The 1st 623 filled artillery Hymars participating in Mobility Guardian 21, so this exercise is the largest air mobility command for the United States Air Force, so I've asked us to participate in this, prepare them for a load, the crews of the Hymars participate with that, go through the joint inspection with the Air Force working together. So we was glad to get in the air and get here, it was a good flight down. We unloaded the aircraft pretty quickly, staged our gear and then the Hymars crews immediately got on the Hymars and brought them off.


Hello in this lecture we're going to talk about the master budget we're going to go through the sales budget the production budget and the materials budget at the end of this we will be able to list the components of the master budget to create the sales budget to create the production budget and create the materials budget so we're going to start off we just want to look at the list and the activities that go through the master budget for a production company something that a company that produces things and this is similar to many types of budgets when we think about the most basic type of budget many people think of well let's take a look at the income statement how we did last year you know basically divided by 12 make some adjustments and that will be our budget for the months going forward to the next year that's the most basic kind of components of the budget and that's how any budget kind of starts off we're going to look at last time's material what happened how did we perform and then make some adjustments into the future as we get more sophisticated of course we want to think about other things into the future other than just past performance like what's the economy going to be like what are some changes what's going to be the effect on the on the sales and our expenses and whatnot going forward we're going to look at a production budget a production budget for a company that produces things being more complex in many ways and being more linear in the way we have to build it because of the fact that we're producing things and the same principles will apply to many different types of budget so we're going to have to start off with the sales budget that's the first place we need to start off no matter what type of budget we have how much are we going to sell in terms of units of sale if we produce inventory and sell inventory we need to think about how many units we're going to sell and then how much revenue we're going to get on that even if we take it down to our personal budget we want to think about well how much are we going to earn in the future time period for many individuals and many business businesses the amount we may earn may be fairly constant that's why we can take last year's performance and basically budget it forwards but it may change as well for many people it may change our salary may vary and that's the first thing we want to take a look at because we're going to base the rest of the budget on that then once we know how many units we're going to sell we want to come up with the production budget how much stuff are we going to produce in terms of like inventory how many things do we need to produce and you might be saying well that's easy we know how many things we're going to sell therefore we're just going to take how many things we're going to sell that's how many we need to produce and that would be the case if it was like our first year of production and we didn't want and we thought we were going to be very exact in our numbers but we probably want to have a cushion to stuff we want to produce more than we're going to sell in case that we sell more than we thought we were going to sell and we also probably had stuff that we didn't sell last time we had a cushion from last time so we need to take those two things into consideration in terms of figuring out how many things we need to produce in order to meet the sales and these other kind of requirements that we want to have in terms of having a cushion in the inventory once we know how many things we're going to produce then we can think about how much material we need to produce them so let's say we're like making guitars or something we know how many guitars we want to make now we need to figure out how much basically wood we want to put in how much wood do we need to buy in terms of the production of the guitar same kind of inventory type of questions and we have the same kind of problems it's not just that we need to buy the amount of wood in order to produce that many guitars we need to figure out do we want to have an ending inventory of wood leftover do we have any wood that's still in the inventory here same thing in terms of direct labor which is a bit more straightforward we're going to say how much direct labor will it take then to make these many units of production that we need to produce and the overhead all the other stuff that's going to be involved what's going to be the budget for the overhead to produce this many units this isn't directly tied out it doesn't have to be happy next but the capital expenditures do we want to buy new larger pieces of equipment and things like this we need to plan out whether we have the cash flow and whether we have we can finance any more large expenditures and then the selling and administrative budget these are going to be more the period costs these are usually more costs that we can do kind of what we think about in our traditional budget look at what happened last time and project it forward because they're usually more fixed in nature rather than variable in nature along with the production then we can do the cash budget the cash flow that will happen and then we can kind of finally think about our budgeted balance sheet that we always think about our budgeted income statements and our budget statement of cash flow so here's the statement so we're going to create and again most of us think about the budget oftentimes in terms of the income statement here here's how we're going to perform in the future in terms of the income statement but if we break this out into this process we can do this first then then you know create our standard balance sheets from this projections all right so we're going to start off with the sales budget so sales budget here and we'll just break through these first three and then we'll talk about the rest of the budgets at a later time so sales budget we're going to say that we're going to do this for the quarter of july august in september in july we're going to say in units we're going to sell 20,600 units now how do we come up with that number if it's a book problem we're going to have to give us that number and if it's real life then we're going to have to project well how much did we produce last time period what's our traditional sales for july what's the market like in july and all this kind of stuff and come up with the amount of numbers that we're going to produce in units we'll multiply that times how many we're going to charge per unit and that will of course give us the dollar revenue so we get the unit revenue we got the dollar revenue we'll do the same thing for august we're going to say we're going to produce 19,600 units what do we come up with that number again we're going to have to project it out and think how do we do last year what's the market like how things can happen but then we just multiply that times our 24 and we come up with the dollar amount for seventy four hundred same for september we're just going to project the 20,100 book problem we'll give us that real life we'll have to project that in some way probably a very significant process to do that and we're going to have the 24 the sales price that gives us the 40 to 400 totals then would be 60,300 units and we would have dollars in revenue of 1,447,200 in terms of revenue now that we know this we can move forward we need how much do we need to make how many units do we need to make if we're going to sell this many units and you might think well we need to make 60,300 if we're going to sell 60,300 but once again think about the idea that we may have units that are already in here from last month and we may want to have a cushion because we don't want to have exactly 60,300 units we might sell more than that we don't want to have a shortage in case we do better than we thought in terms of just the budget just the plan here so those two things being in the factor when we then calculate the production budget so we have the sales budget up here now we're going to say the production budget how many how much stuff in units do we need to produce producing guitars how many guitars do we need to produce for this quarter we're going to break it out by month so we're going to say July we're going to say we're going to first do a calculation in terms of


So anyway, we were at PAX PAX East. They all blur together at this point. There's just so many packs. And when we weren't enforcing and paneling, we were playing games and our good friends Chris and Anthony, they bring the games. They said something to me. And it was a combination of words that did not at first make sense. They said, Hey, I got a Friedman freeze trivia game if you want to play it. So that's apparently not entirely true, but it sort of is true. Right. So his thing rim does not like trivia games in general. And I understand why he's the reason so it's complicated. I really like trivia games and also really hate trivia games. I was far as the quiz ball. Here's the problem with trivia games, right? Is there games of? They're not games of skill. They're not games of decision making. They're not even games of luck.  I get asked a question and you either know the answer and succeed or you don't, right? Someone either asks you, like, Oh, what's the first boss of Zelda one? And you know, like Aquaman, right? Or somebody asks you, you know, what year did Louis Armstrong release his first album? And what was it named? Yeah. It's like the Rangers games. I love the trivia. That's like, how many goals did so and so score in this important game? And it's multiple choice. You're like, Yeah, I got this. And then it's like a three B four C five D six. Yep.  It's binary and it's not fun or exciting or, you know, and you barely, you don't even really learn anything valuable. I guess it's, it's, it's fun and exciting. If the domain of the trivia overlaps heavily with the domain of knowledge of all the players. Correct. That is the only situation where those games are fun. Yeah. But even if we go to nerd trivia, right? So I've been to nerd trivia is very few times because I don't like them, but also I don't drink. So I was at a non-drinky one. It was a nerd NYC thing. Remember? I remember that. And one of the questions was like, Fist of the North Star something. Exactly. That was in my domain. And I was like, Yeah, no one else knew what the hell, you know, Fist of the North Star was. We were the only table that got that one right. But then they were asking questions about like Star Trek or whatever other garbage.  One of the questions specifically was name all of the Ajahs in the wheel of time.  And in fact, unless you've read a lot of the books, you wouldn't know the answer. Right. I'm like, I'm just like, it's not, it's not a fun game, right? So this trivia game, unlike garbage, like trivial pursuit, right, fixes those problems. Now it's not the only trivia game to fix those problems, right? Jack Fox fixes many of those problems by a using multiple choice and be bringing in humor. Even when you have no clue, the humor can make it valuable. There's also games like wits and wagers where you're sort of guessing like over under kind of things on numbers. So and then, you know, that way it's not just pure. Do you know it or do you not? And it's fun for everybody. Some games really focus the domain.  Simpsons trivia. Exactly. So here's a game called fauna and fauna is a game by Friedman Fries, who makes all his games begin with F and usually have two words like fresh fish and power grid.  Power grid is actually called something else. It's not called power grid. We didn't hold show. His games come in green boxes, right? But anyway, the game called fauna is an animal trivia game and we didn't play fauna. What we played is a game called America, a party game, something close counts. So everyone, everyone sitting at the table knows about America because we're all American. It turns out we did not. We're mostly American, right? And even the people who are not American, you know, they were living in America for a significant period of time and new American things, right? So this game is the exact or close to or exactly the same mechanics as fauna, but has American trivia for the map of the United States and is made by someone else. So the concede is pretty simple. The execution is basically flawless. So the concede is that the only problem it has that other trivia games also have is that you will eventually go through all of the trivia cards and then the game is done for you. It is physically designed so that one, the person who chooses, you know, which of the two categories to use, which is a great mechanic to have in any trivia game, because it allows you to direct the domain, which adds a little bit of strategy. Unlike Trivial Pursuit, where you roll dice to determine the domain. The person who asks the question is not prevented from also trying to answer because of the physical design of how those cards work. That's true. They can't see the answer. That's a baby's first mistake if you make a trivia game. Yeah. And two, the physical thing you put them in has two sides and every trivia card has two sides. So if you, when you finish a card, you put it facing the same direction in the other side, it guarantees you will cycle through every single question exactly once and then hit the end. So you will never get the situation that a lot of trivia games will get into where you play it again and a question you saw three games ago pops up again, but there are questions you have not seen. Right? You keep the cards in the box. You can do it in Trivial Pursuit also if you keep the cards nicely in the box. Yeah, but this game has a, like that is part of the rules.  You own a copy and you're the only one who ever plays it. You will eventually see a card you saw the first time you played. You could even like put a slip of paper there to remember where that spot is. Yep. And then you'll be like, Oh, we've played this whole game and then you can sell it to someone else. I'm pretty confident by the time I got to the beginning again, because there's a lot of questions. I'd have forgotten the answers to a lot of them. That's also true. Cause there's a lot of questions in this box, but the conceit is that once the question is asked and you pick from one of two topics, the question will be about a thing like Pez or something. Something American. The Olympics. A sport. And there'll actually be three questions. The answer to one of them will be a year. The answer to one of them will be a number. And the answer to one of them will be a state. A state in the United States, like Connecticut or Oklahoma. Five guessing cubes. It's a cube game. And on your turn, you choose one of those questions and you put your cube on. What do you think the answer to that question is? Now, you don't have to even be exactly right. For example, if you think that, you know, the Mets won the world series in 1986, which they did, there isn't a spot. That's the thing I would not know. There isn't a spot just for 1986. There's a spot that's like 1985 through 1990. They're all ranges. They're all ranges. So you just put your cube there on 1985 through 1990, right? Now, the next person has to put their cube out. You take turns.  I knew it was 1986, but I can't go there. They can just put their cube next to yours and still get points because they're one away. Or they could go answer a different question. They might be like, well, they got a lot of points for picking 1986, but I know that, you know, the state the Mets play in is New York and they'll put their cube on New York. And it's like, aha, I got points for that. And now people go, oh, I know it's New York also, but they can't put their cube on New York. So they put their cube on adjacent states like New Jersey. So you get, I think, three points if you are correct. Yep. And you get seven points if you're correct.  Yeah. And you get a smaller number of points if you are next to the correct answer. If you're more than one space away from the correct answer, then you get no points and you lose your cube. Yep.  Or if you're at three or more, you get one cube from your lost pile back every round. Now, here's another benefit of this game. Usually in a game of trivia, when no one knows the answer because it's something ridiculous, like what year did something crazy happen? Like what year was Pez invented?  Right? One person's like 1976 and someone else like 1908. It could have been 18 something. You don't even know. They had sugar then, right? It's like, uh, right. So everyone starts guessing, but you can vote and you can say, you know what? I think nobody got the answer exactly right. And you can also say, I don't think anyone's even going to be near the answer. And if you say that and it turns out to be true, you get points if everyone else is actually wrong.  So they're not just complete wastes like they are in trivial pursuit. The scope of the questions is great. So like the number part, it's a scale and it starts like you can bet like zero one, two, three, but then the scale gets bigger and bigger. So on the top half, the gradations are 100,000, a million, 10 million, a hundred million, a billion. Right.  You'll be exactly right if you're right. The years go to like, to the year the game was made and they started 1492. Right. Yeah. The billion spot, the spots of the very end actually count for like up to infinity or to negative infinity. So like if you think it was sometime before 14, whatever, you just vote on 14, whatever. And that goes all the way back to, you know, the creation of the universe. Now in terms of play, the way this ends up shaking down is that one, a lot of people will act like they know the answer. And then on the turn they'll be like, ah, I don't actually know. Yep. And two, you get context from other players, which is where a lot of the magic happens.   But it was where did, where did Jaws take place? Like, where was that book slash movie set? Yeah, we were so sure it was like Jersey. Yeah, it's definitely not. I'm like, it was not a southern tropical beach, right? Because you've seen the movie, but it was, it was still a beach in the summer. Right. Clearly Atlantic waters. It wasn't beautiful Pacific waters. So we're all like, ah, Jersey. That's it's warm enough. You're going to the beach. It felt like Jersey, you know. So half of us kind of knew, or at least thought we knew, and we're very confident, like put our guys right down there. Other people saw like, oh, both of them are guessing like the Jersey area. And they seem really confident. So I'm going to go to like Pennsylvania, which is right, or Delaware, right? Pennsylvania. Right. Well, yeah. It's right next to Jason. Right. It's next to Jersey. They were just trying to get points by putting their cubes next to the right answer. But in another one, like what it was, I think the question was literally what stage is the Pez Museum in? We're like, right. So someone hazards a guess and then other people are like, yeah, that feels right and guessing nearby. There is actually in Connecticut where I lived a Pez visitor center and a Pez factory, I think. And you can see like billboards for it.  It was crazy. So I vote, I voted Connecticut with confidence. I was like, yeah, Pez Museum in Connecticut. And apparently that's crazy wrong. There's only a Pez visitor center and factory in Connecticut and the Pez Museum is somewhere else. So basically what this means is that even if there is a huge disparity in knowledge, because some of the questions like around the Supreme Court of the Olympics, it ranged from someone who like literally knows everything about the Olympics to someone who literally has no idea about any history. Doesn't know what the Olympics is. Yep. And they can both play this trivia game together and have a good time. Right. Because if you don't know the trivia, you can use, you can play a game of cube placing strategy instead, you know, figuring out who do you think is right and just putting your cube next to theirs because you can't put out, you can't put out all three cubes at once. You got to put one cube at a time and take turns. Yep. You go around. So if you know a lot about the Supreme Court and you know the answer to two of them, then you're thinking now is which one of these questions will no one else know? So I'll get a second go to put my answer on the second correct one. The other thing is that any cubes you put out that don't score any points. You lose those cubes and you've only got five cubes because one of your cubes is a scoring cube on the scoring track. And then you only get one cube back from the graveyard per turn. So you don't want to all out. Yeah. So you do want to take at least one risk per turn because you're going to get that cube back. But if you take two risks per turn, you're sort of limiting your ability. So like there were times where like I could guess and get a point, but I used up all my cubes because you're always going to have at least three cubes no matter what. Yep. I've noticed people who went bankrupt early and were basically stuck on three cubes for the game almost never. I don't think they ever won this game. Yeah. Well it means they also put out a bunch of wrong cubes. Yeah. But usually they put out a bunch of wrong cubes like way early and never recovered. So it's like it's simultaneously this trivia game, but it's also like a real board game of like place cubes for optimal point scoring. Right. And you're sort of balancing these two things. So you got interesting stuff going on two different ways. Yep. So this game saw a lot of table actually played it like two or three times at a pack. So it was worth packs time. Yep. I played it. I want to say three times. I think three times it packs. Yeah. And I would have played it again, but we ran out of packs. It's also great because it's super accessible to people who aren't super hard gaming types. They might miss out on that cube point placing strategy, but everyone else is going to get into it like real hard. But the trivia part is like anyone can get into. And since if you're like us living in the U.S., you're going to know stuff, right? The other original version, which is animal trivia, might be harder for a lot of people. Some of our friends would know a lot about that. And some of our friends would not. But everyone is going to, you know, because we're Americans, there's going to be cards you know and cards you don't. But you're going to have some connection to the game if you live in or are from this place. But this mechanic is I mean the only you could make other you someone should make many, many trivia games using the same mechanic. Dude, if I could, I would just license it and make a series of games. The problem is in our state per city. I'd make one. The problem is like if we did like video game trivia, right? What are you going to put for the map? If we did nerd trivia, like what's the map going to be? We could do a number and a year for nerd trivia. But what's our map going to be? Yep. You might and if you just have three number things or like then it would be it would lose a lot of its magic. Right. You need to have some sort of map and money would be taken a game like you could do Lord of the Rings trivia and have a map of a map of Middle Earth. But it's nothing how much how much Lord of the Rings trivia can you make? Can you make enough to fill a box? I don't know.  So it's like you need like you know a really complex universe to compare to the route to get as complex as the real universe. I would market this to local color types. So there'd be a New York City one. It's a map of New York City broken. You could do a New York City one broken up into neighborhoods. Absolutely. You could make a New York City one. Every state every city that's got some history basically every single city in like New England. It might get boring because if you do like New York State like you're only going to have so many topics that are interesting and if you start doing ones that cover the boring areas it's like all right a bunch of worthless cards. But as we found actually the boring ones for America ended up being real interesting because even if like it was like Pez like other than you no one at any like anything we didn't do a lot of this. But if you actually you're supposed to read the cards in completely out loud at when you're answering after you're revealing the answer to teach you stuff and then you'll learn things. Yeah. We just read the answer like I was this day we didn't read the text underneath because we were running low on packs time. Yeah but if you do read the text underneath you will get fascinating and interesting information and educate yourself. So yeah if you avoid trivia games you know trivial pursuit doesn't explain its answers says here's the answer. Also we did not really encounter questions that were just broken or wrong which is a common problem. There is on the questions about the states. It does split it up. It tells you in advance whether it's the east half of the US or the west half. I think Mississippi River as the dividing line. I think at least three times. I think a I rally would have rather had those hints not be there. Yep. And B at least one card only one card we saw it was actually wrong. It the hint was west and the answer was Easter price verse. I forget. But at the same time I feel like that might be oh so that might be good for people who don't know a lot about American geography. But there are two sides to the board. The front side names all the states with their two letter acronym or initialisms. The bag does not have that only with the blank side only side only blank side only. But this game promote only no babies super fun. Like we really enjoyed playing this app. This is a game that I would like to actually get and bring to like Thanksgiving with family. Yeah. Right. Like bring this because it's a real game that like I would enjoy playing but also a game that everyone else would enjoy playing who's not game. This has been Geek Nights with rim and Scott special thanks to DJ Pretzel for the opening music can't leave a website for web design and brand OK for the logos. Be sure to visit our website at front row crew dot com for show notes discussion news and more. Remember Geek Nights is not one but four different shows. SciTech Mondays Gaming Tuesdays Anime Comic Wednesdays and Indiscriminate Thursdays. Geek Nights is distributed under a Creative Commons attribution 3.0 license. Geek Nights is recorded live with no studio and no audience but unlike those other late shows it's actually recorded at night.


I'm Juliana and we are back at the Maples. We're here at Hill Grill. There we go. I was a little off there and I got it. Hill Grill. This is a great place to just eat. It's very cute. Is she opening door? Yeah. A lot of people come in their BJs sometimes at night, late night study sessions. Just come down, get food, maybe have a lunch date. What do they serve at the grill? Gosh, they serve everything. Everything you could want in like comfort food and healthy food. I could get a burger there? Yeah, you can get a burger, grilled cheese. They do tater tots, fries. They have like kind of a healthy section here. You can kind of make like a bowl, like a rice bowl or maybe like a vegan bowl.  What was one of your favorites that you would come and get? Oh gosh, I loved the grilled cheese and tater tots. Grilled cheese and tater tots. Catch up with tater tots or just straight up? Just, well, I'm not that big into catch up. Okay. But I understand. Grilled cheese and tater tots. Good stuff. Comfort food. Absolutely. So we're doing a big tour of the Maple Hill area and you lived here. I did. I lived in south which is right here. I guess this is all part of south which will be showing off here in a little bit. Great. I love it here. Another big part is you can always look out and see concerts happening here. Yeah, let me see. Let me see. We'll move over here and show them. This is sort of, what did you call this? The Lawn area. You can see people, you know, playing frisbee, playing soccer. Every now and then we'll have concert out here and it was just a great place. Just watch from your window if you wanted or come out and be really social. Great place to meet people. Yeah, just a fun area. Yeah. Fantastic. And we have several people who've joined us already and feel free to ask questions as we go. Juliana and I are happy to help you and Kent to help you find out any answers you need. So what basically we're going to do is we're going to tour Maple Hill East but show you all of the Maple Hill community. Maple Hill East is kind of the main hub if you will, right? Yes. The main area. Yeah, okay. Fantastic. We'll go ahead and head on in after seeing the Hill Grill and the Lawn. Oh yeah. There's that little, I think that may be off brand for us now but it's certainly a wonderful thing etched in stone. Yeah, this building opened in 2008 so it was a year ahead of the new brand date. The new brand. Okay, gotcha. So we're coming up in to the Maple area. Now this one right here, there's three. We'll explain. There's three and this is Maple Hill south, right? Yes. So the areas generally are kind of similar but that is Maple Hill south. Oh yeah, plenty of bike racks, lots of bike racks for people. Do you ever ride your bike while you're here? I did not. No judgment, just curious. A lot of people have bikes, a lot of people have scooters. Sure. It's really cool. Great. So now we're leaving Maple Hill south and we're walking towards, let me just go and point this out, Maple Hill west right here. Yes. Maple Hill west and then Maple Hill east. They come a little closer to you. Signs here will always help you. I know when you first get here, at least I was. I was very confused on where to go because you kind of come through here and it's very confusing because they look very similar but just watch the signage. There's one there. There's one sign there. There's another sign right here. Gotcha. And where did you park? Well, I did not have a car. Oh, okay. What would you recommend? Bring a car or go in carless? Your first year, I really don't think you need a car but if you'd like to, there's a great parking lot this way. Everybody parked over here. Over in that lot over there? Yeah. After that, if you move off campus, I think you would probably need a car but fresh in your car. You can do without if you want. Okay. And we do have, of course, razorback transit, which will take you pretty much anywhere in the city center area and a little bit past. Take it to the mall, apparently. Oh yeah, let's check out that courtyard. So this is the second courtyard. More bike racks. More bike racks. So here we're seeing, I guess, the north end of Maple Hill west. That's not confusing at all. No. And the north end of Maple Hill east. And you can kind of, there's different things here. There's a grill, kind of a place to meet and eat as well if you'd like to.  And we have more space back here, kind of in the tree. There's kind of a garden going on back there. That's a student developed in one garden. Nice. It's really pretty. Vegetables to some extent. Yes. Nice. Nice. Wonderful garden. Did you do much hammocking? I did not. But it's popular. Like I know I see it around the Greek theater all the time. It's all around campus. It's everywhere. Everyone loves to do it here. Great. Well, you want to head inside? Yeah, let's go inside. We're heading into Maple Hill east just so everyone knows. And the reason we chose Maple Hill east is because it's where you'll pick up your mail and it's kind of a center hub in a lot of ways. And you'll see a lot of similarities in the other two buildings as well. Garland Commons. This is the Cleveland Commons. Oh, Cleveland. Excuse me. All right, here we are inside. And if you don't mind, maybe we'll say hello to you at the front desk here. How are you doing? Not too bad. Good. What's your name? Christina. What are you doing for us today, Christina? I'm conference services. I'm in the desks when the secretaries are not here. Gotcha. You have a lot of people coming in and out? Not right now. Actually, all the band kids are out doing their stuff. Band stuff? That one time at band camp, right? I'm not instrumentally gifted, so I began to tell you. Now, are you a student here? Yes, I am. I'm going to get a sophomore. Fantastic. We're glad to have you back. What do you study? Psychology. Psychology, okay. Don't get in my head. All right, thanks. Thank you very much. Okay. So, mail. Yes, and then we come over here. You've got it. To the mail section. I do want to mention you will, they don't really tell you anywhere. You don't find out unless you kind of go in depth with your roommate, but you do share a mailbox with whoever you're rooming with. And that was something that I didn't, I did not know. And a lot of people didn't know, but I just wanted to mention that. So, there's no confusion. Yeah. You do share a mailbox. So, how does that play out? Like when you open your mailbox, it'll be also not all your roommates or some of your roommates? How does it work? Just your direct roommate. So, like, if you have two suite mates, they're, they have a mailbox separate, but your roommate's mail and your mail will be in the same place. So, if you grab mail, don't assume, you know, it's yours. Look at the name. Make sure you look at the name. And the same with packages, it all just comes through the same way. Sure. We have all the rows of mailboxes out here. And we're heading back into the kind of the main area again. Yes. And again, if anybody has any questions, feel free to ask them. We're happy to answer. This space right here, I guess people wait here when they need to meet up with someone or does this, does this have a name, this particular? Nameplace. A lot of people use this room here as well. It's just kind of a quiet area to study or do whatever they need to do. That couch is pretty swanky. And the fireplace is nice. They like to fire those up, you know, during the winter, fall time. I like that quote up there. Knowledge is proud. Oh, you read it, if you don't mind. Knowledge is proud that he has learned so much. Wisdom is humble that he knows no more. Nice. Okay. All right. Well, where shall we check out next in Maple Hill East? Oh, we had a question real quick. Okay. From Melanie, she asks, so all Maple West and Maple South residents get their mail in Maple East? Yes. They all come together. Yep. Thanks for the question. Yeah. And there's actually more here. They're everywhere. So I picked up my mail, I believe here. That's your box, huh? Somewhere. Somewhere in there. Somewhere in there. This is where I picked up my mail and I lived in Maple South. Okay. So it all just kind of varies depending on where you live, what's your number, things like that. So yeah. Absolutely.  Oh, right. Yeah. That's a center that's located within here. And we highly advise that you use this service. You knock on the door there. Yeah. We'll see if someone can come to the door. Hi, how are you? I'm okay. How are you? Just fine. I was hoping you might be able to tell us a little bit about the Fulbright Advising Center. Sure. Yeah. What was your name? My name is Amanda Butts. Hey, Amanda. Nice to meet you. Nice to meet you. What do you guys do here? So we are the Fulbright Freshman Advising Center. We are located in the dorms as well so that we can meet with all freshmen who are in the Fulbright College. We are here to talk with students about kind of our whole transition into college and helping them figure out how to add and drop classes, helping them to figure out their schedules. We have walk-ins every day and we're also here for appointments as well. Wow. Okay.  We recommend that they come in at any point when they have a question. Okay. So if they're curious about how to add a class at the very beginning of the semester or drop a class, we're here to kind of help them do that. They're struggling with their classes and they need resources. So at any point during the semester, we recommend they walk in. And then priority registration is in November. So we start advising students around October so they can start enrolling in classes for priority registration. Very great. Now, did you use this service? I have. I actually had this entire service. He's back there on the phone right now? Okay. We want to travel him. Yeah. I really enjoyed the service because it's very helpful when you're kind of stressing like, okay, what classes do I take or what classes do I have left and kind of how do I, you know, get all of my major requirements out of the way and things like that? Very helpful service. So I highly recommend it. Yeah. Absolutely. Absolutely. Great. Well, thank you very much. Any other parting thoughts for our UR20 students you're coming at? Well, welcome and I hope we get to see you soon. Fantastic. Thank you, Amanda. Sure. All right. Let's continue our tour of the building. And there are actually classrooms in here. Yes, there are. Did you take any classes in here? I did not, but it would have been so nice to just walk over and have a class. But there's one here. Yeah. And then I believe there's another one here. Right. Now, you know, I was thinking about something I've heard students tell me sometimes is they're not sure what classes they have to take for prereqs and all that kind of stuff. Right. So those are the people who can help you out with that, I think. That's true. They're also, I believe, they give you a sheet freshman year and I've kept mine all of the years I've been here. It's very helpful. You just kind of check it off as you finish classes so you know what you have left.  And I find that very helpful as well. You're academically advising me right now in real time. Let's talk about this detail real quick. This is kind of a breezeway, I guess, from one side of east to the other. And we use the fob system, which is very important. You need to be able to fob in and out. Yes. This is that second courtyard that we were just looking at. We're now on this side of it. Yeah. Great. Yeah, and it's air conditioned, which is nice because it is hot today. Great air conditioning and it's very secure because you really can't get anywhere without a fob. There you go, fob is in. All right, thank you. I should mention also that we're very close to Reed, which is where there is a police station. Yes. So a UAPD police station on a city of I think we're going to look at the showroom first. So some of you who were here for orientation probably went through or have been on a campus tour. I've probably already seen this room, but we thought we'd go ahead and show it anyway. It is one of three rooms we're going to look at in Maple Hill to give you all the configurations. Maple has a lot of different configurations, doesn't it, Kat? Yes, it does. This is what we call a double room. And it shows off the bathroom in the room, which is nice. This one was actually decorated by Walmart and some nice help from the bookstore as well. And you can see some fun details in here. It's the first time you've seen how they decorated it. I love this room. Kind of a pink and gray. I didn't expect to like pink and gray and turquoise as much as I do, but it really kind of comes together nicely. It really does. Great. I'm going to even have the closets here so you can kind of see, you know, what your space will be like. Yeah. And we're going to do three rooms. This is the one that is, it's called a what again? It's a double room. It's called a double room. Or a single double. A single double. And these are, we don't have a ton of these actually in the Maple Hill area. No, they're very few. They're very few. Most of them are bigger and most of them are ones you would share with four people as opposed to. So let's go ahead and at least just pop in the bathroom for a second. So this is more about giving you some maybe some ideas about what you might, how you might style it. Got the bathroom there and the cabinet. And with this curtain, it's kind of like a tension rod. So it took two people for us to kind of get it out to put our own shower curtain on there, but you just kind of push it together and like pull it down at the same time and then you'll be able to put your own curtain on there. Sure. And this question came up in quad. I want to be sure I answer it here as well. You are, we supply a curtain, but you are not required to use that curtain. You can use your own curtain.  Lisa Westbrook asks, do you happen to know the dimensions for how wide a headboard would need to be? Yeah, we can do it. We can do it here or we can do it in one of the other rooms. We'll do it in both. Headboard measurement. I think the headboard measurement is going to be the same as, you know, the rest of the width things. Let's see. Got a lot of questions coming in. We'll catch them as best we can. Know that this is only one of three different rooms that we're going to look at. It's about 41 inches. Okay, okay. So that would be how wide it is. Let's see. Let me take these one by one. Jennifer asks, I would like a measurement for a bed that has been lifted, but not as high as this bed. And I'm assuming you probably mean as high as this one. There are several different points here where you can actually put the bed. I believe I lifted mine to about here and like in my room tour. It's about, you know, 40. 40 inches to, which one is that? That's like, that's pretty far along the pole, about midway up the pole. Yeah, just about halfway. It's halfway between, you know, like a bed like this and then this side. So yeah. So about 48 inches.  So yeah, let's ask, let's ask, now take Deborah's question. She asks, can you bring your own shower head? And I'm thinking no, probably not. We don't recommend changing it out. Zoe asks, is this room similar to room type B? And I don't have the... No, we will see one like that. But this one is just the single double kind of how you... This is similar, most similar to G suite in East and West and in South, I believe it's an A suite. But this is the same size room bedroom. It's just that in the double doubles, there will be a wall with a door here. We'll see that upstairs. We'll see a room type B, I believe. We'll see a room type G. This is room type G. No, the G is the double double. Okay, okay, great. Margot asks, what are the dimensions of the window from the top to the floor? Let's find out. About 93 inches of the window from the top to the floor. So Natalie asks, does the desk topper, the hutch shelf, you just showed come with the room, it seems to match the rest of the furniture. And the, yeah, so this right here is with the room, but then the little boxes are there. There should be a light. There's kind of like a cork board. Okay. There is a light underneath here, but you could... Oh, there you go. So there you got a little bit of light too. A little bit of delay, but... Sure. Melanie asks, can you show the bath vanity? Of course we can. And I guess, oh yes, here, that's the bath vanity. And there is... Okay, great. So there you've got the bath vanity, vanity, one sink, and then you got spaces underneath. I guess we could open up some spaces. Let's see. Jennifer asks, can you zoom out from the bed? And yes, we can. I'm going to cross them. Okay. There you go. So there's one bed right there. And here is the other bed right here. Great. So let's go ahead and go and look at one of the rooms that's more typical for the residence hall. Do you want to check out the laundry down here? Is it opening? I think so. Okay, sure. So we're definitely going to check out laundry and the other things. What unit type is this again? That was G, is that right? I'd have more typically... It's similar to G. Similar to G, but we will check and find out exactly which one it is. G would be where there are two double rooms in a suite. Okay. So here we are in the laundry and there's one on each floor. You service, I believe you called it laundry alert. And what it is, it's kind of like a downloadable site to your phone where you can check the status of your laundry. Once you put it in, you can kind of... It'll notify you. What you do is you add in your information. It'll say, hey, you put your laundry in this one. It is now ready for you to come pick it up. The nice thing though is you could be in your room and you can go and you can look and see which ones are open. So during peak times, you don't have to come down here and peek in. You can just know from the website if it's open or not. And of course that's a free service. All of our laundry is paid through room fees. Yes, of course. So you don't have to bring your luggage upstairs or downstairs. And there's two washers and two dryers here. And it's usually not too busy. For some reason, a lot of people do the laundry on Sunday. So just a heads up there. I think that's traditionally laundry day, right? Or Saturday? Work against the peak.  Pods are super easy. They're so light. You don't have to take a whole thing in here and leave it. It's just very, very easier. My house just moved to pods about a year ago too. They're very convenient. Yeah. All right. So let's head on upstairs to floor four, where we'll look at some of the others. We'll look at a premium and we'll look at the, what's the other configuration? It's a G room. A G room. Okay. Each floor also has a central TV room and kitchen. Right. So is there a, Andrea asks, is there a, no, I'm sorry, Margo asked, is there an ice machine on each floor? I believe so, yes. Okay. And you were in Maple Hill South. Yes, I was. And that'll translate to Maple Hill East or West. So, and then Andrea asked what suit, sweet type in East is more like sweet type C1 in Maple South. They're killing me. You'll have to check the floor plans on the website with details. Sure. We'll, we'll get that worked out. We'll, we'll, we'll answer that for you. They've exceeded my memory. Yeah.  And we know there are a lot of different types in Maple Hill and we're actually considering how to make it easier to talk about them without using so many different types. And we have a lounge area here, a kitchen as well. Okay. You can, a lot of people will come in or you might have a meeting in here with people on your floor and your RA. Yeah. You come in here, you have a little oven type set up here, microwave. We had a stove in ours, but there's no stove here. And there is a sink and then lots of space underneath.  I think you can check out some of those things downstairs too if you need to. Yeah.  And this is per floor. So through all of Maple's buildings, you'll find this sort of configuration. And it's beautiful view. It does have a nice view out there. Let's take a quick look through, peek through the curtains if you will. Oh, it's there we go. It's been amazed by the quality of the furniture that they put together. It's really nice. Comfortable. Yeah, that's a leather, I believe. Very great. So does the TV, Natalie asked, does the TV have a DVD player? And I'm not sure that I see one. Some of these have game systems attached to them. Okay. So there is a DVD player right there. Great. And you can hook up your game systems and all of that as well. Gotcha. And Natalie, thanks again for looking up that link on the page for people. I appreciate that. See, people helping people. It's awesome. Awesome. All right. So let's go into two of the other rooms. Yes. And yeah, and that'll do us. In addition to the elevators, you have stairs, which... Okay. Yeah. So you want to get a little cardio? You got it. 10,000 steps. Now, what was your major? What did you study? I am studying political science and legal, you know, just kind of legal studies. Yeah. Yeah. Head of Delos school, you think? I believe so. That's fantastic. All right. So we're in room 448. Yes. And what we have here is a, the configuration type is, it's four people who live in this particular space. So we've got just kind of coming in from the front, you have an area, which is sort of a central little area that everyone can share, common area. And then we have the speed bathroom area. Well, I guess it's just the sink area, really. And how my roommates and I kind of divvied up this space here. We would put all of our stuff in our shower caddy that we've taken as a shower and just set them all underneath here. Gotcha. And then we kind of go by who had our stuff. And so you, somebody could get two drawers and then two drawers here and one person would get the bottom drawer, which is a little bit the overflow drawer a little bit. Okay. And so it would work out best that way. You just kind of talk to your roommates and see, it also depends on who moves in first. So you get first pick. So word of the wise, it's always good to be a little okay. And then we'll go into the bathroom area. Yes. This is shared by four people. Yes. Bathroom and you got a little, what is that called? A shelf. Exactly. And you'll have this for all your towels and like that. A lot of space for that. And again, the shower curtain. This is, I believe, one they give you. So you can just take it off or leave it on however. We'll head on in. All right. So there's the shower head. People had asked earlier about the shower head. And the nice thing is that if the shower head is not doing what you expected to do, you can always turn in a maintenance request with fix it. Fix it is housing's maintenance request system. And so we're happy to change it out if needed. And they're very quick. And I've seen students put shelving in here. You can use any kind of a pressurized like from floor to ceiling because this is a towel, sound towel, ceiling, but it's the free sanding shelf in here for additional storage towels or whatever. Do you have any, so you were in this kind of configuration exactly. Do you have any thoughts about it? One thing with the shower, sometimes it can get a bit slippery depending on like what your other roommates use. So we decided collectively to just put one of those, you know, sticky mats on the floor so that people weren't just sliding around in the bathroom. But yeah, we also had like rugs because it can be very cold in the morning on the floor. We definitely want a rug on that floor. Yes, I would agree with that. So yeah, it's kind of a main toast for the bathroom. Sure. One question that came in about the bathroom, this is from Margot, need the length of the shower rod and the curtain. So let's measure, of course this is a tension rod too, so whatever you get is going to be a little bigger, but it's about 31. 31, okay. And then I can hold, let's see if I can hold that up here. If you can get the one down below. Maybe 72. About 72 inches is the length of the shower curtain. Okay, great. Let's head on in and look at the rooms. And again, we're going to look at one other room after this. And the other room is going to be the lofted room where you have kind of space above. And I kind of... John, we will be showing a loft. That'll be our last room. Okay. This setup is a little different, but I have seen this setup before. It's good in space and you kind of each have your own side. A question that came up a couple times in some of the earlier tours was, do you recommend a bed cover topper? I do, yes. It's not... Enthusiastically? Yeah, enthusiastically. It's not really necessary for everyone, but I know, like, let's say you have a bad back or you sleep a certain way, it can get slightly uncomfortable. So I bought a topper. I got mine from, I think, Target. Just get a cheap one. You don't need a super expensive one. You just put it over the top and it adds comfort instantly. So yeah, that's an enthusiastic yes. Okay, so money well spent on a topper. I know some other questions that have come in. Margot asks, does every dorm room have a window? Yes. And yeah, I think they do. Lisa asks, please measure how tall the headboard is on those beds. And you want... Oh, because it's lower. Right, right. How tall the headboard is. These beds are all identical. Okay, so every bed in all of Mabel's going to be the same height. So I said this height, the headboard would be about 42, 43. For you, if you want this height. That's at that height. At that height, it's 42. Now, it has, we can check our cheat sheet here. It's got some of the dimensions on there as well. Let's see. 81 would be the whole thing would be 81. Great. You have notches, so you can put it anywhere you want. Make the headboard any size you want. And then Jennifer asks, how tall from the floor is the desk shelf? How tall from the floor is the desk shelf? So I think we're talking about, yeah, that, so 57 to the very top of the thing. But I think she's saying, oh, this shelf, I'm wondering, I wonder if we're talking about this shelf right here. No, from the floor to the shelf. Is this the shelf you think? Yeah, so the floor to that. And Jennifer, wrong if we're not getting you the right one. Let us know. About 30 is what that is. Kim, there are two desks in this room. Yes. So here's one. And here's the other. And then Deborah asks, what is the width of the follow space between the beds? I'm trying to think of follow space. We mean, basically, the space between these two beds, I think. Okay. Yeah. Is that right, Deborah? Is that what you would like? We're happy to get it. Just want to make sure. Oh, the floor. Sorry. Yeah. Okay. What's the difference? What's the floor space between the beds? Between the beds? Like between? Like if they were doing a carpet, I think is what they do. Oh, okay. Can you help her out? Thank you. 58 inches is the space between the beds on the floor. Let's see. Jennifer, all the way to the shelf as if you were using it for a nightstand. So we're talking again about the shelf here. If you were using it for a nightstand. So yeah, I think we've got that. Yeah. Okay. Great. Any other questions? These are great questions and we love answering them. Let me give you a 360 of the room real quick. We do have new cable that's coming in. HBO is part of that package and it'll be digital cable from Cox. So things to note, you'll see the stabilizer bar right there. That's important to have. We also have safety guard rails if you decide to loft it very high that you can request from us and we're happy to give them to you. Elle asks, when the bed is lofted, is it possible to put the desk under the bed? Yes. We saw that in our first room. You can loft it high enough to put it under the bed. You don't even have to go all the way to the top to put the desk underneath actually. So. And that includes this right here. Like this is, this will go under there as well. That portion of it. Yes. Let's see. I feel like I included a question on here. Okay. Great. So let's go ahead and check out the loft room. Unless there's anything else in here that anyone wants, we'll pause for a second and make sure everybody gets to ask the questions they want. Okay. So there's another room that we, it's just like that. It's right here. That's A. Yeah. That's A and it's exactly like B and we explored B. Heather asks, are there cable outlets in the bedrooms or just living room space? I think there's both. Yes. Yeah. Here's one in the common living area. There's one there. Another one there. And then, oh, we're going to explore again a little bit. Do you know where they are here? Okay. There's a big four. There's a four right there. Let's see. There's probably more in here, but that's the one I see immediately. Okay. Deborah asks, do the beds come ready to loft or would you never request that part of move in? They come ready to loft. I would recommend bringing a rubber mallet. Yeah. If you absolutely need help, go through fix it and let us know. Right. So yes, you're welcome to do it yourself. Rubber mallet's very helpful. We can do it for you as well. The RA's also help you. Like if you find an RA on the floor, they can go and get a rubber mallet and physically help you lift your bed wherever you want it to go. Great. And then Shelby asks, do we become prepared to loft our own beds? So what tools? So we answered that. Great. Thank you. And then Natalie asks a question specifically for you. Oh, okay. What do you suggest dorm organization-wise? Like in your opinion, do you think it's best to loft the beds and put the desk below? What did you do when you were in your dorm? Do you find the right person for that question? I do have a tour on YouTube and I kind of lifted it about halfway. I put a fridge underneath one that came with a little ice container at the top and everything. So it was pretty tall actually. So I could fit the fridge underneath. I fit a full size kind of skinny trash can underneath my laundry hamper. You can fit a lot under there. But one thing I did do was I left the, we might have to go see it, but I left. Now she has a video on YouTube that we have to link to now with 10,000 views about how she set up her room. And I left this in the closet so I could have more space in the room and underneath my bed. And it's a great place to kind of section off. You can- What is this again? It's just a little drawer. You can put for females at least kind of your bras here and then just like all of your undergarments and section them off here with the rest of your clothes. So I find that very convenient as well. We have this side that already has some places where you can hang the things as well. I think we're referring to that as the chest of drawers. Chest of drawers, okay. And then Amy asks, do the A Suites have two double rooms in Maple West? Does this come with a, does this come with a living area? The A Suites. Amy, we can, we can check for you about A Suites. We don't have that configuration right in front of us. We do know that on the website we refer to A and B and all those things. I apologize. We'll get to it. Okay. I'll come back around and get that for you. Okay. Great. So let's go check out a loft in space. Yeah. Hey, loving all these questions, by the way. What's that? Okay. Which room? We're doing here. We're about to dig it up. Sorry, we're just trying to figure out which room we're doing next. 429 and 448. Okay. We do a lot of conference services in the summer. You saw someone downstairs. That's because we have people coming in and out. We have band camp, for example, here now. We just want to walk in on anybody. So we have to be sure we choose the right rooms. Okay, fantastic. So I think the, this is generally the same configuration on the whole. The bathroom's a little slightly different maybe. I mean it's the same stuff. It's just configured a bit different. Right. So we're in a lofted room right now. There's the bathroom. Great. Okay. Let's go upstairs to the lofted area and answer Kim's question, which is what do you recommend putting in the living area? What would fit? What did you guys put in here? We had a, we also did kind of like a small, seriously so small. I don't think it was meant for a TV. And then we just put our TV on top and we had little cushions in front. There's also a picture on the room tour since you're linking it. I've kind of set up, but it was really nice and, you know, we had the photo on the cushion. We found cushions easier than finding a like full table like this for our room. Sure. But yeah, and we left our food and our coffee maker and stuff out there as well. And I won't, I won't plug in a specific secondhand store, but we have a lot of really good secondhand stores in Fayetteville that you can go to to find great deals on kind of funky stuff that's really nice. You can tell someone, you can tell someone you worked in. I worked at, it's a piece of junk of store, but it was kind of through work study actually. And the great thing about it is it goes to, the proceeds go to like, you know, battered women and women in shelters. So it's a good, good cause. Good cause. Yeah, we have a couple that are affiliated with nonprofits. So we always appreciate when you use your secondhand money to help the community. So we're at a lofted space now and this is incredible. Oh, I love it. Hey, Juliana, you got a shout out from Natalie. She says, I would love to watch your videos and she can't wait. Please comment in the link below. She maybe asking you to link to it. If you don't mind, I'll go ahead and let you link to it. If you don't mind, cause that way they'll know kind of who you are if you want to. Okay. And then right here, so this is the lofted space. Yes, it's very spacious. Very spacious. Yeah. And you can do a lot of space decorations if that's what you like to do. I remember seeing this room, one of my friends, he, they had posters everywhere and like, they even did like one of those sticky basketball things, like the little ones. Oh, there was a basketball? And this would be a premium. This would be an example of a premium suite. Great. You can also watch the sunset and sunrise. Absolutely. Oh yeah, we'll get that little view. If you don't mind, you might open it up. John asks what furniture comes in the loft and it would be the furniture I think we have here right now. So John, what you find is a table and a chair. This may be, no, it's not like an easy boy. It's just a regular comfy looking chair. And then you have this coffee table here and then a couch that, you know, I think that's, was that leather? Yeah, maybe. You can see the parking lot from here as well. Okay. That's where a lot of people park on Naples. Right. And then you can see the Ozark mountains there in the horizon. We're excited that you're coming. And let me take a couple minutes just to take the last of the questions and then we'll sign off. And does anybody have any more questions for us that we can answer for you over here? These are about the Naples house. Is that the end? On the end of the corridors, there are two different types of study rooms. There's a group study room of the table and a large whiteboard. And then in another part of the building, there'd be a quiet study with over stuff chairs and a whiteboard. But lamps and it's much more comfortable environment to just sit and read or, you know, do your math or whatever in a quiet environment. But there are two different types of study rooms for different types of study you might need to do. Yeah, fantastic. Natalie asks us, do you need a special parking permit to park in the dorm parking lot? Is it usually hard to get a spot there? It's not hard to get a spot, but you do need a parking pass, I believe. It's called the resident reserved parking pass. And right now, whenever you made your application, you were able to choose whether you wanted one or not. And if you chose yes, then you went onto a waiting list and they're working for that waiting list right now. The other potential for parking is Garland Avenue Parking Deck, which is very close. It's not inexpensive, but it's very close and is a good option if you want to do that. Brittany asks, are the rooms in the premium suite the same? The rooms in all the premium suites are the same. The bedrooms would be the same. Now we do have a couple of rooms, I believe, in the east that are three bed suites that are different. You can find those on the website. They're more the middle of the long wings. And those are the first sets of premium rooms. Gotcha. And then Natalie also asks, which room type did you have, Juliana? When I got the question about how to decorate, that was most like my room. It wasn't exactly like that, but it was most like that, where it was like the A and the B, and I was in B, I believe. But it was set up like that and had an open area where I put the futon and things like that. And then it was the two rooms, and then I was the room in the room closest to the bathroom. And Toby asked, can you add any furniture to the loft area? You're welcome to bring what you'd like. The deal we have with housing is, you know, just leave it like you found it. Make sure it, you know, has all the furniture that was in here when you first moved in. We don't have space for you to put, take furniture away, so that's all on you as far as... Well, they need to leave the furniture. Yeah, you want to leave the furniture in the room. And I do want to say, if you find any, anything wrong with your furniture, they will switch it out for you. Because I remember my roommate, she had a problem with her chair, it wouldn't move up and down like it should have or something like that. And they just switched out her chair for her. So just let them know, but don't leave it. And then, you know, they come back and check through. There's like a big rip in the couch or something like that. Like just let them know when you move in so that you can avoid any, you know, fines or fees. Yeah, we don't want you guys having any extra fees. Yeah. Fix it. Fix it is where to go. On our webpage right now, on the left hand navigation area, you'll see something called fixit slash maintenance request. You can always go there to file to ask for help on something like that. Okay. Well, if there's nothing else, then we're going to go ahead and sign off. And thank you everyone for joining our tour. You want to wave us out? Yeah. Thanks for joining us. Bye.


Hi, I'm Erin. I'm a customer success specialist with Hypothesis. And today we're gonna talk about how to OCR a PDF you would like to use with Hypothesis in your learning management system, such as Canvas or Blackboard or Moodle, or even D2L. Every PDF you use with Hypothesis needs to have what we call an OCR layer. If you've saved an article or something from the web or even something from Word or Google Drive as a PDF to your device, there already is an OCR layer added. However, if by chance you scan something, let's say a book you like to teach and into your computer from a copy machine or from a scanner, then it's likely that that text does not have an OCR layer. OCR or Optical Character Recognition means that the system is able to read the text in your article as text and not as one big image. This is important because when you're using Hypothesis, you must be able to highlight individual items of text or pieces of text to be able to annotate. Fortunately, here at Hypothesis, we have created a tool to help you OCR the text that you have scanned into your computer. Or maybe you've got an old text that you had saved from ages ago and it does need an OCR layer. I'm gonna go ahead and share my screen. And we'll take a look at what I'm talking about. If you look at the text on your screen, this is a scanned newspaper article, I believe it's from 2016. As you can see, the text is kind of bent and curved. It does not have an OCR layer. Maybe I wanna use this with Hypothesis. I mean likely not because it's not really a good article, but it's a good example. All I need to do is go over to the tool that we here at Hypothesis have created. It's called docdrop.org backslash OCR. And it looks like this. Now I'm going to go ahead and select my file from my device. So the article that you or the reading that you need to OCR or add an OCR layer to must live on your device for this to occur. Find my article here. I'm gonna go ahead and hit open. It's gonna upload. I'm going to now choose run OCR. We're gonna give it a minute. Now I can download my newly OCRed article. So I'm gonna go ahead and download it. And it should appear. I'm gonna test this to see if I'm able to select individual text. And as you can see, I am. Now my article has an OCR layer and I can add it to my LMS using Hypothesis. I can annotate this article with my students selecting individual text as I go. Of course, if you have any questions, please contact us over here at Hypothesis. We are always happy to help.


It's an awesome CZ handgun, and this is the Rami, or shall I say the discontinued Rami. To me, I was thinking, that's crazy. Why would they do that? This handgun was in such high demand for so many years that if you see one, get it because by the time you go back to the gun store, it'll be gone. People are eating these up. Amazing gun. It has an aluminum frame. Three inch barrel. It does come standard with Night Sight. This is a decocker model, a little bit more expensive, it decocks the hammer into quarter cock, a four and a half pound single action trigger pull, just a sweetheart of a handgun instead is like a full size handgun with three inch barrel because it also comes with a 14 round magazine CZ Rami, one of my favorite CZ handguns right here.


Okay. Hello, everyone. My name is Alex Elgyve and today's topic will be GitHub action security landscape And I'll present you in my latest research really interesting research regarding a security regarding get abactions And so let's get into agenda So first we're gonna explore what is GitHub actions and why is it a really powerful CICD system? Then we'll get to into what kind of misconfigurations the get abactions could have and how an attacker could leverage this one into code execution Then we'll try to understand what could be the consequences of of this code Code execution by exploring get abaction internals will get some several interesting demos there And then finally will list the possible mitigations for all these issues will present So I'm ex Alex Elgyve. I'm a senior security researcher at Psycode Previously I were a malware research team leader at checkpoint. I would reverse engineering a complex crime where NAP team malware's I love a CTF. You can follow me Twitter. So reach out to me whatever you want and So let's talk about the github and github actions And github for all of his history was all about storing source code about two two to three years ago They went into a bit of different but similar direction and the unleashed github action Which is a way to automate customize and execute the software development workflows right from the repository And github is extremely popular as you all know it has over 73 million developers To have more than 200 million repositories and github actions also became extremely popular Mainly to its very rich marketplace a containing more than 12,000 custom actions and almost any Environment has action that can support workflows inside the inside github actions and So what do we need the github actions the most Simple Workflow that you could build in github actions is to take our code for example go lang or python or see or Doesn't matter to build that code package it as a container and push it to our a chosen a registry Could be docker hub jfrog or whatever you want There is additional scenarios that we could use github actions for example creating schedule tasks that could scan vulnerabilities in code Could be running tests for a pull request Labeling issues it could be Sending the issue that created in github to a ticket handling system like a JIRA Monday asana and etc So how a github action workflow looks like first of all, it's a YAML file and Contains free parts contains a name in this example. It's a github action demo Contains a triggered event in this example. It's a push event This means that whenever we push a new code into the repository This workflow will be triggered and then contains several jobs and each jobs contains steps In this example, we have a single Step that just echoes hello world and if we take this YAML file put it in In the repository to commit the repository in that git slash workflows path That's it that whenever we push a new code into the repository the github action service will trigger this workflow for us simple as that So to understand the vulnerabilities and the issues we found in it or send some of the core mechanics of github actions and how it works The entity that Executes the jobs and the workflows itself called github runner and this is an open-source project We are maintained by github that just fetches the jobs from the github a github action service and just execute them This runner could be run either on a github hosted machine Which is the more a popular method to run workflows or it could also be run on a self-hosted machine If it it's run on a github hosted machine, it also run as an ephemeral environment This means that each job will be will be run on a completely clean VM isolated machine And whenever the job's over that machine will be completely deleted Yeah, that happens For each workflow run a new temporary github token will be created this token Is used inside the workflow to invoke various github API requests and we'll soon they see what is that token and why it why it's created So what is github token the until it was Introduced by a github actions the popular method to invoke github API was using personal access token But the problem the personal access token has a few as two main drawbacks It is tied to the user Permission set and it's it's not granular enough to be To permit it to specific repositories So it is the first drawback and the second drawback is that it has a really long lifetime So if this token the personal access token is leaked So it's not it's not good that it's a very long lifetime and could it could be leaked So github introduced github token And this is the preferred method by github to use to invoke github API inside the workflows And this token as a default the right permissions for most of the triggered event And his it has permission only for the repository from where it was the workflow was invoked from and It's valid only for the duration of the action or up to 24 hours the most And it used also as a default parameter for many For many external action used in the that workflow And as I said also the preferred method they to invoke github API functionalities Also another security mitigation github introduced is that a forked request to repositories It can will receive for public repositories will receive at most read permissions for that github token or else It will be a serious security issue So another Core mechanic of github actions is secrets In order to create a meaningful workflows in our in our project We need to store various secrets and invoke a request to to other resources for example, okay We want to invoke it to cloud API or to a various artifact registries and And so These secrets could be divided into three groups First secrets defined on our organization level These secrets will be exposed to all the workflows in order repositories for that the organization Also that each secrets could be also limited to specific a private repositories or specific repositories An additional level of exposure is secrets that defined on the repository level These secrets will be exposed to all the workflows for that specific repository and And the third one is secrets defined in a positive environment, which we'll talk later in the mitigation part So now that we have some background on github on github actions, let's start Let's present the issues we found and how to handle it We have a simple a workflow that we created That will It will be a triggered whenever a new issue is created. I Probably everyone knows issue on github. They're used to track their bugs or maybe feature requests and so on So we can create a new Workflow that will be triggered whenever a new issue is created and this workflow contains the one job and will run this Bash script whenever it's run this script checks that the issue title contains the word bug for example And if it the title contains the word bug it will invoke github API and update the The issue label with a new label that called bug It's a simple workflow that could be maybe could be used to help maintainers to triage the issues for example And this workflow we can see this double curly brackets This is another mechanism of github actions that helps the workflow developers To receive inputs from the user or from the github action service In our example we receiving the issue title We're saving the a the github token secret Which is which you are using to invoke the github API and we're also receiving the issue URL Which is the URL API to invoke and to add this label? on the first site this workflow looks quite innocent and And looks quite okay, but actually it's not and it's vulnerable to code injection The problem is that we are not sanitizing and not verifying this issue title Which is user controlled any user could insert? They could inject code into that title actually you can manage to to run code on our workflow for example If we create such title It has a Disquitation marks that ends the if in that workflow and actually then we're just inserting our code for example APT install figlet and figlet psychode which will result in printing this pretty psychotext We can see that I will manage to a execute code on the build server of that action using using user input for that for the title pretty cool But is it a bug overfeature? Actually github acknowledge it and it's even in the Documentations the github says that when you create workflows you should always consider whether a code must might execute untrusted input from the attackers But the real question is whether the maintainers of the project and the owner project owners are aware of these issues so we went into into small journey and and There is a really cool tool that called the github code search It's in still in the preview phase. I suggest you all to check it out. It's works really great and we wanted to to see how many a public workflows could be a susceptible to this vulnerable Injection so inserted several keywords for example, it could be the issue title the issue body or a several other user-controlled input we inserted the the run command and and We were surprised to see there are many many Workflows that are vulnerable to this to this Injection So we could really safely said say that it's quite a widespread issue So out of all this we found thousands of repositories that have was were vulnerable to this A code injection out of it doesn't deposit or is the most popular one Were liquid base, which is a really popular database a schema changing tool We found it in Dynamo, which is a project that's sponsored by Autodesk. It's a visual programming tool Founder which is transactual a database wire, which is an open source communication platform Astro, which is a static side builder and many many more a Liquid based on its own claims that it has been downloaded over over 75 million times So we can could safely say that These vulnerabilities could impact maybe millions of potential victims So what could be the consequences of this build compromise? first Soon we see how it's possible, but we could expose the secrets previously We talked what its secrets and how it works. We could expose this the secrets could contain sensitive assets like AWS tokens GCP Azure tokens Docker half JFrog and and so on We could use the exposed the github tokens to commit back to the repository and maybe to introduce some Botnet and which will be deployed to end user organization environment, which could be could result in a supply chain attack And a much smaller risk would be an ability to run and might be botnets or a crypto miners on the runner infrastructure So let's see how from technical perspective. How can we actually expose these secrets? How an attacker could do that? We'll take an example which will follow us through the slides So this example Will be the we'll build a workflow that will be triggered whenever a new issue is created just like previously It will define Environment variable which is called github token which received the github token value will soon see why we'll define that And it will contain three steps. The first one will be running a checkout command this syntax is The action to check out the whoever not familiar with github actions It's with our calling an external action. It's called checkout, which is basically doing a git clone to the code and The second command would just will be printing the issue title and description and the third command similar to previously Will invoke a github API Together with an additional secret that is the bot token an additional secret which we which will define and with Update this issue with with some label as previously as we've seen previously This workflow is vulnerable We are not sanitizing the title and the body of the issue and a potential attacker could insert malicious code there so to Explore the vulnerabilities to understand the how can we how can how can we exploit it? We created a simple lab environment instead of tweaking the Workflows and seeing the results. We wanted let's create a reversal from the from the build environment right into our Rental into our lab computer for that. We use the popular tool the n grock We just say run it with the random port for example 10,000 We received from n grock the end point which will use in our exploit Then we just run net cut to listen on the port 10,000 and then we will send the malicious payload to the To the issue to create a reversal. So let's sum it up. We Finally if we create this issue in github in to that specific vulnerable workflow It will result in a creating a reversal that we will we control from our Lab computer and see the entire infrastructure of github actions So let's get back to the example the first method which is very simple method to Exfiltrate secrets will be by listing all the environment variables in this example We defined a github token as one of the environment variables and simply by listing all of them We could get this variable and use it for a malicious purposes The second scenario will be to use the the checkout command the action checkout command as As I said previously this action This checkout command is doing git clone But it also behind the scenes it sends the github token as a default parameter to the external action This github token this default parameter is used as an authorization token for the git clone So in addition if when we are using some token for git clone We're also creating that git slash config file in that directory where we clone the code and This file also contains the authorization parameters so as an attacker if we If you check out command was used we could take this file Grab the authorization line pipe it through a base 64 decoding and we get the github token just as previously the third method that we found is a bit more complex and During our reconnaissance of the runner infrastructure We found that for each run command with two such commands for each run command Previously before it's been executed It also is saved as a shell file in the runner infrastructure in that specific runner temp directory so for example For this specific workflow we have a see a single shell file That contains the exact content of this Run command, but instead of the placeholders of the issue titan issue body It will contain the real value that github action services inserted there So as an attacker we could get this script and if there contains some Some secrets or some sensitive data we could we could get to termalicious per Usages for example in the second round command with this bot token that we could use it use it in X filtrated Unfortunately, we have only code execution capabilities on this point on the first run command We didn't receive yet the second shell file So a simple solution as an attacker could be to put some maybe agent or persistent script on that machine and wait For the second command to to come and be written to to that directory and whenever he's there just exfiltrated as me immediately So we could do the following We could create some script that records all the modified shell file in that directory and whenever And we could pack the script as a docker container to ease the deployment Just run it in some detach mode and whenever a New file will be written there a new shell file. It will be Exfiltrated immediately and we'll soon see that as a demo so this was the the simple methods attacker could apply a more advanced method are Possible as well which out of the scope of this talk It's could be inspecting the memory layout of the of the runner processes it could be exfiltrating them their environment variables it could be a Recording a network traffic and extracting sensitive information from it and more So let's see several demos the first one will show how we are able to Exfiltrate the secrets we'll do that in two phases And the first phase will send The simple github token from the environment available and for the second phase We'll put that persistent script on the machine We wait for the for the second a command for second second run command and we'll just get the entire script to our lab environment So let's see that in action First we set up in our server We have here we have Demo repository second And we're sending the malicious issue. Let's hope it works This issue will contains the several commands. The first one will exfiltrate the github token through the From the environment variable and then we'll set up some docker container You could see we got the first one, which is the github token to our server exfiltrated and Then we got the second one The second secret You could notice that we have the complete shell file the complete run command that we had in the workflow But instead of the bot token with the revealed secret Which an attacker could use for his malicious purposes This was the first demo For the second demo we show how we're able to commit a malicious code to the repository Using these secrets For that we created a simple Simple bash script. Nothing fancy there.  It does some git configuration He finally just git commit git push really plain simple and on the runner side we We are we're fetching this script giving it parameters And we're just giving the proper permission and run it Let's see that We're running the malicious issue You could see the repository has a single readme file and workflow in in this in this issue As I previously said, it's first fetching the the malicious the script Giving it the proper permission and just running it giving it a parameter the file that want to commit and the the path of the file Let's see the repository now We have a new addition of five in the repository. It's called malicious file that was committed 19 seconds ago in addition Also, we are controlling the commit message So this is our control data the the commit message and the maintainer name We can put it or whatever you want if a game commit signing isn't enforced So this was the second demo the third demo is a bit more complex Up at this point we show how we are able to exfiltrate secrets That we found in a specific vulnerable workflow in that specific vulnerable workflow But there are additional secrets that could be defined in either on the repository on the organization That aren't using that specific workflow So we showed how we are able to commit to the repository So why not we use this commit ability the right ability to commit an additional workflow to the repository Which will exfiltrate all possible secrets of that is that repository is a is can can access to So that's what we do exactly We created we will commit a new workflow That will take all the secrets that This workflow is as access to Write it to the file and just take this file and send it to our server In addition we'll do some cool trick that this workflow will also delete itself. So we won't leave any traces But we have one problem how we will invoke this workflow how we make it to run We could maybe invoke the github api But github deny the ability to invoke workflows within other workflows Probably to deny some circular invocation of workflows But we thought about the other trick This trick trick is called workflow run We created the workflow and told him to run after And another workflow is finished. So we told him to run after the another workflow that's called Vuln will finish which is the Vulnerable workflow which we injected in the first place So the flow would be we injecting code to the original workflow That code will create a new Workflow and when the original workflow will be finished github action service Will trigger this automatically according to this workflow run trigger And on the runner side on the runner command, we just We will invoke a simple curl to github api together with the With the github token as an as a token to a to commit this workflow We will add the message and the committer and the content will be base 64 encoding of this entire workflow So we will take all these parameters invoke Invoke api to the contents api with the path Where we want to commit this file So let's see that So we are committing this. We're adding this malicious issue We couldn't add this to the title because it was too long. So add it to the body But it does exactly what we seen in the in the slides is Is calling a curl command to github api together with all the parameters Together with the with the commit message the committer the the content the base 64 content And in few seconds, I hope we'll see something Yeah, we can see we got an additional message We have the bot token which is the bot token which we've seen previously We got it From the repository secrets We got the github token For that specific workflow and in the she and in an addition we got two additional secrets We got secret one and secret two Which could be maybe a secret that defined the repository organization that weren't in that specific workflow And the and it also could be really sensitive Sensitive assets of that specific repository So that's it for the demos Let's see how can we mitigate these issues The first mitigation will be to avoid avoid run steps For example, instead of issuing a Curl to github api to update A label of for example that issue We can use an external action. For example, the laborer laborer external action Which does exactly the same it receives The parameter for what label you want to add it Or you also send the github token to the to the external action It does exactly the same and it's not it's not susceptible to a code ejection This mitigation it's not always possible There's cases where you can't run from doing from using a bash script, but whenever you can it's very recommended The second mitigation will be sanitizing your input. This is maybe the most effective way to To stop this specific attack. This means that instead of using a Our example like issue title issue body inside the run command The preferred method will be to define them outside as intermediate environment variable For example as title and description environment variable And then use this environment variable inside the inside the run command Even if this in the title description will contain A code it won't be run It will be treated as text because it's sanitized as an environment variable Another effective method for post exploitation Will be to limit token permissions Inside the workflow inside the yaml file. We can add this permission tag Which will which we that are defining The permission that the github token will have during that build So in our example we use the github token either to clone the code and we used to update the issues So this is the only set of permissions we need for that token So we prefer method will be to add these permissions in each workflow to to limit the github token permissions So even if Attackers manage to to get a code execution on your build server You won't be able to do whatever you want because this permission will be limited Another mitigation will be to limit limit secret exposure which is more irrelevant To the third demo that I showed that there are organization secrets Each organization secrets you can define to what level of exposure you want that secrets to be either To all the repositories in the organization, maybe only private ones or selected ones And the last mitigation would be to use environments and branch protection This is a quite new mitigation that available only on github enterprise You can you can define Environments for your github action workflows. For example Production testing staging in each such environment will contain its own private secret But the But you can use these environments also to apply some several security mitigations Like branch protections and other various mitigations. So it's it's quite an effective method So that's it. So what will be the takeaways from this this talk? First of all, even when github does most of the security For you for the github actions, I mean It gives you a vm isolated the machines and ephemeral environments and many other security features Your builds pipeline still could be compromised. So this may be the most important takeaway from this code this talk As we've seen in the best practices paper Github actions a platform delegates to the developer their responsibility from some of the security features in the workflows I'm a developer myself and I I know I know developers do make mistakes. So it should be handled carefully The third one is the consequences of a build compromise could be quite disastrous It could they could result in exposing sensitive secrets it could be a Resulting in a critical supply chain incidents and could be quite dangerous And the last one is the specific github gives you the all the right set of tools to secure your workflows And it's really securing a pipeline isn't a matter of faith And you should you have the right tools to protect and we encourage you to do that And that's it. Thank you. You're welcome to check the full blog post in a psychote blog a full technical details You're welcome to reach out of me a twitter whenever you want And if we have time I can take a few questions Yeah, I've been doing that and they mostly They're written in node the external action and they're quite more secure than using that So yeah, I would look in that and it was really quite harder to find the external action that's vulnerable than this Best script maybe louder. Yeah And I mean, yeah, you could get you asking you asked if if I found any ways for a nano maintainer to execute code on a Or non maintainer Yeah, but what do you mean outside injections? Other than other methods than injections to for non maintainer to execute Not that I know of I was researching this specific attack. So maybe there are more that we're not aware of. So I don't know Yeah, automator scanners could help to remediate it. I mean they could like same grip. For example It's a great tool that could do that. It could find like a this specific vulnerable action and could Same grip Yeah, I didn't look specifically at scorecard, but there's other tools that do that. So I probably scorecard do that as well Sorry My specific demo it wasn't but it's possible to do that also with a git force push and Unless the first push was disabled by a branch protection, which can be quite complex But if it's not it's possible also to alter the git history and to So it will disappear. Well, thank you