My name is Sripad Nargora, I'm a senior technical staff member and master inventor at IBM Research. I'm currently leading multiple initiatives around supply and security. I'm going to talk about one particular aspect of one particular project today. I'm a member of multiple security working groups in CNCF and OpenSSF. So if you want to catch me, you can catch me on Slack or their mailing list. I'm here joined today by Caroline. Hi everyone, I'm Caroline Lee. I am on the CSERA remediation team at IBM and I'm also a first-time presenter. So I'm very excited to be here. Thank you. Yeah, so where do we start? So that was the question I was thinking about. So as we used to say earlier, all the road leads to Rome. Today every security discussion we start, they lead to supply and security. And that's for good reason, right? Because supply and security is the foundational security chain that we are all facing together today, right? And the context of today is important here. And that's why, what is the main problem? The main problem is essentially our reliance on open source system today is unprecedented. As there are some stats that suggest we have 92% of our application. The content open source software, right? If you look into a stack, start from the Linux, right? All the way to the code that we write, everything is made up of open source component. And this is just one of the dimensions of supply and security, right? It's not the only one. There are other aspects like secure configuration, best practices. But today we'll focus on this particular one, like the open source consumption and open source reliance to tackle the supply and security. And a lot of time I get asked, right? If we have so much problem with open source, can we just stop using it, right? So open source doesn't mean it's bad, right? I think that open source is the core engine that is going to drive our next generation of software. I mean, it is today, it's driving our current infrastructure or current applications. But going forward, it's going to be the growth engine for our innovations. So open source doesn't mean it's bad. But as we heard in the keynote, right? Open source also doesn't mean it's free, right? So we need to invest in the technology. We need to invest in educating people. We need to invest in building a secure infrastructure so that we can securely consume and use this open source software. That's the important thing here. And it's not that we don't know, right? We have our DevSecos pipeline, our CI CD pipeline, we are incorporating a lot of these checks. So today if you think of what we are doing, right? So we start by identifying all the open source dependencies in what we call... I don't know if you heard of this term, lbomb, where we capture all these dependencies.  We check them if they are vulnerable. We do license auditing. We do first testing. And once our open source dependency pass through this pipeline, we go and build and start using those dependencies, right? So why is this not sufficient? Right, so why we need something more? So I would like to zoom into one particular aspect, the vulnerability management, right? So if you look into how we are managing our vulnerabilities today, so we typically start using certain version of package. That's package x, version y. Over time, we discover it has some vulnerabilities. The patch is created and the next version is tagged. A CD is announced. Then we rush and we say, okay, we'll upgrade this particular dependency to the newer version. And I start using the newer version. Two years later, again, the same cycle. I call it the vicious cycle of vulnerability management. Because our vulnerability management is kind of reactive in nature, right? We react after the vulnerabilities are announced. Of course, we have our DevSecOps pipeline. We can argue that before we start using, we analyze and we verify whether the dependencies are safe and then we start using. But majority of the cases, these vulnerabilities are discovered on day two, right? We call that once we start using them, we discover it after some time. So if you think about it, right, we run our applications. We often run our applications with potentially exposed vulnerabilities when we are running it. We are using the software. So is there something we can do proactively? That was the motivation. Before I start using any particular open source software, can I get some indications like there is going to be some problem with this particular package? And of course, we don't have Oracle or we don't have a magic ball that can tell us that two months down the line, this particular package is going to be vulnerable. That's not at our disposal, right? So what we can do to basically improve our vulnerability management process. And one particular incident that really motivated me was this incident that happened earlier this year, that the maintainer of the Colors and Faker library, he was able to push some bad code in that particular package and create a new version. Then, yeah, everyone who were using it downstream, the transit dependency, they were using it, and they all got affected, right? All the major 500 companies, they were using this particular library. They all got affected. The applications got broken. Then I started using thinking, right? So why, yeah, we can grant that, okay, the maintainer had malicious intent and he was able to push some bad code. But why I ended up automatically updating my dependencies, right? From a spec, we all discussed that, yes, some developers didn't have their dependency pin. So when the builder applications is automatically resolved to the next version, that's a valid point. But even if I had my dependencies pin, right, I said I'm using this particular version. And now the next version is available. I don't have, I still don't have control way to know why I should update. Is this version safe to update, right? And what I mean the control way is, I don't have the insights, right? I don't know if the best practices were followed for every change that went into this particular release, right? Or do we have any indications, like what kind or what size of changes that went into the release? So we can make an informed decision whether this upgrade path is safe or not. And that is important, right? The worst safe that will dive more detail into this. And this was essentially the one very motivating factor that has started this particular project. So essentially what I was looking into is basically building this control and informed way to update, to basically modernize our update framework or our release framework, right? Where whenever we get new versions are available, we know that what this version contained, whether it is safe to update to this particular version. And one core thing is we don't want to give this more information to the developer, right? This is the more information, no. What we need is basically an actionable insight that they can automate, they can build some policies, right? It becomes embedded into their update framework. And that's essentially something that was needed. And that's how I started with this project gauge, right? To modernize our release framework that would allow us to measure some release insights, provide us some recommendations. When we are using this open source dependency. And yeah, as I was building this particular project, one very interesting use case came along, right? And it came from our CISO organization. And it was not specifically related to the security, but it was related to the compliance. And yeah, I have Karleen to talk more about that. So many companies are... They have to comply with country-level regulations, not just us, but many corporations. So I'm just going to talk about, at a high level, the various regulations that are notable. The first one is the Trade Agreements Act. For government procurement, it is important to report on the countries that our products are manufactured in. And there's a list of U.S. designated countries that we must adhere to. So that's the first one. And the next is the OFAC regulations, Office of Foreign Assessment Control. And these are the sanctions. So these regulations enforce trade restrictions for purposes of national security and also foreign policy goals. So these are things that we have to adhere to. And that is the background of what we will help inform with GAGE. All right, so how do we use GAGE to solve this problem? I'm going to skip ahead one slide just for some visual context. I'm a very visual person. So we want to have GAGE give us information on, we have packages that we're taking in, we have S-bombs that we're taking in as well. What are the dependencies in there and where are they coming from? So we're trying to answer this question with the information available out there. And so the way we're doing this is this first section here on the left is my GitHub profile. So on GitHub profiles, you are free to add your own information. I think you can add like your own little bio of who you are, what area of interest you have, what company you work for, and your location. So this is what we're looking at. And this is totally up to the user to add or to not show at all. And so we want to inform on the overall package. We're taking this location and we're feeding it into an API. The reason why we're feeding it into an API is because oftentimes the location is just a string of something that could be as specific as just the city name or something super broad. Could be the country, could be just a region. So we want to normalize that using the API here. And then the API gives us a response of the country information. And that's the information that we're taking and we're collecting up and generating a report of that package and of multiple packages into an SBOM if that's how Gage is used in that context. Okay, so one step back. So this is overall summary. So that is what we're trying to do. We're trying to determine the country of origin of contributors. And this is just one aspect to build the bigger picture. We are, the way we start Gage and use it, we input a list of different countries we're interested in. It searches the countries using the method I described and then flags the contributors from those countries. And those, the results there is just one aspect of a bigger picture. It does not disqualify a package or a specific user at all in our judgment. All right, so how well does it work? The accuracy says 95%. So that is, if we have found a location, we're able to resolve it and normalize it 95% of the time. So that's pretty reliable. Challenges we faced, as I alluded to, oftentimes it's hard to understand what the location is. It's not as simple as just a string match. Does the location have United States written into it? Sometimes they're vague on purpose. There's this list, this is planet Earth. Sometimes people put that, I think that one is actually one of the more popular ones. <IP_ADDRESS>. And my favorite, I say sarcastically, is this shrug emoji because if there are any developers here, you know how hard it is to deal with edge cases and things like special characters. So this one was just a real fun one to come across after like hours of running it. All right, so next I mentioned API and rate limits. I want to talk about the rate moments a little bit. So we're using an API to go from the vague location into the country. And so first we looked at the OpenStreetMap API. We wanted to keep things open source. However, we saw that the rate limit of the OpenStreetMap API was one request per second, which was really slow. And for us, sometimes we have S bombs with 10,000 dependencies and it's not feasible to have that rate limit that low. So instead we use the WeatherChannel API. WeatherChannel is actually owned by IBM, fun fact. So it was really helpful to work with that team and use their API, which has been super helpful. I already covered that. And so this is what it looks like when you're actually using it. So we have this very big package that it was run against with 6,500 contributors roughly. We have this example of various countries to compare to. And for each country, it's going to have a summary of the number of contributors that came from that country. And also the percentage of contributions. So it's also really important for us to know if it's a notable amount of contributions to that package. If it's over 50%, I think that's an exception. That is very important to the teams that we give this to, I think. Yeah, thanks, Karleen. And just to be clear, right? So this is not my or IBM's point of view or this is not something we advocate, right? To be used as a general practice. Whenever you are using any open source software, this is not the general practice. It's just the spatial circumstances. As we discussed, like if I'm a corporate vendor, I'm doing some merger acquisitions or procurement or federal contracting. Only during those spatial circumstances, whether we like it or not, right? These are the federal regulations that we need to abide. And there need to be some automations and some technical vitally that we need here. And the only intention to discuss is here to discuss it on the technical details of this. That's all, right? Now, pivoting back to the core use case of Gage, right? How do we modernize our release engineering? How do we use Gage as a toolkit to modernize these releases? So first thing, do we need new things, right? There are open source, fantastic open source projects already there. There is Dependabot, there is Renovate. I really love this project, and I use them regularly. So they provide new updates whenever a new version of your dependency is available. But can we augment this thing? As we said, right? We just do need to know when the new updates are available. We also need to know whether it is safe to update to that version and what is going into that, what went into that particular version. We have Scorecard here. Again, another project that I advocate to my team, I personally use it. It gives you the point-in-time evaluation of your repositories. It scans all the best practices and gives you the score, whether your repository is safe or not. So why do we need new tool? So as I said, there are some limitations with using the point-in-time evaluations, point-in-time scanning. Let's say, this is, I'm showing you just the timeline. I enable some scans. I need brand production, I need peer review enabled. They were enabled. I ran the scan at T1. Everything passed. If I'm a malicious maintainer, I can disable this production, I can merge some commit, I can enable them back. And when the next time it runs again, it says, yes, your brand production is on, your peer review is on. But if you see, this bad commits has, or bad practices has been implemented and we cannot detect. And the core problem here is essentially not the this point-in-time execution. It's basically the GitHub or any SCM for that matter. They do not maintain this immutable record of the facts. Like if you make a change to the code, you get a commit ID. We don't have the same thing for the, if I change some security knobs, I don't get that immutable record. Some commit ID or some record that says this security knob has been changed. So that essentially is missing. So this is, I call, a temporal loss because if you look into the timeline, we basically lose some security assessment. And the second is spatial loss, right? If I'm running it against a repository, let's say main or head branch, the scanning, some scanning might not be transmitted to the individual package that I use. So I'm a developer, I'm using certain version of this package from this particular repository. And if I run the scan on the head, it says, yeah, there are vulnerability discovered. But those vulnerabilities were added much later. I'm using the older version. So I'm really not affected by that particular scanning results. So the scanning result doesn't really translate to my current use version. That's, I call a spatial loss here because we are basically looking into the spatial aspect of this dependency management. So that's why I said, okay, we need basically a way to bring this new insights, new data to the surface so we can make more sense out of it. So do we have more data available, right? So I look into the landscape of GitHub, right? And it provides so much information. It provides, it has source code. We have the change metadata in pull requests or issues. It provides security reports, developer insights, configurations, compliance details, release metadata contributors. It has so much data readily available. And there is so much data we can get from external sources, like stack or flow, another where we can basically marry this data to bring some more insight. We started with this. I said, okay, let's start with this particular data that we have. So what we are, what currently I'm doing in Gage essentially is for every release, I identify what are the pull requests or commits that went into that release compared to the previous version. Do they, those PRs commit, do they have labels, right? Do they have linked issues? Do they have, the issues have labels? This gives us, allows us to quantify or classify these particular changes. Who are the contributors who are contributing to this? Are these the core maintainer? Are these outside collaborator? What are the roles of these contributors? Who are the reviewers, right? Are these changes being reviewed? Are there in release nodes available? Are these changes and these releases signed, right? What are the stats and the insights, like top contributors, contributing metrics? All this data, we are curating. And the important thing is not to just throw this data to the developer, right? Provide them the actionable, something they can act on. So let me just, with that, let me quickly show you the demo. This is good. Okay. So let me just start this. So what I'm trying to do, I'm running basically this Gage tool. I'm telling it, I'm using one Python package, which is flask. I'm using version 2.1.1. And this is the Git repository where it is hosted. We have some logic where we can go over the Git repository even without, if you're not provided. And what Gage does, essentially, is goes and find out what is the next version that is available. So in this case, it tells us there is a new version 2.1.2 that is available, which is 28 days old. And you're only lagging by one release lag. Because there are some financial customers that I talked to that I mentioned. They have some policies that they cannot lag behind more than three major versions, right? For any of their dependencies. So we can basically build some policies around it. And then important thing, if you look into this, it tells you how many unique contributors contributed to this particular newer version, right? And if you see more closely, it has something called zombie audits, right? So these are essentially the zombie commits. So these commits are something they are merged directly with the main branch, right? There are no pull requests, nothing. Someone has just merged something to the main branch. And all the commits that went to this particular release they are to the main branch. And this is a risk indicator, right? I don't want to use this particular version because these changes are not reviewed by anyone. And then the second thing is, if I look into the annotations, change annotations, the levels that I was talking about, it tells us that the changes that went into were related to the testing, related to the docs, typing. So yeah, I can make an educated guess if someone is changing some documentation or something, so they probably haven't changed it. So if I'm more open to take some risk, I can say, yeah, that's fine. Based on these annotations, I can basically allow this particular version to be used, right? So this is essentially the kind of, and again, the idea essentially is to provide this so user can build policies on top of it. They don't need to go and look into this report every time they can say, I have policy that I don't want to update any version if the changes are not reviewed. Or if the changes are not related to any core components, I don't want them to be updated. And then this becomes automated. So the other example I'll just show you is this tensor flow, right? One of the most popular use library here. And it says, again, the same flow. And here you can see if you look into, it gives you the same insight. And now it tells you the change annotations, what components are changed in that tensor flow. It's a big library, right? It tells you that there is these components eager that change, core change, what size of changes are there. So from extra small to extra large are kind of changes went into this. And now as a consumer or the developer, I can say, yeah, I need this. I'm using this particular section of this library and I want them to be updated. So again, so this is how we basically currently using Gage. And I'll talk more about it, about how we can use it and employ it. The other thing is, I don't see Gage as limited to the packages on the open source packages, right? It should be extended to other open source currencies, I call them currencies, like any composable open source artifact that you're using, like image or any Helm chart, anything that is version, you should be able to use this on top of that. And yeah, I want to basically substantiate these theories with numbers, right? So we actually went ahead and ran this some survey. I'd like Carolyn to discuss that. Sure. So I helped do a survey of top Docker images over the course of a year. So what we were looking for is metrics such as how often are Docker images released? What are the dependencies in each release and how much are those changes over time and are there, how often are security changes that go into each release? So that was the sort of mindset that we had going into it. So I got to work. I used a variety of open source tools, which were super helpful. So the first step I had, I used was Crane. So step one, we have the Docker images we're interested in. Next we use Crane to get a list of all of the release tags of each image. And we wanted to get a history of how the releases change within a year. So that was May 2021 until now. And once we had that list, we generated an S-bomb for each one and we used SIFT to help with that. And then finally, we used GRIP to generate a vulnerability report with the input of the S-bomb. And then the very last step is to generate a table of all the information that we had gathered of the changes per release of each of the things, of the vulnerabilities, of the different dependencies and of the date of the releases. And so this is the table. You could see overall the average number of days and the average number of changes they're very varied. Just kind of tough to say. So the number of days between releases can be as low as like 19, can be as can be as a gap as long as 79 days and the average number of changes can be just a few between release but it could be an average of 53 such as Python and this is just a very small sample. The actual distribution I'm sure is even more varied than that. And the last thing we looked at was the percent change in vulnerabilities between releases and as we looked at the releases over time and the amount of vulnerabilities reported it was a very solid trend. I don't know if I saw any increase in vulnerabilities which is a very good sign but overall only at max amounted to 18% change in a reduction of vulnerabilities. Yeah, thanks sir. This was really eye-opening, right? When we see like we always take pride that I have the image I always tag it with the shot so I don't have to update it. But then when the next version is available I just blindly go and get the next version and again tag it with the shot. And I don't have the insights, right? What is changing? If you see there are like a 53 package change and well not all these changes are attributed to the vulnerabilities. They are not all 53 packets were changed because they are all vulnerability. There were some other reasons these packages were changed and we don't know, right? We just blindly updating these dependencies and that's essentially something that we need to change, right? We need to have this modernize this particular approach. So how do you put the gauge to use, right? So again, first-degree use as I'm a developer and building my code. I just want to use the CLI, right? So we have the CLI ready and this is again a pretty new project, right? I open source in last month and we are still actively working on it. So I have just created how progressively we can use it, right? So first-degree use as a developer I just use the CLI. I give it a package name or I give it a list of packages from SBOC and I say this is my config and go and evaluate and tell me if these dependencies are fine or not or tell me the new dependencies that I can safely upgrade to. The second-degree use case is let's say I'm a security officer and I want to imply some policies across my my organization. I can put some policies and then whenever a developer is making change and it triggers my CI-CD pipeline in the CI pipeline when I generate a bomb, I can basically find out, get the bomb if I can get the previous bomb and I say okay, these dependencies have changed either they are added or updated and we can run it through gauge whether these changes are safe or not according to my organization policy all the changes were reviewed in this particular new release there were no zombie commits that went into this release and I can automate this and I can basically enforce it across my organization. That's the second-degree use and third-degree use I would basically imagine is to be part of the package managers. We need to get away from these commands package manager, upgrade Y because I see a lot of Dockerfiles where the images were tagged and everything is run and upgrade Y. It doesn't really make sense, I'm pinning my image but then next step I'm basically upgrading all my dependencies and I'm doing it blindly. We need to get away with this and what we can do essentially is we can build our package manager our package manager to incorporate some more commands which says describe me what updates are available I have this policy that there cannot be zombie commit, there has to be reviewed changes and everything validate them whether these updates are validated against this particular release and also recommend me tell me I'm using this particular you know all my dependencies recommend me what are the safe dependencies I can upgrade to what is the safe path for me. I think that's where I see that we need to head to the open source where we can be basically more intentional more auditable when we are updating our dependencies. This project is open source I recently published a blog on Medium so it basically covers the same thing that I talked about so if you want to read more about it read yeah finally I think IBM is a big support of open source we are really involved in a lot of work stream we are very serious about security because it matters to us and we know it matters to community as well and we need to address them together so if you want to know more we have our code cafe on the fourth floor stop by say hi there are cool swag to collect we have some voodoo donor I think it was yesterday yeah so with that I think we get involved again as I said we are working with a lot of open source in the open source community so being on Slack email github whichever way you feel comfortable reach out and yeah that's all thank you Eva questions I don't need this you will talk about zombie community yeah yeah I just want to learn more about the zombie community how do you gather information from the gate and then how do you really help with the security concern so so zombie community essentially as I mentioned right so again this is not a standard time it's just something that came from no verse but it basically signifies that I have some commits and I don't have any history or any metadata associated with it like this committee is not linked to any PR these are essentially merged with the master so what we currently are doing is when I get a release I know the commit of that particular release and the previous release now I basically make a query to identify all the commits that particular that went into between that range right so there is a GraphQL query I make and get that data from Gita now for each commit I basically query it again to see if it is associated with any pull request if it is not that means it's a then I classify it as a zombie commit and yeah I think that is essentially one serious thing with any practice no one should be merging anything with the in the main branch directly without any any preview or any pull request any other question yeah so that so we are basically running getting two more right when we are assessing this release we are not looking into the location location essentially is a separate evaluation that we do separate evaluation we do but to your point right so when we what the data that we have is the only data that that is available with the Gita and as Carlin was mentioning that data is not reliable but that's the only thing we can we can work with so we don't have the information like the age or other PI associated with the developer with that and I personally think right if we we are basically serious about the identity we need to follow the model like Twitter right like it should be the responsibility of platform to validate verify the when they onboard any user it should be the responsibility of developer to put a like if you go to Twitter you have a tick mark that can say we have verified this particular celebrity right so similar things we should be done it should be done on the platform level because all we can do is the data engineering and the machine learning and everything but if you want to be basically intentional and this is again a sincere topic about identity but I think it should be the responsibility of platform like Gita about this thing to verify the identity and provide some indications like we have verified this particular developer and whatever these are the information you can create the other thing that I haven't basically thought about detail but I was listening to that earlier with the git sign right if you have certificate associated with that if you can access those is there something we can do with that right is there any information there in the certificate that we can use because if you are I'm using git sign to basically sign these my commits can I explore that further we haven't done that yet. Yeah and definitely agree with all those points I just wanted to reiterate that the ultimate goal is to comply with the regulations and so we are just performing our due diligence so we are just looking at what's available online we're not probing further we're just doing what we can with what's available and moving on. We have the one minute left sign. Yeah I think that's all that's all the time we had so thank you everyone for attending and listening to the talk and yeah if you want to learn more I'm keeping that in mind thank you. Thank you.


Hello, Oscillator Sync here. Arturia have just released the new 2.0 firmware for their wonderful esoteric, strange, and beautiful microfreak synthesizer. Along with some bug fixes and general maintenance, this new 2.0 firmware brings with it a couple of really cool new features, and I think probably most excitingly for most people, a new oscillator type. So in this video I'm going to show off some of the key new features, and then once we've done that we'll move on to taking a look at and exploring the new oscillator type. So the first feature I want to talk about is the chord mode. So by default the microfreak is a monophonic synth, but we can press the paraphonic button here to turn it into a polyphonic synth. Shout out to Mark Doty and we can play chords. This is a feature that really appeals to me because I'm not a very good keyboardist. Chords mode is really easy to make use of. All we need to do is hold down the paraphonic button and we can play in a chord shape, and now when we play any one note we get that chord shape moved across the keyboard, which is a great way for coming up with ideas. Now at the moment this chord shape has literally been moved around so I played in like a minor seventh chord, and we're getting a minor seventh chord across the keyboard, but hold that thought while we just move over and talk about the second feature because we'll come back to the chord mode in a moment because there is an impact of the second feature on the chord mode, which is really really neat. So the next feature I want to talk about is the scale quantization mode, and what the scale quantization mode basically means is that it makes it impossible for you to play a wrong note, and let's explore how that works. So this can be set either on a global setup so that it's across every single patch, or you do it per preset. I'll show you how to do it per preset. The global one is the same, but going into the global menu instead. So if we hit utility to get the utility menu up and we go into preset and scroll down here, we can see that we now got this option called scale, and actually just a note related to it is root note. If we go into scale at the moment, it's set to global, which means that if I've set a global scale, it will be adhering to that. We can also turn it off so that it doesn't adhere to the global scale and doesn't do any of the scale quantization feature. But we want to talk about actually what the feature does. So if we go up one more, we get to major. So what this will do is it will make sure that the white notes across the keyboard all fall within the major scale, obviously for C, it would anyway. But let's just move that across to minor, for example. And now if I play across the white notes, we can hear that I get a minor scale. I'm not having to go to the black notes to get a minor scale out of my C key. Of course, if I want to change the root note of the scale I'm working on, I can go click the preset button to go back to the utility presets, go to the root note, I can change that. So if I want to get a D minor scale instead, there it is, modes and stuff happening on C. But anyway, let's move back to C as I write new root note for the moment. So we have minor scales, we have our minor scale, lovely. We have the Dorian mode. We have a Mixolydian mode, a flat seventh, brightening up the sound. We have a blues scale. What you'll see here is that because the blues scale is sort of based off the pentatonic, some of our white notes are now the same notes. You can't play the wrong note as long as you're playing the white notes, but that does mean that some of the notes will repeat. We've got a pentatonic scale as well, and that's your lot. So I mentioned that this kind of feeds back into the chords modes. Let's just switch this back to global for a second and just think about our chords mode for just a second. I'll play in a major chord here, and because it's moving the shape around, every single note that I play on will be a major chord. However, if we turn that off for a second, if we go into one of our scales, so maybe I'll pick harmonic minor for some spice, perhaps. Let's see how this sounds. So if we go into our harmonic minor scale, so we've got that there. Now if we're going to paraphonic mode and hold it down, and I play in a chord shape like that, because the quantization is happening, I don't get that chord happening everywhere else. I get that chord shape squeezed into the scale, which is really cool. Minor chord there, major chord there, some spicy notes in there, minor chord, spicy notes, heavily minor chord, major chord there. And you can see how you can come up with these chord ideas really, really quickly, and it's super fun. So having that chord mode and that scale quantization mode happening together is just a one-for-one thing, and I think for my money, I'll probably use them together most of the time. I don't think I'll probably use the chord mode that much without turning on a scale, because just get these ideas happening really easily, which I love. Okay, so getting on to the main event, the new oscillator type. So if we scroll all the way to the right on our digital oscillator type selector, we get to this new noise oscillator. I understand that this was a request from a lot of users, but the way it's been implemented I think is really neat and kind of interesting. So I'm just going to set this up into a kind of a default display, because I'm going to turn the shape all the way down, I'm going to have the timbre all the way up, and we'll turn the wave all the way down. So what have we got here on the noise oscillator, and what do the different controls do? So that's where we're starting. So the wave knob will blend between three different types of noise. So we start out with this kind of particle noise, move away into white noise about there, and you can kind of hear just on the edge of that, as I scroll further up, we get into this kind of metallic noise, which is really cool. Okay, so I'll just put it in the, somewhere in the middle there, so sort of white and metallic in there. So the timbre knob kind of does a sample rate reduction on the sound sort of. It sounds like there's something else going on in there as well, I'm not entirely sure, precisely what's happening on technically, but as we turn the timbre down, it kind of sounds like a bit crush and sample rate reduction. So on our metallic noise, it's adjusting the pitch of essentially loads of aliasing in there, which you know, is a good thing, as far as I'm concerned, with a noise source, I want weirdness happening in there. On the white noise here, it's a digital noise source, and you get this just that's like eight bit noise kind of arcade machine, Nintendo Entertainment System. That's a great sound, especially when you start to hear it. Anyway, and then on the particle noise, kind of here it gets sort of almost squeezed, and then right down at the bottom, we get our vinyl noise.  So on the shape control, this blends in and then changes the timbre of a sort of standard tonal oscillator as well. So kind of coming in, sounding a bit siney, a bit triangle-y, and ending up kind of pretty square-wavy. Notice that the noise doesn't disappear there, even when you've got all of the oscillator part of the oscillator in there, you're not getting rid of the noise. Also worth noting that the oscillator part is not getting decimated in the same way that the noise is. So this is kind of like a blending in of an oscillator that's kind of independent of your noise source altogether. Okay, to finish off, let's try and make a patch just quickly using this new oscillator type. So the first thing I've got to say is that I'm going to go to the metallic noise, with a tiny bit maybe of the white noise behind it, because I think the metallic sound is just ace. And we'll just take our oscillator bit out for a minute. What you'll notice is that the pitch of the noise, if that's even a concept that makes any sense, does not change with playing across the keyboard. But we could get something happening there in our mod matrix, because if we were adjusting the rate control along with the position of the keys, that would be a great way to get some tracking of the pitch on there, if you like. So if we go down to the key up and we want to adjust the timbre, and we'll just crank this up to full for the moment. So now as we play different notes, we're hearing different pitches.  But what you end up with if we bring in the oscillator, it's kind of these cool overtones, which I still kind of quite like. The other thing I should point out is if we were dealing with our white noise source, take out the shape here, we can get our eight bit noise playable, which is pretty cool. Maybe we'll have a bit more of a noise in there. So one way that we can kind of force some pitch on to the noise sources by using the filter resonance, which I think is quite a neat idea. So let's use our high pass so we don't constantly take out all of the bottom, sorry, all of the noise or the top end of the noise. Oops, I apologize for those of you on headphones. Let's try and tune it. Cool. And then if we go back to our modern matrix here and we have it track the cutoff, it takes them with the, let's back out. Let's just stick with the eight bit noise there. Just kind of a cool sound. It adds loads and loads of bottom end, which is a cool sound. And we can bring some of the oscillator back in now. Cool. And this kind of feels like I want to get some randomness into here a little bit. So maybe if we use our random source, on our LFO, we'll have it synchronized sixteenths. And maybe we can send that to the wave. So we're changing the type of the noise. Go around to our LFO here. Sorry. I reckon if we apply that from our peggater, give it some spice. So yeah, as you can tell from the fact that I just lost myself in a jam there, I think there's loads of potential in the noise oscillator for doing loads of corny things. And it very much speaks to the character of the synth already and that it it's quirky and it's noisy and it's got these weird harmonic things that it can do. And I just think it's it's a great addition. And I am super excited at the idea that Arturo might add some more oscillators. And I'm really stoked to see what they might come up with.  If you did enjoy the video, please do give it a thumbs up and make sure you are subscribed to the channel because there'll be lots more stuff coming up. I've got an idea for this new oscillator, something that I do on a lot of synths, but I haven't yet done on the microfreak and now I'm quite excited to get going with. So we'll see if that's something that appears on the channel fairly soon. I think you'll also be seeing the microfreak on a jambuari jam pretty soon, for certain, I think possibly even tonight. Anyway, thank you so much for joining me as always. Take care and I will see you again soon. Bye bye.


In this video, I'm going to explain the process of creating a Zoom meeting with registrations. The advantages and disadvantages of registration. So let's dive into it. When you create a Zoom meeting and enable registration, you can create a customized registration page with banners, logo and add fills that participants must enter. This gives you greater flexibility in managing events as you can plan your event based on the number of registrations. In this example, I created this banner clearly showing the details of the event and added the organization logo to the registration page. The name and email address are standard fields of Zoom. I created two custom fields, the district and the club name and made the mandatory as indicated by the red a strict sign. Let us see how we can do something like this in Zoom. The process starts when you schedule a new meeting. Enter the details of the meeting for example, choose the date and time and the rest of the parameters as you would normally do. To convert the event to a registered event, all you have to do is click on the registration checkbox. Once we enable registration, participants can join the event only after completing the registration process, which may be approved or rejected by the organizer. Let me complete the process and save the event. Here is the event I have created as a registration event. When I scroll to the bottom of the page, I have a new option called registration and branding. Let's first set up the branding for the event. Branding allows you to define two elements for your registration page, the banner and a logo. The suggested dimensions for the banner is 640 pixels by 200 pixels and this is the maximum dimension 1, 2, 8, 0 by 400. So make sure that when you create a graphic for your banner, it follows this dimensions mentioned here. Similarly, when you want to upload a logo, the suggested dimensions are square logo of 200 by 200 and the maximum dimensions are 400 pixels by 400. Let me choose a banner and a logo that I have on my desktop. So this is my banner and this is how it will appear. Similarly, I can upload a logo that I have on my desktop and now my branding is completed. Let's move to the registration configuration. This page allows us to view the current registrations. It is zero as of now. To view the registrations, we can click on the view button. The page also shows the registration options. Currently it is set up for automatic approval. This means anyone who registers can attend the event. We can change all this by modifying the registration setup and to modify, click on the edit button. The first thing you want to decide is whether the registration will be automatic or manual. You could choose a manual approval option if the number of participants are limited and you want to ensure only the participants that meet your criteria attend the event. For example, they are club members. If you want to receive an email whenever someone registers, click on the notifications setting. This is ideal if your event is small. If you expect hundreds of registrations, your inbox will get flooded with all the emails. I'll switch it off for now. Other options that can be enabled or disabled are whether the registration should be automatically closed after the event date, whether you want to allow attendees to join from multiple devices with the same link and finally whether you want to show the social share buttons like Facebook, Twitter and email. If the social share buttons are enabled, it allows participants to quickly share the event with their friends with a simple click. Next is the list of questions that you want the attendees to fill. First name and email address are required and enabled by default. You can choose to add any fill from the list of standard fills provided by Zoom and decide whether they are mandatory or can be left empty. Let's say I want to enable last name as a mandatory fill, city also as a mandatory fill and finally questions and comments. I will leave it optional by not clicking on this checkbox. Finally you can create custom questions that participants must answer and make them required or optional. Let's say I want to add a question for the participant to enter his club name, so click on the new question and pose your question to the participant and enter your club name. Let's say I want it to be a mandatory fill so I will make sure that the required is on and it will be a short answer. That means he will type a short text as his response for this question. Click on the create button. Let's add another question and this time I want the participant to choose from a list of available options. Let's say we want to know his designation in the club. So I will ask the question, please enter your designation and the available choices are let's say president, VP education, VP membership and let's say others. Click on the create button and save both the questions. If you want to preview how our registration page will look like, go up and copy the link and open it in your web browser. As you can see the banner page comes on top, your logo is here, the title of the event, the date and time and these are the questions that I have created. As you can see first name, last name are mandatory fills, email also is a mandatory fill. We made CT as a mandatory fill. The questions and comments as you can see is not a mandatory fill. The club name we had created as a short answer. So let's say a club name is bright horizons and as you can see in the drop down for your designation it shows us the four options that we had typed while creating the question. So the person chooses president fills up his details and then clicks on the register button. Once your registration goes live you can come back to the registration page to check the number of registrations, how many are approved, how many are pending. In this case I have an event where I created manual approvals and I can see that as of now there are 107 registrations out of which 103 are approved. If I want to check which are the other four registrations, click on the edit button and here we can see that I have 103 approved registrations for the event and four are pending approval. Let's say I want to approve this person. So click on his name and click approve. So now it has become 104 registrations. For registrations that are already approved you can also take actions on those participants. For example, click on a name and you can either cancel the registration or you can resend the confirmation email. You can scroll through all the registrations by clicking on the page button. If you want to download the list of all registrations in an excel file click on the account management, go to reports and choose the meeting reports. Choose the event date for example, click on search button and this is the event. Choose and say generate the report. You have a choice of selecting all the registrants or only the approved registrants. Let's say I want to send them a reminder email with some additional information about the event so I can click on approved registrations and click continue. It will appear in your report queue and you can click download. This will download the list as a CSV file which can easily open in excel and then take further actions on that data. So there you have it. If you want to host an event in Zoom with registration then this process will allow you to have complete control of the event. Now what could be the disadvantages of a Zoom registration event? If you want to share your event with others with a simple ID and a password this is not possible now. Every person who wants to attend the event must complete the registration process and that can be quite a challenge when people want to join at the last minute and they are struggling to find the registration link, fill up the registration form and then join the meeting. But if you want an event where you have complete control then registrations is the way to go.


The COKNOR DOD portion for this exercise here is basically practicing repair after an attack. So over here, the DOD you'll see downrange is basically doing explosive mitigation to take care of submissions and any kind of UXOs out here that we can do at a safe and expedient manner. It's not as simple as paving over the runway since there's a bunch of different factors that also take place into it. So the joint mission that we have out here is to basically help our partners understand what the easiest way to do this is. The most important thing is definitely gathering people from different units, different partner nations, and then coming together and improving the situation as much as possible.


Guys welcome back to the independent investor channel You know a lot of the benefit of tuning into a channel like mine is I get to share my personal tutorial I think a lot of people when they get involved with the stock market They get advice or they get recommendations from somebody and they don't understand why they do what they do And I think understanding the why is going to help you persevere during times of volatility when the stock market Gets a lot more difficult to hold true and those recommendations that you may have gotten from somebody else may have sounded Really great at the time that you got them But if you don't understand why if you don't understand what strategy is being placed behind a specific investment I would rather see you not invest at all Because chances are you're gonna incur that volatility and you're probably going to get shaken out of the market And that's the last thing that we want to see happen what we want to see happen is investors get involved with the stock market in either a defensive capacity or an Offensive capacity or all of the above but in any case you want to make sure that you can stay Tried and true on your program and making sure that you get just about as in line with your risk Colorance to the stock market that you can possibly handle to stay and hold true for the long term and not try to be Wishy-washy on the market if anybody's paying attention to this market We just gained back a thousand Dow points and we did it with nobody talking about it The the market dipped quickly below 30,000 for a short stent and we Raced back up over 31,000. There's nobody out there guys that can Effectively time the market on a consistent basis. There's a lot of people that would have you believe that they can And it's just impossible. So what we're going to do is we're going to share my five investing really philosophies It's tech. These are techniques that I actually do I share tidbits of these philosophies on the channel, but This new setting of mine allows me to come on and really help explain to you Why I do these certain things and why when you couple these things together They make all the sense in the world and they can make sense for you too And the idea is that you identify the why for you so that you can hold true of the long term Let's get into it. What makes the independent investor channel very unique in nature is that I don't go with a financial planner I am just that an independent investor. Some may consider it a self-managed investor Some may consider it a self-directed investor in any case We seek out our exposure to the stock market and we do so without the compliments of a financial planner And for a lot of people they may say hey time out Ryan. I'm out. I need to have my financial planner professional I think people are becoming very very hip to a couple of things and here they are Financial planners are expensive. Okay, financial planners do not work for free. Okay The industry standard of fees over time is going to run you about two to three percent management fees A very simple calculation will give you the insight as to why this needs to be something that is acknowledged And it is something that is either accepted and understood of the ramifications over the long term Or something that's avoided all together And I know enough about the bottom line savings over the course of a lifetime Which could render hundreds of thousands of dollars to the bottom line investor by just taking a different strategic angle And it doesn't give you any less of a strategic Disadvantage to the market. It's actually contrary to that depending on the financial planner That you may choose to opt with you may be pigeon-holed into a suite of products That may not be in your best interest and I may beg to suggest that it may actually be in the financial planners Best interest to sell you those products may be a high-priced mutual fund As opposed to going with a low-cost entry ETF, which vanguard has really coined and captured the market a Lot of the other major brokers of course offer similar products whether it be total market exposure Or dividend ETFs. They're all a wonderful way of entering into the stock market and doing so passively in markets without being subject to The whims and ways of what somebody else thinks is good for you And I always contend that for people who don't want to know anything about the stock market Perhaps maybe a 401k or dare I may say a financial planner professional could be good for you But the sheer reality is that you can do it on your own And there are products out nowadays to assist in just that number two And it's coupled with the no financial planner type of objective if you looked at the total expense over my portfolio I manage around a half a million dollars of assets. I do so on a blue-collar salary And if you looked at the total expense over my account the single stocks that I own carry zero And so I invest for free and any more this is key within the last five years Brokers like Robin Hood have really turned the market on its ear And it's really forced a lot of the major brokers to come on board and provide Access to stocks free of charge. So there are no more entry and exit fees There are assisted trades out there, but who in the right mind is paying that in 2022 I have no idea why or how you would ever do that as well as with maintenance fees coupled to Roth IRA investment accounts hundred dollars a year for what you're you're not paying for anything other than just an Arbitrary fee that the financial planners have just decided to attach to your right to own these accounts outright so the real key in being an independent investor is really adhering to that idea of lowering drastically Producing or even eliminating in certain capacities the fees within the accounts a strategy That's different from me and a lot of other investors out there And I catch a little bit of flak for this as I own multiple accounts The accounts that I own could house some cryptocurrency. It could house some bond investing with some fixed income I do own my 401k like retirement account with my employer I do have a dividend growth Strategy I do have a passive strategy in two separate accounts And finally I've got my flagship accounts with the Roth IRA and about a half a dozen taxable brokerage account So all told I'm up over 20 buckets and a lot of people might think that's crazy You should consolidate those buckets down. Just wait a second You need to understand that each and every one of those buckets are achieving a Specific strategic advantage for me, whether it be the savings account Whether it be the Roth IRAs the tax protected and low expense account for myself and my spouse Or it be the 401k program the thrift savings plan myself as a government worker enjoy and It makes it so much easier to manage those programs And it makes it really easy to identify those pockets and the portfolio that may be performing Well and even some of those areas in the portfolio that may be taken a little bit on the chin And it allows me to kind of observe and monitor the portfolios I don't mix buckets if I'm going to fund the dividend growth strategy I do so and typically I adhere to a dollar cost average program for all of my accounts Minus the hyper growth stuff which is really kind of an investment and and hold and monitor those those assets But for those good well-established companies in the dividend growth and the passive buckets I just fund those and I found that over time even starting a new account with just five hundred dollars Can really help in building up your your assets bucket I would not recommend that a new investor try to establish 20 accounts at the same time But what I would suggest is always looking to evolve and always looking to build out your strategy And I contend that multiple buckets as well as multiple holdings within your portfolio Can really round out and and really make a dynamic portfolio for you Of a lot of different moving parts when you're off earning that money maybe at your nine to five job You know that your portfolio in many different aspects are working for you one thing that I do in my strategy that Allows me a lot of freedom and sleep easy time is I do save to cash, and this is something that really It does fit in with my philosophy of being an independent investor a financial planner is not in any way or Capacity going to justify sitting across from me with that type of money and say it makes sense for you to have 30 40 50 thousand dollars of cash on the side that money needs to be working for you and There is some truth to that But here's the here's the ironic part when the market is going bananas everybody says people who are in cash or crazy But then when the market rolls off 20% like we are in right now cash is king I'm strategically funding the market low, and I'm taking the opportunity cost of those dollars that were stagnant yes for a long many months and Injecting those in the market at a time that is more conducive to add to the market now Don't be don't be misinformed in that the cash on the side Affects my dollar cost average schedule see I do both So when it's time to actually put lump sum investing that's where the cash comes in But I'm always trickle feeding the market through a dollar cost average strategy And the last thing that I'll mention here I think a lot of people and there's a lot of people out there that don't invest 58% of households out there are living paycheck to paycheck. So what gives I think people really need to be turned on by the idea of Wealth building for them and their and their families a lot of households out there Do not put the proper adherence to and attention to the idea that you become a wealth builder Okay, it doesn't mean become a gambler if you don't even like the word investment don't use it talk about building wealth and just as I've expressed you can build wealth and a lot of different capacities in Your life whether it be saving to cash whether I can actually get an infusion of cash Put that cash away and save it for a rainy day Whether it be increasing your dollar cost average strategy to your dividend growth portfolio by 25 bucks Maybe looking holistically at your portfolio and and really just monitoring the funding streams that go into the portfolio Me personally Two out of every ten dollars that I earn goes right to my thrift savings plan That is one bucket to write before I even get paid that goes into my employer sponsored thrift savings plan or 401k like program for you guys that have the same so I'm always Analyzing and seeing whether or not I'm eligible to increase that as the surplus capital in the budget increases Obviously, that's an area of focus where I say either nay or yay to increasing those contributions to that Once the paycheck comes in we always fund to the Roth IRAs every year from a max perspective And we're always trickle feeding the smaller accounts the dollar cost average into those accounts and it really separates me from a lot I think I if I was gonna earmark and give you some idea We're probably looking at about twenty five hundred dollars per month That goes to savings and you know twenty five hundred dollars anymore really doesn't get you a whole lot, okay? But the compounding effect coupled with that at which what I would chalk up to be a pretty aggressive funding cycle I can really accumulate to something special and I think in the few coming short five to seven years I think that's probably gonna put us at that seven figure mark and you know The reason that I come on here isn't to have people look and say well I want that six figures to of course you do I think the deeper question is to understand and ask yourself how does Ryan How does Ryan do this and and what makes sense? Why does Ryan do what he does and and why does this make sense to me? And that's what I look to share with investors out there because if you're to the market and you come on and you Get an insight like mine From an investor that's been investing 25 years It can be very very useful and very very powerful To get you into the driver's seat sooner than later in your life and become an investor and Move out of the arena of being a non investor and and becoming a participant in financial markets guys If you enjoy the content coming through to make sure and subscribe to the channel leave your comments at the bottom of the video if I've missed something I've missed some of the unique aspects of Independent investing that is the beauty of it. Nobody tells me what to do and I expect that nobody Should tell you what to do as I presume that you are the best advocate of your money guys Thank you so much for tuning into the video and good luck in your investment future


Hi everyone, Joe for jaspyscasebrakes.com. Happy Tuesday coming at you with a dual case break of 2020 Panini Donaris Optic Football dual blaster case break. 40 boxes total, random team break number one. No vet common ship in this but all the good stuff does of course. Big thanks to everybody here for making this happen. Thanks to the people who bought their spots straight up and congrats again to the people who won their spots in those filler breaks. Always look out for those on jaspyscasebrakes.com. All the teams are in, all 32 teams are in. Let's do it. Roll it, randomize it four to two, six times for names and teams. One, two, three, four, five, and six. We got Daniel down to Eric. Four to two, six times for the teams. One, two, three, four, six. All right, so we got the Cowboys down to the Rams after six. All right, Daniel, Dallas Cowboys, Brian with the Packers, Allen with the Bengals, Gale with the Broncos, Dylan with the Chiefs, Brandon with the Browns, Aaron with the Jaguars, TJ with the Texans.  Last spot Mojo hits 100% of the time. Andrew, Saints, Anthony, Seahawks, Sean Maddock with the Bears and the Colts, Brandon with the Washington football team, Ken with the Ravens, Paul with the Falcons, TJP with the Lions, Miles, Cardinals, Brian, or check that Kevin Crouch with the Buccaneers, Sean Peterson with the Patriots, there's Brian Crouch with the Carolina Panthers, Robert with the Giants, Brian with the Steelers, Fouad with the Jets, Kip with the Chargers, Daniel with the Titans, Oliver Smith with the Dolphins, Ryan with the Eagles, Sean M with the Niners, Robert with my Raiders, and Eric J with the Los Angeles Rams. Let's sort by column B. We're going to pause the video and allow for a little bit of trading time. When we come back, we'll see if there's any trades and then we'll have that dual case break, stick around, BRB. All right, welcome back folks. We had a couple of Brian's trading here. Brian with an eye, Brian Watford is out of the Steelers spot and now in the Carolina spot. We'll put T there for trade and Brian Crouch is now in the Steelers spot here. We'll put T next to there, next to the team name for trade and now let's print and rip 40 boxes. Big thanks everybody for getting in on it. You see both cases right there on the top camera. I'm actually gonna put this case back here. I think you can see it on this camera right here. This bottom case started first. Now each of these cases should take about 30, 40 minutes. So settle in. So we've got a lot of boxes. Let's make rows of five. Right there. Open up five blaster boxes at a time. Thanks everybody. Yeah, that's right. There's one hollow parallel per box. So yeah, we'll see. We'll see 40 of them and hopefully most of them will be rookies. That's the idea anyway. Jeff Dorlak, what's going on? Who would have seen your Yankees would pass the Red Sox? Are you saying who would have thought that the Red Sox would be at the Yankees at this age of the season? I kind of feel the same way. Here out west, I didn't think at this age of the season that the Giants San Francisco baseball Giants would be ahead of my Dodgers. But here we are. A strange 2021. Usually I try to keep the topic of conversation related to the break itself. But since this is going to be kind of a longer break, ladies and gentlemen, I'm sure we can float around different sports topics here. Pirates are in here in LA. They're going to play the Dodgers. That game should be starting in about 20 minutes or so. I've been actually having a decent year in fantasy baseball this season. So I've not quite gotten into fantasy football mode just yet. Anyone have any early sleeper picks that they want to share? David, what's up? If you get two teams in the Prison Baseball Random Team filler, does that count towards the giveaway at the end? Yes.  Because your name will be on the list right there with the teams. It's a good question, yes. Suicide Jax, what's going on? Joe, what's my thoughts on SGC grades? I don't know. I feel like there's a few third-party grading services. I think in the long run, Beckett and PSA are still going to be the top level of graders grading. At the moment now, maybe my opinion will change next summer. But I think as of now, it's still kind of early. It feels a little early. Eventually we should be able to see which grading services start to become the dominant third-grading service out there. SGC could be one of them. They had a big presence at the National this year. The HGA, I think, could be another one, is Rayquan Davis, Antonio Gandhi-Golden, CD-Lam Rated Rookie Hollow. So it's these commons that won't be shipping. But obviously, all the rookies will ship. These are special parallels. Those will of course ship. Rated rookies will ship. These two won't ship. And all inserts, of course, will ship. Zach Moss, Rated Rookie Hollow, Lynn Bowden Jr., Jake from State Farm. There's a Tua Elite Series Rookie Insert for Miami. That's going to be for Oliver Smith in the Dolphins. Once again, here's a final printout right here. I don't know. What do you think about SGC? KJ Hamler, Rated Rookie, Trayvon Diggs. There's a Rated Rookie Joe Burrow, just base. Alan with the Bengals. Or I guess another fantasy football-related question. Which of these rookie players, the rookies from this year, which one will have, will continue their campaign? Will they look good or will they look bad? Who's the real deal? Who's not from this rookie class? Joe Burrow? I don't know. He got injured, so we don't really know how he could have finished this season. Maybe guys like AJ Dillon showed some moments. Gabriel Davis, maybe, for the Bills. Brian Croft. What about AJ Dillon for the Packers? Brian Watford. Maybe Joe Burrow. Maybe he'll keep things going. What about LaMichael Pirine? There's a hollow right there. Dillon and Lyon says Justin Jefferson real deal, so that's no fluke. Olm's thinking Justin Herbert will have another monster season. That'd be good for the hobby. Yeah, I mean, Justin Herbert was putting up those numbers with arguably a not very good coach in Anthony Lynn. So imagine him with a year of experience under his belt. A fresh perspective on that head coaching staff. That could be big. David Rodriguez thinks Burrow will move up in the ranks. Yeah, he does have a lot of weapons. If his offensive line can just keep him upright and protect himself a little bit, yeah. Brandon Iag for David Rodriguez as Niners. Okay, I like that. Mark is thinking Herbert and Tua will look good from this draft class. If only for the fact that they both have some good weapons, good offensive weapons on their team. Olm's thinking Tua's question mark though could go either way. It's a weird season because a lot of these rookies didn't really have especially it's difficult especially different for the quarterbacks to not really have a camp not really be you know, next to their teammates kind of building chemistry and all that. Although Herbert did fine. Burrow did fine. You know what I mean? But maybe it maybe not not everyone's the same. Maybe maybe Tua does need a little more of more of that active team building together to really get into a groove. Now I wonder if Jacob Eason could be a by low candidate doing a live saying Jacob Eason might see his cards go to the moon very soon. Jacob Eason could could get a could get a few starts if he does well, you could probably get Jacob Eason cards, maybe even rated cards online for I can't imagine maybe that I'm sure they might they're probably going up now but Tua was saying last year that he was just not comfortable. He just didn't really have the playbook down. So what they could what what they could do with to was very limited. But now I think he's he's supposedly on track. See the comments from Ryan Fitzpatrick. He he he was pretty he was pretty stunned that they made that change. He knew the change was going to happen. But he was done that that they went with to us so abruptly.  So that's a little interesting to who's the wide receiver drafted this year that makes some noise this season. Eagles fan Jason says Devonta Smith. Is he is he healthy now? Okay, good. Back to practice for him. That'd be great. Devonta Smith hurts to Smith. Could be the call all season long. Speaking of Jacob Eason, there's this relic rookie phenoms relic for the Colts. That's going to be for Sean Maddock. I feel like there's a lot of good wide receivers this draft class. Jordan Love rookie card for Brian Watford. You know, Gandhi Golden showed some moments. I don't know. Who do you think? Olms? I would think that maybe guys that have had like Jalen Waddle reuniting with Tua. Maybe Jamar Chase reuniting with Joe Burrow. I mean that that chemistry might give them an early an early edge. It could be a good thing. So we'll see Brandon is not sure we've seen a Browns card. This is a 40 box break Brandon. We've got a long ways to go. I think we're barely 10 boxes in. Wait, which which one's your guy? Olms? There's Brandon Iac for Sean and the Niners. There's a Browns card right there. There's been a few. There's Tom Brady. Brady for the Buccaneers. Kevin Crouch. Oh Chase. Him and Bergen have a real good year. Olms is thinking. Yeah, they've got that chemistry already. That's got to help. Should help. There's T Higgins. Burrow also has this guy too. Don't forget about T Higgins. Rated rookie hollow for Alan and the Bengals. There's our first Justin Herbert rated rookie card for Kip and the Chargers. Just a base version Kip but all of these will add up. Hopefully there'll be more. There's Justin Herbert, the rookie series. Here's Tom Brady again for the Buccaneers Kevin. There's Jacob Eason. Are we buying low on Jacob Eason? There he is. Rated rookie. That's for the Blue Horseshoe, Sean Maddock and there's the rookies insert Justin Herbert for Kip Kip Hurray. DeAndre Swift rated rookie. He's going to be running behind a pretty nice offensive line. TJ Poyer. Maybe he has a good second year. Chase Claypool our first two a tongue of our low up. Oliver Smith and the Miami Dolphins. Chase Claypool could have a good second year. Pittsburgh. Brian Crouch with the Steelers. Got the Steelers in a trade. Alright, another five boxes here. Drew, are you are you breaking the Hit Parade Hockey tonight? Yes. Alright, next five boxes, then another five, then another case. This is our 40 box dual blaster case. Great. Thanks everybody for getting in. Appreciate it. In a non PPR Lee, who am I taking first? King Henry or CMC? Derek Henry. I feel like Derek Henry. At least I mean, I know everyone says this but I feel like Derek Henry wants to break some records this year with that 17th game. I think he's preparing his body and himself to to to not only play 17 games, maybe break some records doing it. I think he can. I think he can do it. Yeah, Odell Beckham Jr. is kind of falling off the map a little bit. The the his but his AC did he do his ACL last year? Was it Achilles? But that injury last year kind of took him off the radar. But I wonder if he's going to be a good by low candidate this year. Yeah, there's been plenty of Vikings in this. I'm sure we've breezed by a lot of Vikings just not Justin Jefferson. Yet, we still have a ways to go. Remember, there's another there's another whole case we got to do. Plus, these five boxes, another five boxes, another 20 boxes. There's Justin Jefferson right there. See, got a play of the whistle, folks. There's Justin Jefferson. A long ways to go. Long ways to get to get even more Justin Jefferson's hollow Justin Jefferson's maybe. It's Clyde Edwards, he layer rated rookie hollow. That's for the Chiefs. Dylan Johns with Kansas City. He has a good second year. That's hashtag good for the hobby. There's Nate's down another Viking. There's Jalen Hurd's rated rookie or these are these what if I don't even know the names of these parallels. So many. What do we call them? Purple shock. There you go. Purple shock rated rookie Jalen Hurd's Eagles. It's going to be for Ryan. Jeff's asking what about a healthy Marshawn Lynch? Yeah, he's pretty healthy right now. Jonathan Taylor rated rookie hollow. And we got a relic Jake from State Farm rookie phenoms relic. I want him to start somewhere so they can get started quarterback somewhere. Buffalo Bill's Brian Croft Buffalo. Because get that state farm money. He's got to right? Jake from state. That's got to happen. There's Van Jefferson rated rookie hollow. Eric J and the Rams. Another Clyde Edwards, he layer for KC for Dylan. Oh, and a nice purple shock to a tongue of I love here's Jonathan Taylor rookie phenoms relic for the blue horseshoe Shawn Matic and purple shock rated rookie to a tongue of I Loa. Oliver Smith in the Miami Dolphins. And there's a rookies insert Justin Jefferson for Freddie and the Vikings. CJ Henderson rated rookie hollow. Nate Stanley for the Vikings just another base Justin Jefferson. All right, another five boxes. Then another case. Dodgers getting underway here. David Price on the mound. All right, good luck. Next five boxes. The Browns really just straight trash after all those draft picks. I mean, they got Baker Mayfield is pretty solid. They're a pretty good team, aren't they? I feel like the Browns are finally finally kind of getting it together. I guess maybe outside of Baker Mayfield. But somehow they've they've constructed a pretty good looking team at least last year they did. I hear you're doing it live. I hear you got another case to go man. It'll be fine. Another whole case to go deep breath. Don't start stressing until we're maybe at the last five boxes of the next case. We're only in the last five boxes of the first case. Not stress time just yet. Grizzlebees. What's going on? Alright, so stuff like this, the Davenkuk hollow will ship veteran comments won't ship but inserts like that definitely will ship. And obviously, inserts like that will ship. And James Morgan phenoms, it's a relic that'll ship. That's for the jets. That's gonna be for Fuat and the J E T S jets jets jets. Yeah, maybe maybe Nick Chubb would have been more of a favorite in the hobby if AJ Dylan hollow if cream hunt wasn't taking away his touches. And another to a tongue of I loa rated rookie purple shock for Oliver Smith and the Dolphins. Grats. Brandon I a graded rookie hollow for the Niners. Sean Maddock. Jonathan Taylor purple shock. Colts. Jalen Hertz rated rookie purple shock. Ryan Hynes and the Fly Eagles fly. And we got an Antonio Gibson rookie phenoms relic for Washington. It's Brandon and the Washington football team. Antonio Gibson rated rookie hollow. Oh, Alan's looking for a little purple shock. Love for Cincinnati. Yeah, we've seen a couple twos already and it hurts. Maybe maybe a Herbert or a burrow. Purple shock. Pretty nice. There's CD lamb rookie phenoms relic for the Cowboys. Daniel and the boys. Cam Acres rated rookie hollow poor cam Acres. Maybe a hold on to this one for the next year, Eric. Tommy Stevens hollow and Christian Fulton. But wait, there's more. We've got another 30 minutes to go. We're not done yet. No need to worry just yet. Oh, Oliver. Yeah, who's into the NBA Summer League championship? I've got I've got Pirates Dodgers on but maybe Summer League is more exciting than Pirates Dodgers. It's pretty a little bit. Not plenty of time for the Dodgers game. Oh, King Celtics. Alright, all 20 boxes here. We'll do another five at a time. Good luck, everybody. Second of this dual case break. Case two. So Oliver, who's been some of the highlights in the Summer League? Okay, I guess it goes to everybody. Who's been the highlight of the of the NBA Summer League? What second year or rookie players have stood out? That Zags kid, Brandon saying? Jalen Green, right? Kate Cunningham. Some people arguing. I've heard some people argue that that Jalen Green should have been the number one overall take as opposed to Kate Cunningham. All Filipinos claim Jalen Green. Yeah, doing it life says he's my Filipino cousins cousins cousin. I don't know if that counts. Jalen Green plays like a young Kobe that's that's a hell of a bar to set for a young player like that. What are some second year basketball players that could be hashtag good for the hobby? I'm here in Payton Prichard on the Celtics having a solid Summer League could help his value. Maybe second year players like James Ramsey. Yeah, I think I mean, I think with especially with basketball with these kids, you know, declaring so early. A lot of times sometimes it takes, you know, not every player not every rookie is going to just just emerge all of a sudden in their first year and become incredible. Some players do obviously, but some players may take a little more marinated. You know, a couple of more years under their belt. I think like Jamal Murray is a good example. I feel like Jamal Murray's first couple years. Everyone was just like, what? Okay, cool. Jamal Murray. A lot of people definitely didn't care when we were ripping open a lot of 16 17 basketball. Obviously, he's developed into a really fine player. There's some players that are like that. Desmond Bain, maybe grizzlies could be a really interesting team. All right, another case. Good luck. Gabriel Davis purple shot. Jordan love rated rookie card. That's for the Packers. Brian Watford, the Gabriel Davis for Buffalo. Brian Croft. Michael Graves like Suggs. Suggs gonna be the men.  Maybe the first RPA in basketball that you're going to chase. This week in the chase, there's Chase Claypool, a couple of Grant Dell pits and another purple shock to a Tungva Loa. Oliver Smith with the Miami Dolphins. Grading possibilities there. One of them might turn out to have a nice grade. Chase Claypool Hollow for Brian Crouch and the Steelers purple shock Grant Dell pit for Brandon the Browns. See, I got him Brandon. There he is again. Grant Dell pit Hollow. Just raining Browns now. Cam Acres rated rookie purple shock and hollow. Miles, we did not see any downtowns in the first case, but maybe we'll see some here in the second case. Brant still hurts to look at. Hey, listen, you'll be eating those words when Grant Dell pit turns into a Hall of Famer. There's T Higgins purple shock for Cincinnati for Allen and T Higgins Hollow. Antonio Gibson purple shock rated rookie. Tyler Johnson rated rookie purple shock. Oh, hi. I was like, who's walking in our? It's just Nick Jaspie, ladies and gentlemen. It's Cole McDonald. There's no numbered cards in these blaster boxes. It's just parallels. And well, I think there can be numbered cards, but they're pretty few and far between. The purple shocks aren't numbered. The hollows aren't numbered. I think sometimes you could find like maybe a gold parallel that might be out of 10 or something like that. But the blasters you thought I left a pack in there. The the blasters are definitely about the about the hollows and the purple shocks mostly. The purple shocks I'm almost certain are exclusive to this set. Yeah, a wild Nick Jaspie has appeared. Quick, get get get your most powerful pokeball. I don't know what kind of I don't know what kind of pokeball we'd have to use to capture a wild Nick Jaspie. Masterball, maybe a premier ball. So many different pokeballs to try. We'd have to use a master ball. That's my master ball. I'm trying to catch you. I threw an empty Donner's optic football box at him that did not work. He wriggled away.  I think he he's originally from from Indiana. He was all about Romeo Langford on the Celtics. Being someone to maybe look out for maybe not immediately. But Romeo Langford who just twisted his ankle. Yeah, so Romeo Langford could be someone to kind of keep on the radar. Not saying you have to go out and buy him right away. Nothing that he's really done much as of yet. Something to keep your ears open. Blaster packs are a little rough here. Little flimsy. Anyone remember any basketball fans remember when the when that first draft is going to be where it's where high school players and where it's the high school players can declare directly for the draft? It's not. Is that 20? Is that next? Do you know if that's next year? Where the high school players can join the NBA draft in 2022? Maybe it's soon. That could be a very interesting draft class. Could be interesting for the hobby. There's Daniel Jones and behind him is Clyde Edwards. He layer rookie phenoms relic. That'll be for Kansas City and that's going to go to Dylan. It's KJ Hamler, purple shock. Jake from State Farm Hollow. Eno Benjamin. Jaylin Hertz rated rookie and AJ Dylan rookie phenoms. Relic. Brian Watford and the Green Bay Packers. I saw AJ Dylan not too long a few weeks ago on TV on a ballies sports network special about him unboxing cards. There's Chase Claypool. So he's been really getting into this sort of stuff. Maybe if the NFL thing doesn't work out or after his NFL career, come work for Jaspies maybe. There's Tom Brady, Buccaneers, Kevin Crouch. Chase Claypool. Rated rookie purple shock for the Steelers. Brian Crouch. Well, Michael P. Ryan, rookie phenoms relic for the JETS Jets Jets Jets. It's a flood with New York. Wow. Downtown Patrick Mahomes from downtown downtown Miami. That's exactly what downtown Miami looks like if you've never been. That's awesome. Dylan Johns, Kansas City Chiefs, downtown Patrick Mahomes. There he is. He's he's fired up. Oliver was also pointing out a Darnell Mooney hollow. Could have some upside this year. Not last year though, Oliver. I don't know how many times I put him in like daily fantasy lineups thinking this is the week where playmaker Darnell Mooney is going to just explode for over a hundred yards and a touchdown. Nope. See that didn't work. We need better pokeballs here. Joe Burrow, the rookies insert. Goes to Alan and Cincinnati. Denzel Mims. I've heard some Jets fans say that Denzel Mims now that with some competent coaching, a Zach Wilson throw in the ball to him. Could be a pretty exciting player right here. Jets. Fuad. And there's Clyde Edwards-Elaire also for Dylan. Yeah, I think I think the chiefs are off for trade.  Oh, both Steve and uh and Oliver saying, watch out Joe. Now that Darnell Mooney has a competent quarterback in Justin Fields that Darnell Mooney is going to start putting up some points. Right. Yeah. The Darnell Mooney press conference is like, well, once I heard that Joe Jaspy had me in his lineup, I decided I'm not going to try today. I don't really have enough trash can space for this uh for this dual caser. All right. Next five boxes. Yeah. All right. So, the Kansas City was up for trade. Nobody wanted them. There's that there's that infamous try to trade couldn't trade mojo. Is Chase Young a buddy of yours? Your buddy Chase Young getting no love? We saw some Chase Young cards. I'm looking for uh some of his like a hollow Chase Young would be nice. I wish the really wish the defensive player is kind of was a little bit stronger on the secondary market but they're all they're kind of like they're kind of like pitchers collecting pitchers in baseball. Yeah, these blaster breaks are pretty good value. This sold this sold out pretty quickly for a dual case break sold out really quickly. Sure, we'll we'll try to try to get some more. Try to add some more to Jaspy's case breaks dot com. Tell Nick to post those twenty blaster prison basketball breaks again. Yeah, when we find some, we definitely will. Go find us. Go go find us a a couple cases of those at a at a fair price. Twenty nineteen twenty twenty is what is what Freddie's looking for. Uh yeah, go get it. We got some in the basketball mixer. Now, he wants he wants blaster. He wants a break like this. Two blaster cases and all that. Oh man. See, now that now that everyone knows you're here, we got requests. Please post tops. Come on. Pick your teams from Coppola. What else folks? Nick Jaspy's here. We do have spectra pre-orders up. I'm sure I mean Friday's going to be a big new release day. So, I'm sure there'll be a different set of pre-orders tomorrow, a different set of pre-orders the next day, so on and so forth. Keep your eye out on Jaspy's case breaks dot com every minute of every hour of every day. You never know what's going to appear. Sometimes, Nick, sometimes Nick gets up early and makes stuff happen. Sometimes he's a night owl and he makes stuff happen. Who knows? Chris will be says hello. No, you're crazy. No, I did get smaller. Your dad switched it. He said he needed the one the bigger one for all the boxes and finally happened. There should be some. Yeah, you can take that. Gabriel Davis Hollows. Yes. Gabriel Davis for the bills, Brian Croft. Especially YouTube Hip Hacks tomorrow. YouTube Hip Hacks tomorrow? Wow. YouTube Hip Hacks tomorrow? All sorts of things happening. Zach Moss, Purple Shock. And remember folks, I'll be back at 11 a.m. tomorrow. Oh, and I raided rookie Hollow Tua Tungovaloa. Oliver Smith with the Dolphins. A lot of tuas for Oliver Smith. Nice. All of those add up. There's a raided rookie Joe Burrow. Maybe we can find some parallels for him too. It's a couple of base cards though. Alan with the Cincinnati Bengals. We're on a Cincinnati. Raided rookie Hollow AJ Dillon. I guess, I guess we'll save, we'll save a Jake of Eason. In case he's a week one starter. Goes off. Might be good to have. Colts, Sean. You never know. That's what's exciting about the NFL. Any given Sunday. DJ Dallas. There's a rookie's chase. He will save a couple chase youngs right here. All these will ship anyway, Brandon. Watching football team. The rookie's insert. Let's see if we can get like a hollow or something like that. Just like that one. T. Higgins. Rated rookie. Purple shock. Johnson Taylor. Hollow Colts. Sean Matic. Jalen Hurts. Rated rookie Hollow. Eagles. Fly like an eagle. Ryan Heintz with the fly eagles fly. Time keeps on tripping, tripping, tripping to the future. Is Alex onto decumpo? Is a summer league champion? Oliver Soria is saying. Are all the onto decumpo brothers have a title? Do they all? Yes, it's all for saying all four onto decumpo's have a title. Giannis and another brother of his one with Milwaukee. Then his other brother won with the Lakers last year. Not the year before last. And now Alex onto decumpo. Summer league champion. I guess they all have a title. Is Alex terrible though? Who would win? Who would win a basketball game? Three on three. The onto decumpo's versus the holidays. Giannis and two others. Two other onto decumpo's or the three holiday brothers? Three? Three, right? Drew, Justin and Aaron. Maybe not in that order but who wins? You're thinking holidays in a mild upset? The Greek three? They're too big to lose. It's an interesting question right? Oliver thinks the holidays just they're just more skilled. Yeah, I mean the onto decumpo's though they do have that size advantage. What about what about Oliver in a seven game series? I feel I feel like the holiday brothers will be exhausted battling through the big the big onto decumpo's. That's a lot of work. Oliver thinks the onto decumpo's in six in a seven game series. What about what about the holidays? Take the three holiday brothers and the three ball brothers. Who wins? Lonzo, Lamello and Leangelo versus Drew, Justin and Aaron. Oliver says holidays? Okay, I probably say holidays too.  The ball brothers will sweep a seven game series between the holidays and the balls. On pay review, holiday balls. Holiday ball. Grizzlebees would take Robin Lopez, Brooke Lopez, and the forgotten Gigantor Lopez. All right, final five boxes ladies and gentlemen. There's Brian Edwards. I don't know but Oliver said he's saying ball brothers don't play no D but if they got LeVar ball there that's the coaching advantage there. Never loss. I'd watch that three on three though. Yeah, right? Doing it in life today. I'd watch that three on three. Now I'm curious. Yeah, they should set up a pay-per-view. Do it for charity. Do it for charity. It'd be fun. All right, final five boxes working through. We got Antonio Gibson, rookie Phenoms Relic, for Brandon and the Washington football team. There's LaVisca Shanalt Jr. for the Jaguars. It's going to go to Aaron. The hollow Michael Pittman Jr. for the Blue Horseshoe, Sean Mattick, Jordan Love, rated rookie hollow Chase Claypool, Tom Brady, Henry Ruggs, Purple Shock, for the Raiders, Robert Flores, Tom Brady for the Buccaneers. That's going to be it's going to be for Kevin Crouch. Chase Claypool, hollow for Brian Crouch, Jordan Love for the Packers, Brian Watford. Yes, Oliver, your Kings are Summer League champions. There's a Chase Young, rated rookie Purple Shock. Nice parallel. This is the kind of stuff we're looking for here. Good game record here for Brandon. Another Patrick Mahomes base. And a Justin Jefferson. Purple Shock, rated rookie. It's a nice color match. Matches the color of the team. That's Freddy and the Vikings. If there wasn't another Justin in the league. That was a rookie. Justin Jefferson might have won rookie of the year. Justin Herbert. Maybe we'll find another Justin Herbert before the last handful of boxes. I thought that was going to be it. That's Josh Kelly. The last little stack right here. It's Josh Challenge. Joe Reed, Nate Stanley, Jerry Judy, rated rookie hollow for my rivals. The Broncos. There's a Purple Shock Justin Herbert for Kip Kip Hurray and the Chargers. I wish there was more Kip, but I think there was a base one back there and a nice Purple Shock parallel Justin Herbert. There's just Kidding Dobbins and there's the Jerry Judy once again. Thanks everybody. Pretty solid break. Let's do a quick little recap here. You've got to play to the whistle. So thanks everybody. Here's a quick little recap. There's a bunch of other parallels too, but these are just some of the some of the highlights. The relics and the mainly the big quarterback names that I was just pulling. A lot of tuas. So great break for Miami. A lot of fun relics. Some Jalen Hertzes as well. A couple Justin Herbert's back towards the beginning. Joe Burroughs and of course in the middle was that downtown Patrick Mahomes for Kansas City. That was pretty sharp as well. Thanks for watching everybody. I'm Joe for jaspyscasebreaks.com. I'll see you next time for the next break. Bye-bye.