Good morning. We're a good day folks. Hello. How's it going? Let's see what's the background for today. Who is that? It sounds like somebody was biking really fast outside. So I've pasted a I pasted a link to our roaming docks. We don't really have an agenda today. I sent out on the Slack channel if anybody wanted to chat. I'm happy to talk about whatever anybody wants or some updates that people are asking about. We've been mostly doing work in distribution to make sure we can push and pull and discover signatures in a registry so that we can sign things. So there has been progress, but the progress hasn't really been specific to notary, other than a little navel notary. So then that works for publishing artifacts and discovering artifacts. That's how notary signatures will be discovered. To be fair, I keep on trying to reinforce this, is that we're still in prototyping pain. So that's the current prototype. But yes, the answer is yes, but I want to make sure that everybody remembers that we're still not building the house yet. We're still building models to make sure that we like what we're doing before we go at scale is the best way to put it. And if you look at the NV2 repo, actually all the repos, we put a prototype one in all of the forks that we've created, or forks of other projects than the current NV2 project, which is rooted in the notary project grouping org. It's all to reinforce that we want to keep the root of the projects to be what will eventually be the reference implementation, the spec on the projects that are in notary project, and then the forks that are in notary project are staging grounds for what we want to kind of figure out end to end. And in fact, I was talking with Chris about this today, because we want to make sure everybody understood. In fact, I'm probably going to push some updates to the readme's and the root of those forks to say, look, these are not forks that will be ever shipped by themselves. The idea is that these are forks that we're going to prototype and then experiences. And if we like them, we being this community, both here and the OCI group, then as we get all the pieces coordinated, and we like that this works well with this other one, then we'll make PRs upstream to those projects, and those would come back down. I did skip a bit of that. Part of this is to figure out the prototypes, and then we'll actually write the spec. These will be reference implementations of that spec. But I know everybody's anxious to having something to work with. Surgis, that kind of frame the question, which is, I just want to use this thing, right? Yeah, well, I mean, yeah, I'm right now trying to find the repo. It must be linked from... Yeah, probably, but I don't know if we have them. So here's the roots, the org, and then within that org you'll see a bunch of projects. There's the requirements project, which is the... In fact, we'll just share. The requirements, of course, is where we've started, and that's capturing what we're actually trying to do for goals, non-goals, scenarios, and so forth.  Some are forks, some aren't. So the other one that's natively here is NV2, and you'll notice that the default project is prototype one, and this talks about the end and experience that we're trying to build around those requirements. The other projects that you see here, everything from distribution, which is the reference implementation of the registry, to the distribution spec, to artifacts and ORAS, are forks of other projects that are that staging content that I was talking about. Does the distribution one have any, I don't know, specific changes in it yet? We're working on some, but we actually do have. So overall, we've been working on this one. We meet Tuesday night, our time, well, our time, sorry, Pacific time, because he's currently in India, and she weighs also in China. So that's, we've been kind of getting conversations there, kind of staged for this. And I actually have to look at this. All right, so this is five days, we'll have to go back and look at this again. But so that's the stuff that's happening there, and we have been making sure that all the PR has happened here. So there is the PR on the actual distribution spec. But if you look at NV2, we've been trying to lead with docs. So here's the various distribution proposal. And then there's, so this is the actual API. This was the conversation of what the experiences were shooting for. And we'll just kind of click in here. You'll see that, you know, basically there's this conversation here, and there's still, there was a couple of options here that we were talking about. Let me just see if I'm looking at the right ones here. Actually, this doesn't look like the one I was referring to. Hold on a second. Which almost I just looked at. I got myself confused. Proposal for generic lookup and distribution proposal. I think this is the one that actually has the, yeah, this is the one that has the conversation. And it's got some pictures. So here, persistence, push, discovery, pull, and then some examples. In fact, Sam provided some feedback last week, last Friday or whatever. And I have to go look through that today. But basically, this is the one where we're talking about a couple of different options for how we would look things up. So here is option one. Basically, there's a manifest that points back to another, the thing that you would actually sign. So we use the net monitor software as the thing that we're signing. And then there is another option here where we're actually using index, which is more native to a registry of how things are tracked. There is an extreme to this where actually here is using index to sign another index where each thing is signed. And I'm purposely not going into detail, which I'm happy to go back, I'll just go and put some context. And then here is an even further more true, accurate representation that instead of the index storing the signature itself, it would store another manifest. So it's kind of an extreme clarity of implementation, which is a good conversation. Questions whether we want to go that far. And then, okay, so that's the persistence model. And then we talk about how we would link those. So the most of this conversation has been more distribution spec focus, like the notary folks that are pure focused on their signature stops, like I just want to get these signatures in and out. So this has been the majority of conversations we've been having in the OCI distribution spec working group with some overlap here of people. And then there's a discovery API that we've been saying, look, if I've, there's this reverse lookup model, because what you're basically saying is, I want the image, the image, any artifact. But I want to know what signatures were associated with this. Because remember, we have loosely coupled, loosely coupled artifacts, the signature is does not is not put directly on the thing that you're signing, because that would change its digest. They're loosely coupled. And you have a collection of signatures that could actually happen later on. So to make that happen, the registry would have to actually look into the contents and we can push to it as signatures and index the results. Yes, I'm trying to see there's a picture here, except I like pictures and others like text. So but it helps have both. The, let me use the non-exploded version here. So yeah, so, and we're the, so if I push an image, I'll just use images as an example, this net monitor software, I later am going to push a signature. And the signatures, you know, there's, there's two of them in this case, one for Wabbit Networks, which is the company that distributes net monitor and Acme Rockets, which is consuming it, but they want to have a signature that says this is good in my environment. The way distribution works today is you push a thing and you find out the thing that it references, which of course it needs to know at the time it's pushed. So normally that will be layers. The fact that this is pushed later and references it is not a something registries know today. They know, but there's no API that kind of provides that reference capability. So that's the thing that we're trying to find a reasonable API that would be used for signatures that could be used for other things as well. So it's not like, it's not, we're not trying to necessarily special type signatures in a registry. Do you have a specific other use case already in mind or you're just saying it generally should be useful? I, the interesting one is metadata, which I've got another proposal I'm working on which probably wouldn't be stored as blobs. So not directly, although I'm thinking about it because this is what was the fact that you know the use of indexes is not used heavily in registries. In fact, number of registries didn't even support indexes until recently. What we're seeing is multi-arc manifest as becoming more used. We're seeing that and I'll come back to how this ties back. Basically, sorry, when you start seeing more uses of index, then you actually want to be careful about deleting any manifests that are consumed by an index. So we think the broader use of index, even for multi-arc, will surface this need to have APIs that help you figure out what is referenced by something. So just the generic use of index for multi-arc. The use of index for whether it's be signatures or a CNAB, which is a collection of things or other artifact types, I also think we'll start seeing more need of this reverse lookup model. It's a great question. Like, are we over designing that part of the conversation we're trying to make sure that we're not? Okay, well, thanks for that. I feel good. I have more questions. Does anyone else want to talk about it? So are you having a meeting tomorrow night about the distribution as part of this? Yeah, sorry, I'm not going to continue. So we have been struggling on global time zones. And some of my own team is scattered around Chiwei works and lives out of China, out of Shanghai. Averal is temporarily in India. It's going to be coming back to Canada. So within our own team, we've been struggling with that. Rather than we, when we had a couple of meetings, there's a couple of topics that I really wanted to ensure Averal and Chiwei were there. We did propose a slightly different time, which I know others have asked for as well. At this point, these are just like our internal team meetings that we have. The OCI meeting is on Wednesday at 2 p.m. Pacific time. So the conversations that I was referencing was just more about the timeline of what I'm going to get a chance to talk about. Okay, I just thought if you were actually talking about changes or updates of distribution implementation, I thought Ram might want to be there to see how it affects us. Yeah, no, absolutely. Those are the Tuesday yet, sorry, the Wednesday at 2 p.m. meetings. Yeah, yeah. And what we've been trying to do is make sure that anything that we are proposing, like we were at some points just having things amongst our own repos and we always look, let's just be much more transparent about the work. There wasn't any secrecy or anything. It's just a matter of where this changes me. So we've been trying to get all the proposals pushed to these projects. In fact, that's why, that was one of the reasons why we went and added, like here, if I just look at distributions, you're going to see everything's got a prototype one that's a default in the Notary Project, specifically so that we can make sure that everything we're doing is kind of staged in a way that people can see in common time. I was actually looking at the chat because usually I have some great questions and feedback, but sometimes you type it. So do you have any thoughts that you'd like to bring up? Not really, I'm afraid I was only halfway in at that issue. That's fair enough. This is mostly just a catch-up week. I was really just wanting to make sure, I didn't want to, we have been making progress. It's just not as obvious here. So I figured, I'd hold the meeting. Sam, I haven't had a chance to just look at your stuff today. And I think you were just about to speak. Steve, I saw on one of the pull requests there was a prototype for tough integration. And what I couldn't find was just the description of what that was supposed, how that was supposed to work without me trying to read through the code base. Yeah, great question. It's the balance of engineering actually making stuff possible and PMs trying to describe it and understand it ourselves. So what happened was, if you remember a couple of weeks ago, we've been trying to make progress, specifically using tough implementation, the update framework implementation, and we were struggling on a number of different dimensions, which repos get used to go into it, the time stamp and rollback in some of the others. So Shiwei, who knows the space really well and did our Docker content trust implementation for ACR, had some ideas. But what happened was we couldn't figure out how to make them all work in the goal of what we're trying to do now with the ephemeral clients and some of the gaps. Rather than just, you know, shelve it, what we wanted to do is we shelve it without visibility. We wanted to take what he had thought and capture that. So all that is is like a shelf of some thought process and how we could persist it into the signature work. But there's a whole bunch of loose ends, like how do we have a second place of verification to make sure that the time stamp stuff is valid and others. So it's actually not intentionally doesn't, it's, we didn't have the time to capture all the information about it, but we didn't want to lose the work in progress. So that's why it's just parked there for now. Are there any like rough notes on it or is my best bet just to try to read through the code? There's no rough notes. There's, I'm trying to think of what, what context could I even provide that we were talking about beyond what I just said. That's basically it. I mean, basically that's like, if we were to serialize the metadata for the update framework into an artifact that we could push into a registry, that's what Chiwei was thinking about. All of the things that go around it, how do you maintain the time stamps? How do you make sure that an ephemeral client can get information from two sources to know that this wasn't just hacked? All of those pieces have not been thought through. And there's no notes to it. Sorry. There's literally a matter of how we continue to make some progress versus, because what we said is we wanted to make that in a phase two because we just felt like we were not making any progress by having all of that conversation, but we just wanted to capture at least what we're at. That's the best answer I have. I'm hoping that we can get through this iteration of prototype one, if you will, pretty relatively quickly that we can kind of, yes, we like this and an experience. Yes, we like the APIs. We're talking about a distribution, which would in theory apply to the tough metadata as well. And then we could come back and figure like, how do we assure a rollback of a hacked registry when the client isn't trustable? Well, they're not trustable. The update framework kind of is based on the fact that the client knows what it was at some point. And if it talks to the registry, it says, hey, what do you have now? And I go, and it can figure out, wait, you've gone back in time. I don't trust you now. When the client has no information, no reference data, because it's a newly instanced object every time, we need some other place to get that information from. So that's the larger thing we need to figure out is how do we do. That information. If you want to jump into it, we're happy to hear that. Well, the update framework is the one that handles rollbacks just by having very short spans on signatures, right? Or am I mixing things up? Okay, so I mean, I guess one question there would be, is that going to be a problem in terms of storage on our servers or restoring the artifacts to the signature? Yeah, there's been a couple of, and those are great questions. That's exactly, there's a couple of questions that come about that, and it's been viewed as scalability. And so the update framework folks went off and did a whole bunch of scalability things and came up with a pattern that says they can distill this down pretty small. So it's not a lot of content. And there's some great work there, but we really haven't been able to get a good articulation of the security problems of two customers and or even two teams in the same customer sharing a registry. So you have things like Docker Hub and now, you know, GitHub where you have multiple, completely independent entities that are sharing the same registry, you know, Docker Hub and GitHub. And I, for others, I refer to the Coke and Pepsi scenario or maybe Hatfield, McCoy's, whatever. And the idea is that there should be absolutely no knowledge of or sharing or any sort of data whatsoever between the two, even of digest. So we need to be able to solve that. The, so you can't really even use metadata that goes across those two customers, even within the same company. So we'll take Web at networks here or AcquiLockets is the consuming company. There's multiple teams inside that company, and they also may not want their data shared across them too. But we also have just a general explosion of registries. I think part of the update framework stuff was based around where there was NPM or PIPI as a single registry. And what we're seeing is that that really isn't the model that customers are scaling out to those become interesting sources. And this is a much larger conversation. But the reality is customers need to bring the content into their own registry so they can secure it and approve it. But we also see lots of public places for stuff to get to get information from. So there's there is no one registry to secure. So there's a there's a all of that is wrapped into this problem of what is the right scope of timestamp and rollback protection that we need to balance. Also coupled with the fact that all the clouds are moving to this model of you want to run a container or run an artifact. Here is a completely blank compute instance that you can then decide how you want to provision. There's no history to it. So now if I want to get history that says, hey, last time I talked to Docker hub slash Debian, which was a week ago or yesterday, here's the the timestamp data that I had. But that's not on that compute note because it wasn't yours two seconds ago. Where do you get that information from? Where do you persist that state? So that whole balance coupled with lots of registries is the tangled mess that we have to figure out and how do we really handle update framework on the semantics. And is this right here that I knew to discuss that or is there some other place where you with the tough people or something to discuss that kind of thing? I'm just I'm sorry, I just hear the Let me turn a bit block the wind. Is this any better? Yeah, that is actually okay. I'm just wondering whether is this call on other weeks the place to discuss that? Or is there some other venue where you discuss with where tough people show up people from the tough community? So they were actively involved. In fact, I'm doing a quick look here. I don't see Marina or Justin here today. We had or Trisha, I don't want to leave anybody out. We have been discussing with them for a while. That's how these conversations started. And we got caught up in all this. So I can't say there's any one good meeting where you can look for half an hour and hear this discussion. Everybody comes together, go, yes, this is a problem. We should figure out a salivate. It's more of the first several meetings that we had of Notary V2 got wrapped up in that. And that's when several weeks ago, we decided to split this out between two phases. So that's unfortunately that what I just gave you this summer is probably the best summary of it. And we need to reconvene and do that, have that conversation. But like I said, we felt we needed to separate it out into phase one and phase two, where we can get the end to end kind of figured out. And then we can figure out how to roll this update rollback semantics into the design. So yes, we will have that again. I don't have an exact timeframe yet. We have been talking behind the scenes, not behind the scenes, like just one-on-ones and several discussions of, hey, we still need to address this. I think the question for you, for search for you, is what are the pieces that you really feel are important that we need to capture? Those are really helpful. Right. So the situation I've got in mind right now is let's say that I'm not with them anymore, but let's say I'm with Ubuntu and I've got a container store, an image store that I'm publishing for people to use. And you've got another company that wants to have their lab be mainly off the net, but they want to use our images. So they're going to download them. Somehow they're going to need to delegate to the signatures. So if we're using the update framework and we're using very short signature time frames, we're now basically saying that this proxied environment is going to have to every hour fetch new signatures from the public service. And that seemed like a potential problem. So I'm wondering if that's been considered. Yeah, actually, that's a great summary of it because that you're starting to get into, there's no single registry that everybody authoritatively goes to. There's not only private registries that people pull content to, but there's also air gap registries that people pull content into, which is much in what you were saying. There's a combination, there's a known problem. How do you propagate that out? So the thought has been key revocation versus a particular registry got hacked. Those are two different things that I don't think we've fully wrestled with other than we... Oh, I thought that key revocation had been explicitly made not a part of this. Key rotation. Key revocation, is that what you meant? Yeah, yeah, key revocation. Sorry, I don't know if I heard it wrong. Key revocation is part of it. Niaz has been trying to drive that. He has meetings on Friday mornings, but has been tied up in other things that he hasn't been able to. I think he says he's going to start again this week. So it's definitely part of what we want to do with notary. It's what we've done is we've just split that out. The key management and the risks associated with that is part of this working group that is an active working group. It's part of what I would call phase one. It's just we've got... Some of the stuff is just so detailed that there's some key experts in the industry that we really need to be thinking about this, and Niaz has been driving that working group. So I think he said he was going to... We started back this Friday. He had a couple of weeks where he had to be off between vacation and some other problems. As for the tough times stems in disconnected environments, I mean, in principle, every client can just add some toleration. So if the client knows that the data is updated every Monday, then everything that is at least from the last Monday would be accepted. Client policy can always make a tough picker. So you're kind of saying for the Ubuntu kind of case is that if somebody is at least doing a once a week kind of thing in a separate environment, whether it's air-gapped or a copy or not. If the data is coming across the air-gap only once a week, then it's fine for the internal environments to only require time stems to be about a week old. Presumably whoever controls the environment is probably somewhat aware of the air-gap at least and what it is allowed or isn't allowed to do. Yeah, kind of like a policy. Some individual customers can make a policy choice in how they do that. Yeah. If the air-gap administrator decides to hide from you that something has been revoked, then it just doesn't exist for all intents and purposes. Yeah. This is where the... I think around the submarine scenario where it goes under, but we have other seagoing vessels I think is one of the ways that is categorizing whether it be container ships or cruise lines, eventually they'll be cruise lines again, that it's too expensive to take updates while they're at sea, so they do it while they're in port and that might be a week. So yeah, those are definitely policies where some other team might be an IoT environment where it scares the hell out of them to be more than four hours out of date. Sorry, Sergio, you were saying something. Well, I need to think about how to express this better, but I could imagine an air-gap scenario where the regular schedule is every week there's updates, but then on Tuesday, oh my god, there's this... We absolutely have to have this fixed in. So we bring the fix in. Since our regular cadence is weekly, we've now put a week-long valid signature on these things, but we have to in fact invalidate them now because on Tuesday we got this other thing in. I'm not quite sure how that fits in unless we have a separate service running inside the air-gapped environment that every day maybe just says, well, these things should still be valid, so I'll always sign them for another day. And on Tuesday this thing came in, so we tell that service not to sign those, so that on Wednesday the Monday images are invalidated. Is that the answer here? I think it's an input into an answer, and... Oh, I didn't realize I was sharing. Sorry, I was multitasking for something I wanted to queue up. So one, I would absolutely preach you to please meet with Niaz on Friday mornings because it sounds like you're bringing up all of the right conversations, but we want to focus on the key management scenarios. So we've been trying to focus on Slack as the place where we're having the conversation on a fluid conversation, and then he has the Friday mornings, I think it's like at 7.30 a.m. or something, that he drives that discussion. What I was just pulling up, which I'm sharing already, is I think there's a larger workflow that I've been trying to get more focus on conversation. The latest Docker terms of service has kind of been a way to drive some of this conversation, forward. I actually think it's the wrong... It's being perceived a little bit partially than it should. The reality is upstream content, even well-intended security fixes, can break downstream apps. My environment may not be dependent, may be dependent on some behavior that was just deemed to be insecure, and the question of, can you just blindly bring upstream content in, or do you need to verify it? Whether the upstream content you didn't even available is another problem, which I kind of talk about in this article, but I think what I'm trying to get more thought process around is this promotion workflow that you bring stuff into your environment, whatever that environment is, and you're going to test it and validate it, that it works for you. What works for one company is going to be different than what's for another company. I think there is part of this workflow that's a piece to that. That's kind of the larger thinking. What the real problem is, we just don't have good tooling around this. Even when in ACR, where we've got this ACR task infrastructure, we do base image update monitoring, all the raw components are there, but it's like going to Depo and finding an aisle of wooden nails and say, go build a million-dollar house, which isn't that big anymore. Sorry, what's ACR? Oh, Azure Container Registry, sorry. Thanks. The service that I run in Azure, and this is how this is where we think about the stuff. We're trying to have these conversations in a broader place because ACR is a consumption of it for our customers. We make our Microsoft software available on MCR, and just like I would say nobody should ever be dependent on production content directly pulled from Docker Hub or MCR, you should always have them there registries. We need better tooling, better workflow, and of course, the signatures have to be able to go into those environments, which is how it's very grounded in this conversation here. I think the key management conversations we're having here need to play into this because if I bring content across, none of them want to test it. If it's good content to make sure it works in my environment, to the point here is if that got hacked, I need to make sure that I know that that content is no longer valid. Anyway, that's just the conversation I was trying to have here with this post, and the link is in the chat session. It sounds like you got some great input. I would again encourage you on Friday mornings at 7.30. Let me put the CNCF calendar up for that. Well, would you mind adding that to the HackMD page? Is that the very top? Oh, yeah. Yeah, so I'm realizing we don't have, so here, let's see, Friday, CNCF Notary V2. I don't know what time is on 2.30 p.m. It sounds very nice, but that is not Seattle time. Oops, it might be a good time for you guys. But at the top of our HackMD is the calendar, actually the Notary V2 conversations on Slack. The only thing it is missing here is actually the Notary project. So any other thoughts from folks? There's nothing else we can give time back to folks. Just wanted to make sure, and let me see what we've got stirring this week to see, make sure we have something. I'll try to make sure we have some good update next week that even if it's just the distribution stuff we've been working on to give a good summary to it because I don't want to, I think we canceled last week because of the holidays. I want to make sure we keep good momentum to people feeling that we're making progress here. So with that, thank you. Thanks, folks. Thank you. Thanks. Thanks.


Alright man, I'm not gonna get ahead of myself, but last episode it looked like a pretty not fatal blow. We don't really do fatal blows all that often in One Piece quite frankly, but one of those where it takes the villain down for good, but honestly I still don't see the chaos ending on Punk Hazard. We still have the poisonous gas, this whole operation, and Law's entire plan to team up against an Emperor that he still won't tell us who, there's just a lot going on. But welcome back to the channel, my name is JackTheBus, we're gonna hop right into it. If you're down with One Piece reactions, make sure you drop a sub so you don't miss any. And let's get started. You can still hear the faint like sound of his like gash just kind of like whee-dee-dee-dee-dee in the background. He's buzzing through! So they straight up like the door that I mean, I figured they needed to get there eventually either way. If Brownbeer lives, I'm shocked. That's my MC, baby. That's my captain. Wait, he's broadcasting. They all saw- Oh shoot!  Mama should know about this, oh shoot. Who is that? Who is that? What did Jack know about this? Oh sh- Wait, Jack me! I'm in One Piece! There's Killer. Unless it's a nickname like Joker, oh Joker, Jack, like the Jack. Oh, that actually might be what it is.  Oh shoot! How does Chopper know the way to go? Yeah, actually, I don't mean to like diss him or anything, but- Oh, what the- Perfect. Oh wait, yeah, who's up here really see all the cameras? It's all coming to a close, bro. One way or another, whether Caesar's completely down or not. Dude, that's so exciting though. I didn't think about like a couple episodes ago. I was like, are they still seeing all this? But they saw everything, bro. They know like how- how powerful Luffy is now especially.  Dude, I feel like these guys, I mean, I guess they could just go back to Brownbeard if- if he lives. And Brownbeard could have like sort of a crew with them, too. Lead them, Usopp! Lead them! They need someone. They're broken. Broooook! Okay, wait, there has to be some way to save him. No. No, that guy was so cool. Bro, did a Scooby-Doo stop? He actually ran into the gas. Oh my gosh, that was a joke. Yeah, that is the last time we saw him. No. Dude, if he actually felt so bad thinking he- he killed his son and he killed himself. No. He would have felt so guilty he'd just take his own life. Bro, that's so sad. He actually just dove in.  So did Brooke? Like, he ran in with Brooke? He said my spirit will carry me on. Awww. What can you do? He actually didn't leave him though. That's so sweet. Yeah, so I go eventually. There's my mom! This is- it's like so many worlds colliding. It's very cute. Like the straw hats, G5, the kids of the rescuing, and the world witnesses. Awww, she sees her captain. Everybody's coming together! Bro, Brownbeard is the biggest tank of all time. Awww. Awww. He told him. Oh shoot. Wait, everybody. I mean, the whole building is collapsing. They have to leave. Who's been gone for like 12 episodes, man? Awww. G5 reunion. Everybody's reuniting. We're Smoker and Law. They gotta be getting there soon. Pathman R&D. Ooh, they might barely make it. I mean, Smoker's in rough shape. The spark they used to get into- Oh, wait, are they taking some? Everybody ride it. Yeah, but is there some in it? Wait, but he- Law also said what's here to shake up the new world. Maybe he wants some for himself? I don't know. I don't know. Oh shoot. And everybody's still witnessing this though. Seeing Law, seeing Smoker, seeing all these interactions. That's like my biggest takeaway is how people perceive Luffy mostly. Like how the world perceives Luffy. And to see if you see Smoker. We have so much to report. It's been crazy. Awww. Almost everybody's almost there. That's a good question. Got blown away. Oh, they did want to kidnap him. Wait, like force him to work for them? Oh, shoot. How will they keep him ca- The Sea Prism Stone handcuffs. That's why they want to keep- That's how they keep him captive. Dude, I don't know. Leaving a guy like Cesar alive and able to escape is just a bad idea. No, the biscuit room. Actually, it was a pretty traumatizing room. It's probably good that it's being destroyed. They're carrying Mocha? No, Usob kind of going crazy navigating people. He's going- He's kind of carrying a little bit. He's in there brown beard. The all-purpose medicine is coming. You know the answer to that. Luffy always believes in his crew. Yup. Except Frankie, where the hell is that guy? Meanwhile, before the showdown. Oh my gosh, Don Quixote Pirates a Servant and Assassin. Baby 5? What attacking? Yeah! Attacking Don Flamingo! Wait, she's part of his pirate crew? The 8th time! A combatant to Buffalo. He's killed eight of her fiance's? What are his legs? What is this? What is this double brute? Boy, is she just like gaslit into following Don Flamingo's orders? What? I- Oh my gosh, okay. Alright.  I'm sorry, man. Buffalo is just weird. I like her weapons though. That thing is huge. She's the one who's gonna say no. Say no! Oh my. Oh, she really doesn't know how to say no. He's right. Okay, never mind. Buffalo's good in my book. Anything for the gamble. So he just flies? Is that his double fruits? That's kind of cool.  I just don't like the way he looks. Where are they going? Oh wait, he said to send them out. They're going to Puncazard. Oh, he did- Wait, he did- Did he say their names? Oh, shoot. They're going there? How are they supposed to- They're gonna go to wherever Building R is. Wait, this is crazy. What is this weapon? So her name is Baby Five. Are there four other babies? I'm ready for him to just carpet bomb the- the entire island, bro.  What does he do? Oh, he's blowing it away. Oh, shoot. He's clearing a path. Wait, where did she go? Is she flying? Oh. What is that? What ship is that? Sad. Cezar money and Virgo. Uh, Virgo is not coming out, bro. I'm sorry to break into you. Okay, so this guy's just a gambling addict. Oh, they're sunny. Is that like Cezar's ship? Oh my gosh. Did somebody shoot something? Is that Cezar? He get knocked all the way out and hit the ship? No way. No way. I think it is.  I mean, I figured this is where the exit was. Yeah. They said to the docks. So many phones, man. He looks sad. Ooh. Oh, never mind. His smile's back. I was gonna say he did look sad, though, for a second. Oh, shoot. Oh, shoot. Yeah. They're not coming out, bro. They're not coming out. They die here, for sure. Dude, that's like New Drip for Delfamingo. The little good coat over him? Luck is on my side. Kind of talking like Luffy and Law. SAD is like his whole business model, I think. Yeah, what does he pivot to if he loses a Caesar? Like, actually, what else does he do? He stopped doing the human trading slave auction. You know, not everybody's there yet. He waits for his crew. Where's the rest of Law's crew, speaking of? So, Baby Five and Buffalo. Oh. What? Another. It's Frankie! Finally! Oh, shoot, he's in like the mech form, too! Oh, my gosh! Finally, he returns! Bro, is he going to like try to finish off Caesar? Oh, shoot! Let's go! A robot? What has he been doing this entire time? I love the straw hat logo. That's badass. I really want to know what he's been up to, man. I really do. Dude, is Frankie really about to fight them? That'd be kind of crazy, though. I like her.  I like her weapons a lot. She's kind of bad, too. Little bit. They're about to smart, man. I mean, they're going to try to pick up Caesar. The soundtrack kicks in! Oh, shoot! Oh, my God! The animation! Give it to him, Frankie! He's going to have a moment, man. He's been gone for so long. Yes, sir! He was just chilling on their ship this whole time. He actually shot him down! Let's go, Frankie! Atta boy! Yes! He's just, he's firing like crazy! That's like the fourth time he's been compared to a pacifist, I swear. He's going to throw her? Throw the gowling!  He's firing back! Oh, no, it's hitting him. No, he's going to tank all of it. He's a beast! He's built like that! Hold! Hold! I destroyed it. Oh, she's so clueless, man. Where are the shahats, man? And Moka! If I can guarantee someone dying on this island, it is Virgo, for sure. Monay might slip out, but Virgo's done, though. There's no way she, like, finds him, right? Tanker docked in it. Oh, the tanker, like, the Neon, yeah. I mean, you either risk running outside or just sit here and die, man. Like, look at these brave kids. Aw. Yep. Gotta roll the dice. If you stay here, you're not betting anything. You just lose. Oh! They got him! Oh, no, yeah, they thought Frankie's destroyed. There's no way he is. Yes! He's like a demon in the mist, man. That's my goat, baby. He ain't going down. He stands. In general, I'm okay. Oh, my gosh. You can see him inside.  Oh. Oh, I love Frankie so much. What should I do? He's, like, looking at it? Oh, my God. I wanted it to hit her so bad. Bro, really? He's like, all right, whatever. I'll just throw it. He got it.  Oh, shoot. Oh, that's right. Like, her body parts changed. Her face does, too? I bet Sanji would be strangely aroused if he saw this. What? What? Is she a sword? Oh, my gosh. That's wild.  And he uses her as a blade. Wait, it's a crazy duo. What is happening anymore? There's no way they cut through that.  They cut through it like it was butter. Oh, yes. The samurai plane. Let's go, Frankie. Let's go. This is such a crazy fight, bro. Boom. Yeah, baby. Hold it down, Frankie. Keep him away from Caesar. It's such a big deal if they can't get him. What? Wouldn't she just explode? Oh, she's going to swing by and try and crab him. Oh, man, she's moving. Good one, dude. I still want to know what Frankie was doing on this ship this whole time. He better be investigating or something, man. Does she really just take zero damage from that? I always said they're destroying their own ship, man. I'm shocked it hasn't taken more damage. Oh, no, his fingers are going to twitch. Oh, no, he's conscious. Oh, no. Dude, look at the dent. Wait. Wait. He still has smokers. Oh, no. He still has it. I completely forgot. He's still laughing. The least he can do is kill him. Oh, no. No. Now, if somebody has it, they're going to run out. We cut away. What? The gas is pouring in. Bro, what? They didn't make it. How will the others get out? And Luffy stays. Yeah, the crew stays, no matter what. I mean, they don't even know that Frankie's... Oh, I guess Luffy knows that Frankie's already out there. You never leave your crew behind. They don't even question it. Zoro sitting on the whole rock, bro. Aw. Smokers got to have some respect for Luffy or gain some respect for Luffy. Dude, if it really goes down with Caesar training himself for Smoker, I mean, brother.  That was pretty wild. I mean, it's not over yet, but... They're just running right in front of it. And then Usopp's directing them. That is... Dude, Usopp, they go for real for staying behind and trying to navigate them. Okay, now he's leaving. He never got them. Imagine they just have them on hand. There's no way. Oh, my gosh. Honestly, you should take all of them. Just stay strapped with them. Well, hello? Wasn't that the door to where Luffy and them are? More of those cages look so over this, bro. Oh, Luffy's sweating a little bit. Here's him. There they are. Chopper's voice just rings out. Feels good, man. They made it by the skin of their... Oh, my gosh. No, for real. Usopp helped. Yeah, seriously. Let's go! They're already all getting on. Oh, my gosh. Good thing they found this truck. Dude, Kino was like frozen. And yeah, I was about to say, he's his son is right there. He's like, I know that name. Oh, bad address for Usopp. Ooh, bad update for the boss. Oh, Monet! Oh, wait. She's going to Virgo. That's the door.   God, his voice is like butter, man. I wonder if he genuinely means that. Luffy riding on the very front. They're flying. Another weapon. What? More poison. Oh, my gosh. The only one that would live is Caesar. Oh, my gosh. Oh, my gosh. It destroyed everything. Oh, my gosh. Oh, my gosh. It's actually like a suicide mission. Monet, please. Monologue or something. I don't know.  She's letting the snow fall on her. One last time. Oh, my gosh. Dude! They have to get out! Virgo! I honestly will miss Virgo. He's so cool. I've known you the longest. Damn. Damn. Bro, that's heavy though. Oh, my gosh. Like people don't die like straight up like important people. I would say don't die all that often in one piece. And when they do, it is a scene. It is a sight. They don't know the danger they're about to be into. Oh, my gosh. They have no idea. All the lives lost though. They lost so many people. Mostly like G5 and brownbeards men. Frankie! Oh, my gosh! No! Where's Baby Five and Buffalo? Luffy does that wide smile on his face. He doesn't realize everything that's happening. Oh, my gosh. Dude! If you TBC as soon as she presses this button, I'm going to be pissed. Wait, will it unleash poison? Oh, my... There's not even in credits. Bro, she actually blew up the entire island. I mean, I know he said like, it'll be similar to that explosion four years ago, but the dog! I wasn't kidding! Dude, like I had said like the imagery of like her with the wings up. It just looks so beautiful. These past two have been madness, and I thought it was going to slow down a bit after Luffy got that fat punch against Caesar, but they just multiplied everything by a hundred. Dolfamingo's perspective, sending the two from Dressrosa to pick up Caesar. I genuinely do think they'll get away with Caesar, but the question is, does Caesar keep Smoker's Heart? Does he stab it in time? Will they try to just grab Caesar and take him and he won't have time to stab Smoker's Heart? It's all about like the timeline of things and when everything is happening. Because I'm assuming that as Luffy and them are shooting down the tunnel, Frankie is like fighting Baby Five and Buffalo. It's like, they just present it at different times basically. It's just, they can't shove everything at once, not possible. But dude, this is so crazy! Punk-Hazard is delivering on all fronts. The moment with Luffy waiting for his crew and hearing Chopper's voice just scream out, ooh, stop pulling his weight this arc. I mean, it's just been all around fantastic. Guys, that's been it for my reaction today. I hope you did enjoy it. Make sure you leave a like before you leave. It does help me out quite a bit, and I'll see you next time. Peace, peace.


Okay, our next talk about the Identity Governance and Dating Projects with Newpoint, and I'm turning to Radavan and Katharina. Thanks, welcome. Thank you. So, today we would like to talk about Meetpoint, which is an identity management and governance product. My name is Katharina Abadkuva. And my name is Radavan Semenci, and we are part of the Meetpoint Corridor of my team. So, it is quite difficult to explain identity management governance and data protection in 30 minutes. So, we have figured out that the best way how to do it is to show the examples and demos. So, that would be the fastest way to explain the things. So, we have prepared an example of a new university environment, academic environment, which is quite magical obviously. But also a traditional environment, so it has traditional problems. Like, there is HR system, and data from HR system is to be synchronized to other directory, but there is no direct path. There are applications that are based on the database, need work on database records and so on. There are legacy systems that we would not like to see anymore, but it's difficult to remove them. So, it's typical environment in universities, enterprises, and actually almost any bigger organizations. So, the usual solution to this is to put identity management system there. So, identity management system can take the data from HR system, student records, employee records, all the workers and volunteers and so on, and then synchronize the data to all the systems that the data are needed. And that's exactly what we want to like to show you in the first demonstration. First, if we see we have chosen just two systems, one HR system, the midpoint and then the lab as a target system. So, let's see. The resources here, one of them is HR system, representing our third resource system. We will hold the data from the system, transfer the data, and then we will push the data, approach the data to the target system, which is represented in the open LDAP. If you look into the details of the HR system, you can see that the first single, for this demo, we use the SKISD connector. And if you look into the data, in our inter-system, we show about users that are not interested there. Log in there in the first day, last day, then we have also information about membership. So, to reach an organization, we need user films and also we have information if someone managed an organizational unit or if he's a leader of some team. So, let's go back to the midpoint. Here we can see the accounts from the HR system in midpoint, as we can see in more structured way. So, let's start with the important account and all the organizational unit in midpoint, going back to the infest. Now we can see that our infest is running, and here we can see the progress. So, how many accounts have been processed and also if there are some errors or anything else. If you look here, you can see that our organizational structure is growing and we can also see that the users are creating ZW. Here we can see our structure, which we pulled from the HR system and we can see the members of the organizational unit and also we can see the manager of the organization. So, here we can also see that there are some management which are also represented by organizational structure and we can also see that also the members are... If you look into the profile of some users, for example, we can see our calendar. We can see the basic information of our calendar were also pulled from the HR system and assignments were also created according to HR procedures. So, we can see that our calendar is part of the processor organizational unit and also the manager of the organization of the processor organizational unit. On the type version, you can see that our calendar has two accounts. First account is in their account in the address where you see the path and open held up account which is the type hold which is the account which was created during this new part in the open held up. We can also see that the open calendar is a member of the processor and the organizational unit who also added to the rules in the open. So, what we have done here is that we have all the data from the HR synchronized through the midpoint to the hold up directory. This was actually quite easy to do, wasn't it? It was very easy. There are a few things that you haven't seen so far. One of the things that you haven't seen is what is not there and what is not there is the programming. This is accomplished in a declarative way how to synchronize the data except for maybe one line of scripts to transfer something like a first name and last name to a full name. Things like that construct VM and so on. So, there's a whole new programming here that means that adding new target systems like these are this. It's quite easy. It has connectors to connect to these systems that make protocol adaptation and a configuration that set up the way how the attributes here are created or managed or synchronized through PDR. So, this is identity commandment. And when you think about it well if you have something like a very smart Python script it can actually do almost the same thing like here. Maybe not that well as midpoint but what you cannot do with a simple script is to actually do the management stuff to manage the identities. And that's what's called identity governance and we will see that next. So, the first thing that we need to know before we start the identity governance is the role. The role in the role is basically the implementation of role-based access control. So, you can specify in the role which privileges and accesses and moves the users they will get after assigning the role to you. So, let's speak to the definition of this role-based access control in any of the identity commandment. And here we can see that assigning the role of transfiguration features to some users the user will get the account and all that will be used in the more details of this configuration. We can see that the users will also be a member of the transfiguration control group. So, now what we are going to do we are going to hire one new professor which is you know, they are all hard, everyone is stable. So, what we need to do to hire a new professor is obviously to have it in HR system but the complete organizational structure will be defined completely by HR system. So, builder and work hard will ask for a professor role and the policy is to configure policy in which point is that there needs to be two accruers to try the professor role. First, it needs to be accrued by a manager which is Dumbledore in this case and then it also needs to be accrued by the minister of magic. So, let's see the process. Okay, now we are going to end the work hard and I am going to apply for role defense against a dark art teacher and the other class. Here I can just review my after looking at the starting and I am waiting for approving the whole role. So, I can see that there are two stages of approvals or two models of approvals and here if I look into the process details I can see that Dumbledore mentioned there are two approvers one of them is my manager Dumbledore and one second one is the minister of magic and this is my role. If I look into my profile now I can look into Dumbledore so now I am looking at the Dumbledore and I can see that there are two requests after looking I can see who asked for what and also I can see that also there are two stages and I can also look into the details behind the first approver and there is also the second approver so there are two different things not mine but we are going to decide on this one so I will remember but we can also see that now who asked for what and we can also see also the same and we can in addition we can see the first approval related to any governance of course this is not everything so now I want to say that I am the member of Dumbledore as I am a member of Slytherin in Dumbledore it is quite difficult to be a member of so yes I switch the password this scenario so there are all the roles which can be assigned in the meantime who professed for what had an accident it was all of his memory but due to some legislation in the magical world he cannot really remove him from the HR system because he is a long-term signal so he is probably dead but on the other hand we do not want some kind of lunatic to have teaching privileges especially so now we are going to remove the privileges for Dark Knight's teacher but now there is some feeling that we have forgotten something haven't we so it is quite easy to request the role of the approval but it is quite difficult to remember what to remove in the end so there is a special process to check that everything that should be removed was actually really removed and the process is called access verification how the process works is that it asks all the manager area typically once per year whether these particular users still need to have these particular privileges so let's see after looking into the details of the campaign you can see that there are many reviewers for different users and roles so let's look into one of them one of the reviewers which is our editor as he is the manager for the summary and also see that there are 22 items for how to download after the download even we now need an illustrator who will stop the campaign a renovation process which we will apply and execute all the decisions so a human organization process we can see that some information has started and we can see that there was a lot of items in the process and we can see that after looking into the roles so that was quite a light preview of what identity governance really is so what actually identity governance is is something like identity based on total identity management it's quite closer to the business so one could say that identity governance is putting management back to identity management so that's what identity governance is what you have seen in the demo so far is quite a few functionality what identity governance is and there is much much more that cannot be done in 30 minutes time slot so for anyone interested in representation and so on but there is still one very exciting functionality that you would like to show you and that's data protection functionality so what data protection actually is simply speaking data protection is the proper management of the data by proper I mean proper both from the point of view of the university or employer and proper from point of view of students and consumers this means things like the controller should have a reason to process personal data and there is no reason then the personal data needs to be removed that's one of the few principles of data protection data protection is not just the right thing to do it is also a law which may be a little bit scary if GDPR law is a European Union regulation that comes into force this may so there is not much time left but again this is quite a complex topic so to let you understand what it really is we have one more demonstration data at least one assignment we have the little basics so that was the data protection functionality but to be completely honest the data protection function is still quite experimentally midpoint whether it will get into the next release or the following release it is all governed by midpoint subscribers that are setting priorities for midpoint development but we thought that it is very very interesting demonstration so what you have seen here is like a three part of a single product of midpoint what is identity management in a classical way and then also data protection functionality so as you can see midpoint is really the only identity governance open source identity governance system available so it is perhaps not too much to say it is also the best law and with that I would like to thank you for your attention I believe we have still some room for corrections my question is do you have a product developed solely by one company behind it or do you have a community of external contributors also most of the development is done by Hebovo which is one company but there are external contributors but to be completely honest not in the product core there are bug fixes coming in some extensions and some examples there is actually community may be even of a company who you think may be even more but the vast majority of development is done by more questions can I use a functionality to use your offer API if midpoint offers so there aren't many ways how to plan functionality from the very simple like this one line of scripts to compose a new team with more full name to the very complex hooks inside this point it opens up so you can just check out modify what you like but yes there is an API most of the API and the rest of the API for example there is some other so the short answer is yes of course first of all we have a special type of object when it's called a service for service for servers, network devices and so on but if you look two years back in the first time presentation two years before this Katarina actually did a presentation for integration of midpoint with Miracle machine management so it was a very good hands-on presentation of how to do it also here you can see that there is an organizational unit in your source any number of sources actually midpoint there is no fundamental difference between source and target and midpoint just the direction of the data so you can have any number of sources and there is a way how to again declaratively define whether two accounts are considered fully matching so they represent the same identity it is quite easy to do actually but something that almost all management systems does so it's not something that is special to you I guess you can customize the approval code for complex setups technically how would you do it is it like a DSL if there is a possibility customize the so yeah of course actually there are several ways to do it first of all midpoint of work flows and the approvals as well are based on the activity in BNNG so that's actually what the engine that does the approvals so there is a way how to modify the workflow process there but we have found an easier way so for now midpoint, recent versions of midpoint is something that is called policy based configuration of approvals so we can actually specify approval policy for each individual role so each role can have a different process and it is completely declarative and maybe a follow-up what kind of score for common workflows if we thought about creating some sort for actually for approval workflow there is probably not too because the workflow is just one it is some one something to approve and something is usually assigned and so on so for the workflow itself it's not what we can do or again what is probably interesting is the policy settings for different things like approval by manager approval by role owner we have examples for that not really a store because again there are not that many options we were talking about data protection where and how do you define which data is sensitive and for instance PRI PHI what kind of thing because we were talking about G because that so where and how do we define which data are sensitive so for now again the data protection is still an experiment also it's very simple so for now what we can define is which data to remove when the user gets to the data in state of information and we define that we have a right to process the information by specially marking the roles that give us that right so that's the current state of the functionality but it can be extended of course and we are actually looking forward to customers that are actually implementing GPR the practical experience and practical requirements to let us guide the functionality ahead last question how do you deal with secrets where many targets it's not the same secrets anywhere how do we deal with secrets well there are no secrets for additive management additive management also everywhere because that's the hobby in the wheel but of course we are trying to protect at least the passwords and several things we cannot actually include everything we probably cannot use that for correlation database will not work if you work on encrypted values so we can actually pick passwords for example because we do not correlate these so we have a special application for encryption for passwords for the rest we are just keeping it with everything in clear so you can realize database not transcription that's some city information of the password there may be but you can use database without encryption there and of course you can use network without encryption there but identity management itself will see the data it has to process so we need to see that and I guess that's it thank you again


Oh sh- Oh! You- No, Joe! What's up everybody? Welcome back to the channel. I'm EvilRabbit here, joined by the team. We are in some 599-XXXXXX. There's only two X's in the 599, but, you know, this game is gonna be interesting because we're gonna be playing some king, some effected in these Ferraris. You know, seeing how they drive, we can all get different types of liveries except MK and Urgent have the stock liveries on. So we're gonna get into some king and see how this goes. We are in stock Ferraris, we did not modify them anyway, so this is stock off the Forzathon or the Marketplace for whoever, some people who were too lazy to do the Forzathon. So, let's get to it and see what happens. Who's gonna get king? I really hope it's me. I hope it's me. I never get anything. You were king the game we played the other day. I don't want to be king because I want it.  My whole car is just black other than the writing on it and the Ferrari logo. And wheel lugs though. I moved my car, I can't find it. Current car, right tab like twice. Did I get it? It wasn't even there, right tab twice. I think I should be in it, hopefully. I didn't pick anything. There's always one guy. Always one guy. Who's king? Alright, who's king? I'm king. That's bull. Oh, I'm king. I never get king. Oh, wait, I'm king. Asin just kicks out on this thing.   Ass happy for sure. No, don't touch me. Don't you do it?  With the ninja defuse. Ninja defuse. Oh, urgent, we're on the way. Everybody, he's going the other way. Yeah. We noticed. Wow, this thing just loves this thing in the dirt. Oh, it's tail happy as a mother. Thank you. I'll take that back. I'm allowed to lose it to Zeus. Damn it. Grab it.  Oh, thank you. What? No. I came from America.  Not you. He was talking. No, I took it. This is so tail happy. Oh, my gosh. I'm not even touching the gas and it's spinning out. I just got juked. You did. I sent it just a little much. Oh, I call BS. Oh, my God. Oh, my God. That was crazy. We can't let Clay win. This is not going to happen. Why? Dance hasn't gotten it either. Yeah. Oh, okay, got it. Damn it, I didn't notice. With the ninja capture. Oh, my gosh. On tail. Zeus wants it so bad. Non-wheel users have no idea how hard this is. Yep. You're forgetting somebody else who also hasn't gotten it.  You know I had him. Dance has it now. Now the other person doesn't have it as Zeus. Thank you. Can I do it? Can I do it? Nope. No, not going to happen. What? Dude, you need to watch my video of that because I stalled shifting just to be able to get you. Thank you. I just got nailed in the back. No. Let me get the flag. Somebody hit me, I can't move. Run, Zeus boy. With the ninja capture at the end. It wasn't really a ninja, I was stuck. Alright, who's infected? Please don't beat me. You're closer than the rest of us. Oh, Clay's infected. Everybody works in clay. I already see clay. What? You were ghosted? I don't know why I'm ghosted. Rabbit, what are you doing? Rabbit, what are you doing? Hi, okay. What are you doing? Why do you lead him down here? All of us are.  I'm stuck, I'm stuck. Somebody hit me, somebody hit me. Somebody hit me, I'm stuck for real.  Thank you. It's like a shark in the water. Gotcha.  I'm out. I waited and picked my moment. I'm trying to go for you at the moment. You did that on purpose. He doesn't want to get caught. Got him. No, I got him actually. I infected him. Zeus to the left, where is Zeus? Just hiding up here. We're just sitting here playing. I got you Zeus, you're done. I can't believe I let him right to me. Did you let him right to me? That's okay, I got you back.  My wife says we're shady, so apparently we're shady. Did you not join again? Or did you pick a different car? He's here, he's here. It's not team, by the way. Your car's modified. Oh jeez, every man for himself. He's in mine. This is not great with no grip. There's a grace pierce. Shit, what the... It really stands.  Got it. Oh really? Got it my way. I missed the intro.  He's gonna get it. That's an easy point right there. Let's go. I knew it was gonna work. Did you just goaltend him? He goaltended so hard. Oh there's two flags. He's just goaltending. How did you miss? Somebody just goaltend urgent again? Oh my god. Guys, could you please come hit me? Where's the flag? I'm stuck. Urgent's coming to get it. Somebody goaltend. Guys? Pierce, could you please come hit me? No. I'm stuck in the back of a truck. That's one less person to go against. I'm okay, so you got a flag there. That's a nice flag you got there. Get myself unstuck.  Zeus, I saw you. I saw you try. He played good unstuck. Yeah I did. Thank you. Oh wait, who got that? From me. Goaltend two flags? Yes he did. Oh man, that was good. Urgent. Get urgent, get urgent.   You can't see straight ahead of you. Style, that was straight style. How did you get urgent? Oh, thank you. Sorry. Flag capture. I'm still ghost. Now you got the two soccer fans doing goaltending. I'm not a soccer fan.      He's gonna win up here goaltending. He is gonna win up here goaltending on somebody unless MK scores. Let me score. No, don't let him score. Urgent can lose. A clutch goal. With the two clutch goals. We know what game one rabbit's not very good. Not flag rush. There's the bet again. That was fun. He's actually not once you're in the last game.  I know right? You can do one more just cause. Just cause. Is that a hamster? Really? Hamster. I'm about to get off line. We've been on for like 47 minutes. 47 minutes. Sorry I don't get much sleep at night. Bugger. His idea was to use these cars.  He was so fast. I'm sorry. I'm on my little enjoyment with my game. That just sound really good. Oh my god. No. Oh what? Invite, please. We're in the middle of a game.  We just started the game. Andy you're gonna stay out for one more game. Alright this might have been a bad idea using these cars. You think? Forza a while. What are you guys using? Look back at those. Oh my god. I just got shot into the wall. Damn it. Damn it. These things don't even catch grip until like third gear.  I think this is the first time you and me are on and I'm not eating. Oh I got that last second. Goulton. Oh my god. Jesus. You just like threw me into that.  I was kind of hoping to punch you over it. Come in behind you and take it. I'll take that. Damn it.  Jesus. I just aired it. Over here. I got it.   Hamster is always forgiven. How am I last again? No this is not good. Oh my god. I don't like flag rush. Me and MK again.  You can have that flag stance. I'm going after the red one again. I would still appreciate a game invite. We can't right now. As soon as I capture this flag at Hamster I promise I will get you a game invite. Yay. Hamster is my word. Hungry.  You're welcome. Oh my god. Hamster here comes your invite buddy. Yay. You need anything else buddy? Oh my god. That's kind of a stretch. It's going to be cold. No. Damn it. About the time it takes you to get here will be about the same time Uber Eats takes to get here. So it's going to be cold either way. It literally says two hours for it to get here.  Obviously we find out what game MK6 is really good at and that's called flag rush. All the time. I won't stand it on time for you. Alright who's king for the final game here? Well my final game. But you guys don't know what it's doing. Okay this is dangerous by aren't there? Yes. Really?  Because we voted you out. We voted anybody out. What?  Oh my gosh.  Whose idea was it to use this? Whose idea do you think? Where's Urgent? He not in this game?  I totally tagged you. Urgent on his phone again. Fuck! My e-brake didn't work. My e-brake, my e-brake. Thank you. Ah man. What is that? Hey Clay, Clay, Clay. Here's a legitimate thing to do. Really?  No it's my wire actually. Did I get rid of the wire? No it's not that wire. No it's not that wire.  Because the game was resetting me. I call hacks. Thank you. Why is that guy using a wheel or not? No he picked us up. I'm not using mine because I don't know how to use it. There's no better time to learn. I know. I want to win. I would think me and Rabbit would. Oh my god. I don't even got it yet. Hey Rabbit, that was nice. Oh fuck! I don't even know what's happening.    Clay's in first now. We can't let this. Oh come on.  Let's play where it's like in the baby age. It's just not right. It's going to happen at some point but it's just not right. Oh there's Zeus.  That's what I was saying. I'm bricky.  He's got juice. Except me. Thank you. Hitbox is for the win dude. Then I get shoved into the wall.  Nightcliff.  Am I just like completely... I thought I timed it right. I can still win the game. No I can't. I don't care. Someone take it from me. Rabbit can't get in it yet. Okay. So that's gonna do it here for this episode here on Forza Horizon 3. With the team playing some king infected in flag rush. Hope you guys enjoyed this episode. Obviously I am not good at flag rush. It was a pretty fun time hanging out with the team. And doing some games. So make sure you guys tap that like button. And subscribe to my channel. As always you guys know you can follow me on Facebook, Twitch, Twitter and Instagram. All of which are found in the description box below. And until next time guys I'd like to thank you guys for watching. I'm EvilRabbit. I'm out.


What's up guys? Michael here with Jaspie is doing a quick recap for our 3 box baseball mixer one box of 2022 bowman avian two boxes of 2023 tops chrome jumbo It was a random team number two done auction style on fanatics live. Here's the list positive you need to And getting into the recap close some Montgomery chrome Pacheco to 25 Very forward to 75 yellow Here's some tops chrome heads Volpe prism Adelaide Fractor Bragman is 75 and a Josh young Auto to 250 Joey Weimer Weemer don't know to 250 Jared Schuster to 150 Cal Mitchell base Aranda the auto from Bowman was demiano palmigiana. No idea and then had a Authentic Cyrillic of Bobby Wood jr. That was green out of 99 So it does it for the recap. Thank you to everyone who got into the break Thank you guys for watching and I'll see you guys the next one. Bye guys


Outside of Africa, the United Nations and 80 organizations have condemned Russia's attack on the mortality hospital in the Ukrainian city of Mariupol, U.N. Secretary-General Antonio Guterres called the attack horrific in a tweet. Doctors, without bothers, said it could not confirm if it was a targeted attack, but its staff said houses in hospitals have been damaged during fighting over the past days. The head of the Donetsk or Blast Military Administration, Pavel Kinlenko, said 17 pregnant women and employees were injured in the bombing.


Response Deprivation Hypothesis. If I deprive you of a response, the completion of said response becomes more valuable in the future. Response Deprivation Hypothesis. I don't know. What do you want? Let me give you an example with Cheerios. I'm not Cheerios. How about Fruit Loops? I was a Cheerios Chex Grape Nuts Kit. That's all that my parents allowed in the house was that. Like, that's it. Like, no cinnamon toast crunch, no Chex. No, Chex were okay. No Fruit Loops. No, anything sugary, right? So, I'd largely raised my children that way. But ever once in a while, they're verbal demands. Their manding gets too much, and I'll get them something, right? Last time I went and bought some Fruit Loops, which I found out are actually less sugary than some of the other cereals that I thought were sugary. But anyway, data always wins. So, I went ahead and bought one, and then I was pushing the cart down the aisle, and I went, Response Deprivation Hypothesis. In a sense, it's been so long since they've eaten sugary type foods, right? That I figured I'd better get two or three boxes. So, I got three, and they were gone in four days. I was expecting them to last a little longer, but they've been deprived of that particular stimulus, right? So, I'm kind of giving you a bad example, but if you generalize that example a little bit, it'll make sense. You can do the same thing with activity. Right now, it would be very valuable for me to go skiing. I haven't gone skiing in a long time. I would like to go skiing. I think it would be fun. In fact, I would work very hard to go skiing, but Response Deprivation Hypothesis, right? I've been deprived of that, so it becomes more valuable. As a result, people could probably use that to coerce me, or not coerce me, but prompt me or motivate me to do certain things. Hey, Ryan, if you do this, you can go skiing today. Response Deprivation Hypothesis makes it more valuable, ties in with Pre-Mac principle.