Hi everyone, Joe for jaspyscasebrakes.com and it's actually a little new release day right here, too We've got 2021 top stadium club baseball 4 box random team break number one pretty friendly price point and I think one spot gets you three teams and I think fan favorite people like the stadium club. I like the photography in stadium club I think it's pretty great and guess what all cards ship. I think that's a that's a nice little advantage as well Base cards low numbered autographs everything in between two autographs as well as numbered parallels and inserts in here So a wide swath of stuff one spot gets you three. So let's triple you up. There's one. There's two. There's three There's all the teams right here and let's roll it. Let's randomize it two and a six eight times for names and teams one two three four five six seven Roger down to capola after eight two and a six eight times for the teams one two three four five six seven and eighth and final time after eight we got the buckos down to the Oakland A's All right, Roger with the Pirates Kevin with the Orioles Roger with the Reds in the Rays Greg with the twins in the Braves Shane With the Rangers TJ with the Royals Capola with the Rockies Sean with the Red Sox and Giants Greg with the Tigers Sean with the Blue Jays and Phillies Tyler with the tribe Sean with the Brew Crew and my Dodgers Tyler with the M's Capola with the Padres Cody with the Mets Tyler with the Cubbies TJ with the Cardinals Cody with the White Sox Kevin with the Yankees and Astros Shane with the Diamondbacks TJ with the fish Shane with the Nats Cody with the Angels and I capola with the Oakland A's So let's get all the teams on one screen Let's sort by a column B and I'm gonna flip away from the screen for just a second But feel free to trade if you'd like because we're gonna pop open a fresh case and we're gonna see which four boxes Take this stack of four and put it right here You can see all the box on the top camera as well.  Let's select that one right there And we'll go one two three four All right, if I roll a five or six, I'll just roll again and it's one We're gonna be far left right there. The next four boxes are in the store We'll put some squiggly marks on the side of the boxes. So We all know they're from the same case Now we're gonna pause the video when we come back We're gonna see if there's any trades and then the break stick around Alright, welcome back. There was a deal. Look at that. So TJ and Greg made something happen So Greg's out of the twin spot and into the royal spot. We'll put T next to there for trade Those will be falling along at home. We'll see who draws first blood in the trade if any and TJ is now with the twins. All right, so now Trade window is closed. Let's print. Let's rip. Let's see what we got our first look at the brand-new stadium club Just dropped today. We got more in the store. So check it out. All right, so let's see what we're looking for here We've got two autograph cards in every box. Maybe some redemptions Christian Yelich on the cover Right chrome parallel cards and Traditionally some X some excellent photography in here All right, so there's the final print out hot off the presses Thanks for spending a bit of your Friday with us ladies and gentlemen. I appreciate that. Good luck. Oh Yeah, TJ. There's a box topper as well. Oh, there it is. Oh, that's pretty cool It's not at first. I thought it was like a flimsy poster paper But no, it's actually on on some decent card stock. That's my trout. There you go. That's for the angel. That's for Cody Yeah, how about those cubs?  I Don't know. Can there be autographs on those box toppers? I'm not sure If there were you would think that they would they would put it in They would have those those packaged up. Oh, Eric Jane saying Aranola started with 10 straight strikeouts Jeremy saying yes, there are autographed possibilities on those boxes I'm here. Yeah, there's there's that there's that shot of Mike trout and we've got a Show how tiny an almond Rosario. Is it are these parallels? Is that why they're flipped around or is this just it being goofy? There's show how tiny chrome. Oh boy. Maybe they're all just Flipped around and right side up and upside down. Well all hardship ladies and gentlemen, so everything you see here Ain't a good good Mastercard product placement. So you see those red foil names right there, which I think are Are the most common ones Or after the silver, of course the base ones There's the black and white orange.  So yeah in case I Miss a variation or something like that Or a parallel fear not they will all everything will still go to you. Oh There's our autograph. It's Steve Garvey That's a great shot of the background behind the pavilion a Dodger Stadium Steve Garvey going to Sean. Oh, oh, so hand number to ten Yeah, if we find for one of those well the whistle won't blow the train whistles for out of fives and under But it'll be a fun one to get kind of an old stadium club design there, too my six to Sanchez Johnny bench holding a bunch of balloons Love the photographer here. We've got a die-cut here. It's Ronald Acunha, Jr. It's a triumference die-cut for the braves. That'll be for Greg. He's pretty good. I'm good company right there, too I remember that play. I was wild Another honor guy. There's our second one sunny gray. I was trying to trying to work his way back off the IL that goes to Go to Roger and the Reds hasn't gotten his season going this year, but it'd be pretty good. There's Wade Boggs The old old stadium club logo here and superstar duos insert Mookie bets Cody Ballinger Need them to be superstars tonight. It's Joey Bart and a stadium club chrome Jake Croninorth For the Padres that'll be for Coppola and there's a blue foil Mike Moussakas Feel like that's a little more shorter printed. I thought the lettering was gold there for a second Hey, there's a jazz chism for you TJ Got the Sanchez the jazz Chisholm. Maybe maybe some hits for them later on and a Ken Griffey, Jr. Insta vision Nice got the backwards cap going and everything. Love it nice Ken Griffey, Jr. Going to It's got Seattle here I want a Tyler and then Ozzy Aldi's black foil. All right, that was box one. Let's go to box two Right. Yeah, did I pass by a Rogers? I'll try to keep an eye for one, too Box topper. This is pretty nice Ryan Mountcastle Orioles that's gonna go to Kevin Crouch. He's pretty good. He's been hitting the ball real well All right. So for for base parallels the red The red foil is the most common then black foil Then black and white which is hobby only that blue foil is to 50. Oh, there it is. Yeah, blue foil is 36 out of 50 so that's for Eastwood and the the reds mousse and Then there's 30 years says 30 copies rainbow foil board to 25 First day issue only 10 copies. There's a member's only car. That's only one per case Photographers proof that's one out of every two cases and then gold rainbow foil one of ones is something that something else We can look out for Chrome parallels. There's the base a refractor and then your numbered cars really are orange chrome to 99 Pearl white to 30 gold minted at one per case So let's keep an eye out for those in this four box break and over the next cases that we do and Obviously super fracture opportunities one of ones. All right FSC. What's going on man? These cards remind you of small postcards. Yeah They could be postcards. The photography is really excellent a number of years ago, we were at the national and we actually did a break with With a representative with tops and we were opening up that year stadium club and and she was talking about the production of stadium club how how like kind of fun it is because you're going through tons of archived Photos and you're digging and trying to find unique new photos for For a stadium club, which everyone associates with with nice time. Oh, Rick Thomas is saying That the goal that the Bregman was the gold minted So it looks so okay, so it has the gold. Everything's gold not in color So that's one per case. That's for the Astros Kevin Crouch. Let's keep going We'll be bets chrome Bob Gibson cards being put around That's Brian Reynolds Kind of jamming me up here black foil Don Mattingly. It's a great shot of Kevin Bigio right there And there's the autograph. It's Luke Voight. I think he's also working his way back from the IL that goes to Kevin Crouch and the New York Yankees There's Kevin. There you go. You got the got a case hit and You got that autograph Red foil for an Anno to tease jr. He's he's playing really well There's a Jacob de Grom triumvirate die cut, which I think TJ was saying is one for box So the de Grom top over here There we go The de Grom will go to Cody and the Mets. It's a great shot Love all the photography here Let's look at the babe with a with a gigantic bat. That's Cabrion Hayes for the Pirates It's a regular base one going to Roger and the Pirates And there's an autograph. Andres Jimenez Rookie Otto still Mets edition here Going to Cody. Did I miss a Cureloff? So busy trying to flip these cards around So we'll find another one in here All right two boxes to go All right box topper is A blue J rookie Nate Pearson. Nice I don't know if there's different levels of the Triumvirate maybe I guess there is yeah, there could be out of 99s orange out of 50 in a gold rainbow to 101 Good luck. We've got another four box break Um, we have another four box break in the store right now if you want to go and chase some of that Next one's down to two Wow, Aaron Noah doing it all today Eric Jennings saying he Aaron Noah has the only RBI and 12 strikeouts Did someone say that it's also a short was it you Eric or someone else that it was a short game It's doubleheader. Maybe seven inning doubleheader. Happy 55th birthday to kevin matumbo According to PTI next box. Good luck. Oh, we got a nice, uh Black and white orange foil six dough Sanchez For tj and the marlins. Nice. That's pretty cool. I think he's also working his way back from the From the il to tce jr chrome Wait, that's numbered See the see the little orange peeking right there. That is for capola and the Padres That is 76 out of 99. Nice. Watch that shoulder to tce jr. There's another jazz chism here For the fish and there's the autograph. It's taylor jones for the astros kevin crouch for the straws This Greg Maddox right there and the triumvirate is max scherzer Mad max going to shane and the gnats posie pocket viro jr She the lanzo. He's fired up. Whoo Let's go Tony gauntlin's pitching tonight. I want to say Nice shot to each hero and matt foster that feeling. I was going to be the autograph Matt foster rookie auto Stadium for rookie otter for cody and chicago chicago white socks Alex redugo here KC mice trevor rogers dill and bundy Marlins have a have a sneaky sneaky good starting rotation there Trevor rogers sisto sanchez Sandy alcantara Pablo Lopez Some players there. The KC mice of course goes to greg and the tigers. KC mice former number one overall pick Is that official is uh, oh another Nate Pearson box hopper i think jason kidd going to uh Managing the uh maz. I think that's It's official What was the stadium club 30th anniversary? Is there a car that was a 30th anniversary? Maybe I missed it. Oh, it was there Sorry, eric. Were you saying that the yeah, it's the same club 30th anniversary mic indeed Was there a specific 30th anniversary card that I missed is that what you're saying? I think those are just inserts right and not just There's one per box. Maybe Yeah, I think these might be like one per box But yeah, the old old designs pretty cool. All right. Let's see what we got in our fourth and final box Is there Andrew McCutcheon? Hopefully this is the only case where the cards are flipped around like this I still want to know that anyone know the context of this Of this johnny bench picture right here.  I feel like that's like something out of like A scary movie like it or something like that a couple more marlins rookies for tj and a reberto alamar orange black and white Jesus Aguilar And uh black and white goes to shawn. Oh and the blue birds And there's the autograph And tj or maybe tj antone You go with tj antone Rookie auto for eastwood and the reds Remember there was a there was a there was a time period where people didn't like this They're just like backwards cap Disrespectful to the game There is a time There's a time where we're that with that angered people There's you darwish die cut next over what's going on Tg saying that's that's the member's choice the griffin. Oh, yeah, there it is says member's choice That's too busy. I was too distracted by the hat. I think what did I say member's choice was was one per case ish That's according to cardboard connection dot com. That's what they're saying Maybe didn't I had this information up for a second here? I don't know where it all went One per case. Oh, they're saying members only one. They must be members choice It must be a typo Members choice is the insert one per case members only is a Is a really cool, uh Really cool jacket that only cool people wear Swabi Dalbeck in the cart. He looks happy There he is again So one one is the 30th anniversary insert The other is the regular one Dalbeck's pretty good, right? Do we look we like Dalbeck? I know he had an excellent spring. I don't know what he's doing now. Sean. Oh with the red socks It's both of those I'm liking everything I'm seeing about Cian clip except for all these cards looked around like this We got more in the store folks. Another one is probably sold out by now There's only two spots left when I checked a couple boxes ago And there's Hyunjin Roo's autograph for the Toronto Blue Jays nice Sean Oh with Toronto nice former Dodger, of course That around the KC Maya's red foil parallel For the Tigers Gelsa No and Alex Verdugo doogie at the end There you have ladies. Now let's take a quick look at uh Take a quick little recap at some of the highlights here the autographs some die cuts The gold right there that blue is to 50 The kid And started off with steve garvey And some fun box toppers as well. That's our first look at 2021 top stadium club baseball That was four box for m team break number one. There's more in the store So let's keep digging into and see what else we can find. Thanks for watching everyone. I'll see you next time for the next one


Good morning, Austin. I'm a big old, sexy size welcome to OpenSSF Day. Yeah! So I am pro, if you don't know me, because I participate in a lot of our work in your content and the push-ups, maybe, and other things. Only the best ones. Only the best ones, exactly. Thank you, Arnold. And I'm here to kind of shepherd us along today. So thank you all for participating, whether you're here in person or you'll be joining us out on the huge events in the future. We're going to start off with who you are best in not mentioning Juneteenth and honoring that day. It's a holiday that originated in this very state. And if you're not familiar with Juneteenth, it's a better holiday than we're going to celebrate the contributions of African-Americans and their emancipation and recognize the immense contributions that they made to our culture and the suffering that they endured. We still have people with people who respect it, which is why it's increasing violations on human rights and off the basis of race, religion, gender, and sexual orientation. And as a reminder, the OpenSSF and the Linux Foundation stand in opposition to these actions. And we hope that we make it abundantly clear that this meeting and all of our meetings around the globe are an open, welcoming, and safe place for everyone. So, Jory has assembled some amazing slides and as you'll see them roll by, you'll note one of them is our Code of Conduct. Please familiarize yourself with that Code of Conduct as it applies to everyone here, the speakers, the staff, virtual in-person attendees and virtual folks and me. And if you have any questions or issues regarding any behavior at this event, please talk to a member of the LF staff right away. We also wanna make sure that everyone is as comfortable as possible with proximity. So as you entered and got your badge, they have stickers that are available that will highlight what your proximity comfort level is, whether that's green for going in there and giving hugs, yellow for fist bumps and elbow bumps, or red, I like you over there. We'll be friends from over here. So please respect that. And we also have pronoun stickers so that people can share with how they would like to be identified and referred to. So please be respectful of that. Some health and safety warnings, fun fact, there still kind of is a pandemic going on. So please remember the protocols that we're following today to keep everybody healthy. While indoors, please wear your mask unless you are up at a podium giving a dumb speech or you're actively eating or drinking. And speakers will be able to remove their mask when they're up here at the podium. And when you're outside, please feel free to remove your masks. Another reminder, please silence your cell phones and devices. As a matter of courtesy to our speakers and the audience, we don't need to hear your awesome ring tones in the middle of an amazing Alpha and Omega talk by Scovetta. So please keep those off. And also, I know it's been a very long time since we've actually physically seen each other. I know it's a very exciting time. So if you're having in a great conversation with somebody, please save that for in-between sessions or walk outside into the hallway and continue your conversation there so that folks here in the room and on the video will be able to enjoy the talk. If, speaking of stepping outside, if anyone needs to leverage the facilities, the little open sort of maintainers room, we will walk out of the hallway here, go to the right and then make an immediate left and that's where the facilities are. I've alluded to it a couple of times. We're recording this session on YouTube. It'll be available on the Foundation's YouTube channel. So please, if you didn't know that was a thing, check it out. All the working group meetings are recorded there and so will this conference. So please check that out. The thing should be uploaded in about two weeks. Now another note about human needs. Throughout the day, there will be coffee, tea and snacks available outside on the hall. Today, lunch is not provided. You're on your own. But don't, never fear. The LF staff have put together a map of local eateries here in Austin. There's some of the best food in the world outside of New Orleans that you can get. So please avail yourself of the local eateries. We'll have about an hour and 15 minutes, yes. And so that's probably not enough time to get out to Franklin Barbecue and get in line. But if anybody's going, I'll put my order in with you if you want to stand there for me. Wi-Fi information, if you haven't noticed, is on the back of your badge. So if you need to get on the Wi-Fi's, that's how information's there. I want to thank our sponsors, Sonatype. Sonatype team have really been involved with the OpenSSF for a while now. They're involved in our working groups and our projects and we really appreciate their support and helping offset the cost of today's event. So let's give a round of applause to our friends at Sonatype. Thank you. And one of the slides should have a preview of our agenda today. We have an action-packed day full of about 17 amazing speakers that are come talk about everything from security education, David Wheeler, to identifying critical projects, Alpha and Omega, supply chain, instrumenting new instruments and securing large language ecosystems. So we're gonna dive in why it's important and why the business community is investing in things like Alpha and Omega. And of course we'll talk about the mobilization plan. So you've got a really amazing day ahead of us to see and hear some amazing things. So we're gonna try to get things wrapped up today before five and then, if you are all interested, everyone here is invited to a punch bowl social and there'll be some games and socializing, there'll be from five to seven tonight and an appetizer to everybody. And so now let's get on with the show.


Is it drugs? Maybe it's alcohol or gambling. You're worried about them. You love them. But what about their inheritance? Are you crazy for even thinking about giving them anything after you've gone? You know that just handing them money will likely hurt them more than help them, don't you? It could even push them over the edge. A parent that gives an adult child an inheritance outright is not helping that child. In fact, they may be actually contributing to their problems. Over 21 million Americans battle with drug or drug and alcohol addiction every year. You love your child, but they've struggled with addiction for years. Be honest with yourself. You may be giving them money so they now have more access to drugs and alcohol. I know you don't mean to, but this is reality. What can you do? There actually are ways that you can give an inheritance so that your loved one with drug or alcohol issues can actually be helped. Things can be structured so that counseling can be paid for. In fact, inheritance can be used for their own good and you can contribute to their lives but not contribute to their addictions. How? That's up to you. The important thing is that we can design together as part of your Living Trust Center to State Plan an inheritance plan for your adult child or other loved one with addiction issues. Imagine not having to worry about them when you're gone. Can't you just feel the peace of mind that comes once you've added protecting them as part of your state plan? With my office having over 25 years of experience in designing a state plan, we can help. Look, contact our office. Let's talk.


This would be about container networks, well, presumably rootless, as you might have guessed, and passed up. So what is passed up? As you might have guessed, I'm Italian, but I'm not talking about that. So let me show you something. Here I am, I'm on a server, and I do this, and I root. Let's take this server down. Am I really root? No, I'm not root. Right, so great. Lucky. What's the trick then? Wait, did I get through? Did I just reinvent and share? And I'm just so enthusiastic to show it to you. So OK, let's say to understand where I am. And the good thing sometimes is to look at networks, or network interfaces. OK, so I have loopback, and I have another network interface, but it's down. So how am I here? I mean, this makes no sense, right? OK, let's get out of this madness and go back to my host, have a look at what I have here. OK, that makes more sense, right? I have an internet interface that is up, looks similar. So OK, the MAC address is different, though. And it's not the same interface, because one is down and the other one is up. So OK, I read the man page for you. I actually wrote it too, but I would not try this. And I will check addresses. I have into this strange route, no routing. Oh, yeah, now OK, great. So this is up, or at least administratively up. The state is unknown, because I didn't send an impact yet. I have some addresses, IPv4, bunch of IPv6, link local. Great, OK, this sounds making more sense. And let's see if I can read the internet. Sorry, we talked about pasta, so yeah, great. So IPv6 is up. I see IPv6 is up. DNS resolution was working. OK, so did it just re-implement Podman? No, because it's full of stuff here. And the container will be clean, right? I just started it. OK, so let me quickly explain the trick to you. And note that I'm really not root. I'm really, really not root. I can't delete one thing from here. Sorry, LS, I can probably do it, but let's say I want to. Right, so no, I didn't re-implement Podman. And in fact, Podman can also use this thing. And let's have a look at this. OK, pretty similar. So the interface is still the strange name. Well, that was the interface on the server. I have the same addresses. Let me check that this works. Yeah, I can install IPv3. Great, so this seems to be some user-mod networking. And before I finish revealing the trick to you, I just mentioned user-mod networking. And it might look like I'm copying packets from user space and back, and this is terribly slow, right? I mean, somebody probably played with Lyip. So OK, let me go back to my strange tool here. Actually, sorry, let me run a server first. So I demonize it so that I can just keep a big terminal here. I hope you all see here, or is it even? No, it's OK. Great, so how do I reach that? Well, it looks very local. I will try with what I lost. And yeah, I'm being quite arrogant. Come on, I know that it's fast. And I can give it 32 megabytes of TCP window and zero copy and disable Nego algorithm. Right, maybe look even. Let me do two flows. Great, 60 gates per second. So, right. OK, now I can reveal to you the trick. So I'm not rude. I created a network interface. And this thing is pretty fast. Let's look at some diagrams. What's the trick? So how does networking work when you are nobody? Or, well, in my case, you are as preview, but it doesn't make a real difference. So you don't have root. I don't have CapNet admin, right? I didn't show you, but trust me, I didn't cheat on that. So I cannot have interfaces. But Linux allows you, if you detach your user main space and the network main space at the same time, since Linux 3.8, which she is a few years ago, five, six years ago, I think, at the same time, we can actually create a network interface somewhere. So we can actually create a network interface because we are UID0. So you might call it root for convenience, but that's not root. That's just UID0 in the main space. And UID0 can do a lot of things like creating network interfaces. Oh, and there is the Tantab driver. It's a kind of fold implementation, but quite useful. This thing creates a network interface on one hand, and on the other hand, you have a file descriptor. It's not a socket. It's a file descriptor. So sockets can be represented by file descriptors, but it's not the same thing. And on these file descriptors, you get frames. And you can write frames. It's not frames.  So it goes in here. Right. And then we know that regular users can open TCP and UDP sockets, for sure. I mean, when you start a browser, you don't do pseudo file folks, right? You just start it. So are you thinking what I'm thinking if we do this? So we have the network namespace. We just created this top device, which gives me the internet interface inside that. And down there, I have the internets. And then I know that as a regular user, I can do TCP and UDP sockets. I just need to fill in that something. Not saying that it's so simple, but starts looking doable. And that's something, namely, needs to take the internet frames away, take the IP. Sorry, the internet header, the IP headers away, put a payload into layer four sockets. And then I think we are done. And when we get something from the internets, we need to ask the kernel. So this something is a user space application. And we need to ask the kernel, where is this bucket coming from? And then tell our network namespace. And we have a number of ways to. So we have two addresses, essentially, right? So just a reminder for everybody. Layer one is the physical network, physical layer. Layer two is something where you can put bytes on. The data layer. And then you have layer three, which is IP, or can be other things, but in our case, it's IP. Layer four is a transport. So TCP, UDP, ICNP, DCCP, whatever you want. And then the other layers are more related to YouTube. So great. And why am I doing this? So what's the whole point? No, not because we can. Also because we can, otherwise we wouldn't be doing it. But the important thing here is that I don't have root. I don't have kept net admin.  Well, I have no embarrassing consequences or limited embarrassing consequences. It could be much, much worse. And let's say, even if nobody does that, we have the safety that what a user can do is just open and connect and bind to TCP, UDP, and ICNP ping. So the so-called ping sockets. So that means I have the safety that nobody will spoof packets because if you can send arbitrary frames, if you can spoof ARP, you are in control of a network essentially. You are telling everybody, this is me and this is him and this is her. So that has serious consequences if you can do arbitrary craft type arbitrary frames. And it can be quite fast and also flexible now. So I would start saying that it looks like a good thing. So what would have been the alternative? The alternative would have been that I went there to my server and I created a container and then I would have done IP add something, created a bridge, did something with net filter maybe just to drop a bit of the really, really suspicious things like ARP frames that come out with totally random MAC addresses and stuff like that. But the truth I've involved that I needed root and I realized there was a talk about that actually yesterday. So I want to also say that this is a limitation for some applications. Maybe you're really running ARP proxy inside a container. If you want to do that, hey, you need root. But then there is a good reason for it. And OK, that's how we work around. I mean, I'm panning frames, panning headers, removing headers in a new space. So you're going to fix it right now. I don't think so. I don't think there is something to fix. So there are reasons why this is not allowed. And I mentioned some of these reasons. So, right, I mean, an unprivileged user shouldn't be in control of the network as well. So this is kind of, there are many ways to divide unprivileged and privileged user. That's pretty much the Linux and BSD way other operating systems to completely different reasonings. There are, I heard of operating systems running UI at ring zero, but Linux, luckily, doesn't. So, and OK, let's say, like in the Tokyo SRE, we do it for them, but are they really unprivileged then? I would start having some doubts. So I think that if a network interface, if a network name space, like we did as an interface, then we should only, we should follow that philosophy. OK, it doesn't have root for a reason, and we should stick to it. Because, yeah, these are the three advantages we really don't need to even debate whether it has privileges or not. And actually, implementing appending headers and removing headers is a way of ensuring isolation. We are in control of this, and we check that the kernel once forces us to append those headers as we send packets out from the bottom to the diagram, right? So, when we are there on the layer four sockets, the kernel doesn't allow us to say, to put an IP address and the checks on there. No, it says, I do it, I take care of it. I don't trust you. So, that's how you implement isolation. I cheated a bit in the demo earlier. So, we were actually in the left case, so I didn't do so much in that thing because, yeah, I used a local connection in the demo. It's a bit easier, and in that case, I already have layer four sockets because I am doing a connection from my perf from the container to the host. Well, host is a bit of a misnomer, right? But it's still the same host. It's a different partition of the host, so to say, and that I already have layer four sockets. I can just splice this. Splice is a system call in Linux that just allows you to splice to a pipe from a pipe to a socket, then from that socket to a pipe, pipe to socket. And you don't need to do anything special, however. Of course, we are just carrying payload there. So, that means we have no other thing and that means I can just use a loopback interface to do that. So, if we are actually to the inter, we want to go to the internet, we need to do this trick that I was mentioning earlier. So, we really need to append others, remove others. Otherwise, so if somebody's familiar with the Podman situation as of a while ago, there was a way to be really fast with this trick and with some amazing tricks. On the other hand, you would lose the IP address from outside. So, all the traffic would look like it was coming from the host and that's not so convenient if you have applications inside there that need to, for example, authenticate based on IP address or filter or route. So, okay, now we pretty much got, so this is pasta, okay?  That's something in between. The acronym, I don't even remember it. I mean, if you want, just go to the website and it's written there. So, we got what it does. I just wanted to present a few peculiarities that make, in my opinion, reasonably safe. So, we don't do dynamic memory allocation there and funny because we are dealing with packets so it would be natural to read from a socket, allocate 1,500 bytes or a bit more than three when we sent it. Now, if we are careful, the kernel has already buffered so we can use them. We just need to avoid dropping things from kernel queues before it's time to do so. So, when I get a packet from the socket, I need to remember that my container needs to read it and maybe it loses it. Maybe nobody's reading it or maybe they are too late or maybe it's out of the congestion window because I sent too fast so I need to keep it there. I have no other space. I'm not allocating memory. So, I can use message peak. So, message peak is a flag for the receive and receive-like system calls that allow you to, yeah, just look at it, don't drop it. No, let's pretend I didn't read it. And these avoid some classes of memory related potential security issues like, I don't know, a double free heap overflow and stuff like that. It's not completely safe. I still kind of stack overflows. It's a bit harder perhaps and it's a bit easier for my mind actually to keep track of the stuff I'm doing which it's probably an important factor for security. The TCP adaptation. So, there is some TCP adaptation. This thing needs to keep track of the connections and however, we have already two stacks around. It's actually, in the case of a container, the same kernel and two instances of TCP stacks. So, we don't need to do really much in terms of congestion window and keeping tracks off of metrics and expanding the window, shrinking the window. How much memory do we have? No, we can ask them, what's your congestion window? Yeah, okay, I use it. It doesn't do that if you want it. If you don't want it, that's why it was so confusing perhaps but it can also be convenient. So, we had the same addresses inside Podman and outside. Full IPv6 support, but I hope maybe we don't have to mention it in 2023. Yeah, actually, I could have just gone into this pasta config that I showed you earlier and asked for an address via DHCPv6 or DHCP. Did I say pasta? Right, yes, I did. So, let me cover a bit of this project history. It's not original at all, it's a big scam. So, Slip has been doing that for 18 years, actually. Sorry, is it 10 minutes, but? 15? Ah, to the questions, okay, not to the... Yeah, great, thanks. So, Slip has been doing that for 18 years. I'm really not presenting anything new, probably. We started it for virtual machines. Namely, CubeBear developers came to my team and us, but we don't want to use Slip because it has a bad name, but it's really convenient. Can you do something like that? We want to run our container with virtual machines that's CubeBear without root. And if possible, we would also like to avoid that. So, we started it for virtual machines and then at some point we realized that containers had except the same thing. So much that for QEMO, yeah, this Slip, Slip. So, Slip comes from the 90s, right? The story is kind of complicated and we'll not cover it for the sake of time, but it was a way when universities started offering dialect shell accounts to students or professors to have a natural internet access by tunneling everything you wanted into your dialect connection that was supposed just to connect to your university server. And then from there, you add routing. So, if you tunnel everything into that, then you could reach whatever you wanted, not just the resources of the university that nobody cared about. So, this is right. That's an old trick and somebody had a really brilliant idea in my opinion to use it for QEMO. And then for another brilliant idea for Podman. And there is something similar for Docker, actually. So, there is something already very similar. Also, this Slip for Net and S is like pasta and Slip's Slip is like pasta. Both acronyms are available on the explanation. The acronyms are available on the website. So, yeah, it had a bad name. Well, okay, nowadays you leak 50 bytes in one day and you get a CV, yeah, fair. However, also performance-wise, it wasn't really meant for the bazillion bits per second that we need to have. Nowadays it was meant to, yeah, time out, you know, a bit more than Telnet, post-BBS era, I would say, or still BBS era. So, it doesn't support TCP window scaling, which means 64K is all you can send and then, okay, 64K more, that's slow. IPv6 support wasn't really there. So, IPv6 was actually introduced a bit before, but, you know, there was no reason to use it. We still had plenty of IPv4 addresses in the world. And, right, so we realized that pasta was born and then, with a lot of help from Podman's development team, we shipped native integration I just showed you in Podman 4.4 that was in general this year. Since two days ago, this is now supported in Bilda, so, if you're familiar with it, that's a facility creating container, that can build container images in Podman. It's supported by Libbeard, Cubebeard, Stack Preview. We are now very few, but very committed developers and lots of occasional contributors and Podman users came up with everything possible. Let me cover recent developments, just in case you followed this project recently. So, somebody said that it's not fast enough. Okay, great. What can we do better? So, this only applies to VMs, so it's not really pasta. We have a unique domain socket to QEMO, that means copy to the socket, copy from the socket. QEMO needs to do that and PASP needs to do that. Okay, we can just bypass QEMO all together with the host user, and there it's actually faster than, don't quote me on this, but because we don't have very nice benchmarks yet, but it's actually faster than whatever you could do with truth and leverage. So, yeah, we now copy all the addresses and the routes, not just one, you saw that I had so many IPv4 addresses there because we had some problems with cloud environments, some users reported, and WireGuard almost works out of the box, finally, that's a bit complicated, but it looks like a popular use case for podman users. So, these new use cases. One funny thing somebody came up with is, what if I want to just throw away containers, deploy them quickly with their own address and they don't tell the host anything? Hmm, interesting. With the pv6, it's actually the case. Sometimes you have a slash 64, so yeah, it's actually possible. So, in that case, Pasta would just bind an address that the host doesn't have, nobody has ever seen, except for the prefix. So, you can just have a completely separate container with its own address and assign it with an IP responder that's built into Pasta. So, we advertise the prefix and nothing else, we assign a pseudo random MAC address, we take care of it, we keep track of it, and we could actually deploy a lot of containers without really knowing much about the network or really not thinking much about it. And some people already use MacVlan for it, but it takes a few tricks to set up and it's not rootless. Another less funny, maybe more less visionary, but this starts being important. You have IPv4 applications, maybe you don't have a source code for, but they are IPv4, and you have an IPv6 only set up, maybe somewhere in central Europe, this starts being a problem, you start paying quite a lot for an IPv4 address. So, there are RFCs for this and Pasta could be a good candidate. You can find more details in the bug reports there. Another one we really need to take care of now is how did I do part forward in there? You didn't even see it because I didn't do it explicitly, it was automatic, and you can do it with Podman configuration options and everything, but for Docker, actually they really need it via rootless kit. And also for Podman custom networks, it would be really nice if Podman could happily decide without stopping or restarting the container or Pasta itself actually to map a new port. And we are with that going into a general life flow stable. We don't want to implement OpenVSwitch, but we are dangerously close to it. Start preparing your questions now. So, if you want to try this out, please do, and please especially report bugs. We have mailing lists, we are a bit old school, but don't be afraid to mess up. We understand that many people are not used to patch-based or email-based workflows. There is an IRC channel on Libera, it's passed. There are weekly meetings that are open to everybody, if you just even want to listen to the dramas we have. It's kind of quite funny, and all this information, you'll find it at past.top. Credits, yeah, so David has been reworking a lot of stuff recently. Laurent is taking care of the bazillion bytes per second there. Paul from Podman's development team has got it to build out this week, and he always helps a lot. Lami is a package for Wite Linux, and he presented a lot of new use cases, landing the Libera integration, and Yoni's making the kernel nicer to us or trying to. And we have a lot of, really, a lot of contributors and packages, so packages are available for Arch, Debian, Ubuntu, Fedora, RL, a few more probably. Questions. So the question from Paul is whether, when I was referring to the cheating case where I just have local traffic, I'm referring to Routeless, the top. Yes, yes, okay. So does RoutelessKit allow, is RoutelessKit the part that allows us to skip the setup to just create a bridge to the host? No, actually, so RoutelessKit, what it does, okay, RoutelessKit is a pile of things. In this case, it's what RoutelessKit does, the trick of copying packets back and forth, not with supplies, they use receiveMessage, sendMessage, it's not very different, but that's the part that it does. And you can, you have it actually as default for order for Podman because it's faster, but you don't preserve the source IP address. So that's the part it does. Yeah. So first question of two is, if this can be used with Podman network commands. So as far as I know, yes, since Thursday. But you're probably not better than me. And if you don't, let's check it out. But I think Paul just did this because it was just, I just see it with Podman run as you've seen and I think now finally the code has been moved to the proper place so we can actually use it for Podman network. I think that's my understanding, yeah. So the second question is, when will Pasta become the default in Podman? You suggested for the six, right? And I hope we are on track. Yeah, might be tight, but yeah. Right, so the question is, I showed that I would connect to localhost and connect to the host and maybe I want to really connect to localhost as localhost, host, host, host, host. Like, like, yes. And yeah, actually one of the reasons why we are reworking the NAT model is to allow to, right now we just allow to disable this functionality. So to map nothing or to map everything or to map like the address of the default gateway to the host, but it is not very flexible. So we are actually adding more options. And what the default is, it has to be seen. We need to check with many people, like what do they really expect? Because if you come from VMs, you have different expectations as, you know. Right, yeah. I can check on metrics. Okay, thank you.


Nostalgia is in full effect this week as I take three ninjas versus the teenage mutant ninja turtles two secret of the use. And who better to argue this than a trained second-degree orange belt like myself. Which you can achieve at the tender age of five. Regardless, it appears I have a friend who's wandered onto my set to debate two great classic films. We always know how this goes. I end up on top. That's what she said. Let's get started with cast. Rocky loves Emily and I love this movie. And that is all thanks to a superior cast starting with the grandpa slash trainer Mr. Miyagi. That's not Mr. Miyagi. It's a fat knockoff who appears to have had a stroke at some point during the filming of this movie. Also you can tell there's a stunt double for basically everything he does in the flick. He's extremely out of shape. How is this guy a master of anything? Now as a second-degree orange belt I can tell you he's actually in the peak shape of his life. And outside of him we've got our main team of Rocky, Colt and Tum Tum. And Rocky is the natural leader. He's got the looks. He's got the girl. He's got the moves. I'm gonna stop you right there. Have you seen Emily? What are you saying? Have you seen Emily? I'm not sure I follow. Her recent body of work consists of production staff on Castle, the TV show. She's so hideous in Three Ninjas. Since that time they've moved her off the camera in the background where where she belongs. Well she stole my heart. And speaking of heart stealing let's move on to Colt with his devil make-care attitude and his flair for the dramatic. Colt is easily my most relatable ninja. Just stop.  It's clear that none of these children can act. If you look at their IMDb page most of them don't even have photos. They don't even have the preset IMDb no photo available. That's one small step above what I have. Which of course is nothing. Say what you will about Emily but don't you dare cross my tum-tum. It's time to talk about some actual ninjas who are teenagers and mutants. First off we have Leonardo who leads whilst Donatello does machines. Raphael is cool. But rude. And Michelangelo is a party dude. And my favorite turtle. There really should be some sort of a Ninja Turtles theme song that explains this better than I could. Oh they're okay one does exist apparently. We gonna show that? No okay let's keep going. I remember Rocksteady and Bebop playing a pretty significant part in that film. Not. TMNT has two villains and they're both the same guy. It's a two for one. Shredder and super shredder. Who has defeated that? How again? It's actually pretty intricate to explain. There's a lot of things that go into this. A lot of cogs in motion. A lot of wheels turning. He's buried by wood. Death by wood. Oh new title card. I guess we're just gonna gloss over the fact that April O'Neill was in these films. The sultry, sexy, beautiful April. I can tell you a fact right now. The actress who played her did not have to move on to Boom Operator. Like some other actress as I know. I'm looking at you Emily. Oh god no I'm not looking at you. There may not be much in story, character development, conflict. What lacks in those items it actually makes up tenfold and memorable scenes. Ringing from a basketball confrontation to a home alone ask encounter. You have to use your seatbelts and enjoy the ride. Neither of these movies really needed much of a plot. They run fast. They run loose. Like I like my women. I don't have any women.  We have a heist involving 40-some odd burglars in what appears to be a shitty little mall. Seems like an awful lot of men for such a small little burglary. But anyway, the turtles come to the rescue of a pizza delivery boy who knows insanely good martial arts. In fact, it really seemed like he was doing well on his own. Let's talk bodacious moves. There's an awesome sequence where the turtles do a little shell shock spin, crush a full clan member to death. After doing some break dance fighting they bust out in a choreographed song and dance moves. The turtles are having a good time. The audience is having a great time. The foot clan, well, not so much. Katanas, smoke bombs, an unbelievable dunk, and some kind of can-to-can communication device. And you want to talk about effects? Look at the turtles themselves. What an accomplishment. Even 20 years later, they still look great. Jim Henson and his team made a marvelous set of costumes and animatronics to bring these turtles to life. Plus we get the phenomenal super shredder. He dies by wood. I can win this category with two simple words. Vanilla, ice. I should run. I should hide.  Well, I'm pretty sure about Three Ninjas being the superior film. It taught me everything I need to know about martial arts and life and women and success. All my accomplishments really boil down to Three Ninjas. All right, Adam, try to knuckle up and kick back. I'm pretty sure you just referenced the other two shitty movies in that franchise, thankfully leaving off High Noon at Mega Mountain, starring the Hulk. But let's get down to it. We've been going back and forth like two whales having sex. But now it's time for me to hump back. What? Okay, I'm sorry. I read off cue cards by my interns who I don't pay at all to come up with this dreck. I have no idea what the hell that means. I know what a humpback is, but I have no relation to what that's alluding to. Am I going to hump Derek or am I hitting him back? We can't make up terms. You're fired. You're fired. Get out. All of you. There's one of you. Go. Some of you may have known Michael Bay recently has announced he's making a new Ninja Turtles a reboot.  But we have something nice already. We have something beautiful to look back on. It's aged well like a fine cheese pizza with extra anchovies. And I can tell you with the utmost confidence that the three Ninjas will never have the opportunity to get raped because in reality they already have been by themselves. It's no we're going to end on rape. This is how we're going to end this. Okay.


Going on everyone Sam with Sam here with Lane sports car to be 23 penita prison football No huddle five box break number five random team style There's a look again at your random results as always you can find these on the website under the results tab as well as link And chat Luke S. Cardinals James L. Niners up top go down Derek W. Chargers John F with the Ravens So good luck everybody. Let's do it Joseph D with a couple of Star Wars of Chrome Galaxy Michael S with a mixer spot down to 12 12 to go on iMac everybody Thank you very much Appreciate that a lot I think 11 Yeah, why is there a car? Yeah? Good luck here, buddy Mr. French. How we doing? Hey Montana the rapper that's like his ad lib shoot nice to 95 Marvin Mims There you go. Shikes Monro St. Brown JSN and take things that is Coral Patterson to 95 Falcons we gave Zoma and mr. It's a flowers We got a green everybody first off. We got a Josh Downs that is going to be going to the Colts on The disco waddo and a five Dawson Knox. Congrats on that one bills for a five Justice for Jumbo Jumbo hasn't been here today. There's Bijan Achane and Marvianne over shown Jumbo is at Disney with his family Probably on the kid he rides That is a red Bobby O'Karaque for the Giants to 70 You can do them all I would say Zack Harrison and Cam Smith. Oh number. Do you mean? Yeah? That is a shrivan digs on the lockdown Muzgrave what's your first name last initial to your I could let you know right now First name and last initial that is a Chris McCaffrey Dak Prescott in the disco Dorian Thompson Robinson and Hunter Henry disco Tim P Tim P you have yes the Buffalo Bills that Dawson Knox is yours my friend congrats That is yours 295 Darius late jr. I For the Eagles. Yeah, not too bad man. Not bad at all. It's your 70 miles Murphy rookie for the Bengals That is a a Sante Samuel, Jr. Yeah. Yeah, Diabe and Elijah Dawson. Yeah. Yeah Of Jumbo just excitedly riding it's a small world over and over again Probably reality to be honest one disco Fred Warner Bryce young disco Collegiate can't seem there call doesn't sound too far off. No, that sounds Like what probably is currently have or was currently happening Disco Luke schoonmaker got Deontay banks and Dante V on wicks Thinking a prime long Evan Longoria Keith on with a spot. Thank you, buddy Luke with a spot. We're down to ten Ten to go on the iMac mixer ladies and gents. Thank you all I'm that mixer meaning yeah one away from single digits ladies and gents tend to go and you go It's gonna be fun, man. It's just gonna I'm just excited to rip that dude I'm so excited to rip that stuff Seeing Taylor Swift on a TV like four times in five minutes. I mean, it's more exciting. What's going on? Statline Kansas City dances People with snow goggles there. It's a freaking cold it is That's Stetson Bennett to 95 rookie for the Rams disco of DJ shark Brian Branch and Broderick Jones Purple to 35 Dalvin cook for the Jets now a raven now raven Go official. Yep. Oh nice That's awesome. I'm alright with that Honestly, I heard that was like rumor, but I know if it happened that's officially signed there Lamar 70 very nice 18 of the whole Ravens roster Richard's in a B.J. Oh, Jalari. Honestly, yeah, we had a Devin Dover and I rip before that That's the little guy that had high hopes for yeah, Roshan Johnson for the Bears. Yeah Nice one there Chicago Blue to 95 James Cook JSN disco late in tune and a no-conel the great kicker Turner. Oh, yeah Disco of Kim Hayward disco of Kenneth Walker Justin shorter and disco Bobby Wagner Oh press proof of Antoine Winfield nice one there super short print for the Bucks Chica Juanquo disco Jalen Phillips Arnold Washington and Tankdale God save us all Can I get me a swift and Kelsey? Oh That is a red will McDonald to 70 disco Rodney Thomas Chris Rodriguez the one Johnson don't hate Taylor for making good business decisions true There's Tyron Matthew to it 95 Jordan Addison and Massey Smith, you know how smart the NFL is for putting this game on peacock No, about having how many Taylor Swift fans are gonna buy peacock just That's a good point. Didn't think about it. Like my god They're just like just these networks and leagues are just like one step ahead of us at all times man. It's terrifying. It's really it's scary They know they crave on digs Aaron Rodgers Turner McKee and disco Elijah Dotson. That's pretty quick Beauty that is Streamy's true true. Thank big speed Roshan Johnson and Key on white. It's more beautiful when it doesn't freeze every I know Streamy's is kind of washed now. I gotta be honest with you. I mean, I'll still take it over nothing, but Could be better. They are semi wash that you better streamies tend to go and I'm at Man this guy this guy's gonna give it to Sean on Monday because or tomorrow he's a chiefs fan Anthony Oh, that's right. Well, yeah, lucky man William seeing this in Miami Blue of ps2 to the 95 disco gave Davis for the bills before jr. Nevin home Do you think of this game in Miami? I think it's I think it's not a 19-point game. I think it's closer for sure, but I don't know Mazzie Smith 270 like my home's up loves is just different animal June and Blue Rashad penny to 95 Josh Downs rookie and Michael Wilson. Yeah, true. True Vaughan Jared Hall disco auto rookie auto for it the Vikings purple 235 Blitz boy Jamal Adams Joe Burrow Michael Meyer and DJ Turner Disco lockdown Shaq Leonard disco of Chris Olavik Darnell Washington disco at Devontae Smith Ooh Say flowers disco variation So the father Kenny Debeast Will Anderson and Emmanuel force between my friend and I are paying 70 Yeah, I mean, that's worth it for you how much basketball you watch and I'm assuming how much basketball your friend watches as well to 95 Zach Sharpen a are you asking if we have 20 24 sage Kenny? I don't believe we do tank Dell and Chris I don't believe we do usually. I don't think we have a really good sage products Red Jeffrey Simmons to 75 or 270. Yeah, it is. I agree with that to me disco Ben Scronnick Pukinakua and Tyler Scott disco variation Jaden Reed This go of County Pickett DeWon Johnson and say flowers Disco Desmond Ritter Brian breezy and Hended Hooker James the rays and definitive. Thank you, buddy It's up Luke. How you doing buddy? Thanks for taking a spot in that next one. Appreciate your brother Or not the next one, but in the iMac Tend to go on that one everybody. Matthew. What's up, buddy? What's up? What's up? Purple disco to 35 Sam LaPorta this one there for the Lions 16 to 35 I'll play disco Devontae Williams still in Wharton and it will let us ah Dude, I want nothing more to seal them are in that iMac Nothing more purple Gabe Davis to 35 to yeah 35 Roshan Johnson and Keon White 250 points and all at the end Nico Autry to 95 for the Titans Disco of Hended Hooker Brian Branch and Broderick Jones Pick six on Draftings. What's that's all what's that all about Anthony? Is that like a? Parley thing we get certain odds Davis Mills to 95 I think it means you get the big six darn alright. Yeah, but I mean you think it'd be easy If there's got to be some sort of stipulation to it in Hutchinson Anthony Richardson and B.J. Ojalari Like a pick-up thing gotcha gotcha gotcha. That's pretty cool. I know we don't have draft down here That's the only thing we can only do hard rock. Yeah We are Quentin Johnson disco at variation disco Breeze Hall boutique and chase young disco Purple Jay Jettos on the color match to 35. Oh, that's cool two of 35 Arvin Mims and various dates Red to 70 Rokwan Smith for the Ravens. Let me some Rokwan Andre Johnson Justin Shorter and Jordan Addison rookie Disco Devontae Smith disco of Tyree Kill prismatic Dorian Williams and Devon a chain On you guessed it the disco rookie Chase Brown disco variation for the bank Massey Smith and Tanner Yep, Vegas Raiders expect that you hire Antonio Pierce nice good Oh No beers and tend to go on the I'm act makes everybody All right on to the next one red disco to beer Gibbs the 70 Congrats Lions nice one there disco of Buddha Baker Think Bigsby and Zach Harrison blue disco Calvin Ridley There you go. Jax Jaden Reed rookie and Kenny Mackintosh. Oh, yes. I Miami is not winning cuz There he doesn't have over a hundred. There you go to the 95 chase Brown 130 yards a reception to touch down That is tenor McKee rookie auto for the Eagles. Yeah, QB to Donnie's QB to right there. Congrats Billy red Michael Thomas slant man 70 disco Bijon Felix on the week of Zoma and say disco past my homes Disco of George Kittle Israel Avinaconda and Carl Lawson Disco of Cam Hayward Devon a chain and Marvion over shown Lou Chad Johnson to 95 The bangles Calvin Ridley disco Will McDonald and Luke Musgrave red disco Austin Eckler That is 270 Lucas Van Ness and Coliseum can't see Disco variation Quentin Johnson Disco of Tony Pollard Marvin Mims and Will McDonald disco rookie and the last pack of the break. Good luck here Everybody see what we got see what we got That is a disco rookie Tyler Scott for the Bears Yeah, yeah, Diaby and Elijah Dodson and Deontay banks. We're rookies there. All right quick recap of our no quick random Quick random we got to do for the points Lori assisted to Miracle Tell the ball you love it cuz I'll never see it again All right guys doing the random for the points 250 can roll a dice wherever teams on top after 11 rolls of the dice We'll get it one two three four five six seven eight nine Ten and eleven go to the Vikings. That's Minnesota quick recap here. Everybody Right, we've got blue 295 Chad Johnson Chase Brown Calvin Ridley Davis Mills Niko Autry Zach Charbonnet Rashad Penny Patrick Sir tan Tyron Matthew James Cook Stetson Bennett Daria Slay CPAT Marvin Mims 270 is gonna be Michael Thomas Some mad man, but it's my assistant's ecstatic Aussie Smith to be our kids Austin Echler Jeffrey Simmons Myles Murphy will McDonald Lamar Roquan Smith Bobby O'Kerrikay to 35 Gabe Davis Jamal Adams Sam LaPorta Justin Jefferson Devon Cook to five is Dawson Knox Autos we had Tanner McKee Jaren Hall Roshan Johnson and Josh Downs I'm doing for the break everybody. Thanks again for the fill up next is no huddle number six