Why Prague is the ideal place to teach English? Prague is one of the most popular places for EFL teachers in Europe. The Czech Republic makes it relatively easy for non-EU citizens to secure a work permit and the cost of living isn't as astronomical as in many Western European countries. Here are four amazing reasons why Prague is the ideal place to teach English. Variety and volume of available teaching work In Prague and in the Czech Republic generally, teaching opportunities abound for English proficient, qualified TEFL teachers. The sheer variety of work available is in itself impressive. You could be teaching in private language schools, preschools, public primary and secondary schools, universities as well as summer camps and after school programs. In company, exam preparation and soft skills courses are also very popular, giving you the chance to meet and work with interesting IT professionals from a range of industries, finance, retail, IT, politics and the arts. Prague can also be a great place to start out as a teacher as there are numerous career development and networking opportunities in the form of teachers and publishers conferences, workshops, training and seminars on a wide choice of topics going on throughout the academic year. The majority of which are offered for free-to-in service teachers. Rich history and cultural offerings Prague is a great city to work in with its green spaces, well-preserved, historical architecture and excellent transportation connections on clean, safe and reliable routes. Come work in a city awash with history where you can imagine Nikola Tesla comparing theories with his fellow students in a traditional local pub. You could also be toasting new friends at Munich's Oktoberfest, savoring soccer tour in a Viennese cafe or sampling paprikash in Budapest's central market, all within a matter of hours after leaving Prague city limits. Reasonably priced bus and train tickets can be bought for all points north, south, east and west, with most forms of transport leaving hourly. So much to see and do. The cost of living here is comparatively low, especially when you look at other European capitals of a similar size, but with no fewer the cultural and entertainment offerings. You will be spoiled for choice with festivals and events for music, food, beer, wine, art, design, film, theater, politics, and sports taking place on a near-constant basis. The vibrant Prague art scene boasts three opera houses, about 50 active theaters, as well as an eclectic range of museums and galleries, and music and sculpture. There is a veritable plethora of restaurants, pubs, bars, sidewalk cafes and cinemas. Prague has a rich and varied expat community with a variety of cultural offerings available in English, German, Russian or Spanish, etc. Prague is also no slouch when it comes to more physical pursuits, with hiking and biking trails, alpine and cross country ski runs and lakes for windsurfing, canoeing and kitesurfing all just a bus or train ride from the city center. The city of a hundred spires also plays host to several marathons in the Prague tennis open, as well as being home to a selection of professional hockey, rugby and football teams. Comestibles. Lastly and perhaps most importantly, is the food and drink. Czech cuisine tends generally toward hardier fare, dumplings and sausages, goulashes and colaks. However, as Prague is both the largest city in the Czech Republic, it is the most popular city in the Czech Republic. Lastly and perhaps most importantly, is the food and drink. Czech cuisine tends generally toward hardier fare, dumplings and sausages, goulashes and colaks. However, as Prague is both the largest city in the Czech Republic and the country's capital, diverse and ethnic cuisines also prevail. You can find anything from authentic buffalo burgers, vegetarian sloppy joes and rock cakes to Middle Eastern delicacies and Indian and Mexican delights, not to mention some of the best local coffee shops anywhere. All this and we have yet to touch upon the raucous pub and bar scene. A night on the tiles in Prague is most certainly an experience to be had by all. What more could you ask for when a frothy mug of truly excellent beer will set you back less than $2, including tip? Why aren't you here yet? Are you ready to teach English in Prague? Located at the very heart of the European continent, the Czech Republic is an increasingly popular choice for teaching English abroad. With plenty of jobs available year round, a low cost of living, abundant cultural highlights and a vibrant nightlife, what are you waiting for? For the very best start to your teaching career in the Czech Republic, why not take our in class TEFL certification course in Prague? You can also get further information about living and working here via our Czech Republic country guide. Apply now for your TEFL TESOL certification course and start teaching in a matter of months. Speak with an ITTT advisor today to put together your personal plan for teaching English abroad. Send us an email or call us toll free at 1-800-490-0531 to speak with an ITTT advisor today.


So, I was telling you that this portal for example, there will be one portal for every subject that we cover and eventually I wish that there could be such portals for every professional subject that we keep. So, that should be of interest even for professionals who are working. However, for our limited purpose, can IIT Bombay run tell such portals in 12 different subjects? After all for each subject there will be one teacher like me and you can definitely assume that that teacher will be passionate, but that teacher is also required to work here just as you are all required to work in your respective places. How will you sustain this effort? Simple, all open source efforts are sustained by building large community and letting the leadership emerge within those communities. To that extent, I did an experiment in the last workshop for the teachers, the 650 teachers whom we are framing into these what you call groups and the task given to them official task was to give this contribution to the question back. The other task which was given to them is that ordinarily students would do some course projects and we would like your teams to do some projects, programming projects. Take a problem, analyze it, write programs for it and submit that just as the students you would like your students to submit, but this I had deliberately kept optional and I had said the time limit is 30th March, so we conducted the workshop in December, they were supposed to contribute the questions by end of December 8th, January 10th or something, but this was optional and this was to be submitted by 30th March, this was deliberate. I knew not all teachers will do that, but I also knew that those teachers who do it are willing to go beyond the call of duty. They are not looking at the certificate when they do that, they do it out of their interest and Mukta, how many project reports you have got, 25, 25 project reports means about 100 teachers, which means to me 100 out of these 630 teachers are willing to contribute to this effort beyond whatever was prescribed. Personally, I think it is a very good ratio, 100 out of 600 enthusiastic people who are willing to give part of their time to their, so what we propose to do is we will evaluate these 25 projects, we will give them special certificates for completing these projects and we will of course, include these projects in the program, but now I will be writing to all these 100 people saying that we propose the launch of the website for this computer programming course, typically the website has to be launched within 3 months of the completion of the workshop. So, you complete the workshop by 10th or something, we will be launching this website or the portal by about September. Of course, formally we have yet to receive the what you call MHRD sanction for the larger thing and so on, but that will happen anytime we have to purchase equipment, arrange for a separate bandwidth etcetera, etcetera, but these 100 people and some additional people that we would get through this workshop would form the kernel editing and supervising team for this board and that is how we can distribute the work. Similarly, from the coordinators who coordinated that workshop last time, some of them have show interest that they would be interested in continuing. I hope that some of you could also continue to participate, not necessarily as spending huge amount of type, but maybe coordinating some of these editors, because ultimately we want after all when something goes on to a web portal, it is publicly seen by the whole world. So, it is not just my institute or your institute, but the whole nation is involved in terms of its prestige being compromised if something bad quality or wrong both. So, we require that effort and that will be the group effort that will be good. In a nutshell then, I will conclude this talk by saying that the objective of this entire project approved by MHRD is to try and increase the effectiveness of teaching learning process that is happening in the professional education. Mind you, we are not targeting any quality enhancement of an individual teacher. In fact, I find that word in very bad test, quality improvement program, the QIP program. I mean, this is 30 years ago when I first participated in the QIP program as a teacher, but I told the then QIP coordinator that if I was a participant, I will feel mighty cheesed off, because when you say I am participating in a quality improvement program, that means I am acknowledging that my quality is not good enough. And as a proud teacher, I refuse to do that, but that is the wording that we have consistently used. I have changed that wording to say that our effort jointly, of course individuals will benefit and of course there is an enhancement. When I interact with you, in spite of my 40 years of experience, the suggestion that you will make will enhance my quality. That is the beauty of any human interaction. But the objective we have stated is enhancement of the effectiveness of teaching learning process in professional education. And I believe that captures the essence of our efforts or the objective of our efforts better. So this is an overall scheme. We have run a pilot. We have learnt a few things during that pilot, the mistakes that we should not do, et cetera, et cetera. By no means our knowledge is complete. There could be new problems that we may face, not just technology issues but pedagogical issues. And all teachers including all of you are expected to contribute by identifying the problems if you come across the problem. And I would like you to start thinking about this issue in a general sense. Unfortunately, this is not going to be a five-day workshop. And you know the reason? We could not get rooms for five days.  I have finally announced that I do not care how much it costs. We will hire rooms in hotels or some other guest house or something. But we should have a five-day engagement. Specifically about this course you will notice we have circulated the course, the three-day organization. You will notice that most of the time is going to be spent in the labs. And the objective is that the lab exercises we all use a variant of Linux. So we, of course, use Ubuntu but you could be using something else. We use GCC as the compiler. We use one debugger. These are the basic things. But we extensively use Moodle as the learning management system. And we would like all of you to have hands-on on most of these things. Except for one day when you will be actually doing Linux installation and other things for which you will need to disfigure the existing system. We will be requesting you to come to the crescent building where in the library we have arranged these machines where you can set things up. But other labs will be conducted here itself. That is why we have these netbooks with you and we will have server connection through the internet. It is quite likely that many of you are not only familiar with what we are doing but might have a few things additionally to tell us and suggest us. Please do not hesitate in doing that at all. If you already know things, you can help others maybe who are perhaps not as well versed with Ubuntu or GCC or whatever. But if you already have tried something which you have succeeded in terms of both the conduct of this three-day workshop as well as suggestions for conducting laboratory sessions in the larger workshop which all of you will be coordinating. Please feel absolutely free to make your suggestions. And that is about it. I think I will have another ten minutes where I would now like to take questions, observations, comments, suggestions, thoughts, whatever you have. So it is all yours now. Or should we have interaction sort of delayed after you have thought about these things and participated for sometime here, maybe tomorrow sometime. Can we have an early tea break? I know what had happened last time when I had done a tea break in the larger workshop in December workshop. You will appreciate that that workshop is being conducted at all the remote centers. We had 22 remote centers. Now on one of the days when we were in a lecture was going on two vice-chancellors wanted to address these students. One was in Tamil Nadu. One was in Amravati. And of course it was a privilege so the vice-chancellors spoke because we can hand over control to any remote center. The vice-chancellor was seen and heard by all the participating 630 teachers. It was very exciting. But the vice-chancellor of Amravati University was so excited she started discussing her plans about setting up distance education in Amravati so that hundreds of schools and colleges could benefit. Now that's a very exciting problem. But that is not what these 630 teachers have assembled here for. And I did not know how to tackle the situation politely because honorable vice-chancellor is an important person and after she had found time to come here. So what I did is at one point when she had made some observation I said it's a very good point. I will discuss this with my colleagues. And madam will get back to you and I announced tea break because that was the most polite way of getting out of that situation. So tea break happened 20 minutes ahead of schedule. Immediately came an email from our coordinator from Pune nobody from COEP has come. He says please do not change the break times. Our vendor does not supply tea 20 minutes ahead after he has been told at 11 o'clock. So you might announce the break now but the participants will not be back again in time. So you can see that when you are doing something at 30 different places then coordinating has to be absolutely by clock, you know.  Like you can't do in a classroom. So I am putting her in the same dilemma. Okay, may I suggest one thing? I think your break is at 11 o'clock. Let me put it this way. Some of the participants have probably come late and you may not have been able to complete the entire administrative portion. The administrative portion requires that all of you should fill up those tables because what we are trying to organize is that we will do all the whatever internal audit checking, etc. And tomorrow we will collect a huge amount of cash and reimburse you in cash itself so that you are not out of pocket immediately for that. Now that will require some work and if anything else that you need to know or do about your stay here I hope the stay is comfortable, your rooms and all are okay. Luckily we should also actually maybe we will invite Professor Kavi Arya to give the validity certificate distribution after all he gave us those eight rooms, additional rooms. But it's a regular manamari here on logistics. I don't know how it is at your places. Same problem. Part of the institution. Part of these. So in fact this is one question I would like two questions actually particularly because NITs are here for the first time in large numbers. Most of the NITs are not part of the ISRO as you sat but Dr. Chidambaram told me and Dr. Dekhne from BRC that they will all be part of a national knowledge network in a very short while. Is that true? I mean are you having a part of... They are providing 512 KVPS, 10 lines for each and every college. This I have been hearing for last five months. But now just now we have received that letter and they are now giving the connection. You have received a letter. No, they are giving the connection also. We are all engineers. So seeing is believing. No, the connection is established in one or two colleges. I got some info from IEM Kori Code which is nearby our institute. So I have contacted the NIC people who are going to implement this NKN. So I contacted him some five months back. So he told that it might be realized in March. Now it is May. And recently I have sent a mail to him again. There is no reply for that. I tried to contact him by phone, no reply. And I have also talked to BSNL people. They don't have any idea at all in Kerala sir. Very good. So in short, it only buttresses my feeling that there is no sense of urgency. It will happen but it may happen at different times. Yes, professor. Yes sir, I talked to Dr. Mani if they are in NIC Nidali regarding the NKN. So what he later said that earlier the institutions were used to pay 50 lakh rupees for the NKN connectivity. Now they are not to pay anything. Yes. So the latest approvals they have been made. Of course. And I asked him that what will be the implementation time. What he said that it must be as short as 15 days or 21 days. Let's see what will happen. I am in continuous touch with him. Keep fingers crossed. I will tell you our dilemma. Our dilemma here is that if at all, see there are timelines to be met for organizing anything. So take the thousand teachers workshop. Now the workshop we are planning what are the dates Mukta, 28th June to 10th of July. Now I have to enroll thousand teachers from engineering colleges. Should I not give them at least two months? That means my marketing or whatever you may call it must begin two months in advance. If I have to start on 20th of June, 20th of April the marketing should have begun. I can't begin the marketing because I can't even list the remote centers where I will be conducting this course 100% guarantee. Suppose I say XYZ Institute in that list and 40 people enroll there. And the great BSNL, MTNL, BARC, whatever, whatever together goof up and there is no network there. I am accountable to those 40 people who said that look I would like to do this course. You told me this. I can't do this. It happened in the last pilot workshop and we don't want to do that. We don't ever want to do that again. Last time in fact we had 970 enrollments. But because we had to cut down on the number of available resource centers, we could ultimately take only 650 or 70, 670 teachers, which is a large number. We are complimented because never before in the country a single IST workshop for 670 teachers has been conducted. And the teachers we could see from their body language and their feedback, they were extremely happy. They believe all of them that they have benefited. Hopefully it will reflect when they go back and teach. But if we want to extend it, we want to take care of these things. Actually another thing Dr. Kamal Bijlani is saying is that we can work on internet. If we have a decent internet bandwidth. Now in big cities we have up to 3 Mbps or certainly 512 Kbps all broadband that we get from MTNL or BSNL or even with these reliance or Photon Plus kind of cards. So we are going to experiment whether the AV works on those bandwidths. In which case you could just have an internet connectivity or substantial type in your institute and we are done. But this is the but. Suppose we decide to do that and we start experimenting. Then each of the remote centers after you go back, you will have to set up whatever is the facility required, whichever way broadband or whatever, connect it. We will have a running thing every day. Our team will be here who will be connecting on that application. But we have to confirm that things work. It will take at least 10 or 15 days. Only after that we will say that yes, this center, this center, this center, this center, no problem. But these two places, let's say Sherwood does not get bandwidth. I mean you will get only 56 Kbps on that reliance. You can't get 3 Mbps. Now 56 Kbps this will not work. But if you are on an ISRO network, things will work. The dilemma now is that the ability to freeze the total number of remote centers from which I can run the program. I cannot freeze that quickly enough. So this is a challenge and we will work out how to face this challenge. But I am very clear that unless we can definitely identify and have enough time for teachers to enroll, we would not like to run that larger workshop. Unfortunately, that larger workshop running does not require any accommodation or anything at our place. But it requires facilities and labs at your place. And you can't do that either during a running semester. After all this, during a running semester, the facilities are occupied by your students. So first thing is to note whether your vacation time and hour and general country's vacation time coincides or not. What we are planning is months of May and June in general and month of December. So first feedback I need is by and large R.D. is okay. That during this time the facilities could be made available to the teacher. And you are talking about accommodation in guest house and so on. During these months, is it likely that accommodation will be available for the participating teachers and other things? Yes. Because we expect about 30 to 40 teachers to come at any remote center. Larger than that, it's the organizational hazard. And that means about 15 to 17 rooms will be required where they have to stay. Later on in one of the action items, that action discussion, I will also circulate the economics that we have worked out. Originally, we tried to go by the IST rules. You know some 1,15,000 for conducting a workshop for 35 days and so on. But the first co-initers meaning that we conducted, we asked people about the cost. And they said, this is nonsense. We can't conduct a workshop at these costs at all. Fortunately, we neither have to charge the fees nor have to depend on IST funding. Our funding comes from MHRD. So I could convince the MHRD people that if I have to run this workshop properly, then I must be able to pay a decent honorarium to the coordinator there. Something to the technical assistants who will be there. It is not just the coordinator who will be doing everything. After all, there are 30 teachers coming, you know, established like, I have my assistants here, you would have your assistants. Secondly, the teachers who come. So what we said is, the IST, there is a huge cost in travel for the teachers. But we said if the teachers are within a certain vicinity, so we restricted the travelling allowance to be paid to any participating teacher. So I think some 1000 rupees. So that means you should be within a vicinity where 500 rupees will take you from your place to that college and back. And we said, we increase the allowance for food, stay, coordination, etc. So we will circulate a sheet of the current thing that we have done on the basis of which we got approval from MHRD for funding. So this whole effort is funded by MHRD. And the other idea is that for the remaining 12 courses, which were 10 courses we have to do, by the way it is incidental that we started with teachers from IIT Bombay and we started with me because since I have to run the pilot, I have to have a first-hand experience, so I offered this course. But there is absolutely no reason to believe that these courses can be taught only by IIT faculty. So for all the 10 courses which we will be finalizing by about July timeframe, and we will be circulating to all of you, what we want is what in our collective opinion is the best teacher in the country to teach that subject. The best. There may be 10, 12. So in this, again, I will solicit your feedback. So you might know a colleague, let's say teacher's thermodynamics extraordinary level. Like for example, we have people in every area like that, every IIT has it, every NIT will have some teachers, and every college will have some teacher like that. So we would like and it is possible that two or three teachers could come together and handle a particular subject. Because we really want, since this is a one-time effort, after all the contents, they may continue to get edited and added and so on, but the basic contents will come out of this. We really like as much contribution as is possible. And one new thing that I would like to sort of ensure is that the labs that you conduct at your places, if you can have a video camera and record some of the tutorials or labs that you conduct at your place, tutorials if you conduct in that classroom, there will be a video camera. But any additional contribution that your center can make, we'll be very glad to add it to the open source, saying this comes from Trichy, this comes from Maarangal, this comes from Hamirpur, whatever. Because the idea is to expose this larger number of students and teachers to different things that are happening or the ethos at different places. That's the objective. So, but these observations are good. So, May, June and December are okay months for you to conduct these things. And up to July, sorry, up to what date in July can you go? Sir, I am from Vhenaiti, Nagpur. So, for us, our schedule matches with IIT schedule. So, we absolutely don't have any problem conducting during that time. But our problem, one problem which comes is basically the teachers who will be attending this workshop. They'll be in and around Nagpur. That is, Nagpur University, Amrath University and people from Chattisgarh region. And many of the university have their own schedules which doesn't match with Vhenaiti. So, their schedule may start early, which is like first week of July, first July or second July like that. OIC. So, there is a chance that, so, I came to know that last time it happened that way that during winter session, the session of the semester of Nagpur University started early. It was clashing with our workshop. So, my suggestion is that 28th June to 10th July, so maybe this year we cannot change. But if it is advanced by say couple of weeks earlier, say next year. Next year, we are planning to hold up to four workshops. First to 15th May, 15th to 30th May, 30th May to 15th June, 15th June to 30th June. Taking two weeks in between. Means, there will be few days gap. So, we'll end on 30th June. The problem is, if you want to start on 1st May, there are many colleges in North India where the exams are not over by 1st of May. But here we are not talking of students. So, it should be possible for the principals and directors of those colleges to say if the teaching has completed, then at least I can spare a teacher to attend that workshop. That is the idea. But you are saying July 10th also could be… So, before coming here, I was just enquiring in other colleges. So, I haven't got a firm reply when they are starting. Maybe other professor from Nagpur, she can put more light on that. Within the first week of June. First week of? June. June? Yes. Students will be coming by that thing. Yeah, they will be informed. They will be… Yeah, yeah, yeah. Okay. So, let me ask you this question. Even though the teaching will start, is it not possible for the colleges around Nagpur to spare a teacher for 15 days? Sir, it would be possible but depends upon… Difficult. But it depends on the authorities of the colleges. Given the compulsions of educational administrators, meaning that… Yeah, exactly. That college is your… So, it happens that like for local people, if they come to say VNIT, so one fine day, okay, some call will come from principal or someone, basically from the college, saying that, hey, just say, chhota saha kaha mein aaja ho itna doh gante ke liye aaja ho and then go away. Something like that. So, there is a discontinuity in the… Yes, yes. So, he is pointing out the disadvantage in our scheme where people from local colleges come. According to him, everybody from Nagpur should be sent to Kedarnath or some place wherefrom he cannot come back for any work. But at the same time, people who come from outside like… Yeah, yeah, yeah. And residential facilities are available at VNIT. Take your point. So, what we are planning to do is if we can take more people from say… Who are not stationed in Nagpur, who are not placed from Nagpur, then we have better chance of getting it done. Our problem is funding. Yeah. So, I think from Chhatsai Chhattisgarh or even say from Amravati, they travel to Nagpur. That is fine because they do not have home and other things. That is not a bad idea. When we register people, we will say, all Amravati people go to Nagpur. Nagpur people go to Amravati. We had a very successful centre in Badmira last year. Yeah. But they could not do it this time because in Badmira, the summer is very bad. Care, care. So, people like that could come to Nagpur. What do you mean? Nagpur summer is exactly as bad as Amravati. Yeah, they will learn. And for essential facilities, we do not have power. How is your power situation? I am told that power situation could be very bad at times. Right now it is okay. So, officially government has decided that Nagpur is load shedding free zone kind of thing. But they do not speak, stick to their promise. So, couple of hours like it may go. How is this power situation in rest of the country, by the way? In NITs, it is okay. But the rest of the city, there is some... We had a problem in Nanded last time. We had to give them extra funding for a generator. Okay. So... Hopefully. Okay. Now, at least the tea should have arrived because it is exactly... So, we will stop now.


No problem. So just FYI Let's get started the the sooner we start the sooner everyone gets to go home. This is very exciting So thank you guys for coming to the common Barbican use cases and options for your open-stack deployment I know it for many of you is the last day. It is the last talk on Thursday for everyone So we do appreciate you guys being in attendance. So we didn't have to just present to one another again My name is Sheena Gregson. I'm a product manager at Mirantis in a very recent previous life I was the product manager for Barbican at rack space. So this talk is near and dear to my heart With me presenting today are Doug Mendes of all who is the Barbican PTL Adam Harwell who is a core contributor on neutron L bass and has been working on the integration between neutron L bass and Barbican John Dickinson who is the PTL for Swift and is going to be explaining the spec for the Swift Barbican integration and Joel Kaufman from Johns Hopkins who has implemented an integration between Barbican cinder and Nova and I Know that for some of you if you've looked at the schedule, it looks like we're having a panel We're actually not that's a sneaky switcheroo on everyone. They listed me as a moderator But I was mostly just the person that made sure that we had a slide deck and presenters So I'm going to happily step off the stage after I give you guys the run-through of the topics and let these guys take it away So today we'll be covering five topics more or less For those of you who aren't terribly familiar with Barbican will go over some of the basics terminology that you might need to know What the projects intended to do how to use it? We'll also go over the common integration libraries So if you're a developer and you're interested in Using Barbican some ways that you can use it without actually talking to the API We'll go through three use cases integrations with Swift, Neutron, Elbas and Cinder and Nova We'll talk about a couple of other pieces of information that you may want to look at after and then we will definitely have time for Q&A Or for you to escape quickly So without further ado, I'll hand it off to Doug to go over the Barbican basics All righty. Thank you, Sheena Thanks everybody. So I'm just gonna give you sort of the quick five-minute elevator pitch for Barbican what it is and and what it can do So Barbican is a RESTful API for key management in a secure storage and generation of secrets And we're in official open-sac project. We're part of open-sac in the big tent now and we started to sign the Design the service from the ground up to be part of open-sac. So it's got stuff built-in like multi-tenancy It's designed for scalability So you should be able theoretically it'll handle hundreds of thousands of millions of keys or secrets as we like to call those It's also got a configurable back-end architecture And so what this means is a Deployer will have their option to talk to their security guys and sort of figure out what the best option is for Deploying Barbican and there's some trade-offs on sort of the the back-ends that we have Some of the options include dedicated hardware Modules like a HSM sort of hardware security modules that provide sort of high security assurances for the storage of your secrets and We've also got Configurable CA back-ends one of the cool things that Barbican can do is provision TLS certificates And so you you sort of have your choice of what CA to use in the back in the back end for those So some terms so that we're all sort of on the same page We call basically any kind of sensitive data We call those secrets and secrets could be a bunch of different things you could have Symmetric keys for encryption Asymmetric private keys so some like your SSH key or an RSA key or something like that You could also have passwords if you wanted to you can store passwords in here And of course x bar by 9 certificates for TLS encryption and such We've also got this concept of orders, which is the way that Barbican is able to provision these things for you So if you want to provision a certificate you would submit an order to Barbican and then Barbican would process that Asynchronously eventually would produce a secret from that order and that's that's how you retrieve your stuff It's just like any other secret We've also got a concept of containers now This is just a logical grouping of secrets in Barbican and some of the containers could be for example a certificate Could be represented by a container if you want to group it together with its private key As well as its public part of the certificate and stuff like that also RSA key pairs could be a container You could have the public key and the private key and if you choose to encrypt your private key You could also add a passphrase to that so you could have all three secrets Related to each other in a container We also got a concept of consumers Which is a way to add metadata to a secret and sort of add information about other systems that may be using that secret and Adam will talk a little bit more about that when he's talking about the LBAS integration so if you're interested in using Barbican in your Application or in your service or something like that. There's a couple of choices for sort of what library you want to use for that integration And so the first library I want to talk about is Python Barbican client Know this is your typical open-set client. It's going to include a Python API as well as a command line interface And if you're familiar with any other Python-project client, it's going to look very similar How we use the keystone client and keystone sessions for authentication? So you don't have to learn anything new there Our latest release is going to be version 3.11 which is available on PyPI now And it supports secret storage for both the Juno and Kilo release of Barbican Unfortunately, it's laying a little bit behind it does not have some of the features that were released with a kilo release a couple of weeks ago But we are actively working on those so there should be upcoming in a future release It's a couple of advantages and disadvantages that you're going to have to consider when you're thinking about how to integrate Barbican one of the advantages of using the Barbican client is that it uses all these Barbican conventions that I just mentioned like secrets orders containers all those things so you don't have to really relearn like if you know Barbican terms you should know how to use Barbican client after that Also, even though we're lagging that is where we implement new features first So if you want some new feature in Barbican best bet is it's going to be implemented in Barbican client first One of the disadvantages though is that it tightly couples your application with Barbican So if you decide to use Barbican client Then you are basically saying that your key manager is going to be Barbican no matter what now for some people That's not a problem For some other people it may be a problem For example people that are working in a government setting where the key manager has to comply with certain compliance regimes like VIP certification or something like that Barbican may not be the right key manager in that situation And so if you find yourself Sort of needing alternatives for a key manager if Barbican is not the right solution. We have another library called castlin Now this was born sort of a pattern We started to see with services that were integrating with Barbican where they were putting an abstraction layer of a sort of a generic Key manager in front of Barbican clients. So we we took those all those interfaces and combined them into sort of a general You could think of it as like the lowest common denominator key manager And we call that castlin and it'll allow for Different implementations to key managers. Obviously Barbican is one of them And the disadvantage to this is that it only implements a subset of Barbican functionality Specifically a certificate provisioning will likely not be available in castlin And so with that in mind, I'm gonna bring Adam Harwell up here to talk about how he's using Barbican in Neutron al-pass All right, so why did we choose Barbican? So as I'm sure most of you are familiar secret storage is not an easy problem So actually it's it's so challenging because of the guarantees You have to make in a lot of cases that for Neutron al-pass v1 They actually chose to not have SSL termination rather than try to solve this so Fortunately now with al-pass v2. We do do we do Support to al-pass termination and we do that via Barbican So another thing Besides just the fact that Barbican will store our keys for us is that the type containers that they have so Doug talked a little bit about this there are containers that are generic that just hold any kind of secrets But there are also type containers which hold very specific kinds of secrets with specific names So in our case we use a certificate container and that guarantees us that we'll have several named secrets in it We'll have the certificate itself. We'll have the private key for it We'll have intermediates that might be necessary and a passphrase if the private key has one And so that allows us to really conveniently keep that In one package so that when users are using our service, they don't have to figure things out. It's just it's right there for them We're also making use of a rather new Feature in Barbican per secret ACLs Access control lists So normally when a user puts their secrets in Barbican only they'll be able to access them by default So for our service to access them, we actually utilize this feature so that the user can allow our service account to access specific Certificate containers so that Elbas can go in and pull them on their behalf And also consumers are awesome or rad as Sheena has here on my slide Consumers allow us to do sort of a basic reference counting Thing so that we can tell and actually it's a little bit more than that. We can actually link back whatever is using This secret container or this certificate container by its URI And store that in the metadata for the container and we can do that atomically when we Retrieve the data so when neutron Elbas gets a user certificate we atomically register as a consumer So there's no chance that the user will Accident well, there's still a chance, but there's a lower chance that a user will accidentally Delete a certificate container out from under us Which could cause problems for us down the line And it's also that can also be really useful for like horizon or other UI integration So that you could see right on your secret Hey, this is in use by and actually have a link straight to the thing that's using it So you could see this secret can or this Certificate container is in use by this load balancer Possibly in the future maybe a firewall. I mean the it should be really useful for Allowing users to keep track of what's using all of their secrets So our actual use case is pretty straightforward So we actually allow the user to store their own Certificate information so their own cert and private key in Barbican either using Barbican's API or hopefully soon there will be a horizon UI We're crossing our fingers on that one And that that way the user never has to give their cert to us. They only trust Barbican with it or their private key so when they Store that in Barbican, they'll get a container ID which represents all of those seek necessary secrets together Then they'll make a request to our service Neutron Elbas and they'll pass in that container ID Along with their TLS termination create or update At which point we will use Python Barbican client to go get that data Register and then validate the data and pass it on to our load balancing appliance in the back end which then uses that certificate data to do TLS termination so it's a fairly straightforward, but Definitely adds a much needed functionality to Neutron Elbas in v2 I'm actually that's all for me. So I'm going to pass it to John to talk about Swift's use case Thanks So one of the use cases that we have in Swift is well generally we're here to store data and lots and lots of it and when people start doing that there's new use cases that come into the community and it's Really to me personally one of those exciting things are like hey, we're using this but we need Feature X or Y so that really gives us really great incentive to start working on solving this so one of the things that has come up a few times in the community recently is How do we store our data, but we need to make sure that's for various reasons that it's encrypted while it's stored and That's a huge. That's a huge problem space that you can start trying to you can you can tackle and talk about it for years Before you actually get around to doing it. So we've constrained the problem space down to this When somebody stores data in Swift regardless of the client that they're using or any or anything like that when it is actually Persisted to a storage device The plaintext will not be there neither the metadata nor the actual data of the object is being stored and this is really nice because the specific attack vector that we're planning on shutting down the one that we need to account for is What if a hard drive walks out of a data center Because there's a lot of people who are using Swift today in very sensitive places that have a lot to do with personally identifiable information specifically medical records and financial records and Then even you've got corporate information that you want to make sure you keep inside of your your own Facility so it's really bad because if a hard drive walks out and somebody can read the data That's the kind of thing that for some of these people ends up on the front page of CNN or something like that And they just cannot happen So what we need to do is make sure that regardless of the client they're putting that into They're they're encrypting that when it gets onto a drive So the problem of course is that when you're storing hundreds of petabytes of data and billions and billions of objects key management gets tricky so That's why we're looking at things like barbecue. So this is something that is An in-progress thing in fact just I just came from one of our working sessions where we were specifically talking about some of the Outstanding work we had to do this and we saw a little demo of this Working in a you know kind of a demo since yesterday, so we've made some great progress on it And it's something that's an active area of discussion so the basic idea is we're saying that we need something out there to provide us the The assurances that we can get from a key management without a key management system without us having to deal with securely Doing that because it's hard and that's outside of the problem scope of object storage So that's why we're looking at Barbican and saying this is what we need to use so We use Barbican we don't have to worry about what proprietary thing is out there we can trust that that's going to be Part of the overall ecosystem, so that's where we are and the basic idea that we're working through is this at some point When an account inside of Swift is provision That's just a storage area for where you're going to end up putting your data in Swift when that is Created at that point. We're going to this is remember. This is one possible implementation of what we're working towards What we're going to do is we're going to request a secret to be generated and at that point We will store that with Barbican and ask Barbican to generate that secret so then we can get this the secret back and Store some unique identifier about that either we could deterministically ask for it later store a key ID or something like that With that account later on a user of that that Swift account is going to want to store some data And at that point we can find the key that we used to store things for this account Ask Barbican for that particular key and we can get the key and encrypt the data and then When it's persisted to the disk it's encrypted data and metadata cannot be read Later on somebody's going to ask for the data back to actually read it And once they're authorized to do so then we can request to the same exact process we request the key back from Barbican we are able to decrypt that and Return the plaintext back to the user so the end of the overall goal here, which is really exciting I think is that the end users don't even have to worry about this. You can have any sort of client you need Maybe it's something that's official upstream that knows exactly. Hey, the right way to do stuff Encrypt stuff on the client side before we push stuff all the way down clearly that's going to be the best way to encrypt data However, that's not the only use cases out there and all that and you can't always trust all of the clients They're talking to the storage system. So you need to actually make sure that the data is encrypted so specifically for the problem space that we're trying to solve for this is something that's going to be really good and We're working through this now and the so far these kind of patterns that we're looking at here Provide us both the high security that we need, but it also is going to be able to continue to scale For the use cases that we have Storing massive amounts of data and things like that. So like I said Working on it now trying to figure out what all the details are and get all those those pieces worked on and we expect to have this done Soon, I mean as soon as possible. It will be released and it'll emerge into mastering and released in Swift So I'm hoping that this is done before the Tokyo Summit. We'll see what happens there But you know, maybe maybe after that when we get to Austin We'll just kind of have to play it by ear and see what when we have something that's validated tested and things like this So it's really great. We're working with the Barbican team very closely They've been a pleasure to work with as well as HP and IBM kind of leading the way on Implementing this into into Swift. So it's been really it's a really fantastic thing and every single time I hear about Barbican I learned something new and I'm thinking this is actually kind of cool It's like well, I was wondering how we're gonna do this this particular scalable thing. Oh, we've got castellan over here It's gonna it's gonna solve that problem or hey, did you think about this and oh, yeah Well, we've got that crypto library over there that's automatically implemented that for you And it's it's just been a really great thing because every time you come out There's like this this is exactly what we need. So anyway, I'm very excited about what's going on and I'm looking forward to it and I hope that you're able to use that so with that I think Joel's next I'm gonna tell you about some stuff at John's office So I'm going to talk about some of the work that APL has been involved in Across several different services in OpenStack We started in OpenStack as part of the grizzly development cycle and the primary Situation that we were initially trying to solve was a very similar use case to John's However, instead of working with object storage, we were interested in securing block storage across OpenStack So the first place that we started was Cinder and Nova to provide encryption across all of the persistent storage provided by Cinder So as part of this we knew that we needed key management But we really did not want to write key management ourselves at the time because key management is really hard It's hard to do securely. It's hard to do well Unfortunately when we started this work, there was no barbecue on project that was still about Three or four months away from the initial Prototype that was going to be displayed as part of the Havana summit in Portland So what we started with instead was what would become the precursor of the Castellan library We implemented a very generic interface it supported features like creating and getting keys and The idea was we didn't know what the form the eventual key manager would take But as soon as the key manager would be stood up It would presumably have an implementation that satisfied these various functions and Barbican certainly Provides that functionality for us. There's other compliance regimes like Doug mentioned previously such as FIP certification that may be required for Governments or even financial information or health care information And we want to be able to plug much more high security Devices that do satisfy these compliance regimes Behind Barbican or independently and Castellan gives us a way to do this We also have a pluggable back end for Barbican that uses the key management interoperability protocol or came up for short In order to satisfy these various things So what we're getting out of? Barbican or key management Castellan in general is secure key storage separate from the data itself When we were starting the work, we knew we couldn't store keys either in the Nova database or Cinder database Very nice for a prototype not good from the eventual security that you want to have for one of these features And the other thing is that we needed all the keys to be accessible across various services So we couldn't embed this as part of an isolated Single service because in our case as you'll see momentarily What we actually do is we generates the keys from Cinder and ask for a key to be generated But Cinder never actually handles the key material itself That key is stored in Barbican in this case, and then Nova is retrieving it later on In terms of the implementation we completed the majority of this work as part of the Havana release of open stack There is at the Hong Kong summit a talk entitled encrypted block storage technical walkthrough which explains all of the details in At great length So you can feel free to watch that presentation if you're interested in the work And we have continued to improve on that sense if you go back and look there's a lot of command-line interface driven stuff in that particular Presentation all of that's been replaced now. We're fully integrated with the horizon dashboard As part of the Keeler release We were also fully integrated with Barbican for all of the key management as part of the Keeler release as well So the way this this actually works is the user is going to create a new Cinder volume So that request is going to go to Cinder Cinder is going to actually take this request Recognized that it needs to create an encrypted volume based on some of the parameters of the request Cinder is going to then ask Castelon or the key manager interface to create an encryption key Castelon will pass this request on to Barbican assuming the Barbican is the back end for Castelon Which is the primary back end currently? Barbican is going to create this key It's going to return a reference to that key which is going to be stored as metadata Within the Cinder database. So again Cinder is not actually handling the key material itself. It simply knows that the key exists Then later on when the user is going to attach the volume to an instance Nova is going to receive this request. It is going to recognize that it is an encrypted volume when it retrieves all the connection information from Cinder Then it will go back and ask for the encryption key from Barbican again going through the Castelon interface to do so The encryption key will be sent back to Nova once Nova has it it will be used or passed to DM Crypt in order to provide Transparent encryption and decryption of all the data being written to and read from the volume and so to the virtual machine instance it has no Actual knowledge that the volume is being encrypted. It is completely transparent to the end user Apart from some additional enhancements that we've added to the horizon UI in order to indicate with a very simple Yes, no that the volume itself is encrypted But the user can't accidentally turn any of this off if you're hosting a database And you just simply need to make sure that everything in this database is encrypted You can turn this on as a configuration option for example, and there's no possible way that the data would ever be stored on disk And it's plain text So with that I am going to hand it back to Sheena in order to Cover some additional information as well as handle questions My handle questions. He means handle deferring questions just for clarification I also noticed on here. So we cut down the number of steps Significantly, so you'll notice that the last two go 914 I actually am better at counting than that But we were trying to cut down on the number of steps to make it a little bit easier to read So that's not that should be 10 So just a couple of bits of information for those of you who actually access the link at the beginning of the presentation There are two specs that you may want to take a look at based on the the presentation today Swift spec for the implementation between Swift and Barbican and the Elbas neutron Octavia spec Which uses the new load balancing appliance that that team is working on there's also a Barbican contributor meetup tomorrow So if you haven't gotten enough Barbican You can find these fine folks tomorrow at 1 20 p.m And they would be more than happy to talk to you about Potentially using Barbican for your project or open stack deployment And with that we've finished and it's time for Q&A if you'd like to run away Everyone's email address is at the bottom take a picture make a run for it. Otherwise, we'll be happy to stay and take questions a Question about the Nova Cinder Barbican integration If it does the encrypt I assume it's not completely Back-end agnostic. So for example, it might not work with Seth or does it? It will not interoperate with Seth currently. It is relying on I SCSI connections That are formed by the other cinder drivers any future plans to somehow magic this into being We would like it to happen the Probably best way to do this is add encryption to Much lower in the stack say to Kimu. We have investigated that possibility We aren't pursuing it immediately But it looks like there is some motion on the Kimu development list that this could happen within the next six to twelve months If someone else does make progress in this area, we would certainly be interested in tying this into the other feature So I'm gonna just do plus one for that right there. We want that integration with Seth Please My question though the next question though is you know working working with John on the encrypted Swift stuff One of the things we want to be able to do is when Swift the key master hits Barbican it goes This key is old. We want to be able to recycle or deprecate that key and So my question is how do we do that in the status because I want to have a list of keys One is active and some are deactivated. They're not deleted, but they're still there So when I come across the container in this container is has a deactivated key I can go. Oh, it doesn't have the current active key So I need to unwrap the container key with the deactivated key and rewrap it with the active key So kind of how do I do that as far as like status? How do I how can I look up the key and say this is the one that matches this particular container that hasn't been accessed for a year? You know what I mean? I think that's a great question No, I think it's here so they I don't know Really what the what the implementation is going to be because it is not yet written yet So we can make it whatever it needs to be that being said One of the what you described there is certainly one way that we could do that. However, I have some Concerns with my understanding of how that would work and what the effective effectiveness of that would be Specifically around the scales of keys that would be needed Yeah, and we're not talking often like three years as NIST guidance for the keys We're looking at so John will continue to work with you Janie and try to figure this all out as we go One of the things that we're specifically talking about is having some Something that might be a little bit more nested. So we have we can lower the scope of the keys. So we have some sort of Derived keys key derivation stuff to make that go down. So that's maybe we can Store a little more limited numbers of keys that can be we can use to derive those little lower level things say a container Or an object level thing and if that's being said I don't know how we'll do key rotation or if we will because that's hard with that much data Re-encrypting all of the data. So yeah, yeah, I don't want to re-encrypt all the data I want to do it at a very high simple Encrypt, you know, you like key encrypting key sort of thing The short answer honestly is it's being written and that's That inside of Swift we're the way we're doing this is creating something called a key master Yeah, the key master is responsible for talking to Barbara can cast along that kind of or whatever else is out there and The key master API is currently being defined. That's what we've been working on this week and we'll be working on over the next few weeks so and the implementation is certainly not done at all and The we want to support various and many different key masters. So the if you need one that does a particular thing Yeah, we want to enable that And I hope it will have a key master that will support most of what you need And that will have the tools available so that you can write one that has their specific requirements Super. Thank you, sir question about Getting the infrastructure we need to have tenant based logging in open stack So one of the people one of the things is manasca right now has API's to say Oh as a as a VM you can send logs up, but it's requiring the open stack Token as a way to validate and we need a secret to be a long-term secret that the VM has kind of Pertinent and not something that's going to expire so that the VM can keep sending logs and metrics up into a shared infrastructure but we can make sure that coax VMs can't fake Pepsi's data and And So I guess a question I had on that is do we have anybody kind of looking at that? Infrastructure an integration with Nova to try to have a kind of tenant based logging password pushed into the VMs and stored in Barbican So I think this is more of a general problem that we've been discussing on the mailing list sort of last week There's actually a design session going on at the same time as this talk Kind of talking about there, but it's basically how to get How to assign Identity to a VM is sort of the base problem We're still hashing that out. We don't know what that what the answer is now I'm hoping that we'll figure at least a plan for work before the end of the summit But it's definitely a problem. We're aware of the problem and we're working on a solution But we don't have one yet. Okay. Oh So what's your room was that other go to D. No, the other one was in the Sakaar the sign summit is whatever wherever room Sakaar was meeting in right now It's where they're and we actually sent some Barbican folks over there to participate on that. All right. Thanks If we could go back to the Swift implementation proposed, I guess Swift implementation and We're talking about medical data. We're talking about if you're Calling up a study. You're gonna be calling up not one object, but several in the case of an x-ray hundreds in the case of an MRI and Potentially thousands in the case of a CT scan. So I'm wondering what kind of if you have any I Guess predictions for what kind of overhead that would introduce into the system to As far as it being multiple objects versus right. Yeah so As I I mean and we're leaving aside just the overhead of decrypting encrypting the data, right, right I Don't anticipate there being significant additional overhead to Beyond the CPU needed for doing the encryption decryption. Okay. The reason is because Again looking at the use case we're storing so I'm what I'm about to say is not solving other use cases But it works efficiently for this one for the use case that we're solving we are solving the Data at rest keeping drives from walking out and exposing that data so one of the things we're doing especially to improve performance and keep It working at large scale is we when we request that token at that key I'm sorry that the secret that's what it is the secret from Barbican and Use that for encryption decryption. Let's suppose that that is stored on a container resolution So every you know the million objects that you have the million files that you have inside of one container in Swift It would be sharing the same key potentially That being said we can cash that for a while We can store that internally in the cluster without having to go do that fetch again so that we can have very very fast access to it For subsequent requests to objects in that container and basically in this way it works It would work very very similarly to how we do off tokens and keep those As performance possible inside of Swift so I don't anticipate a high level of additional overhead But if you do want to talk more about that I'd be happy to introduce you to some other people who are more directly involved with it Sure. Thank you This question is for both the Swift and Cinder implementation at what level is the key generated is it a per tenant? Is it a per VM from the Cinder case or is it per container in this which case that kind of thing? Pervolume per volume. Okay Yet to be defined I The key generation will be done inside of Swift at some logical layer of Swift So like that's gonna be like a cluster a cluster the whole cluster for account or container or object and we maybe do something with key derivation and figuring out how to keep how to do that rather than request doing a request for creating a new key every single time But the resolution will be Configurable on there depending on that key master implementation Okay, so the the configuration part is kind of what I was digging out there as well because for example our application we actually Might run multiple versions of the app and for every customer within our app We're also multi-tenant so we need to be able to encrypt things per customer and Even to the level of per account within a customer. Yeah, I think that makes complete sense. Yeah I have to support that And actually I meant to mention this earlier, but I had someone from the heat team stop me I think yesterday or the day before and tell me that they've got an integration working as well So it wasn't featured here, but these are not the only use cases We have a lot of folks inside the community making use of barbecue and functionality And I'm super excited to be a part of the presentation Showcasing all the hard work these guys have done so with that with that be free Thank you guys so much for coming and have a wonderful rest of the summer


What's up everybody, Jason here for jaspyscasebrakes.com. We just sold out 2021. Convenient city and football. This is a 12 box case break, Pikachu number three. And here we go. Here is the customers that are in the random number block. Jacksonville, New England, Tampa Bay, and Denver. That's everybody there. And here's everybody that bought into the break. Boom, perfect. So hopefully we can get a color blast in this case that we got here. First two, we haven't unfortunately been able to get a color blast. We just got contrast twice. But I had the wife pick out this case. So hopefully she brings the mojo. So Christian Barmore. Oh, wow. First box, already a color blast. Hell yeah. I just didn't need to pick these. Let me put this right here. We'll save that for the end of the box. Frank Darby, color blast. Not numbered there for Atlanta. For the jets, jets, jets to 100, Elijah Moore. New York Jets going to grant Tyson Campbell to $199. That's Jaguars right there. So Jag's R&B already on the board. That's number 15, spot five going to Matthew Slade. Redemption. And how about a Devante Smith, 7 out of 50. Nice two-color patch and autograph for my Eagles. Diego with that one. Not a different case already. All right, let's see the redemption. And then we'll show the color blast. Rookie Autos, card number 186. Nick Bolton, that is for the Kansas City Chiefs, which is David. All right, you guys, good luck. We got a color blast. Here we go. Behind Christian Barmore. Wow, Justin Fields color blast for the Bears. Matthew Slade, who bought this straight up. Beauty. And I must say, the color blast from Obsidian, the black looks way better than the white ones. I don't know. This is such a nice one. There you go, buddy. Very nice. Even those dust particles get stuck inside the top loader. Christian Barmore, that's number to 100. You're my boy, Blue. All right, man, well congrats. I had a feeling we were due for a color blast because it just sucks that we didn't get any of the first two cases at all. We were just getting like white contrasts, you know? So let's continue on, guys. Hopefully this case is a fire case, because like I said, I feel like we just are missing out on some really good cases, potentially. Deandre Hopkins and a Delvin Cook. So it's a 100 there. And Cardinal Lurion, it's a 75. Yeah, I had a feeling just on all of those bigger teams, like Bears, 49ers, all of those bigger quarterback teams, man, because I just feel like you guys have obviously missed out on some big hits, and we were definitely due. Third time's a charm, right? Factually got it in picketing number three. Out of 50, Kenny Gainwell. So like I said, guys, maybe Anthony was right earlier. You know, maybe our couple cases that we got weren't the best ones, but the rest from here on out might be monstrous. Two out of 50. Josh Palmer for the Chargers that's going to the JC. I did, Rex, I did. Man, congrats. That was a cool little sneaker swatch, or sneaker spotlight, sorry. And we have Will Shields for the Chiefs to 50. And then we have Jacob Harris to 50 for the Rams. Los Angeles Rams going to Patrick Davis. That boxer there with the color blaster was a great boxer, right? I mean, what, is that gold? Wow, we have gold. Wow, they're sitting in gold really popped. Wow, two of them. Hot Case, two rookies, Mekki Sargent, and Ben Skoronek. These cards really popped. Nine out of 10. The first box with the color blaster, it had a DeMonte Smith RP. That was really nice, too. And eight out of 10. Titan going to Chris Parent, and then, of course, Rams is Patrick Davis. Man, these cards pop. Dude, one of those are the top flares. Would be so nice. Scary Terry McLaurin for Greg. Davis Mills, patched to 75. Houston Texan is going to Dominic. I'd love to do some more obsidian with you guys today, guys. Because this obsidian is very, very nice cards. Our first point, 600. Thailand Wallace, number to 10. We got Scary Terry McLaurin to 75. Matrix patch autographs. And that's one for Washington and Greg Dash. Next one. The black looks really good, Aaron. I mean, I'll take, whoa, my god. No way, two color blasts. Tom Brady, wow.  Oh, man. The fact that we got two white contras in the first two cases, and now we got two color blasts. Jesus. Wow. That's going to be randomized. And everybody in the R&B is going to have a shot at that. Oh, my god.  Yeah, this case is way better than case one and two, guys. Man, Anthony was just predicting the future. Oh, my god. That is crazy. Travis Etienne Jr. for the Jags. That's not numbered, so it's kind of like a little base rookie. We'll see how we distribute that out to as well. Put that over there. Out of 100, Jason Witton, atomic for the Cowboys. This is Pikachu number three. Shout out to the wifey she picked out this case. Carlos Blegibash, hand to 50. I know, Steven. I mean, if we had established that in the beginning, people would have known, but obviously not. Only Redemptions. Najee Harris. Stila's going to Michael Gallucci. Well, one of the definitely veterans, for sure. But, I mean, Traylan's, all the top quarterbacks are all good to get, because they're rookies, right? We got that one, and then we got this one. So, yeah, there's been about like four to six points in every case, oh no. So, that's just the way they packed out this problem. 75% of bakers feel power when I want it. Was it windy? Too hot? What's going on?  Did you, Diego? Very nice, man. Well, I mean, I wouldn't be proud of you. I'd just be happy for you. Geondre Hopkins. DJ Moore. So, how long has the power been out? Oh, so maybe really hot. Maybe some of the transformers just exploded, or too many people are using too much electricity today? They were Broncos. That's also not numbered. 2-2 out of all, to 75. That's for the Rams and Patrick Davis. Out of 50, Justin Herbert. Dang, I thought I was going to be autographed for a second. It looks like really, really nice, cutting edge. We have Aaron Jones for the Green Bay Packers. That's William. One return till 12 a.m., man. Something really must have happened to take that long. For four hours, basically. All right, our dumps in here. Let's see what we got. It's probably Kyle Pitts, right? If it's a rookie. Rookie Jersey Autos. We already pulled Nick Bolton, so it has to be, leave it's Kyle Pitts. Yup, Kyle Pitts, Rookie Jersey Autos. That is for ATL, Ariano. I know, Michael. And that's what I was saying, bro. I just felt bad for all those customers that were buying these teams and their R&B straight up, because it's just all luck of picking the case, right? I mean, we don't know what's in there. But yeah, man. Crazy. The fact that we got two color blasts, too. Not just one, two of them. We would definitely do. I hope our next case also has two color blasts, you know, at this point. Let's make up for the first couple cases. Chase Young and Aziz, Ojalar. To 50. And then Chase Young is gonna Greg for the commanders. On there for the Rams. Troy Aigman to 75. That's Dallas Cowboys, Francisco. Tray McKitty to 25. Chargers, that's going to JC. Dwayne Eskridge, number to 199 for the Seahawks. That's going to Anthony. Rich Gannon to 75. This is at three autographs. Radis. Larry with that one. And Chuba Hubbard to 99. That's Carolina Panthers. Jeremy Port. That's halfway through. Still think there should be some good hit hiding, potentially. I know we've put some color blasts, but this seems like a hot case. Let's keep it going, guys. Frank Darby and Cornell Palel. Number 40 out of 50. Kansas City, that is going to David Frick. And then Atlanta's going to Ariana. Lana Falcons. Shaw Bateman for the Ravens, Greg Dash. Clinton Portis to 75. Ooh, it looks like we have a Patriotic coming up. Mac, Daddy Jones, 14 out of 25. What a, look at that patch. One, two, three, four color patch, Mac Jones. And again, that was 14 out of 25. Spot four, that's going to John L. Almonra, St. Brown to 75 for the Lions. Jeffrey with that one. Very nice. And Kellan Mon to 150 for the Minnesota Vikings. Patrick Davis. Calvin Joseph to 75. And then we've got Aaron Donald, Vitous, died for the rounds. Patrick Davis to 35. And then Calvin Joseph to 75. That's Cowboys, Francisco. Adam Theon. We've got Kyle Pitts, 53 out of 75. Trifecta Relics. De'Ami Brown to 99. That is another one there for Washington and Greg. We got Trey Nixon. Autograd there for the Patriots. Remember that's part of the R&B. Spot number six out of 189. Charles with the spot six. We have a Andre Reed for the Bills. Going to Josh D. That's 10 out of 35. And then we got Anthony Schwartz to 99. Cleveland Brown's going to Jeff Henn. To Fong Gilmore and Xayar Alexander to 100, sorry. The last case I saw with two color bars had two one-of-ones in a single box. Well, we had two golds out of 10 in a single box earlier too, Michael. I don't know if you've seen that. The Fong Gilmore's 38, spot eight going to Dominic. Keenan Allen. Tutu Owl Jr., or Tutu Owl to 50. Another one there for the Rams. We had just 75, Kyler Murray. We got Zadaria Smith, Green Bay going to Willi. And Pat Freermouth to 99. Another one there for the Steelers and Michael Goluchy. All right, three more boxes, guys. Three more boxes. Also two, I mean, I'm gonna try not to jinx it, but I feel like this case hasn't really had much points, only two so far, right? I mean, there's still three boxes that I could jinx it with. DJ Moore. And how about Patty Mahomes to 25? That looks beautiful. Supernova. And that's 25 to 25. Kansas City Chiefs going to David. I'll take that, Patrick Mahomes, right there. That's a sweet one. And we got DJ Morta 50. Minka Fitzpatrick. Terris Marshall Jr. to 100. Great break for the Panthers. I feel like Panthers having a lot of hits. Josh Palmer to 75, so has the Chargers down the Rams. We got Peyton Turner for the Saints. Wow, how about for the Jaguars? 47 out of 75, Trevor Lawrence. What a case. Two color blacks and a T-Law RPA. And that's gonna go to the random number block. Man, I knew we were due, man. It sucks that they're all coming out in the same case, but oh well, it's out of our control, right? 47, spot seven. 47 is Tony. There you go. Dang. All right, two boxes. Like I said, guys, we can have some pretty hot cases from here on out. So if you guys wanna give the next one a shot, either grab some teams straight up or I can R&B up the remaining teams and then we can try to do a little random number block. I'd like to sell a couple more spots just because, you know, it's gonna be a little pricey already, alone, with just like the Jaguars and the Patriots already in there, but Kyle Trask to 100, and then we got Aaron Donnell. But I guess I can always split them into two random number blocks if needed. And Kyle Trask is there for the Bucks R&B, which is two, spot two, Steve Herrick. David Johnson, Jaylen Darden, that's a 39 out of 50, nice two-color patch. Spot nine going to Travis B, 39. Dak Prescott, for the Cowboys Relic. Sebastian Genakowski, Aurora to 100. And Semi Fajoco, 39 out of 40. Yeah, I feel like for the most part, yeah, I feel like a lot of numbers have popped up, right? Five, four, six, eight, seven, two, nine. I feel like we're just missing just like one or two numbers, potentially. Alrighty, well, if there is a redemption here, it's only had two points, which maybe that's a good case, right? If we only get a couple points, maybe that means we have some pretty big hits coming. I mean, at least that's what it seemed like with our first two cases. We had six points and it didn't look so well. Ryan Tannehill and Aaron Robinson, seven out of 10 for the G-man. And Tennessee Titans' Chris Parent, Gary Brightwell. Ronald Jones, that's three out of 100, their spot three. Michael Robinson, there you go. That's for the Bucks, so almost. I think zero might be the only one now, Steve Kendrick. Maybe gets the color blast, I don't know, we'll see. Bo Jackson for the Raiders, 33 out of 50. And we have Jalen Waddle to 75, there we go. What a great case. What a great case. So T-Law, two color blasts, Jalen Waddle, Kyle Pitts. This is definitely making up for the first two cases, that's for sure. And last hit is a Des Fitzpatrick to 99 for the Tennessee Titans. These are the kind of cases we hope to have for the remaining of the Pick Your Teams, guys. So just a quick little recap, I'll quickly go through some of the hits. Like I said, some really, really nice ones here. These are all numbered. Going out to customers, straight up that bot. There you go, Free Your Muff, Bo Jackson Atomic, Pete, Yanni Brown, Pitz, Relic, Monde, Amon, Rossane Brown, Chuba Auburn, Eskridge, Tray McKinney. I need to get that Kyle Pitts, Aaron Jones. Najee, Najee ain't bad either. A lot of, a lot of nice hits. Scary Terri McLauren. Two golds, those golds look beautiful. Really, really pop. All right, Devontae Smith. I think we got Devontae Smith early on too, man, dang. Great case, great, great case. Much, much better than what we've seen. Supernova there, which is really nice. These cards here were not numbered. So since there was only three, what we're gonna do is, number one, it's gonna be a big randomizer, guys, but number one on the randomizer for the R&B names, it's gonna get this Tom Brady Color Blast. Number two will give Travis Etienne. All right. And then number three would get that Justin Simmons. So since there wasn't really too much, one, of course, number one hit and then two, three, was a little extra consolation. And then we'll have a separate randomizer for all the teams. If any random number block teams hit 600 points or 400 points, then we'll do another randomizer for just the points. But top two, 600 for number one, and number two gets 400. So that's the way it's gonna go there. And of course, this one's straight to Matthew who had the bears, which again, very, very nice one. So two Color Blasts, Devonte, Najee, Jalen Waddle, Trevor Lawrence, and this was all the hits over here for the R&B teams, which have turned out to be pretty good. All right, Triath, there's a teal all there. All right, Mac Jones patch. Very, very nice case, man. Definitely made it for the first one. Now let's switch scenes. Sorry, G-Bag, I know, man, but seeing the first two cases, it was really, really rough on a lot of the bigger teams. So I'm just happy that we got some bigger hits here. But yeah, I would have loved to add some Zach Wilson in there too, man, but maybe for the next one. All right, so let's get this dice roller. So yeah, if anybody wants to start buying some teams in the next break, guys, I would love to do another one. So this will be for all the points first. And then this randomizer is only for the customers in the R&B, and you got a one in 10 shot getting up already. This is gonna be a big randomizer, guys, so good luck. Talked about it before we started this break, that potentially if we hit one, you got a one in 10 shot, so. Nobody wanted to buy those teams straight up, so now everybody gets a shot. All right, here we go, guys, good luck. So the dice roller's in a roll for both. Three and a three is six times. So first one is for the points. One, two, three, four, five, six. Top two, Titans, which is Chris Parent and Eagles, which is Diego. All right, guys, here we go. Here we go. Good luck, guys, three and three is six times. One, two, three, four, five, six. Travis, wow, at number one, congratulations, Travis B. After six times, you just won this sweet, sweet Tom Brady colorblast man, congratulations. So there you go, that's going to number one. And then of course, number two, Tony, you're gonna get that base rookie of Travis Etienne and Charles getting that base Justin Simmons. So again, I appreciate you guys one in 10 shot. Travis, congratulations buddy, you just won that. And again, guys, this is Pikachu number three. If you guys wanna run back number four, I would love to do it, seven left. I can R&B like I said, the rest of the teams right now after I go through orders and clean up this area. But if not, like I said, get those teams straight up. So basically with the Jaguars, Patriots, Bucks alone was like almost $200 for the R&B. So it's gonna be a little bit more pricier of course, adding the 49ers at 550 and you know, other teams amongst that. So if I need to, I probably will have to do two R&Bs. But like I said guys, just get that done, jazby'scasebrakes.com.


If you're tired of seeing results and grades not match the hard work you're putting in and keep wondering what all those high-achieving students are doing, today we'll break down seven critical habits and best practices that top performing students are doing which you may not be. Let's break these seven down. Number six is one of my favorites and make sure you stay tuned till the end because I'll share how you can access the exact step-by-step strategy that I used in medical school to finally get the grades I wanted with less time. Now number one is the idea of forest and trees. Most average students will become too obsessed with remembering just the facts or the big picture but you have to understand that you likely need both. I remember early in medical school I was on both sides of the spectrum. Early on I made big outlines that were great for the big picture but they were too dense and hard to come back to. Then I transitioned to the complete opposite side via flashcards which I enjoyed but I realized that despite understanding the tiny details I no longer understood how to connect all ideas. I needed something to connect both the forest and the trees. So here's what top students end up doing. They often learn both the details and big pictures differently. For instance when I was in medical school during the weekdays I would do the flashcards to master both the details and foundations of the lectures I was learning. Then one to two times a week I would force myself to recreate these lectures from memory based on the flashcards I did on either a paper or a whiteboard. And during these free recall sessions often I would find myself getting stuck on going from point A of a topic to point C. And identifying and filling these gaps helped me see the bigger picture and connect the overall lecture. Now imagine repeating this process over three to four weeks before each exam. I knew both the details and connections really well and thus did well on the ultimate quiz or test. And if you're interested in learning more details about this free recall technique as well as all the study techniques that I used to get a 3.9 GPA in med school I'll link that below in that video in the description. Number two is having a system for both work and play.  It's simply not sustainable and as we'll talk about in habit number six it's likely not helping your results. Instead the top students look at their days and weeks almost like many appointments, each with their own purpose. For example as a medical student I wanted to make sure that my fitness and my relationships were still part of my daily life. So I would have a morning block meant for my workouts and evening blocks made for video calls, dinners, etc. with the people that I cared about. And most importantly these blocks could not be filled with school related activities. The rest of the time during the day in the week I left open to be a student. I even took it once that further where the first half of the study day was meant for the days lectures and the evening slots were meant for review and quiz and test practice. Thus each day had a flow that was predictable, had variation, and most importantly allowed me to still have my priorities fit in. Number three is energy based studying. You've likely already experienced this where you have wild fluxes in your energy level throughout the day. Now often students will get tired around that one to three p.m. slot after lunch but still they'll try to force themselves to do some high impact related study activity. But the top students instead will pay attention to what their energy flow looks like on a day to day basis. For example if you're a morning person like me you may realize that your high impact task like doing flashcards or practice questions would be wisely spent as your first study related task. On the flip side if you're a night owl that's more focused in the evenings you may make those most important study tasks later in the day. Then you can evaluate the other study related tasks that you have to do such as watching lectures, doing modules, etc. that may not be as demanding and fit those into those lower energy slots such as the afternoon. Better yet if you know that you're not academically functional during certain time slots of the day these are great time slots for you to use for other things such as your priorities, getting in your fitness, your naps, as well as your hobbies. Next is the habit of understanding stress as a cue. Now since we work with so many med students in our study coaching programs more on that down below in the description if you're interested I often see a friction when it comes to stress. Here's the big difference between how top and average students use stress. Most students myself included when I first started medical school will become stressed and paralyzed when things become overwhelming. Suddenly that identification of stress will make you think that everything that you're doing is a problem. Thus because everything is the problem there's no clear solution and this just leads to a situation that becomes more stressful and paralyzing. But for those top students that same stress is a signal that things can get hectic and you should make some adjustments. Instead of using that signal to turn into a down world spiral they'll start to become proactive and identify their biggest sources of stress and one to two small things that can be done now and immediately to address it. Thus over the span of months to years the average student will go from class to class, test this test, feeling that they're always trying to stay above water. The top student on the other hand will use that same stress to progress and identify better systems on how to study and manage their time. They thus will also become more resilient when things aren't going their way. Next up is the principle of just doing the reps. Now in medical school particularly I realize that there's an obsession with the best resources and strategies. Again I've been there where I've wasted hours obsessing over the resources and strategies that would give me the biggest bang and buck for my time. But in reality all of that time I spent could have been diverted to just picking one and doing the reps. It's like prepping for a marathon and reading about how to become faster. When in reality it's about the miles you put in and not about how much you read about the best ways to run those miles. So just remember just do the reps you'll likely be further along at the end. While it's perfectly fine to identify resources and study strategies that can help you become more optimized, try to set some time into your calendar intended for that research. The rest of it is meant for work. Now number six, and this is one of my favorites, is the idea of Parkinson's optimization. Now you likely heard of the idea of Parkinson's law which states that work will fit the time that you allocate to it. For example if you give yourself 10 hours to do a project it'll roughly take you that long. Now if the deadline suddenly was six hours you'd find a way to get it done four hours quicker. Now often we use that buffer of time to fill it with inefficiencies. The same goes for our studying and our life as a student. Now let's take Parkinson's law and turn it into something active that top students often do. If you acknowledge that your daily and weekly life as a student has inefficiencies then becoming proactive to remove it will help you become a more efficient student. One of the approaches that I use as a student and that we encourage our coaching students is the idea of the 25% cut. To simply take your total weekly study time or average daily study time and cut it by 25%. So for example if you're studying 10 hours a day for this exercise take it to 7.5. Now practice feeling that new reduced time slot with the tasks that you think are most valuable for that time that you have. And really begin to ask which techniques, resources, study methods aren't adding to my learning or retention. In fact is there something perhaps that you're already doing that if you did more of you'd be in a better place versus doing two to three extra things that are currently on your calendar. This in fact is how I went from 10 plus hours a day of studying in medical school to four to five. In my personal experience I realized that study techniques like flashcards were a simple way to study. I then began to optimize the system where I optimized how I made them and just did the reps in a repeatable way. It easily took out three to four other study strategies and resources for my day and my grades went up. Now if you want the same step by step eight step strategy that I use I share below in a free course which I'll link down below in the description. Next is the habit of the tunnel vision principle. Now this one is huge and something I've learned from my time running and training for marathons and races.  But from personal experience often we're looking at our peers and classmates as a measuring stick and that comparison doesn't help you at all. So on your academic journey if you have an approach and study strategy that you want to abide by put your heads down to the reps and put your blinders on have tunnel vision. If you feel like you're struggling or need to be more optimized just like I do when I'm in a race look at the others for motivation and ideas for small improvements begin to adapt them into your day to day and then turn your blinders back on. Now if you feel like these habits of top performing students can help you on your journey then there's tons more advice and tips we have for you where those came from. Number one, check down below how you can get access again to that eight step study method that I use in med school to go from eight to ten hours to five hours a day. I'll link down below and email the course to you absolutely free. In addition if you want 60 plus tips that I've now given to thousands of medical students something that I wish that I got on my first day of med school plus access to our newsletter of weekly tips and tricks get access to our med school success handbook which I'll link down below in the description for free. And if you want better grades using the six step method that has now taken hundreds of our students the best grades they've seen check out how our level up your studying program which I'll link down below can help you get the best grades and retention that you've been looking for. As always my friends if you enjoyed this episode hit that like button add your comments down below and definitely consider subscribing if you're listening to this on a podcast hit that subscribe and follow button on your favorite listening platform. And if you enjoyed this episode check out this episode right here on all the study strategies that I used to get a 3.9 GPA in medical school as well as this study strategy that has now been viewed by almost millions of people here on YouTube on how I was able to go to five hours a day of studying using anki and flashcards. As always thank you so much for being a part of my journey hopefully we were a little helped to you guys on yours and we'll catch you guys in the next one peace.


So right now we are in Homisfel doing training for our mission right now. We're broken up as if we were in country. We're doing the same key leader engagements and the soldier led engagements as we would be doing in Kosovo. Today we're here in a village modeled after a Kosovo town where we're going to interact with the locals as members of an LMT and talk to them get to know what's going on in the area and just make sure we can we can see if there's anything we can do to help. We're building rapport so it's actually just getting to know a person one-on-one so we talk about their families their history where they're from and you kind of just develop a friendship with these people to understand that we are human and we also share information about ourselves and we find commonalities. This has been great training it's going to help us in Kosovo and it's going to help our people become more comfortable. We're excited to get into Kosovo and start a mission we've been preparing for this for over a year now. We just want to get there and get the mission going.


I'm Sarah Khan. I am a co-leader of our local chapter of Girl Develop It. Girl Develop It is a national nonprofit that provides technical education for women. We do coding classes. We do social networking events. We try to connect women with jobs and technology. And we get a lot of email. Let me see if the clicker works. There we go. Okay. So one of the questions that we get asked a lot is, how do we get more women to come to our events? And the thing about that is women aren't a monolithic group. Women are people. And they have different reasons for doing what they choose to do or not to do. But pretty much the only thing we can do is encourage them. If you want more women to come to your event, make it friendly. And so I'm going to go over five things that I've learned in my two years being a co-leader. They've worked pretty well for us and hopefully they could work for you too. Okay. So the first thing, this seems like it should be common sense to make sure that your event is in an accessible space. But with tech meetups, sometimes they're in old conference rooms and upstairs and places that are strange or hard to get to. And accessibility also includes digital spaces. It includes things like letting people know that they can opt out of having their picture taken and posted. I want to give kudos to All Things Open for having such a prominent and excellent code of conduct. Basically having a code of conduct just says, this is the community that we are, these are our values, and we will enforce them. And that can encourage people to come participate. Another thing you can do is to branch out beyond the usual suspects. As tech people, it's really easy to think that once you've posted something on Twitter, everybody knows about it. And that's not necessarily the case. For Girl Develop It, we've had great success in reaching underserved communities. And we've done things like partner with community colleges and post to library bulletin boards. And there are people who still read paper and print media. So just try to think outside the box and reach out beyond the easy usual suspects kinds of things. And going along with that, build a network with community organizations and organizations outside of technology. Reach out to community colleges and places where people who are trying to come into technology through a non-traditional path may be coming from. And there are people out there who have grant money, who have a stated goal to get people into tech. And there can be kind of a disconnect between the tech community and people in traditional education who are trying to get people into technology. So finding ways to bridge that gap is really helpful. And last but not least, studies have shown, I don't have the citation for the exact study, but I know that a study was done, that if you invite somebody to come back or to come participate in your event, they're more likely to come and do it, go figure. I know that I personally have attended events in the past where I may have felt a little out of place, but when somebody from leadership reached out to me and said, hey, we noticed you were there and we were happy to see you, we'd like to see you come back, then I thought, oh, okay, well, I belong here, I can come back. It seems really simple, but it works. And I'm running a little early, so that's good, we'll get some time back. GirlDevelopIt, we have a booth downstairs. We'd love to chat about this stuff. You can find us on Twitter. You can email the leaders at rdu at girldevelopit.com.  So if you want to get a list of classes and events that we have coming up, find us on Meetup. Thank you.