country. I remember one of the hospitals I worked within the course of my research when they found out I was a dose trained and all of that They wanted me to train them But I said I had to go back to where I did the training to be sure that I had the approver to train the trainer Yes, so that's what so it's expensive and I understand that what I'm saying or the emphasis is We're not saying don't tell people that don't do the assessments and everything that you're doing but to have a differential a definitive differential diagnosis Requires a bit more than administering 10 questions 40 questions Some checklists a scale other scale, which is what a lot of us have if you use the DSM 5 criteria I know some of us wouldn't like to hear it, but I always say it and For me that is the gospel truth. We say we've been copying people. Let's copy them to the right way Okay, so if you use a checklist you use a skill You use anything other than an autism diagnostic tool Let's be honest enough to just say it there That my clinical impression is so so and so so people because we get that a lot in the center people come to say Oh, they've given us a diagnosis. Not everybody will afford a diagnosis. My daughter wasn't Diagnosed until three years ago because she needed that report to get this for her to access the sort of support that she required in the next stage Okay, so that's where it's really important. If you have a suspicion stated that I suspect this. It's fine It's the diagnostic tools are expensive very and you need to be trained I remember as a two years ago. I couldn't get any two with my level of Certification I couldn't but last year I could get certain because you need to be trained and even at that I'm even still requesting for more training because you get a lot of reports that says otherwise, but the most important thing that sides the Suspicion a diagnostic reports I see it as Opening the doorway to the right intervention for your child. I like that So it's open the door with the right intervention. Why do I say so? I will bring this home to myself I suspected a lot of things on my son. Nobody was I don't know what was going on in Nigeria They might really do not know they were just oh your child is fine. Oh, it's fine But I knew there was something I started doing what I could do. Thankfully. Yes, it's made a lot of progress But as soon as he got a proper Assessment and if a proper report I could then put in the right intervention That's for the very first time even at school. They are saying oh is a lot calmer. Oh, this is going on So that is what that a diagnostic report would help you do We thank you for your attention while the program lasted we hoped our Conversations resonated with you and that in some small way Encourage you to contribute to your immediate environment Little drops of water. They say make a mighty ocean Remember that there's nothing more weakening about a disability than the way people treat you over it The advocacy continues on our social media platforms on Facebook plus TV Africa Hashtag the advocate NG and on Twitter and Instagram at plus TV Africa Hashtag the advocate NG to catch up with previous broadcasts go to plus TV Africa comm For slash the advocate NG don't forget to subscribe to our YouTube channel plus TV Africa and plus TV Africa lifestyle Join us next week same time on this station. Let's keep advocating for a better society. See you next time See you