Back to my channel today's video as you can see from the title it is going to be another hair review video. I'm going to be installing this wig and do a little bit of my makeup so if you want to see that just stay tuned and if you're new here hey my name is Kira Jenae and don't forget to subscribe and join the family before you leave. So if you don't already know this is the box that you will get it came wrapped in a little bow.  So this is how the wig comes the way that they sent me over is a thirteen about four I believe lace front and wig it does have two combs on the side of comb in the front of the comb in the back and adjustable elastic band you guys know I love my lace tent I opt for this rather than reaching the knot just because the lace thing is so much faster like you literally sprayed on and it dries within about five minutes and the lace tent does come in about five to six different shades so I feel like it's even to achieve your skin tone. Then after I do that and let it dry I do like to pop the wig on to see how it's fitting to see if I need to readjust anything if I need to make it tighter or looser before I glue it down I like to do that because you don't want to glue it down and literally it's too tight or too loose or you know whatever the case may be. Then after getting everything situated I do go in and start plucking this unit I didn't want to do too much plucking just because I wanted this to kind of be like a pop one out the box type of wig if that makes sense so I did a little bit of plucking after plucking I am going to cut this into three pieces. When I am going down the lace I do like to actually cut it into threes because it makes it a lot easier so I'm just using a little bit of witch hazel and that's not makeup it's just the lace tent it kind of bleeds off so it's really important to make sure that that lace tent is dry or it's just going to bleed off into your skin. Also using the I think it's the even New York glue and then I'm using literally just the freaking makeup brush to spread that out. Want to spread it out as flat as possible and don't put your lace down until it is clear or almost clear and that's what I'm doing here. After pressing the lace down I like to use the comb to kind of melt it in and get it as flat as possible then I like to go in with the got to be glue free spray spray that over it to get the ultimate hold and then I will tie that down with an elastic band. So moving on to the makeup I have been getting a lot of requests to do a makeup routine or you know how do I do makeup so this is going to be like a little fast overview of how I do my makeup I may do like a in-depth video a little bit later but this is a quick little portion since I decided you know if I'm going to do my makeup I just you know film it so I do like to start off with my eyebrows I am using the Anastasia dip brow primate if I'm not mistaken in the shade chocolate after carving out my eyebrows I just follow the natural line of my eyebrows I do like to go in with the two face born this way concealer I will have to look and see what shade it's in I just do a lighter shade than my obviously skin complexion probably like two shades lighter honestly and then above my eyebrows I like to use my foundation I feel like using the foundation kind of just gives it a more like realistic look and it doesn't look too clownish to me like when you use concealer on both it's just a little bit too much honestly in my opinion I like to use the Mac and Fenty during the summertime because I do get a tan the Mac shade of mine is a little bit darker than Fenty I usually use Fenty during the wintertime but I had to combine them both because I am all of I am out of all of my Mac and yeah so normally I would just use Mac in the summer and the Fenty one in the winter because obviously you know being black or whatever we do get lighter in the winter so and before I get on my makeup the glue has dried so I am going to cut off the excess lace with a eyebrow razor you know to use this because it gives them more jagged cut and it looks more realistic than using scissors to go across the hairline after doing that I will finish up my makeup and put the foundation in those spots where the lace was now that all the lace is removed I am going to brush the hair out it looks super cute it's super natural I am loving the HD lace so this side of my hair I was seeing is a little bit more bulky than the other side so I am going to part this in sections and then use my edge wax to lay that down and then we're just going to go ahead and hot comb that piece by piece or section by section once that's done I am going to go ahead and finish my makeup I'm going to use that same Too Faced Born This Way concealer to conceal under my eyes my nose and my chin this is a real techniques brush I believe and for my contour I either use Anastasia or I can't remember what this one was that I just popped up but I like this brush because it goes out really poofy and then it goes really really tight after blending out everything I like to take that same brush that I use for foundation and kind of go over everything and blend everything together I learned this little technique from one of my friends she spray setting spray on the Beauty Blender and then she tapped it under her eyes to set her eyes first so that there's no creasing and then I'm just using a random Revlon highlighting palette and then I'm going to highlight now it's time for lashes I actually do some my own lashes these aren't one of them and if you want to check them out it is Shop AJBD Collection on Instagram it is tagged in my Instagram bio my Instagram is underscore akira with three a's and I will be launching officially again well I will be launching for the first time next year and I have something else in store but okay back to the review then I went into the bathroom flat on the hair the hair already comes straight but you know doing all this stuff to the wig it is gonna make a little bump and stuff into the wig so I did just go over really quickly with the flat iron as you can see super cute super straight I was feeling myself the wig is so cute and so flowy so hey y'all we're at the end of the video I'm gonna do a little bit of a review about the hair I love me here did see me over there undetectable indivisible lace straight 13 by 4 frontal lace wig it is in their real HD lace this is what it will look like when you click on it so make sure this is what you're seeing and they did send me over 20 inches so 20 inches they have 12 units in stock it says over 1700 of these are ordered and they got like 218 reviews so right now this exact week that I have in my head right now is going for $369.90 it is on sale and they also you know they have after-pay they have what used to be called quite pay which is zip now and then Kalana if I'm pronouncing that right the hair did come with this come DHL I believe the HL delivered to me within two days if I'm not mistaken love me here with shipping is a one you gonna get your week quick sis this wig is 180% density it said it came pre-plugged always I like to go in and plug just a little bit I didn't do I didn't do too much plug in this time just because I didn't want too much going on I kind of wanted it kind of like straight out the box so you can put it on and see how it's gonna be looking I'm looking for the wig size it says it's a standard medium which is 22.5 inches some of their wigs fit like perfectly in some are a little bit snug this one is on their snugger side I would have to go back to a video and see the different wigs that actually fit me and see what the inches of that is but this one it's a little snug I did obviously as you saw you I did obviously if you guys saw I glued down the front with actual glue but the size I didn't glue down just because it is you know HDL so you can't you tell but I couldn't really pull it all the way up where I needed to be because it is on the smaller side granted my hair is not braided under this so if I did have cornrows it may actually fit a little bit better but even then if you know I always wear a little like bun or ponytail in the back it is never a problem so this wig I do feel like it's slightly on the smaller side but other than that I really like it I'm wearing 20 inches so let me scoot this back a little bit show you guys it's cute so yeah I love it love me here it's always really silky really really cute so what definitely given this since you know the wig cap is slightly snug I'm gonna do about a 8.5 out of 10 just because of the wig cap but no shedding surprisingly I really haven't had one strand of shedding until I did pluck a little bit of the front I just did a middle part you could definitely do a side part with this the tracks start about right here since this is only a 13 by 4 excuse me since this is only a 13 by 4 but yeah that's my thoughts on the wig it's super cute I like it don't forget to like this video comment and subscribe and into my next video I will see you love these then bye guys


Hi, everyone, and welcome to my talk today at Kubernetes AI Day. We're going to talk about security best practices for AI on Kubernetes. My name is Guy Salton. I work for a company called RunAI. RunAI provides a platform for orchestrating and optimizing AI workloads on top of Kubernetes. And we'll talk about some security best practices today a bit about myself. So I'm the solution engineering lead at RunAI. I'm a big fan of Kubernetes. Been working with it for a few years now. And I live in Tel Aviv, Israel. And let's quickly review our agenda for today. So we'll talk about Kubernetes and containers for data scientists and why data scientists are adopting these technologies. We'll then also talk about what data scientists need on their day-to-day work. And we'll speak about security concerns that might arise for security teams when running workloads on top of Kubernetes. And then we'll see the solution. So we'll see how we can help the security team make sure that the jobs, the pods that data scientists are running on Kubernetes are running in a secure way and everything is secure and we shouldn't have any concerns. And we'll see a demo of how all of these things are running. So let's start with a bit of an intro. So data scientists are widely adopting containers today. And this is due to the fact that a lot of the very popular tools that are in the market today that are used by data scientists are built and designed for containers. So you can see a few of the names here. There's also, of course, the NVIDIA NGC library, which provides a lot of pre-trained models and containers that researchers can work and start getting started very fast. And with their models, all of these things were built for containers. And that's why data scientists want to use containers. And when using containers, you know that the fact that the new standard for orchestrating containers is Kubernetes. So you can see a few stats here. This is from a recent study that was done by Datadog. You can see that almost 90% of containers are orchestrated. And the de facto container orchestration tool today is Kubernetes, used in more than half of containerized environments. The advantages were talked about many times. What we're going to talk about today in focus is what data scientists actually need and what kind of work will they do and how we make sure it's secure. So what do data scientists need? They need to run containers that have their deep learning framework inside it, like TensorFlow or PyTor or Trokeras. They would need to be able to install dependencies on this container based on what their model needs. And they would also need to be able to mount their data into the container. So they probably usually won't build an image that has the data prepackaged inside it. And because data would be changed frequently, they would prefer to have a container only with the framework tools, dependencies that their model needs, and then they would mount data from outside from some shared storage. So once they have all of these things, they should be able to develop, debug, train, and deploy their models. So this is what they need. But on the other side, we have the security team. And they're thinking, OK, data scientists want to run their containers, and they want to use the Kubernetes for that. But how do we make sure that researchers don't mess with other containers? We don't want a researcher to mess around with system components or other researchers' containers. We don't want a researcher to have access to other researchers' data. Data is a big thing, and we don't want a researcher to be able to access somebody else's data, change it, or even just read it. And we also don't want researchers to have access to shared resources, meaning they should only be able to work inside their container. We don't want them to access the host running the container, and then they can potentially change things on the host that can affect other users, and we don't want them to do that. So how do we make sure that these things are not possible? Let's talk about a few best practices, and then we'll see a demo. So first practice, like we said, we don't want researchers to mess with other containers. We only want them to work on their containers. The solution for that is to create a service account for each researcher, which is basically like a user definition in Kubernetes, and then we'll use namespaces for segregation. So each user would have their own namespace, and they would only have access to do things inside their namespace, and they won't be able to touch other namespaces. The second best practice is for the fact that we don't want researchers to access other researchers' data. To make sure that this is applied, we would need to set the right permissions on the researcher's data directory. So to make sure that this directory can only be accessible by a certain user, and then we would, in our pod definition in Kubernetes, make sure that we use the right user and we mount the right directory, and we shouldn't be allowed to mount somebody else's directory or impersonate as somebody else, and we'll see how this is enforced. And lastly, we said we don't want a researcher to access the shared resources, the host where the container is actually scheduled on to make sure that this doesn't happen. We need to restrict each of the users, so basically restrict the cluster or the namespaces on the cluster from running pods with root user and with privilege escalation. We have to enforce and make sure that the researchers run with their own user, and they don't try to use privilege escalation to access the host. So we'll see how this can be enforced in Kubernetes. So let's go and see the demo. I created a public GitHub repo with all of the files and examples that I'm gonna show today so you can feel free to access it and follow along. And so let's go ahead and get started and let's go and start by looking at our cluster. So I have a Kubernetes cluster that I created and you can see that. Let's make sure I use the right config file. So if I run the kubectl get nodes, I can see I have a Kubernetes cluster with three nodes, I have my master nodes, CPU node and another node with GPUs. And I said that I want different users to have different namespaces so they won't be able to do things on other namespaces. So let's say I have two researchers in my team. I have a researcher called Bob and one called Alice. And so the first thing I would need to do is create a namespace for Bob and a namespace for Alice. I already did that. So if I run the kubectl get NS, you'll see I have a namespace called Alice and one called Bob. And now I want to make sure that Bob will only be able to do things inside his namespace and Alice will only be able to do things inside her namespace. So to do that, what we did is we have to create we have to create a few resources in Kubernetes. First of all, there is one called service account then a role and a role binding. So we do this for each of the user. We create a service account role and role binding for Bob and then other ones for Alice. And so the service account is basically a user in Kubernetes. You see, we just create a service account. We call it Bob user. We map it to the namespace Bob. Then we create a role and for Bob, this is also mapped to the namespace Bob and it will basically allow us as Bob to do everything that we want, run pods, run jobs, deployments, everything on the namespace Bob. And then a role binding is what binds the service account with the role. So you see, I create this thing called role binding. It's also gonna be created in the namespace Bob and it will bind this service account we created called Bob user with the role that we created for Bob. So we did the similar thing for Alice and all of these are in the GitHub repo. So you can just go and run the kubectl apply dash F on this YAML file and this will create all of these three things for Bob and then other three, four Alice. So if we go and run the kubectl get role for example on the Bob namespace, we will see Bob's role and we will also see his role binding and his service account. So all of these were created and similarly for Alice. And once we have these three things created for each user, we can create a Kubernetes config file. So I won't go too deep into this. We'll have an example in the GitHub repo but you, this is the file that each user would use to access the cluster. So it would have the cluster information then it will define the user. So Bob will get a config file with the user Bob user and will only be able to access the namespace Bob inside the cluster using Bob user. Alice will get this file. So she will only be able to access the same cluster with the Alice user on the Alice namespace. So just to see that this works, we can now impersonate for example, as Bob by using Bob's Kubernetes config file, which we just saw now. And you'll see that now if I try to get for example, pods on the Bob namespace, I'm allowed to do that. Currently there's no pods running but if I try as Bob to see pods running on the namespace Alice, you see I'm forbidden. I don't have permissions to list pods on the namespace Alice as well as in any other namespace only on the namespace Bob and similarly for Alice. So this is the first best practice it's now implemented. Second best practice we wanted to make sure that each researcher only has access to his or her data. And so to do that, I created an NFS server and I mounted it here to one of my nodes in the cluster, the GPU node. And you can see I created a file, a folder called Alice and one called Bob in my NFS folder. And each of these folders has different permissions. So you can see that the folder Alice has a permission, the only person can access this folder is Alice and Bob can only be accessible by user Bob. And to see that what is actually inside, I can go and show you that for example, in the Bob folder I have a file called data.txt and it contains one line which is Bob data. And if I look at the directory of Alice, I'll see that I have a similar data.txt file but for Alice it will contain a single line which is Alice data. So I have two folders, one for Alice, one for Bob. The Bob folder is accessible only by user Bob, Alice is only accessible by user Alice, each of them has their own data files. So this is the NFS. Now to be able to mount these NFS directory into my pods in Kubernetes, I have to create two things. So first one is called PV persistent volume and then something called persistent volume claim. And so persistent volume defines my volume that I'm going to use. So this is the persistent volume for Bob. You see I called it NFS PV Bob. It's going to be created in the namespace Bob and it's going to use and access my NFS server. This is my NFS server IP and it's going to get my Bob folder. And similarly for Alice we created another one but this would get the Alice folder on the namespace Alice. Then we have to create a PVC. So to be able to use this volume in our pods we have to create something called a PVC, a persistent volume claim. So this will, this is the resource that we can actually refer to in the pod. So we created one for Alice again in the Alice namespace using the same storage class name as the PV and then one for Bob in the Bob namespace. And so we have our storage PV PVC and NFS configured. And now for the last best practice we said we want to make sure that pods cannot run with root user. They can't run with privileged escalation. So to enforce something like that on our cluster there is something called pod security admission. There are a few things that you can do actually but there used to be something called pod security policies but you can see that Kubernetes decided to deprecate it and completely remove it from Kubernetes in version 1.25. So you should be aware of that. The new recommended approach is called pod security admission using an admission controller. It's a new feature, it's in currently in alpha only available from Kubernetes 1.22. To enable this alpha feature you can go and enable the pod security feature gate in your cluster, make sure that you do it both in the cube scheduler, cube API server and the controller in your master node. Once these are applied you can enforce different security standards on each namespace in your cluster. So there are three basic standards and what the standard that we want to use is called restricted. So the restricted standard has heavily restricted policy and this will prevent pods in the namespace to do unsecured things. So if we look at some of the things that it will enforce you see that once the restricted standard is enforced on our namespace it won't allow us to run pods with privilege escalation it won't allow us to run pods with root user it will require non-root user as well as other things here. So I enabled it on my cluster and now to go and actually do it by the way I can see that for example here in my master node in Kubernetes if I go to the ETC Kubernetes manifest I can go and look at my files here. So for example, if I look at the cube API server you should see that under the container commands I added this feature gate pod security equals true. So it's enabled on my cluster and now if I go and look at my namespace you can see that I can do for example, kubectl get ns pub dash o yaml and I'll see that I added specific labels on this namespace which are the cube security enforce and so I went and actually enforced the restricted policy on the bobb namespace I did the same thing for the Alice namespace which means that as the mode is enforced if I try to run pods that don't comply with the security standard the admission would just plot them and let's go and see this in action. So let's go and try to run a pod. I created a pod definition here for bobb so I would try to go and run a pod in the bobb namespace and this would run an image called jupyter tensorflow notebook so it will contain jupyter as well as tensorflow it would go and mount my bobb folder from NFS. So let's see what happens if I impersonate as bobb and I then try to run this pod. So I'll go and run the kubectl apply pod bobb not secure and you'll see that once I try that I get an error, right? My pod security admission gives me an error it tells me that I try to run a pod with privilege escalation I try to run a pod with a root user this is not allowed so I'm blocked and so this is a good thing to apply now let's look at the proper pod that is where I applied all the security standards so it's the same image but this time I added security context and I said the run is not root as true I specified the actual user ID that I'm gonna run this pod with 501 is the user ID of bobb I added a few other things here like the runtime default as the type of my second profile this is also required I also had to drop all of my Linux capabilities and set my allow privilege escalation to false so my pod won't be able to do privilege escalation and then again I'm going to mount my bobb folder from NFS to this directory this path in my container and so let's go and see what happens when I try to run this pod this should now be fine and I see that now the pod is created and if I run the get pods on the bobb namespace I see that my pod is now running right for 10 seconds I should now be able to exact into the pod so exact dash it the pod name in the bobb namespace and I'm gonna use bash for my session and now I'm inside the pod and you see that if I run the ID command I'm running as user ID 501 I'm not the root user and if I try to run sudo su for example see I'm not allowed to run sudo as I don't have privilege escalation so this is good and if I look at my file system here I see that I have my workspace this is where I mounted my NFS folder and I have my data file here that was mounted from NFS I can see my data, bobb's data and if I want to let's say install some dependencies I can run the pip install command to install Keras for example so I can run it it would go and install Keras on my home directory so everything is good so that was the demo and going back to our slides just for summarizing we covered three best practices first to create a service account in a namespace for each researcher so they would only be able to do things on their namespace then the second best practice was for the data we set the right permission for the researchers data directory in NFS in our case and then make sure that we use the specific user ID in our pod definition and lastly we used pod security admission to restrict pods from running with things like root user and privilege escalation so thank you very much I hope you enjoyed this session you can feel free to contact me either on LinkedIn or email and thanks


If you are interested in exploring complementary or an alternative approach, you may look into frequency healing. Our key coils are the most advanced mobile PEMF therapy out in the market today. This potential wellness booster has all the fascinating possibilities for your overall well-being. So what do you think about fasting, comment, and follow for more health insights.


Thank you so much for attending to my talk, today I'll be talking about an important topic that has been around at least in the community during this year that is sustainability and how OSPUS can become or are becoming a key lever for open source sustainability. But before they've been diving to the topic, since this is OSPACON brought you back to the group, I'd like to serve some OSPAN news and announcements first. I'll be really, really quick and then we will get into ways organizations are right now addressing open source sustainability, the role of OSPUS in supporting open source sustainability. And at the end of the talk, I'd like to serve some of the community learnings that has been serving in this community and if we have time for Q&A and open discussions on this topic. So Nithya was already mentioning that, but every year we do the open source program office and the status of OSPUS, and this year we are launching the 2023 edition in partnership with great organizations and open source communities. So thank you, thank you so much. So the survey is already live. If you go to 2dgroup.org and in the blog section, you will see an article that people can click on it and take the survey and feel free to serve it with all the organizations that are working on open source initiatives or OSPUS. So the 2dgroup has been hosting a rep or a public rep that has an OSPUS definition since 2020, as far as I know. And we are making a new release updating that definition because Nithya was also mentioning like OSPUS has been evolving so much during the past year that the definition might need to be now like to be updated to be more inclusive and according to the reality that we are facing right now. So this is a call for contributors because everyone is welcome to participate in this community and to contribute to the different projects and initiatives that is going on. So if you're interested there is also another blog article where you can find more information on how to serve your input and your experience to help to define the new OSPUS definition. We are starting an ambassador program in Toodoo and that is really, really exciting. It's something that the 2dgroup committee together with the broader community has been working on. And we are right now open to a call for ambassadors. So if you are participating in the community and engaging in OSPUS or are an OSPUS practitioner feel free to take a look to the guidelines and requirements and responsibilities to become an ambassador of the 2dgroup and OSPUS ambassador. And last but not least this year a group of open source folks from different organizations, foundations, open source communities kick off a new working group and a new initiative in OSPOLOGY that is the broader community that is called there is a book project. So Toodoo has been doing great job on gathering guidelines and knowledge and so on. But there are outside and even within the 2dgroup and outside in all the OSPUS communities great sources. So what we are trying to do here is to build a body of knowledge that gathers all the different perspectives and all the different work that all the communities have been doing. And I think we are like right now very contributors actively engaging in conversations and contributing to the content of this book. And it's a work in progress so if you would like to join also all the documentation in the link. And you have there a QR that links to the Slack channel of the 2dgroup. So if you are not part of the Slack channel I really welcome you to join. We have different working areas so we have the working groups that are the people behind the Toodoo guides working on the Toodoo guides or the OSPOLOG project. Like doing more like the CERN knowledge stuff. We also have local groups like we have the Japanese OSPOLOG community group. We have also like a Netherlands group in Europe. We do also have one in Switzerland. So these are local communities that usually they feel comfortable talking in their native speaking language. Most of them like for instance the one in Switzerland is happening in French in the Netherlands and that's in Japan is in Japanese that got us together to talk about specific issues and problems and came up with CERN solutions for OSPOLOG in that specific country or area or region. So we do also have these local groups and finally we also have network and discussions groups. So this is not more this is something to mix it with working groups like in those discussion groups sometimes there we did there is a new working group that raises like there is a specific need and then the people put gathers together to create a working group to work like for instance so this is what happened with the Outbone open source guide from the to the European chapter they decided to okay this is a need an email organization we have this kind of policies and guidelines and in other organizations they have different ones so why not collaborating together why not open this to the public and serve it so everyone can find inspiration on how different organizations that had an OSPOL did and this is one of the outputs that came from those discussions which I think is great and sometimes there are not outputs sometimes it's just I really want to hang out with peers and and serve my experiences and learn from others which is also great so as I said feel free to scan the QR if you would like to to join the group and there are other other resources out there so we have an open source program office 101 course that course is completely free it's in one of the two to GitHub repos and has different modules on the basic of an OSPOL so if you would like to get it started into us but that can be a good place to at least start and you can also continue with into the group we have the to the guides on different topics on how to get started with the Ospo and continue the Ospo and one of the latest works we did was the business value of the Ospo to try to analyze and explore why organizations were creating sustain and also expanding the open source program offices that is one of the books out there so saying that let's now come back to the topic and to start with I would like to talk about a specific question that was raised yesterday during the Ospo Consummit so Ospo not Ospo Consummit sorry Chaos Consummit so Chaos is another LF project focusing on community analytics health and analyzing the health of the open source communities and the open source projects and we got a really insightful conversation on what does sustainability means to you and also is it different or similar to health and all this came up with the question on okay it looks like many organizations knows or understands the value of why taking care of open source because they are using open source but there might be some organizations that they just stuck into that step and doesn't take care of the contributions so even though open sources said we were and there was a statement that said that the world is built on software and open source is eating some software or something like that and I know like many organizations actually understands that the next step is okay and what about contributing to open source projects because that might be maybe the next questions to ask like does open source contribution scale on the same level as open source usage like I know organizations care about open source because they are using open source but do they care about contributing to open source and that's why the reason of why I submitted this talk and wanted to talk with you and to discuss with you the open source sustainability and how it was can help so to start with let's start dipping dive more into what sustainability means and addressing open source sustainability so when looking in the on the internet on Wikipedia on not different sources there are different ways to define sustainability but I found a really interesting graph that was more related with more like environmental stuff but that I think that can be also applied into open source so they define it to sustain sustainability with three pilars that sustain the sustainability concept oh my god yeah so they they put like environmental pilot economic pilot and social pilot so when I look at that I was like that it's really similar to open source and let me get that straight so when I hear environment I can also understand open source projects when I see social I see open source community and when I see economic I see goals and business so more like for the organization is it making impact for the organization and maybe and this is just my perception maybe we can take this three pilars and think about how can we improve each of those areas to actually talk about and addressing open source sustainability because in in my honest opinion I think like the economic goal for organizations is pretty clear right like okay I know we are using open source and I know like open source can help in my business I don't know how that's why I maybe hire the Ospo but I know like or I want to see profit and and and help my goals to succeed but sometimes they just don't forget about the environmental part like the like okay and how are my open source how are the open source projects I engage with operating and evolving and engaging and what about the open source community because that is also part of what makes something sustainable so right now organizations are doing different activities different initiatives even though they have an Ospo or not to try to help on addressing sustainability the most direct thought that you might think of its funding providing finding there has been great initiatives some examples Spotify Foss Fund released last year the Indeed Ospo in the past lead by Dwayne O'Brien also did the Foss contributor fund that was inspiration for many other organizations including for instance the Spotify Foss Funds and they also have a book that serves more details on why creating the Foss Funds and the details on how to implementing in that organization Bloomberg Alisa is here as well recently released the Bloomberg the Ospo team released the Bloomberg Foss contributor fund a few months ago or I think these months is when that happened and there are also other initiatives outside the organizations like for instance github sponsors that as far as you know all the organizations with Ospo are using to with the aim to provide funding to maintainers independent projects and the open source projects that needs it also I wanted to do a sort out to the maintainer month that is happening this month now that we were talking about funding and how organizations can have also there are other ways so for instance providing contributions and infrastructure that usually people think on yeah funding if I am organization funding it's the direct way to do it but you can also teach employees on how to contribute to open source and also to provide infrastructure to those open source projects that your organization is engaging with this comes from the last Ospo survey that was I thought it was really interesting that says that 65 percent organizations that contributes upstream open source formally structure the Ospo and I think that is really interesting because we will say it in a while but Ospo usually is just a way to is the vehicle to streamline open source operations doesn't it's not that if you don't have an Ospo you don't care about open source but it can help to put order into chaos a third thing that organizations are also doing is adopting open source best practices it's not just about yeah let's contribute sometimes employees within organization doesn't know how to contribute to open source or maybe they need some legal advice and also operational and how to operate within open source dynamics and specific tooling and automation processes to make their lives much easier so organizations are helping with that putting policies and processes to ease that contribution and to understand the open source culture so I think it's also really very important to not just say you need to contribute but contribute in a way that doesn't harm the open source ecosystem that benefits both the organization but also the open source projects and the ecosystem itself so talking about when we see all these different ways organizations can have and address open source sustainability here is a typical problem we face so the open source ecosystem it's really wide thing and there are different actors open source actors outside the organization so we have maintainers we have independent projects and well umbrella projects that are part of foundations we have also contributors we and so on so it's it's open source player is really different and they have their different ways to operate and different communications channels you can get in contact with those people so what do we do what can an organization do and also can happen that so the also can be this entity or group of people because also it's behind the hospital there are people that puts order puts yeah put all the chaos into order yeah and and cleans up all the mess so I think that it's also really important and can connect all the open source projects with the organization and vice versa and get the feedback from the open source community and serve with the organization so that their needs and their questions and their concerns and problems gets also heard in the organization so now that we're talking about open source program offices as a way that might help addressing this open source sustainability I think it's important to understand the Ospo and what an Ospo is but before that so important consideration so we here we are talking about Ospo and looks like yeah this is it this is the final definition and everyone should do it this way it's not and into the group we always said your Ospo is not my Ospo so they might be right in sector in region organizational side and there are people there are Ospos that they don't call it an Ospo they call it open source office or open source strategy center and it's I mean it's the same even though the world is different the goal is going to be the same to manage open source operations and strategy we saw well in in nithya and past nithya presentation we already saw like what is an Ospo as an entity so I'm not going to dive into that in today's talk I wanted to go to see a different perspective and is who is in the Ospo like what is the people what kind of people are behind in an Ospo either virtual or physical either is not officially formed but at some point they're operating like that because I think it's important to also address like what the people behind the Ospo can do in your organization so we have the enabler so these are about and when organization decides to put strategy and streamline this open source operation it needs education it needs a person or a group of people to work on how to establish processes to have to operate in open source and and include workflows and also adopt new tools and technologies that is this contributions we also have the consular and that is related to the metrics of experts I was later serving in the q&a session so it's more about how how these people can solve the problems on the different teams so it's about providing guidance and advice on where are the ladies opens our strengths what happens with this project and there's and their licenses so like is it safe for me to contribute to that is it not so they actually act as these people at this guide to help organizations to advance in the open source journey there are also advocates and I'm seeing more diverse so I came from their background by the way it's there as well so I've seen more and more open source diverse that they work within the hospital because that is also really important task within the hospital to promote the usage and also to encourage the developers and also non-developers depending on the organization to engage in open source projects and also understand their needs like okay why why so these people wanted to contribute to open source or motivate them and and give them these motivations to engage in open source projects and also and I like a lot this little this last role will be the environmentalists so addressing security issues also maintenance taking care of the maintenance of the open source projects understanding how well these open source are and saying the health of those open source projects that can give us some ideas on this sustain and how these open source projects are sustainable and so on so this is all about establishing policies and procedures for core review security vulnerability tax ongoing maintenance and so on and and maybe also like some analysis on what open source projects to fund and what are the best ways to to provide that funding to those open source projects and maintainers that made it so okay we've been talking a lot about auspice but actually where do open source and auspice converge and and that is I ask this question because sometimes it's difficult for organizations to actually understand because even when the organization realize that they they need to do something with open source there might be not ready to start an auspice and that's totally fine I think it's more important to start asking previous questions first and know what is the status of your open source within the organization and once you know all that you might think of okay let's put a a team or a dedicated group of people to work on that to work on on on open source because organizations might have you know might be on different stages in their auspice in the open source journey and that is gonna also be the starting point on how to start the auspice and how the auspice will be structured that's it will it be lending to engineering to marketing or to legal which that also is gonna let you understand where so be the auspice and how so be the auspice structure so here are some assessment guidelines that in the for instance in the auspice book we were discussing a lot that can help you to to get us started to first evaluate the culture with your organization so it is the organization ready to open source operations there are like for instance the technology big tech companies might say yes I mean we have been using open source forever my employees knows how to operate in open source but maybe there are for instance in in Europe I've seen more and more organizations getting into open source while there doesn't have enough tools and culture to start with open source so maybe that might be the starting point to to ask like okay is there a culture of collaboration and sharing in the first place in my organization is it too traditional or is it actually getting ready to to operate in open source I wanted to do also sought out to in case you want to dive more into this topic of the inner source commons communities that actually works on that is a community to work on open source culture within the organizations not going fully open source but to start to to think about the how to implement this culture within their organizations and the different teams so they have the inner source patterns which are a set of guidelines to to get us started and you can go to their page to to learn more about the other question it's about knowledge and understanding so that's my organizations understand open source and what about on the different teams also the how how what is the level of open source usage like nithya was for instance saying well in an amazon in between 80 90 percent of the code we're we developed has open source components so well I think it's important and also in your organization try to understand that like what is the level of usage and what open source products do you rely on do you depend on until some processes so are there processes in place to to ease these contributions because you might be motivating your developers and non-developers a lot on yes you need to contribute to open source and this is how this is how open source can have you in your career and your whatever but if there are if if there's a lot of procedures in your organizations and bureaucracy maybe you kill that contributions even though people there are persons that really want to contribute to open source they cannot do that in your organizations that is not good so how can and in the hospital how can these people ease employees to contribute to open source so in and also it's about addressing the gap so to adopt open source and to advance in the open source journey what is this needed and what problems does my organization have and what solutions can it provide what support can this hospital do to into the different teams of the organizations that engage in open source and also even though you think that an hospital might be a tedious thing to implement and probably during the first months years you might not see like direct output impact in the organization in the long term is going to trip and I think this graph it's really a sad start like when organizations start to just put patches into okay we got an open source vulnerable we got a vulnerability from an open source project how can we fix it okay it's fix it okay yeah that's forget about open source that's that's cool you might not scale but if you start to think about including a strategy around open source and taking care of the open source operations with the team or a group of people or a matrix of experts there might be in the long term see the value of of investing on that and we have been talking about like how how an hospital or how organizations can engage in open source but sometimes that's some sometimes we forget about the anti patterns that organizations might start when they hear the word hospital and even like today for instance this year that I see a lot of organizations saying let's start at the hospital because everyone is doing that so why won't we do that and I think it's important for those organizations that are thinking about starting an hospital or are already starting an hospital to look at the anti patterns things that an hospital shouldn't be doing because it's it will harm the open source ecosystem and it might cause the organizations to don't want to continue the hospital program so for instance there are some examples like establishing an hospital without proper alignment within organizational schools you the hospital shouldn't be acting as silo the hospital should be talking with the different teams understand their needs understand the problems and try to say well how as an hospital can solve the problems of those of those of for instance the business team through open source also treating an hospital as a legal or compliance functionality so that is great risk mitigation is important but it's not the only thing and if we can if hospitals get stuck in that they are missing the important part of innovation on well open source is not just about taking care of if I'm using open source how can mitigate risk it's about I need to come like how the organizations can contribute to that who to help also their businesses and also their goals and help the different teams to treat and also believing that the hospital gives solution in the long term so this is a long term commitment this is an investment that might that will take forever or at least that is the the point of everything so open source is here to stay so an hospital should be here to stay as well the same way not handling correcting open source harms the open source environment is the same as if you don't handle correctly the hospital so to end up with I'm going to check if I we're already on time okay yeah we're still having time I also wanted to serve a set of community learnings and best practices that has been served in the Tudor community in the shape of discussions community discussions and also in the hospital discussions in the GitHub repo happening and so on so the first is assess open source readiness when starting the hospital asking these questions can be a good starting point for instance like what does open source mean for the organization and is there an open source culture within the organization in the first place and where are the key legal and compliance consideration of using open source software within the organization once you have addressed open source readiness you might also want to think about assess hospital readiness okay so an hospital at the beginning is an investment like you need to put money in that so what are the challenges and opportunities of implementing an hospital within the organization and what resources and support will be needed to implement that hospital and that is really important because that is what if for instance you are the hospital leader or an organization hires you as an open source leader in the organization you need to know these questions really well the answers to these questions really well to transmit and communicate what resources do you need and why and and the support that will be needed to grow the hospital in the first months or years also focus on third knowledge the as I mentioned earlier the hospital student act as a silo but it's something it's an ally a supporter that communicates and engage into the different teams so for instance the hospital or the people behind the hospital so be communicating with the executives and the and the stakeholders and understand like okay how can I provide value and where are their needs what does my supervision expect expect also if you have a team behind like below so what's my team doing and also there might be other teams like for instance if your hospital is an engineering and you need to communicate with the security team with the legal team does the other teams understand the message of open source how those teams see open source and how and how can I say I find them value and communicate all that and all this will be inside the organization but of course these are knowledge will also happen outside so how can we communicate with the different open source actors what is the matter of it of integration that serves the organization that connects the organization and the open source actors into different ways and I also wanted to point out and I'm very involved in chaos community so that's why I said a lot of what I've learned from chaos one of the discussions we serve regarding this knowledge like how can we communicate with different teams we we talk about that about well sometimes it's hard to communicate because of the language used is super different you cannot talk the same way you talk to engineering teams and the same way you talk with marketing team because the needs are different the wording is different but data data is a lot it's a global language so of course it's not just about focusing on data and quantitative data it's also qualitative information is super important but it can help and we've seen there was a discussion where we saw that some auspices are starting to include data scientist role that works on data gene open source analysis and open source data engineering so I think that's really cool and four look at sustainability from all angles so remember the first slide that I said of the sustainability and the pillars so I think that is also important to sharing the organization that is not just about I mean of course it's important to be aligned with the organization's goals that is super important but also take care of the other two angles that is the open source communities and the open source projects so to end up with some takeaways so we've seen that auspices are responsible for representing the organization and connecting the organization with the open source ecosystem so maybe a good questions to ask if you right now have the Ospo an Ospo or are part of an Ospo is well at this point at this moment does the open source actors know who to contact in my organization also foster self-discovery so it's in this way I wanted to explain more so it's more open assess open source to identify the the areas where there are problems and the different teams and use open source and let the Ospo people to work on those problems to find solutions so we were I remember Nithya were talking about the like Ospo sometimes are considered cost centers and really focus more on an added value I've seen also that kind of discussion like for instance the the recent layoffs that has been happening in organizations and Ospo's I've seen of course we cannot drive into conclusions with that like I'm going to say this is because of that but from past conversations what I've seen is that there are sometimes Ospo's are seen as an added value of the organization and when there are restrictions and we are in our there is a recession period all these added values are the first thing that goes out so why not start in thinking on Ospo's as a support a like like actually a team or a group of people that actually supports and gives support to the different teams so just something to think about finally remember about this knowledge don't act as a silo but find ways to communicate and transmit the value of open source and speak the language on the different teams to teach them that open source is important not only for using but also to contributing to open source we are done but I also wanted to reserve some time to introduce myself I'm Anna Jimenez I'm Ospo program manager at Cheetah Group previously I was in a company called Vitergia that is a software development analytics firm and in there is where I got a lot in contact with other Ospo's and also with organizations doing inner source in the part of the metrics and analytics right now I'm in the Cheetah Group I finished my masters in data science a few years ago now and apart from to do I'm also involved in other open source communities such as Chaos, Open Chain, DevRel Collective or Inner Source Commons and there is my master done account in case you want to follow me and connect and that's all I don't know if we have time for Q&A yeah so if Q&A or open discussion feel free to to share your thoughts I would love to to know like what do you think on open source sustainability what do you think on the world of Ospo's there based on your personal experience or would you have hair from other people so yeah yes I could have disagreed and I imagine you would also but then they asked okay but what is an Ospo going to do in 10 years from now the organization knows everything about open source what are the tasks of the Ospo in 10 years yeah and do you have any thoughts on that that is indeed a really interesting question I think since Ospo it's a dynamic environment the statement that usually make on well open source we reach to a maturity level and then open source is not going to change I think that is not completely right since like open source is going to be evolving from one year to the other year even in between months so assuming making that assumption that yeah that's on and that's all I don't think that's right and I think it's important the organizations understands that that open source is a dynamic environment and if you see the Ospo as this support team that has the different teams to navigate open source politics and open open source processes and and trends and advice on that you should need it in in the long term and I would say like in forever like you don't get rid of an engineering team so you shouldn't get rid of an Ospo any other questions or comments any other questions yeah okay so thank you so much for saying until the end


Coming up on DTNS, Jen Briney from Congressional Dish helps us understand where all that government information is hiding on the internet. Plus, Big Tech is doing some things and not doing other things in Russia, and NASA's plan to start refueling satellites and build things in space. This is the Daily Tech News for Monday, March 7th, 2022 in Los Angeles, I'm Tom Merritt. And from Studio Redwood, I'm Sarah Lane. And I'm Roger Chang, the show's producer. Joining us, host of the Congressional Dish podcast and one of the political triad with Heaton and Justin Robert Young. Jennifer Briney, welcome. Thank you so much for having me. I'm happy to be here. Thanks for being here. We were just talking with Jen about her digital nomad lifestyle on Good Day Internet. If you want that extended conversation, become a patron, patreon.com slash DTNS. Big thanks to a few of our top patrons today. They include Allyson Jobby, Andrew Bradley and Dale McKayhee. Let's start with a few tech things you should know. Samsung confirmed Monday that attackers stole internal company data and source code but said no personal data was accessed. Samsung didn't state who was responsible, but one group said it obtained 190 gigabytes of data, including code used in Samsung's trust one environment, bootloader and activation servers, as well as algorithms for all biometric unlock operations. Now, while the group didn't leak all the data that it had threatened to on Friday, security researchers say that expired Samsung digital certificates are now being used to sign malware.  While you can configure Windows Defender to control what drivers are loaded, a better solution would be Windows adding the expired certificates to the revocation list. Until then, normal, be careful what you click on and install. Advice applies. We all know DTSS audience is well aware of this, but just a reminder for us all. The group that claims responsibility for the attack on Samsung is reportedly conducting a poll on Telegram about who their next target should be. For more details on this particular story, check out today's episode of NTX with Dan Campos. Intel announced its Mobileye unit confidentially filed for an IPO. CEO Pat Gelsinger said in December that Intel would receive the majority of funds from the sale and would use them to fund construction of more chip fabs. Intel will retain a majority stake in Mobileye after the IPO. Google wrote in a company blog post that Chrome 99 latest version of Chrome is the fastest web browser on Mac OS. Overall, 7% faster than Safari and 50% faster in graphics performance over Safari. Other chromium-based browsers, Microsoft Edge, Vivaldi among them, should see the same improvements once they update their code bases. Google used Spidometer 2.0 for these results, which was developed by Apple's WebKit slash Safari team. Google announced that Android 12L will come to devices later this year, quote, with planned updates from Samsung, Lenovo, and Microsoft, although no firm dates were announced. Android 12L was announced in beta back in October and is designed specifically for tablets and foldables. More tech companies issued reactions to the war in Ukraine over the weekend. Let's run through them now. Activision Blizzard, Ubisoft, and Epic Games all suspended sales of video games in Russia. Nintendo suspended all digital sales there, too. Netflix and PayPal are shutting down services in Russia, and Adobe is stopping new product sales in Russia. Samsung suspended shipment of its products, including smartphones and semiconductors to Russia. Coinbase is blocking approximately 25,000 cryptocurrency addresses linked to Russian people or entities that it believes are engaged in illicit activity. On Saturday, Visa and MasterCards have suspended service in Russia, meaning that credit cards issued by Russian banks can only work on terminals that support Russia's national payment card system, which means mostly cards from Russian banks inside of Russia. And Twitter said it's aware of being blocked, but it's partially available in Russia and is working to restore full availability. TechCrunch says that users report being able to access Twitter and Facebook using the mobile app. TikTok said it would suspend live streaming and posting new content in Russia specifically due to a recently passed law that threatens prison time for spreading unapproved information. TikTok's in-app messaging is still working, however. All right, so we've been doing that every day. Summary of tech service suspensions for about the past week or so. So let's step back and take a broader view of these efforts. All right, so if you look at what the big companies are doing, let's start with Google. Google says we got limited use of Google Pay for customers using sanctioned banks. We've stopped selling ads in Russia. We've removed RT and Sputnik to the Russian news organizations. Monetization on YouTube. So that's where that has been stopped. However, not suspended, maps and search. So there are Google services that are still working, but partially suspended. On the Apple front, the company has suspended product sales similar to Apple Pay restrictions. RT and Sputnik again, out of the App Store and they are available in Russia but not elsewhere. When you look at Metta, Facebook owner, Instagram owner, RT and Sputnik have been removed from IG and Facebook. State media in Russia can't monetize them. That is something that we mentioned last week has caused a lot of contention. Links to state media that are algorithmically been surfaced in the past have been demoted. Microsoft sharing threat intelligence with Ukraine. This has thwarted at least one attack that we know of, blocking Sputnik and RT from its ad network as well. Microsoft has suspended selling new products and services, Oracle and SAP have as well. TSMC, Samsung, Intel, AMD, Big Chick Makers have all moved beyond the minimum requirements of sanctions. So they've gone a step further which stopped any sale that could have military applications to stopping all sales overall. SK Heinecks has not stopped sales to Russia. It has applied for a license with the US to sell sanctioned technology. Interesting. Amazon is supporting cybersecurity efforts for companies and governments in Ukraine. So says Amazon, a product that sells all the time and logistics to get supplies to people. This is also kind of Amazon still shipping things. If you want to read the tea leaves there, no moves that reduce Russia revenue, at least not at the time of this recording. No one of these companies is totally devastating Russia in any way, but obviously strengthen numbers. The more of them that build the bigger drag to the Russian economy, the more inconveniences people notice or worse. However, in the end, shutting off Russia's central bank from accessing overseas reserves appears to be considered the most substantial of any of these acts. So collectively, definitely making a statement, but certain things still making the most of a dent. Yeah, I'm curious what's going on with Amazon. Microsoft's stopping products and supporting security efforts with demonstrable results there seems like a solid thing that they're doing. Whereas what Amazon's doing sounds like they're saying, we're continuing to do the things we always do, but we'd like a credit for them. They're also donating money and stuff like that. So I'm a little surprised that we haven't seen more performative actions from Amazon. But again, none of these things on their own really are going to do anything to Russia, but there are so many of them, it is starting to feel like it is at least noticeable to the Russian public. And I'm not sure, these are also not cost free, but they're fairly easy things for these companies to do because Russia made up such a small percentage of their market share that at least temporarily, we'll see how long they want to keep this going on, but temporarily they can afford the small hit to the bottom line. What do you have thoughts on this, Jen? Any of these companies stick out in your mind as leaving more of an impact on any other? So I'm looking at this all a little bit differently. I'm kind of looking at just the big global scale that there is really this economic system that we call a global system, but it's really not.  So the idea that we're going to shut Russia out of a financial system that they're kind of wanting to get out of anyway, they're kind of interested in the de-dolarization of global commerce. And Putin said so himself in the speech that he gave the night before the invasion, where he said like, they're just going to sanction us anyway, so we're going to do what we're going to do because I think they're just going to find reasons to sanction us. So now that I'm watching just all of these companies line up, I think the Russian people are the ones that are going to be punished by this, but Putin has already told the world that he doesn't care and the bombs are still falling. So I'm just sitting back and watching and feeling terrible for the people that live in Russia.  I mean, that's kind of the running theory in Russia. So I just see this as punishing the Russian people and they don't know what good it's going to do. Well, a reaction in Russia, again, as this all unfolds in real time, the Russian Ministry of Digital Transformation is proposing amendments to the Russian civil code to allow people to continue to use software after the expiration of a license without compensation to the software maker if the copyright is held by a company in a country that has supported sanctions against Russia. That would be a lot of countries at this point. The change would apply to software where there is no Russian-based alternative. Leaping computer reports that Russia is also contemplating enacting its plan to disconnect from the wider internet to a domestically controlled version called Runet and domestically made chips are being promoted as replacements for those no longer being sold in Russia, at least not being sold right now. An example is the eight core Elbrus 8C made by MCST on a 28 nanometer process. Yeah, when Intel's getting flack for not getting off a seven nanometer process, 28 nanometer doesn't sound that enticing. So I feel like that is not a total replacement there and the RUNET has been in the plans that's similar to what Jen was just alluding to is Russia's been making plans to disconnect itself from lots of global or proto-global situations. This could usher in more of a splinter net where RUNET connects to China, but not to anywhere else. That would be something to look out for but they've been walling things off so that they could plan for just this day should it happen. The copyright thing is very interesting to me because this is a bad precedent. You might look at it and say, ah, well, easy for Russia to say like, oh, these companies that aren't doing business here, fine, steal their software, we won't punish you anymore. We'll change the code for that. But Russia generally weaponizes its strong copyright law to its advantage. So weakening it even for companies outside of the country is not something that they would normally wanna do so that is a bit of a drastic measure for them to take and very limited, don't get me wrong, but interesting to see them going ahead and crossing that line there. All right, Landsat-7 is a satellite that's been orbiting Earth since 1999, taking images of the planet's surface for ecological research. Arstectica points out that it's done things like help spot melting glaciers in Greenland, deforestation in Papua New Guinea, but it ran out of fuel and can no longer maintain its proper orbit and so it's no longer in service. NASA wants to use it to test the idea of being able to refuel satellites to extend their useful life. Two projects are the next step in this effort. Back in 2007, NASA made two spacecraft designed to refuel each other. So just to show that you could do refueling in space, they weren't touching any other satellites. And in 2020, we talked about the Northrop Grumman spacecraft that attached to a satellite and sort of shoved it into a new orbit. So it was not refueling the satellite itself, but it took up some fuel and was able to move the satellite. We've never refueled a satellite already in orbit. Two missions from NASA want to demonstrate that that can be done as well as demonstrate how to build things in space without needing humans around to do it. These are all robotic and they're semi-autonomous. The first of the two projects is the DARPA funded robotic servicing of geosynchronous satellite or RSGS scheduled for 2024. That will test docking with a spacecraft that it wasn't specifically designed to dock with. In other words, a satellite that's already up there. And then the RSGS spacecraft will use cameras and a laser rangefinder to get within two meters of that inactive satellite. It'll use one of its two arms to grab an aluminum ring on the satellite. That ring was there to attach the satellite when it was launched. It wasn't meant for this, but they're gonna make use of it. And that will help the docking. The RSGS craft can manipulate solar cells and antennas that failed to deploy. So they'll try to mess with it and get them back into working order and attach new instruments like cameras or transmitters to the outside of the satellite. Once that's all tested, the next step will be docking and refueling. Sometime after 2025, the On-Orbit Service Assembly and Manufacturing One spacecraft or OSAM-1 will launch and refuel Landsat-7. Now, this isn't gonna be easy. It's gonna have to cut through some insulation. It's gonna have to cut two wires and unscrew a bolt before pumping in 115 kilograms of hydrazine fuel. OSAM-1 will also bring along the space infrastructure dextrous robot, AKA spider, to demonstrate building stuff in space. It will assemble a seven piece, three meter antenna and use a 3D printing like process to build some beams, you know, like construction beams out of spools of carbon fiber and other material. All of these missions have to be semi-autonomous because there's a few seconds delay between the ground. So you can't send commands in real time. If these missions are successful, it could bring down the cost of what we can do in space because not every satellite will have to have everything it needs to last for 10 years. Reduces the amount of fuel they have to take up with them. Reduces the redundant systems since you can send repair missions. And it brings about the possibility of building things in space, roomier space stations where you got more room to move around, fuel depots, space mining, all that stuff starts to become actually possible or at least affordable to do. Yeah, I mean, when you think about the details of what is being proposed here, you kind of go, okay, well, you just gotta get the fueling satellite close to this satellite in orbit. And sounds hard, but, you know, okay, right? It's, yes, it's the fuel. It's cutting through insulation. It's cutting through the appropriate wires while not severing the wrong wires and unscrewing a bolt in space. This is hard. It reminds me of fixing a house before standards where, you know, all the wiring is plastered in and you don't have drywall to cut through. You just have to tear down part of the house to fix stuff. And there's so much that has always fascinated me about a satellite doing its thing and eventually decommissioned and kind of left out there, you know, in space camp, back behind the space shed for all eternity, because there's just not anything else you can do with it. And yeah, to your point, Tom, to have a satellite that doesn't have to have all of the materials that it would need for more longevity, at the start of it being launched into space, but to be able to be like, some little weirds going on with the satellite, but it's still really useful and doing its job on some level, we just need a little tune up. That is really cool. That antenna got bent. We need to send the robot over to unbend it. Jen, what do you make of this story, anything? I'm like excited about it. I love all the space stuff and I'm a big weather nerd. So just the idea that we can, and I think Sarah kind of addressed what I was excited about where you can fix these things instead of just turning outer space into our next giant garbage heap. Like I love the idea that even as taxpayers that we can fix the things we've already invested in, I think it'll save us money. I think we can do amazing things. And I also am kind of into solar storms. So I do know that solar storms can mess with this technology. So just anything that speeds up repairs, I'm just, it's exciting to me. Yeah, yeah, yeah.  If we can reduce that by actually fixing things and I don't know, maybe they can get to the point where they can scavenge parts from old satellites and use them, I mean, it opens up a lot of possibilities. Hey folks, have you thought about something on the show that you'd like us to talk about or you have an observation or you have a question but you're like, what's your email address? Well, it's feedback at dailytechnewshow.com. Now, you know. Jen Briney provides a service to the world called Congressional Dish where she takes the time to actually read the legislation that exists and then tell you what's in it. Trust us, that is not a small task. I imagine if she were trying to do this 30 years ago, she'd have to live in Washington, D.C., make lots of phone calls, send letters, show up at actual buildings like government documents libraries and gather all that information by hand to produce her show. Thankfully, the internet exists, which makes it possible to download electronic documents, watch congressional hearings online. It's still a Herculean task, but the tech makes it just possible. Jen, thanks so much for being willing to share how you track these resources down and maybe give some folks an idea of where to find things that they're interested in as well. Can we start with like, what are your go-to resources? Where do you start when you're looking for information? So my favorite thing is called the Daily Digest, and it's a part of the Congressional Record. And every single day, it's the first six to 12 pages of the Congressional Record that just gives you a summary of what happened this day. So I at least get my eyes on every single Daily Digest, just to see this is what became law, this is what they're working on, and then it has the list of every hearing that took place in Congress. Because a lot of people think that C-SPAN has all of the hearings. It's not even close. There are way more hearings than C-SPAN could possibly air. And so that's where I can find all the hearings that happened, and unless it's a closed hearing, which is Congress speak for secret, unless it's a closed hearing, which are actually quite rare, I can find every single hearing on the internet. So I use those Daily Digest to give myself a list of the hearings I wanna watch. These are the bills I wanna read. These are the laws that need to be read. And that really guides where my show goes because that way I know what Congress did. And it's very, very quick. I can get through 30 of them in an hour. And the Daily Digest, anybody can go to. That's not like a special resource that you have to get permission to see. Pay for something. No, it's free for everyone. And in fact, it's a part of the Congressional Record. So it's like every day the Congressional Record will tell you everything that happened in the House and the Senate. And it's kind of like the table of contents of that day. So you just have to go to Congressional, you just Google the Congressional Record and then you can click on any day and the Daily Digest will be the first part of that record for that day. I mean, you mentioned it was somewhere between six to 12 pages. I think for a lot of folks who consume news, as we do here on DTNS, six to 12 paragraphs can be a lot. Especially when you're trying to be like, okay, let me make sense of what this all means and how it affects the people that I'm trying to reach. Is there, do you find that there's a writing style where you can kind of get around it? Or have you gotten good at being like, okay, of these 12 pages, like the middle three are really the ones that we have to worry about? It's that. And you don't have to read them all because a lot of the text is telling you who wrote the amendment and what's in the amendment. Like I don't really care about that. I'm just trying to see, did a bill become law today? And a lot of the stuff that happened during the day, I'm scanning through that. I'm really looking at the Daily Digest for what hearings happen today. Because I look at Congress as my window to the world and the hearings is where we get the questions and the answers and the expert testimony. Like I love the hearings. So most of the time I'm scanning most of those pages real, real quick just to see what became law. And if we have like a weird declaration of an emergency that doesn't make any sense because those go in there too. Anything outside of that, I'm kind of skipping to the hearing section and that's where I get to find where my expert testimony is. Now, is there video of all of those kinds of hearings? And if so, where do you track that back down? Is it linked from the congressional record? No, it's not. Like that is something I would love to have happen. I have to do it the hard way and find it all myself. So this all changes based on who's running Congress, but right now pretty much the House of Representatives is airing all of their hearings on YouTube. So the House of Representatives hearings are pretty easy to find. The Senate is using something called the Akamai Adaptive Media Player and I hate it because I cannot figure out how to download those files.  But the Senate has some good hearings. But pretty much if you're looking for a hearing, so let's say like you see the Daily Digest, oh I wanna watch this hearing. The key is to find out what committee it took place in because going to the committee website, that's where you're going to find that hearing and that is where the video will be linked from. Yeah, so tech-wise they're doing it differently but the path to them is always through the committee websites. Are there any documents where you have to request them rather than just search them out where you have to email somebody or fill out a form or anything like that? I've never had to do that. Like when it comes to what becomes public law, the public is actually allowed to see it. And if you're not allowed to see it, you're not gonna get it, sounds like. Well there's freedom of information requests but usually when I'm going deep on something, it's I'm going back to watch five hearings about how it became law. So I don't really need to do that. There is a path but so far I haven't needed any secret documents to do my job. It seems like from what you're describing, Jen, is that it is a mixture of an incredible time commitment, figuring out where everything is because it's not being handed to you on a platter and then figuring out, okay, what of this large data dump do people really care about and what will affect all of us? Or at least the people that are tuning in to find out about this. And how much time does that take you? I mean, I've been doing this now, I'm on my 10th year and I'm still trying to figure out how to do this. So the show has just evolved so much because it is so much data and the way that they are passing laws now is we're not getting a lot of laws, we're getting a few laws that are thousands of pages each. So digging through those, it feels so impossible. I mean, for a while I was trying to read bills and laws and now I've just kind of given up on the bills because I just know that a lot of stuff, like build back better is a perfect example of this. We heard about build back better for an entire year. It's not a thing. It's not a law, it's probably not going to become a law, at least not in any of the forms that the media was paying attention to for the last year. It was a giant waste of their time. So I'm now focusing on laws and I'm constantly changing how I do this and how I report this because I still haven't figured it out. Like, we really do need an entire media paying attention to this because it's an enormous, I mean, Congress, they legislate every topic. So to look into these laws, you have to become an expert in a week on every topic. It's very, very hard to do. The hearings are fascinating and I learned so much and so it's just, I have more content than I could possibly know what to do with and the trouble is narrowing it down. You nailed it on the head. Yeah. If people want to find government info for themselves, I would tell them go to the congressional dish show notes because you do a great job of documenting everything in your episodes. In addition to that, what other tips can you give people? Well, thank you. My website is good for the topics I cover, but like I said, there's so much that happens that I can't. And as much as I love congress.gov, you kind of have to know what you're looking for. I actually love govetrack.us because I actually met the guy, Josh, who put it together and he grabs all of his information from longer.gov. So it's the same exact information, but it's much more user-friendly. So if you're looking for bills on a certain topic or at a certain part of the process, I just find it really nice to navigate. So I would go there, but really, I mean, the congressional record, like I said, that daily digest, if you're looking for something that happened on a certain day, that and if looking for a certain topic, find the committee on that topic. So it's like, if you're into the environment, the committee's on natural resources, you can just scroll through the bills they're working on or their hearings in particular and just find a treasure trove of information on these committee websites. And they change based on which parties in control, but pretty much all of them are proud of their hearings. And so yeah, just like poke around their websites. You'll find all kinds of stuff you weren't expecting. Fantastic. Well, as I mentioned, we talked to Jen on Good Day Internet about the fact that she's traveling around, just living as a citizen of the world. If you'd like to travel, Sarah, do we have anyone that can help people with travel tips? I'm glad you asked, Tom. If you're like me, you might feel a little anxious about your next trip because you may not have traveled for a while. You made kind of wonder, is it gonna get canceled? Is it gonna be an issue? Chris Christensen has some advice, if so. This is Chris Christensen from Amateur Traveler with another tech in travel minute. The news this week has not been great from a world news point of view. With countries getting invaded and then also the possibility of yet another COVID surge happening, it might be better off if you insured your trip this year with trip insurance. There's a couple of different places you can go like insuremytrip.com or squaremouth.com to compare different policies from different companies. This year in particular in 2022, I would suggest you might think about a cancel for any reason policy because since you're deciding to travel when there is a pandemic that may come back and you knew that when you booked your trip, you may not get your money back if a country were to close unless you have that kind of coverage. Here's to more travel this year and to peace breaking out. I'm Chris Christensen from Amateur Traveler. Thank you, Chris. Yes, in our mail, yes, thank you, Chris. Always really good tips and that is not something I've ever invested in, travel insurance. Good to know that there are options besides what the airline wants to sell you. Yeah, the airline's always got something they want to sell you. Yeah, which is, that might be perfectly sufficient but good to know that there are options. All right, let's check out the mailbag. Let's do it. So we had a conversation about Epic games buying Bandcamp last week and we were kicking around like, okay, who's this good for? Jared had some thoughts. Jared says, there are a few things to consider about Epic in the past couple of years that leads me to a different conclusion than the ones drawn on the show. Number one, Epic is very interested in making metaverse plays. Number two, Epic recently also bought Harmonix, the music game company behind Guitar Hero, Rock Band and Dance Central. And number three, Epic has been holding concerts in Fortnite. We've talked about pretty much all of this but Jared takes it a step further saying I think Epic could be looking at developing a virtual music experience as a more robust part of their portfolio going forward. Sure, they also get Bandcamp's Marketplace expertise but with them already running the Epic store and having dealt with licensing, the Unreal Engine and other assets for it in the past, I'm not sure the Marketplace expertise by itself is enough to have made Bandcamp a lucrative acquisition target. Virtual concerts and other interactive music experiences, however, are a market in which they are poised to lead. Everyone wins here. Artists can get a chunk of revenue from each experience they put on. Epic gets to take a cut from each experience on their platform. Yeah, in fact, I don't even think it's an either or. I think the stuff we were focusing on is probably the more immediate reasons, the Marketplace aspect of it that we were talking about on the show. But these are also long-term benefits that Epic is gonna get. You're absolutely right, Jared. Thanks, Jared. If you have feedback and anything, any episode of a subject that we talk about, please do send it our way. Always makes the show better to hear from you. Feedback at DailyTechNewShow.com. We also have a couple new brand new bosses we got over the weekend. Michael and Patrick just started backing us on Patreon. Thank you, Michael, and thank you, Patrick. Yay, Michael and Patrick, they get all the glory today. Could be you tomorrow, patreon.com.com slash DTNS. Also, thanks to Jennifer Briney for being with us. Such great information. Thank you so much for sharing. I know we talked about congressionaldish.com, but are you on the socials? Where can people keep up with you? I am, thank you for asking. At Jen Briney on Twitter is my obsession. And so I'm on there all the time.  Oh, I'm sold. My dog will follow your dog.  That's kind of how it works. Well, thanks again for being with us. And jealous of all your travels. For anybody who wants to hear about Jen's travels, do listen to today's GDI. It's very eye-opening. On this show, we are live Monday through Friday at 4 30 p.m. Eastern, 2130 UTC. You can find out more at dailytechnewshow.com slash live. We are back tomorrow. It's an Apple announcement day and we'll have coverage with help from Nika Monford and Terence Keynes from the Snoboes podcast. Talk to you then. This show is part of the Frog Pants Network. Get more at frogpants.com. I hope you have enjoyed this program.


Alright, we'll bring you that track-up in our subsequent bulletins and moving forward to the Deputy National Vice-Chairman of the APC North East says the party will go into strategic alliance with any interested group including political parties that will guarantee the victory for the party. Speaking at inauguration of Adamawa State Chapter of Northern Young Professionals for Tinibu, he urged the party faithful to rally round all APC candidates. And it's all about strategic alliance because power is never a sub-anacad, nobody will give you power, it takes power. So we'll look at the alliances, which one is going to give us the right at the end of the tunnel and we are going to follow. And we have seen, as we have seen in Boratinibu and Kashi Jetima is the main alliance. And the consensus between the race of Nigeria is only a minority with dissenting voice. So we are going to follow the majority and deliver the mandate. We are conversing support for our candidate, Aswajib Boratinibu and Kashi Jetima. We are here today to give our letters out to all the local government coordinators. We're going to give all the 12 local government coordinators to go to each local government. And we expect at least in each local government we're going to gather 10,000 votes for the 12 local governments. We're hoping to get 210,000 votes through this organization NYPT.